User manual

Page 31 of 61

MS246 User Manual

8.3 DUKPT Level 3 Data Output Enhanced Format

This mode is used when all tracks must be encrypted, encrypted OPOS support is

required, when the tracks must be encrypted separately, when cards other than type 0

(ABA bank cards) must be encrypted, or when track 3 must be encrypted. This format is

the standard encryption format, but not yet the default encryption format.

1. Encryption Output Format Setting:

Command: 53 85 01 <Encryption Format>

Encryption Format:

‘00h’: Original Encryption Format.

‘01h’: Enhanced Encryption Format.

2. Encryption Option Setting: (for enhanced encryption format only)

Command: 53 84 01 <Encryption Option>

Encryption Option: (default 08h)

bit0: 1 – track 1 force encrypt.

bit1: 1 – track 2 force encrypt.

bit2: 1 – track 3 force encrypt.

bit3: 1 – track 3 force encrypt when card type is 0.

Note:

1) When force encrypt is set, this track will always be encrypted, regardless of the

card type. No clear/mask text will be sent.

2) If and only if in enhanced encryption format, each track is encrypted

separately. Encrypted data length will round up to 8 or 16 bytes.

3) When force encrypt is not set, the data will be encrypted in original encryption

format, that is, only track 1 and track 2 of type 0 cards (ABA bank cards) will be

encrypted.

3. Hash Option Setting:

Command: 53 5C 01 <Hash Option>

Hash Option: (‘0’ – ‘7’)

Bit0: 1 – track 1 hash will be sent if data is encrypted.

Bit1: 1 – track 2 hash will be sent if data is encrypted.

Bit2: 1 – track 3 hash will be sent if data is encrypted.