[Gllug] Chip and PIN

[Chris Ebenezer]

On 5/10/06, t.clarke <tim at seacon.co.uk> wrote:
> I have read for example that the PIN is also held on the mag stripe.
> This is surely completely bonkers, since the PIN would then be easily
> established and a counterfeit card made.

It is stored (encrypted) on the mag stripe - [What is actually stored
is the original PIN that was issued against that card plus an
changeable 'offset' that maps the original PIN to the present pin].

Basically CnP does local authentication and remote authorisation.

--
chris
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug