Overview#

Chip Card[1]#

The second byte, referred to as the Cardholder Verification Method Condition Code (CVM Condition Code), indicates the condition to be respected for applying the Cardholder Verification Method whose code is specified in the first byte:

• 00h: The CVM can be always applied.
• 01h: The CVM is applied for all the transactions where cash or cashback is involved (e.g., ATM cash withdrawal, cashback from an attended POS).
• 02h: The CVM is applied for all the transactions that do not involve cash or cashback (e.g., POS payment).
• 03h: The CVM is applied only in case the terminal is adequately equipped. For example, the plaintext PIN verification performed by ICC is a CVM that can be executed only on a terminal equipped with an offline PIN pad.
• 04h “05h: These values are RFU.
• 06h “09h: The CVM is applied when the Transaction Currency Code (tag 5F2A in the terminal) of the Amount, Authorized is the same as the Application Currency Code (tag 9F42 in the ICC) and the value of this amount is:
  • Under the X value (06h);
  • Over the X value (07h);
  • Under the Y value (08h);
  • Over the Y value (09h).

The issuer specifies the values of the threshold amounts X and Y in the first tow fields of 4 bytes of the CVM List.

• 0Ah · 7Fh: This range of values is RFU.
• 80h “FFh: This range of values is reserved for encoding condition codes required by individual payment systems.

Thus, one can see that the Cardholder Verification Method List stored in the card application indicates to the terminal:

• the types of Cardholder Verification Methods supported by the Chip Card,
• the Cardholder Verification Method Condition Code in which each CVM should be applied
• their preferred order.

More Information#

There might be more information for this subject on one of the following:

• Cardholder Verification Method

---

• [#1] - Implementing Electronic Card Payment Systems (Artech House Computer Security Series) by Cristian Radu - based on information obtained 2013-04-10