Source: http://docplayer.net/927195-Australian-payments-clearing-association-limited-abn-12-055-136-519-code-set-issuers-and-acquirers-community-framework-volume-6-atm-system-code.html
Timestamp: 2017-12-11 19:52:02
Document Index: 329344751

Matched Legal Cases: ['ART 1', 'ART 2', 'ART 3', 'ART 4', 'ART 1', 'ART 1', 'art 1', 'ART 1', 'art 4', 'art 3', 'ART 1', 'art 4', 'art 4', 'art 4', 'art 4', 'art 4', 'art 4', 'art 3', 'art 4', 'art 4', 'art 4', 'art 4', 'art 4', 'ART 1', 'art 4', 'art 4', 'ART 1', 'ART 1', 'art 2', 'ART 1', 'art 3', 'ART 1', 'art 7', 'ART 1', 'ART 1', 'ART 1', 'art 7', 'ART 1', 'ART 1', 'art 3', 'ART 1', 'art 4', 'art 3', 'ART 1', 'art 3', 'art 3']

AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN Code Set ISSUERS AND ACQUIRERS COMMUNITY FRAMEWORK. Volume 6 ATM System Code - PDF
AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN Code Set ISSUERS AND ACQUIRERS COMMUNITY FRAMEWORK. Volume 6 ATM System Code
Download "AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519. Code Set ISSUERS AND ACQUIRERS COMMUNITY FRAMEWORK. Volume 6 ATM System Code"
1 Effective: 1 July 2015 Version 001 AUSTRALIAN PAYENTS CLEARING ASSOCIATION LIITED ABN A Company limited by Guarantee Code Set for ISSUERS AND ACQUIRERS COUNITY FRAEWORK Volume 6 AT System Code Commenced 1 July 2015 Copyright 2015 Australian Payments Clearing Association Limited ABN Australian Payments Clearing Association Limited Level 6, 14 artin Place, SYDNEY NSW 2000 Telephone: (02) Facsimile: (02)
2 IAC CODE SET VOLUE 6 AT SYSTE CODE INDEX Code Set for ISSUERS AND AQUIRERS COUNITY FRAEWORK Volume 6 AT System Code INDEX PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Purpose of this Code AT System Code Role of the AT Code Committee Obligations of IA Participants Subscribers in any other Capacity Scope of Standards and Requirements Interpretation Definitions PART 2 SUBSCRIBING TO THE AT SYSTE CODE Qualifications for Subscription Subscription PART 3 AT SYSTE NETWORK AND INTERCHANGE REQUIREENTS Network and Interchange Requirements Interchanges Interchange Technical Specifications Temporary Suspension of Interchange Unauthorised Access Prevention PART 4 AT INTERCHANGE OPERATIONS Obligation to engage in AT Interchange Terms Applicable to AT Interchange AT Transactions EV Phase 1 Processing EV Phase 2 Processing Liability Shift Claim Process Counterfeit AT Transaction Claim - Dispute Resolution Settlement Interchange Fees Interchange Reports AT Interchange Reports and Transaction Listings ii
3 IAC CODE SET VOLUE 6 AT SYSTE CODE INDEX 4.12 Interchange Settlement Reports (Value) Interchange Billing Reports Retention Period AT Terminal - Cards Retained Good Design Principles Applicable to AT Terminal Interface Doubtful AT Transactions Acquirer Responsibilities Doubtful AT Transactions - Issuer Responsibilities Doubtful AT Transactions AT Affiliate Responsibilities Retention of Records Doubtful Transactions Disputed Transactions General Disputed Transactions - Issuer s Responsibilities Disputed Transactions - Acquirer s Responsibilities Disputed Transactions - AT Affiliate and Third Party Responsibilities Re-presentment Retention of Records Disputed Transactions Timing Enquiries and Notification of System Outages anagement of System Outages Operational Broadcast Notification of a Disruptive Event ANNEXURE A. STANDARD INTERCHANGE SPECIFICATION... A.1 A.1 Standard Interchange... A.1 A.2 Purpose... A.1 A.3 Scope... A.1 A.4 References... A.1 A.5 Supported essage Types... A.2 A.6 Supported Transaction Set... A.3 A.7 Network anagement... A.7 A.8 Key anagement... A.9 A.9 Time Out Parameters... A.13 A.10 Link Reconciliation... A.13 A.11 Link Settlement Times... A.15 A.12 essage Formats... A.15 A.13 Fields... A.39 A.14 Response Codes... A.48 ANNEXURE B. INTERCHANGE BIT AP... B.1 ANNEXURE C. TECHNOLOGY FALLBACK... C.1 C.1 Introduction... C.1 C.2 Technology Fallback... C.1 C.3 Field C.1 C.4 Terminal Capability Code (047)... C.1 iii
4 IAC CODE SET VOLUE 6 AT SYSTE CODE INDEX ANNEXURE D. COUNICATIONS PHILOSOPHY... D.1 ANNEXURE E. STANDARD INTERCHANGE TERS... E.1 E.1 Application to Third Party Agreements... E.1 E.2 Approved Cards... E.1 E.3 Promotions and Advertising... E.1 E.4 Indemnity and Limitation of Liability... E.1 E.5 Direct Charging... E.2 E.6 Variation... E.2 ANNEXURE F. DIRECT CHARGING RULES... F.1 F.2 General Principles... F.1 F.3 Amount and Variation of the AT Operator Fee and Declines... F.1 F.4 When Cardholders may be charged an AT Operator Fee... F.1 F.5 Disclosure Rules... F.2 F.6 Record of Transaction... F.3 F.7 essage Flow... F.4 F.8 Settlement of AT Operator Fees... F.7 F.9 Transition... F.8 F.10 Damages for Non-compliance with Direct Charging Rules... F.8 F.11 Prohibition on hindering or preventing Direct Charging... F.9 ANNEXURE G. TERINAL STANDARDS... G.1 ANNEXURE H. ESCALATION PROCEDURE... H.1 H.1 Objective... H.1 H.2 Escalation Process... H.1 H.3 Severity levels are as follows:... H.1 H.4 Escalation of Call... H.2 H.5 AT Interchange Escalation Table... H.4 ANNEXURE I. AT INSTALLATION CHECKLISTS... I.1 I.1 Security Checklists for Installation of ATs... I.1 I.2 Physical Security echanisms... I.1 I.3 Logical Security echanisms... I.1 ANNEXURE J. EV AT AUSTRALIAN ATS -TRANSITIONAL ARRANGEENTS FOR COBO CARDS... J.1 J.1 Purpose... J.1 J.2 Problem statement... J.1 J.3 Requirements... J.2 J.4 Possible solutions... J.2 J.5 Solutions using standard AT software... J.3 J.6 Solutions involving modified AT software... J.5 iv
5 IAC CODE SET VOLUE 6 AT SYSTE CODE INDEX J.7 Recommended framework solution... J.6 J.8 Bibliography... J.7 ANNEXURE K. SUBSCRIPTION FOR... K.1 ANNEXURE L. COUNTERFEIT AT TRANSACTION CLAI NOTICE... L.1 ANNEXURE. INTERCHANGE OPERATIONS AT DISPUTE ADVICE....1 v
6 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS 1.1 Purpose of this Code The IAC has been established to develop, implement and operate effective standards, policies and procedures to promote the efficiency, security and integrity of Australian Card Payments. These include minimum security standards, interoperability standards and value added services that support how payment cards are used throughout Australia. These standards and requirements are contained within the IAC Code Set which is structured as follows: This Part 1 sets out: the objects of the Code; what the Code covers; and the key obligations of AT Framework Participants. 1.2 AT System Code The AT System Code is a Core Code within the meaning of the IAC Regulations and forms part of, and supplements the other IAC Codes. The objects of the Code are to establish: the conditions of an IA Participant s participation in the AT System; the operational and security standards, requirements and procedures which apply specifically to IA Participants in relation to their participation in the AT System; and a Recognised APS Framework within the meaning of the Company s Constitution for the coordinated development implementation and operation of effective standards and procedures to facilitate AT Interchange between IA Participants in Australia, including without limitation: (i) procedures to promote the efficiency, security and integrity of AT Transactions; and 1.1
7 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS (ii) rules to promote the universal acceptance of Cards at AT Terminals. 1.3 Role of the AT Code Committee The role of the AT Code Committee is to: administer the AT System Code, in accordance with the terms determined by the IAF, the IAC Regulations and this Code; provide a forum for AT Framework Participants and other interested parties to participate in, and contribute to, the development of AT industry policy in Australia; and provide a forum for AT Framework Participants and other interested parties to contribute to the development of: (i) (ii) procedures to promote the security of AT Transactions, by making recommendation to the relevant IAC Code Committee; specifications and standards for AT Terminals utilised, and Cards issued by, and communications links and message formats between, Framework Participants, by making recommendation to the relevant IAC Code Committee. 1.4 Obligations of IA Participants An IA Participant, which engages in AT Interchange in more than one capacity, must satisfy the requirements applicable to each such capacity. In summary, the primary obligations of an IA Participant: which subscribes to the Code and participates in an Interchange network as an Acquirer, are to: (i) comply with all of the Certification obligations imposed on Acquirers under Volumes 1-4 of the IAC Codes, particularly Volume 1 (Introduction and ember Obligations), Volume 3 (Acquirer Code) and Volume 4 (Device Requirements and Cryptographic anagement), which relevantly oblige an Acquirer to: (A) (B) ensure that its AT Terminals are Certified to be compliant with relevant security standards, including, from the Compliance Date, the Terminal Standards set out in this Code, prior to connection to the AT System, and prior to engaging in AT Interchange: see Part 4; comply with all applicable AT System network and interchange requirements: see Part 3; 1.2
8 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS (ii) (iii) (iv) ensure that its AT Terminals are capable of processing all Approved Cards: see Part 4; engage in AT Interchange with each Issuer on the Standard Interchange Terms: see Part 4 and Annexure E; comply with the AT Interchange operational rules set out in Part 4; (v) comply with the AT Direct Charging Rules set out in Annexure F, in accordance with Part 4; and (vi) settle with Issuers for the obligations arising from AT Interchange in accordance with the provisions of the IAC Settlement Code: see Part 4; (vii) comply with the IAC Regulations; which subscribes to the Code and participates in an Interchange network as an Issuer, are to: (i) comply with all of the Certification obligations imposed on Issuers under IAC Code Volume 1 (Introduction and ember Obligations), Volume 2 (Issuer Code) and Volume 4 (Device Requirements and Cryptographic anagement), which oblige an Issuer to: (A) ensure that Cards issued by it comply with the IAC Card Standards including, from the Compliance Date, the EV Standards for Cards: see Part 4; (B) comply with AT System network and interchange requirements: see Part 3; (ii) (iii) (iv) (v) (vi) use reasonable endeavours to ensure the integrity of Approved Cardholders: see Part 4 and Annexure E; engage in AT Interchange with each Acquirer, on the Standard Interchange Terms: see Part 4 and Annexure E; comply with the AT Interchange operational rules set out in Part 4; comply with the AT Direct Charging Rules in accordance with Part 4 and as set out in Annexure F; settle with Acquirers for the obligations arising from AT Interchange in accordance with the provisions of the IAC Settlement Code : see Part 4; 1.3
9 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS (vii) indemnify each Acquirer in relation to losses arising from the fraudulent use or misuse of Cards issued by it: see Part 4 and Standard Interchange Terms in Annexure E; and (viii) comply with the IAC Regulations. 1.5 Subscribers in any other Capacity Operator embers and Affiliates are encouraged to subscribe to this Code to ensure that AT industry policy, standards and procedures established under the auspices of the AT Code Committee represent the widest possible range of industry interests and perspectives. The primary obligations of AT Operator embers and AT Affiliates, including but not limited to those whose nominee may have been: (i) (ii) (iii) appointed as a member of the AT Code Committee; or invited to attend AT Code Committee meetings; or issued with AT Code Committee meeting materials; are to participate in good faith in AT Code Committee meetings and activities, observe all applicable procedural and confidentiality requirements, and other requirements of Framework Participants, under the IAC Regulations and otherwise under any terms of reference or charter determined by the IAF for the purposes of this Code. AT Affiliates are bound by Part 4 (clauses 4.19 and 4.24) to assist IA Participants with the investigation of Disputed Transactions and Doubtful Transactions. 1.6 Scope of Standards and Requirements Subject to paragraph, this Code applies to AT Transactions processed across the AT System regardless of the type of Card and/or account being used and/or accessed. This includes: (i) (ii) all domestically acquired AT Transactions initiated with a nonscheme debit card, including AT Transactions initiated with the debit functionality of a Card that also has scheme credit and/or debit functionality, and processed across an Interchange Link and AT Transactions initiated with a scheme credit or debit card which result in the direct exchange of an Item across a network, other than a scheme network, or Interchange Link (such as nearly all AT Transactions initiated with a domestic scheme credit card or debit card). 1.4
10 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS This Code does not apply to the electronic processing or settlement of credit card transactions and other scheme transactions via scheme networks, or resolution of disputes in relation to such transactions. These are governed by the rules and regulations published by the various card schemes. Bilateral Interchange Agreements entered into by IA Participants prior to the Commencement Date continue to be enforceable provided however that if a provision of an Interchange Agreement is inconsistent with a provision of this Code then the latter prevails to the extent of the inconsistency. 1.7 Interpretation In this IAC Code Set: (d) (e) (f) (g) (h) (i) (j) words importing any one gender include the other gender; the word person includes a firm, body corporate, an unincorporated association or an authority; the singular includes the plural and vice versa; unless the contrary intention appears, a reference to a clause, part or annexure is a reference to a clause, part or annexure of the volume of the IAC Code Set in which the reference appears; a reference to a statute, code or the Corporations Law (or to a provision of a statute, code or the Corporations Law) means the statute, the code, the Corporations Law or the provisions as modified or amended and in operation for the time being, or any statute, code or provision enacted in lieu thereof and includes any regulation or rule for the time being in force under the statute, the code, the Corporations Law or the provision; a reference to a specific time means that time in Sydney unless the context requires otherwise; words defined in the Corporations Law have, unless the contrary intention appears, the same meaning in this IAC Code Set; words defined in the Regulations have, unless the contrary intention appears, the same meaning in this IAC Code Set; this IAC Code Set has been determined by the anagement Committee and takes effect on the date specified by the Chief Executive Officer pursuant to Regulation 1.2; and headings are inserted for convenience and do not affect the interpretation of this IAC Code Set. 1.5
11 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS 1.8 Definitions In this IAC Code Set the following words have the following meanings unless the contrary intention appears. Acquirer means a Constitutional Corporation that in connection with a Transaction: under arrangement with and on behalf of an Issuer, discharges the obligations owed by that Issuer to the relevant Cardholder; and engages in Interchange Activity with that Issuer as a result. Acquirer Identification Number and AIN The six-digit number assigned by ISO to identify an acquiring Framework Participant. (see also IIN, BIN). Acquirer Reference Number in relation to an Acquirer means a reference number which is unique to that Acquirer, allocated to it for identification purposes by the International Organisation for Standardization. Approved Card Payment System has the meaning given in the IAC Regulations; Approved Device means a Secure Cryptographic Device that has been evaluated in accordance with Part 2.6 and which has been approved for use within CECS by the Company. Approved Evaluation Facility means a testing laboratory that has been accredited by the Company to conduct SCD security compliance testing. AS means Australian Standard as published by Standards Australia. AT means an approved electronic device capable of automatically dispensing Cash in response to a cash withdrawal Transaction initiated by a Cardholder. Other transactions (initiated by a Card) such as funds transfers, deposits and balance enquiries may also be supported. The device must accept either magnetic stripe Cards or smart (chip) Cards where Transactions are initiated by the Cardholder keying in a PIN. Limited service devices (known as cash dispensers ) that only allow for cash withdrawal are included. AT Direct Charging Date means 3 arch AT Operator Fee means a fee paid by a Cardholder to the operator of an AT to effect a Transaction through their Terminal. AT Transaction means, for the purposes of this IAC Code Set, a Cash deposit, a Cash withdrawal, or a balance enquiry effected by a Cardholder at an AT. 1.6
12 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Australian IC Card means an IC Card in respect of which the EV Issuer Country Code data element (tag 5F28) equal to 036 (Australia). Authorisation in relation to a Transaction, means confirmation given by an Issuer that funds will be made available for the benefit of an Acquirer, in accordance with the terms of the relevant Interchange Agreement, to the amount of that Transaction. Except in the circumstances specified in this IAC Code Set, Authorisation is effected online. Authorised has a corresponding meaning. Bank Identification Number and BIN means the registered identification number allocated by Standards Australia Limited in accordance with AS 3523 (also known as an Issuer Identification Number (IIN)). Business Day means a day on which banks are open for general banking business in Sydney or elbourne and on which the RITS is operating to process payments. Card means any card, device, application or identifier provided by an Issuer, which is linked to an account or credit facility with the Issuer, for the purpose of effecting a Card Payment. Cardholder means a customer of an Issuer who is issued with a Card and PIN or other authentication method or process. Card Payment means an electronic funds transfer or cash withdrawal initiated by a Cardholder using a Card in Australia, under the rules of an Approved Card Payment System or any other Card-based Transactions approved from time to time for the purposes of this definition by the IAF, and irrespective of the infrastructure or network used to process the transfer or withdrawal, and includes as the context requires, AT Transactions, point of sale Transactions, a card-not-present payment and reversals or refunds of any such Transaction. Card Payment System means, for the purposes of the IAC, the set of functions, procedures, arrangements, rules and devices that enable a Cardholder to effect a Card Payment with a third party other than the Card Issuer. For the avoidance of doubt, a Card Payment System may be a threeparty scheme or a four-party scheme. Cash means Australian legal tender. Certification in relation to an IA Participant means initial certification or recertification, in either case to the extent required by and in accordance with, Regulation 5.1 and Part 3 of the IAC Code Set Volume 1 (Introduction and ember Obligations). 1.7
13 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Certification Checklist means in relation to an Acquirer, a checklist in the form of Annexure B.1 in IAC Code Set Volume 1 (Introduction and ember Obligations) and in relation to an Issuer, a checklist in the form of Annexure B.2 in IAC Code Set Volume 1 (Introduction and ember Obligations). Clearing System means a domestic payments clearing and settlement system established in accordance with the Constitution which is operated by, or under the auspices of, the Company. Commencement Date means, subject to IAC Regulation 1.6, 1 July Committee of anagement means the committee constituted under Part 7 of the Regulations. Company means APCA. Compliance Date means 31 December Compromised Terminal means a Terminal that has been tampered with for fraudulent purposes. Constitution means the constitution of the Company as amended from time to time. Corporations Law means the Corporations Act 2001 (Cth) and associated subordinate legislation as amended from time to time. Counterfeit AT Transaction means a fraudulent AT Transaction initiated with a counterfeit copy of a chip Card. Counterfeit AT Transaction Chargeback Date means, in relation to a particular Counterfeit AT Transaction Claim Notice, a date which is no earlier than fifteen (15) Business Days after the date the Acquirer confirms receipt of the notice. Counterparty means the IA Participant direct settler (for example, an Issuer) identified in a File Settlement Instruction submitted by an Originator (for example, an Acquirer or Lead Institution), in accordance with this IAC Code Set and the requirements of the RITS Low Value Settlement Service. Credit Items includes all credit payment instructions, usually electronically transmitted, which give rise to Interchange Activity, except as may be specifically excluded by the IAC Regulations or this IAC Code Set. Debit Chip Application means domestically issued debit chip application. Debit Items includes all debit payment instructions, usually electronically transmitted, which give rise to Interchange Activity, except as may be specifically excluded by the IAC Regulations or this IAC Code Set. 1.8
14 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Disputed Transaction means a Transaction which the Cardholder denies having initiated or where the Transaction amount is claimed to be incorrect. Disruptive Event means any processing, communications or other failure of a technical nature, which affects, or may affect, the ability of any IA Participant to engage in Interchange Activity. Double-length Key means a key of length 128 bits including parity bits or 112 bits excluding parity bits. Doubtful Transactions means those Transactions which may not have been successfully completed, although the Transaction may be recorded against a relevant account. EFT means Electronic Funds Transfer. EFTPOS means Electronic Funds Transfer at Point of Sale. EFTPOS PED means a whole approved device which provides for the secure entry and encryption of PINs in processing and completing a Transaction. EFTPOS Transactions means Transactions cleared pursuant to the rules prescribed for the EFTPOS Card Payment System by eftpos Payments Australia Limited as the administrator of that system. EV means the specifications as published by EV Co. LLC. Terminal Standards means the standards and requirements set out in Annexure G. EV Compliant in relation to an AT Terminal means the AT Terminal is certified by an Approved Evaluation Facility to be compliant with the Terminal Standards. EV Phase 1 means the current transition arrangements through which a Transaction is created from the use of an EV compliant Australian IC Card prior to the migration of the AT system to full EV functionality. EV Standards means: in relation to Cards, the standards applicable to the Debit Chip Application loaded on the Card; and in relation to AT Terminals, means the standards set out in the Terminal Standards. Encapsulating Security Payload and ESP is a member of the IPsec protocol suite providing origin authenticity, integrity, and confidentiality protection of packets in tunnel mode, where the entire original IP packet is encapsulated, with a new packet header added which remains unprotected. 1.9
15 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Encrypting PIN Pad and EPP means an approved device which is a component of a Terminal that provides secure PIN entry and cryptographic services to that Terminal. epayments Code means the code of conduct administered by the Australian Securities and Investments Commission. Error of agnitude means an error (or a series of errors) of or exceeding $2 million or such other amount as may be determined from time to time by the Committee of anagement. Evaluation Facility in relation to the approval of a Secure Cryptographic Device for: an Acquirer, means an entity approved by the Committee of anagement in accordance with, and for purposes of, IAC Code Set Volume 4 (Device Requirements and Cryptographic anagement); and an Issuer, means an entity approved by the Committee of anagement in accordance with, and for purposes of IAC Code Set Volume 4 (Device Requirements and Cryptographic anagement). Exchange Settlement Account and ESA means an exchange settlement account, or similar account, maintained by a Framework Participant with the RBA used for, among other things, effecting settlement of inter-institutional payment obligations. Fallback Transaction means an AT Transaction initiated using a chip Card, which is processed and authorized by the Issuer using magnetic stripe data. File Recall Instruction means a file in the format prescribed by the Reserve Bank of Australia and complying with the specifications for the RITS Low Value Settlement Service which can be accessed via a link on the Company s extranet. File Recall Response means a response to a File Recall Instruction, generated by the RITS Low Value Settlement Service. File Settlement Advice means an advice in relation to a File Settlement Instruction, generated by the RITS Low Value Settlement Service. File Settlement Instruction means a file in the format prescribed by the Reserve Bank and complying with the specifications for the RITS Low Value Settlement Service which can be accessed via a link on the Company s extranet. File Settlement Response means a response to a File Settlement Instruction, generated by the RITS Low Value Settlement Service. 1.10
16 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Framework Participant means a Constitutional Corporation: which is deemed to be a Framework Participant pursuant to Regulation 4.4; or whose embership Application has been accepted pursuant to Regulation 4.3(f); and in each case whose membership has not been terminated pursuant to Regulation 6.5. HAC and Hash-based essage Authentication Code is a specific construction for calculating a message authentication code (AC) involving a cryptographic hash function in combination with a secret key. HACs are formed in conformance with AS2805:4.2 Electronic funds transfer Requirements for interfaces Information technology -- Security techniques -- essage Authentication Codes (ACs) - echanisms using a dedicated hashfunction. Hot Card means a Card which has been reported by the Cardholder as lost or stolen, or for which there is evidence of fraudulent use. IA Participant means a Framework Participant which is either: an Issuer; or an Acquirer; or a body corporate which represents one or more Issuers or Acquirers and, in such capacity, settles directly in accordance with Regulation 11.3(ii) for the value of the payment obligations arising from the Interchange Activities of those Acquirers or Issuers. IAC means the Issuers and Acquirers Community constituted by the IAC Regulations. IAC Code Set has the meaning given in the IAC Regulations. IAC Operational Broadcast means the form set out in Annexure D to IAC Code Set Volume 1 (Introduction and ember Obligations). IAF or Issuers and Acquirers Forum means the governing body for the IAC constituted by Part 7 of the IAC Regulations. IC Card and ICC means a Card that contains an integrated circuit and that conforms to the EV specifications. 1.11
17 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Institutional Identifier Change Date means one of at least three dates in each calendar year specified by the Committee of anagement and notified by the Company to IA Participants prior to the commencement of that calendar year as being the Institutional Identifier Change Dates for that year. Interchange means the exchange of Items for value between Acquirers and Issuers, via an Interchange Link, as a result of the use of an Issuer s Card by a Cardholder to generate a Transaction. Interchange arrangements may, but need not, be reciprocal. Interchange Activity means: the direct or indirect exchange of Items for value between Acquirers and Issuers, as a result of the use of an Issuer s Card by a Cardholder to generate a Card Payment from facilities owned and/or operated by the Acquirer or a third party. Interchange arrangements may, but need not be, reciprocal; or the exchange of Card Payment instructions and related messages between Acquirers and Issuers, pursuant to the rules of an Approved Card Payment System; or any other Card-based electronic interchange activities from time to time approved for the purposes of this definition by the IAF. Interchange Agreement means an agreement between an Acquirer and an Issuer that regulates the arrangements relating to Interchange Activity between them. Interchange Fee means a fee charged to one party to an Interchange Activity by the other party to the Interchange Activity for access to its consumer electronic payments facilities. Interchange Line means the physical communications infrastructure that provides the medium over which Interchange Activity is supported. An Interchange Line contains, at a minimum, one Interchange Link. Interchange Line Encryption means encryption of the entire message, with the exception of communication headers and trailers that is being passed across an Interchange Line using, as a minimum, double-length keys and a triple-des process. Interchange Link means the logical link between an Acquirer and an Issuer which facilitates Interchange Activity between them. Interchange Links are supported physically by an Interchange Line, and are either direct between an Acquirer and Issuer or indirect via a third party intermediary. Interchange Link essage Authentication means calculation and verification of the essage Authentication Code (AC) that is being passed across an Interchange Link. 1.12
18 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS Interchange Link PIN Encryption means encryption of the PIN in accordance with AS 2805 part 3.1. Interchange Settlement Report means a report substantially in the form of Annexure A in IAC Code Set Volume 5 (Settlement Code). Internet Key Exchange and IKE is the protocol used to set up a security association in the IPsec protocol suite. ISO means an international standard as published by the International Standards Organization. Issuer means a Constitutional Corporation which, pursuant to the rules of an Approved Card Payment System, issues a Card to a Cardholder and, in connection with any Card Payment effected using that Card: assumes obligations to the relevant Cardholder, which obligations are in the first instance discharged on its behalf by an Acquirer; and engages, directly or indirectly, in Interchange Activity with that Acquirer as a result. Issuer Identification Number and IIN means a six digit number issued by ISO or Standards Australia that identifies the major industry and the card issuer. The IIN also forms the first part of the primary account number on the Card. Issuer Sequence Number means a one or two digit number used at the option of the Issuer to identify a Card which may have the same primary account number as another Card and possible different accessible linked accounts. Items means Credit Items or Debit Items. Key Encrypting Key and KEK means a key which is used to encipher other keys in transport and which can be used to exchange Session Keys between two systems. Key Loading Device and KLD means a hardware device and its associated software that is used to inject keys into a Terminal. Key Transfer Device and KTD means a hardware device that is used to transfer a cryptographic key between devices. Typically KTDs are used to transfer keys from the point of creation to Terminals in the field. Lead Institution means a financial institution responsible for direct settlement of scheme payment obligations. Letter of Approval means a letter, issued by the Company, approving the use of a Secure Cryptographic Device within IAC. 1.13
19 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS LVSS means the RITS Low Value Settlement Service. LVSS BCP Arrangements means the contingency plan and associated documents published by the Reserve Bank of Australia for the purposes of the RITS Low Value Settlement Service, and which can be accessed via a link on the Company s extranet. LVSS Contact means the person nominated by a IA Participant as its primary contact for LVSS inquiries, as listed on the Company s extranet. erchant means a person which delivers goods or services to a Cardholder at point of sale and which, in the normal course, is reimbursed by the Acquirer to which, from the Terminal that it operates, it electronically transmits that Transaction. essage Authentication Code and AC A code, formed using a secret key, appended to a message to detect whether the message has been altered (data integrity) and to provide data origin authentication, ACs are formed in conformance with AS 2805 part 4 series. Nine A (9am) Settlement means the multilateral settlement of obligations arising from previous days clearings of low value payments which occurs in RITS at around 9am each business day that RITS is open. NODE or Node means a processing centre such as an Acquirer, an Issuer, or an intermediate network facility. Originator means the party (for example an Acquirer direct settler or Lead Institution) which, as a result of either acquiring a Transaction or, in the case of a Lead Institution, by arrangement, is responsible for the submission of a File Settlement Instruction in accordance with this IAC Code Set and the requirements of the RITS Low Value Settlement Service. Partial Dispense means a Transaction that results in an amount of Cash being dispensed from an AT that is less than the amount requested by the Cardholder. PCI means the Payment Card Industry Security Standards Council. PCI Evaluation Report means an evaluation report, prepared by an Approved Evaluation Facility, which evidences the compliance of a device submitted for approval under Part 3 of IAC Code Set Volume 4 (Device Requirements and Cryptographic anagement) with the requirements set out in PCI PTS version 3.x. (PCI standards can be found at https://www.pcisecuritystandards.org). 1.14
20 IAC CODE SET VOLUE 6 AT SYSTE CODE PART 1 INTRODUCTION, INTERPRETATION AND DEFINITIONS PCI Plus Evaluation Report means an evaluation report, prepared by an Approved Evaluation Facility, which evidences the compliance of a device submitted for approval under Part 3 of Volume 4 with the PCI Plus Requirements, and if applicable, includes any delta report prepared in respect of the device. PCI Plus Requirements means the requirements set out in Annexure B of IAC Code Set Volume 4 (Device Requirements and Cryptographic anagement), being requirements for device approval in accordance with AS 2805 Annexes A, B and D, which are determined by the Company to be additional to the requirements of PCI PTS v 3.x. PCI Points means the attack potential calculated in accordance with Appendix B of the Payments Card Industry (PCI) document PCI PIN Transaction Security Point of Interaction odular Derived Test Requirements, version 3.0, PED means a PIN Entry Device. Physically Secure Device means a device meeting the requirements specified in AS 2805 part 3.1 for a physically secure device. Such a device, when operated in its intended manner and environment, cannot be successfully penetrated or manipulated to disclose all or part of any cryptographic key, PIN, or other secret value resident within the device. Penetration of such a device shall cause the automatic and immediate erasure of all PINs, cryptographic keys and other secret values contained within the device. PIN means a personal identification number which is either issued by an Issuer, or selected by a Cardholder for the purpose of authenticating the Cardholder by the Issuer of the Card. PIN Entry Device and PED means a component of a Terminal which provides for the secure entry and encryption of PINs in processing a Transaction. Prepaid Card means a Card that: enables the Prepaid Cardholder to initiate electronic funds transfers up to a specified amount (subject to any other conditions that may apply); and draws on funds held by the Prepaid Program Provider or third party by arrangement with the Program Provider (as opposed to funds held by the Prepaid Cardholder). The definition of a Prepaid Card extends to both single use and reloadable/multiple use Cards. Prepaid Cardholder means a person that is in possession of a Prepaid Card. Prepaid Program Provider means either: 1.15
AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519. Manual CONSUMER ELECTRONIC CLEARING SYSTEM FRAMEWORK (CS3)
Effective: 1 January 2015 Version 300 AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519 A Company Limited by Guarantee Manual for CONSUMER ELECTRONIC CLEARING SYSTEM FRAMEWORK (CS3) Volume
CECS MANUAL CONSUMER ELECTRONIC CLEARING SYSTEM
Effective 26 August 2014 Version E229 AUSTRALIAN PAYENTS CLEARING ASSOCIATION LIITED ABN 12 055 136 519 A Company limited by Guarantee CECS ANUAL for CONSUER ELECTRONIC CLEARING SYSTE (CS3) Commenced 14
AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519 COMMUNITY OF INTEREST NETWORK (COIN) OPERATING MANUAL
Effective 1 July 2015 Version E005 AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519 A Company limited by Guarantee COMMUNITY OF INTEREST NETWORK (COIN) OPERATING MANUAL for AUSTRALIAN
Effective 9 May 2016 Version E006 AUSTRALIAN PAYMENTS CLEARING ASSOCIATION LIMITED ABN 12 055 136 519 A Company limited by Guarantee COMMUNITY OF INTEREST NETWORK (COIN) OPERATING MANUAL Copyright 2010-2016