6. Annexure
Annexure 1: Multi-App Command Permissions
| Multi-App Command Permissions | |||
|---|---|---|---|
| Byte/Bit | Definition | Condition | Recommended Value |
| 1/8-3 | RFU | Not Used | 000000 |
| 1/2 | 0-Updates Initiated by Another Authorized Application Not Allowed | O | Issuer Defined |
| Updates Initiated by Another Authorized Application Allowed | |||
| 1/1 | 0- Multi-App Commands Not Allowed | O | Issuer Defined |
| Multi-App Commands Allowed | |||
Table 46: Multi-App Command Permissions
Annexure 2: Integrated Circuit Cards Specification References
The following International Standards apply to all NEPALPAY Cards:
| S.N. | ISO Standard Number | Title |
|---|---|---|
| 1 | 7810 | Identification Cards – Physical Characteristics |
| 2 | 7811 | |
| 3 | 7812 | Identification Cards – Numbering System and Registration Procedures for Participant Identifiers |
| 4 | 7813 | Identification Cards – Financial Transaction Cards |
| 5 | 7816 | |
| 6 | 14443–1 |
Table 47: Integrated Circuit Cards Specification References
Annexure 3: Cardholder Verification (CV) Rule Format
CV Rule Byte 1 (Leftmost): Cardholder Verification Method (CVM) Codes
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
|---|---|---|---|---|---|---|---|---|
| 0 | RFU | |||||||
| 0 | Fail cardholder verification if this CVM is unsuccessful | |||||||
| 1 | Apply succeeding CV Rule if this CVM is unsuccessful | |||||||
| 0 | 0 | 0 | 0 | 0 | 0 | Fail CVM processing | ||
| 0 | 0 | 0 | 0 | 0 | 1 | Plaintext PIN verification performed by ICC | ||
| 0 | 0 | 0 | 0 | 1 | 0 | Enciphered PIN verified online | ||
| 0 | 0 | 0 | 0 | 1 | 1 | Plaintext PIN verification performed by ICC and signature (paper) | ||
| 0 | 0 | 0 | 1 | 0 | 0 | Enciphered PIN verification performed by ICC | ||
| 0 | 0 | 0 | 1 | 0 | 1 | Enciphered PIN verification performed by ICC and signature (paper) | ||
| 0 | x | x | x | x | x | Values in the range 000110-011101 reserved for future use by this specification | ||
| 0 | 1 | 1 | 1 | 1 | 0 | Signature (paper) | ||
| 0 | 1 | 1 | 1 | 1 | 1 | No CVM required | ||
| 1 | 0 | x | x | x | x | Values in the range 100000-101111 reserved for use by the individual payment systems | ||
| 1 | 1 | x | x | x | x | Values in the range 110000-111110 reserved for use by the issuer | ||
| 1 | 1 | 1 | 1 | 1 | 1 | This value is not available for use |
CV Rule Byte 2 (Rightmost): Cardholder Verification Method (CVM) Codes
| Value | Meaning |
|---|---|
| 00H | Always |
| 01H | If unattended cash |
| 02H | If not unattended cash and not manual cash and not purchase with cashback |
| 03H | If terminal supports the CVM |
| 04H | If manual cash |
| 05H | If purchase with cashback |
| 06H | If transaction is in the application currency 21 and is under X value |
| 07H | If transaction is in the application currency and is over X value |
| 08H | If transaction is in the application currency and is under Y value |
| 09H | If transaction is in the application currency and is over Y value |
| 0AH - 7FH | RFU |
| 80H - FFH | Reserved for use by individual payment systems |
Table 48: Cardholder Verification (CV) Rule Format
Annexure 4: Terminal Verification Result (TVR)
| Terminal Verification Result (TVR) - Byte 1 (Leftmost) | ||||||||
|---|---|---|---|---|---|---|---|---|
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 1 | x | x | x | x | x | x | x | Offline data authentication was not performed |
| x | 1 | x | x | x | x | x | x | SDA failed |
| x | x | 1 | x | x | x | x | x | ICC data missing |
| x | x | x | 1 | x | x | x | x | Card appears on terminal exception file |
| x | x | x | x | 1 | x | x | x | DDA failed |
| x | x | x | x | x | 1 | x | x | CDA failed |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
| Terminal Verification Result (TVR) - Byte 2 | ||||||||
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 1 | x | x | x | x | x | x | x | ICC and terminal have different application versions |
| x | 1 | x | x | x | x | x | x | Expired application |
| x | x | 1 | x | x | x | x | x | Application not yet effective |
| x | x | x | 1 | x | x | x | x | Requested service not allowed for card product |
| x | x | x | x | 1 | x | x | x | New card |
| x | x | x | x | x | 0 | x | x | RFU |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
| Terminal Verification Result (TVR) - Byte 3 | ||||||||
|---|---|---|---|---|---|---|---|---|
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 1 | x | x | x | x | x | x | x | Cardholder verification was not successful |
| x | 1 | x | x | x | x | x | x | Unrecognized CVM |
| x | x | 1 | x | x | x | x | x | PIN Try Limit exceeded |
| x | x | x | 1 | x | x | x | x | PIN entry required and PIN pad not present or not working |
| x | x | x | x | 1 | x | x | x | PIN entry required, PIN pad present, but PIN was not entered |
| x | x | x | x | x | 1 | x | x | Online PIN entered |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
| Terminal Verification Result (TVR) - Byte 4 | ||||||||
|---|---|---|---|---|---|---|---|---|
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 1 | x | x | x | x | x | x | x | Transaction exceeds floor limit |
| x | 1 | x | x | x | x | x | x | Lower consecutive offline limit exceeded |
| x | x | 1 | x | x | x | x | x | Upper consecutive offline limit exceeded |
| x | x | x | 1 | x | x | x | x | Transaction selected randomly for online processing |
| x | x | x | x | 1 | x | x | x | Merchant forced transaction online |
| x | x | x | x | x | 0 | x | x | RFU |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
| Terminal Verification Result (TVR) - Byte 5 (Rightmost) | ||||||||
|---|---|---|---|---|---|---|---|---|
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 1 | x | x | x | x | x | x | x | Default TDOL used |
| x | 1 | x | x | x | x | x | x | Issuer authentication failed |
| x | x | 1 | x | x | x | x | x | Script processing failed before final GENERATE AC |
| x | x | x | 1 | x | x | x | x | Script processing failed after final GENERATE AC |
| x | x | x | x | 0 | x | x | x | RFU |
| x | x | x | x | x | 0 | x | x | RFU |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
Table 49: Terminal Verification Result (TVR)
Annexure 5: Transaction Status Information (TSI)
Transaction Status Information (TSI) - Byte 1 (Leftmost)
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
|---|---|---|---|---|---|---|---|---|
| x | x | x | x | x | x | x | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | 0 | x | x | RFU |
| x | x | x | x | 0 | x | x | x | RFU |
| x | x | x | 0 | x | x | x | x | Script processing was performed |
| x | x | 0 | x | x | x | x | x | Terminal risk management was performed |
| x | 0 | x | x | x | x | x | x | Issuer authentication was performed |
| 0 | x | x | x | x | x | x | x | Card risk management was performed |
| x | 1 | x | x | x | x | x | x | Cardholder verification was performed |
| 1 | x | x | x | x | x | x | x | Offline data authentication was performed |
| Transaction Status Information (TSI) - Byte 2 (Rightmost) | ||||||||
| b8 | b7 | b6 | b5 | b4 | b3 | b2 | b1 | Meaning |
| 0 | x | x | x | x | x | x | x | RFU |
| x | 0 | x | x | x | x | x | x | RFU |
| x | x | 0 | x | x | x | x | x | RFU |
| x | x | x | 0 | x | x | x | x | RFU |
| x | x | x | x | 0 | x | x | x | RFU |
| x | x | x | x | x | 0 | x | x | RFU |
| x | x | x | x | x | x | 0 | x | RFU |
| x | x | x | x | x | x | x | 0 | RFU |
Table 50: Transaction Status Information
Annexure 6: Approved D-PAS Connect Card Products
Note: This list only contains D-PAS Connect Card products that have been type approved by Discover Global Network. The list of of Approved D-PAS Connect Card Products shall be shared separately and duly be updated into the NCHL site.