Set card PIN

Setting a pin for the physical card of a user in the system. Due to security considerations and guidelines imposed by PCI-DSS, this PIN can never be transmitted as a clear text. Therefore, the PIN Block would need to be encrypted before it can be passed to the API. Clients will be provided with a ZPK per program. Along other factors, this ZPK will be used to generate and encrypt the PIN Block. To increase security for fraud prevention, a threshold will be in place as to how many times a PIN reset can be attempted within a given period.
> ### Note > It is highly recommended that you implement a KMS or HSM for the safe storage of the ZPK provisioned for your program.
> ### Note > Please follow the "PIN Block Encryption Guide" below to help you generate the PIN Block of the user-enrolled PIN. Please also take note of the differences in the common PIN Block algorithms available in the internet with that of the MatchMove PIN Block algorithm. Though both uses the same Triple-DES encryption, the common ones uses the combination of PIN and PAN to generate the PIN Block, while MatchMove uses PIN and MOBILE NUMBER.


### PIN Block Encryption Guide
Steps | Description | Raw Input Requirements | Sample Raw Input | Formula | Processed Input Requirements | Sample Processed Input ---------|----------|---------|---------|---------|---------|---------

1. Get ZPK (Zone PIN Key)

|

ZPK to be generated and provided by MatchMove to the integrating Partner

|

32 Hexadecimal Characters

| 053CDF9F3E8B0128
156255F737B2AF5C | N/A |

32 Hexadecimal Characters

| 053CDF9F3E8B0128
156255F737B2AF5C

2. Get Padded PIN Code

|

The PIN that the Cardholder will submit

|

4 Numeric Characters

| 1234 |

'0' + 'PIN Length' + 'PIN' then Pad with F at the end until 16 hexadecimal characters

|

16 Hexadecimal Characters

| 041234FFFFFFFFFF

3. Get Padded Mobile Number

|

The Mobile Number that the Cardholder enrolled

|

Max. 15 Numeric Characters (Mobile Country + Mobile Number)

| 6589765432 |

Pad input with 0 in the front until 16 numeric characters

|

16 Numeric Characters

| 0000006589785432

4. Encrypt PIN Block

|

XOR(Padded PIN Code, Padded Mobile Number) encrypted with the ZPK

|

16, 32 Hexadecimal Characters accordingly:
- XOR(Padded PIN Code, Padded Mobile Number)
- ZPK

|

XOR(041234FFFFFFFFFF, 0000006589785432)

ZPK:
053CDF9F3E8B01281
56255F737B2AF5C

|

Triple-DES Encryption

Triple-DES_Encrypt( XOR(Padded PIN Code, Padded Mobile Number), ZPK)

|

16 Hexadecimal Characters

|

2F08670F5615DE76

(Use this 'PIN Block' as the parameter input for the 'pinblock' Set Pin API)