IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [emv]

EMV (Europay, MasterCard and Visa) is a standard for credit cards, commonly referred to as "chip-and-PIN".

49 questions
15
votes
3 answers

Why EMV cards cannot be cloned?

It's frequently stated that EMV cards cannot be cloned. I'd like to know, specially with commodity smart card readers/ writers, why is this true? What specific data cannot be read using commodity hardware, and what type of hardware would be required…
Jaywalker
  • 261
  • 1
  • 2
  • 6
3
votes
1 answer

Are there any transaction time constraints in EMV contact and contactless cards?

I am looking into EMV Contact and Contactless protocols, but I felt there were a few ambiguities which I would appreciate help with: Is the chip used in EMV Contactless capable of performing the same computations as the contact? I know that the…
OrangeJusticeV
  • 121
  • 7
2
votes
3 answers

What are the problems that Chip card technology solve? and what are the problems EMV solve? Are the separate things?

What are the problems that Chip card technology solve? and what are the problems EMV solve? I understand that EMV is a standard where as chip card is a technology, It's pretty hard to tell them apart (can we refer to EMV & Chip Card as the same…
Brandon Seet
  • 61
  • 3
2
votes
2 answers

Are EMV terminals required to support offline PIN as well as online PIN in US market?

It is my understanding that in the US 100% of EMV transactions (contact and contactless) are expected to be performed online. If so, why would a payment gateway be requiring a US terminal to support offline PIN (if online is offered) for CVM?
mfarver
  • 123
  • 5
2
votes
1 answer

Would an offline-authorized EMV transaction use offline PIN validation?

If an EMV payment terminal offers offline authorization (e.g. because connectivity is poor), will chip and PIN transactions be processed using offline PIN validation? It doesn't make sense to me for online PIN validation to be used, since it means…
Duncan Jones
  • 1,647
  • 1
  • 10
  • 14
1
vote
1 answer

EMV cards, is the PIN always stored also at the issuer secure server side?

Issuers of EMV card (or their specialised service providers) always securely store on their server (Hardware Security Modules) a copy of the secret keys which are hidden inside each individual EMV smart chip. However, do they always store also the…
Luca
  • 113
  • 4
0
votes
0 answers

If EMV can't be copied/cloned, how will companies like plastc do it?

It is widely spread that EMV chips can't be copied or cloned onto another card like the information on a magnet strip. How will companies like plastc (a rewritable card) do it? Any Ideas?
user73019
  • 9
  • 1
0
votes
2 answers

Is it possible to use a magnetic striped card with no emv chip to clone a credit or debit card with EMV chip inserted

If a credit card or debit card has a emv chip can it be successfully cloned onto a credit or debit card that does not possess a emv chip If so how does that work and will the ATM accept it
Draco60
  • 1
  • 1