PIN management via API

The PIN management API endpoints are a robust and secure solution designed to facilitate the setting, unblocking, getting and verifying of PIN for cards or tokens.

It's essential to note that PINs are specifically applicable to physical cards, and these cards are initially generated with a random PIN before being printed.

The SetPIN functionality is invoked to modify an existing PIN to a new value.

Banking.Live incorporates the following key functionalities, supported by the respective API endpoints:

  1. Set PIN functionality
  2. Unblock PIN functionality
  3. Get PIN functionality
  4. Verify PIN functionality

PIN management involves the processes and functionalities related to the management and validation of Personal Identification Numbers (PIN's) associated with payment cards. This crucial aspect ensures the security and integrity of electronic transactions.

📓

You can read more on PIN verification and the differences between online and offline PIN here.


Set PIN functionality

The SetPIN functionality enables users to establish a secure Personal Identification Number (PIN) for a card or token. This PIN serves as an essential element for authenticating transactions and ensuring the security of sensitive financial information.

Set PIN process

  1. User request: users initiate a request to set a PIN for a specific card/token.
  2. EncryptedPIN submission: the user provides an encrypted PIN, safeguarded with the client processing key (CP Key), to the system.
  3. PIN strength verification: Banking.Live verifies the strength of the submitted PIN, ensuring it adheres to security criteria:
    1. No simple number sequences (e.g. 1234, 0000).
    2. No repeated numbers (e.g. 1111, 22222).
    3. Minimum length of 4 digits.
    4. Maximum length of 12 digits.
  4. PIN setting: upon successful verification, the system sets the PIN for the specified card/token.
  5. Confirmation: Banking.Live provides a confirmation response, indicating that the PIN has been successfully set.

Set PIN API endpoint

  • The Set PIN API endpoint to use is part of the PaySecure API, you can view and try out SC Set PIN V2 here.

Unblock PIN functionality

The UnblockPIN functionality addresses situations where a PIN becomes blocked due to three consecutive failed attempts. It allows users to restore access to their cards or tokens by unblocking the PIN.

Unblock PIN process

  1. User request: users initiate a request to unblock the PIN for a specific card/token.
  2. PINblock check: Banking.Live checks if the PIN for the specified card/token is currently blocked.
  3. Unblock request validation: if the PIN is blocked, Banking.Live validates the unblock request.
  4. PINunblocking: upon successful validation, Banking.Live unblocks the PIN for the specified card/token.
  5. Confirmation: Banking.Live provides a confirmation response, indicating that the PIN has been successfully unblocked.

Unblock PIN API endpoint

  • The API to use is part of the PaySecure API, you can view and try out SC Unblock PIN V2 here.

Get PIN functionality

The Get PIN functionality allows users to retrieve and view the existing PIN for a specific card/token.

Get PIN API endpoint

  • The Get PIN API endpoint to use is part of the PaySecure API, you can view and try out SC Get PIN V2 here.

Verify PIN functionality

The Verify PIN functionality allows users to verify the existing PIN for the provided PAN.

Verify PIN API endpoint

  • The Verify PIN API endpoint to use is part of the PaySecure API, you can view and try out SC Verify PIN V2 here.