Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Why duplicate data in EMV card

I am working in EMV card and my new task is to compare Magstripe data with chip data. Data that should be common in Mag and chip is:- PAN, Card Holder Name, Expiry date. Here I don't understand the following:-

A single data like PAN is present in multiple places:-
It present in Mag Track1
It present in Mag Track2
It present in 5A EMV Tag
It present in 57 [track 2 equivalent data] EMV Tag.

or expiry date
It present in Mag Track1 and Track2
It present in 57 [track 2 equivalent data] EMV Tag.
it present in 5f24 emv tag.

Why is the same data present in multiple locations? And which data should be common to Mag and chip and its location in EMV chip?

What is the significance of keeping Mag data in Chip, and under what TAG values, so that I could compare those values only?

like image 451
Arjun Avatar asked Oct 20 '14 17:10

Arjun


People also ask

Can EMV chip be duplicated?

Can EMV chip cards be cloned? The chip itself can't be cloned, but cloned data can be put onto the magnetic strip of a card with a fake EMV chip, which can be used to trick merchants into letting the fraudster swipe the card with the cloned information.

Can a chip be duplicated?

Chip credit cards can be “hacked,” in the sense that a thief who inserts a “skimming” device into a credit card terminal can copy data from your credit card and later make a copy of the card. However, skimmers can only copy data from your card's magnetic stripe, not its chip, which is much more encrypted.

What is EMV cloning?

This method, EMV-Bypass Cloning, leverages information from one technology (EMV chips) and converts it into another less-secure technology (magstripe), which allows fraudsters to rely on their familiar cloning techniques.


1 Answers

It is known as 'fallback'. If for whatever reason you cannot read the chip data (card damaged, or issue with your device) you fallback to track 2 data.

The service code on track 2 will indicate whether or not this is a chip enabled card, and subsequently adjust the authorization request sent to the acquirer/issuer. It is then the issuers decision on whether to accept or decline the transaction (bearing in mind fallback to track 2 data is much less secure)

In summary, always trust the values on chip if you can access those. Fallback to track 2 data only if necessary.

like image 124
PaulG Avatar answered Oct 04 '22 08:10

PaulG