ATMCommand2 Result of a maintenance command performed by the ATM. Type Type of command to be performed by the ATM. RequiredDateTime Date time on which the command has been requested to be performed. ProcessedDateTime Date time on which the command has been performed. CommandIdentification Identification of the entity issuing the command. Result Final result of the processed command at the ATM. AdditionalErrorInformation Additional information on the failure to be logged for further examination. ATMCommand2Code Type of command performed by the ATM. ATMBalance Provide the ATM counters, resetting those that are applicable. ATMStatusUpdate Status of the ATM required by the ATM manager. ConfigurationUpdate Update the ATM configuration parameters. CountersInquiry Current value of counters, no reinitialisation of the counters. Disconnect Perform a disconnection followed by a reconnection. KeyActivation Activate cryptographic keys. KeyDeactivation Deactivate cryptographic keys. KeyDownload Start a cryptographic key download. KeyRemove Remove cryptographic keys. SecurityDeviceConfigurationUpdate Update the configuration of the hardware security module on the ATM. SecurityDeviceSchemeUpdate Update the security scheme of the hardware security module on the ATM. SecurityDeviceStatusUpdate Update the status of the hardware security module on the ATM. SendMessage Send a specific message to initiate a process. ATMCommand3 Maintenance command which has requested the device report. Type Type of command to be performed by the ATM. CommandIdentification Identification of the entity issuing the command. ATMCommandIdentification1 Identification of the entity issuing the command. Origin Identification of the entity issuing the command. Reference Unique identification of the command for the issuer of the command. Processor Identification or address of the host performing the command. ATMConfigurationParameter1 Configuration parameter version of the ATM. Type Type of the ATM configuration. Version Active version of the configuration. ATMDevice2Code List of ATM devices. AlarmSensors Alarm sensors, such as tamper, seismic or heat sensors. BarCodeReader Device scanning barcodes using any scanning technology. Camera Camera, recorder, video mixer. CardDispenser Device dispensing card to a consumer. CardUnit Device to read and optionally write card with various entry modes. CashDispenser Device dispensing cash in an automated environment, or with an operator present. CashInModule Device accepting in-out of items as coupons, documents, bills and coins. CashRecycler Compound device with cash in module, cash dispenser, and cash exchange. CheckReader Check reader and check image scanner. CustomerConsole Customer display and keyboard. Deposit Device for the deposit of media in envelopes or deposit of bags containing bulk media. DocumentPrinter Printer for full-size forms documents and supporting the printing of text and graphic. DoorSensors Door sensors, such as cabinet, safe or vandal shield doors. InputProcessingModule Self service device processing items. Journal Event log. JournalPrinter Continuous form device used to record a hardcopy audit trail of transactions, and for certain report printing requirements. OtherSensor Other sensors and indicators unit. PassbookPrinter Passbook device supporting automatic positioning of the book. PINKeypad Hardware security module allowing the PIN (Personal Identification Number) entry, secure storing of cryptographic keys, and other cryptographic functions. ReceiptPrinter Receipt printer used to print cut sheet documents. ScannerPrinter Device incorporating both the capabilities to scan inserted documents and optionally to print on them. WithdrawalReceipt Receipt of the withdrawal transactions. ATMDeviceReport1 Information related to the report from an ATM device. Environment Environment of the transaction. ATMGlobalStatus Global status of the ATM. CommandResult Result of a maintenance command performed by the ATM. CommandContext Maintenance command which has requested the device report. ATMSecurityContext Information related to security commands. ATMDeviceReportV01 The ATMDeviceReport message is sent to an acquirer by an ATM, or forwarded by an agent, to report: - The result of maintenance commands performed by the ATM, - The components of the ATM, - The status of the ATM components Header Information related to the protocol management on a segment of the path from the ATM to the acquirer. ProtectedATMDeviceReport Encrypted body of the message. ATMDeviceReport Information related to the status report from an ATM device. SecurityTrailer Trailer of the message containing a MAC or a digital signature. ATMEnvironment6 Environment of the transaction. Acquirer Acquirer of the ATM transaction, in charge of the funds settlement with the issuer. ATMManagerIdentification Identification of the ATM manager. HostingEntity Entity hosting the ATM terminal. ATM ATM information. ATMEquipment1 ATM terminal equipment. Manufacturer ATM Manufacturer. Model Model of ATM. SerialNumber Serial number of the ATM. ApplicationProvider Provider of the ATM application software. ApplicationName Name of the software product. ApplicationVersion Current version of the software that might include the release number. ApprovalNumber Unique assessment number for the component. ConfigurationParameter Configuration parameter version. ATMEquipment2 Hardware security module information, so called EPP for Encrypted PIN Pad. Manufacturer ATM Manufacturer. Model Model of ATM. Version Version of the device model. SerialNumber Serial number of the ATM. FirmwareProvider Provider of the firmware. FirmwareIdentification Identification of the firmware. FirmwareVersion Version of the firmware. ATMMessageFunction1 Identifies the type of process related to an ATM message. Function Type of requested function. ATMServiceCode Codification of the type of service for the ATM. HostServiceCode Codification of the type of service for the ATM manager host. ATMSecurityConfiguration1 Configuration parameters in use by the security device. Keys Configuration of the cryptographic keys. Encryption Configuration of the encryption or digital envelope, if the security module is able to perform encryption. MACAlgorithm MAC (Message Authentication Code) algorithm the security module is able to manage. DigestAlgorithm Digest algorithm the security module is able to manage. DigitalSignature Configuration of the digital signatures if the security module is able to perform digital signatures with an asymmetric key. PIN Configuration of the PIN online verification. MessageProtection Mechanism used to protect the message of the ATM protocol. ATMSecurityConfiguration2 Configuration of the cryptographic keys. MaximumSymmetricKey Maximum number of symmetric keys the security module is able to manage. MaximumAsymmetricKey Maximum number of asymmetric keys the security module is able to manage. MaximumRSAKeyLength Maximum RSA key length (in number of bytes), the security module is able to manage. MaximumRootKeyLength Maximum RSA root key length (in number of bytes), the security module is able to manage, if different from the maximum RSA key length. ATMSecurityConfiguration3 Configuration of the encryption or digital envelope, if the security module is able to perform encryption. AsymmetricEncryption True if the security module is able to perform encryption with an asymmetric key. AsymmetricKeyStandardIdentification True if the security module is able to identify an asymmetric key with certificate issuer X.500 name and certificate serial number. False if a proprietary asymmetric key identifier is required. AsymmetricEncryptionAlgorithm Asymmetric encryption algorithm the security module is able to manage. SymmetricTransportKey True if the security module is able to manage a symmetric transport session key to protect cryptographic keys and data. False if only a previously exchanged symmetric key must be used; a proprietary symmetric key identifier is then used. SymmetricTransportKeyAlgorithm Symmetric transport session key algorithm the security module is able to manage. SymmetricEncryptionAlgorithm Symmetric encryption algorithm the security module is able to manage. EncryptionFormat Format of data before encryption, if the format is not plaintext or implicit. ATMSecurityConfiguration4 Configuration of the digital signatures if the security module is able to perform digital signatures with an asymmetric key. MaximumCertificates Maximum number of certificates in a certificate path, the security module is able to manage. MaximumSignatures Maximum number of cosigners, the security module is able to manage in a digital signature. DigitalSignatureAlgorithm Digital signature algorithm the security module is able to manage. ATMSecurityConfiguration5 Configuration of the PIN online verification. PINFormat PIN block format the security module is able to manage for online verification of the PIN. PINLengthCapabilities Maximum number of digits the security module is able to accept when the cardholder enters its PIN. ATMSecurityContext1 Information related to security commands. CurrentSecurityScheme Key exchange security scheme in activation on the ATM for the host manager. SecuritySchemeCapabilities Key exchange security schemes implemented in the hardware security module of the ATM. SecurityDevice Hardware security module of the ATM. Key Cryptographic keys stored in the hardware security module of the ATM. HostChallenge Random value from the host provided during a previous exchange. ATMSecurityDevice1 Hardware security module of the ATM. DeviceProperty Hardware security module information, so called EPP for Encrypted PIN Pad. CurrentConfiguration Configuration parameters in use by the security device. SupportedConfiguration Configuration parameters supported by the security device. CurrentStatus Current status of the security device. Incident Incident occurring on the device. ATMSecurityScheme1Code Key exchange security scheme in activation on the ATM for the host manager. ApplicationRemoteKeyLoading Application key download protected by a share symmetric key. CertificateRemoteKeyLoading Key download protected by asymmetric keys authenticated by a certificate. FrenchRemoteKeyLoading Key download conform to the French ATM key download security scheme. GermanRemoteKeyLoading Key download conform to the German ATM key download security scheme. LuxemburgRemoteKeyLoading Key download conform to the Luxemburg ATM key download security scheme. ManualKeyEntry Manual key entry on the ATM. PKIKeyDownload Key download protected by asymmetric keys authenticated by a PKI (Public Key Infrastructure). SignatureRemoteKeyLoading Key download protected by asymmetric keys authenticated by a digital signature. Unitialised No key exchange performed, no security scheme defined. ATMSecurityScheme2Code Key exchange security schemes implemented in the hardware security module of the ATM. ApplicationRemoteKeyLoading Application key download protected by a share symmetric key. CertificateRemoteKeyLoading Key download protected by asymmetric keys authenticated by a certificate. FrenchRemoteKeyLoading Key download conform to the French ATM key download security scheme. GermanRemoteKeyLoading Key download conform to the German ATM key download security scheme. LuxemburgRemoteKeyLoading Key download conform to the Luxemburg ATM key download security scheme. ManualKeyEntry Manual key entry on the ATM. PKIKeyDownload Key download protected by asymmetric keys authenticated by a PKI (Public Key Infrastructure). SignatureRemoteKeyLoading Key download protected by asymmetric keys authenticated by a digital signature. ATMStatus1 Global status of the ATM. CurrentStatus Actual status of the ATM. DemandedStatus Present if the status required by the ATM manager is different from the current status. ATMStatus1Code Status of the ATM InService Component is in service. OutOfService ATM out of service. ATMStatus2Code Current status of the security device. InOperation Component is activated and in operation. OutOfService ATM out of service. ATMStatus3Code Current status of the key. InOperation Component is activated and in operation. Stopped Component has been stopped. WaitingActivation Component has been loaded, but not yet activated. Acquirer7 Acquirer of the withdrawal transaction, in charge of the funds settlement with the issuer. AcquiringInstitution Identification of the acquirer. Branch Identification of the acquirer branch. ActiveCurrencyCode A code allocated to a currency by a Maintenance Agency under an international identification scheme as described in the latest edition of the international standard ISO 4217 "Codes for the representation of currencies and funds". Algorithm11Code Identification of a digest algorithm. SHA256 Message digest algorithm SHA-256 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha256). SHA384 Message digest algorithm SHA-384 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha384). SHA512 Message digest algorithm SHA-512 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha512). SHA1 Message digest algorithm SHA-1 as defined in FIPS 180-1 - (ASN.1 Object Identifier: id-sha1). Algorithm12Code Cryptographic algorithms for the MAC (Message Authentication Code). RetailCBCMAC Retail CBC (Chaining Block Cypher) MAC (Message Authentication Code) (cf. ISO 9807, ANSI X9.19) - (ASN.1 Object Identifier: id-retail-cbc-mac). RetailSHA256MAC Retail-CBC-MAC with SHA-256 (Secure HAsh standard) - (ASN.1 Object Identifier: id-retail-cbc-mac-sha-256). SHA256CMACwithAES128 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 128 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-256 digest of the message. RetailSHA1MAC Retail-CBC-MAC with SHA-1 (Secure Hash standard) - (ASN.1 Object Identifier: id-retail-cbc-mac-sha-1). SHA384CMACwithAES192 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 192 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-384 digest of the message. SHA512CMACwithAES256 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 256 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-512 digest of the message. Algorithm13Code Cryptographic algorithms for the protection of transported keys. AES128CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 128 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). DES112CBC Triple DES (Data Encryption Standard) CBC (Chaining Block Cypher) encryption with double length key (112 Bit) as defined in FIPS PUB 46-3 - (ASN.1 Object Identifier: des-ede3-cbc). DUKPT2009 DUKPT (Derived Unique Key Per Transaction) algorithm, as specified in ANSI X9.24-2009 Annex A. UKPT UKPT (Unique Key Per Transaction) or Master Session Key key encryption - (ASN.1 Object Identifier: id-ukpt-wrap). UKPTwithAES128 UKPT (Unique Key Per Transaction) or Master Session Key key encryption, using Advanced Encryption Standard with a 128 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). AES192CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 192 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). AES256CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 256 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). Algorithm14Code Cryptographic algorithms for digital signatures. SHA256WithRSA Signature algorithms with RSA, using SHA-256 digest algorithm - (ASN.1 Object Identifier: sha256WithRSAEncryption). SHA1WithRSA Signature algorithms with RSA (PKCS #1 version 2.1), using SHA-1 digest algorithm - (ASN.1 Object Identifier: sha1WithRSAEncryption). RSASSA-PSS Signature algorithm with Appendix, Probabilistic Signature Scheme (PKCS #1 version 2.1), - (ASN.1 Object Identifier: id-RSASSA-PSS). Algorithm15Code Cryptographic algorithms for encryptions with a symmetric cryptographic key. AES128CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 128 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). DES112CBC Triple DES (Data Encryption Standard) CBC (Chaining Block Cypher) encryption with double length key (112 Bit) as defined in FIPS PUB 46-3 - (ASN.1 Object Identifier: des-ede3-cbc). AES192CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 192 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). AES256CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 256 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). Algorithm7Code Asymmetric encryption algorithm of a transport key. RSAEncryption RSA encryption algorithm - (ASN.1 Object Identifier: rsaEncryption). RSAES-OAEP RSA encryption scheme based on Optimal Asymmetric Encryption scheme (PKCS #1 version 2.1) - (ASN.1 Object Identifier: id-RSAES-OAEP). Algorithm8Code Mask generator functions of the RSAES-OAEP encryption algorithm (RSA Encryption Scheme: Optimal Asymmetric Encryption Padding). MGF1 Generator Function, used for RSA encryption and RSA igital signature (PKCS #1 version 2.1) - (ASN.1 Object Identifier: id-mgf1). AlgorithmIdentification11 Cryptographic algorithms and parameters for the protection of transported keys by an asymmetric key. Algorithm Asymmetric encryption algorithm of a transport key. Parameter Parameters of the encryption algorithm. AlgorithmIdentification12 Mask generator function cryptographic algorithm and parameters. Algorithm Mask generator function cryptographic algorithm. Parameter Parameters associated to the mask generator function cryptographic algorithm AlgorithmIdentification13 Cryptographic algorithm and parameters for the protection of the transported key. Algorithm Identification of the algorithm. Parameter Parameters associated to the encryption algorithm. AlgorithmIdentification14 Cryptographic algorithm and parameters for encryptions with a symmetric cryptographic key. Algorithm Identification of the encryption algorithm. Parameter Parameters associated with the CBC (Chain Block Chaining) encryption algorithm. AlgorithmIdentification15 Identification of a cryptographic algorithm and parameters for the MAC computation. Algorithm Identification of the MAC algorithm. Parameter Parameters associated to the MAC algorithm. AlgorithmIdentification16 Cryptographic algorithm and parameters of digests. Algorithm Identification of the digest algorithm. AlgorithmIdentification17 Identification of a cryptographic algorithm and parameters for digital signatures. Algorithm Identification of the algorithm. Parameter Parameters of the RSASSA-PSS digital signature algorithm (RSA signature algorithm with appendix: Probabilistic Signature Scheme). AttributeType1Code Type of attribute of a distinguished name (DN). CommonName Common name of the attribute (ASN.1 Object Identifier: id-at-commonName). Locality Locality of the attribute (ASN.1 Object Identifier: id-at-localityName). OrganisationName Organization name of the attribute (ASN.1 Object Identifier: id-at-organizationName). OrganisationUnitName Organization unit name of the attribute (ASN.1 Object Identifier: id-at-organizationalUnitName). CountryName Country name of the attribute (ASN.1 Object Identifier: id-at-countryName). AuthenticatedData4 Message authentication code (MAC), computed on the data to protect with an encryption key. Version Version of the data structure. Recipient Session key or protection key identification used by the recipient. MACAlgorithm Algorithm to compute message authentication code (MAC). EncapsulatedContent Data to authenticate. MAC Message authentication code value. AutomatedTellerMachine5 ATM information. Identification ATM terminal device identification for the acquirer and the issuer. AdditionalIdentification ATM terminal device identification for the ATM manager. SequenceNumber ATM terminal device identification for the branch. BaseCurrency Reference currency of the ATM. Location Location of the ATM. LocationCategory Indicates the environment of the transaction. Equipment ATM terminal equipment. OutOfServiceDevice List of ATM devices out of service. MessageProtection Mechanism used to protect the message of the ATM protocol. BytePadding1Code Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. LengthPadding Message to encrypt is completed by a byte value containing the total number of added bytes. Null80Padding Message to encrypt is completed by one bit of value 1, followed by null bits until the encryption block length is reached. NullLengthPadding Message to encrypt is completed by null byte values, the last byte containing the total number of added bytes. NullPadding Message to encrypt is completed by null bytes. RandomPadding Message to encrypt is completed by random value, the last byte containing the total number of added bytes. CertificateIssuer1 Certificate issuer name (see X.509). RelativeDistinguishedName Relative distinguished name inside a X.509 certificate. ContentInformationType10 General cryptographic message syntax (CMS) containing encrypted data. ContentType Type of data protection. EnvelopedData Data protection by encryption or by a digital envelope, with an encryption key. ContentInformationType13 General cryptographic message syntax (CMS) containing data. protected by a MAC or a digital signature ContentType Type of data protection. AuthenticatedData Data protection by a message authentication code (MAC). SignedData Data protected by a digital signatures. ContentType2Code Identification of the type of a Cryptographic Message Syntax (CMS) data structure. PlainData Generic, non cryptographic, or unqualified data content - (ASN.1 Object Identifier: id-data). SignedData Digital signature - (ASN.1 Object Identifier: id-signedData). EnvelopedData Encrypted data, with encryption key - (ASN.1 Object Identifier: id-envelopedData). DigestedData Message digest - (ASN.1 Object Identifier: id-digestedData). AuthenticatedData MAC (Message Authentication Code), with encryption key - (ASN.1 Object Identifier: id-ct-authData). CountryCode Code to identify a country, a dependency, or another area of particular geopolitical interest, on the basis of country names obtained from the United Nations (ISO 3166, Alpha-2 code). CryptographicKey7 Cryptographic Key component. Name Name or label of the key. Identification Name of the cryptographic key. SecurityDomainIdentification Identification of the security domain. AdditionalIdentification Additional identification of the key, for instance to derive the key. Version Version of the cryptographic key. SequenceCounter Sequence counter of the cryptographic key. Type Type of algorithm used by the cryptographic key. Function Allowed usage of the key. ActivationDate Date and time on which the key must be activated. DeactivationDate Date and time on which the key must be deactivated. KeyCheckValue Value for checking a cryptographic key. CurrentStatus Current status of the key. FailureReason Reason for which the key has been stopped. CryptographicKeyType3Code Codes for qualifying the type of cryptographic keys. AES128 AES (Advanced Encryption Standard) 128 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). DES112 Data encryption standard key of 112 bits (without the parity bits). DUKPT2009 DUKPT (Derived Unique Key Per Transaction) key, as specified in ANSI X9.24-2009 Annex A. AES192 AES (Advanced Encryption Standard) encryption with a 192 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). AES256 AES (Advanced Encryption Standard) encryption with a 256 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). DES168 Data encryption standard key of 168 bits (without the parity bits). DataSetCategory7Code Type of an ATM configuration. ATMConfiguration Configuration parameters of the ATM. ATMProtocol ATM protocol parameters, including the configuration of the hosts. ApplicationParameters Payment application specific configuration parameters for the point of interaction (POI) system. CardApplication Configuration parameters of the card application. CardConfiguration Configuration of the cards accepted by the terminal. OfflineExchangeRate Local rates for currency exchanges. PreDefinedAmount Predefined amounts to be presented to the customer. LocationConfiguration Configuration of the location. MobileOperator Configuration of the mobile operator cards accepted by the terminal. EncapsulatedContent3 Data to authenticate. ContentType Type of data which have been authenticated. Content Actual data to authenticate. EncryptedContent3 Encrypted data with an encryption key. ContentType Type of data which have been encrypted. ContentEncryptionAlgorithm Algorithm used to encrypt the data. EncryptedData Encrypted data, result of the content encryption. EncryptionFormat1Code Format of data before encryption, if the format is not plaintext or implicit. TR31 Format of a cryptographic key specified by the ANSI X9 TR-31 standard. TR34 Format of a cryptographic key specified by the ANSI X9 TR-34 standard. EnvelopedData4 Encrypted data with encryption key. Version Version of the data structure. Recipient Session key or identification of the protection key used by the recipient. EncryptedContent Data protection by encryption (digital envelope), with an encryption key. FailureReason5Code Incident occurring on a device. Security General security error. Hardware Hardware error on the device. FailureReason6Code Reason for which the key has been stopped. Compromised Key is compromised. Expired Key has expired. InvalidKCV Key check value is incorrect. KeyLoadError Error during the key download in the security device. GenericIdentification77 Identification of an entity. Identification Identification of the entity. Type Type of identified entity. Issuer Entity assigning the identification (for example merchant, acceptor, acquirer, or tax authority). Country Country of the entity (ISO 3166-1 alpha-2 or alpha-3) ShortName Name of the entity. GeographicCoordinates1 Location on the Earth specified by two numbers representing vertical and horizontal position. Latitude Latitude measured in degrees, minutes and seconds, following by 'N' for the north and 'S' for the south of the equator (for example 48°51'29" N for the Eiffel Tower latitude). Longitude Angular measurement of the distance of a location on the earth east or west of the Greenwich observatory. The longitude is measured in degrees, minutes and seconds, following by 'E' for the east and 'W' for the west (for example 2°17'40" E for the Eiffel Tower longitude). GeographicLocation1Choice Geographic location of the ATM specified by geographic coordinates or UTM coordinates. GeographicCoordinates Location on the earth specified by two numbers representing vertical and horizontal position. UTMCoordinates Location on the earth specified by the Universal Transverse Mercator coordinate system, using the WGS84 geodesic system. Header20 Information related to the protocol management on a segment of the path from the ATM to the acquirer. MessageFunction Identifies the type of process related to the message. ProtocolVersion Version of the ATM protocol specifications. ExchangeIdentification Unique identification of an exchange occurrence. CreationDateTime Date and time at which the message was created. InitiatingParty Unique identification of the partner that has initiated the exchange. RecipientParty Unique identification of the partner that is the recipient of the message exchange. ProcessState State of the sender of the message inside the process flow. Traceability Identification of partners involved in exchange from the merchant to the issuer, with the relative timestamp of their exchanges. ISODateTime A particular point in the progression of time defined by a mandatory date and a mandatory time component, expressed in either UTC time format (YYYY-MM-DDThh:mm:ss.sssZ), local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm), or local time format (YYYY-MM-DDThh:mm:ss.sss). These representations are defined in "XML Schema Part 2: Datatypes Second Edition - W3C Recommendation 28 October 2004" which is aligned with ISO 8601. Note on the time format: 1) beginning / end of calendar day 00:00:00 = the beginning of a calendar day 24:00:00 = the end of a calendar day 2) fractions of second in time format Decimal fractions of seconds may be included. In this case, the involved parties shall agree on the maximum number of digits that are allowed. IssuerAndSerialNumber1 Certificate issuer name and serial number (see X.509). Issuer Certificate issuer name (see X.509). SerialNumber Certificate serial number (see X.509). KEK4 Key encryption key (KEK), using previously distributed symmetric key. Version Version of the data structure. KEKIdentification Identification of the key encryption key (KEK). KeyEncryptionAlgorithm Algorithm to encrypt the key encryption key (KEK). EncryptedKey Encrypted key encryption key (KEK). KEKIdentifier2 Identification of a key encryption key (KEK), using previously distributed symmetric key. KeyIdentification Identification of the cryptographic key. KeyVersion Version of the cryptographic key. SequenceNumber Number of usages of the cryptographic key. DerivationIdentification Identification used for derivation of a unique key from a master key provided for the data protection. KeyTransport4 Key encryption key (KEK), encrypted with a previously distributed asymmetric public key. Version Version of the data structure. RecipientIdentification Identification of a cryptographic asymmetric key for the recipient. KeyEncryptionAlgorithm Algorithm to encrypt the key encryption key (KEK). EncryptedKey Encrypted key encryption key (KEK). KeyUsage1Code Allowed usages of the key. Encryption Key may encrypt. Decryption Key may decrypt. DataEncryption Key may encrypt data. DataDecryption Key may decrypt data. TranslateInput Key may encrypt information before translation. TranslateOutput Key may encrypt information after translation. MessageAuthenticationCodeGeneration Key may generate message authentication codes (MAC). MessageAuthenticationCodeVerification Key may verify message authentication codes (MAC). SignatureGeneration Key may generate digital signatures. SignatureVerification Key may verify digital signatures. PINEncryption Key may encrypt personal identification numbers (PIN). PINDecryption Key may decrypt personal identification numbers (PIN). PINVerification Key may verify personal identification numbers (PIN). KeyGeneration Key may generate keys. KeyImport Key may import keys. KeyExport Key may export keys. KeyDerivation Key may derive keys. Max100KBinary Binary data of 100K maximum. Max140Binary Specifies a binary string with a maximum length of 140 binary bytes. Max140Text Specifies a character string with a maximum length of 140 characters. Max16Text Specifies a character string with a maximum length of 16 characters. Max256Text Specifies a character string with a maximum length of 256 characters. Max3000Binary Specifies a binary string with a maximum length of 3000 binary bytes. Max35Binary Specifies a binary string with a maximum length of 35 binary bytes. Max35Text Specifies a character string with a maximum length of 35 characters. Max3NumericText Specifies a numeric string with a maximum length of 3 digits. Max5000Binary Specifies a binary string with a maximum length of 5000 binary bytes. Max500Binary Specifies a binary string with a maximum length of 500 binary bytes. Max6Text Specifies a character string with a maximum length of 6 characters. Max70Text Specifies a character string with a maximum length of 70characters. MessageFunction7Code Identifies the type of process related to an ATM message. ATMBalance Provide the ATM counters resettting those that are applicable. ATMCompletionAcknowledgement Acknowledgement of a completion advice. ATMCompletionAdvice Advice of an ATM transaction completion. ATMControl Global ATM commands. ATMDeviceControl Maintenance commands to perform. ATMDiagnosticRequest Request for a diagnostic. ATMDiagnosticResponse Response to a diagnostic request. ATMGlobalStatus Global status of the ATM. ATMInquiryRequest Request for an inquiry. ATMInquiryResponse Response to an inquiry request. ATMKeyDownloadRequest Request for a key download. ATMKeyDownloadResponse Response to a key download. ATMPINManagementRequest Request for a cardholder PIN management. ATMPINManagementResponse Response to a cardholder PIN management request. ATMRequestReject Rejected request message. ATMResponseReject Rejected response message. ATMWithdrawalAdvice Response of a withdrawal transaction. ATMWithdrawalAknowledgement Acknowledgement of a withdrawal transaction advice. ATMWithdrawalRequest Request for a withdrawal transaction. ATMWithdrawalResponse Response to a withdrawal transaction request. CountersInquiry Current value of counters, no reinitialisation of the counters. HostToATMAcknowledgement Acknowledgement of a request from a host to an ATM for contacting. HostToATMRequest Request from a host to an ATM to be contacted by this ATM. ATMOperation Logical or physical operation on the ATM. SecurityControl Security Commands. SecurityDetails Security detailed report. SecurityKeyCompletion Result of the key download with the status of the downloaded keys including key check values. SecurityKeyStatus Status of cryptographic keys. MessageProtection1Code Mechanism used to protect the message of the ATM protocol. EnvelopedMessage Messages contain an encrypted body and a MAC or a digital signature computed on the complete message (header plus body after encryption). MACBody Messages contain a MAC or a digital signature computed on the body only. MACMessage Messages contain a MAC or a digital signature computed on the complete message (header plus body). NoProtection Messages are not protected, no encryption and no MAC or digital signature. Min2Max3AlphaText Specifies an alpha string with a minimum length of 2 characters and a maximum length of 3 characters. Min5Max16Binary Specifies a binary string with a minimum length of 5 bytes, and a maximum length of 16 bytes. Number Number of objects represented as an integer. PINFormat4Code Format of an ATM PIN block before encryption. ANSI0 ANSI 0 PIN block format. Bancomat Italian Bancomat PIN block format. Banksys Banksys PIN block format. Diebold Diebold PIN block format. DieboldCO Diebold CO PIN block format. ECI2 ECI2 PIN block format. ECI3 ECI3 PIN block format. EMVRSA EMV ISO2 PIN block format encrypted with the EMV RSA cryptographic key for the PIN. IBM3624 IBM 3624 PIN block format. ISO0 PIN diversified with the card account number, conforming to the standard ISO 9564-2. ISO1 PIN completed with random padding characters, conforming to the standard ISO 9564-2. ISO2 PIN without diversification characters, conforming to the standard ISO 9564-2. ISO3 PIN diversified with the card account number and random characters, conforming to the standard ISO 9564-2. ISO4 PIN format used with AES encryption, conforming to the new ISO SC2 format. ISO5 Alternative PIN format used with AES encryption, conforming to the new ISO SC2 format. VISA2 VISA2 PIN block format. VISA3 VISA3 PIN block format. Parameter4 Parameters of the asymmetric encryption algorithm. EncryptionFormat Format of data before encryption, if the format is not plaintext or implicit. DigestAlgorithm Identification of the digest algorithm. MaskGeneratorAlgorithm Mask generator function cryptographic algorithm and parameters. Parameter5 Parameters associated to a mask generator cryptographic function. DigestAlgorithm Digest algorithm used in the mask generator function. Parameter6 Parameters associated to a cryptographic encryption algorithm. EncryptionFormat Format of data before encryption, if the format is not plaintext or implicit. InitialisationVector Initialisation vector of a cipher block chaining (CBC) mode encryption. BytePadding Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. Parameter7 Parameters associated to the MAC algorithm. InitialisationVector Initialisation vector of a cipher block chaining (CBC) mode encryption. BytePadding Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. Parameter8 Parameters of the RSASSA-PSS digital signature algorithm (RSA signature algorithm with appendix: Probabilistic Signature Scheme). DigestAlgorithm Identification of the digest algorithm. MaskGeneratorAlgorithm Mask generator function cryptographic algorithm and parameters. SaltLength Length of the salt to include in the signature. TrailerField Trailer field number. PartyType12Code Type of identified entity. Acquirer Entity acquiring card transactions. ATMManager Entity managing the ATM. CardIssuerProcessor Entity providing issuing card payment processing services on behalf on an issuer. DelegateIssuer Party to whom the card issuer delegates to authorise card payment transactions. HostingEntity Entity hosting the ATM. IntermediaryAgent Party acting on behalf of other parties to process or forward data to other parties. OriginatingATM ATM initiating the transaction. PostalAddress17 Information that locates and identifies a specific address, as defined by postal services or in free format text. AddressLine Information that locates and identifies a specific address, as defined by postal services, that is presented in free format text. StreetName Name of a street or thoroughfare. BuildingNumber Number that identifies the position of a building on a street. PostCode Identifier consisting of a group of letters and/or numbers that is added to a postal address to assist the sorting of mail. TownName Name of a built-up area, with defined boundaries, and a local government. CountrySubDivision Identifies a subdivision of a country, for instance state, region, county. Country Nation with its own government, occupying a particular territory. GeoLocation Geographic location of the ATM specified by geographic coordinates or UTM coordinates. Recipient4Choice Transport key or key encryption key (KEK) for the recipient. KeyTransport Encryption key using previously distributed asymmetric public key. KEK Key encryption key using previously distributed symmetric key. KeyIdentifier Identification of a protection key without a session key, shared and previously exchanged between the initiator and the recipient. Recipient5Choice Identification of a cryptographic asymmetric key. IssuerAndSerialNumber Certificate issuer name and serial number (see ITU X.509). KeyIdentifier Identifier of a cryptographic asymmetric key, previously exchanged between initiator and recipient. RelativeDistinguishedName1 Relative distinguished name defined by X.500 and X.509. AttributeType Type of attribute of a distinguished name (see X.500). AttributeValue Value of the attribute of a distinguished name (see X.500). SignedData4 Digital signatures of data from one or several signers. Version Version of the data structure. DigestAlgorithm Identification of digest algorithm applied before signature. EncapsulatedContent Data to sign. Certificate Chain of X.509 certificates. Signer Digital signature and identification of a signer. Signer3 Entity who has signed the data and its digital signature. Version Version of the Cryptographic Message Syntax (CMS) data structure. SignerIdentification Identification of the entity who has signed the data. DigestAlgorithm Identification of a digest algorithm to apply before signature. SignatureAlgorithm Cryptographic digital signature algorithm. Signature Digital signature. TerminalHosting1 Entity hosting the ATM terminal. Category Type of ATM terminal hosting. Identification Identify the entity hosting the ATM. TerminalManagementActionResult2Code Final result of the processed command at the ATM. ConnectionError Problem to connect while performing the action. FormatError Data transferred has a wrong format. Hardware Hardware error. NotSupported Action is not supported. Security Security error. Success Action was successfully performed. SyntaxError Data transferred has a wrong syntax. Timeout Timeout expired during the data transfer. UnknownKeyReference Cryptographic key reference used for the data signature is not valid. Traceability4 Identification of partners involved in exchange from the ATM to the issuer, with the relative timestamp of their exchanges. RelayIdentification Identification of a partner of a message exchange. SequenceNumber Identification of the relay node in the path, to enable identification of several hosts in parallel. TraceDateTimeIn Date and time of incoming data exchange for relaying or processing. TraceDateTimeOut Date and time of the outgoing exchange for relaying or processing. TransactionEnvironment2Code Indicates the environment of the transaction location. Private Private environment. Public Public environment. TransactionEnvironment3Code Indicates the entity hosting the terminal performing the transaction. Branch Bank environment. Merchant Merchant environment. Other Other environments, for instance a mall or an airport. TrueFalseIndicator A flag indicating a True or False value. UTMCoordinates1 Location on the Earth specified by the Universal Transverse Mercator coordinate system, using the WGS84 geodesic system. UTMZone UTM grid zone combination of the longitude zone (1 to 60) and the latitude band, C to X, excluding I and O (for example Eiffel tower UTM zone is 31U). UTMEastward X-coordinate of the Universal Transverse Mercator coordinate system in meters (for example 448 265m for Eiffel Tower X-coordinate). UTMNorthward Y-coordinate of the Universal Transverse Mercator coordinate system (for example 5 411 920m for Eiffel Tower Y-coordinate).