Skip to main content

Transaction Tap Data Content

Element tag inside the transactionData element is mandatory in cases when transaction was initiated by the card.

Value should be in the BER-TLV format and encoded in the BASE64 format (not URL safe). Value should contain the following tags (order of the tags is not important):

  • DFFF8401 - Encryption algorithm specification. Required tag, should have length 1 and can contain one of the following binary values:
    • 00h - transaction data is not encrypted (allowed only on DEV & TEST environments).
    • 01h - transaction data is encrypted using 128-bit AES/CBC/PKCS5 encryption algorithm and the TTK key specified in the tag DFFF8402.
    • 02h - transaction data is encrypted using 128-bit AES/CBC/PKCS5 encryption algorithm and the transaction-specific key, derived from the TTK key specified in the tag DFF8402. Key derivation value is specified in the tag DFFF8403.
    • 03h - transaction data is encrypted using DUKPT+3DES/CBC/NoPadding encryption algorithm and the KSN value specified in the tag DFFF8404.
    • 04h - transaction data is encrypted using DUKPT+AES/CBC/NoPadding encryption algorithm and the KSN value specified in the tag DFFF8404
  • DFFF8402 - TTK key ID. Required only when tag DFFF8401 value is 01h or 02h. Should contain TTK key ID encoded as BCD number.
  • DFFF8403 - Derivation value used for deriving transaction-specific key. Required only when tag DFFF8401 value is 02h. Should have length 4 and value contains 32-bit timestamp encoded as binary 4-byte unsigned int in network byte order (big-endian).
  • DFFF8404 - KSN value. Required only when tag DFFF8401 value is 03h or 04h. Used in case of DUKPT encryption algorithms.
  • DFFF8405 - Encrypted card transaction data. Required only if tag DFFF8401 value is not 00h. Length is dynamic and value is encrypted using the encryption algorithm specified in the tag DFFF8401. Encrypted data should contain at least some of the following TLVs: 57, 5A, 5F24.
  • FFFF8406 - Unencrypted card transaction data. Required only if tag DFFF8405 is missing.

Combined data from DFFF8405 and FFFF8406 should contain all TLVs as required by the corresponding card scheme (see Card Transaction Data). Tag FFFF8406 may contain the tags 57, 5A, 5F24 only if DFFF8401 is set to 00h. Otherwise, those tags will be ignored and the values will be taken from DFFF8405 instead. If the same tag is present in both DFFF8405 and FFFF8406 then only the value from DFFF8405 will be used.s

Card Transaction Data

transactionData.tag can contain different tags based on the connected acquirer. Following table describes the differences between acquirers.

M - Mandatory, O - Optional, C - Conditional (implementation needs to be coordinated with Sfey)

TagData ElementTPSNETSSwedbankBankart
4FApplication Identifier (AID)O---
50Application LabelO---
57Track 2 Equivalent DataM---
5AApplication Primary Account Number (PAN)M---
82Application Interchange ProfileMMMM
84Dedicated File (DF) NameMMMM
95Terminal Verification ResultsMMMM
9ATransaction DateMMMM
9BTransaction status informationO---
9CTransaction TypeMMMM
5F24Application Expiration DateO---
5F28Issuer Country CodeO---
5F34PAN Sequence NumberMMMM
5F2ATransaction Currency CodeMMMM
9F02Authorized Amount (Numeric)MMMM
9F03Amount Other (Numeric)MMMM
9F06Application Identifier (AID) - TerminalO---
9F09Terminal Application VersionCOMM
9F10Issuer Application DataMMMM
9F19Token Requestor IDO---
9F1ATerminal Country CodeMMMM
9F1DTerminal Risk Management DataO---
9F1ETerminal / IFD Serial NumberCOMM
9F21Transaction TimeM---
9F24PARO---
9F26Application CryptogramMMMM
9F27Cryptogram Information DataMMMM
9F33Terminal CapabilitiesOMMM
9F34Cardholder Verification Method (CVM) ResultMMMM
9F35Terminal TypeCOMM
9F36Application Transaction Counter (ATC)MMMM
9F37Unpredictable NumberMMMM
9F41Terminal Transaction CounterO---
9F46ICC Public Key CertificateO---
9F4EMerchant Name and LocationO---
9F53Transaction Category CodeOO--
9F5AApplication Program Identifier (AID)O---
9F5BIssuer Script ResultsO---
9F66Terminal Transaction Qualifiers (TTQ)O---
9F6CCard Transaction Qualifiers (CTQ)O---
9F6EForm Factor IndicatorC-MM
DF17Terminal capabilitiesO-MM
DFFFDF21ODA ResultO---

Transaction Data from Ridango contactless readers DV15S and DV18L

Ridnago contactless readers DV15S and DV18L send fully encrypted tap data. Device API is able to receive this tap data if it is encoded into the tag element inside the transactionData element as follows.

Value should be in the BER-TLV format and encoded in the BASE64 format (not URL safe). Value should contain the following tags (order of the tags is not important):

  • DFFF8401 - Encryption algorithm specification. Should have length 1 and can contain the following binary value:
    • 01h - transaction data is encrypted using 128-bit AES/CBC/PKCS5 encryption algorithm and the TTK key specified in the tag DFFF8402.
  • DFFF8402 - TTK key ID. Should contain TTK serial number from the Ridango contqactless reader EMV Authorization Request message, encoded as BCD number.
  • DFFF8405 - Encrypted card transaction data. Length should correspond to the binadry data length and value shoud be the encrypted payload received from the Ridango contactless reader EMV Authorization Request or Transaction Cryptogram message (sent vi Ridango contactless reader CAN protocol FILE_DOWNLOAD command with file id 0x80).