eLibrary >
ISO 9564-1:2017 Financial services - Personal Identification Number (PIN) management and security - Part 1: Basic principles and requirements for PINs in card-based systems >
Expand All
TOC Search:
ISO 9564-1:2017 Financial services - Personal Identification Number (PIN) management and security - Part 1: Basic principles and requirements for PINs in card-based systems, 2017
- Foreword
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and definitions
- 4 Basic principles of PIN management
- 4.1 General
- 4.2 Principles
- 5 PIN handling devices
- 5.1 PIN handling device security requirements
- 5.2 Physical security for IC readers
- 5.3 PIN entry device characteristics
- 5.3.1 Character set
- 5.3.2 Character representation
- 6 PIN security issues
- 6.1 PIN control requirements
- 6.1.1 PIN processing systems
- 6.1.2 Recording media
- 6.1.3 Oral communications
- 6.1.4 Telephone keypads
- 6.2 PIN encipherment
- 7 PIN verification
- 7.1 General
- 7.2 Online PIN verification
- 7.3 Offline PIN verification
- 8 Techniques for management/protection of account-related PIN functions
- 8.1 PIN length
- 8.2 PIN establishment
- 8.2.1 PIN establishment techniques
- 8.2.2 Assigned derived PIN
- 8.2.3 Assigned random PIN
- 8.2.4 Customer-selected PIN
- 8.3 PIN issuance and delivery to the cardholder
- 8.4 PIN selection
- 8.4.1 General
- 8.4.2 PIN conveyance
- 8.4.3 PIN selection at an issuer’s location
- 8.4.4 PIN selection by mail
- 8.5 PIN change
- 8.5.1 General
- 8.5.2 PIN change in an interchange environment
- 8.5.3 PIN change at an attended terminal
- 8.5.4 PIN change at an unattended terminal
- 8.5.5 PIN change by mail
- 8.6 PIN replacement
- 8.6.1 Replacement of forgotten PIN
- 8.6.2 Re-advice of forgotten PIN
- 8.6.3 Replacement of compromised PIN
- 8.7 Disposal of waste material and returned PIN mailers
- 8.8 PIN activation
- 8.9 PIN storage
- 8.10 PIN deactivation
- 8.11 PIN mailers
- 9 Techniques for management/protection of transaction-related PIN functions
- 9.1 PIN entry
- 9.2 Protection of PIN during transmission
- 9.2.1 PIN protection during transmission to the issuer for online PIN verification
- 9.2.2 PIN protection during conveyance to the ICC for offline PIN verification
- 9.3 Compact PIN block formats
- 9.3.1 PIN block construction and format value assignment
- 9.3.2 Format 0 PIN block
- 9.3.3 Format 1 PIN block
- 9.3.4 Format 2 PIN block
- 9.3.5 Format 3 PIN block
- 9.3.6 Compact PIN block usage restrictions
- 9.4 Extended PIN blocks
- 9.4.1 General
- 9.4.2 Format 4 PIN block
- 9.5 PIN block format translation restrictions
- 9.6 Journalizing of transactions containing PIN data
- Annex A (normative) Destruction of sensitive data
- Annex B (informative) Additional guidelines for the design of a PIN entry device
- Annex C (informative) Information for customers
- Bibliography [Go to Page]