This article was accepted into the corpus but its outbound wikilinks were never NER-processed — typical at the deepest BFS hop or when the run's entity cap was reached. No expansion funnel to show.
| EMV 4.3 | |
|---|---|
| Name | EMV 4.3 |
| Developer | EMVCo |
| Released | 2009 |
| Status | Published |
| Preceded by | EMV 4.2 |
| Succeeded by | EMV 4.3.1 |
EMV 4.3 EMV 4.3 is a published specification from EMVCo that defines interoperable standards for chip-based payment cards and terminals, aligning technical messaging and application behavior for global payment ecosystems. It refines prior work to address evolving use cases across contact, contactless, and offline environments, coordinating with implementations from major networks and processors to ensure consistent cardholder verification and transaction authorization. EMV 4.3 influenced deployments across banks, vendors, and certification bodies while interfacing with international standards and regulatory programs.
EMV 4.3 was produced by EMVCo, a consortium including American Express, Discover Financial Services, JCB, Mastercard, Visa, and UnionPay. The specification builds on earlier releases such as EMV 4.2 and integrates input from laboratories like UL LLC and Intertek, as well as industry groups including PCI Security Standards Council and national schemes like Fédération Bancaire Française. EMV 4.3 clarifies application selection, cardholder verification methods, and data authentication, coordinating expectations among issuers such as Bank of America, HSBC, and Deutsche Bank and terminal vendors like Ingenico, Verifone, and NCR Corporation.
EMV 4.3 details data elements, APDU command flows, and state machines used by chip applications, aligning with smartcard technologies championed by suppliers such as NXP Semiconductors, STMicroelectronics, and Infineon Technologies. It specifies cryptographic algorithms and key management aligned with international standards bodies including ISO/IEC JTC 1/SC 17 and International Organization for Standardization, while referencing algorithm families used by RSA Security and elliptic-curve implementations favored by payment networks. Transaction flow descriptions include Generate AC, Get Processing Options, and Read Record sequences for contact and contactless interfaces, describing interaction patterns relevant to acquirers like Fiserv and processors such as TSYS and Global Payments.
EMV 4.3 defines normative test cases used by certification laboratories operated by organizations such as UL, SGS, and TÜV SÜD, and guides conformance programs run by brand owners like Visa Inc. and Mastercard Incorporated. Certification covers terminal type approval, kernel validation, and issuer application certification, with governance intersecting national payment authorities including Bank of England, Federal Reserve System, and European Central Bank policy frameworks. Compliance procedures ensure interoperability among point-of-sale integrators such as Square, Inc., ATM vendors like Diebold Nixdorf, and issuer processing platforms run by First Data Corporation.
Implementers migrated from EMV 4.2 to 4.3 in phased programs coordinated by regional schemes such as EFTPOS Australia and consortiums including Moneris. Migration strategies involved firmware updates for terminals provided by vendors like PAX Technology and kernel replacements in hosted payment applications from providers such as Worldline. Issuers planned reissuance or profile updates for card portfolios held by institutions including Santander, ING Group, and BBVA, while payment facilitators aligned certification roadmaps with acquirers like Adyen and Stripe, Inc..
EMV 4.3 strengthened recommendations for dynamic data authentication and offline data authentication, complementing cryptographic guidance from bodies like NIST and algorithm standards from ISO/IEC 9798. It formalized protections against relay and skimming attacks through transaction-specific counters and unpredictable number mechanisms used by issuers such as Citigroup and Wells Fargo, and informed risk management practices adopted by fraud prevention vendors including ThreatMetrix and RSA, the security division of EMC. The specification also aligned with contactless risk management techniques implemented by transit operators like Transport for London and Oyster card-using systems.
EMV 4.3 accelerated global chip migration programs promoted by networks Visa Europe and Mastercard Worldwide, influencing large deployments in markets including United Kingdom, Canada, and Australia. Retailers such as Walmart, Tesco, and Carrefour adapted payment terminals and staff procedures to support EMV behavior changes advocated by the specification, while governments and regulators in jurisdictions like France and Germany referenced EMV guidance in liability shift policies. The standard catalyzed ecosystem services from integrators like Accenture and IBM and prompted academic and industry research from institutions such as Massachusetts Institute of Technology and University of Cambridge into secure payment design.
EMV 4.3 succeeded EMV 4.2 in 2009 and was followed by maintenance releases and errata addressing implementation clarifications and emerging threats, with subsequent minor revisions such as EMV 4.3.1 and companion documents including Contactless Specifications and Kernel Implementation Guides. Updates were coordinated by EMVCo governance bodies and technical working groups with participation from card brands Mastercard, Visa, JCB, and testing houses including Laboratoire National de Métrologie et d'Essais. The revision process engaged acquirers, issuers, terminal vendors, and regulatory stakeholders to ensure that enhancements reflected operational experience from deployments with organizations like Metro Bank and Banco Santander.
Category:Payment standards