U.S. Visa Contactless Transit Terminal Testing – Version 2.

0 August 2019

Overview

This document provides guidance to mass transit merchants and processors / acquirers in the U.S.
when testing of a terminal accepting contactless payments at a transit gate.

Scope

Only the Visa Mass Transit Transaction (MTT) and Known Fare Transaction (KFT) models using Offline
Data Authentication (ODA) are in scope of this document.

Definitions

Term Description
Back Office A component within a transit merchant’s systems that processes contactless transactions from transit
readers and performs any or all of the following: journey construction, fare calculation, risk
management, or / and payment processing.

Deferred A card present environment Authorization that is requested after the cardholder has left the point of
Authorization transaction.

Known Fare In this model, the Visa Contactless Card is used at points of access to the transit service on readers
Transaction that accept contactless payments only. The fare charged is always known by the reader.
(KFT) model

Mass Transit In this model, the Visa Contactless Card is used at points of access to the transit service on readers
Transaction that accept contactless payments only. The final fare charged is not always known at the time of
(MTT) model travel. The final fare charged is calculated at the end of a travel period (typically 24 hours, but can be
intra-day) by the Public Transport Operator or Authority (PTO) based on journeys made during that
travel period.

Offline Data A process whereby the card is validated at the point of transaction using RSA public key technology to
Authentication protect against counterfeit or skimming.
(ODA) Not to be confused with Offline Authorization which is a method of processing a transaction without
sending the transaction online to the issuer for authorization.

Mass Transit A Public Transport Operator or Authority (PTO) that is assigned Merchant Category Code (MCC) 4111
Merchant (Local and Suburban Commuter Passenger Transportation, including Ferries), 4112 (Passenger
Railways), or 4131 (Bus Lines), and that uses one or more of the models described in the “Visa
Contactless Transit Implementation Guide” to accept Visa card payments.

U.S. Visa Contactless Transit Terminal Testing Visa Confidential 1

 Related Documents

Document Location
Contactless Device Evaluation Toolkit (CDET) User Guide version 2.3 – Revision A Visa Online

Visa Contactless Transit Implementation Guide Visa Online

Visa Contactless Transit Terminal Requirements and Implementation Guide Visa Online

CDET v2.3 Revision A - Corrections and Clarifications Visa Online

MTT Issuing and Acquiring Test Scripts Visa Online

Visa Smart Debit/Credit Certificate Authority Public Keys Visa Technology Partner

Contactless Transit Terminal Testing

The objective of transit terminal testing is to ensure that the transit gate opens or remains closed based on the
result of Offline Data Authentication (ODA) and that, subsequently, the deferred authorization message is sent
online with the correct information.
ODA is performed by the reader to confirm that the card is genuine. The U.S. is a zero floor limit country, so
authorization is required to be performed online. However, due to the high consumer throughput needed at
transit fare gates, authentication is performed offline to quickly confirm that the card is genuine. After this, the
consumer is allowed through the transit fare gate, and a Deferred Authorization is subsequently performed.
Prerequisites before starting testing in the U.S. at the terminal level:
 The terminal device must be approved to:
o Visa Contactless Payment Specification (VCPS) version 2.1.1 or higher (Visa strongly recommends
using VCPS 2.1.3 or later) and the Visa ODA for qVSDC Online Specification (VOQOS) 1.3
o or VCPS 2.1.3 or higher and the Visa Contactless Transit Kernel Specification (VCTKS) Version
1.0.1 or higher.
 The terminal device must support Quick Visa Smart Debit/Credit (qVSDC).
 The terminal device must support fDDA, and include the appropriate Visa Certificate Authority (CA) Public
keys for transit. The test keys can be found in the Visa Smart Debit/Credit Certificate Authority Public Keys
document.
 When supporting pre-processing the following contactless limits recommendations and requirements
would apply:
o Cardholder verification must not be performed. This can be achieved by setting the CVM Limit
to the maximum value or by setting the Terminal Transaction Qualifiers (TTQ) Byte 2 bit 7 to
0b.
o Reader Contactless Floor limit must be set to zero.
o Contactless Transaction limit must be disabled or set to maximum amount.
 If not supporting pre-processing then, the contactless limits recommendations and requirements
above are disabled.
 Regardless of the reader’s preliminary transaction processing, the following table describes the TTQ
values outcome.

U.S. Visa Contactless Transit Terminal Testing Visa Confidential 2

The following table summarizes the required TTQ bit settings outcome:
Byte Bit Value

1 8 0b = MSD not supported

7 RFU (0b)

6 1b = qVSDC supported

5 0b = EMV contact chip not supported

4 0b = Online-capable reader
TTQ Byte 1 bit 4 is defined as the 'Offline-only reader' bit. A value of 1b indicates that the reader is
offline-only and a value of 0b indicates that the reader is online capable.

3 1b = Online PIN supported

Although transit terminals do not perform online PIN capture, transit terminals indicate support for
online PIN to prevent some cards from being unnecessarily rejected.

2 1b = Signature supported
Although transit terminals do not perform signature capture, transit terminals indicate support for
signature to prevent some cards from being unnecessarily rejected.

1 1b = Offline Data Authentication (ODA) for online authorizations supported

2 8 1b = Online cryptogram required*

7 0b = CVM not required

6 0b = (Contact chip) Offline PIN not supported

5-1 RFU (00000b)

3 8 0b = Issuer update processing not supported

7 1b = Mobile functionality and CDCVM supported

6-1 RFU (000000b)

4 8-1 RFU (00000000b)

*The Visa Contactless Transit Terminal Requirements and Implementation Guide will be updated to also allow this value.

Steps to follow when performing contactless transit terminal testing:

Step 1] Contact your Transit Project Implementation Manager to open a request with Visa’s Global Client Testing
(GCT) team to schedule attended host testing in addition to the required CCRT testing as outlined below. If you do
not have a Transit Project Implementation Manager, please contact your Visa Account Manager.
The following testing must be submitted and reviewed by Visa’s Global Client Testing (GCT) team using the Chip
Compliance Reporting Tool (CCRT).
Step 2] In order to complete Level (L3) testing, execute applicable CDET Version 2.3 – Revision A (or later) and U.S.
specific Transit Test Cases:
Test cases within this document are only relevant to transit readers operating Visa KFT or MTT models. In the table
below, a mandatory test case is applicable, regardless of the pre-requisite and regional requirement defined in the
CDET User Guide. A conditional test case is applicable only if the condition is met.

U.S. Visa Contactless Transit Terminal Testing Visa Confidential 3

 CDET test Conditional (C) / Test case
Case Mandatory(M) Pass criteria / User Validation
1 M Execute CDET test case 1 c) only.
2 M Execute CDET test case 2c) only.
3 M Execute CDET test case 3c) only.
4 M Execute CDET test case 4c) only.
5 M Execute CDET test case 5c) only.
6 M Execute CDET test case 6c) only.
7 C Execute CDET test case 7c) only.
Condition: if Electron
AID is supported
8 C Execute CDET test case 8c) only.
Condition: if Interlink
AID is supported
9 M Execute CDET test case 9c) only.
10 M Execute CDET test case 10c) only.
11 M Ensure that the reader/terminal returns to discovering processing after
removing the card from the RF field.

12 M Execute CDET test case 12c) only.

13 M Execute CDET test case 13c) only.
In CDET test case 13c), ignore the following note: “Note: transaction is
subsequently Declined in Deferred Authorization (international transactions
disallowed)”.
14 M Execute CDET test case 14c) only.
15 M Execute CDET test case 15c) only.
16 M Execute CDET test case 16c) only.
17 M Execute CDET test case 17c) only.
CDET U.S. Transit M
Test Case 1 Objective Expected Result
(US Debit Test card 2) Correct ODA successfully performed and Transit Gate
processing of a access permitted.
transaction at a Note: A deferred authorization message is built.
Visa MTT or KFT An error message or an offline decline is not
transit terminal. acceptable and indicates failure of the test.

CDET U.S. MSD M

only 6C.1 Objective Expected Result
(US MSD Only Test To ensure terminal TTQ Byte 1 bit 8 must be equal to 0b
card 6) accepting contactless (MSD not supported).
payments does not support
MSD contactless.

L3 contactless testing shall be performed with CDET version– Revision A or later and latest version of the CDET
corrections and clarifications document.

U.S. Visa Contactless Transit Terminal Testing Visa Confidential 4

Step 3] GCT will provide the following physical test plastics. Execute applicable Mass Transit Transaction
– back office test cases:
Case MTI Case Name and Reason Test Card
№

C = Conditional
M = Mandatory

O = Optional
1.1 0100/0110 Account Verification M* Other Card T#1

0100/0110 Transit Deferred Authorization

1.2 0100/0110 Transit Deferred Authorization M* Other Card T#1

0100/0110 Merchant Initiated Transaction (Debt Recovery, Resubmission)

1.3 0100/0110 Debt Recovery - VbV C Other Card T#1

1.4 0100/0110 Debt Recovery - eCommerce C Other Card T#1

1.5 0100/0110 Debt Recovery - MOTO C Other Card T#1

1.6 0100/0110 Transit Deferred Authorization - Historic Cryptogram Date M* Other Card T#1

1.7 0100/0110 Transit Deferred Authorization M* Other Card T#1

0400/0410 Transit Deferred Authorization Reversal to correct late passenger

passes or processing errors due to late data scenarios

0100/0110 Transit Deferred Authorization – repeated Authorization for new C

amount with same ATC and cryptogram data

M* Mandatory if service is supported.

Please refer to the latest version of the “MTT Issuing and Acquiring Test scripts” (worksheet: “Mass Transit Txn –
Acquiring”) for additional information.

Recommendations and requirements for testing:

 Merchants shall ensure transit readers comply with all Visa requirements defined for the MTT and KFT
models.
 Acquirers / processors should work closely with both Visa and transit merchants as soon as they begin
to implement an MTT or KFT project.
 In addition to the Mass Transit Transaction – Acquiring testing test cases, the back office managing the
online messages (e.g., online authorization, deferred authorization, Account Verification Request, etc.)
should be thoroughly tested.
 Acquirer / processor host system certification must be completed with Visa to ensure that the system
is capable of receiving and transmitting all required transaction data fields.

U.S. Visa Contactless Transit Terminal Testing Visa Confidential 5