ISO INTERNATIONAL STANDARD 9564-4 Firstedition 2016-03-01 Financial services Personal Identification Number (PIN) management and security Part 4: Requirements for PIN handling in eCommerce for Payment Transactions Sercices financiers Gestion et sécurité du numéro personnel d'identification (PIN) Partie 4: Exigences pour la manipulation PIN dans le commerce électronique pour les transactions de paiement Reference number ISO 9564-4:2016(E) ISO International Organization for Standardization @ IS0 2016 HEJIANG INST OF STANDARDIZATION C1 5956617 d without license from IHS IS0 9564-4:2016(E) COPYRIGHTPROTECTEDDOCUMENT IS0 2016, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISOcopyrightoffice Ch. de Blandonnet 8 . CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 [email protected] www.iso.org Intenatinair PrganizationforStandardization icensee-ZHEJIANG INSTOF STANDARDIZAoISQ06-All rights reserved Not for Resale, 2016/4/26 03:03:13 etworking permitted without license from IHS IS0 9564-4:2016(E) Contents Page Foreword ..iv Introduction. 1 Scope. ..1 2 Normative references 3 Terms and definitions 4 eCommerce model ..3 5 PIN handling requirements .4 5.1 General 4 5.2 Functionally secure PIN entry devices (FSPED) .4 5.3 Integrated circuit card PIN entry devices (ICCPED) .5 5.4 PIN entry devices with a keying relationship to an acquirer 5.5 PIN entry device with a keying relationship to an issuer. 6 5.6 PED class summary.. 6 Annex A (informative) Example flows for PIN verification in eCommerce 7 Bibliography .14 iii e=ZHEJIANG INST OF STANDARDIZATION C15956617 vided by IHS under I thout license from IHS