Ch 12-(2020-03-24) challengeCancel field added to the Response Objects

Enrolled

AN(1)

Status of Authentication eligibility.

Possible Values:

• Y = Yes- Bank is participating in 3D Secure protocol and will return the ACSUrl

• N = No - Bank is not participating in 3D Secure protocol

• U = Unavailable - The DS or ACS is not available for authentication at the time of the request

• B = Bypass- Merchant authentication rule is triggered to bypass authentication in this use case

NOTE: If the Enrolled value is NOT Y, then the Consumer is NOT eligible for Authentication.

CAVV

AN(40)

Cardholder Authentication Verification Value (CAVV)
Authentication Verification Value (AVV)
Universal Cardholder Authentication Field (UCAF). Mastercard Only

This value should be appended to the authorization message signifying that the transaction has been successfully authenticated. This value will be encoded according to the merchants configuration in either Base64 encoding or Hex encoding. A Base64 encoding merchant configuration will produce values of 28 or 32 characters. A Hex encoding merchant configuration will produce values of 40 or 48 characters. The value when decoded will either be 20 bytes for CAVV or 20 or 24 bytes if the value is AAV (MasterCard UCAF).

N

ECIFlag

AN(40)

Electronic Commerce Indicator (ECI). The ECI value is part of the 2 data elements that indicate the transaction was processed electronically. This should be passed on the authorization transaction to the gateway/processor. 

MasterCardVisaAmexJCBDiners ClubEloCB (Visa)CB (Mastercard)020505050505050201060606060606010007070707070700

N

PAResStatus

AN(1)

Transaction status result identifier. 

Possible Values:

• Y – Successful Authentication

• N – Failed Authentication

• U – Unable to Complete Authentication

• A – Successful Attempts Transaction

N

SignatureVerification

AN(1)

Transaction Signature status identifier. 

Possible Values:

• Y - Indicates that the signature of the PARes has been validated successfully and the message contents can be trusted.

• N - Indicates that the PARes could not be validated. This result could be for a variety of reasons; tampering, certificate expiration, etc., and the result should not be trusted.

N

XID

AN(40)

Transaction identifier resulting from authentication processing.

NOTE: Gateway/Processor API specification may require this value to be appended to the authorization message. This value will be encoded according to the merchants configuration in either Base64 encoding or Hex encoding. A Base64 encoding merchant configuration will produce values of 28 characters. A Hex encoding merchant configuration will produce values of 40 characters.

N

UCAFIndicator

AN(1)

Universal Cardholder Authentication Field (UCAF) Indicator value provided by the issuer. The UCAF is Mastercard specific and does not apply to other Card Brands.

Possible Values:
0 - Non-SecureCode transaction, bypassed by the Merchant
1 - Merchant-Only SecureCode transaction
2 - Fully authenticated SecureCode transaction

NOTE: This field is only returned for MasterCard transactions

ACSTransactionId

AN(36)

Unique transaction identifier assigned by the ACS to identify a single transaction.

C

ThreeDSServerTransactionId

AN(36)

Unique transaction identifier assigned by the 3DS Server to identify a single transaction.

C

DSTransactionId

AN(36)

Unique transaction identifier assigned by the Directory Server (DS) to identify a single transaction.

NOTE: Required for Mastercard Identity Check transaction in Authorization

C

AuthorizationPayload

(Cartes Bancaires Only)

Base64 Encoded

The Base64 encoded JSON Payload of CB specific Authorization Values returned in the challenge Flow.

Example File:AuthorizationPayload-JSON File

C

CavvAlgorithm

(Cartes Bancaires Only)

CBN(1)

Identifies the algorithm used by the ACS to calculate the
Authentication Value and is derived from the  "CB-AVALGO"

O

ChallengeCancel

N(2)

An indicator as to why the transaction was canceled.

Possible Values:

01 - Cardholder selected 'Cancel'

02 - Reserved for future EMVCo use (values invalid until defined by EMVCo).

03 - Transaction Timed Out—Decoupled Authentication

04 - Transaction timed out at ACS—other timeouts

05 - Transaction Timed out at ACS - First CReq not received by ACS

06 - Transaction Error

07 - Unknown

08 = Transaction Timed Out at SDK

NOTE: Only present when the Consumer cancels the challenge. Decoupled authentication is not supported at this time.

C