TVR位与TAC Online匹配，但是交易不在线吗? [英] TVR bits match TAC Online, but transaction does NOT go online?
问题描述
我遇到的一种情况是EMV非接触式卡映像(美国运通)应该脱机；但是，Ingenico PinPad即将上线并获得批准，而VeriFone则下线了.
尽管如此，这种情况也应该离线进行-我坚信这种情况应该在线进行.我认为VeriFone是一个假阳性，而Ingenico通过联机来做正确的事情.
此方案的目的是确保CDA发生故障时，终端脱机拒绝事务.
卡图像的IAC拒绝"0000000000"和IAC Online "F470C49800".
在1AC期间生成的TVR是'0400008000'.
"TAC拒绝"设置为"0010000000"，在线TAC"设置为"DE00FC9800".
TVR = "0400008000"
IAC_Denial = "0000000000"
TAC_Denial = "0010000000"
IAC_Online = "F470C49800"
TAC_Online = "DE00FC9800"
根据EMV规格书3-终端动作分析，将TVR与TAC拒绝(应该首先发生)进行比较时-没有匹配的位.因此，下一件事是TVR应该与TAC Online相匹配.比较从TVR到TAC Online的比特时，匹配的比特为:"CDA失败，超出了下限". 这向我表明这应该在线；但是，如前所述，该方案可确保其脱机.
简而言之，VeriFone PinPad通过拒绝离线而不使用终端动作分析逻辑来给出假阳性.但是，Ingenico似乎通过联机来做正确的事情.
有什么我想念的吗?
是否存在可以覆盖终端操作分析以使TVR与TAC匹配以防止交易上线的配置?
这可能与VeriFone内核有关吗?
谢谢.
当我的POS终端配置不正确时，经常会出现此错误.
通常，像这样的场景会在您的终端中根据其标准配置阈值.例如，我的终端已按照SEPA-FAST标准进行了相应配置.
对于离线批准的最大金额有一个阈值.这对于希望离线处理少量客户以提高效率和速度的商人很有用.想想自助餐厅或公交线路.当然，这有点冒险，并且许多商家在没有在线批准的情况下都不会批准高额付款，以减少由于无效/欺诈性付款而造成的损失.
我认为您的离线阈值看起来不错.交易金额超过了该金额，由于我之前向您解释的明显原因，我们拒绝了该交易.
也许您的最大阈值配置错误.在大多数情况下，您都需要设置一个最大金额阈值，超过该阈值将拒绝离线交易.
另一件事可能是您的 EMV终端功能0x9F33 支持在线PIN身份验证，并且不应该.也许您没有使用方案规定的终端.什么是您的CVM?您的终端应该支持吗? NFC交易还有EMV终端交易限定符(TTQ)字段0x0F66，在定义终端可以做什么和不能做什么方面起着相似的作用.也许只有在这种情况下，您的终端才应该处于离线状态.这可能发生在披萨外卖或没有互联网连接的情况下.
I have a scenario where the EMV Contactless card image (American Express) SHOULD decline offline; however, the Ingenico PinPad is going online and approving and the VeriFone is declining offline.
Even though, this scenario SHOULD decline offline - I am convinced this scenario should go ONLINE. I think the VeriFone is a false-positive and the Ingenico is doing the right thing by going ONLINE.
The purpose of this scenario is to ensure that the terminal declines a transaction offline when CDA fails.
The card image has an IAC Denial of "0000000000" and IAC Online of "F470C49800".
The TVR that gets generated during 1AC is '0400008000'.
The TAC Denial is set to "0010000000" and the TAC Online is set to "DE00FC9800".
TVR = "0400008000"
IAC_Denial = "0000000000"
TAC_Denial = "0010000000"
IAC_Online = "F470C49800"
TAC_Online = "DE00FC9800"
When comparing the TVR to the TAC Denial (which should happen first) according to the EMV Book 3 - Terminal Action Analysis - there are NO matching bits. So the next thing that should happen is the TVR should be matched with the TAC Online. When comparing the bits from the TVR to the TAC Online - the bits that match are: "CDA Failed, Exceeds Floor Limit". This indicates to me that this should go ONLINE; however, as previously stated the scenario is ensuring that it declines OFFLINE.
In a nutshell, the VeriFone PinPad is giving a false-positive by declining OFFLINE without using the Terminal Action Analysis logic.
However, the Ingenico seems to be doing the right thing by going ONLINE.
Is there something that I am missing?
Is there any configurations that can override the Terminal Action Analysis from matching the TVR to TACs to prevent a transaction to go online?
Could this be an issue with the VeriFone kernel?
Thanks.
I often got this error when my POS terminal was not properly configured.
Often, scenarios like this one will have thresholds to configure in your terminal accordingly to its standards. For instance, my terminal was configured accordingly to SEPA-FAST standards.
There was a threshold for the maximum amount value to approve offline. This is useful for merchants that want to approve small amounts offline for effectiveness and speed when they have long lines of customers to process. Think of a cafeteria or a bus line. Of course, this is slightly risky and many merchants won't approve high amounts without an online approval to reduce their loss due to invalid/fraudulent payments.
In my opinion, your offline threshold looks fine. The transaction amount exceeds it and it is refused offline for the obvious reasons I explained to you before.
Perhaps your maximum threshold is badly configured. Most scenarios require you to set a maximum amount threshold over which the transaction is refused offline.
One other thing that could be wrong is your EMV Terminal capabilities 0x9F33 that supports Online PIN authentication and shouldn't. Maybe you aren't using the terminal prescribed by the scenario. What is your CVM? Should it be supported by your terminal? There is also the EMV Terminal Transaction Qualifiers (TTQ) field 0x0F66 for NFC transactions that plays a similar role in defining what a terminal can and cannot do. Maybe your terminal should be offline only in this scenario. This could happen for pizza deliveries or in situations where an internet connexion is not available.
这篇关于TVR位与TAC Online匹配，但是交易不在线吗?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
