When ANSI X9.8 PIN - Enforce PIN block restrictions access
control point is enable, the following restrictions will be enforced.
- CSNBPTR and CSNBSPN will not accept IBM 3624 PIN format in the
output profile parameter when the input profile parameter is not IBM
3624.
- CSNBPTR will not accept ISO-0 or ISO-3 formats in the input PIN
profile unless ISO-0 or ISO-3 is in the output PIN profile.
- CSNBPTR and CSNBSPN will not accept ISO-1 or ISO-2 formats in
the output profile parameter when the input profile parameter contains
ISO-0, ISO-3, or VISA4
- When the input profile parameter of CSNBPTR or CSNBSPN contains
either ISO-0 or ISO-3 formats, the decrypted PIN block will be examined
to ensure that the PAN within the PIN block is the same as the PAN
which was supplied as the input PAN parameter, and that this is the
same as the PAN which was supplied as the output PAN parameter.
- The input PAN and output PAN parameters of CSNBPTR or CSNBSPN
must be equivalent.
- When the rule array for CSNBCPA contains VISA-PVV, the input PIN
profile must contain ISO-0 or ISO-3 formats.
|