PIN 块转换失败

Question

we have in our case an ATM switch that is connected to Payment network (eg, VISA) on one hand and Issuer on another hand. while firing a transaction(transaction flow :acquirer bank-->Payment network-->ATM switch-->Issuer),the transaction failed with error "PIN block translation failed" at switch side. What could be a reason for such error, noting that the check value of ZPK at both sides(Payment network and ATM switch) is found to be the same ?

Answer 1

There may be several reasons when ZPK is the same and there is encryption issue:

1. Different PINblock format

Although it is not that common, but still, you might want to verify that on both ends you have same format (some are padded with 'F', some are xored with PAN).

2. You may have incorrect PAN

Account number is necessary for many PINblock formats, translation may not succeed when account number is different, you may check if there are PAN mapping/translations/tokenizations in place.

3. Account number format

ie when you use ISO9564 format 0 PINblock you don't use the whole PAN for PIN Block generation, but only 12 rightmost digits without the Luhn check digit - with some cards you may have a surprise is the check digit included or not.

4. Some other issue, but it's hard to say without any test data.

Answer 2

Is it just with Visa you have this issue ? By this I mean to ask, for other payment schemes it is working ? If it is working then you can rule out the chance of terminal PIN key mismatch with switch.

Now you you can start looking at PIN block generation part. During FIT download, you mention for each bin range how it has to be. Compare it with expected values. Mostly used is format 0, but double confirm your case.

Lastly, during translation you specify source pin block format and destination PIN block format. Verify that is as expected.

Answer 3

If you have the clear ZPK(zonal pin key) decrypt the pinblock using TripleDES algorithm. If the decrypted pinblock does not start with character '0' or '1' then you are using wrong key for translation. If you give more details like HSM response code of failure, more specific reason can be found out.

If you don't want to try manually use https://www.eftlab.com/bp-tools/