UK Switch

[Amol Natu]

Hi

Thanks folks for providing this info.
Though I agree, that the question was off-topic, this was a good forum for a
non-UK resident to find out certain UK market information.
I am involved with a similar project in the UAE wherein UAE switch compliant
cards would be used on Internet (basically card holder not present).
Security perspectives are obviously a key to this roll-out given the fact
that the UAE switch member cards do not have such detailed charge-back
kindoff facilities like their counter part credit cards.
What I gather from you is that in addition card number & expiry/start dates
an issue number (probably just a sequence) which is printed behind cards is
used like a PIN (rather CVV2/CVC2)

Can the buyer charge-back such internet purchases with his issuer ? Are
there any additional security solutions that some more proactive banks have
taken ?

Cheers
Amol

-----Original Message-----
From: ukcrypto-admin@chiark.greenend.org.uk
[mailto:ukcrypto-admin@chiark.greenend.org.uk]On Behalf Of Philip
Rowlands
Sent: Wednesday, 05 June, 2002 6:49 PM
To: ukcrypto@chiark.greenend.org.uk
Subject: Re: UK Switch


On Wed, 5 Jun 2002, Roland Postle wrote:

>They usually ask for the valid-from date and/or the issue number. Not all
>Switch cards have the issue number, but where they do it seems to be very
>important.

I think this is because the card number is derived from your account
details, e.g. <standard prefix>+<sort code>+<account number>+<check
digit>. That's certainly how it appears for my Natwest card.

Therefore, when fraud or card loss occurs, they can't create a new card
number, only a new issue number. Without it, the transaction is
probably refused. The issue numbers are, in my experience, both highly
predictable and sequential.


Cheers,

Phil