EMV for MasterCard中的GETCHALLENGE问题(6D00)

时间:2017-05-22 08:43:14

标签: emv

对于EMV中的GETCHALLENGE请求(0084000000),我们得到VISA \ DEBIT卡的肯定响应,但对于MASTERCARD,我们得到的响应为6D00(指令代码不受支持或无效)。

以下是在万事达卡的情况下,在调用Get Challenge之前执行的命令序列。您可以看到CDOL具有ICC ​​Dynamic number的标记,当通过执行get Challenge命令获取动态数字的调用时,我得到不支持指令代码的错误消息。

回答重置

回复:3b6d00000031c071d66419160100849000选择付款系统目录

要求:00A404000E315041592E5359532E444446303100

回应:6f1a840e315041592e5359532e4444463031a5088801015f2d02656e9000

读取数据

要求:00B2010c00

回应:701a61184f07a0000000041010500a4d6173746572436172648701019000

选择申请

请求:00A4040007a000000004101000

回应:6f278407a0000000041010a51c500a4d6173746572436172648701015f2d02656ebf0c059f4d020b0a9000

获取处理选项

要求:80A8000002830000

回复:770a820238009404100105019000

内部认证

要求:0088000004E153F3E800

回复:77539f4b508464f182032bd432f415ec7ddaa3e601526a2b860fcc9785475f8f45f095186e3658bc0a55bceb2d4c22fbded8af82bd81338e38961c5d000dd5a8f99d3ec0c774648534a2b362b55d4b9ee13f2043739000

读取数据 要求:00B2011400

响应:7081835f25031402015f24031703315a08XXXXXXXXXXXXXXXX5f3401019f0702ff008e10000000000000000042015e0342031f039f0d05b8500408009f0e0500008800009f0f05b8700498008c219f02069f03069f1a0295055f2a029a039c019f37049f35019f45029f4c089f34038d0c910a8a0295059f37049f4c085f280208409f4a01829000

读取数据

要求:00B2021400

响应:70689f080200025711XXXXXXXXXXXXXXXXd1703201021010792f5f2018XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX5f300202019f1f1a30303030303030323130313030303030303739323030303030309f420208409f4401029f49039f37049f4701039000

读取数据

要求:00B2031400

响应:7081b79f4681b0c507d5fc6f008bf22f04484d0522f9a652df181559a938096558461a6a44a3acc8e1e64fb901a3bd5fa656ea1ec2eb2021d8ddab983aa5362ae0972bb717dc8f852da5a3ad03884c2ef06c4f2a7c56ff9891dd800707665569fb32bb05425c6d5a7461f2a60​​4eb681d659bf052cad311af2b29e8a571a8e93a015814090eb13589e40756b5706e4e5bb75a1734f871aa6e6894f959f020854dfa9bca011340b470e5c45309f91486e7aa882a9109df708f01059000

读取数据

要求:00B2041400

响应:7081b39081b057591da6a8901a96bb23f5ebbf6d86ae95b07395146a9a940833b1ba052e65676c9c4f7d0d86ec55f58a75647736b31895a7d1f439f777abc8866abd9054ebebed31f882fa05d6188da55f9a9ebf346e3a93e9cd0663fddaaa56f55d56ba37f5405804e873edd79fefd9957114e1c6826240b5ff049a0ea221310b1f25d6586863550673f979956de1df27f0bd91bfac6d4aa2b239d290b90a10b6b9f54ac006e3b917e3bb3e87e430ecb1927579fa979000

读取数据

要求:00B2051400

回复:702a9f3201039224be09660a5a008739dcaa90106e2d4e0b99d3996fb7284012c1255c17e2709a52cdb9d7cb9000

获取数据 - 应用程序事务计数器

要求:80CA9F3600

回应:6a88

获取数据 - 最后一次在线ATC注册

要求:80CA9F1300

回应:6a88

获取数据 - Pin Try Counter

要求:80CA9F1700

回复:9f1701039000

获取数据 - 日志格式

要求:80CA9F4F00

回复:9f4f119f27019f02065f2a029a039f36029f52069000

GetChallenge

要求:0084000000

回复:6d00

请咨询

1 个答案:

答案 0 :(得分:0)

对于CDOL的ICC动态编号,在GPO之后,需要向卡发出内部认证。这将为您提供签名动态应用程序数据(这是在ICC私钥下签名的证书)。

以下是您使用ICC公钥打开的证书内容。您可以看到ICC动态数据,其中08是长度, C7C298C8C60E2984 是您的动态数字。干杯,享受!!

至于如何完成,您需要阅读EMV 4.3 Book 2 安全和密钥管理第6节,离线动态数据认证。快乐学习。 一旦完成,请告诉我,并接受此答案

 DDA: Signed Dynamic Application Data Verification
 ****************************************
 ICC PK Modulus:
BC41FF9CEF143DBC67F3FBF9F17565F5C948B0106CFF664BCB54EE935AC5E2119B1879AB1DEF5F456FFB7C21FB30329FADE04E62E749719C7C2920B91E3C459712D296F2A0CB3566AA46C55DBBEA6BEB
 Signed Dynamic Application Data:
8464F182032BD432F415EC7DDAA3E601526A2B860FCC9785475F8F45F095186E3658BC0A55BCEB2D4C22FBDED8AF82BD81338E38961C5D000DD5A8F99D3EC0C774648534A2B362B55D4B9EE13F204373
 ----------------------------------------
 Recovered Data:                6A05010908C7C298C8C60E2984BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBF97A677485DC0A64971C54099583FBD0F39870D0BC
 Data Header:                   6A
 Signed Data Format:                05
 Hash Algorithm Indicator:          01
 Dynamic Data length:               09
 ICC Dynamic Data:              08C7C298C8C60E2984
 Pad Pattern:                   BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
 Hash Result:                   F97A677485DC0A64971C54099583FBD0F39870D0
 Data Trailer:                  BC
 ----------------------------------------
 Recovered Data validation:
 ----------------------------------------
 Step 1: Issuer PK Modulus and Signed Static Application Data having the same length: Passed
 Step 2: Recovered Data Trailer check:      Passed
 Step 3: Recovered Data Header check (0x6A):    Passed
 Step 4: Certificate Format check (0x03):   Passed
 Step 5: Hash Input Data:           05010908C7C298C8C60E2984BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBE153F3E8
 Step 6: Hashing Result:            F97A677485DC0A64971C54099583FBD0F39870D0
 Step 7: Hash Result Comparison:        Passed
 ----------------------------------------
 DDA Validation Succeed.