Mastercard · NFC
Mastercard business card
Step through a transaction one command at a time. Every field named, every status word explained.
Step 2 of 14: Response
6F 45 84 0E 32 50 41 59 2E 53 59 53 2E 44 44 46 30 31 A5 33 BF 0C 30 61 16 4F 07 A0 00 00 00 04 10 10 87 01 01 5F 55 02 55 53 42 03 55 55 55 61 16 4F 07 A0 00 00 00 04 22 03 87 01 02 5F 55 02 55 53 42 03 55 55 55 90 00Status word
Decoded objects
6FFile Control Information (FCI) Template69 bytes84Dedicated File Name14 bytes32 50 41 59 2E 53 59 53 2E 44 44 46 30 31“2PAY.SYS.DDF01”A5FCI Proprietary Template51 bytesBF0CFCI Issuer Discretionary Data48 bytes61Application Template22 bytes4FApplication Identifier (AID)7 bytesA0 00 00 00 04 10 1087Application Priority Indicator1 byte015F55Issuer Country Code (alpha2)2 bytes55 53“US”42Issuer Identification Number3 bytes55 55 55“UUU”
61Application Template22 bytes4FApplication Identifier (AID)7 bytesA0 00 00 00 04 22 0387Application Priority Indicator1 byte025F55Issuer Country Code (alpha2)2 bytes55 53“US”42Issuer Identification Number3 bytes55 55 55“UUU”
Exercises
Answer from the capture above. The explanation is worth reading either way.
- Level 2
The Application Interchange Profile (tag 82) is 1980. Which authentication method does this card support: SDA, DDA or CDA?
- Level 3
The Application File Locator is 08 01 01 00 10 01 01 01 20 01 03 00. How many separate files does it tell the terminal to read?
- Level 3
The Application File Locator (tag 94) tells the terminal what to read. Which short file identifier (SFI) does it name first?
- Level 3
This card's CVM list is 1E 03, 42 03, 1F 03. Which cardholder verification method does it prefer above all others?
- Level 4
Tag 9F6E on this card begins with two bytes. Two other tags in this same capture carry that exact two-byte value. Name both.
Where this capture is taught
Every module below practices on this exact capture.
- 04Communication process for EMV transactionsPractitioner150 minSecurity status not satisfiedWith the course
- 05EMV technologyPractitioner120 minSecurity status not satisfiedWith the course
- 08Near field communicationPractitioner120 minSecurity status not satisfiedWith the course
- 09Tokenization processPractitioner60 minSecurity status not satisfiedWith the course
- 13Cloning, replay and downgrade attacksOperator120 minSecurity status not satisfiedWith the course
- 14The unpredictable number and pre‑playOperator90 minSecurity status not satisfiedWith the course
- 15Contactless limits and the cumulative-limit bypassOperator75 minSecurity status not satisfiedWith the course
- 17Relay resistance and distance boundingOperator60 minSecurity status not satisfiedWith the course