ICC Public Key Certificate

What it is

The ICCIntegrated Circuit CardThe chip embedded in the card — i.e. the EMV “chip” itself.View in glossary → Public Key Certificate carries the card public key signed by the issuer key. During DDADynamic Data AuthenticationOffline check where the card signs unique, per-transaction data with its own private key — proving the chip is genuine and not a clone.View in glossary →/CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary → the terminal recovers the issuer key (from certificate 90), uses it to recover the ICCIntegrated Circuit CardThe chip embedded in the card — i.e. the EMV “chip” itself.View in glossary → public key from this certificate, and then verifies the card's dynamic signature — proving the card is genuine, not merely that its static data is authentic.

Where it appears

Read from the card record files; processed during DDADynamic Data AuthenticationOffline check where the card signs unique, per-transaction data with its own private key — proving the chip is genuine and not a clone.View in glossary →/CDACombined DDA / Application Cryptogram generationThe strongest offline authentication: the card signs the dynamic data and the transaction cryptogram together in one step, preventing tamper (“wedge”) attacks.View in glossary →.

Specification reference

Defined in: EMV 4.x Book 3 (Application Specification), Annex A — Data Element Dictionary

Decode & build this tag

Related tags