ATMDiagnosticRequest1 Information related to the request of a diagnostic from an ATM.. Environment Environment of the ATM. ATMDiagnosticRequestV01 The ATMDiagnosticRequest message is sent from an ATM to an acquirer to verify the availability of the acquirer. The acquirer will also validate that this ATM is a valid ATM for its particular network. Header Information related to the protocol management on a segment of the path from the ATM to the acquirer. ProtectedATMDiagnosticRequest Encrypted body of the message. ATMDiagnosticRequest Information related to the request of a diagnostic from an ATM. SecurityTrailer Trailer of the message containing a MAC. ATMEnvironment9 Environment of the ATM. Acquirer Acquirer of the ATM transaction, in charge of the funds settlement with the issuer. ATMManagerIdentification Identification of the ATM manager. ATM ATM information. ATMMessageFunction1 Identifies the type of process related to an ATM message. Function Type of requested function. ATMServiceCode Codification of the type of service for the ATM. HostServiceCode Codification of the type of service for the ATM manager host. Acquirer7 Acquirer of the withdrawal transaction, in charge of the funds settlement with the issuer. AcquiringInstitution Identification of the acquirer. Branch Identification of the acquirer branch. Algorithm11Code Identification of a digest algorithm. SHA256 Message digest algorithm SHA-256 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha256). SHA384 Message digest algorithm SHA-384 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha384). SHA512 Message digest algorithm SHA-512 as defined in FIPS 180-1 and 2 - (ASN.1 Object Identifier: id-sha512). SHA1 Message digest algorithm SHA-1 as defined in FIPS 180-1 - (ASN.1 Object Identifier: id-sha1). Algorithm12Code Cryptographic algorithms for the MAC (Message Authentication Code). RetailCBCMAC Retail CBC (Chaining Block Cypher) MAC (Message Authentication Code) (cf. ISO 9807, ANSI X9.19) - (ASN.1 Object Identifier: id-retail-cbc-mac). RetailSHA256MAC Retail-CBC-MAC with SHA-256 (Secure HAsh standard) - (ASN.1 Object Identifier: id-retail-cbc-mac-sha-256). SHA256CMACwithAES128 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 128 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-256 digest of the message. RetailSHA1MAC Retail-CBC-MAC with SHA-1 (Secure Hash standard) - (ASN.1 Object Identifier: id-retail-cbc-mac-sha-1). SHA384CMACwithAES192 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 192 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-384 digest of the message. SHA512CMACwithAES256 CMAC (Cipher based Message Authentication Code) defined by the National Institute of Standards and Technology (NIST 800-38B - May 2005), using the block cipher Advanced Encryption Standard with a 256 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). The CMAC algorithm is computed on the SHA-512 digest of the message. Algorithm13Code Cryptographic algorithms for the protection of transported keys. AES128CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 128 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). DES112CBC Triple DES (Data Encryption Standard) CBC (Chaining Block Cypher) encryption with double length key (112 Bit) as defined in FIPS PUB 46-3 - (ASN.1 Object Identifier: des-ede3-cbc). DUKPT2009 DUKPT (Derived Unique Key Per Transaction) algorithm, as specified in ANSI X9.24-2009 Annex A. UKPT UKPT (Unique Key Per Transaction) or Master Session Key key encryption - (ASN.1 Object Identifier: id-ukpt-wrap). UKPTwithAES128 UKPT (Unique Key Per Transaction) or Master Session Key key encryption, using Advanced Encryption Standard with a 128 bits cryptographic key, approved by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). AES192CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 192 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). AES256CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 256 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). Algorithm15Code Cryptographic algorithms for encryptions with a symmetric cryptographic key. AES128CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 128 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 - November 6, 2001 - Advanced Encryption Standard). DES112CBC Triple DES (Data Encryption Standard) CBC (Chaining Block Cypher) encryption with double length key (112 Bit) as defined in FIPS PUB 46-3 - (ASN.1 Object Identifier: des-ede3-cbc). AES192CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 192 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). AES256CBC AES (Advanced Encryption Standard) CBC (Chaining Block Cypher) encryption with a 256 bits cryptographic key as defined by the Federal Information Processing Standards (FIPS 197 – November 6, 2001 - Advanced Encryption Standard). Algorithm7Code Asymmetric encryption algorithm of a transport key. RSAEncryption RSA encryption algorithm - (ASN.1 Object Identifier: rsaEncryption). RSAES-OAEP RSA encryption scheme based on Optimal Asymmetric Encryption scheme (PKCS #1 version 2.1) - (ASN.1 Object Identifier: id-RSAES-OAEP). Algorithm8Code Mask generator functions of the RSAES-OAEP encryption algorithm (RSA Encryption Scheme: Optimal Asymmetric Encryption Padding). MGF1 Generator Function, used for RSA encryption and RSA igital signature (PKCS #1 version 2.1) - (ASN.1 Object Identifier: id-mgf1). AlgorithmIdentification11 Cryptographic algorithms and parameters for the protection of transported keys by an asymmetric key. Algorithm Asymmetric encryption algorithm of a transport key. Parameter Parameters of the encryption algorithm. AlgorithmIdentification12 Mask generator function cryptographic algorithm and parameters. Algorithm Mask generator function cryptographic algorithm. Parameter Parameters associated to the mask generator function cryptographic algorithm AlgorithmIdentification13 Cryptographic algorithm and parameters for the protection of the transported key. Algorithm Identification of the algorithm. Parameter Parameters associated to the encryption algorithm. AlgorithmIdentification14 Cryptographic algorithm and parameters for encryptions with a symmetric cryptographic key. Algorithm Identification of the encryption algorithm. Parameter Parameters associated with the CBC (Chain Block Chaining) encryption algorithm. AlgorithmIdentification15 Identification of a cryptographic algorithm and parameters for the MAC computation. Algorithm Identification of the MAC algorithm. Parameter Parameters associated to the MAC algorithm. AttributeType1Code Type of attribute of a distinguished name (DN). CommonName Common name of the attribute (ASN.1 Object Identifier: id-at-commonName). Locality Locality of the attribute (ASN.1 Object Identifier: id-at-localityName). OrganisationName Organization name of the attribute (ASN.1 Object Identifier: id-at-organizationName). OrganisationUnitName Organization unit name of the attribute (ASN.1 Object Identifier: id-at-organizationalUnitName). CountryName Country name of the attribute (ASN.1 Object Identifier: id-at-countryName). AuthenticatedData4 Message authentication code (MAC), computed on the data to protect with an encryption key. Version Version of the data structure. Recipient Session key or protection key identification used by the recipient. MACAlgorithm Algorithm to compute message authentication code (MAC). EncapsulatedContent Data to authenticate. MAC Message authentication code value. AutomatedTellerMachine7 ATM information. Identification ATM terminal device identification for the acquirer and the issuer. AdditionalIdentification ATM terminal device identification for the ATM manager. SequenceNumber ATM terminal device identification for the branch. BytePadding1Code Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. LengthPadding Message to encrypt is completed by a byte value containing the total number of added bytes. Null80Padding Message to encrypt is completed by one bit of value 1, followed by null bits until the encryption block length is reached. NullLengthPadding Message to encrypt is completed by null byte values, the last byte containing the total number of added bytes. NullPadding Message to encrypt is completed by null bytes. RandomPadding Message to encrypt is completed by random value, the last byte containing the total number of added bytes. CertificateIssuer1 Certificate issuer name (see X.509). RelativeDistinguishedName Relative distinguished name inside a X.509 certificate. ContentInformationType10 General cryptographic message syntax (CMS) containing encrypted data. ContentType Type of data protection. EnvelopedData Data protection by encryption or by a digital envelope, with an encryption key. ContentInformationType15 General cryptographic message syntax (CMS) containing authenticated data. ContentType Type of data protection. AuthenticatedData Data protection by a message authentication code (MAC). ContentType2Code Identification of the type of a Cryptographic Message Syntax (CMS) data structure. PlainData Generic, non cryptographic, or unqualified data content - (ASN.1 Object Identifier: id-data). SignedData Digital signature - (ASN.1 Object Identifier: id-signedData). EnvelopedData Encrypted data, with encryption key - (ASN.1 Object Identifier: id-envelopedData). DigestedData Message digest - (ASN.1 Object Identifier: id-digestedData). AuthenticatedData MAC (Message Authentication Code), with encryption key - (ASN.1 Object Identifier: id-ct-authData). EncapsulatedContent3 Data to authenticate. ContentType Type of data which have been authenticated. Content Actual data to authenticate. EncryptedContent3 Encrypted data with an encryption key. ContentType Type of data which have been encrypted. ContentEncryptionAlgorithm Algorithm used to encrypt the data. EncryptedData Encrypted data, result of the content encryption. EncryptionFormat1Code Format of data before encryption, if the format is not plaintext or implicit. TR31 Format of a cryptographic key specified by the ANSI X9 TR-31 standard. TR34 Format of a cryptographic key specified by the ANSI X9 TR-34 standard. EnvelopedData4 Encrypted data with encryption key. Version Version of the data structure. Recipient Session key or identification of the protection key used by the recipient. EncryptedContent Data protection by encryption (digital envelope), with an encryption key. GenericIdentification77 Identification of an entity. Identification Identification of the entity. Type Type of identified entity. Issuer Entity assigning the identification (for example merchant, acceptor, acquirer, or tax authority). Country Country of the entity (ISO 3166-1 alpha-2 or alpha-3) ShortName Name of the entity. Header20 Information related to the protocol management on a segment of the path from the ATM to the acquirer. MessageFunction Identifies the type of process related to the message. ProtocolVersion Version of the ATM protocol specifications. ExchangeIdentification Unique identification of an exchange occurrence. CreationDateTime Date and time at which the message was created. InitiatingParty Unique identification of the partner that has initiated the exchange. RecipientParty Unique identification of the partner that is the recipient of the message exchange. ProcessState State of the sender of the message inside the process flow. Traceability Identification of partners involved in exchange from the merchant to the issuer, with the relative timestamp of their exchanges. ISODateTime A particular point in the progression of time defined by a mandatory date and a mandatory time component, expressed in either UTC time format (YYYY-MM-DDThh:mm:ss.sssZ), local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm), or local time format (YYYY-MM-DDThh:mm:ss.sss). These representations are defined in "XML Schema Part 2: Datatypes Second Edition - W3C Recommendation 28 October 2004" which is aligned with ISO 8601. Note on the time format: 1) beginning / end of calendar day 00:00:00 = the beginning of a calendar day 24:00:00 = the end of a calendar day 2) fractions of second in time format Decimal fractions of seconds may be included. In this case, the involved parties shall agree on the maximum number of digits that are allowed. IssuerAndSerialNumber1 Certificate issuer name and serial number (see X.509). Issuer Certificate issuer name (see X.509). SerialNumber Certificate serial number (see X.509). KEK4 Key encryption key (KEK), using previously distributed symmetric key. Version Version of the data structure. KEKIdentification Identification of the key encryption key (KEK). KeyEncryptionAlgorithm Algorithm to encrypt the key encryption key (KEK). EncryptedKey Encrypted key encryption key (KEK). KEKIdentifier2 Identification of a key encryption key (KEK), using previously distributed symmetric key. KeyIdentification Identification of the cryptographic key. KeyVersion Version of the cryptographic key. SequenceNumber Number of usages of the cryptographic key. DerivationIdentification Identification used for derivation of a unique key from a master key provided for the data protection. KeyTransport4 Key encryption key (KEK), encrypted with a previously distributed asymmetric public key. Version Version of the data structure. RecipientIdentification Identification of a cryptographic asymmetric key for the recipient. KeyEncryptionAlgorithm Algorithm to encrypt the key encryption key (KEK). EncryptedKey Encrypted key encryption key (KEK). Max100KBinary Binary data of 100K maximum. Max140Binary Specifies a binary string with a maximum length of 140 binary bytes. Max140Text Specifies a character string with a maximum length of 140 characters. Max35Binary Specifies a binary string with a maximum length of 35 binary bytes. Max35Text Specifies a character string with a maximum length of 35 characters. Max3NumericText Specifies a numeric string with a maximum length of 3 digits. Max5000Binary Specifies a binary string with a maximum length of 5000 binary bytes. Max500Binary Specifies a binary string with a maximum length of 500 binary bytes. Max6Text Specifies a character string with a maximum length of 6 characters. MessageFunction7Code Identifies the type of process related to an ATM message. ATMBalance Provide the ATM counters resettting those that are applicable. ATMCompletionAcknowledgement Acknowledgement of a completion advice. ATMCompletionAdvice Advice of an ATM transaction completion. ATMControl Global ATM commands. ATMDeviceControl Maintenance commands to perform. ATMDiagnosticRequest Request for a diagnostic. ATMDiagnosticResponse Response to a diagnostic request. ATMGlobalStatus Global status of the ATM. ATMInquiryRequest Request for an inquiry. ATMInquiryResponse Response to an inquiry request. ATMKeyDownloadRequest Request for a key download. ATMKeyDownloadResponse Response to a key download. ATMPINManagementRequest Request for a cardholder PIN management. ATMPINManagementResponse Response to a cardholder PIN management request. ATMRequestReject Rejected request message. ATMResponseReject Rejected response message. ATMWithdrawalAdvice Response of a withdrawal transaction. ATMWithdrawalAknowledgement Acknowledgement of a withdrawal transaction advice. ATMWithdrawalRequest Request for a withdrawal transaction. ATMWithdrawalResponse Response to a withdrawal transaction request. CountersInquiry Current value of counters, no reinitialisation of the counters. HostToATMAcknowledgement Acknowledgement of a request from a host to an ATM for contacting. HostToATMRequest Request from a host to an ATM to be contacted by this ATM. ATMOperation Logical or physical operation on the ATM. SecurityControl Security Commands. SecurityDetails Security detailed report. SecurityKeyCompletion Result of the key download with the status of the downloaded keys including key check values. SecurityKeyStatus Status of cryptographic keys. Min2Max3AlphaText Specifies an alpha string with a minimum length of 2 characters and a maximum length of 3 characters. Min5Max16Binary Specifies a binary string with a minimum length of 5 bytes, and a maximum length of 16 bytes. Number Number of objects represented as an integer. Parameter4 Parameters of the asymmetric encryption algorithm. EncryptionFormat Format of data before encryption, if the format is not plaintext or implicit. DigestAlgorithm Identification of the digest algorithm. MaskGeneratorAlgorithm Mask generator function cryptographic algorithm and parameters. Parameter5 Parameters associated to a mask generator cryptographic function. DigestAlgorithm Digest algorithm used in the mask generator function. Parameter6 Parameters associated to a cryptographic encryption algorithm. EncryptionFormat Format of data before encryption, if the format is not plaintext or implicit. InitialisationVector Initialisation vector of a cipher block chaining (CBC) mode encryption. BytePadding Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. Parameter7 Parameters associated to the MAC algorithm. InitialisationVector Initialisation vector of a cipher block chaining (CBC) mode encryption. BytePadding Byte padding for a cypher block chaining mode encryption, if the padding is not implicit. PartyType12Code Type of identified entity. Acquirer Entity acquiring card transactions. ATMManager Entity managing the ATM. CardIssuerProcessor Entity providing issuing card payment processing services on behalf on an issuer. DelegateIssuer Party to whom the card issuer delegates to authorise card payment transactions. HostingEntity Entity hosting the ATM. IntermediaryAgent Party acting on behalf of other parties to process or forward data to other parties. OriginatingATM ATM initiating the transaction. Recipient4Choice Transport key or key encryption key (KEK) for the recipient. KeyTransport Encryption key using previously distributed asymmetric public key. KEK Key encryption key using previously distributed symmetric key. KeyIdentifier Identification of a protection key without a session key, shared and previously exchanged between the initiator and the recipient. Recipient5Choice Identification of a cryptographic asymmetric key. IssuerAndSerialNumber Certificate issuer name and serial number (see ITU X.509). KeyIdentifier Identifier of a cryptographic asymmetric key, previously exchanged between initiator and recipient. RelativeDistinguishedName1 Relative distinguished name defined by X.500 and X.509. AttributeType Type of attribute of a distinguished name (see X.500). AttributeValue Value of the attribute of a distinguished name (see X.500). Traceability4 Identification of partners involved in exchange from the ATM to the issuer, with the relative timestamp of their exchanges. RelayIdentification Identification of a partner of a message exchange. SequenceNumber Identification of the relay node in the path, to enable identification of several hosts in parallel. TraceDateTimeIn Date and time of incoming data exchange for relaying or processing. TraceDateTimeOut Date and time of the outgoing exchange for relaying or processing.