07.01.2014 Views

Part C: Appendices

Part C: Appendices

Part C: Appendices

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

HBCI<br />

HOMEBANKING COMPUTER INTERFACE<br />

- Interface Specification -<br />

<strong>Part</strong> C: <strong>Appendices</strong><br />

Published by:<br />

Bundesverband deutscher Banken e.V., Cologne<br />

Deutscher Sparkassen- und Giroverband e.V., Bonn<br />

Bundesverband der Deutschen Volksbanken und Raiffeisenbanken e.V., Bonn<br />

Verband öffentlicher Banken e.V., Bonn<br />

Version 2.2<br />

Edition: 2000-05-10


The present interface specification for an automatically usable, multi-bank home banking<br />

interface (referred to below as ”interface specification”) has been developed on behalf of the<br />

Federal German Central Banking Committee ("Zentraler Kreditausschuss"). It is herewith<br />

released for implementation in customer and financial institution (FI) systems.<br />

The interface specification is protected by copyright. Developers may use it free of charge for<br />

implementation in customer and financial institution (FI) systems. For this purpose, the<br />

unmodified interface specification may be copied and distributed on the conditions below.<br />

Redesign, editing, translation and all other alterations whatsoever of the present interface<br />

specification are prohibited. Identification marks, copyright notices and statements concerning<br />

ownership may not be changed under any circumstances.<br />

Since use of the interface specification is granted at no cost, no warranty or liability may be<br />

assumed for any errors it may contain or for any malfunction of any products thus developed.<br />

The Central Banking Committee may modify said specification at any time without prior notice.<br />

Developers may make the present interface specification in its unchanged form available to third<br />

parties free of charge, on the conditions stated above.<br />

This document can be retrieved from the Internet under http://www.hbci.de


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: List of contents<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

3<br />

VIII. APPENDICES<br />

VIII.1 Overview of segment identifiers................................................................... 7<br />

VIII.2 Overview of HBCI elements....................................................................... 13<br />

VIII.2.1 Messages 13<br />

VIII.2.2 Segment sequences.................................................................... 14<br />

VIII.2.3 Segments 15<br />

VIII.2.4 Data element groups................................................................... 21<br />

VIII.2.5 Data elements............................................................................. 25<br />

VIII.2.6 HBCI Elements............................................................................ 36<br />

VIII.3 Overview of message structure.................................................................. 57<br />

VIII.3.1 Standard session ........................................................................ 58<br />

VIII.3.2 Anonymous session .................................................................... 61<br />

VIII.3.3 Synchronisation........................................................................... 62<br />

VIII.3.4 Communications access ............................................................. 63<br />

VIII.3.5 Changing customer public key (RDH).......................................... 64<br />

VIII.3.6 Initial request for financial institution public key (RDH) ................ 65<br />

VIII.3.7 Initial transmission of customer public key (RDH)........................ 66<br />

VIII.3.8 Key blocking by the customer (RDH)........................................... 67<br />

VIII.3.9 Key blocking by the customer (DDV)........................................... 68<br />

VIII.4 HBCI basic character sets ......................................................................... 69<br />

VIII.4.1 ISO 8859-1 Subset German........................................................ 69<br />

VIII.4.2 ISO 8859-1 Subset English ......................................................... 69<br />

VIII.4.3 ISO 8859-1 Subset French.......................................................... 71<br />

VIII.5 Example session ....................................................................................... 72<br />

VIII.5.1 Message "Session initialisation" .................................................. 72<br />

VIII.5.2 Message "Single remittance"....................................................... 75<br />

VIII.5.3 Message "Show balance"............................................................ 77<br />

VIII.5.4 Message "Session end"............................................................... 79<br />

VIII.6 Principles governing communications media ............................................. 81<br />

VIII.6.1 T-Online 81<br />

VIII.6.1.1 ETSI 300 072 ("CEPT") ........................................................ 81<br />

VIII.6.1.2 EHKP .................................................................................... 85<br />

VIII.6.1.3 BtxFIF ................................................................................... 85


Chapter:<br />

VIII<br />

Page:<br />

4<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

List of contents<br />

VIII.6.2 TCP/IP 88<br />

VIII.6.2.1 Internet (WWW).................................................................... 88<br />

VIII.6.2.2 Direct access ........................................................................ 88<br />

VIII.6.2.2.1 Protocol requests .............................................. 88<br />

VIII.6.2.2.2 Security requirements ....................................... 89<br />

VIII.6.3 Other communications services................................................... 89<br />

VIII.7 Retrieving communications settings........................................................... 90<br />

VIII.8 Chip application for DDV............................................................................ 96<br />

VIII.8.1 Data of the application HBCI Banking for the type 0 card ............ 97<br />

VIII.8.1.1 DF_Banking .......................................................................... 98<br />

VIII.8.1.2 EF_KEY .............................................................................. 100<br />

VIII.8.1.3 EF_KEYD ........................................................................... 101<br />

VIII.8.1.4 EF_AUT .............................................................................. 102<br />

VIII.8.1.5 EF_AUTD ........................................................................... 103<br />

VIII.8.1.6 EF_PWD1........................................................................... 104<br />

VIII.8.1.7 EF_PWDD1 ........................................................................ 105<br />

VIII.8.1.8 EF_BNK.............................................................................. 106<br />

VIII.8.1.9 EF_MAC ............................................................................. 108<br />

VIII.8.1.10 EF_SEQ 109<br />

VIII.8.2 Data of the application HBCI Banking for the type 1 card .......... 110<br />

VIII.8.2.1 ADF of the application HBCI-Banking ................................ 112<br />

VIII.8.2.2 EF_RULE............................................................................ 114<br />

VIII.8.2.3 EF_KEY .............................................................................. 118<br />

VIII.8.2.4 EF_KEYD ........................................................................... 120<br />

VIII.8.2.5 EF_PWD............................................................................. 122<br />

VIII.8.2.6 EF_PWDD .......................................................................... 124<br />

VIII.8.2.7 EF_FBZ .............................................................................. 125<br />

VIII.8.2.8 EF_BNK.............................................................................. 126<br />

VIII.8.2.9 EF_MAC ............................................................................. 127<br />

VIII.8.2.10 EF_SEQ 128<br />

VIII.8.3 Space requirement of the application in the chip ....................... 129<br />

VIII.8.4 Terminal sequences (Type 0 and Type 1) Chip cards and<br />

terminal sequences ................................................................... 131<br />

VIII.8.4.1 Start session ....................................................................... 131<br />

VIII.8.4.2 Generate message ............................................................. 136<br />

VIII.8.4.3 Signing message ................................................................ 137<br />

VIII.8.4.4 Encrypting message ........................................................... 140<br />

VIII.8.4.5 Transmission session ......................................................... 143<br />

VIII.8.5 Macros 144<br />

VIII.8.5.1 MAC calculation / test......................................................... 145<br />

VIII.8.5.2 Encryption........................................................................... 148


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: List of contents<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

5<br />

VIII.8.6 Overview of the chip applications parameters (type 1) .............. 149<br />

VIII.9 Market identifiers ..................................................................................... 150<br />

VIII.10 Calculation of the check character for internal assignment data (Customer<br />

reference number) ................................................................................... 152<br />

VIII.10.1 Calculation procedure ............................................................... 153<br />

VIII.10.2 Example 154<br />

VIII.11 Country codes and currency codes.......................................................... 155<br />

VIII.12 European account addressing ................................................................. 156<br />

VIII.13 Bibliography............................................................................................. 162


Chapter:<br />

VIII<br />

Page:<br />

6<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

List of contents<br />

List of Illustrations<br />

Fig. 26: Structure of T-Online transfer page<br />

Fig. 27: Data elements of the application "Banking"<br />

Fig. 28: Data elements of the application "HBCI", account-related cards<br />

Fig. 29: Data elements of the application "HBCI", account-independent cards


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of segment identifiers<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

7<br />

VIII.1 Overview of segment identifiers<br />

ID Segment name Type<br />

1<br />

HIAOMS<br />

International remittance without text<br />

message<br />

Sender<br />

Ver-<br />

Additi Chapter<br />

2 sion onal 3<br />

GV I 1 - VII.5.2<br />

HIAUBS International remittance - parameters GV I 5 4 VII.5.1<br />

HIAZK Card display GV I 1 - VII.6.2<br />

HIAZKS Card display parameters GV I 1 - VII.6.2<br />

HIBPA General bank parameters AD I 2 IV.2<br />

HIDAA Pending standing order modifications GV I 3 2 VII.1.1.4.5<br />

HIDAAS Pending standing order modifications - GV I 3 2 VII.1.1.4.5<br />

parameters<br />

HIDAB Standing orders GV I 3 2 VII.1.1.4.4<br />

HIDABS Standing orders - parameters GV I 3 2 VII.1.1.4.4<br />

HIDAE Confirm standing order set up GV I 4 3 VII.1.1.4.1<br />

HIDAES Standing order setup - parameters GV I 4 3 VII.1.1.4.1<br />

HIDALS Cancel standing order - parameters GV I 3 2 VII.1.1.4.6<br />

HIDAN Confirm modification of standing order GV I 4 3 VII.1.1.4.2<br />

HIDANS Modify standing order - parameters GV I 4 3 VII.1.1.4.2<br />

HIDAS Confirmation of standing order interruption GV I 3 2 VII.1.1.4.3<br />

HIDASS Interrupt standing order - parameters GV I 3 2 VII.1.1.4.3<br />

HIDVK Return exchange rate GV I 1 - VII.7.1<br />

HIDVKS Exchange rate parameters GV I 1 - VII.7.1<br />

HIFDA Return financial data format GV I 1 - VII.9.2.4<br />

HIFDAS Request financial data format parameters GV I 1 - VII.9.2.4<br />

HIFDB Return processing status financial data GV I 1 - VII.9.2.2<br />

format<br />

HIFDBS Processing status financial data format GV I 1 - VII.9.2.2<br />

Parameter<br />

HIFDL Return financial data format list GV I 1 - VII.9.2.3<br />

HIFDLS Request financial data format list<br />

GV I 1 - VII.9.2.3<br />

parameters<br />

HIFDSS Transmit financial data format<br />

GV I 1 - VII.9.2.1<br />

parameters<br />

HIFGA Confirm fixed-term deposit modification GV I 3 2 VII.3.3<br />

HIFGAS Modify fixed-term deposit - parameters GV I 3 2 VII.3.3<br />

HIFGB Fixed-term deposit inventory GV I 3 2 VII.3.5<br />

HIFGBS Fixed-term deposit inventory - parameters GV I 3 2 VII.3.5<br />

HIFGK Return fixed-term deposit terms and GV I 2 1 VII.3.1<br />

conditions<br />

HIFGKS Fixed-term deposit terms and conditions - GV I 2 1 VII.3.1<br />

parameters<br />

HIFGN Confirm new fixed-term deposit GV I 3 2 VII.3.2<br />

1<br />

2<br />

3<br />

AD: Administration, GV: Business transaction<br />

K: customer, I: financial institution<br />

Other segment versions supported under the current HBCI version. (At present, only segments<br />

defined in the current version are supported.)


Chapter:<br />

VIII<br />

Page:<br />

8<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of segment identifiers<br />

ID Segment name Type Sender<br />

Ver-<br />

Additi Chapter<br />

1<br />

2 sion onal 3<br />

HIFGNS New fixed-term deposit - parameters GV I 3 2 VII.3.2<br />

HIFGP Confirm renewal of fixed-term deposit GV I 3 2 VII.3.4<br />

HIFGPS Renewal of fixed-term deposit -<br />

GV I 3 2 VII.3.4<br />

parameters<br />

HIFGWS Revoke fixed-term deposit - parameters GV I 3 2 VII.3.6<br />

HIFPO Confirm fixed-price statement GV I 1 - VII.4.5.1.2<br />

HIFPOS Fixed-price order parameters GV I 1 - VII.4.5.1.2<br />

HIFPWS Do not renew fixed-term deposit - GV I 3 2 VII.3.7<br />

parameters<br />

HIFRD Return exemption data GV I 1 - VII.9.1.1<br />

HIFRDS Exemption data parameters GV I 1 - VII.9.1.1<br />

HIGAMS Guest message - parameters GV I 3 2 VII.8.1.2<br />

HIINF Requested information GV I 3 2 VII.8.2.2<br />

HIINFS Information request - parameters GV I 3 2 VII.8.2.2<br />

HIISA Public key transmission AD I 2 - VI.6.1.3<br />

HIKAN Return new account movements GV I 4 4 VII.2.1.2<br />

HIKANS New account movements - parameters GV I 4 4 VII.2.1.2<br />

HIKASS Exemption data parameters GV I 1 - VII.6.3.1<br />

HIKAZ Account movements during specified GV I 5 4 VII.2.1.1<br />

period<br />

HIKAZS Account movements during specified GV I 5 4 VII.2.1.1<br />

period - parameters<br />

HIKDMS Customer message - parameters GV I 4 3 VII.8.1.1<br />

HIKIA Customer information GV I 3 2 VII.8.2.1<br />

HIKIAS Customer information - parameters GV I 3 2 VII.8.2.1<br />

HIKIF Return account details GV I 1 - VII.2.3<br />

HIKIFS Account details parameters GV I 1 - VII.2.3<br />

HIKIM Financial institution message AD I 2 - III.3.2.5<br />

HIKOM Request communications settings GV I 3 - VIII.7<br />

HIKOMS Communications settings - parameters GV I 3 - VIII.7<br />

HIKPV Compression procedure AD I 1 - IV.5<br />

HILASS Direct debit - parameters GV I 4 3 VII.1.1.5<br />

HINEA List of new issues GV I 1 - VII.4.5.2.<br />

1<br />

HINEAS List of new issues parameters GV I 1 - VII.4.5.2.<br />

1<br />

HINEZ Confirm subscription submission GV I 1 - VII.4.5.2.<br />

2<br />

HINEZS Subscribe for new issue parameters GV I 1 - VII.4.5.2.<br />

2<br />

HIOAN Portfolio order information GV I 1 - VII.4.2.1<br />

HIOANS Portfolio order information parameters GV I 1 - VII.4.2.1<br />

HIPRO Status log response GV I 3 - III.7<br />

HIPROS Status log - parameters GV I 3 - III.7<br />

HIRMG Message-level response AD I 2 - II.8.2<br />

HIRMS Segment-level response AD I 2 - II.8.3<br />

HISAL Balance GV I 5 4 VII.2.2<br />

HISALS Show balance - parameters GV I 5 4 VII.2.2


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of segment identifiers<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

9<br />

ID Segment name Type Sender<br />

Ver-<br />

Additi Chapter<br />

1<br />

2 sion onal 3<br />

HISHV Security procedure AD I 2 - IV.4<br />

HISLAS Multiple direct debit - parameters GV I 5 4 VII.1.2.2<br />

HISLB Pending post-dated multiple payments GV I 2 1 VII.1.2.4<br />

HISLBS Pending post-dated multiple payments - GV I 2 1 VII.1.2.4<br />

parameters<br />

HISLE Confirm submission of post-dated multiple GV I 2 1 VII.1.2.4<br />

direct debit<br />

HISLES Submit post-dated multiple direct debit - GV I 2 1 VII.1.2.4<br />

parameters<br />

HISLLS Cancel post-dated multiple payment - GV I 2 - VII.1.2.4<br />

parameters<br />

HISRBS Foreign currency and traveller's check GV I 1 - VII.7.3<br />

order parameters<br />

HISRK Foreign currency and traveller's check GV I 1 - VII.7.2<br />

conditions reponse<br />

HISRKS Foreign currency and traveller's check GV I 1 - VII.7.2<br />

conditions parameters<br />

HISSP Confirmation of key blocking AD I 2 - VI.6.1.5<br />

HISUBS Multiple payment - parameters GV I 5 4 VII.1.2.1<br />

HISYN Synchronisation reply AD I 3 - III.8.2.2<br />

HITMVS Financial institution officer appointment - GV I 2 1 VII.7.2.3<br />

parameters<br />

HITSB Show all post-dated multiple payments GV I 2 1 VII.1.2.3.2<br />

HITSBS Show post-dated multiple payments - GV I 2 1 VII.1.2.3.2<br />

parameters<br />

HITSE Confirm submission of post-dated multiple GV I 2 1 VII.1.2.3.1<br />

payment<br />

HITSES Submit post-dated multiple payment - GV I 2 1 VII.1.2.3.1<br />

parameters<br />

HITSLS Cancel post-dated multiple payment - GV I 2 1 VII.1.2.3.3<br />

parameters<br />

HITUA Confirm modification of post-dated GV I 3 2 VII.1.1.3.2<br />

remittance<br />

HITUAS Modify post-dated remittance - parameters GV I 3 2 VII.1.1.3.2<br />

HITUB Outstanding post-dated remittances GV I 2 1 VII.1.1.3.3<br />

HITUBS Show outstanding post-dated remittances GV I 2 1 VII.1.1.3.3<br />

- parameters<br />

HITUE Confirm post-dated remittance GV I 3 2 VII.1.1.3.1<br />

HITUES Post-dated remittance - parameters GV I 3 2 VII.1.1.3.1<br />

HITULS Cancel post-dated remittance -<br />

GV I 2 1 VII.1.1.3.4<br />

parameters<br />

HIUEBS Single remittance - parameters GV I 4 3 VII.1.1.1<br />

HIUMBS Reclassification parameters GV I 1 - VII.1.1.3<br />

HIUPA General user parameters AD I 2 - V.2<br />

HIUPD Account information AD I 4 1 V.3<br />

HIVDBS Blank form order - parameters GV I 2 1 VII.6.1.1


Chapter:<br />

VIII<br />

Page:<br />

10<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of segment identifiers<br />

ID Segment name Type Sender<br />

Ver-<br />

Additi Chapter<br />

1<br />

2 sion onal 3<br />

HIWDU Portfolio statement GV I 4 1,2,3 VII.4.3.2<br />

HIWDUS Portfolio statement - parameters GV I 4 1,2,3 VII.4.3.2<br />

HIWFO Confirm fund order submission GV I 1 - VII.4.1.5<br />

HIWFOS Fund order parameters GV I 1 - VII.4.1.5<br />

HIWFP Fixed-price offers available GV I 2 1 VII.4.5.1.1<br />

HIWFPS Fixed-price offers - parameters GV I 2 1 VII.4.5.1.1<br />

HIWOA Confirm portfolio order modification GV I 2 1 VII.4.1.3<br />

HIWOAS Portfolio order modification - parameters GV I 2 1 VII.4.1.3<br />

HIWOH Portfolio order history GV I 2 1 VII.4.2.3<br />

HIWOHS Portfolio order history - parameters GV I 2 1 VII.4.2.3<br />

HIWPD Return list of portfolio securities GV I 5 2,3,4 VII.4.3.1<br />

HIWPDS List of portfolio securities - parameters GV I 5 2,3,4 VII.4.3.1<br />

HIWPH Return key data GV I 2 1 VII.4.1.1<br />

HIWPHS Key data - parameters GV I 2 1 VII.4.1.1<br />

HIWPI Security details GV I 2 1 VII.4.4.4<br />

HIWPIS Security details - parameters GV I 2 1 VII.4.4.4<br />

HIWPK Security prices GV I 2 1 VII.4.4.3<br />

HIWPKS Security prices - parameters GV I 2 1 VII.4.4.3<br />

HIWPO Confirm submission of portfolio order GV I 2 1 VII.4.1.2<br />

HIWPOS Portfolio order - parameters GV I 2 1 VII.4.1.2<br />

HIWPR Security reference number information GV I 2 1 VII.4.4.1<br />

HIWPRS Security reference information -<br />

GV I 2 1 VII.4.4.1<br />

parameters<br />

HIWPS Confirm portfolio order cancellation GV I 2 1 VII.4.1.4<br />

HIWPSS Portfolio order cancellation - parameters GV I 2 1 VII.4.1.4<br />

HIWSD Instrument data GV I 2 1 VII.4.4.2<br />

HIWSDS Instrument data - parameters GV I 2 1 VII.4.4.2<br />

HIWSO Portfolio order status information GV I 2 1 VII.4.2.1<br />

HIWSOS Portfolio order status information – AD I 2 1 VII.4.2.1<br />

parameters<br />

HKAOM International remittance without text GV K 1 - VII.5.2<br />

message parameters<br />

HKAUB International remittance GV K 5 4 VII.5.1<br />

HKAZK Request card display GV K 1 - VII.6.2<br />

HKDAA Show pending standing order<br />

GV K 3 2 VII.1.1.4.5<br />

modifications<br />

HKDAB Show all standing orders GV K 3 2 VII.1.1.4.4<br />

HKDAE Set up a standing order GV K 4 3 VII.1.1.4.1<br />

HKDAL Cancel standing order GV K 3 2 VII.1.1.4.6<br />

HKDAN Modify standing order GV K 4 3 VII.1.1.4.2<br />

HKDAS Interrupt standing order GV K 3 2 VII.1.1.4.3<br />

HKDVK Request exchange rate GV K 1 - VII.7.1<br />

HKEND Session end AD K 1 - III.4.1.2<br />

HKFDA Request financial data format GV K 1 - VII.9.2.4<br />

HKFDB Request processing status financial data GV K 1 - VII.9.2.2<br />

format<br />

HKFDL Request financial data format list GV K 1 - VII.9.2.3


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of segment identifiers<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

11<br />

ID Segment name Type<br />

1<br />

HKFDS<br />

Transmit financial data format<br />

parameters<br />

Sender<br />

Ver-<br />

Additi Chapter<br />

2 sion onal 3<br />

GV K 1 - VII.9.2.1<br />

HKFGA Modify fixed-term deposit GV K 3 2 VII.3.3<br />

HKFGB Show fixed-term deposits GV K 3 2 VII.3.5<br />

HKFGK Request fixed-term deposit terms and GV K 2 1 VII.3.1<br />

conditions<br />

HKFGN New fixed-term deposit GV K 3 2 VII.3.2<br />

HKFGP Renew fixed-term deposit GV K 3 2 VII.3.4<br />

HKFGW Revoke fixed-term deposit GV K 3 2 VII.3.6<br />

HKFPO Fixed-price order parameters GV K 1 - VII.4.5.1.2<br />

HKFPW Do not renew fixed-term deposit GV K 2 - VII.3.7<br />

HKFRD Request exemption date GV K 1 - VII.9.1.1<br />

HKGAM Guest message GV K 3 2 VII.8.1.2<br />

HKIDN Identification AD K 2 - III.3.1.2<br />

HKINF Request information GV K 3 2 VII.8.2.2<br />

HKISA Request for public key AD K 2 - VI.6.1.2<br />

HKKAN New account movements GV K 5 4 VII.2.1.2<br />

HKKAS Apply for card block GV K 1 - VII.6.3.1<br />

HKKAZ Account movements during specified GV K 5 4 VII.2.1.1<br />

period<br />

HKKDM Customer message GV K 4 3 VII.7.1.1<br />

HKKIA Request customer information GV K 3 2 VII.7.2.1<br />

HKKIF Request account details GV K 1 - VII.2.3<br />

HKKOM Request communications settings GV K 3 - VIII.7<br />

HKLAS Single direct debit GV K 4 3 VII.1.1.5<br />

HKNEA Request list of new issues GV K 1 - VII.4.5.2.<br />

1<br />

HKNEZ Subscribe for new issue GV K 1 - VII.4.5.2.<br />

2<br />

HKOAN Request portfolio order information GV K 1 - VII.4.2.1<br />

HKPRO Request status log GV K 3 - III.7<br />

HKSAK Change key AD K 2 - VI.6.1.1<br />

HKSAL Show balance GV K 5 4 VII.2.2<br />

HKSLA Multiple direct debit GV K 5 4 VII.1.2.2<br />

HKSLB Show all post-dated multiple payments GV K 2 1 VII.1.2.4<br />

HKSLE Submit post-dated multiple direct debit GV K 2 1 VII.1.2.4<br />

HKSLL Cancel post-dated multiple payment GV K 2 1 VII.1.2.4<br />

HKSRB Foreign currency and traveller's check GV K 1 - VII.7.3<br />

order parameters<br />

HKSRK Request foreign currency and traveller's GV K 1 - VII.7.2<br />

check conditions<br />

HKSSP Block key AD K 2 - VI.6.1.4<br />

HKSUB Multiple remittance GV K 5 4 VII.1.2.1<br />

HKSYN Synchronisation AD K 2 - III.8.1.2<br />

HKTMV Request appointment with financial GV K 2 1 VII.8.2.3<br />

institution officer<br />

HKTSB Show all post-dated multiple payments GV K 2 1 VII.1.2.3.2<br />

HKTSE Submit post-dated multiple payment GV K 2 1 VII.1.2.3.1


Chapter:<br />

VIII<br />

Page:<br />

12<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of segment identifiers<br />

ID Segment name Type Sender<br />

Ver-<br />

Additi Chapter<br />

1<br />

2 sion onal 3<br />

HKTSL Cancel post-dated multiple payment GV K 2 1 VII.1.2.3.3<br />

HKTUA Modify post-dated remittance GV K 3 2 VII.1.1.3.2<br />

HKTUB Show outstanding post-dated remittances GV K 2 1 VII.1.1.3.3<br />

HKTUE Submit post-dated remittance GV K 3 2 VII.1.1.3.1<br />

HKTUL Cancel post-dated remittance GV K 2 1 VII.1.1.3.4<br />

HKUEB Single remittance GV K 4 3 VII.1.1.1<br />

HKUMB Reclassification GV K 1 - VII.1.1.3<br />

HKVDB Blank form order GV K 2 1 VII.6.1.1<br />

HKVVB General bank parameters AD K 2 - III.3.1.3<br />

HKWDU Request portfolio account statement GV K 4 1,2,3 VII.4.3.2<br />

HKWFO Submit fund order GV K 1 - VII.4.1.5<br />

HKWFP Request for fixed-price offers GV K 2 1 VII.4.5.1.1<br />

HKWOA Modify portfolio order GV K 2 1 VII.4.1.3<br />

HKWOH Request portfolio order history GV K 2 1 VII.4.2.3<br />

HKWPD Request for list of portfolio securities GV K 5 2,3,4 VII.4.3.1<br />

HKWPH Request key data GV K 2 1 VII.4.1.1<br />

HKWPI Request security details GV K 2 1 VII.4.4.4<br />

HKWPK Request security prices GV K 2 1 VII.4.4.3<br />

HKWPO Present portfolio order GV K 2 1 VII.4.1.2<br />

HKWPR Request for security reference GV K 2 1 VII.4.4.1<br />

HKWPS Cancel portfolio order GV K 2 1 VII.4.1.4<br />

HKWSD Request instrument data GV K 2 1 VII.4.4.2<br />

HKWSO Portfolio order status request GV K 2 1 VII.4.2.1<br />

HNHBK Message header AD K/I 3 - II.6.2<br />

HNHBS Message terminator AD K/I 1 - II.6.3<br />

HNSHA Signature closer AD K/I 1 - VI.5.3<br />

HNSHK Signature header AD K/I 3 - VI.5.2<br />

HNVSD Encrypted data AD K/I 1 - VI.5.5<br />

HNVSK Encryption header AD K/I 2 - VI.5.4


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

13<br />

VIII.2 Overview of HBCI elements<br />

VIII.2.1 Messages<br />

No. Name ID Sender<br />

Chapter<br />

4<br />

1 Termination message N21 I II.8.6<br />

2 Changing of a public key of the customer N1 K VI.6.2.1<br />

3 Reply to session initialisation N2 I III.3.2.1<br />

4 Reply to anonymous session initialisation N3 I III.5.1<br />

5 Reply to communications settings request N4 I VIII.7<br />

6 Confirmation of key blocking by the financial N5 I VI.6.2.4<br />

institution<br />

7 Session initialisation N6 K III.3.1.1<br />

8 Session initialisation for anonymous access N7 K III.5.1<br />

9 Session end N8 K III.4.1.1<br />

10 Anonymous session end N9 K III.5.3<br />

11 Initial request for key of financial institution N10 K VI.6.2.2<br />

12 Initial transmission of keys of financial institution N11 I VI.6.2.2<br />

13 Initial transmission of keys of customer N12 K VI.6.2.3<br />

14 Communications access N13 K VIII.7<br />

15 Generic financial institution message N14 I II.8.1<br />

16 Generic customer message N15 K II.7.1<br />

17 General anonymous customer message N16 K III.5.2<br />

18 Blocking of a key by the customer N17 K VI.6.2.4<br />

19 Synchronisation request message N18 K III.8.1.1<br />

20 Synchronisation reply message N19 I III.8.2.1<br />

21 Encrypted message N20 K/I II.9<br />

4<br />

K: customer, I: financial institution


Chapter:<br />

VIII<br />

Page:<br />

14<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

VIII.2.2<br />

Segment sequences<br />

No. Name<br />

Sender<br />

Chapter<br />

5<br />

1 Orders K II.7.2<br />

2 Financial institution parameter data I IV.1<br />

3 Data segments I II.8.4<br />

4 Parameter data I IV.7<br />

5 User parameter data I V.1<br />

5<br />

K: customer, I: financial institution


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

15<br />

VIII.2.3<br />

Segments<br />

No. Name ID Type Sender<br />

Chapter<br />

6<br />

7<br />

1 Account details parameters HIKIFS GV I VII.2.3<br />

2 Account information HIUPD AD I V.3<br />

3 Account movements during specified period HKKAZ GV K VII.2.1.1<br />

4 Account movements during specified period HIKAZ GV I VII.2.1.1<br />

5 Account movements during specified period - HIKAZS GV I VII.2.1.1<br />

parameters<br />

6 Apply for card block HKKAS GV K VII.6.3.1<br />

7 Apply for card block parameters HIKASS GV I VII.6.3.1<br />

8 Balance HISAL GV I VII.2.2<br />

9 Blank form order HKVDB GV K VII.6.1.1<br />

10 Blank form order - parameters HIVDBS GV I VII.6.1.1<br />

11 Block key HKSSP AD K VI.6.1.4<br />

12 Cancel portfolio order HKWPS GV K VII.4.1.4<br />

13 Cancel post-dated multiple payment HKSLL GV K VII.1.2.4<br />

14 Cancel post-dated multiple payment HKTSL GV K VII.1.2.3.3<br />

15 Cancel post-dated multiple payment -<br />

HISLLS GV I VII.1.2.4<br />

parameters<br />

16 Cancel post-dated multiple payment -<br />

HITSLS GV I VII.1.2.3.3<br />

parameters<br />

17 Cancel post-dated remittance HKTUL GV K VII.1.1.3.4<br />

18 Cancel post-dated remittance - parameters HITULS GV I VII.1.1.3.4<br />

19 Cancel standing order HKDAL GV K VII.1.1.4.6<br />

20 Cancel standing order - parameters HIDALS GV I VII.1.1.4.6<br />

21 Card display HIAZK GV I VII.6.2<br />

22 Card display parameters HIAZKS GV I VII.6.2<br />

23 Change key HKSAK AD K VI.6.1.1<br />

24 Communications settings - parameters HIKOMS GV I VIII.7<br />

25 Compression procedure HIKPV AD I IV.5<br />

26 Confirm fixed-price statement HIFPO GV I VII.4.5.1.2<br />

27 Confirm fixed-term deposit modification HIFGA GV I VII.3.3<br />

28 Confirm fund order submission HIWFO GV I VII.4.1.5<br />

29 Confirm modification of post-dated remittance HITUA GV I VII.1.1.3.2<br />

30 Confirm modification of standing order HIDAN GV I VII.1.1.4.2<br />

31 Confirm new fixed-term deposit HIFGN GV I VII.3.2<br />

32 Confirm portfolio order cancellation HIWPS GV I VII.4.1.4<br />

33 Confirm portfolio order modification HIWOA GV I VII.4.1.3<br />

34 Confirm post-dated remittance HITUE GV I VII.1.1.3.1<br />

35 Confirm renewal of fixed-term deposit HIFGP GV I VII.3.4<br />

6<br />

7<br />

AD: Administration, GV: business transaction<br />

K: customer, I: financial institution


Chapter:<br />

VIII<br />

Page:<br />

16<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name ID Type Sender<br />

Chapter<br />

6<br />

7<br />

36 Confirm standing order set up HIDAE GV I VII.1.1.4.1<br />

37 Confirm submission of portfolio order HIWPO GV I VII.4.1.2<br />

38 Confirm submission of post-dated multiple direct HISLE GV I VII.1.2.4<br />

debit<br />

39 Confirm submission of post-dated multiple HITSE GV I VII.1.2.3.1<br />

payment<br />

40 Confirm subscription submission HINEZ GV I VII.4.5.2<br />

41 Confirmation of key blocking HISSP AD I VI.6.1.5<br />

42 Confirmation of standing order interruption HIDAS GV I VII.1.1.4.3<br />

43 Customer information HIKIA GV I VII.8.2.1<br />

44 Customer information - parameters HIKIAS GV I VII.8.2.1<br />

45 Customer message HKKDM GV K VII.8.1.1<br />

46 Customer message - parameters HIKDMS GV I VII.8.1.1<br />

47 Direct debit - parameters HILASS GV I VII.1.1.5<br />

48 Do not renew fixed-term deposit HKFPW GV K VII.3.7<br />

49 Do not renew fixed-term deposit - parameters HIFPWS GV I VII.3.7<br />

50 Encrypted data HNVSD AD K/I VI.5.5<br />

51 Encryption header HNVSK AD K/I VI.5.4<br />

52 Exchange rate parameters HIDVKS GV I VII.7.1<br />

53 Exemption data parameters HIFRDS GV I VII.9.1.1<br />

54 Financial institution message HIKIM AD I III.3.2.5<br />

55 Financial institution officer appointment - HITMVS GV I VII.8.2.3<br />

parameters<br />

56 Fixed-price offers - parameters HIWFPS GV I VII.4.5.1.1<br />

57 Fixed-price offers available HIWFP GV I VII.4.5.1.1<br />

58 Fixed-price order HKFPO GV K VII.4.5.1.2<br />

59 Fixed-price order parameters HIFPOS GV I VII.4.5.1.2<br />

60 Fixed-term deposit inventory HIFGB GV I VII.3.5<br />

61 Fixed-term deposit inventory - parameters HIFGBS GV I VII.3.5<br />

62 Fixed-term deposit terms and conditions - HIFGKS GV I VII.3.1<br />

parameters<br />

63 Foreign currency and traveller's check order HKSRB GV K VII.7.3<br />

parameters<br />

64 Foreign currency and traveller's check order HISRBS GV I VII.7.3<br />

parameters<br />

65 Foreign currency and traveller's check<br />

HISRKS GV I VII.7.2<br />

conditions parameters<br />

66 Foreign currency and traveller's check<br />

HISRK GV I VII.7.2<br />

conditions reponse<br />

67 Fund order parameters HIWFOS GV I VII.4.1.5<br />

68 General bank parameters HIBPA AD I IV.2<br />

69 Customer system preferences HKVVB AD K III.3.1.3<br />

70 General user parameters HIUPA AD I V.2<br />

71 Guest message HKGAM GV K VII.8.1.2


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

17<br />

No. Name ID Type Sender<br />

Chapter<br />

6<br />

7<br />

72 Guest message - parameters HIGAMS GV I VII.8.1.2<br />

73 Identification HKIDN AD K III.3.1.2<br />

74 Information request - parameters HIINFS GV I VII.8.2.2<br />

75 Instrument data HIWSD GV I VII.4.4.2<br />

76 Instrument data - parameters HIWSDS GV I VII.4.4.2<br />

77 International funds transfer without text HKAOM GV K VII.5.2<br />

message<br />

78 International funds transfer without text HIAOMS GV I VII.5.2<br />

message parameters<br />

79 International remittance HKAUB GV K VII.5.1<br />

80 International remittance - parameters HIAUBS GV I VII.5.1<br />

81 Interrupt standing order HKDAS GV K VII.1.1.4.3<br />

82 Interrupt standing order - parameters HIDASS GV I VII.1.1.4.3<br />

83 Key data - parameters HIWPHS GV I VII.4.1.1<br />

84 List of new issues HINEA GV I VII.4.5.1.<br />

1<br />

85 List of new issues parameters HINEAS GV I VII.4.5.1.<br />

1<br />

86 List of portfolio securities HIWPD GV I VII.4.3.1<br />

87 List of portfolio securities - parameters HIWPDS GV I VII.4.3.1<br />

88 Message header HNHBK AD K/I II.6.2<br />

89 Message terminator HNHBS AD K/I II.6.3<br />

90 Message-level response HIRMG AD I II.8.2<br />

91 Modify fixed-term deposit HKFGA GV K VII.3.3<br />

92 Modify fixed-term deposit - parameters HIFGAS GV I VII.3.3<br />

93 Modify portfolio order HKWOA GV K VII.4.1.3<br />

94 Modify post-dated remittance HKTUA GV K VII.1.1.3.2<br />

95 Modify post-dated remittance - parameters HITUAS GV I VII.1.1.3.2<br />

96 Modify standing order HKDAN GV K VII.1.1.4.2<br />

97 Modify standing order - parameters HIDANS GV I VII.1.1.4.2<br />

98 Multiple direct debit HKSLA GV K VII.1.2.2<br />

99 Multiple direct debit - parameters HISLAS GV I VII.1.2.2<br />

100 Multiple payment - parameters HISUBS GV I VII.1.2.1<br />

101 Multiple remittance HKSUB GV K VII.1.2.1<br />

102 New account movements HKKAN GV K VII.2.1.2<br />

103 New account movements - parameters HIKANS GV I VII.2.1.2<br />

104 New fixed-term deposit HKFGN GV K VII.3.2<br />

105 New fixed-term deposit - parameters HIFGNS GV I VII.3.2<br />

106 Outstanding post-dated remittances HITUB GV I VII.1.1.3.3<br />

107 Pending post-dated multiple payments HISLB GV I VII.1.2.4<br />

108 Pending post-dated multiple payments - HISLBS GV I VII.1.2.4<br />

parameters<br />

109 Pending standing order modifications HIDAA GV I VII.1.1.4.5


Chapter:<br />

VIII<br />

Page:<br />

18<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name ID Type<br />

6<br />

110 Pending standing order modifications -<br />

parameters<br />

Sender<br />

Chapter<br />

7<br />

HIDAAS GV I VII.1.1.4.5<br />

111 Portfolio order - parameters HIWPOS GV I VII.4.1.2<br />

112 Portfolio order cancellation - parameters HIWPSS GV I VII.4.1.4<br />

113 Portfolio order history HIWOH GV I VII.4.2.2<br />

114 Portfolio order history - parameters HIWOHS GV I VII.4.2.2<br />

115 Portfolio order information HIOAN GV I VII.4.2.1<br />

116 Portfolio order information parameters HIOANS GV I VII.4.2.1<br />

117 Portfolio order modification - parameters HIWOAS GV I VII.4.1.3<br />

118 Portfolio order status information HIWSO GV I VII.4.2.2<br />

119 Portfolio order status information – parameters HIWSOS AD I VII.4.2.2<br />

120 Portfolio order status request HKWSO GV K VII.4.2.2<br />

121 Portfolio statement HIWDU GV I VII.4.3.2<br />

122 Portfolio statement - parameters HIWDUS GV I VII.4.3.2<br />

123 Post-dated remittance - parameters HITUES GV I VII.1.1.3.1<br />

124 Present portfolio order HKWPO GV K VII.4.1.2<br />

125 Processing status financial data format HIFDBS GV I VII.9.2.2<br />

Parameter<br />

126 Public key transmission HIISA AD I VI.6.1.3<br />

127 Reclassification HKUMB GV K VII.1.1.3<br />

128 Reclassification parameters HIUMBS GV I VII.1.1.3<br />

129 Renew fixed-term deposit HKFGP GV K VII.3.4<br />

130 Renewal of fixed-term deposit - parameters HIFGPS GV I VII.3.4<br />

131 Request account details HKKIF GV K VII.2.3<br />

132 Request appointment with financial institution HKTMV GV K VII.8.2.3<br />

officer<br />

133 Request card display HKAZK GV K VII.6.2<br />

134 Request communications settings HKKOM GV K VIII.7<br />

135 Request communications settings HIKOM GV I VIII.7<br />

136 Request customer information HKKIA GV K VII.8.2.1<br />

137 Request exchange rate HKDVK GV K VII.7.1<br />

138 Request exemption date HKFRD GV K VII.9.1.1<br />

139 Request financial data format HKFDA GV K VII.9.2.4<br />

140 Request financial data format list HKFDL GV K VII.9.2.3<br />

141 Request financial data format list parameters HIFDLS GV I VII.9.2.3<br />

142 Request financial data format parameters HIFDAS GV I VII.9.2.4<br />

143 Request fixed-term deposit terms and conditions HKFGK GV K VII.3.1<br />

144 Request for fixed-price offers HKWFP GV K VII.4.5.1.1<br />

145 Request for list of portfolio securities HKWPD GV K VII.4.3.1<br />

146 Request for public key HKISA AD K VI.6.1.2<br />

147 Request for security reference HKWPR GV K VII.4.4.1<br />

148 Request foreign currency and traveller's check<br />

conditions<br />

HKSRK GV K VII.7.2


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

19<br />

No. Name ID Type Sender<br />

Chapter<br />

6<br />

7<br />

149 Request information HKINF GV K VII.8.2.2<br />

150 Request instrument data HKWSD GV K VII.4.4.2<br />

151 Request key data HKWPH GV K VII.4.1.1<br />

152 Request list of new issues HKNEA GV K VII.4.5.1.<br />

1<br />

153 Request portfolio account statement HKWDU GV K VII.4.3.2<br />

154 Request portfolio order history HKWOH GV K VII.4.2.2<br />

155 Request portfolio order information HKOAN GV K VII.4.2.1<br />

156 Request processing status financial data format HKFDB GV K VII.9.2.2<br />

157 Request security details HKWPI GV K VII.4.4.4<br />

158 Request security prices HKWPK GV K VII.4.4.3<br />

159 Request status log HKPRO GV K III.7<br />

160 Requested information HIINF GV I VII.8.2.2<br />

161 Return account details HIKIF GV I VII.2.3<br />

162 Return exchange rate HIDVK GV I VII.7.1<br />

163 Return exemption data HIFRD GV I VII.9.1.1<br />

164 Return financial data format HIFDA GV I VII.9.2.4<br />

165 Return financial data format list HIFDL GV I VII.9.2.3<br />

166 Return fixed-term deposit terms and conditions HIFGK GV I VII.3.1<br />

167 Return key data HIWPH GV I VII.4.1.1<br />

168 Return new account movements HIKAN GV I VII.2.1.2<br />

169 Return processing status financial data format HIFDB GV I VII.9.2.2<br />

170 Revoke fixed-term deposit HKFGW GV K VII.3.6<br />

171 Revoke fixed-term deposit - parameters HIFGWS GV I VII.3.6<br />

172 Security details HIWPI GV I VII.4.4.4<br />

173 Security details - parameters HIWPIS GV I VII.4.4.4<br />

174 Security prices HIWPK GV I VII.4.4.3<br />

175 Security prices - parameters HIWPKS GV I VII.4.4.3<br />

176 Security procedure HISHV AD I IV.4<br />

177 Security reference information - parameters HIWPRS GV I VII.4.4.1<br />

178 Security reference number information HIWPR GV I VII.4.4.1<br />

179 Segment-level response HIRMS AD I II.8.3<br />

180 Session end HKEND AD K III.4.1.2<br />

181 Set up a standing order HKDAE GV K VII.1.1.4.1<br />

182 Show all post-dated multiple payments HKSLB GV K VII.1.2.4<br />

183 Show all post-dated multiple payments HKTSB GV K VII.1.2.3.2<br />

184 Show all post-dated multiple payments HITSB GV I VII.1.2.3.2<br />

185 Show all standing orders HKDAB GV K VII.1.1.4.4<br />

186 Show balance HKSAL GV K VII.2.2<br />

187 Show balance - parameters HISALS GV I VII.2.2<br />

188 Show fixed-term deposits HKFGB GV K VII.3.5<br />

189 Show outstanding post-dated remittances HKTUB GV K VII.1.1.3.3


Chapter:<br />

VIII<br />

Page:<br />

20<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name ID Type<br />

6<br />

190 Show outstanding post-dated remittances -<br />

parameters<br />

Sender<br />

Chapter<br />

7<br />

HITUBS GV I VII.1.1.3.3<br />

191 Show pending standing order modifications HKDAA GV K VII.1.1.4.5<br />

192 Show post-dated multiple payments -<br />

HITSBS GV I VII.1.2.3.2<br />

parameters<br />

193 Signature closer HNSHA AD K/I VI.5.3<br />

194 Signature header HNSHK AD K/I VI.5.2<br />

195 Single direct debit HKLAS GV K VII.1.1.5<br />

196 Single remittance HKUEB GV K VII.1.1.1<br />

197 Single remittance - parameters HIUEBS GV I VII.1.1.1<br />

198 Standing order setup - parameters HIDAES GV I VII.1.1.4.1<br />

199 Standing orders HIDAB GV I VII.1.1.4.4<br />

200 Standing orders - parameters HIDABS GV I VII.1.1.4.4<br />

201 Status log - parameters HIPROS GV I III.7<br />

202 Status log response HIPRO GV I III.7<br />

203 Submit fund order HKWFO GV K VII.4.1.5<br />

204 Submit post-dated multiple direct debit HKSLE GV K VII.1.2.4<br />

205 Submit post-dated multiple direct debit - HISLES GV I VII.1.2.4<br />

parameters<br />

206 Submit post-dated multiple payment HKTSE GV K VII.1.2.3.1<br />

207 Submit post-dated multiple payment -<br />

HITSES GV I VII.1.2.3.1<br />

parameters<br />

208 Submit post-dated remittance HKTUE GV K VII.1.1.3.1<br />

209 Subscribe for new issue HKNEZ GV K VII.4.5.1.<br />

2<br />

210 Subscribe for new issue parameters HINEZS GV I VII.4.5.1.<br />

2<br />

211 Synchronisation HKSYN AD K III.8.1.2<br />

212 Synchronisation reply HISYN AD I III.8.2.2<br />

213 Transmit financial data format HKFDS GV K VII.9.2.1<br />

214 Transmit financial data format parameters HIFDSS GV I VII.9.2.1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

21<br />

VIII.2.4<br />

Data element groups<br />

No. Name Format Chapter<br />

1 Alternative delivery address addr<br />

2 Mailing address addr<br />

3 Deposit amount amt<br />

4 Maximum deposit amt<br />

5 New deposit amount amt<br />

6 Minimum deposit amt<br />

7 Deposit account acc<br />

8 Old deposit account acc<br />

9 Order filter VII.4.2.1<br />

10 Maturity account acc<br />

11 Export limit amt<br />

12 Issue price VII.4.4.3<br />

13 Interruption VII.1.1.4<br />

14 Beneficiary addr<br />

15 Account to be debited acc<br />

16 Amount already drawn on amt<br />

17 Order conditions VII.7.2<br />

18 Order VII.7.3<br />

19 Amount of payment amt<br />

20 Reference message II.6.2<br />

21 End financial institution ID VIII.7<br />

22 Exchange information VII.4.4.2<br />

23 Postal address addr<br />

24 Standing order details VII.1.1.4<br />

25 Portfolio account acc<br />

26 Import limit amt<br />

27 Issue price amt<br />

28 Business transactions allowed V.3<br />

29 Opening price VII.4.4.3<br />

30 Fixed-term deposit terms VII.3<br />

31 Format details VII.9.2<br />

32 Form VII.6.1.1<br />

33 Exemption amount amt<br />

34 Optional text information VII.8.2.2<br />

35 Current balance bal<br />

36 Validity date VII.4.2.2<br />

37 Hash algorithm VI.5.2.2


Chapter:<br />

VIII<br />

Page:<br />

22<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Chapter<br />

38 Information VII.8.2.1<br />

39 Information codes VII.8.2.2<br />

40 High for the year VII.4.4.3<br />

41 Low for the year VII.4.4.3<br />

42 Card limit amt<br />

43 Spot rate VII.4.4.3<br />

44 Minimum amount amt<br />

45 Smallest step amt<br />

46 Communication parameter VIII.7<br />

47 Spending limit V.3<br />

48 Account acc<br />

49 Customer account acc<br />

50 Beneficiary account acc<br />

51 Account to be debited/credited acc<br />

52 Bank ID bid<br />

53 Overdraft limit amt<br />

54 Price data VII.4.4.3<br />

55 Latest quote VII.4.4.3<br />

56 Limit amount amt<br />

57 Minimum order amount amt<br />

58 Minimum subscription, amount amt<br />

59 After hours VII.4.4.3<br />

60 Nominal value amt<br />

61 Nominal values VII.7.2<br />

62 Public key VI.5.1.5<br />

63 Parameters IV.6<br />

64 International remittance - parameters VII.5.1<br />

65 International remittance without text message<br />

VII.5.2<br />

parameters<br />

66 Show outstanding post-dated remittances -<br />

VII.1.1.3.3<br />

parameters<br />

67 Modify standing order - parameters VII.1.1.4.2<br />

68 Interrupt standing order - parameters VII.1.1.4.3<br />

69 Standing order setup - parameters VII.1.1.4.1<br />

70 Cancel standing order - parameters VII.1.1.4.6<br />

71 List of portfolio securities - parameters VI.4.3.1<br />

72 Portfolio statement - parameters VI.4.3.2<br />

73 Exchange rate parameters VII.7.1<br />

74 Single remittance/direct debit parameters VII.1.1.1<br />

75 Modify fixed-term deposit - parameters VII.3.3<br />

76 Fixed-term deposit terms and conditions -<br />

VII.3.1<br />

parameters


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

23<br />

No. Name Format Chapter<br />

77 New fixed-term deposit - parameters VII.3.2<br />

78 Fixed-price offers - parameters VII.4.5.1.1<br />

79 Fixed-price order parameters VII.4.5.1.2<br />

80 Request financial data format parameters VII.9.2.4<br />

81 Transmit financial data format parameters VII.9.2.1<br />

82 Fund order parameters VII.4.1.5<br />

83 Block card parameters VII.6.3.1<br />

84 Account movements during specified period -<br />

VII.2.1.2<br />

parameters<br />

85 New account movements - parameters VII.2.1.1<br />

86 Customer/guest message parameters VII.8.1.1<br />

87 List of new issues parameter VII.4.5.1<br />

88 Subscribe for new issue parameters VII.4.5.2<br />

89 Portfolio order information parameters VII.4.2.1<br />

90 Order status parameters VII.4.2.2<br />

91 Parameter multiple remittance/direct debit VII.1.2.1<br />

92 Foreign currency and traveller's checkcheque<br />

VII.7.3<br />

order parameters<br />

93 Foreign currency and traveller's checkcheque<br />

VII.7.2<br />

conditions parameters<br />

94 Modify post-dated remittance - parameters VII.1.1.3.2<br />

95 Submit post-dated remittance - parameters VII.1.1.3.1<br />

96 Blank form order - parameters VII.6.1.1<br />

97 Security details - parameters VII.4.4.4<br />

98 Security prices - parameters VII.4.4.3<br />

99 Portfolio order - parameters VII.4.1.2<br />

100 Portfolio order modification - parameters VII.4.1.3<br />

101 Portfolio order history - parameters VII.4.2.3<br />

102 Portfolio order cancellation - parameters VII.4.1.4<br />

103 Security reference information - parameters VII.4.4.1<br />

104 Instrument data - parameters VII.4.4.2<br />

105 Key data - parameters VII.4.1.1<br />

106 Price limit amt<br />

107 Price range to amt<br />

108 Price range from amt<br />

109 Renewal VII.3<br />

110 Reference account acc<br />

111 Remaining exemption amount amt<br />

112 Response II.8.5.2<br />

113 Repurchase price VII.4.4.3<br />

114 Balance including pending transactions bal<br />

115 Key name VI.5.1.1<br />

116 Segment header II.6.1


Chapter:<br />

VIII<br />

Page:<br />

24<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Chapter<br />

117 Security date and time VI.5.1.2<br />

118 Security identification, Details VI.5.1.3<br />

119 Signature algorithm VI.5.2.3<br />

120 Instrument data shares VII.4.4.2<br />

121 Instrument data fund VII.4.4.2<br />

122 Instrument data warrants VII.4.4.2<br />

123 Instrument data pension VII.4.4.2<br />

124 Denomination possibilities VII7.2<br />

125 Total sum for all orders amt<br />

126 HBCI versions supported IV.2<br />

127 Compression procedures supported IV.5<br />

128 Security procedures supported IV.4<br />

129 Languages supported IV.2<br />

130 Available funds amt<br />

131 Authorised to draw VII.2.3<br />

132 Clearing account acc<br />

133 Encryption algorithm VI.5.4.2<br />

134 Version of terms and conditions VII.3<br />

135 Payment purpose VII.1.1<br />

136 Start bank ID VIII.7<br />

137 Pre-opening VII.4.4.3<br />

138 Registration time and date VII.4.2.1<br />

139 Previous day VII.4.4.3<br />

140 Securities asset groups VII.4.4.1<br />

141 Security reference VII.4<br />

142 Key data VII.4.1.1<br />

143 Certificate VI.5.1.4<br />

144 Earned interest expected amt<br />

145 Earned interest account acc


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

25<br />

VIII.2.5<br />

Data elements<br />

No. Name Format Length<br />

1 Maturity date dat #<br />

2 Settlement currency cur #<br />

3 Settlement currency euro allowed yn #<br />

4 Settlement currency local currency allowed yn #<br />

5 Currency of temporary change of amount cur #<br />

6 Alternative branch office an ..35<br />

7 Temporary change of amount allowed yn #<br />

8 Temporary change of amount val #<br />

9 Different maturity account supported yn #<br />

10 Different clearing account supported num 1<br />

11 Different earned interest account supported yn #<br />

12 Printed address yn #<br />

13 Printed address possible yn #<br />

14 All portfolios yn #<br />

15 All accounts yn #<br />

16 All accounts allowed yn #<br />

17 Information on value date of invoice an ..35<br />

18 Deposit date dat #<br />

19 Number of payments skipped num ..2<br />

20 Number of signatures needed num ..2<br />

21 Number of orders num ..5<br />

22 Number of business transactions num ..3<br />

23 Minimum number of signatures num 1<br />

24 Number of post-dated modifications num 1<br />

25 Number of post-dated interruptions num 1<br />

26 Type of key data num 1<br />

27 Type of export limit num 1<br />

28 Type of import limit num 1<br />

29 Type of limit an 4<br />

30 Limit type modifiable yn #<br />

31 Type of time limit an 4<br />

32 Type of time limit modifiable yn #<br />

33 Scroll reference an ..35<br />

34 Client name, AZV an ..140<br />

35 Order comments txt ..2048<br />

36 Order ID an ..99<br />

37 Old order ID an ..99<br />

38 Order ID allowed yn #<br />

39 Maturity account modifiable yn #


Chapter:<br />

VIII<br />

Page:<br />

26<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Length<br />

40 Notice of execution bin ..<br />

41 Scheduled date dat #<br />

42 Day of execution num ..2<br />

43 Scheduled date modifiable yn #<br />

44 Days of the month available dig ..64<br />

45 Days of the week available dig ..7<br />

46 Issue markup val #<br />

47 Delivery num 1<br />

48 Delivery type num 1<br />

49 Interruption end date dat #<br />

50 Interruption start date dat #<br />

51 Annual interruption yn #<br />

52 Annual interruption allowed yn #<br />

53 Type of interruption possible num 1<br />

54 Changeover check reference id #<br />

55 Processing price, currency cur #<br />

56 Processing price, value val #<br />

57 Beneficiary possible yn #<br />

58 Account to be debited modifiable yn #<br />

59 Remarks txt ..2048<br />

60 User ID id #<br />

61 Range of the security application, coded an ..3<br />

62 Description an ..35<br />

63 Special instructions txt ..200<br />

64 Existing deposit account allowed yn #<br />

65 Order conditions required yn #<br />

66 Amount modifiable yn #<br />

67 Subject an ..35<br />

68 Code for algorithm parameter, IV an ..3<br />

69 Code for algorithm parameter, key an ..3<br />

70 Code for exponent an ..3<br />

71 Code for function type num ..3<br />

72 Code for hash algorithm parameter an ..3<br />

73 Code for modulus an ..3<br />

74 Code for security party an ..3<br />

75 Reference data element an ..7<br />

76 Reference segment num ..3<br />

77 Reference ratio an ..35<br />

78 End date dat #<br />

79 Exchange an 4<br />

80 BPD version num ..3<br />

81 Branch an ..35<br />

82 Rate asked/selling rate val #


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

27<br />

No. Name Format Length<br />

83 Rate asked val #<br />

84 Balance booking date dat #<br />

85 Balance booking time tim #<br />

86 CID bin ..256<br />

87 Data, encrypted bin ..<br />

88 Date dat #<br />

89 Date of transmission dat #<br />

90 Date and time indicator, coded an ..3<br />

91 Registration date dat #<br />

92 Portfolio required yn #<br />

93 List of portfolio securities bin #<br />

94 Portfolio securities bank charge val #<br />

95 Portfolio currency cur #<br />

96 Session ID id #<br />

97 Session language num ..3<br />

98 Dividends val #<br />

99 DTA data record bin ..<br />

100 DTAZV data record bin ..<br />

101 End early order deadline dat #<br />

102 End early order deadline, remarks txt ..80<br />

103 End early order deadline, time tim #<br />

104 Own account yn #<br />

105 Maximum entries supported yn #<br />

106 Quote units num 1<br />

107 Type of payment num 1<br />

108 Rate of payment val #<br />

109 Date submitted dat #<br />

110 E-mail address an ..35<br />

111 Issue date dat #<br />

112 Issue price, remarks txt ..80<br />

113 Issues status num 1<br />

114 Issues volumes an ..50<br />

115 Issuing party num 6<br />

116 Address an ..35<br />

117 Beneficiary name modifiable yn #<br />

118 Beneficiary name, AZV an ..140<br />

119 Maturity date dat #<br />

120 Order allowed an ..20<br />

121 Allowed type of denomination num 1<br />

122 Remarks an ..35<br />

123 Order to be resubmitted yn #<br />

124 Opening date dat #<br />

125 First day of trading dat #


Chapter:<br />

VIII<br />

Page:<br />

28<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Length<br />

126 First day of trading, remarksErläuterung txt ..80<br />

127 First interest due date dat #<br />

128 First scheduled date modifiable yn #<br />

129 Execute for the first time on vdat #<br />

130 Maturity date dat #<br />

131 Fixed-term deposit status num 1<br />

132 Fixed-price offer number id #<br />

133 Filter new issues num 1<br />

134 Filter function an 3<br />

135 Financial data format bin ..<br />

136 Document format an ..3<br />

137 Format name an ..10<br />

138 Format details, coded an 10<br />

139 Format type num 1<br />

140 Format version an ..10<br />

141 Form name an ..35<br />

142 Form code num ..2<br />

143 Plain text message txt ..2048<br />

144 Foreign currency cur #<br />

145 Booked transactions bin ..<br />

146 Date of birth dat #<br />

147 Beneficiary's date of birth dat #<br />

148 Buying rate val #<br />

149 Buying rate val #<br />

150 Total amount, currency cur #<br />

151 Total amount, value val #<br />

152 Branch office an ..35<br />

153 Transaction an ..6<br />

154 Quantity required num ..3<br />

155 Scheduled date dat #<br />

156 Scheduled date allowed yn #<br />

157 Graphics bin ..<br />

158 Graphics format an ..15<br />

159 Greenshoe an ..50<br />

160 Valid from dig 4<br />

161 Valid to dig 4<br />

162 Validity duration floor num 1<br />

163 Validity duration XETRA num ..3<br />

164 Credit interest val #<br />

165 Trading type an ..2<br />

166 Trading type XETRA an ..2<br />

167 Currency of exchange cur #<br />

168 Hash algorithm, coded an ..3


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

29<br />

No. Name Format Length<br />

169 HBCI version num ..3<br />

170 Registered place of trade an 4<br />

171 Maximum amount in foreign currency, currency cur #<br />

172 Maximum amount in foreign currency, value val #<br />

173 Maximum amount in national currency, currency cur #<br />

174 Maximum amount in national currency, value val #<br />

175 Stockholders meeting dat #<br />

176 IBAN beneficiary an ..34<br />

177 IBAN specification possible yn #<br />

178 Identification of the party id #<br />

179 Document type an 1<br />

180 Information code an ..10<br />

181 Name of beneficiary's institution, AZV an ..140<br />

182 Year of validity num 4<br />

183 Capital adjustments num 1<br />

184 Card an ..40<br />

185 Card type num ..2<br />

186 Card follow-up number id #<br />

187 Card number id #<br />

188 Category of key data an ..30<br />

189 Minimum order amount val #<br />

190 Commission val #<br />

191 Communications address an ..512<br />

192 Communications address suffix an ..512<br />

193 Communications service num ..2<br />

194 Compression function an ..3<br />

195 Compression version num ..3<br />

196 Conditions type num 1<br />

197 Terms name an ..30<br />

198 Terms ID id #<br />

199 Terms version an ..10<br />

200 Terms version an ..10<br />

201 Consortium leader txt ..200<br />

202 Contingent information an ..15<br />

203 Account or portfolio no. id #<br />

204 Account type num ..2<br />

205 Account statement code num 1<br />

206 Account statement code modifiable yn #<br />

207 Account type an ..30<br />

208 Account details beneficiary modifiable yn #<br />

209 Account currency cur #<br />

210 Contract reference id #<br />

211 Old contract reference id #


Chapter:<br />

VIII<br />

Page:<br />

30<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Length<br />

212 Cost unit num 1<br />

213 Bank name an ..60<br />

214 Bank code an ..30<br />

215 Bank officer name an ..35<br />

216 Customer ID id #<br />

217 Customer system ID id #<br />

218 Customer system status num 1<br />

219 Price val #<br />

220 Price information yn #<br />

221 Price quote type num 1<br />

222 Share block an ..30<br />

223 Exchange rate quality num 1<br />

224 Exchange rate quality available yn #<br />

225 Exchange rate currency cur #<br />

226 Quote extension an ..5<br />

227 Country ctr #<br />

228 Country information an ..99<br />

229 Country code ctr #<br />

230 Information cache expiry num ..3<br />

231 Last scheduled date modifiable yn #<br />

232 Execute for the last time on vdat #<br />

233 Limit type an 1<br />

234 Limit days num ..3<br />

235 Post-dated cancellation possible yn #<br />

236 Foreign market segment an ..80<br />

237 Domestic market segment num 1<br />

238 Maximum buy price val #<br />

239 Maximum buy price, currency cur #<br />

240 Maximum number of orders num ..3<br />

241 Maximum number of C records num ..4<br />

242 Maximum number of entries num ..4<br />

243 Maximum number of T records num ..4<br />

244 Lines available for payment purpose num ..2<br />

245 Maximum field length for client name num ..3<br />

246 Maximum field length for beneficiary name num ..3<br />

247 Maximum field length for institution name of beneficiary num ..3<br />

248 Maximum field length for purpose num ..3<br />

249 Maximum length num ..4<br />

250 Maximum message size num ..4<br />

251 Maximum lead time num ..4<br />

252 Minimum commission amount, currency cur #<br />

253 Minimum commission amount, value val #<br />

254 Minimum subscription, denomination val ..15


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

31<br />

No. Name Format Length<br />

255 Minimum lead time num ..4<br />

256 Mixing permissible yn #<br />

257 Message reference, coded num 1<br />

258 Message size dig 12<br />

259 Message number num ..4<br />

260 Message reference number num ..4<br />

261 Name an ..35<br />

262 Name 1 an ..35<br />

263 Name 2 an ..35<br />

264 Account holder 1 dta ..27<br />

265 Account holder 2 dta ..27<br />

266 Name of account holder 1 an ..35<br />

267 Name of account holder 2 an ..35<br />

268 Nominal value, value val #<br />

269 New issues allowed yn #<br />

270 Non-booked transactions bin ..<br />

271 Nominal value val #<br />

272 Nominal value modifiable yn #<br />

273 Nominal value of capital adjustment val #<br />

274 Nominal interest rate val #<br />

275 New issues yn #<br />

276 Present user orders only yn #<br />

277 Present user restriction available yn #<br />

278 Standard package yn #<br />

279 Mode of operation, coded an ..3<br />

280 Portfolio order modifiable yn #<br />

281 Portfolio order information bin ..<br />

282 Ordering possible num 1<br />

283 Portfolio order number an ..99<br />

284 Old portfolio order number an ..99<br />

285 Portfolio order number allowed yn #<br />

286 Split portfolio order number an ..99<br />

287 Order split yn #<br />

288 Place an ..35<br />

289 Postal code an ..10<br />

290 Price limit modifiable yn #<br />

291 Price range, remarks txt ..80<br />

292 Product type num 1<br />

293 Product type foreign currency, traveller's checkcheques num 1<br />

294 Product name an ..25<br />

295 Product version an ..5<br />

296 Renewal extension period num ..3


Chapter:<br />

VIII<br />

Page:<br />

32<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Length<br />

297 Type of asset num 1<br />

298 Reference number id #<br />

299 Region num 1<br />

300 Region allowed yn #<br />

301 Yield val #<br />

302 Risk class of user an ..2<br />

303 Risk class of security an ..2<br />

304 Risk class of security, implications an ..38<br />

305 Role of security supplier, coded an ..3<br />

306 Response code dig 4<br />

307 Response parameters an ..35<br />

308 Response text an ..80<br />

309 Key type an 1<br />

310 Key number num ..3<br />

311 Key version num ..3<br />

312 Segment identifier an ..6<br />

313 Segment number num ..3<br />

314 Segment version num ..3<br />

315 Unusual currency yn #<br />

316 Security function code an ..3<br />

317 Security check reference an ..14<br />

318 Security reference number num ..16<br />

319 Security procedure, code an 3<br />

320 Signature algorithm, coded an ..3<br />

321 Debit/credit flag an 1<br />

322 Interest charges val #<br />

323 Cutoff for account movement data num ..4<br />

324 Cutoff for account movement data num ..4<br />

325 Blocking code an ..3<br />

326 Instrument data available yn #<br />

327 Standard package allowed yn #<br />

328 Standard unit num ..4<br />

329 Default language num ..3<br />

330 Status num ..2<br />

331 Street/P.O. Box an ..35<br />

332 Denominations possibility num 1<br />

333 Unit nominal value val #<br />

334 Search term allowed yn #<br />

335 Synchronisation mode num 1<br />

336 Telefax number an ..35<br />

337 Telephone an ..35<br />

338 Telephone number for confirmation an ..35<br />

339 Telephone number mandatory yn #


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

33<br />

No. Name Format Length<br />

340 Text key dig 2<br />

341 Text key and extension modifiable yn #<br />

342 Text key extension dig 3<br />

343 Subject an ..200<br />

344 Period length num ..2<br />

345 Period length modifiable yn #<br />

346 Period length in months dig ..24<br />

347 Period length in weeks dig ..104<br />

348 Period length account statement num 1<br />

349 Overdraft interest val #<br />

350 Time tim #<br />

351 Time of transmission tim #<br />

352 Portfolio movements bin ..<br />

353 Underlying an ..35<br />

354 Subsidiary account characteristic id #<br />

355 HBCI version supported num ..3<br />

356 Language supported num ..3<br />

357 UPD version num ..3<br />

358 Use of UPD num 1<br />

359 Validation result bin ..512<br />

360 User procedure an ..3<br />

361 Authorised to draw num 1<br />

362 Authorisation to draw num 1<br />

363 Payout amount, currency cur #<br />

364 Payout amount, value val #<br />

365 Clearing account modifiable num 1<br />

366 Clearing account mandatory yn #<br />

367 Type of dispatch account statement num 1<br />

368 Dispatch costs proportion, currency cur #<br />

369 Dispatch costs proportion, value val #<br />

370 Encryption algorithm, coded an ..3<br />

371 Version of filter function num ..3<br />

372 Document version dat #<br />

373 Version of security procedure num ..3<br />

374 Version number num ..3<br />

375 Administration charge val #<br />

376 Use of hash algorithm, coded an ..3<br />

377 Use of the signature algorithm, coded an ..3<br />

378 Use of encryption algorithm, coded an ..3<br />

379 Payment purpose modifiable yn #<br />

380 Purpose of public key an ..3<br />

381 Purpose, AZV an ..140<br />

382 Payment purpose line dta ..27


Chapter:<br />

VIII<br />

Page:<br />

34<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Format Length<br />

383 Start date dat #<br />

384 Currency cur #<br />

385 Currency of list of portfolio securities cur #<br />

386 Currency of list of portfolio securities available yn #<br />

387 Currency of terms and conditions cur #<br />

388 Currency of price quote cur #<br />

389 Currency name an ..35<br />

390 URL an ..256<br />

391 Other information txt ..2048<br />

392 Provide additional information yn #<br />

393 Other subscription information txt ..2048<br />

394 Value val #<br />

395 Value of the algorithm parameter, IV bin ..512<br />

396 Value of the algorithm parameter, key bin ..512<br />

397 Value of hash algorithm parameter bin ..512<br />

398 Exponent value bin ..512<br />

399 Modulus value bin ..512<br />

400 Security booking bin ..<br />

401 Type of security num ..3<br />

402 Type of security, text an ..99<br />

403 Security name an ..99<br />

404 Search term for security name an ..99<br />

405 Securities asset code an ..30<br />

406 Security group an ..2<br />

407 Securities group, text an ..35<br />

408 Notes on securities txt ..2048<br />

409 Information on security txt ..2048<br />

410 Detailed security information available yn #<br />

411 Securities category num 1<br />

412 Portfolio order bin ..<br />

413 Securities sales val #<br />

414 Important details mandatory yn #<br />

415 Reinvestment code num 1<br />

416 Reinvestment code modifiable yn #<br />

417 Reinvestment code on renewal num 1<br />

418 Reinvestment discount yn #<br />

419 Start date reinvestment discount dat #<br />

420 Reinvestment discount possible yn #<br />

421 Reinvestment discount von dat #<br />

422 Reinvestment discount, value val #<br />

423 Subscription possible yn #<br />

424 Subscription explanation txt ..200<br />

425 End subscription period dat #


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

35<br />

No. Name Format Length<br />

426 End subscription period, time tim #<br />

427 Start date subscription period dat #<br />

428 Start date subscription period, time tim #<br />

429 Subscription period, remarks txt ..80<br />

430 Registration time tim #<br />

431 Reference period an 1<br />

432 Time units an 1<br />

433 Time units modifiable yn #<br />

434 Time limit dat #<br />

435 Time limit modifiable yn #<br />

436 End date dat #<br />

437 Time period possible yn #<br />

438 Start date dat #<br />

439 Content of certificate bin ..2048<br />

440 Certificate type num 1<br />

441 Earned interest credit account modifiable yn #<br />

442 Interest method an 1<br />

443 Interest period num 1<br />

444 Rate of interest val #<br />

445 Queries supported num ..2<br />

446 Exchanges supported an ..4096<br />

447 Issue filter supported num 1<br />

448 Issuing parties supported an ..200<br />

449 Available categories an ..30<br />

450 Limit types supported an ..99<br />

451 Limit steps supported val ..15<br />

452 Limit limits supported an ..99<br />

453 Securities groups supported an ..35<br />

454 Order types supported an ..99<br />

455 Target country supported ctr #<br />

456 Additional scheduling alternatives num ..2<br />

457 Additional scheduling alternatives an ..296<br />

458 Additional scheduling alternatives, meaning an ..3563


Chapter:<br />

VIII<br />

Page:<br />

36<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

VIII.2.6<br />

HBCI Elements<br />

No. Name Type 8<br />

1 Termination message N<br />

2 Booked portfolio orders DE<br />

3 Maturity date DE<br />

4 Settlement currency DE<br />

5 euro allowed as settlement currency DE<br />

6 Local currency allowed as settlement currency DE<br />

7 Currency of temporary change of amount DE<br />

8 Alternative branch office DE<br />

9 Alternative delivery address DEG<br />

10 Temporary change of amount supported DE<br />

11 Temporary change of amount DE<br />

12 Different maturity account supported DE<br />

13 Different clearing account supported DE<br />

14 Different earned interest account supported DE<br />

15 Printed address DE<br />

16 Printed address possible DE<br />

17 Mailing address MVE<br />

18 Mailing address DEG<br />

19 All portfolios DE<br />

20 All accounts DE<br />

21 All accounts allowed DE<br />

22 Changing of a public key of the customer N<br />

23 Confirm modification of post-dated remittance SEG<br />

24 Request for public key SEG<br />

25 Information on value date of invoice DE<br />

26 Deposit amount DEG<br />

27 Maximum deposit DEG<br />

28 New deposit amount DEG<br />

29 Minimum deposit DEG<br />

30 Deposit date DE<br />

31 Deposit account DEG<br />

32 Old deposit account DEG<br />

33 Reply to anonymous session initialisation N<br />

34 Reply to session initialisation N<br />

8<br />

DE: Data Element or Group Data Element<br />

DEG: Data Element Group or Group Data Element<br />

MVE: (EMU) Element with multiple uses<br />

N: Message (German: Nachricht)<br />

SEG: Segment<br />

SF: Segment sequence


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

37<br />

No. Name Type 8<br />

35 Reply to communications settings request N<br />

36 Number of payments skipped DE<br />

37 Number of signatures needed DE<br />

38 Number of orders DE<br />

39 Number of business transactions DE<br />

40 Minimum number of signatures DE<br />

41 Number of post-dated modifications DE<br />

42 Number of post-dated interruptions DE<br />

43 Type of key data DE<br />

44 Type of export limit DE<br />

45 Type of import limit DE<br />

46 Type of limit DE<br />

47 Limit type modifiable DE<br />

48 Type of time limit DE<br />

49 Type of time limit modifiable DE<br />

50 Scroll reference DE<br />

51 Orders SF<br />

52 Client name, AZV DE<br />

53 Order comments DE<br />

54 Order filter DEG<br />

55 Order ID DE<br />

56 Old order ID DE<br />

57 Order ID supported DE<br />

58 Maturity account DEG<br />

59 Maturity account modifiable DE<br />

60 Export limit DEG<br />

61 Notice of execution DE<br />

62 Scheduled date DE<br />

63 Day of execution DE<br />

64 Scheduled date modifiable DE<br />

65 Days of the month available DE<br />

66 Days of the week available DE<br />

67 Issue markup DE<br />

68 Issue price DEG<br />

69 Executed portfolio orders DE<br />

70 International remittance SEG<br />

71 International funds transfer without text message SEG<br />

72 International funds transfer without text message parameters SEG<br />

73 International remittance - parameters SEG<br />

74 Delivery DE<br />

75 Delivery type DE<br />

76 Interruption end date DE<br />

77 Interruption start date DE


Chapter:<br />

VIII<br />

Page:<br />

38<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

78 Interruption DEG<br />

79 Annual interruption DE<br />

80 Annual interruption allowed DE<br />

81 Type of interruption possible DE<br />

82 Changeover check reference DE<br />

83 General bank parameters SEG<br />

84 Bank parameter data SF<br />

85 Processing price, currency DE<br />

86 Processing price, value DE<br />

87 Request processing status financial data format SEG<br />

88 Processing status financial data format Parameter SEG<br />

89 Return processing status financial data format SEG<br />

90 Beneficiary DEG<br />

91 Beneficiary possible DE<br />

92 Account to be debited DEG<br />

93 Account to be debited modifiable DE<br />

94 Remarks DE<br />

95 User ID DE<br />

96 Range of the security application, coded DE<br />

97 Amount already drawn on DEG<br />

98 Description DE<br />

99 Special instructions DE<br />

100 Show all post-dated multiple payments SEG<br />

101 Pending post-dated multiple payments - parameters SEG<br />

102 Pending post-dated multiple payments SEG<br />

103 Show all post-dated multiple payments SEG<br />

104 Show post-dated multiple payments - parameters SEG<br />

105 Show all post-dated multiple payments SEG<br />

106 Show outstanding post-dated remittances SEG<br />

107 Show outstanding post-dated remittances - parameters SEG<br />

108 Outstanding post-dated remittances SEG<br />

109 Confirmation of key blocking SEG<br />

110 Confirmation of key blocking by the bank N<br />

111 Existing deposit account supported DE<br />

112 Order conditions DEG<br />

113 Order conditions required DE<br />

114 Order DEG<br />

115 Amount of payment MVE<br />

116 Amount of payment DEG<br />

117 Amount modifiable DE<br />

118 Subject DE<br />

119 Code for algorithm parameter, IV DE<br />

120 Code for algorithm parameter, key DE


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

39<br />

No. Name Type 8<br />

121 Code for exponent DE<br />

122 Code for function type DE<br />

123 Code for hash algorithm parameter DE<br />

124 Code for modulus DE<br />

125 Code for security party DE<br />

126 Reference data element DE<br />

127 Reference message DEG<br />

128 Reference segment DE<br />

129 Reference ratio DE<br />

130 End date DE<br />

131 End financial institution ID DEG<br />

132 Exchange DE<br />

133 Exchange information DEG<br />

134 BPD version DE<br />

135 Branch DE<br />

136 Rate asked/selling rate DE<br />

137 Postal address DEG<br />

138 Rate asked DE<br />

139 Balance booking date DE<br />

140 Balance booking time DE<br />

141 CID DE<br />

142 Data, encrypted DE<br />

143 Data segments SF<br />

144 Date DE<br />

145 Date of transmission DE<br />

146 Date and time indicator, coded DE<br />

147 Registration date DE<br />

148 Modify standing order SEG<br />

149 Modify standing order - parameters SEG<br />

150 Interrupt standing order SEG<br />

151 Interrupt standing order - parameters SEG<br />

152 Set up a standing order SEG<br />

153 Standing order setup - parameters SEG<br />

154 Cancel standing order SEG<br />

155 Cancel standing order - parameters SEG<br />

156 Standing order details DEG<br />

157 Confirm modification of standing order SEG<br />

158 Show pending standing order modifications SEG<br />

159 Pending standing order modifications - parameters SEG<br />

160 Pending standing order modifications SEG<br />

161 Confirmation of standing order interruption SEG<br />

162 Show all standing orders SEG<br />

163 Standing orders - parameters SEG


Chapter:<br />

VIII<br />

Page:<br />

40<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

164 Standing orders SEG<br />

165 Confirm standing order set up SEG<br />

166 Portfolio account DEG<br />

167 Portfolio required DE<br />

168 List of portfolio securities DE<br />

169 Request for list of portfolio securities SEG<br />

170 List of portfolio securities - parameters SEG<br />

171 Return list of portfolio securities SEG<br />

172 Portfolio securities bank charge DE<br />

173 Request portfolio account statement SEG<br />

174 Portfolio statement - parameters SEG<br />

175 Portfolio statement SEG<br />

176 Portfolio currency DE<br />

177 Request exchange rate SEG<br />

178 Exchange rate parameters SEG<br />

179 Return exchange rate SEG<br />

180 Session end N<br />

181 Anonymous session end N<br />

182 Session end SEG<br />

183 Session ID DE<br />

184 Session initialisation N<br />

185 Session initialisation for anonymous access N<br />

186 Session language DE<br />

187 Dividends DEG<br />

188 DTA data record DE<br />

189 DTAZV data record DE<br />

190 End early order deadline DE<br />

191 End early order deadline, remarks DE<br />

192 End early order deadline, time DE<br />

193 Own account DE<br />

194 Import limit DEG<br />

195 Maximum entries supported DE<br />

196 Quote units DE<br />

197 Type of payment DE<br />

198 Rate of payment DE<br />

199 Confirm submission of post-dated multiple direct debit SEG<br />

200 Confirm submission of post-dated multiple payment SEG<br />

201 Confirm post-dated remittance SEG<br />

202 Confirm subscription submission SEG<br />

203 Date submitted DE<br />

204 Single direct debit SEG<br />

205 Single remittance SEG<br />

206 Single remittance - parameters SEG


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

41<br />

No. Name Type 8<br />

207 E-mail address DE<br />

208 Issue date DE<br />

209 Issue price DEG<br />

210 Issue price, remarks DE<br />

211 Issues status DE<br />

212 Issues volumes DE<br />

213 Issuing party DE<br />

214 Address DE<br />

215 Beneficiary name modifiable DE<br />

216 Beneficiary name, AZV DE<br />

217 Maturity date DE<br />

218 Order allowed DE<br />

219 Business transactions allowed DEG<br />

220 Allowed type of denomination DE<br />

221 Remarks DE<br />

222 Order to be resubmitted DE<br />

223 Opening date DE<br />

224 Opening price DEG<br />

225 First day of trading DE<br />

226 First day of trading, remarks DE<br />

227 First interest due date DE<br />

228 First scheduled date modifiable DE<br />

229 Initial request for key of bank N<br />

230 Initial transmission of keys of bank N<br />

231 Initial transmission of keys of customer N<br />

232 Execute for the first time on DE<br />

233 Maturity date DE<br />

234 Modify fixed-term deposit - parameters SEG<br />

235 Confirm fixed-term deposit modification SEG<br />

236 Modify fixed-term deposit SEG<br />

237 Renew fixed-term deposit SEG<br />

238 Show fixed-term deposits SEG<br />

239 Fixed-term deposit inventory - parameters SEG<br />

240 Fixed-term deposit inventory SEG<br />

241 Fixed-term deposit terms DEG<br />

242 Request fixed-term deposit terms and conditions SEG<br />

243 Fixed-term deposit terms and conditions - parameters SEG<br />

244 Return fixed-term deposit terms and conditions SEG<br />

245 New fixed-term deposit SEG<br />

246 Confirm new fixed-term deposit SEG<br />

247 New fixed-term deposit - parameters SEG<br />

248 Revoke fixed-term deposit SEG<br />

249 Revoke fixed-term deposit - parameters SEG


Chapter:<br />

VIII<br />

Page:<br />

42<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

250 Confirm renewal of fixed-term deposit SEG<br />

251 Renewal of fixed-term deposit - parameters SEG<br />

252 Do not renew fixed-term deposit SEG<br />

253 Do not renew fixed-term deposit - parameters SEG<br />

254 Fixed-term deposit status DE<br />

255 Request for fixed-price offers SEG<br />

256 Fixed-price offers - parameters SEG<br />

257 Fixed-price offers available SEG<br />

258 Fixed-price offer number DE<br />

259 Fixed-price order SEG<br />

260 Confirm fixed-price statement SEG<br />

261 Fixed-price order parameters SEG<br />

262 Filter new issues DE<br />

263 Filter function DE<br />

264 Financial data format DE<br />

265 Request financial data format SEG<br />

266 Request financial data format parameters SEG<br />

267 Return financial data format SEG<br />

268 Transmit financial data format SEG<br />

269 Transmit financial data format parameters SEG<br />

270 Request financial data format list SEG<br />

271 Request financial data format list Pparameters SEG<br />

272 Return financial data format list SEG<br />

273 Submit fund order SEG<br />

274 Fund order parameters SEG<br />

275 Confirm fund order submission SEG<br />

276 Document format DE<br />

277 Format name DE<br />

278 Format details DEG<br />

279 Format details, coded DE<br />

280 Format type DE<br />

281 Format version DE<br />

282 Form DEG<br />

283 Form name DE<br />

284 Form code DE<br />

285 Exemption amount DEG<br />

286 Request exemption date SEG<br />

287 Exemption data parameters SEG<br />

288 Return exemption data SEG<br />

289 Plain text details DEG<br />

290 Plain text message DE<br />

291 Foreign currency DE<br />

292 Guest message SEG


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

43<br />

No. Name Type 8<br />

293 Guest message - parameters SEG<br />

294 Booked transactions DE<br />

295 Current balance DEG<br />

296 Date of birth DE<br />

297 Beneficiary's date of birth DE<br />

298 Buying rate DE<br />

299 Buying rate DE<br />

300 Total amount, currency DE<br />

301 Total amount, value DE<br />

302 Branch office DE<br />

303 Transaction DE<br />

304 Cancelled portfolio orders DE<br />

305 Quantity required DE<br />

306 Required scheduled date DE<br />

307 Required scheduled date supported DE<br />

308 Graphics DE<br />

309 Graphics format DE<br />

310 Greenshoe DE<br />

311 Valid from DE<br />

312 Valid to DE<br />

313 Validity duration floor DE<br />

314 Validity duration XETRA DE<br />

315 Validity date DEG<br />

316 Credit interest DE<br />

317 Trading type DE<br />

318 Trading type XETRA DE<br />

319 Currency of exchange DE<br />

320 Hash algorithm DEG<br />

321 Hash algorithm, coded DE<br />

322 HBCI version DE<br />

323 Registered place of trade DE<br />

324 Maximum amount in foreign currency, currency DE<br />

325 Maximum amount in foreign currency, value DE<br />

326 Maximum amount in national currency, currency DE<br />

327 Maximum amount in national currency, value DE<br />

328 Stockholders meeting DE<br />

329 Beneficiary IBAN DE<br />

330 IBAN specification possible DE<br />

331 Identification SEG<br />

332 Identification of the party DE<br />

333 Information DEG<br />

334 Request information SEG<br />

335 Requested information SEG


Chapter:<br />

VIII<br />

Page:<br />

44<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

336 Information request - parameters SEG<br />

337 Document type DE<br />

338 Information code DE<br />

339 Information codes DEG<br />

340 Name of beneficiary's institution, AZV DE<br />

341 Year of validity DE<br />

342 High for the year DEG<br />

343 Low for the year DEG<br />

344 Capital adjustments DE<br />

345 Card DE<br />

346 Card display SEG<br />

347 Request card display SEG<br />

348 Card display parameters SEG<br />

349 Card type DE<br />

350 Card serial number DE<br />

351 Card limit DEG<br />

352 Card number DE<br />

353 Apply for card block SEG<br />

354 Apply for card block parameters SEG<br />

355 Spot rate DEG<br />

356 Category of key data DE<br />

357 Minimum order amount DE<br />

358 Minimum amount DEG<br />

359 Smallest step DEG<br />

360 Commission DE<br />

361 Communications address DE<br />

362 Communications address suffix DE<br />

363 Communications service DE<br />

364 Communications parameter DEG<br />

365 Communications access N<br />

366 Request communications settings SEG<br />

367 Communications settings - parameters SEG<br />

368 Return Fetch communications settings SEG<br />

369 Compression function DE<br />

370 Compression procedure SEG<br />

371 Compression version DE<br />

372 Conditions type DE<br />

373 Terms name DE<br />

374 Terms ID DE<br />

375 Terms version DE<br />

376 Consortium leader DE<br />

377 Contingent information DE<br />

378 Account or portfolio no. DE


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

45<br />

No. Name Type 8<br />

379 Account type DE<br />

380 Account statement code DE<br />

381 Account statement code modifiable DE<br />

382 Account information SEG<br />

383 Request account details SEG<br />

384 Account details parameters SEG<br />

385 Return account details SEG<br />

386 Spending limit DEG<br />

387 Account type DE<br />

388 New account movements SEG<br />

389 Account movements during specified period SEG<br />

390 Return new account movements SEG<br />

391 Account movements during specified period SEG<br />

392 New account movements - parameters SEG<br />

393 Account movements during specified period - parameters SEG<br />

394 Account DEG<br />

395 Account MVE<br />

396 Customer account DEG<br />

397 Beneficiary account DEG<br />

398 Account details beneficiary modifiable DE<br />

399 Account to be debited/credited DEG<br />

400 Account currency DE<br />

401 Contract reference DE<br />

402 Old contract reference DE<br />

403 Cost unit DE<br />

404 Request customer information SEG<br />

405 Customer information - parameters SEG<br />

406 Customer information SEG<br />

407 Bank name DE<br />

408 Bank code DE<br />

409 Bank ID DEG<br />

410 Bank ID MVE<br />

411 Bank message SEG<br />

412 Generic bank message N<br />

413 Overdraft limit DEG<br />

414 Bank officer name DE<br />

415 Customer ID DE<br />

416 Customer message SEG<br />

417 Customer message - parameters SEG<br />

418 Generic customer message N<br />

419 General anonymous customer message N<br />

420 Customer system ID DE<br />

421 Customer system status DE


Chapter:<br />

VIII<br />

Page:<br />

46<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

422 Price DE<br />

423 Price data DEG<br />

424 Price information DE<br />

425 Price quote type DE<br />

426 Share block DE<br />

427 Exchange rate quality DE<br />

428 Exchange rate quality available DE<br />

429 Exchange rate currency DE<br />

430 Quote extension DE<br />

431 Country DE<br />

432 Country information DE<br />

433 Country code DE<br />

434 Information cache expiry DE<br />

435 Direct debit - parameters SEG<br />

436 Latest quote DEG<br />

437 Last scheduled date modifiable DE<br />

438 Execute for the last time on DE<br />

439 Limit type DE<br />

440 Limit amount DEG<br />

441 Limit days DE<br />

442 List of new issues SEG<br />

443 Request list of new issues SEG<br />

444 List of new issues parameters SEG<br />

445 Post-dated cancellation possible DE<br />

446 Foreign market segment DE<br />

447 Domestic market segment DE<br />

448 Maximum buy price DE<br />

449 Maximum buy price, currency DE<br />

450 Maximum number of orders DE<br />

451 Maximum number of C records DE<br />

452 Maximum number of entries DE<br />

453 Maximum number of T records DE<br />

454 Lines available for payment purpose DE<br />

455 Maximum field length for client name DE<br />

456 Maximum field length for beneficiary name DE<br />

457 Maximum field length for institution name of beneficiary DE<br />

458 Maximum field length for purpose DE<br />

459 Maximum length DE<br />

460 Maximum message size DE<br />

461 Maximum lead time DE<br />

462 Minimum order amount DEG<br />

463 Minimum commission amount, currency DE<br />

464 Minimum commission amount, value DE


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

47<br />

No. Name Type 8<br />

465 Minimum subscription, amount DEG<br />

466 Minimum subscription, denomination DE<br />

467 Minimum lead time DE<br />

468 Mixing permissible DE<br />

469 After hours DEG<br />

470 Message end SEG<br />

471 Message reference, coded DE<br />

472 Message size DE<br />

473 Message header SEG<br />

474 Message number DE<br />

475 Message reference number DE<br />

476 Name DE<br />

477 Name 1 DE<br />

478 Name 2 DE<br />

479 Account holder 1 DE<br />

480 Account holder 2 DE<br />

481 Name of account holder 1 DE<br />

482 Name of account holder 2 DE<br />

483 Nominal value DEG<br />

484 Nominal value, value DE<br />

485 Nominal values DEG<br />

486 Subscribe for new issue SEG<br />

487 Subscribe for new issue parameters SEG<br />

488 New issues allowed DE<br />

489 Non-booked transactions DE<br />

490 Nominal value DE<br />

491 Nominal value modifiable DE<br />

492 Nominal value of capital adjustment DEG<br />

493 Nominal interest rate DE<br />

494 New issues DE<br />

495 Present user orders only DE<br />

496 Present user restriction available DE<br />

497 Standard package DE<br />

498 Outstanding orders DE<br />

499 Public key DEG<br />

500 Mode of operation, coded DE<br />

501 Portfolio order modifiable DE<br />

502 Portfolio order information SEG<br />

503 Request portfolio order information SEG<br />

504 Portfolio order information parameters SEG<br />

505 Ordering possible DE<br />

506 Portfolio order number DE<br />

507 Old portfolio order number DE


Chapter:<br />

VIII<br />

Page:<br />

48<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

508 Portfolio order number supported DE<br />

509 Split portfolio order number DE<br />

510 Ordersplitt DE<br />

511 Orderstatus SEG<br />

512 Request order status SEG<br />

513 Order status parameters SEG<br />

514 Place DE<br />

515 Parameters DEG<br />

516 International remittance - parameters DEG<br />

517 International remittance without text message parameters DEG<br />

518 Show outstanding post-dated remittances - parameters DEG<br />

519 Modify standing order - parameters DEG<br />

520 Interrupt standing order - parameters DEG<br />

521 Standing order setup - parameters DEG<br />

522 Cancel standing order - parameters DEG<br />

523 List of portfolio securities - parameters DEG<br />

524 Portfolio statement - parameters DEG<br />

525 Exchange rate parameters DEG<br />

526 Single remittance/direct debit parameters DEG<br />

527 Modify fixed-term deposit - parameters DEG<br />

528 Fixed-term deposit terms and conditions - parameters DEG<br />

529 New fixed-term deposit - parameters DEG<br />

530 Fixed-price offers - parameters DEG<br />

531 Fixed-price order parameters DEG<br />

532 Request financial data format parameters DEG<br />

533 Transmit financial data format parameters DEG<br />

534 Fund order parameters DEG<br />

535 Block card parameters DEG<br />

536 New account movements - parameters DEG<br />

537 Account movements during specified period - parameters DEG<br />

538 Customer/guest message parameters DEG<br />

539 List of new issues parameter DEG<br />

540 Subscribe for new issue parameters DEG<br />

541 Portfolio order information parameters DEG<br />

542 Order status parameters DEG<br />

543 Multiple remittance/direct debit parameters DEG<br />

544 Foreign currency and traveller's checkcheque order parameters DEG<br />

545 Foreign currency and traveller's checkcheque conditions parameters DEG<br />

546 Modify post-dated remittance - parameters DEG<br />

547 Submit post-dated remittance - parameters DEG<br />

548 Blank form order - parameters DEG<br />

549 Security details - parameters DEG<br />

550 Security prices - parameters DEG


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

49<br />

No. Name Type 8<br />

551 Portfolio order - parameters DEG<br />

552 Portfolio order modification - parameters DEG<br />

553 Portfolio order history - parameters DEG<br />

554 Portfolio order cancellation - parameters DEG<br />

555 Security referencßßße information - parameters DEG<br />

556 Instrument data - parameters DEG<br />

557 Key data - parameters DEG<br />

558 Parameter data SF<br />

559 Postal code DE<br />

560 Price limit DEG<br />

561 Price limit modifiable DE<br />

562 Price range to DEG<br />

563 Price range from DEG<br />

564 Price range, remarks DE<br />

565 Product type DE<br />

566 Product type foreign currency, traveller's checkcheques DE<br />

567 Product name DE<br />

568 Product version DE<br />

569 Renewal DEG<br />

570 Renewal extension period DE<br />

571 Type of asset DE<br />

572 Reference account DEG<br />

573 Reference number DE<br />

574 Region DE<br />

575 Region allowed DE<br />

576 Yield DE<br />

577 Remaining exemption amount DEG<br />

578 Risk class of user DE<br />

579 Risk class of security DE<br />

580 Risk class of security, implications DE<br />

581 Role of security supplier, coded DE<br />

582 Response DEG<br />

583 Segment-level response SEG<br />

584 Message-level response SEG<br />

585 Response code DE<br />

586 Response parameters DE<br />

587 Response text DE<br />

588 Repurchase price DEG<br />

589 Show balance SEG<br />

590 Show balance - parameters SEG<br />

591 Balance SEG<br />

592 Balance MVE<br />

593 Balance including pending transactions DEG


Chapter:<br />

VIII<br />

Page:<br />

50<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

594 Multiple direct debit SEG<br />

595 Multiple direct debit - parameters SEG<br />

596 Multiple remittance SEG<br />

597 Multiple payment - parameters SEG<br />

598 Change key SEG<br />

599 Key type DE<br />

600 Key name DEG<br />

601 Key number DE<br />

602 Block key SEG<br />

603 Key version DE<br />

604 Segment identifier DE<br />

605 Segment header DEG<br />

606 Segment number DE<br />

607 Segment version DE<br />

608 Unusual currency DE<br />

609 Security date and time DEG<br />

610 Security function code DE<br />

611 Security identification, Details DEG<br />

612 Security check reference DE<br />

613 Security reference number DE<br />

614 Security procedure SEG<br />

615 Security procedure, code DE<br />

616 Signature closer SEG<br />

617 Signature algorithm DEG<br />

618 Signature algorithm, coded DE<br />

619 Signature header SEG<br />

620 Debit/credit flag DE<br />

621 Interest charges DE<br />

622 Foreign currency and traveller's checkcheque order SEG<br />

623 Foreign currency and traveller's checkcheque order parameters SEG<br />

624 Request foreign curreny and traveller's checkcheque conditions SEG<br />

625 Foreign curreny and traveller's checkcheque conditions parameters SEG<br />

626 Foreign curreny and traveller's checkcheque conditions reponse SEG<br />

627 Cutoff for account movement data DE<br />

628 Cutoff for account movement data DE<br />

629 Blocking code DE<br />

630 Blocking of a key by the customer N


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

51<br />

No. Name Type 8<br />

631 Instrument data shares DEG<br />

632 Instrument data fund DEG<br />

633 Instrument data available DE<br />

634 Instrument data warrants DEG<br />

635 Instrument data pension DEG<br />

636 Standard package allowed DE<br />

637 Standard unit DE<br />

638 Default language DE<br />

639 Status DE<br />

640 Request status log SEG<br />

641 Status log - parameters SEG<br />

642 Status log response SEG<br />

643 Street/P.O. Box DE<br />

644 Denomination possibilitiy DE<br />

645 Denomination possibilities DEG<br />

646 Unit nominal value DE<br />

647 Search term allowed DE<br />

648 Total sum for all orders DEG<br />

649 Sychronisation SEG<br />

650 Synchronisation reply SEG<br />

651 Synchronisation reply message N<br />

652 Synchronisation mode DE<br />

653 Synchronisation message N<br />

654 Telefax number DE<br />

655 Telephone DE<br />

656 Telephone number for confirmation DE<br />

657 Telephone number mandatory DE<br />

658 Submit post-dated multiple direct debit SEG<br />

659 Submit post-dated multiple direct debit - parameters SEG<br />

660 Cancel post-dated multiple payment SEG<br />

661 Cancel post-dated multiple payment - parameters SEG<br />

662 Submit post-dated multiple payment SEG<br />

663 Submit post-dated multiple payment - parameters SEG<br />

664 Cancel post-dated multiple payment SEG<br />

665 Cancel post-dated multiple payment - parameters SEG<br />

666 Modify post-dated remittance SEG<br />

667 Modify post-dated remittance - parameters SEG<br />

668 Submit post-dated remittance SEG<br />

669 Submit post-dated remittance - parameters SEG<br />

670 Cancel post-dated remittance SEG<br />

671 Cancel post-dated remittance - parameters SEG<br />

672 Request appointment with bank officer SEG<br />

673 Bank officer appointment - parameters SEG


Chapter:<br />

VIII<br />

Page:<br />

52<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

674 Text key DE<br />

675 Text key and extension modifiable DE<br />

676 Text key extension DE<br />

677 Subject DE<br />

678 Period length DE<br />

679 Period length modifiable DE<br />

680 Period length in months DE<br />

681 Period length in weeks DE<br />

682 Turnus account statement DE<br />

683 Public key transmission SEG<br />

684 Overdraft interest DE<br />

685 Time DE<br />

686 Time of transmission DE<br />

687 Reclassification SEG<br />

688 Reclassification parameters SEG<br />

689 Portfolio movements DE<br />

690 Underlying DE<br />

691 Subsidiary account characteristic DE<br />

692 HBCI version supported DE<br />

693 HBCI versions supported DEG<br />

694 Compression procedures supported DEG<br />

695 Security procedures supported DEG<br />

696 Language supported DE<br />

697 Languages supported DEG<br />

698 UPD version DE<br />

699 Use of UPD DE<br />

700 General user parameters SEG<br />

701 User parameter data SF<br />

702 Validation result DE<br />

703 General bank parametersCustomer system preferences SEG<br />

704 User procedure DE<br />

705 Available funds DEG<br />

706 Authorised to draw DEG<br />

707 Authorised to draw DE<br />

708 Authorisation to draw DE<br />

709 Payout amount, currency DE<br />

710 Payout amount, value DE<br />

711 Clearing account DEG<br />

712 Clearing account modifiable DE<br />

713 Clearing account mandatory DE<br />

714 Type of dispatch account statement DE<br />

715 Dispatch costs proportion, currency DE<br />

716 Dispatch costs proportion, value DE


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

53<br />

No. Name Type 8<br />

717 Encrypted data SEG<br />

718 Encrypted message N<br />

719 Encryption algorithm DEG<br />

720 Encryption algorithm, coded DE<br />

721 Encryption header SEG<br />

722 Version of filter function DE<br />

723 Document version DE<br />

724 Version of terms and conditions DEG<br />

725 Version of security procedure DE<br />

726 Version number DE<br />

727 Administration charge DE<br />

728 Use of hash algorithm, coded DE<br />

729 Use of the signature algorithm, coded DE<br />

730 Use of encryption algorithm, coded DE<br />

731 Payment purpose DEG<br />

732 Payment purpose modifiable DE<br />

733 Purpose of public key DE<br />

734 Purpose, AZV DE<br />

735 Payment purpose line DE<br />

736 Start date DE<br />

737 Start bank ID DEG<br />

738 Pre-opening DEG<br />

739 Blank form order SEG<br />

740 Blank form order - parameters SEG<br />

741 Registration time and date DEG<br />

742 Previous day DEG<br />

743 Currency DE<br />

744 Currency of list of portfolio securities DE<br />

745 Currency of list of portfolio securities available DE<br />

746 Currency of terms and conditions DE<br />

747 Currency of price quote DE<br />

748 Currency name DE<br />

749 URL DE<br />

750 Other information DE<br />

751 Provide additional information DE<br />

752 Other subscription information DE<br />

753 Value DE<br />

754 Value of the algorithm parameter, IV DE<br />

755 Value of the algorithm parameter, key DE<br />

756 Value of hash algorithm parameter DE<br />

757 Exponent value DE<br />

758 Modulus value DE


Chapter:<br />

VIII<br />

Page:<br />

54<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

759 Security booking DE<br />

760 Type of security DE<br />

761 Type of security, text DE<br />

762 Security name DE<br />

763 Search term for security name DE<br />

764 Securities asset code DE<br />

765 Securities asset groups DEG<br />

766 Security group DE<br />

767 Security group, text DE<br />

768 Notes on securities DE<br />

769 Information on security DE<br />

770 Request security details SEG<br />

771 Detailed security information available DE<br />

772 Security details - parameters SEG<br />

773 Security details SEG<br />

774 Securities category DE<br />

775 Request security prices SEG<br />

776 Security prices - parameters SEG<br />

777 Security prices SEG<br />

778 Portfolio order DE<br />

779 Present portfolio order SEG<br />

780 Portfolio order - parameters SEG<br />

781 Modify portfolio order SEG<br />

782 Confirm portfolio order modification SEG<br />

783 Portfolio order modification - parameters SEG<br />

784 Confirm submission of portfolio order SEG<br />

785 Portfolio order history SEG<br />

786 Request portfolio order history SEG<br />

787 Portfolio order history - parameters SEG<br />

788 Cancel portfolio order SEG<br />

789 Confirm portfolio order cancellation SEG<br />

790 Portfolio order cancellation - parameters SEG<br />

791 Security reference DEG<br />

792 Request for security reference SEG<br />

793 Security reference information - parameters SEG<br />

794 Security reference number information SEG<br />

795 Request instrument data SEG<br />

796 Instrument data - parameters SEG<br />

797 Instrument data SEG<br />

798 Securities sales DE<br />

799 Value date of invoice DE<br />

800 Key data DEG<br />

801 Request key data SEG


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of HBCI elements<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

55<br />

No. Name Type 8<br />

802 Key data - parameters SEG<br />

803 Return key data SEG<br />

804 Important details mandatory DE<br />

805 Reinvestment code DE<br />

806 Reinvestment code modifiable DE<br />

807 Reinvestment code on renewal DE<br />

808 Reinvestment discount DE<br />

809 End date reinvestment discount DE<br />

810 Reinvestment discount possible DE<br />

811 Start date reinvestment discount DE<br />

812 Reinvestment discount, value DE<br />

813 Subscription possible DE<br />

814 Subscription explanation DE<br />

815 End subscription period DE<br />

816 End subscription period, time DE<br />

817 Start date subscription period DE<br />

818 Start date subscription period, time DE<br />

819 Subscription period, remarks DE<br />

820 Registration time DE<br />

821 Reference period DE<br />

822 Time units DE<br />

823 Time units modifiable DE<br />

824 Time limit DE<br />

825 Time limit modifiable DE<br />

826 End date DE<br />

827 Time period possible DE<br />

828 Start date DE<br />

829 Certificate DEG<br />

830 Content of certificate DE<br />

831 Certificate type DE<br />

832 Earned interest expected DEG<br />

833 Earned interest account DEG<br />

834 Earned interest credit account modifiable DE<br />

835 Interest method DE<br />

836 Interest period DE<br />

837 Rate of interest DE<br />

838 Queries supported DE<br />

839 Exchanges supported DE<br />

840 Issue filter supported DE<br />

841 Issuing parties supported DE<br />

842 Available categories DE<br />

843 Limit types supported DE<br />

844 Limit steps supported DE


Chapter:<br />

VIII<br />

Page:<br />

56<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of HBCI elements<br />

No. Name Type 8<br />

845 Order types supported DE<br />

846 Securities groups supported DE<br />

847 Limit limits supported DE<br />

848 Target country supported DE<br />

849 Additional scheduling alternatives DE<br />

850 Additional scheduling alternatives DE<br />

851 Additional scheduling alternatives, implications DE


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

57<br />

VIII.3 Overview of message structure<br />

The sequence and number of messages that may be exchanged are depicted in the<br />

tables below for the following types of session:<br />

• Standard session<br />

• Anonymous session<br />

• Synchronisation<br />

• Retrieval of communications settings<br />

• Changing customer public key<br />

• Initial retrieval of financial institution public key<br />

• Initial transmission of customer public key<br />

• Key blocking by the customer (RDH)<br />

• Key blocking by the customer (DDV)<br />

The presence of the segments HNVSK and HNVSD indicates whether the message is<br />

encrypted. In this case the encrypted segments are indented.


Chapter:<br />

VIII<br />

Page:<br />

58<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

VIII.3.1<br />

Standard session


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

59<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N6 N2 N15 N14 N8 N14<br />

Message 1 1 0-n 0-n 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNVSK 1 1 1 1 1 1<br />

HNVSD 1 1 1 1 1 1<br />

HNSHK 1 0-1 0-3 0-1 1 0-1<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m 9 - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA 0/1-2 10 - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... 11 - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - 0/0-2 - - - -<br />

HISYN - - - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL<br />

12<br />

- - 1 - - -<br />

HISAL - - - 0-1 n - -<br />

... - - - - - -<br />

HKPRO - - 0-1 - - -<br />

HIPRO - - - 0- n - -<br />

HKSAK - - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

9<br />

10<br />

11<br />

12<br />

m is the total number of segments in the customer message<br />

The expression ‘n/m’ is used to indicate a difference between symmetrical ("n") and asymmetrical ("m")<br />

procedure.<br />

Parameter segments for any other supported business transactions go here.<br />

From the group of order segments, only one business transaction type per message is allowed at<br />

present. The example of a ”Show balance” business transaction is used here.


Chapter:<br />

VIII<br />

Page:<br />

60<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N6 N2 N15 N14 N8 N14<br />

HNSHA 1 0-1 1-3 0-1 1 0-1<br />

HNHBS 1 1 1 1 1 1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

61<br />

VIII.3.2<br />

Anonymous session<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N7 N3 N16 N14 N9 N14<br />

Message 1 1 0-n 0-n 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNSHK - - - - - -<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA - - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - - - - - -<br />

HISYN - - - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL 13 - - - - - -<br />

HISAL - - - - - -<br />

... - - 0-n 0-n - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA - - - - - -<br />

HNHBS 1 1 1 1 1 1<br />

13<br />

Here, the customer can send order segments that do not need to be signed. A list of which business<br />

transactions do not need to be signed is included in the guest UPD sent by the financial institution.


Chapter:<br />

VIII<br />

Page:<br />

62<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

VIII.3.3<br />

Synchronisation<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N18 N19 N8 N14<br />

Message 1 1 0 0 1 1<br />

HNHBK 1 1 - - 1 1<br />

HNVSK 1 1 1 1 1 1<br />

HNVSD 1 1 1 1 1 1<br />

HNSHK 1 0-1 - - 1 0-1<br />

HIRMG - 1 - - - 1<br />

HIRMS - 0-m - - - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA 0/1-2 - - - - -<br />

HKSYN 1 - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - 0/0-2 - - - -<br />

HISYN - 1 - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA 1 0-1 - - 1 0-1<br />

HNHBS 1 1 - - 1 1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

63<br />

VIII.3.4<br />

Communications access<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer<br />

Financial<br />

institution<br />

Customer<br />

Financial<br />

institution<br />

Customer<br />

Financial<br />

institution<br />

N7 N3 N13 N4 N9 N14<br />

Message 1 1 1 1 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNSHK - - - - - -<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA - - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - - - - - -<br />

HISYN - - - - - -<br />

HIKIM - - - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - 1 - - -<br />

HIKOM - - - 0-n - -<br />

HKEND - - - - 1 -<br />

HNSHA - - - - - -<br />

HNHBS 1 1 1 1 1 1


Chapter:<br />

VIII<br />

Page:<br />

64<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

VIII.3.5<br />

Changing customer public key (RDH)<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N6 N2 N1 N14 N8 N14<br />

Message 1 1 1 1 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNVSK 1 1 1 1 1 1<br />

HNVSD 1 1 1 1 1 1<br />

HNSHK 1 0-1 1 0-1 1 0-1<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA 0/1-2 - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - 0/0-2 - - - -<br />

HISYN - - - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - 1-2 - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA 1 0-1 1 0-1 1 0-1<br />

HNHBS 1 1 1 1 1 1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

65<br />

VIII.3.6<br />

Initial request for financial institution public key (RDH)<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N10 N11 N9 N14<br />

Message 1 1 0 0 1 1<br />

HNHBK 1 1 - - 1 1<br />

HNSHK - 0-1 - - - 0-1<br />

HIRMG - 1 - - - 1<br />

HIRMS - 0-m - - - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA 2 - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - - - - - -<br />

HIUPD - - - - - -<br />

HIISA - 1-2 - - - -<br />

HISYN - - - - - -<br />

HIKIM - - - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA - 0-1 - - - 0-1<br />

HNHBS 1 1 - - 1 1


Chapter:<br />

VIII<br />

Page:<br />

66<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

VIII.3.7<br />

Initial transmission of customer public key (RDH)<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N12 N14 N8 N14<br />

Message 1 1 0 0 1 1<br />

HNHBK 1 1 - - 1 1<br />

HNVSK 1 1 - - 1 1<br />

HNVSD 1 1 - - 1 1<br />

HNSHK 1 0-1 - - - 0-1<br />

HIRMG - 1 - - - 1<br />

HIRMS - 0-m - - - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB - - - - - -<br />

HKISA - - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - - - - - -<br />

HIKOM - - - - - -<br />

HISHV - - - - - -<br />

HIKPV - - - - - -<br />

HIUEBS - - - - - -<br />

... - - - - - -<br />

HIUPA - - - - - -<br />

HIUPD - - - - - -<br />

HIISA - - - - - -<br />

HISYN - - - - - -<br />

HIKIM - - - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK 2 - - - - -<br />

HKSSP - - - - - -<br />

HISSP - - - - - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA 1 0-1 - - - 0-1<br />

HNHBS 1 1 - - 1 1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Overview of message structure<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

67<br />

VIII.3.8<br />

Key blocking by the customer (RDH)<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N6, N7 N2, N3 N17 N5 N8, N9 1N14<br />

Message 1 1 1 1 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNVSK 0-1 0-1 0-1 - 0-1 -<br />

HNVSD 0-1 0-1 0-1 - 0-1 -<br />

HNSHK 0-1 0-1 0-1 0-1 - 0-1<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA 1-2 - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - 0-2 - - - -<br />

HISYN - - - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - 1 - - -<br />

HISSP - - - 1 - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA 0-1 0-1 0-1 0-1 - 0-1<br />

HNHBS 1 1 1 1 1 1


Chapter:<br />

VIII<br />

Page:<br />

68<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Overview of message structure<br />

VIII.3.9<br />

Key blocking by the customer (DDV)<br />

Message<br />

Segment Session initialisation Order message Session end<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

Customer Financial<br />

institution<br />

N6, N7 N2, N3 N17 N5 N8, N9 N14<br />

Message 1 1 1 1 1 1<br />

HNHBK 1 1 1 1 1 1<br />

HNVSK 0-1 0-1 0-1 - - -<br />

HNVSD 0-1 0-1 0-1 - - -<br />

HNSHK 0-1 0-1 0-1 - - -<br />

HIRMG - 1 - 1 - 1<br />

HIRMS - 0-m - 0-m - 0-m<br />

HKIDN 1 - - - - -<br />

HKVVB 1 - - - - -<br />

HKISA - - - - - -<br />

HKSYN - - - - - -<br />

HIBPA - 0-1 - - - -<br />

HIKOM - 0-1 - - - -<br />

HISHV - 0-1 - - - -<br />

HIKPV - 0-1 - - - -<br />

HIUEBS - 0-n - - - -<br />

... - 0-n - - - -<br />

HIUPA - 0-1 - - - -<br />

HIUPD - 0-n - - - -<br />

HIISA - - - - - -<br />

HISYN - - - - - -<br />

HIKIM - 0-n - - - -<br />

HKSAL - - - - - -<br />

HISAL - - - - - -<br />

... - - - - - -<br />

HKPRO - - - - - -<br />

HIPRO - - - - - -<br />

HKSAK - - - - - -<br />

HKSSP - - 1 - - -<br />

HISSP - - - 1 - -<br />

HKKOM - - - - - -<br />

HIKOM - - - - - -<br />

HKEND - - - - 1 -<br />

HNSHA 0-1 0-1 0-1 - - -<br />

HNHBS 1 1 1 1 1 1


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: HBCI basic character sets<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

69<br />

VIII.4 HBCI basic character sets<br />

The HBCI basic character sets are subsets of ISO 8859. Only printable ISO 8859<br />

characters are permitted, i.e. from X’20’ to X’7E’ and from X’A1’ to X’FF’, in addition to<br />

X’0A’ (line feed) and X’0D’ (carriage return).<br />

VIII.4.1 ISO 8859-1 Subset German<br />

0 1 2 3 4 5 6 7 8 9 A B C D E F<br />

0 LF CR<br />

1<br />

2 SP ! " # $ % & ' ( ) * + , - . /<br />

3 0 1 2 3 4 5 6 7 8 9 : ; < = > ?<br />

4 @ A B C D E F G H I J K L M N O<br />

5 P Q R S T U V W X Y Z [ \ ] ^ _<br />

6 ` a b c d e f g h i j k l m n o<br />

7 p q r s t u v w x y z { | } ~<br />

8<br />

9<br />

A ¡ ¢ £ ¤ ¥ ¦ § ¨ © ª « ¬ - ® ¯<br />

B ° ± ² ³ ´ µ · ¸ ¹ º » ¼ ½ ¾ ¿<br />

C À Á Â Ã Ä Å Æ Ç È É Ê Ë Ì Í Î Ï<br />

D Ð Ñ Ò Ó Ô Õ Ö × Ø Ù Ú Û Ü Ý Þ ß<br />

E à á â ã ä å æ ç è é ê ë ì í î ï<br />

F ð ñ ò ó ô õ ö ÷ ø ù ú û ü ý þ ÿ<br />

VIII.4.2 ISO 8859-1 Subset English<br />

0 1 2 3 4 5 6 7 8 9 A B C D E F<br />

0 LF CR<br />

1<br />

2 SP ! " # $ % & ' ( ) * + , - . /<br />

3 0 1 2 3 4 5 6 7 8 9 : ; < = > ?<br />

4 @ A B C D E F G H I J K L M N O<br />

5 P Q R S T U V W X Y Z [ \ ] ^ _<br />

6 ` a b c d e f g h i j k l m n o<br />

7 p q r s t u v w x y z { | } ~<br />

8<br />

9<br />

A ¡ ¢ £ ¤ ¥ ¦ § ¨ © ª « ¬ - ® ¯<br />

B ° ± ² ³ ´ µ · ¸ ¹ º » ¼ ½ ¾ ¿<br />

C À Á Â Ã Ä Å Æ Ç È É Ê Ë Ì Í Î Ï<br />

D Ð Ñ Ò Ó Ô Õ Ö × Ø Ù Ú Û Ü Ý Þ ß<br />

E à á â ã ä å æ ç è é ê ë ì í î ï<br />

F ð ñ ò ó ô õ ö ÷ ø ù ú û ü ý þ ÿ


Chapter:<br />

VIII<br />

Page:<br />

70<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

HBCI basic character sets


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: HBCI basic character sets<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

71<br />

VIII.4.3<br />

ISO 8859-1 Subset French<br />

0 1 2 3 4 5 6 7 8 9 A B C D E F<br />

0 LF CR<br />

1<br />

2 SP ! " # $ % & ' ( ) * + , - . /<br />

3 0 1 2 3 4 5 6 7 8 9 : ; < = > ?<br />

4 @ A B C D E F G H I J K L M N O<br />

5 P Q R S T U V W X Y Z [ \ ] ^ _<br />

6 ` a b c d e f g h i j k l m n o<br />

7 p q r s t u v w x y z { | } ~<br />

8<br />

9<br />

A ¡ ¢ £ ¤ ¥ ¦ § ¨ © ª « ¬ - ® ¯<br />

B ° ± ² ³ ´ µ · ¸ ¹ º » ¼ ½ ¾ ¿<br />

C À Á Â Ã Ä Å Æ Ç È É Ê Ë Ì Í Î Ï<br />

D Ð Ñ Ò Ó Ô Õ Ö × Ø Ù Ú Û Ü Ý Þ ß<br />

E à á â ã ä å æ ç è é ê ë ì í î ï<br />

F ð ñ ò ó ô õ ö ÷ ø ù ú û ü ý þ ÿ


Chapter:<br />

VIII<br />

Page:<br />

72<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Example session<br />

VIII.5 Example session<br />

In the example, the customer is working with a security data carrier capable of using<br />

asymmetric security procedure (RDH).<br />

VIII.5.1 Message "Session initialisation"<br />

a) Customer message<br />

The user signs the customer message with the ID ‘12345’. (The unencrypted structure<br />

is displayed for clarity.)<br />

Segment: Message header 14<br />

HNHBK:1:3+000000000323+220+0+1'<br />

Segment: Signature header<br />

HNSHK:2:3+1+654321+1+1+1::2+3234+1:19960701:111144<br />

+1:999:1+6:10:16+280:10020030:12345:S:1:1'<br />

Segment: Identification<br />

HKIDN:3:2+280:10020030+12345+2+1'<br />

Segment: Preparation for processing<br />

HKVVB:4:2+2+3+1+HomeBanking Plus+3.0'<br />

Segment: Request for a public key (Signature key)<br />

HKISA:5:2+2+124+280:10020030:11111:S:1:1'<br />

Segment: Request for a public key (Encryption key)<br />

HKISA:6:2+2+124+280:10020030:11111:V:1:1'<br />

Segment: Signature closer<br />

HNSHA:7:1+654321+@96@'<br />

Segment: Message terminator<br />

HNHBS:8:1+1'<br />

14<br />

To make them easier to read, the segments in this example each begin on a new line. In practice, of<br />

course, segments are not required to end with a carriage return.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Example session<br />

b) Financial institution message<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

73<br />

Financial institution messages are not signed in this example. The current financial<br />

institution parameter data, user parameter data, and the current signature key are also<br />

sent.<br />

Segment: Message header<br />

HNHBK:1:3+000000000932+220+4711+1+4711:1'<br />

Segment: Signature header<br />

HNSHK:2:3+1+123456+1+1+1::2+3234+1:19960701:111145<br />

+1:999:1+6:10:16+280:10020030:1:S:1:1'<br />

Segment: Message-level response<br />

HIRMG:3:2+0010::Message received'<br />

Segment: Segment-level response<br />

Segment sequence: Financial institution parameter data<br />

HIBPA:4:2:4+3+280:10020030+Any Financial<br />

institution, Anytown+1+1:2:3+1+100'<br />

HIKOM:5:2:4+280:10020030+1+1:12345678:00+2:1234567<br />

9:00+3:123.123.123.123::UUE:1'<br />

HISHV:6:2:4+N+RDH:3:2:1'<br />

HIUEBS:7:1:4+1+2+7:51:53:54:67:69'<br />

HIUEBS:8:2:4+1+2+14:51:53:54:67:69'<br />

HILASS:9:2:4+1+2+14:04:05'<br />

HISUBS:10:2:4+1+2+999:14:51:53:54'<br />

HISLAS:11:2:4+1+2+99:14:04:05'<br />

HIKAZS:12:2:4+1+2+60:Y'<br />

HIKANS:13:2:4+1+2+60:Y'<br />

HISALS:14:3:4+1+2'<br />

Segment sequence: User parameter data<br />

HIUPA:15:2:4+12345+4+0'<br />

HIUPD:16:4:4+1234567:280:10020030+12345+DEM+Ernst<br />

Miller++Giro Spezial+T:2000,:DEM+HKPRO:1+HKSAK:1+H


Chapter:<br />

VIII<br />

Page:<br />

74<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Example session<br />

KISA:1+HKSSP:1+HKUEB:1+HKLAS:1+HKKAN:1+HKKAZ:1+HKS<br />

AL:1'<br />

HIUPD:17:4:4+1234568:280:10020030+12345+DEM+Ernst<br />

Miller++Sparkonto 2000++HKPRO:1+HKSAK:0+HKISA:1+HK<br />

SSP:0+HKUEB:2:Z:1000,:DEM:7+HKKAN:1+HKKAZ:1+HKSAL:<br />

2'<br />

Segment: Public key transmission (signature key)<br />

HIISA:18:2:5+1+333+1+224+280:10020030:11111:S:1:1+<br />

6:16:10:@96@:12:@5@:13'<br />

Segment: Public key transmission (encryption key) 15<br />

Segment: Financial institution message<br />

HIKIM:19:2+Homeowner savings+Find out about the ne<br />

w homeowner savings plan.'<br />

Segment: Signature terminator<br />

HNSHA:20:1+123456+@96@'<br />

Segment: Message terminator<br />

HNHBS:21:1+1'<br />

15<br />

It is assumed that the public encryption key is still current, and does not therefore need to be updated.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Example session<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

75<br />

VIII.5.2<br />

Message "Single remittance"<br />

a) Customer message<br />

This message is signed jointly by user ‘12345’ and user ‘76543’.<br />

Segment: Message header<br />

HNHBK:1:3+000000000523+220+4711+2'<br />

Segment: Signature header for user ‘76543’<br />

HNSHK:2:3+1+765432+1+1+1::2+3234+1:19960701:111144<br />

+1:999:1+6:10:16+280:10020030:76543:S:1:1'<br />

Segment: Signature header for user ‘12345’<br />

HNSHK:3:2+1+654321+1+1+1::2+3234+1:19960701:111144<br />

+1:999:1+6:10:16+280:10020030:12345:S:1:1'<br />

Segment: Single remittance<br />

HKUEB:4:2+1234567::280:10020030+7654321::280:20030<br />

040+MEIER FRANZ++1000,:DEM+51+000+RE-NR.1234:KD-<br />

NR.9876'<br />

Segment: Signature closer for user ‘12345’<br />

HNSHA:5:1+654321+@96@'<br />

Segment: Signature closer for user ‘76543’<br />

HNSHA:6:1+765432+@96@'<br />

Segment: Message terminator<br />

HNHBS:7:1+2'<br />

b) Financial institution message<br />

Segment: Message header<br />

HNHBK:1:3+000000000140+220+4711+2+4711:2'<br />

Segment: signature header<br />

HNSHK:2:3+1+123457+1+1+1::2+3234+1:19960701:111148<br />

+1:999:1+6:10:16+280:10020030:1:S:1:1'


Chapter:<br />

VIII<br />

Page:<br />

76<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Example session<br />

Segment: Message-level response<br />

HIRMG:3:2+0010::Message received<br />

Segment: Segment-level response<br />

HIRMS:4:2:4+0010::Order received'<br />

Segment: Data segments<br />

Segment: Signature terminator<br />

HNSHA:5:1+123457+@96@'<br />

Segment: Message terminator<br />

HNHBS:6:1+2'


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Example session<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

77<br />

VIII.5.3<br />

Message "Show balance"<br />

a) Customer message<br />

The customer message is signed by user ‘12345’ alone.<br />

Segment: Message header<br />

HNHBK:1:3+000000000257+220+4711+3'<br />

Segment: Signature header<br />

HNSHK:2:3+1+654321+1+1+1::2+3234+1:19960701:111144<br />

+1:999:1+6:10:16+280:10020030:12345:S:1:1'<br />

Segment: Show balance<br />

HKSAL:3:3+1234567::280:10020030+N'<br />

Segment: Signature closer<br />

HNSHA:4:1+654321+@96@'<br />

Segment: Message terminator<br />

HNHBS:5:1+3'<br />

b) Financial institution message<br />

Segment: Message header<br />

HNHBK:1:3+000000000213+220+4711+3+4711:3'<br />

Segment: Signature header<br />

HNSHK:2:3+1+123458+1+1+1::2+3234+1:19960701:111150<br />

+1:999:1+6:10:16+280:10020030:1:S:1:1'<br />

Segment: Message-level response<br />

HIRMG:3:2+0010::Message received'<br />

Segment: Segment-level response<br />

HIRMS:4:2:3+0020::Order executed'


Chapter:<br />

VIII<br />

Page:<br />

78<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Example session<br />

Segment: Data segments<br />

HISAL:5:3:3+1234567::280:10020030+Giro Spezial+DEM<br />

+C:1000,:DEM:19960701+D:500,:DEM:19960701+5000,:DE<br />

M+7138,35:DEM+1476,98:DEM'<br />

Segment: Signature terminator<br />

HNSHA:6:1+123458+@96@'<br />

Segment: Message terminator<br />

HNHBS:7:1+3'


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Example session<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

79<br />

VIII.5.4<br />

Message "Session end"<br />

a) Customer message<br />

Segment: Message header<br />

HNHBK:1:3+0000000000475+220+4711+4'<br />

Segment: Signature header<br />

HNSHK:2:3+1+654321+1+1+1::2+3234+1:19960701:111144<br />

+1:999:1+6:10:16+280:10020030:12345:S:1:1'<br />

Segment: Session end<br />

HKEND:3:1+4711'<br />

Segment: Signature closer<br />

HNSHA:4:1+654321+@96@'<br />

Segment: Message terminator<br />

HNHBS:5:1+4'<br />

b) Financial institution message<br />

Segment: Message header<br />

HNHBK:1:3+000000000385+220+4711+4+4711:4'<br />

Segment: Signature header<br />

HNSHK:2:3+1+123459+1+1+1::2+3234+1:19960701:111151<br />

+1:999:1+6:10:16+280:10020030:1:S:1:1'<br />

Segment: Message-level response<br />

HIRMG:3:2+0100::Session end'<br />

Segment: Segment-level response<br />

HIRMS:4:2:3+0020::Order executed'<br />

Segment: Data segments<br />

Segment: Signature terminator


Chapter:<br />

VIII<br />

Page:<br />

80<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Example session<br />

HNSHA:5:1+123459+@96@'<br />

Segment: Message terminator<br />

HNHBS:6:1+4'


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Principles governing communications media<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

81<br />

VIII.6 Principles governing communications media<br />

Although HBCI is independent of the underlying communications levels, certain basic<br />

principles must be observed to preserve multi-financial institution capability and<br />

standardisation.<br />

The principles are:<br />

• Limiting the possible combinations of protocols approved for secure transmission of<br />

HBCI data streams.<br />

• Defining the parameters used.<br />

• Mapping HBCI session procedures into the underlying structures.<br />

They have been elaborated for the two following types of communication:<br />

• T-Online under CEPT/EHKP/BtxFIF<br />

• TCP/IP<br />

VIII.6.1 T-Online<br />

As part of its requirements for external computer links, T-Online assumes a protocol<br />

structure which fits onto X.25 (Datex-P) and allows two possible connections: EHKP or<br />

X.29. The X.29 alternative is not specified here. For transmission of HBCI messages<br />

the following definitions are made, depending on the kind of connection used.<br />

Financial institution system: conditionally mandatory (either the T-Online or the TCP/IP<br />

access must be implemented<br />

Customer system: mandatory (so long as no technical restrictions exist<br />

concerning the hardware)<br />

VIII.6.1.1 ETSI 300 072 ("CEPT")<br />

ETSI 300 072 specifies a display and data transmission standard. HBCI data are<br />

transmitted in the "Transparent Mode of the Line Protocol" within the CEPT data<br />

stream.<br />

The data flow control specified in ETSI 300 072 permits also the use of terminals which<br />

do not allow error correction according to V.42 or MNP4 by the modem.<br />

Session initialisation and session end are treated as follows in the T-Online session<br />

protocol:<br />

a) Session initialisation<br />

In order to avoid separate decoder macros having to be created in spite of the same<br />

structure of the T-Online transfer page for each group of financial institutions, the<br />

following requirements are made for the design of the transfer page.


Chapter:<br />

VIII<br />

Page:<br />

82<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Principles governing communications media<br />

Column 6<br />

Line 10<br />

Imprint<br />

BSC:<br />

BSC<br />

Length: 8<br />

Space for<br />

free design<br />

by the<br />

bank<br />

HNHBK:1:1+0+1+N‘<br />

HNSHK:2:1+1+654321+1+1+1::2+3234+1:19960701:111144+1:999:1+<br />

:10:16+280:10020030:12345:S:1:1‘<br />

HKIDN:3:1+280:10020030+12345+2+1‘<br />

Transparent<br />

HKVSW:4:1+N+N‘<br />

Transport frame<br />

HKVVB:5:1+1+2+3+1+Homebanking<br />

Length: 1024<br />

HNSHA:6:1+654321+‘<br />

l<br />

HNHBS:7:1+1'<br />

BTX:<br />

Subscriber ID<br />

(System variable)<br />

Length: 12<br />

Co-user suffix<br />

(System variable)<br />

Length: 4<br />

Figure 26: Structure of T-Online transfer page<br />

What cannot be changed here are the position of the field "Financial institution" in line<br />

10, column 6, and the text string "BSC" in Line 10, Column 1. The letters "BSC" stand<br />

for financial institution code.<br />

In addition the T-Online transfer page must contain the following session fields in the<br />

order specified (this is not an HBCI format specification):<br />

Name<br />

Lengt<br />

h<br />

Format<br />

Status<br />

Nu<br />

mbe<br />

r<br />

Entry<br />

under HBCI<br />

Financial institution num 8 M 1 Identification of the financial<br />

institution, e.g. via the financial<br />

institution code<br />

Transparent<br />

bin 1024 M 1 for BtxFIF data blocks<br />

transport framework<br />

Subscriber ID an 12 M 1 System variable: Subscriber ID<br />

Co-user suffix an 4 M 1 System variable: Co-user suffix<br />

Financial institution<br />

By this means the financial institution concerned is determined at the financial<br />

institution end. The 8-digit financial institution code is inserted.<br />

Transparent transport framework<br />

The transport framework on the receiving end must be able to accept the<br />

session initialisation message. The size of this message depends on many<br />

parameters, such as for example the security procedure used. If one uses


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Principles governing communications media<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

83<br />

maximum values as a basis, then a value of 1024 bytes is sufficient with the<br />

specified procedures. This takes account also of the necessary space for the Btx<br />

header data and the CEPT structure code.<br />

The BtxFIF parameter "Length of the data" should be inserted for this 1st data<br />

block to "1024".<br />

Subscriber ID<br />

Via T-Online the subscriber ID is made available as a system variable. The<br />

subscriber ID must be entered as a system variable in every case, since its<br />

presence affects the T-Online session procedure (sending of personal data with<br />

"19").<br />

Co-user suffix<br />

Via T-Online the co-user suffix is made available as a system variable. Even if<br />

the transmission of the co-user suffix should not be desired by a financial<br />

institution, this field must be edited on the page, since otherwise the size of the<br />

transport framework cannot be standardised.<br />

b) Transmission mode<br />

After receipt of the session initialisation message the HBCI session can be carried out<br />

with a transparent transport page for accepting the BtxFIF data blocks. This is a CEPT<br />

data collection page without structure code, data entry screen fields and prompt texts<br />

and with only one transparent session field of a maximum size of 1616 bytes. This size<br />

must be adjusted for smaller messages and reconciled with the BtxFIF parameter<br />

"Length of the data".<br />

The transparent session fields for the transmission of the BtxFIF blocks must absolutely<br />

possess the attribute "protected". An exception is the last block of any financial<br />

institution message. Here the session field must allow the entry of transparent data<br />

(attribute: "unprotected"), so that the customer system can send the next HBCI<br />

message. The last block of the last financial institution message must on the other hand<br />

be sent as a protected session field, since otherwise the customer system cannot<br />

separate the transport connection. (see under c below) "Session end, caused by<br />

customer").<br />

T-Online session control functions, such as for example direct page selection, are not<br />

used. The session procedure is prescribed by HBCI.<br />

An HBCI session must be processed without interruptions by user input, since the time<br />

for transmission of transparent data by the T-Online access computer is monitored.<br />

c) Session end, caused by the customer<br />

The customer system marks the last HBCI message by sending the session end<br />

message. The last BtxFIF block of the associated reply message also ends the logical<br />

HBCI session. The transparent session field for transmission of the last BtxFIF block of<br />

the last financial institution message receives the attribute "protected".<br />

The customer system must now leave the external computer via *0# in order to bring<br />

about a logical end to the session. Following this, after possibly changing the security<br />

data carrier, a new logical session can be set up by sending a new session initialisation


Chapter:<br />

VIII<br />

Page:<br />

84<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Principles governing communications media<br />

or the T-Online connection can be terminated completely. (*9#, Modem command ATH,<br />

or similar)<br />

d) Session end, caused by the financial institution<br />

The financial institution sends synchronously an HBCI reply message with confirmation<br />

of the session end in the last BtxFIF block. No CEPT farewell page is output.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Principles governing communications media<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

85<br />

VIII.6.1.2 EHKP<br />

The EHKP protocols (German initials for "Uniform Higher Communications Protocols")<br />

of levels 4 and 6 make sure of a secure communication between T-Online network<br />

nodes and external computer. With this there exists through EHKP6 the restriction to a<br />

maximum session field length of 1616 bytes while using a single session field on a<br />

transport page without structure code, entry screen fields and prompt texts. To remove<br />

this restriction BtxFIF is used for the fragmentation of the HBCI messages.<br />

VIII.6.1.3 BtxFIF<br />

BtxFIF ("Btx File Interchange Format") allows transmission on both sides of any 8-bit<br />

coded transparent data streams in a block-oriented protocol. Two different message<br />

structures are used.<br />

♦ Structure of the 1st data block<br />

Header<br />

label<br />

Length<br />

Header<br />

Length<br />

Data<br />

Block<br />

Header<br />

File<br />

Header<br />

Data<br />

♦ Structure of the following data blocks<br />

Header<br />

label<br />

Length<br />

Header<br />

Length<br />

Data<br />

Block<br />

Header<br />

Data<br />

♦ Definitions<br />

Apart from the rules for entries listed below, the definitions of the BtxFIF-specification of<br />

Deutsche Telekom apply, especially the syntax for the data structure (Tag-Length-<br />

Value).<br />

Building on this protocol structure the following definitions are made:<br />

Length of the data<br />

The length of the data which are transmitted in a block must conform to the size<br />

of the transparent transport framework, which interprets as a maximum of 1616<br />

bytes (see chapter VIII.6.1.1.1 and VIII.6.1.1.2).<br />

♦ Parameters in the block header<br />

(This is not an HBCI format specification)<br />

Name<br />

Format<br />

Length Status<br />

Entries<br />

under HBCI<br />

Transfer ID an 4 M any 4-digit value<br />

Block number bin 2 M 16-bit counter<br />

Number of blocks bin 2 M 16-bit counter<br />

Restart code<br />

O<br />

Continue code O empty or ETSI 300 072 ‘#’<br />

♦ Explanations on the block header<br />

The BtxFIF field "Restart code" is not to be filled-in, since no restart is carried out at<br />

transport level. The BtxFIF field "Block check sum" is not to be filled-in, since the check


Chapter:<br />

VIII<br />

Page:<br />

86<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Principles governing communications media<br />

as to whether the data are intact is achieved with HBCI by the formation of the hash<br />

value.<br />

Transfer ID<br />

Here any 4-digit alphanumeric value can be inserted as reference for the current<br />

message to be transmitted. This goes into the formation of the filename (see File<br />

Header).<br />

Block number<br />

Number of the current block to be transmitted, consistently increasing in<br />

ascending order without gaps and beginning with 1.<br />

Number of blocks<br />

Number of blocks to be transmitted in the whole HBCI message.<br />

Continue code<br />

With only one transmission block the field is not to be filled-in, with several fields<br />

ETSI 300 072 ‘#’ is to be entered.<br />

♦ Parameters in the file header<br />

(This is not an HBCI format specification)<br />

Name<br />

Format<br />

Length Status<br />

Entries<br />

under HBCI<br />

Filename an 12 M DOS-compatible name without path<br />

Date/time an 12 M YYMMDDhhmmss or 00 ... 00<br />

File length bin 8 M 64-bit length of the HBCI data<br />

File type num 1 M ‘0’ for binary data<br />

File check total bin 4 M 32-bit Frame Check Sequence<br />

(FCS)<br />

♦ Explanations on the file header<br />

The BtxFIF fields ‘Destination name, ‘User field’ and ‘Compression’ may not be filled in.<br />

Filename<br />

DOS-compatible filename in the format hbci####.hbc, where #### is the 4-digit<br />

transfer ID (see Block Header).<br />

Date/time<br />

Date and time of the transmission in accordance with the format given above. The<br />

content of this time stamp is not tested for plausibility and must be replaced on<br />

terminals without date installation by the figure sequence 00 ... 00.<br />

File length<br />

Length of the whole HBCI message in accordance with BtxFIF in 64-bit coded.<br />

File type<br />

For transmission of binary data, file type ‘0’ is to be inserted.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Principles governing communications media<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

87<br />

File check total<br />

Frame Check Sequence (FCS) in accordance with CCITT recommendation<br />

V.42. This check total is an absolute requirement with BtxFIF.


Chapter:<br />

VIII<br />

Page:<br />

88<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Principles governing communications media<br />

VIII.6.2<br />

TCP/IP<br />

Financial institution system: conditionally mandatory (either the T-Online or the TCP/IP<br />

access must be implemented)<br />

Customer system: mandatory (if there are no technical restrictions)<br />

Transmission Control Protocol (TCP) provides an interface that applications can use to<br />

securely transmit HBCI messages between customer and financial institution. Since<br />

TCP/IP itself cannot provide the required session references between the individual<br />

HBCI messages, this must be done by a session protocol superimposed on TCP/IP.<br />

It should be made sure that only the minimum extent of protocol commands described<br />

in RFC793 should be used, so as to achieve the highest possible compatibility.<br />

As the port number to be used, the address 3000 has been registered with the "Internet<br />

Assigned Numbers Authority" (IANA). As an interface between the TCP/IP protocol as<br />

communications path and the HBCI FINANCIAL INSTITUTION system on the application<br />

side only the use of stream sockets 16 or a network interface which is 100% compatible<br />

to the socket interface is permitted. This requirement is necessary with respect to the<br />

basic conditions already described at the beginning of the chapter concerning the<br />

uniformity and multi-financial institution capability of HBCI on the communications<br />

interface side of the customer.<br />

The TCP/IP access can be used to allow an HBCI access to the Internet or a direct<br />

financial institution access.<br />

VIII.6.2.1 Internet (WWW)<br />

HBCI is independent of the components used from the list of Internet applications (e.g.<br />

World Wide Web, FTP, Telnet). What is important, however, is the transparency of the<br />

Internet service used, i.e. a filter function may be required.<br />

Because of the security mechanisms integrated into HBCI, the use of Internet-specific<br />

security protocols (e.g. SSL) is avoided.<br />

VIII.6.2.2 Direct access<br />

VIII.6.2.2.1 Protocol requests<br />

If a financial institution would like to use direct access, it can implement this with the aid<br />

of the TCP/IP and PPP protocol stack. The configuration of the customer access cannot<br />

be done here, however, because of the extent of the necessary parameters. Bilateral<br />

discussions between customer and financial institution are therefore necessary. At a<br />

later date, if a PPP variant has developed to become a standard, direct access can<br />

possibly be described more specifically.<br />

16<br />

The implementation of the socket interface is based on the TCP/IP protocol stack and offers a<br />

communications interface which is almost completely platform-independent on the basis of the TCP/IP<br />

protocol. Sockets - as a medium for inter-network process communications - are originally a medium of<br />

interprocess communications interfaces of the UNIX operating system and have established<br />

themselves in this field as a manufacturing standard. Corresponding portings of the socket interface<br />

exist today on all usual operating system platforms (Windows 3.1/ 95/ NT, OS/2, Macintosh etc.).


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Principles governing communications media<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

89<br />

VIII.6.2.2.2 Security requirements<br />

Mandatory security requirements will be added in the next release of the interface<br />

specification.<br />

VIII.6.3 Other communications services<br />

If communications are intended through a communications service which has not yet<br />

been recorded, all applicable specifications must be defined by the financial institutions<br />

to assure multi-financial institution capability.<br />

As with the previously mentioned communications services it must also be ensured with<br />

the communications relationships to be newly defined, that these can track the session<br />

references between the individual HBCI messages.


Chapter:<br />

VIII<br />

Page:<br />

90<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Retrieving communications settings<br />

VIII.7 Retrieving communications settings<br />

For making a connection to the financial institution certain access data specific to the<br />

network and the service are necessary. These data must be present on the customer<br />

system, before it can make the connection. The present transaction allows the<br />

customer to order or update the necessary access data.<br />

Financial institution system: optional<br />

Customer system: optional<br />

a) Customer order<br />

♦ Description<br />

An anonymous session initialisation is required, and may be followed by a single<br />

message with the segment "Request communications settings". As soon as the reply<br />

message is received the session is ended. Attempting to request the communications<br />

accesses during any other HBCI session will result in an error message.<br />

♦ Format<br />

Name:<br />

Type:<br />

Originator:<br />

Communications access<br />

Message<br />

Customer<br />

No. Name Type ID Status<br />

Num Remarks<br />

ber<br />

1 Message header SEG HNHBK M 1<br />

2 Request communications SEG HKKOM M 1<br />

settings<br />

3 Message SEG HNHBS M 1<br />

Name:<br />

Request communications settings<br />

Type:<br />

Segment<br />

Segment type:<br />

Business transaction<br />

ID:<br />

HKKOM<br />

Reference segment: -<br />

Segment version: 3<br />

Originator:<br />

Customer


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Retrieving communications settings<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

91<br />

No. Name<br />

Type Format<br />

Leng Sta-<br />

Num Restrictions<br />

th tus ber<br />

1 Segment header DEG M 1<br />

2 Start financial institution DEG bid 8 O 1<br />

ID<br />

3 End financial institution ID DEG bid 8 O 1<br />

4 Maximum number of DE num ..4 O 1 >0<br />

entries<br />

5 Scroll reference DE an ..35 O 1<br />

♦ Explanations<br />

No. 2,3: Start financial institution ID, End financial institution ID<br />

The DEGs "Start financial institution ID" and "End financial institution ID" are<br />

used to specify a range of financial institutions for which the communications<br />

settings are desired. If no financial institution code range is inserted then all<br />

available communications settings will be returned. Note that a range can only<br />

be specified for financial institutions in the same country.<br />

No. 4: Maximum number of entries<br />

The number of communications accesses to be returned can be restricted (see<br />

Chapter II.7.3).<br />

No. 5: Scroll reference<br />

To be used only if a scroll reference has been assigned by the financial<br />

institution (see Chapter II.7.3).<br />

♦ Example<br />

All communications accesses:<br />

HKKOM:2:3'<br />

Request communications settings for German financial institution having sort code<br />

(BLZ) 100 200 30:<br />

HKKOM:2:3+280:10020030+280:10020030'<br />

b) Financial institution response<br />

♦ Description<br />

For each financial institution specified by the customer, one segment of the format<br />

"Communications settings" will be inserted in the financial institution message.<br />

Note that no provision is made for indicating the opening hours of the communications<br />

service, to avoid the need for frequent updates. In general, around-the-clock availability<br />

is to be aimed for.<br />

♦ Format<br />

Name:<br />

Type:<br />

Originator:<br />

Reply to communications settings request<br />

Message<br />

Financial institution


Chapter:<br />

VIII<br />

Page:<br />

92<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Retrieving communications settings<br />

No. Name Type ID Status<br />

Num Remarks<br />

ber<br />

1 Message header SEG HNHBK M 1<br />

2 Message-level response SEG HIRMG M 1<br />

3 Segment-level response SEG HIRMS O 1<br />

4 Communications settings SEG HIKOM O n<br />

5 Message SEG HNHBS M 1<br />

Name:<br />

Communications settings<br />

Type:<br />

Segment<br />

Segment type:<br />

Business transaction<br />

ID:<br />

HIKOM<br />

Reference segment: HKKOM<br />

Segment version: 3<br />

Originator:<br />

Financial institution<br />

No. Name<br />

Type Format<br />

Leng Sta-<br />

Num Restrictions<br />

th tus ber<br />

1 Segment header DEG M 1<br />

2 Financial institution ID DEG bid # M 1<br />

3 Default language DE num ..3 M 1 1,2,3<br />

4 Communications parameters<br />

DEG M 1..9<br />

♦ Explanations<br />

No. 3: Default language<br />

The language code as per Chapter III.3.1.3 is to be given, defining the financial<br />

institution's default language and character set. This must be used for the<br />

session initialisation message. After that message, the language can be<br />

changed by the customer specifying the session language during session<br />

initialisation.<br />

No. 4: Communications parameters<br />

Up to nine communication settings per financial institution can be specified.<br />

<br />

If the financial institution offers more than one setting for a<br />

communication service and no connection can be<br />

established via the setting selected by the customer<br />

system, the customer system should also try the other<br />

settings.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Retrieving communications settings<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

93<br />

No. Name<br />

Type Format<br />

Leng Sta-<br />

Num Restrictions<br />

th tus ber<br />

1 Communications service GD num ..2 M 1 1,2<br />

2 Communications address GD an ..512 M 1<br />

3 Communications address GD an ..512 O 1<br />

suffix<br />

4 Filter function GD an 3 O 1 MIM, UUE<br />

5 Version of filter function GD num ..3 O 1<br />

No. 1: Communications service<br />

Communications process supported (protocol stack), to which the following<br />

refers (see the Chapter on "Restrictions governing communications media").<br />

Communications processes supported at present:<br />

Code Access Protocol stack<br />

1 T-Online ETSI 300 072 (CEPT), EHKP, BtxFIF<br />

2 TCP/IP SLIP/PPP<br />

No. 2: Communications address<br />

Depending on the communications process the following information is to be<br />

given:<br />

Access Address Remarks<br />

T-Online Gateway page Enter as a number (without entering the<br />

control characters * and #).<br />

TCP/IP IP address Enter as an alphanumeric string, (e.g.<br />

123.123.123.123)<br />

No. 3: Communications address suffix<br />

Depending on the communications process the following information is to be<br />

given:<br />

Access Address extension Remarks<br />

T-Online Geographical region For nation-wide access use ‘00’.<br />

TCP/IP N/A<br />

No. 4: Filter function<br />

If the communications process requires conversion of the message into a 7-bit<br />

character representation (e.g. for the internet), then the filter process to be used<br />

should be given here. The message is always filtered completely, even if it does<br />

not contain any binary data.<br />

Each financial institution may only support one filter function.<br />

Filter functions available:


Chapter:<br />

VIII<br />

Page:<br />

94<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Retrieving communications settings<br />

Code<br />

Meaning<br />

MIM MIME Base 64<br />

UUE Uuencode/Uudecode<br />

No. 5: Version of filter function<br />

To be used only if a filter function has been given.<br />

♦ Example<br />

HIKOM:3:3:2+280:10020030+1+1:12345678:00+2:123.123<br />

.123.123::UUE:1+2:www.financialinstitutionname.de:<br />

:UUE:1'<br />

HIKOM:4:3:2+280:20030040+1+1:54321:00'<br />

HIKOM:5:3:2+280:30040050+2+1:12345:22'<br />

♦ Some typical return message codes<br />

Code Example of return message code<br />

0020 Order executed<br />

3010 No data found<br />

3040 Order only partially executed<br />

9210 Start of range must come before end of range<br />

c) Financial institution parameter data<br />

♦ Format<br />

Name:<br />

Communications settings - parameters<br />

Type:<br />

Segment<br />

Segment type:<br />

Business transaction<br />

ID:<br />

HIKOMS<br />

Reference segment: HKVVB<br />

Segment version: 3<br />

Originator:<br />

Financial institution<br />

Format:<br />

Business transaction parameters<br />

♦ Explanations<br />

No. 4: Parameters<br />

This DEG left blank.<br />

♦ Example<br />

HIKOMS:11:3:5+1+2'<br />

<br />

The communications settings must be requested upon initial<br />

access, and for anonymous access (as a guest user). They are<br />

not subject to frequent changes and therefore will seldom need<br />

updating. Updating can be performed automatically if a<br />

connection cannot be established due to outdated settings.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Retrieving communications settings<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

95<br />

The customer product must store the settings locally for future<br />

use. This access database can be linked in the customer product<br />

with a local financial institution code file to facilitate access.<br />

It should be borne in mind that the communications address<br />

under which the access data are called up will not, as a rule, be<br />

identical to the address of the financial institution for which<br />

access is desired. Once the settings have been updated, the<br />

physical connection will probably have to be ended and then reestablished<br />

with the new settings.<br />

Each Banking association updates the access data of the<br />

financial institutions belonging to it and makes them available at<br />

a central location (available through the contact addresses given<br />

in the introduction to this document).


Chapter:<br />

VIII<br />

Page:<br />

96<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8 Chip application for DDV<br />

In the following, a chip-based application named "Banking", synonym "HBCI-Banking",<br />

is specified that is the equivalent of the DDV procedure described in Chapter VI. As a<br />

prerequisite, in addition to the data elements described below, there must be the data<br />

element EF_ID and the crypto-algorithm Triple DES as per the ZKA interface<br />

specification for chip-based ec-cards. This section deals only with the data elements<br />

required for HBCI.<br />

The application "Banking" can be implemented on a dedicated chip card (an "HBCI<br />

card") or on some other multi-functional chip card that uses the operating system of the<br />

chip-based ec-card. For HBCI applications no executable code is required apart from<br />

what is specified in ISO 7816-4 or the chip-based ec-card.<br />

This chapter specifies the data structures and access rules of the chip application "DF<br />

BANKING" for type 0 ("old Central Banking Committee system") and type 1 ("new<br />

Central Banking Committee system"). The command sequences in the terminal are<br />

jointly specified for type 0 and type 1 chip cards.<br />

In VIII.8. and VIII.8.2 there is a explicit description for type 0. In the further course of this<br />

document "HBCI chip card" means a chip card in accordance with [LIT 1'] and [LIT 1A],<br />

which contains the HBCI application. Further applications, such as the electronic wallet,<br />

are not of necessity contained on the chip card. The card can also be account-related<br />

or account-independent.<br />

The ADF of the HBCI Banking application for the new Central Banking Committee is<br />

designated as DF_BANKING_20. In the existing specification it is directly contained in<br />

the MF. The DF-specific keys relevant for the application are stored in the EF KEY,<br />

which is directly contained in DF_BANKING_20.<br />

In the current specification two security environments are used in the context of type 1<br />

cards:<br />

1 The security environment with the number 1 (SE #1) as standard SE stipulates the<br />

access rules for the files of the application HBCI Banking for the event of it being<br />

used, i.e. for access in the field on HBCI-capable terminals.<br />

2 As Administrations-SE, the security environment with the number 2 (SE #2)<br />

stipulates the access rules for the files and the application directory of the HBCI<br />

Banking application for the case of administration procedures, e.g. monitoring,<br />

amendments or expansions.<br />

As described in [LIT 1'], the selection of SEs takes place with the MANAGE SECURITY<br />

ENVIRONMENT command – i.e. selection of the SE is not necessary on HBCI-capable<br />

terminals, since the SE #1 is implicitly activated when an application is selected.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

97<br />

VIII.8.1<br />

Data of the application HBCI Banking for the type 0 card<br />

The figure below gives an overview of the data elements (EFs) of the application<br />

"Banking" for the type 0 card.<br />

MF<br />

EF_KEY<br />

EF_ID<br />

EF_KEYD<br />

EF_INFO<br />

EF_PWD<br />

EF_LOG<br />

EF_PWDD<br />

EF_RAND<br />

EF_FBZ<br />

EF_<br />

VERSION<br />

DF_Bankin<br />

EF_KEY<br />

EF_KEYD<br />

EF_AUT<br />

EF_AUTD<br />

EF_PWD<br />

EF_PWDD<br />

EF_BNK<br />

EF_MAC<br />

EF_SE<br />

Fig. 27: Data elements of the application "Banking" 17<br />

17 Elementary files EF_PWD0, EF_PWDD0, EF_FBZ and EF_INFO are not used at any card type.


Chapter:<br />

VIII<br />

Page:<br />

98<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.1<br />

DF_Banking<br />

♦ Description<br />

4 data fields are assigned to the application DF_Banking as AEFs, which are accessible<br />

to the HBCI terminal via read-and-write access:<br />

SFI '19' EF_ID in MF<br />

SFI '1A' EF_BNK in DF_Banking<br />

SFI '1B' EF_MAC in DF_Banking<br />

SFI '1C' EF_SEQ in DF_Banking<br />

If DF_Banking is selected by means of SELECT FILE and a relevant option is set in the<br />

parameter P2 of the command, the following FMD are output with the paths of the AEFs<br />

(here it is assumed that DF_Banking is located directly in the MF).<br />

♦ Format<br />

Tag Lengt Value Explanation<br />

h<br />

'64' '1A' Tag and length for FMD<br />

'85' '03' '19 00 03' Path for the AEF with SFI '19' (EF_ID in MF)<br />

'85' '05' '1A A6 00 03 01' Path for the AEF with SFI '1A' (EF_BNK in DF_Banking)<br />

'85' '05' '1B A6 00 03 02' Path for the AEF with SFI '1B' (EF_MAC in DF_Banking)<br />

'85' '05' '1C A6 00 03 03' Path for the AEF with SFI '1C' (EF_SEQ in DF_Banking)<br />

The following FCI can also be output by way of the parameter P2 with the SELECT<br />

FILE with the ACs of the AEFs in the composite data object with Tag 'A5'.<br />

Tag Lengt Value Explanations<br />

h<br />

'6F' '40' Tag and length for FCI<br />

'81' '02' 'xxxx' Free memory area in the ec card<br />

'82' '01' '38' File describer for DF<br />

'83' '02' ‘A600’ File ID of the application Banking<br />

'84' '09' ‘D27600002548420100’ DF name (AID) of the DF_Banking<br />

'86' '02' '0040' AC for DF_Banking<br />

'A5' '24' Tag and length of the ACs of the AEFs<br />

'86' '07' '19 0040 0000 00F0' SFI and ACs of the EF_ID<br />

'86' '07' '1A 0040 0000 0031' SFI and ACs of the EF_BNK<br />

'86' '07' '1B 0040 3150 0031' SFI and ACs of the EF_MAC<br />

'86' '07' '1C 0040 0000 0031' SFI and ACs of the EF_SEQ<br />

♦ Explanations<br />

Tag '83':<br />

The file ID of the application ‘Banking’ is A600.<br />

Tag '84':<br />

Application Identifier (AID) for HomeBanking with chip card


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

99<br />

Tag '86':<br />

Command group ADMIN: AC '0040' (PRO_G with key number '00')


Chapter:<br />

VIII<br />

Page:<br />

100<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.2<br />

EF_KEY<br />

♦ Description<br />

In this EF is stored the individual customer signature key.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Lengt Value Explanation<br />

h<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 11' Allocated memory area in bytes<br />

'82' '03' '02 41 11' File describer for linear EF<br />

'83' '02' '00 10' File ID of the EF_KEY<br />

'86' '06' '0060 00F0 0060' ACs for the EF_KEY<br />

♦ Explanations<br />

Tag '81':<br />

The EF_KEY contains a maximum of one record of length 17 bytes, so that 17<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 17 bytes (X'11').<br />

Tag '83':<br />

The file ID must be '00 10' with an EF_KEY.<br />

Tag '86':<br />

APPEND RECORD: AC '00 60' (ENC_G with key number '00')<br />

READ RECORD: AC '00 F0' (NEV) with key number '00')<br />

UPDATE RECORD: AC '00 60' (ENC_G with key number '00')<br />

Data:<br />

The EF_KEY of the DF_Banking contains one record. The record contains the<br />

logical key number with the signature key.<br />

Logical key no.<br />

'00'<br />

Key<br />

16 bytes long K DSG


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

101<br />

VIII.8.1.3<br />

EF_KEYD<br />

♦ Description<br />

This EF is used for the description of the characteristics of the signature key.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 05' allocated memory area in bytes<br />

'82' '03' '02 41 05' File describer for linear EF<br />

'83' '02' '00 13' File ID of the EF_KEYD<br />

'86' '06' '0040 0000 0040' ACs for the EF_KEYD<br />

♦ Explanations<br />

Tag '81':<br />

The EF_KEYD contains a maximum of one record of length 5 bytes, so that 5<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 5 bytes.<br />

Tag '83':<br />

The file ID must be '00 13' with an EF_KEYD.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '00 00' (ALW)<br />

UPDATE RECORD: AC '00 40' (PRO_G with key number '00')<br />

Data:<br />

For each key stored in EF_KEY a record must be contained in EF_KEYD which<br />

contains the logical key number concerned and further parameters.<br />

Log. Key No. Key length Algorithm-ID FBZ Key version<br />

'00' '10' '07' 'FF' '00'


Chapter:<br />

VIII<br />

Page:<br />

102<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.4<br />

EF_AUT<br />

♦ Description<br />

In this EF is stored the individual customer encryption key.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 11' Allocated memory area in bytes<br />

'82' '03' '02 41 11' File describer for linear EF<br />

'83' '02' '00 11' File ID of the EF_AUT<br />

'86' '06' '0060 00F0 0060' ACs for the EF_AUT<br />

♦ Explanations<br />

Tag '81':<br />

The EF_AUT contains a maximum of one record of length 17 bytes, so that 17<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 17 bytes (X'11').<br />

Tag '83':<br />

The file ID must be ‘00 11' with an EF_AUT.<br />

Tag '86':<br />

APPEND RECORD: AC '00 60' (ENC_G with key number '00')<br />

READ RECORD: AC '00 F0' (NEV)<br />

UPDATE RECORD: AC '00 60' (ENC_G with key number '00')<br />

Data:<br />

The EF_AUT of the DF_Banking contains one record. The record contains the<br />

logical key number with the key.<br />

Logical key no..<br />

'00'<br />

Key<br />

16 bytes long K ENC


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

103<br />

VIII.8.1.5<br />

EF_AUTD<br />

♦ Description<br />

This EF is used for the description of the characteristics of the encryption key.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 04' Allocated memory area in bytes<br />

'82' '03' '02 41 04' File describer for linear EF<br />

'83' '02' '00 14' File ID of the EF_AUTD<br />

'86' '06' '0040 0000 0040' ACs for the EF_AUTD<br />

♦ Explanations<br />

Tag '81':<br />

The EF_AUTD contains a maximum of one record of length 4 bytes, so that 4<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 4 bytes.<br />

Tag '83':<br />

The file ID must be '00 14' with an EF_AUTD.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '00 00' (ALW)<br />

UPDATE RECORD: AC '00 40' (PRO_G with key number '00')<br />

Data:<br />

For each key stored in EF_AUT a record must be contained in EF_AUTD which<br />

contains the logical key number concerned and further parameters.<br />

Log. Key No. Key Length Algorithm ID Key version<br />

'00' '10' '07' '00'


Chapter:<br />

VIII<br />

Page:<br />

104<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.6<br />

EF_PWD1<br />

♦ Description<br />

In this EF is stored the application-specific Banking PIN.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '17' Tag and length for FCP<br />

'81' '02' '00 08' Allocated memory area in bytes<br />

'82' '03' '02 41 08' File describer for linear EF<br />

'83' '02' '00 22' File ID of the EF_PWD0<br />

'86' '08' '0060 00F0 0060 00 00' ACs for the EF_PWD0<br />

♦ Explanations<br />

Tag '81':<br />

The EF_PWD0 contains a maximum of one record of length 8 bytes, so that 8<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 8 bytes.<br />

Tag '83':<br />

The file ID must be '00 12' with an EF_PWD0.<br />

Tag '86':<br />

APPEND RECORD: AC '00 60' (ENC_G with key number '00')<br />

READ RECORD: AC '00 F0' (NEV)<br />

UPDATE RECORD: AC '00 60' (ENC_G with key number '00')<br />

VERIFY<br />

AC '00 00' (ALW)<br />

Data:<br />

The Banking PIN is stored in the 'Format 2 PIN Block' in the record '01' of the<br />

EF_PWD0. The Format 2 PIN Block is formed from the PIN in accordance with<br />

Appendix A of ISO 10202-6 (ISO 13). It has a minimum length of 5 digits and<br />

may be a maximum of 12 digits long. The 8 bytes of the records are filled as<br />

follows:<br />

C L P P P P P P/F P/F P/F P/F P/F P/F P/F F F<br />

Each field represents a half-byte:<br />

C: Check field, binary coded always has the value '2'<br />

L: PIN length, binary coded possible values from '5' to 'C'<br />

P: PIN digit, BCD coded<br />

F: Filler, binary coded always has the value 'F'<br />

P/F: PIN/Filler<br />

depending on the PIN length


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

105<br />

VIII.8.1.7<br />

EF_PWDD1<br />

♦ Description<br />

This EF is used for the description of the characteristics of the Banking PIN.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 05' Allocated memory area in bytes<br />

'82' '03' '02 41 05' File describer for linear EF<br />

'83' '02' '00 25' File ID of the EF_PWDD0<br />

'86' '06' '0040 0000 0040' ACs for the EF_PWDD0<br />

♦ Explanations<br />

Tag '81':<br />

The EF_PWDD1 contains a maximum of one record of length 5 bytes, so that 5<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 5 bytes.<br />

Tag '83':<br />

The file ID must be '00 25' with an EF_PWDD1.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '00 00' (ALW)<br />

UPDATE RECORD: AC '00 40' (PRO_G with key number '00')<br />

Data:<br />

In the 5 bytes-long record of the EF_PWDD1 is stored additional information on<br />

the Banking PIN:<br />

Byte 1 Byte 2 Byte 3 Byte 4 Byte 5<br />

'01' '21' ‘05’ ‘03’ '03'<br />

Byte 1: Kind of cardholder authentication. At present only the password<br />

verification is possible which is coded with the value ‘01’.<br />

Byte 2: The PIN is stored in the format 'Format 2 PIN Block' in BCD.<br />

Byte 3: The PIN must be at least 5 digits long.<br />

Byte 4: Initialisation value of the PIN operator error counter in Byte 5.<br />

Byte 5: PIN operator error counter.


Chapter:<br />

VIII<br />

Page:<br />

106<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.8<br />

EF_BNK<br />

♦ Description<br />

The EF_BNK is a linear EF with 5 records in which financial institution connections are<br />

stored. The financial institution connection can be made via T-Online, Internet or further<br />

future online services.<br />

The record comprises a financial institution short name, the financial institution code,<br />

the communications service, the address and the address extension for the<br />

communications access, the country code and the user ID.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '01 B8' Allocated memory area in bytes<br />

'82' '03' '02 41 58' File describer for linear EF<br />

'83' '02' '03 01' File ID of the EF_BNK<br />

'86' '06' '0040 0000 0031' ACs for the EF_BNK<br />

♦ Explanations<br />

Tag '81':<br />

The EF_BNK contains a maximum of 5 records of length 88 bytes, so that 440<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 88 bytes (X'58').<br />

Tag '83':<br />

As file ID '03 01' was defined for the EF_BNK.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '00 00' (ALW)<br />

UPDATE RECORD: AC '00 30' (PWD_D)


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

107<br />

Data:<br />

The EF_BNK has 5 records with the following record structure:<br />

Bytes Length Value Explanation Reference<br />

1-20 20 'aa .. aa' Short name of financial<br />

institution<br />

21-24 4 'nn nn nn nn' Financial institution code see II.5.3.2 No. 2<br />

of financial institution<br />

where the account is kept<br />

25-25 1 'n' Communications service see VIII.7 b) No. 1<br />

26-53 28 'aa .. aa' Communications address see VIII.7 b) No. 2<br />

54-55 2 ‘aa aa’ Communications address see VIII.7 b) No. 3<br />

extension<br />

56-58 3 'aa aa aa' Country code of financial see II.5.3.2 No. 1<br />

institution where the<br />

account is kept<br />

59-88 30 'aa .. aa' User ID IDs. VI.5.1.1 No. 2<br />

Contents of alphanumeric fields (‘a’) are in all cases ASCII coded, entered leftjustified<br />

and padded out with blanks (X’30’) to the required length.<br />

Contents of numeric fields (‘n’) are in all cases BCD coded.


Chapter:<br />

VIII<br />

Page:<br />

108<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.1.9<br />

EF_MAC<br />

♦ Description<br />

The EF_MAC is used for forming the MAC via the hash value of a message.<br />

It consists of a record 12 bytes long whose ACs must be so set that the MAC is<br />

produced while the record is read in.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 0C' Allocated memory area in bytes<br />

'82' '03' '02 41 0C' File describer for linear EF<br />

'83' '02' '03 02' File ID of the EF_MAC<br />

'86' '06' '0040 3150 0031' ACs for the EF_MAC<br />

♦ Explanations<br />

Tag '81':<br />

The EF_MAC contains a maximum of one record 12 bytes long, so that 12 bytes<br />

are needed.<br />

Tag '82':<br />

The record length is 12 bytes (X'0C').<br />

Tag '83':<br />

As file ID '03 02' was defined for the EF_MAC.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '31 50' (PWD_D and PRO_D with key number '00')<br />

UPDATE RECORD: AC '00 31' (PWD_D)<br />

Data:<br />

The EF_MAC possesses a record 12 bytes long which is modified by UPDATE<br />

RECORD.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

109<br />

VIII.8.1.10<br />

EF_SEQ<br />

♦ Description<br />

The EF_SEQ is a linear data file, whose record contains a 2 bytes long binary defined<br />

element.<br />

This binary ascending counter flows as a security reference number (signature ID) for<br />

protecting the data against duplicate submission. (see Chapter VI.5.2.1).<br />

The starting value of the counter is 1. If an overrun occurs there is no restart.<br />

♦ Format<br />

File Control Parameter (FCP):<br />

Tag Length Value Explanation<br />

'62' '15' Tag and length for FCP<br />

'81' '02' '00 02' Allocated memory area in bytes<br />

'82' '03' '02 41 02' File describer for linear EF<br />

'83' '02' '03 03' File ID of the EF_SEQ<br />

'86' '06' '0040 0000 0031' ACs for the EF_SEQ<br />

♦ Explanations<br />

Tag '81':<br />

The EF_SEQ contains a maximum of one record of length 2 bytes, so that 2<br />

bytes are needed.<br />

Tag '82':<br />

The record length is 2 bytes.<br />

Tag '83':<br />

As file ID '03 03' has been defined for the EF_SEQ.<br />

Tag '86':<br />

APPEND RECORD: AC '00 40' (PRO_G with key number '00')<br />

READ RECORD: AC '00 00' (ALW)<br />

UPDATE RECORD: AC '00 31' (PWD_D)<br />

Data:<br />

The EF_SEQ possesses a record 2 bytes long which is modified by UPDATE<br />

RECORD.


Chapter:<br />

VIII<br />

Page:<br />

110<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2<br />

Data of the application HBCI Banking for the type 1 card<br />

The figure below gives an overview of the files of an HBCI card with the application<br />

HBCI Banking for the type 1 card.<br />

MF<br />

EF_KEY<br />

EF_FBZ<br />

EF_SIG<br />

EF_KEYD<br />

EF_ID<br />

EF_SIGD<br />

EF_PWD<br />

EF_INFO<br />

EF_PWDD<br />

EF_RULE<br />

DF_BANKING_20<br />

EF_KEY<br />

EF_KEYD<br />

EF_RULE<br />

EF_BNK<br />

EF_MAC<br />

EF_SEQ<br />

EF_PWD<br />

EF_PWDD<br />

EF_FBZ<br />

Fig. 28: Data elements of the application "HBCI", account-related card


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

111<br />

MF<br />

EF_KEY<br />

EF_KEYD<br />

EF_ID<br />

EF_RULE<br />

EF_SIG<br />

EF_SIGD<br />

DF_BANKING_20<br />

EF_KEY<br />

EF_KEYD<br />

EF_RULE<br />

EF_BNK<br />

EF_MAC<br />

EF_SEQ<br />

EF_PWD<br />

EF_PWDD<br />

EF_FBZ<br />

Fig. 29: Data elements of the application "HBCI", account-independent card


Chapter:<br />

VIII<br />

Page:<br />

112<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.1<br />

ADF of the application HBCI-Banking<br />

When the ADF of the application HBCI-Banking (DF_BANKING_20) is created the<br />

following FCP should be stipulated:<br />

Tag Length Value Explanation<br />

'62' '1A' Tag and length for FCP<br />

'82' '01' '38' File describer for DF<br />

'83' '02' 'A6 00' File ID of the DF_BANKING_20<br />

'84' '09' 'D2 76 00 00 25 48 42 02 00' DF name (AID) of the DF_BANKING_20<br />

'A1' '06' '8B 04 00 30 02 01' Access rule references<br />

The DF name (the AID) of the DF_BANKING_20 consisting of the national RID of the<br />

ZKA ('D2 76 00 00 25'), the ASCII-coded ID "HB" ('48 42') and the version of the<br />

application 2.0 ('02 00').<br />

The access rules for the DF_BANKING_20 are contained in the allocated rule file<br />

EF_RULE. The following stipulations are made through the access rules for the DFspecific<br />

command:<br />

If the DF_BANKING_20 is selected, a CREATE FILE (EF), DELETE FILE (self),<br />

INCLUDE or EXCLUDE may only be executed if the command message is executed<br />

with secure messaging and has a correct MAC which is created through using the key<br />

K HBCI_Admin from the EF_KEY of the DF_BANKING_20. For each of these commands<br />

the return code has a MAC with the key K HBCI_Admin. The commands CREATE FILE<br />

(DF) and DELETE FILE (child DF) is never allowed to be used. All authorised<br />

administration commands are only allowed to be executed in SE #2 (access rules in<br />

Record 1 of the EF_RULE).<br />

10 files are to be assigned as AEF to the application HBCI Banking:<br />

SFI '01':<br />

SFI '02':<br />

SFI '03':<br />

SFI '04':<br />

SFI '05':<br />

SFI '19':<br />

SFI '1A':<br />

SFI '1B':<br />

SFI '1C':<br />

SFI '1E':<br />

EF_RULE in DF_BANKING_20<br />

EF_KEY in DF_BANKING_20,<br />

EF_PWD in DF_BANKING_20,<br />

EF_PWDD in DF_BANKING_20,<br />

EF_FBZ in DF_BANKING_20,<br />

EF_ID in MF,<br />

EF_BNK in DF_BANKING_20,<br />

EF_MAC in DF_BANKING_20,<br />

EF_SEQ in DF_BANKING_20,<br />

EF_KEYD in DF_BANKING_20.<br />

If DF_BANKING_20 is selected using SELECT FILE and the corresponding option in<br />

parameter byte P2 of the command is set, the following FCI will be output:


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

113<br />

Tag Length Value Explanation<br />

'6F' '0D' Tag and length for FCI<br />

'84' '09' 'D2 76 00 00 25 48 42 02 00' DF name (AID) of the DF_BANKING_20<br />

'A5' '00' No proprietary information<br />

If DF_BANKING_20 is selected by means of SELECT FILE and the relevant option is<br />

set in the parameter byte P2 of the command, the following FMD are output with the<br />

paths of the AEFs (here it is assumed that DF_BANKING_20 is located directly in the<br />

MF):<br />

Tag Length Value Explanation<br />

'64' '44' Tag and length for FMD<br />

'85' '03' 'C8 00 03' Path for AEF with SFI '19' (EF_ID in MF)<br />

'85' '05' '08 A6 00 00 30' Path for AEF with SFI '01' (EF_RULE in<br />

DF_BANKING_20)<br />

'85' '05' '10 A6 00 00 10' Path for AEF with SFI '02' (EF_KEY in<br />

DF_BANKING_20)<br />

'85' '05' '18 A6 00 00 12' Path for AEF with SFI '03' (EF_PWD in<br />

DF_BANKING_20)<br />

'85' '05' '20 A6 00 00 15' Path for AEF with SFI '04' (EF_PWDD in<br />

DF_BANKING_20)<br />

'85' '05' '28 A6 00 00 16' Path for AEF with SFI '05' (EF_FBZ in<br />

DF_BANKING_20)<br />

'85' '05' 'D0 A6 00 03 01' Path for AEF with SFI '1A' (EF_BNK in<br />

DF_BANKING_20)<br />

'85' '05' 'D8 A6 00 03 02' Path for AEF with SFI '1B' (EF_MAC in<br />

DF_BANKING_20)<br />

'85' '05' 'E0 A6 00 03 03' Path for AEF with SFI '1C' (EF_SEQ in<br />

DF_BANKING_20)<br />

'85' '05' 'F0 A6 00 00 13' Path for AEF with SFI '1E' (EF_KEYD in<br />

DF_BANKING_20)


Chapter:<br />

VIII<br />

Page:<br />

114<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.2<br />

EF_RULE<br />

♦ Description<br />

The file EF_RULE contains the access rules for the application DF_BANKING_20. In<br />

the FCP of files and directories these access rules are referenced.<br />

♦ Format<br />

For the EF_RULE of the DF_BANKING_20 the following FCP must be stipulated:<br />

Tag Length Value Explanation<br />

'62' '1C' Tag and length for FCP<br />

'82' '05' '14 41 00 24 08' File describer for linear EF with variable<br />

record length (max. 36 bytes), 8 Records<br />

'83' '02' '00 30' File ID of the EF_RULE<br />

'85' '02' '00 7D' for storage space allocated to utilisation<br />

data in byte<br />

'88' '01' '08' SFI '01' for the EF_RULE<br />

'A1' '08' '8B 06 00 30 01 02 02 03' Access rule references<br />

In SE #1 only the commands READ / SEARCH RECORD with unprotected command<br />

and answer message are allowed to be executed (access rule in Record 2 of the<br />

EF_RULE).<br />

In SE #2 APPEND RECORD is only allowed to be executed, if it is executed with<br />

secure messaging. The MAC is formed for the command and reply message with the<br />

K HBCI_Admin . UPDATE RECORD is never allowed to be executed (access rule in Record<br />

3 of the EF_RULE).<br />

♦ Data<br />

The EF_RULE in DF_BANKING_20 contains 8 Records with the access rules for the<br />

directory and the data fields of the directories.<br />

The following table shows the entries in this record for an HBCI chip card:<br />

Rec.No Record content<br />

Bytes<br />

.<br />

1 '80 01 DA B4 05 83 03 80 01 FF' 10<br />

2 '80 01 81 90 00' 5<br />

3 '80 01 84 B4 05 83 03 80 01 FF' 10<br />

4 '80 01 86 AF 11 B4 05 83 03 80 01 FF B8 08 95 01 10 83 03 80 01 22<br />

FF'<br />

5 '80 01 86 B4 05 83 03 80 01 FF' 10<br />

6 '80 01 82 A4 07 95 01 08 93 02 80 01 80 01 81 90 00' 17<br />

7 '80 01 82 A4 07 95 01 08 93 02 80 01<br />

80 01 81 AF 13 B4 08 95 01 20 83 03 80 02 FF<br />

A4 07 95 01 08 93 02 80 01' 36<br />

8 '80 01 83 90 00 80 01 84 B4 05 83 03 80 01 FF' 15


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

115<br />

The records 1 to 5 each contain one access rule, and the records 6 to 8 each contain<br />

two access rules.<br />

The individual records of the EF_RULE are described in more detail below.<br />

Record 1 is referenced as an access rule by DF_BANKING_20 in SE #2.<br />

CREATE FILE (EF), DELETE FILE (self), INCLUDE, EXCLUDE: MAC-SM-AC for<br />

command and reply message with K HBCI_Admin:<br />

Tag Length Value Explanation<br />

'80' '01' 'DA' Access type for CREATE FILE (EF), DELETE FILE (self),<br />

INCLUDE, EXCLUDE<br />

'B4' '05' CCT - tag and length<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin<br />

Record 2 is referenced as access rule by EF_RULE, EF_KEYD, EF_PWDD and<br />

EF_FBZ in SE #1.<br />

READ / SEARCH RECORD: ALW<br />

Tag Length Value Explanation<br />

'80' '01' '81' Access type for READ / SEARCH RECORD<br />

'90' '00' Access condition ALW<br />

Record 3 is referenced as access rule by EF_RULE, EF_BNK and EF_MAC in SE #2.<br />

APPEND RECORD: MAC-SM-AC for command and reply message with the key<br />

K HBCI_Admin.<br />

Tag Length Value Explanation<br />

'80' '01' '84' Access type for APPEND RECORD<br />

'B4' '05' CCT - tag and length<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin<br />

Record 4 is referenced as access rule by EF_KEY and EF_PWD in SE #2.<br />

APPEND RECORD, UPDATE RECORD: MAC-ENC-SM-AC for command message<br />

and MAC-SM-AC for reply message with K HBCI_Admin.<br />

Tag Length Value Explanation<br />

'80' '01' '86' Access type for APPEND RECORD, UPDATE RECORD<br />

'AF' '11' AND- Template, tag and length<br />

'B4' '05' CCT - tag and length<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin<br />

'B8' '08' CT - tag and length<br />

'95' '01' '10' Usage qualifier: only for command message<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin<br />

Record 5 is referenced as access rule by EF_KEYD, EF_SEQ, EF_PWDD and<br />

EF_FBZ in SE #2.<br />

APPEND RECORD, UPDATE RECORD: MAC-SM-AC for command and reply<br />

message with the key K HBCI_Admin.


Chapter:<br />

VIII<br />

Page:<br />

116<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

Tag Length Value Explanation<br />

'80' '01' '86' Access type for APPEND RECORD, UPDATE RECORD<br />

'B4' '05' CCT - tag and length<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin<br />

Record 6 is referenced as access rule by EF_BNK and EF_SEQ in SE #1.<br />

UPDATE RECORD: card owner authentication (PWD) with local password 1.<br />

READ / SEARCH RECORD: ALW<br />

Tag Length Value Explanation<br />

'80' '01' '82' Access type for UPDATE RECORD<br />

'A4' '07' AT - tag and length<br />

'95' '01' '08' Usage qualifier for card owner authentication<br />

'93' '02' '80 01' Password reference, local password with the number 1<br />

'80' '01' '81' Access type for READ / SEARCH RECORD<br />

'90' '00' ALW<br />

Record 7 is referenced as access rule by EF_MAC in SE #1.<br />

UPDATE RECORD: card owner authentication (PWD) with local password 1.<br />

READ / SEARCH RECORD: card owner authentication (PWD) with local password 1<br />

and MAC-SM-AC for the reply message with the key K DAK.<br />

Tag Length Value Explanation<br />

'80' '01' '82' Access type for UPDATE RECORD<br />

'A4' '07' AT - tag and length<br />

'95' '01' '08' Usage qualifier for card owner authentication<br />

'93' '02' '80 01' Password reference, local password with the number 1<br />

'80' '01' '81' Access type for READ / SEARCH RECORD<br />

'AF' '13' AND - Template, tag and length<br />

'B4' '08' CCT - tag and length<br />

'95' '01' '20' Usage qualifier: Only reply message<br />

'83' '03' '80 02 FF' Key reference for K DAK<br />

'A4' '07' AT - tag and length<br />

'95' '01' '08' Usage qualifier for card owner authentication<br />

'93' '02' '80 01' Password reference, local password with the number 1<br />

Record 8 is referenced as access rule in EF_PWDD.<br />

VERIFY, CHANGE REFERENCE DATA: ALW<br />

RESET RETRY COUNTER: MAC-SM-AC for command and reply message with<br />

K HBCI_Admin


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

117<br />

Tag Length Value Description<br />

'80' '01' '83' Access type for VERIFY, CHANGE REFERENCE DATA<br />

'90' '00' ALW<br />

'80' '01' '84' Access type for command: RESET RETRY COUNTER<br />

'B4' '05' CCT - tag and length<br />

'83' '03' '80 01 FF' Key reference for K HBCI_Admin


Chapter:<br />

VIII<br />

Page:<br />

118<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.3<br />

EF_KEY<br />

♦ Description<br />

The application-specific keys of the application HBCI-Banking are stored in the EF_KEY<br />

of the application directory DF_BANKING_20. These are<br />

• a 16-byte long card-specific key K HBCI_Admin with the key number '01' for administration<br />

of the application DF_BANKING_20,<br />

• a 16-byte long card-specific key K DAK with the key number '02' as customer-specific<br />

authentication key (DAK = Data Authentication Key) 18 , and<br />

• a 16-byte long card-specific key K ENC with the key number '03' as customer-specific<br />

encryption key.<br />

The keys KHBCI_Admin, KDAK and KENC are recognised by the HBCI chip card and<br />

its responsible background system. They are each derived from a KGK (Key<br />

Generating Key), using the card identification data in the EF_ID of the MF (see chapter<br />

8.4.1 of [LIT 1']). The responsible background system recognises the KGK and derives<br />

the card-specific key as required.<br />

Different KGKs can be used for each logical key number. A KGK, as well as all keys<br />

derived from it, is derived on the basis of the key version. The key version for the<br />

respective logical key number in the related EF_KEYD indicates from which KGK the<br />

respective card-specific key is derived.<br />

♦ Format<br />

For the EF_KEY of the DF_BANKING_20 the following FCP must be stipulated:<br />

Tag Length Value Explanation<br />

'62' '16' Tag and length for FCP<br />

'82' '05' '12 41 00 12 03' File describer for linear EF with fixed record<br />

length (18 bytes), 3 records<br />

'83' '02' '00 10' File ID of the EF_KEY<br />

'88' '01' '10' SFI '02' for the EF_KEY<br />

'A1' '06' '8B 04 00 30 02 04' Access rule references<br />

The EF_KEY is only allowed to be accessed in SE #2.<br />

The commands APPEND RECORD and UPDATE RECORD are only allowed to be<br />

executed if they are implemented with secure messaging, the record content is<br />

encoded (ENC) and the command message is protected with a MAC. Encryption and<br />

the forming of the MAC takes place with the K HBCI_Admin. The return code of an<br />

APPEND RECORD or UPDATE RECORD is MAC-protected with the K HBCI_Admin. The<br />

command READ RECORD is never allowed to be implemented. (access rule in Record<br />

4 of the EF_RULE)<br />

18 In order to reserve the term "Signature key" in accordance with EU Directive, the term "Data<br />

authentication key" was used here. In the further course of the text, however, it will be said that a<br />

message is signed with this key.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

119<br />

♦ Data<br />

The EF_KEY in DF_BANKING_20 contains 3 Records with the DF-specific keys of the<br />

DF_BANKING_20.<br />

Logical key Key version<br />

Key<br />

number<br />

'01' 'XX' 16-byte long K HBCI_Admin<br />

'02' 'XX' 16-byte long K DAK<br />

'03' 'XX' 16-byte long K ENC<br />

The key versions 1 to 127 are used.


Chapter:<br />

VIII<br />

Page:<br />

120<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.4<br />

EF_KEYD<br />

♦ Description<br />

The EF_KEYD in the DF_BANKING_20 contains the additional information on the DFspecific<br />

keys of the DF_BANKING_20.<br />

♦ Format<br />

For the EF_KEYD the following FCP must be stipulated:<br />

Tag Length Value Explanation<br />

'62' '1C' Tag and length for FCP<br />

'82' '05' '14 41 00 1C 03' File describer for linear EF with variable<br />

record length (max. 28 bytes) and 3<br />

Records<br />

'83' '02' '00 13' File ID of the EF_KEYD<br />

'85' '02' '00 48' Storage space allocated for utilisation data<br />

in bytes<br />

'88' '01' 'F0' SFI '1E' for the EF_KEYD<br />

'A1' '08' '8B 06 00 30 01 02 02 05' Access rule references<br />

In SE #1 only the commands READ / SEARCH RECORD with unprotected command<br />

and reply message are allowed to be executed (access rule in Record 2 of the<br />

EF_RULE).<br />

In SE #2 APPEND RECORD and UPDATE RECORD is only allowed to be executed, if<br />

it is carried out with secure messaging. The MAC is formed for the command and reply<br />

message with the K HBCI_Admin (access rule in Record 5 of the EF_RULE).<br />

♦ Data<br />

The EF_KEYD contains 3 records, which contain the additional information on the DFspecific<br />

keys of the DF_BANKING_20.<br />

The data object with Tag '93' contains as a second byte in the value field the version of<br />

the respective key.<br />

The following shows the structure of the key additional information:<br />

Entry 1 (K HBCI_Admin):


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

121<br />

Tag Length Value Explanation<br />

'93' '02' '01 XX' Key number and key version<br />

'C0' '02' '81 10' Symmetrical key of the length 16 bytes<br />

'90' '01' 'FF' Operator error counter<br />

'7B' '0F' SE data object<br />

'80' '01' '02' Definition for SE #2<br />

'B4' '04' CCT - tag and length (usage qualifier '30' is default<br />

value)<br />

'89' '02' '12 22' Algorithm ID: key may be used for creating a retail<br />

MAC in CFB mode<br />

'B8' '04' CT - tag and length (usage qualifier '10' is default<br />

value)<br />

'89' '02' '11 23' Algorithm ID: key may only be used for encryption as<br />

Triple-DES key in CBC mode with ICV ≠ 0 and ICV<br />

variant<br />

Entry 2 (K DAK):<br />

Tag Length Value Explanation<br />

'93' '02' '02 XX' Key number and key version<br />

'C0' '02' '81 10' Symmetrical key of the length 16 bytes<br />

'7B' '0C' SE data object<br />

'80' '01' '01' Definition for SE #1<br />

'B4' '07' CCT - tag and length<br />

'95' '01' '20' Usage qualifier: only SM reply message<br />

'89' '02' '12 22' Algorithm ID: key may be used for creating a retail<br />

MAC in CFB mode<br />

Entry 3 (KENC):<br />

Tag Length Value Explanation<br />

'93' '02' '03 XX' Key number and key version<br />

'C0' '02' '81 10' Symmetrical key of the length 16 bytes<br />

'7B' '0C' SE data object<br />

'80' '01' '01' Definition for SE #1<br />

'A4' '07' AT - tag and length<br />

'95' '01' '40' Usage qualifier: only internal authentication<br />

'89' '02' '21 12' Algorithm ID: key only allowed to be used for<br />

authentication of the chip card with Triple-DES


Chapter:<br />

VIII<br />

Page:<br />

122<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.5<br />

EF_PWD<br />

♦ Description<br />

The local EF_PWD in the DF_BANKING_20 contains the length of the HBCI PIN and a<br />

reference value of the HBCI PIN of the ZKA chip card in the 9-bytes-long Record '01'.<br />

The HBCI PIN has a minimum length of 5 digits and is allowed to be a maximum of 12<br />

digits long.<br />

♦ Format<br />

For the EF_PWD of the DF_BANKING_20 the following FCP are to be defined:<br />

Tag Length Value Explanation<br />

'62' '16'<br />

'82' '05' '12 41 00 09 01' File describer for linear EF with fixed record length of<br />

9 bytes<br />

'83' '02' '00 12' File ID of the EF_PWD<br />

'88' '01' '18' SFI '03' for the EF_PWD<br />

'A1' '06' '8B 04 00 30 02<br />

04'<br />

Access rule reference<br />

On the EF_PWD is only allowed to take place in SE #2: the commands APPEND<br />

RECORD and UPDATE RECORD are only allowed to be executed if they are<br />

implemented with secure messaging, the record content is encoded (ENC) and the<br />

command message is protected with a MAC. Encoding and the formation of the MAC<br />

are carried out by means of the K HBCI_Ad min. The return code of an APPEND RECORD<br />

or UPDATE RECORD is MAC-protected. The formation of the MAC is carried out for<br />

the reply message by means of the K HBCI_Admin. The command READ RECORD is<br />

never allowed to be executed (access rule in Record 4 of the EF_RULE).<br />

♦ Data<br />

The record '01' of the EF_PWD contains a reference value of the HBCI PIN.<br />

Bytes Content Description<br />

1 '05' Length of the PIN<br />

2 - 9 'XX..XX' Reference value of the<br />

PIN<br />

For the generation of the reference value the 8-bytes-long 'Format 2 PIN Block' is first<br />

created in accordance with [ISO PIN1] from the HBCI PIN as follows:<br />

Explanation:<br />

C L P P P P P P/F P/F P/F P/F P/F P/F P/F F F<br />

Each field represents a half-byte.<br />

Each field represents a half-byte:<br />

C: Check field, binary coded always has the value '2'<br />

L: PIN length, binary coded possible values from '5' to 'C'


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

123<br />

P: PIN digit, BCD coded<br />

F: Filler, binary coded always has the value 'F'<br />

P/F: PIN/Filler<br />

depending on the PIN length<br />

The generated format 2 PIN Block is given the code PB. From this PIN Block the<br />

reference value which is to be stored is generated by means of the DES encryption with<br />

itself:<br />

PIN reference value:<br />

ePB(PB)<br />

If necessary, a parity adjustment is carried out before using PB as a DES key. PB is<br />

used unchanged as plain text.


Chapter:<br />

VIII<br />

Page:<br />

124<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.6<br />

EF_PWDD<br />

♦ Description<br />

The EF_PWDD in the DF_BANKING_20 contains in Record '01' the additional<br />

information on the HBCI PIN stored in the EF_PWD of the DF_BANKING_20.<br />

♦ Format<br />

For the EF_PWDD the following FCPs must be defined:<br />

Tag Length Value Explanation<br />

'62' '1C'<br />

'82' '05' '14 41 00 15 01' File describer for linear EF with variable<br />

record length (max. 21 bytes) and 1 record<br />

'83' '02' '00 15' File ID of the EF_PWDD<br />

'85' '02' '00 15' Bytes of storage space allocated for<br />

utilisation data<br />

'88' '01' '20' SFI '04' for the EF_PWDD<br />

'A1' '08' '8B 06 00 30 01 02 02 05' Access rule references<br />

In SE #1 only the commands READ / SEARCH RECORD with unprotected command<br />

and reply message are allowed to be executed (access rule in Record 2 of the<br />

EF_RULE).<br />

In SE #2 APPEND RECORD and UPDATE RECORD only are allowed to be executed,<br />

if they are implemented with secure messaging and the command message is<br />

protected with a MAC. The return code is MAC-protected. The MAC is formed for the<br />

command and reply message by means of the K HBCI_Admin (access rule in Record 5 of<br />

the EF_RULE).<br />

♦ Data<br />

The local EF_PWDD contains in Record '01' a 21-byte-long record which contains the<br />

additional information on the HBCI PIN.<br />

Tag Length Value Description<br />

'93' '02' '01 01' Password reference: Password '01' in<br />

Record '01' of the EF_PWD<br />

'89' '02' '11 50' Storage format of the password (minimum of<br />

5 digits)<br />

'7B' '0B' SE-DO, tag and length<br />

'80' '01' '00' SE reference DO: for all SEs<br />

'A1' '03' '8B 01 08' Access rule reference<br />

'89' '01' '12' Transmission format of the authentication<br />

data: PIN Format 2 Block


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

125<br />

VIII.8.2.7<br />

EF_FBZ<br />

♦ Description<br />

EF_FBZ indicates the linear EF, which in Record '01' contains the operator error<br />

counter and the related initial value for the HBCI PIN stored in the DF-specific<br />

EF_PWD.<br />

♦ Format<br />

For the EF_FBZ in the DF_BANKING_20 the following FCPs must be defined:<br />

Tag Length Value Explanation<br />

'62' '18' Tag and length for FCP<br />

'82' '05' '12 41 00 02 01' File describer for linear EF fixed record<br />

length<br />

'83' '02' '00 16' File ID of the EF_FBZ<br />

'88' '01' '28' SFI '05' for the EF_FBZ<br />

'A1' '08' '8B 06 00 30 01 02 02 05' Access rule references<br />

In SE # 1 only the commands READ / SEARCH RECORD with unprotected command<br />

and reply message are allowed to be executed (access rule in Record 2 of the<br />

EF_RULE).<br />

In SE #2 the commands APPEND RECORD and UPDATE RECORD are only allowed<br />

to be executed, if they with are implemented with secure messaging and the command<br />

message is protected with a MAC. The return code is MAC-protected. The MAC is<br />

formed for the command and reply message by means of the K HBCI_Admin (access rule<br />

in Record 5 of the EF_RULE).<br />

♦ Data<br />

The EF_FBZ contains in Record '01' a 2-byte-long record, which contains the operator<br />

error counter and the related initial value '03' for the HBCI PIN.<br />

Initial value of the<br />

FBZ<br />

'03'<br />

FBZ<br />

'03'


Chapter:<br />

VIII<br />

Page:<br />

126<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.8<br />

EF_BNK<br />

♦ Description<br />

The EF_BNK is a linear EF with 5 records in which 5 financial institution connections<br />

are stored.<br />

♦ Format<br />

For the EF_BNK in an HBCI chip card the following FCP must be defined:<br />

Tag Length Value Explanation<br />

'62' '18' Tag and length for FCP<br />

'82' '05' '12 41 00 58 05' File describer for linear EF with fixed record<br />

length 88 Byte and 5 Records<br />

'83' '02' '03 01' File ID of the EF_BNK<br />

'88' '01' 'D0' SFI '1A' for the EF_BNK<br />

'A1' '08' '8B 06 00 30 01 06 02 03' Access rule references<br />

In SE #1 READ / SEARCH RECORD are always allowed to be executed. The reply<br />

message is not protected. UPDATE RECORD is only allowed to be executed, if a card<br />

owner-authentication by means of the local password 1 (HBCI PIN) has been carried<br />

out beforehand. The return code is not MAC-protected (access rules in Record 6 of the<br />

EF_RULE).<br />

In SE #2 the command APPEND RECORD is only allowed to be executed, if it is<br />

implemented with secure messaging. The MAC is formed for the command and reply<br />

message by means of the K HBCI_Admin (access rule in Record 3 of the EF_RULE).<br />

♦ Data<br />

The record comprises a financial institution short name, the financial institution code,<br />

the communications service, the address and the address extension for the<br />

communications access, the country code and the user ID..<br />

Bytes Length Value Explanation<br />

1-20 20 'aa .. aa' Short name of the financial institution<br />

21-24 4 'nn nn nn nn' Financial institution code of the financial institution where<br />

the account is kept<br />

25-25 1 'n' Communications service<br />

26-53 28 'aa .. aa' Communications address<br />

54-55 2 ‘aa aa’ Communications address extension<br />

56-58 3 'aa aa aa' Country code of the financial institution where the account<br />

is kept<br />

59-88 30 'aa .. aa' User ID<br />

Contents of alphanumeric fields (‘a’) are in all cases ASCII coded, entered left-justified<br />

and padded out with blanks (X’30’) to the required length. Contents of numeric fields<br />

(‘n’) are in all cases BCD coded.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

127<br />

VIII.8.2.9<br />

EF_MAC<br />

♦ Description<br />

The EF_MAC is used for forming the MAC via the hash value of a message. It consists<br />

of a record 12 bytes long whose access rules must be so set that the MAC is produced<br />

while the record is read in.<br />

♦ Format<br />

For the EF_MAC the following FCPs must be defined:<br />

Tag Length Value Explanation<br />

'62' '18' Tag and length for FCP<br />

'82' '05' '12 41 00 0C 01' File describer for linear EF with a record<br />

which 12 bytes long<br />

'83' '02' '03 02' File ID of the EF_MAC<br />

'88' '01' 'D8' SFI '1B' for the EF_MAC<br />

'A1' '08' '8B 06 00 30 01 07 02 03' Access rule references<br />

In SE #1 READ / SEARCH RECORD are allowed to be executed after card ownerauthentication.<br />

The reply message has a K DAK-MAC. UPDATE RECORD is only<br />

allowed to be executed, if card owner-authentication by means of the local password 1<br />

(HBCI PIN) has been carried out beforehand. The return code of an UPDATE RECORD<br />

is not MAC-protected (access rules in Record 7 of the EF_RULE).<br />

In SE #2 the command APPEND RECORD is allowed to be executed, if it is<br />

implemented with secure messaging. The MAC is formed for the command and reply<br />

message by means of the K HBCI_Admin (access rule in Record 3 of the EF_RULE).<br />

♦ Data<br />

The EF_MAC contains a record with the following structure:<br />

Bytes Value Explanation<br />

1-12 'XX..XX' Hash value


Chapter:<br />

VIII<br />

Page:<br />

128<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.2.10<br />

EF_SEQ<br />

♦ Description<br />

The EF_SEQ is a linear data file, whose record contains a 2 bytes long binary defined<br />

element. This binary ascending counter flows in as a security reference number<br />

(signature ID) for protecting the data against duplicate submission. The starting value of<br />

the counter is 1. If an overrun occurs there is no restart.<br />

For the EF_SEQ the following FCP must be defined:<br />

Tag Length Value Explanation<br />

'62' '18' Tag and length for FCP<br />

'82' '05' '12 41 00 02 01' File describer for linear EF with 1 record 2<br />

bytes long<br />

'83' '02' '03 03' File ID of the EF_SEQ<br />

'88' '01' 'E0' SFI '1C' for the EF_SEQ<br />

'A1' '08' '8B 06 00 30 01 06 02 05' Access rule references<br />

In SE #1 READ / SEARCH RECORD are always allowed to be executed. The reply<br />

message is not protected. UPDATE RECORD is only allowed to be executed, if<br />

beforehand card owner-authentication by means of the local password 1 (HBCI PIN)<br />

has been carried out. The return code is not MAC-protected (access rules in Record 6<br />

of the EF_RULE).<br />

In SE #2 the commands APPEND RECORD and UPDATE RECORD only are allowed<br />

to be executed, if they are implemented with secure messaging. In each case the MAC<br />

is formed for the command and reply messages by means of the K HBCI_Admin (access rule<br />

in Record 5 of the EF_RULE).<br />

♦ Data<br />

The EF_SEQ contains 1 record with the following structure:<br />

Bytes Value Explanation<br />

1-2 'XX XX' Sequence number


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

129<br />

VIII.8.3<br />

Space requirement of the application in the chip<br />

The calculation of space requirement is very heavily dependent on the thickness of the<br />

ROM entry screen. The necessary space for the EF management, e.g. record numbers<br />

and address administration, is directly connected to the management of the E 2 -PROM.<br />

This management is a component of the ROM entry screen. The actual precise space<br />

requirement can only be determined by the ROM entry screen developers. It is different<br />

from chip to chip and from ROM entry screen to ROM entry screen.<br />

♦ Type 0<br />

The following table therefore contains only the net data size of the "Banking"<br />

application.<br />

Filename Header size Data size<br />

DF_Banking 28 26<br />

EF_KEY 23 17<br />

EF_KEYD 23 5<br />

EF_AUT 23 17<br />

EF_AUTD 23 4<br />

EF_PWD1 25 8<br />

EF_PWDD1 23 5<br />

EF_BNK 23 440<br />

EF_MAC 23 12<br />

EF_SEQ 23 2<br />

237 536<br />

Consequently the application "Banking" has a minimum space requirement of 773<br />

bytes.<br />

♦ Type 1<br />

The following table therefore only contains a rough estimation of the net data size (in<br />

bytes) of the application. Therefore the size of the respective FCP was used as the<br />

basis for the overhead. In addition the FMD of the DF_BANKING_20 (contains the<br />

assigned SFIs and their paths) was interpreted as ”utilisation data ” of the DF.<br />

File name Overhead Utilisation data<br />

DF_BANKING_20 28 68<br />

EF_KEY 24 54<br />

EF_KEYD 30 72<br />

EF_PWD 24 9<br />

EF_PWDD 30 21<br />

EF_FBZ 26 2<br />

EF_RULE 30 125<br />

EF_BNK 26 440<br />

EF_MAC 26 12<br />

EF_SEQ 26 2


Chapter:<br />

VIII<br />

Page:<br />

130<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

270 805<br />

Accordingly the HBCI application has a space requirement of approximately 1075<br />

bytes.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

131<br />

VIII.8.4<br />

sequences<br />

Terminal sequences (Type 0 and Type 1) Chip cards and terminal<br />

The following specifies the application sequences from the point of view of the terminal<br />

equipment. Here the chip card-related aspects are taken into consideration. Applicationrelated<br />

details are not part of this specification.<br />

If an error occurs during the execution of a command, the terminal terminates the<br />

process, unless a deviating behaviour is specified.<br />

VIII.8.4.1<br />

Start session<br />

HBCI chip card<br />

Terminal/Gateway<br />

R1 ATR of the HBCI chip card<br />

R2 OK<br />

R3 Card identification data (CID)<br />

R4 OK<br />

R4 Sequence number (SEQ)<br />

R5 Financial institution connection<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

A1<br />

C1<br />

C2<br />

C3<br />

A3<br />

A4<br />

C4<br />

C5<br />

A5<br />

C6<br />

A6<br />

Display: ‘Please enter card’<br />

Reset HBCI chip card<br />

SELECT FILE DF_BANKING(_20)<br />

READ RECORD EF_ID<br />

Check and store CID<br />

HBCI PIN entry and formatting<br />

VERIFY HBCI PIN<br />

READ RECORD EF_SEQ<br />

Store SEQ<br />

READ RECORD EF_BNK<br />

Check and store data<br />

♦ Explanation<br />

1. After the HBCI chip card has been entered the card is reset (communications protocol<br />

T = 1). The correct ATR and its handling are, for instance, specified in [LT].<br />

2. The application HBCI Banking is opened through the ADF of the application<br />

DF_BANKING_20 for HBCI cards of type 1 or DF_BANKING for HBCI cards of type 0<br />

being selected by the terminal using the command SELECT FILE. In the course of this<br />

process initially there is an attempt to select the new application DF_BANKING_20. If<br />

the return code is '6A 82' the application is not available. The "old" application<br />

DF_BANKING will then be selected.


Chapter:<br />

VIII<br />

Page:<br />

132<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 A4' CLA, INS<br />

3 '04' P1, selection with DF name<br />

4 '0C' P2, no answer data<br />

5 '09' L c<br />

6-14 'D2 76 00 00 25 48 42 0X 00' AID of the HBCI application (X=1.2)<br />

After the application context has been opened, the AEFs of the application can be<br />

referenced by means of SFI. The terminal holds the information on which type of card it<br />

is<br />

3. The terminal uses READ RECORD to read the card identification data in Record '01' of<br />

the EF_ID in the MF of the HBCI card (SFI '19').<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 B2' CLA, INS<br />

3 '01' P1, record number<br />

4 'CC' P2, reference control byte<br />

5 '00' L e<br />

If the READ RECORD is successfully implemented the HBCI card returns a reply<br />

message with the following structure.<br />

Bytes Value Explanation<br />

1 '67' Branch main key<br />

2-4 '2n nn nn' Short routing number of institution issuing card<br />

5-9 'nn..nn' Individual card number<br />

10 'nD' Check character for bytes 1 - 9<br />

11-12 'YY MM' Expiry date of the card<br />

13-15 'YY MM TT' Activation date of the card<br />

16-17 '0280' Country code<br />

18-20 '44 45 4D' or '45 55 52' Currency code "DEM" or "EUR"<br />

21 '01' Value of the currency<br />

22 'XX' Chip type<br />

23 '00' Filler<br />

24 'XX' Operating system version<br />

23-24<br />

or 25-<br />

26<br />

'XX XX'<br />

Positive return code SW1 SW2<br />

The answer data are at least 22 bytes long and can be longer than 24 bytes for cards of<br />

type 1.<br />

The coding of the received data is checked:<br />

If a card of type 0 issue more than 22 bytes of answer data, or if a card of type 1 issues<br />

less than 24 bytes of answer data, or if the currency code in bytes 18-20 or the value of


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

133<br />

the currency in byte 21 are not correctly coded, or if a card of type 0 issues the currency<br />

code "EUR" or a card of type 1 issues the currency code "DEM", or if byte 24 of a card<br />

of type 1 has the value '00' and in every other case of an error the process will be<br />

terminated with an error message.<br />

4. The terminal requests the card owner to enter the PIN and then formats the entered<br />

PIN to format 2 PIN-Block FPIN2. The terminal builds a command message for the<br />

command VERIFY.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1 '00 20' CLA, INS<br />

3 '00' P1, fixed value<br />

4 '81' P2, search for PIN in the EF_PWD1 of the DF<br />

(and has PWDID ´01´)<br />

5 '08' L c<br />

6-13 'XX..XX' FPIN2<br />

The chip card carries out the PIN check and sets the flag of the appropriate security<br />

condition if the PIN check was successful. If this is not the case, the PIN operator error<br />

counter is decremented.<br />

By means of the return code of the command VERIFY the chip card informs the<br />

terminal whether the check was successful and how many attempts are still possible.<br />

5. The terminal uses READ RECORD to read the sequence number in Record '01' of the<br />

EF_SEQ (SFI '1C').<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 B2' CLA, INS<br />

3 '01' P1, record number<br />

4 'E4' P2, reference control byte<br />

5 '00' L e<br />

If the READ RECORD is successfully implemented, the HBCI card returns a reply<br />

message with the following structure.<br />

Bytes Value Explanation<br />

1-2 'XX XX' Sequence counter<br />

3-4 'XX XX' Positive return code SW1 SW2<br />

The terminal stores the value of the sequence counter.<br />

6. The terminal uses READ RECORD to successively read the financial institution<br />

connections data in the records of the EF_BNK (SFI '1A'), until the ”fitting” entry is<br />

found.


Chapter:<br />

VIII<br />

Page:<br />

134<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 B2' CLA, INS<br />

3 '0X' P1, record number X<br />

4 'D4' P2, reference control byte<br />

5 '00' L e<br />

If the READ RECORD is successfully implemented the HBCI card returns a reply<br />

message with the following structure:<br />

Bytes Length Value Explanation<br />

1-20 20 'aa .. aa' Short name of the financial institution<br />

21-24 4 'nn nn nn nn' Financial institution code of the financial institution<br />

where the account is kept<br />

25-25 1 'n' Communications service<br />

26-53 28 'aa .. aa' Communications address<br />

54-55 2 ‘aa aa’ Communications address extension<br />

56-58 3 'aa aa aa' Country code of the financial institution where the<br />

account is kept<br />

59-88 30 'aa .. aa' User ID<br />

89-90 2 'XX XX' Positive return code SW1 SW2<br />

Alternatively for chip cards of Type 1 the command SEARCH RECORD can be used, in<br />

order to find the ”fitting” entry in one step by means of a transferred search model<br />

Example: the first entry on a stipulated routing number of the financial institution where<br />

the account is kept is to be found (byte positions 21-24):<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 A2' CLA, INS<br />

3 '01' P1, record number where the search starts<br />

4 'D7' P2, reference control byte (SFI + specific search)<br />

5 '07' L C<br />

6 '04' Control byte<br />

7 '14' Offset 20 = Byte 21<br />

8 '0E' Configurations byte: search at this position until<br />

first successful record with return of the content<br />

9-12 'nn nn nn nn' Financial institution code search model<br />

13 '00' L e<br />

In the case of successful command execution the command SEARCH RECORD issues<br />

the following message:


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

135<br />

Bytes Value Explanation<br />

1 'XX' Record number<br />

2-89 'XX..XX' Record content<br />

90-91 'XX XX' Status bytes<br />

Further, more comprehensive search options are also possible (e.g. locate all fitting<br />

entries or interval search), see [LIT 1´].


Chapter:<br />

VIII<br />

Page:<br />

136<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.4.2<br />

Generate message<br />

This part of the overall sequence is only relevant to chip cards, insofar as financial<br />

institution connections data which are required for the order generation are taken from<br />

the chip card. For the following sequence description it is assumed that the application<br />

has also generated HBCI messages. If necessary, these messages have to be also<br />

protected cryptographically, i.e. segments are entered for the electronic signatures and<br />

for the encryption in accordance with HBCI specifications.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

137<br />

VIII.8.4.3<br />

Signing message<br />

The following sequences can be carried out offline, i.e. outside the transmission<br />

session. This applies to all messages with the exception of the session initialisation.<br />

The reason for this is that key of the sender of the session message is necessary for<br />

the protection of all financial institution messages. Therefore the chip card of the sender<br />

must also remain inserted in the terminal during the entire session.<br />

The sequences for the signature of the session initialisation message are always<br />

identical with the sequences for the signature of order messages, as described below.<br />

However, since further chip cards are required by the application for the session<br />

initialisation (User ID, Session ID, communications setting, etc.), the complete<br />

sequence, including the signature of the session initialisation, is described again in<br />

Chapter VIII.8.4.5 "Transmission Session".<br />

HBCI chip card<br />

R1a KV<br />

R1b OK<br />

R1c Data record<br />

R6 OK<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

C1a<br />

Terminal/Gateway<br />

GET KEYINFO (only type 1)<br />

A1a Store key version KV<br />

C1b SELECT EF_KEYD (only type 0)<br />

C1c<br />

A1c<br />

A2<br />

A3<br />

A4<br />

M5<br />

C6<br />

A7<br />

A8<br />

A9<br />

A10<br />

READ RECORD EF_KEYD (only type 0)<br />

Store key version KV<br />

Increment sequence counter (Signature<br />

ID) SEQ<br />

Build signature header and insert in HBCI<br />

message<br />

Provide data (signature header, HBCI<br />

utilisation data) for MAC calculation<br />

Use data for MAC calculation (see section<br />

VIII 8.5.1)<br />

UPDATE RECORD EF_SEQ with SEQ<br />

Build signature closer and insert in HBCI<br />

message<br />

If necessary, repeat A2 to A7 for further<br />

messages<br />

Store signed HBCI messages for further<br />

processing<br />

If necessary, repeat start session and A1<br />

to A9 for multiple signatures<br />

♦ Explanation<br />

1. In this step the terminal ascertains which data authentication key KGK DAK and K DAK<br />

must be used as a signature of the message. Here step 1a is only implemented for<br />

cards of Type 1, and step 1b and 1c is only implemented for cards of type 0.


Chapter:<br />

VIII<br />

Page:<br />

138<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

1a. If its is a HBCI card of type 1, the command GET KEYINFO is used for this purpose.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 ‘B0 EE’ CLA,INS<br />

3 '80' P1 for "DF-specific"<br />

4 ‘02’ P2, key number<br />

5 ‘00’ L e<br />

If GET KEYINFO is successfully implemented, the HBCI card returns a reply message<br />

with the following structure:<br />

Bytes Value Explanation<br />

1 'XX' 1 existing key version KV<br />

2-3 ‘XX XX’ Positive return code SW1 SW2<br />

The key version is stored.<br />

1b. If it is an HBCI card of type 0, the EF_KEYD in the DF_BANKING is selected by means<br />

of SELECT FILE EF_KEYD.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 A4' CLA, INS<br />

3 '02' P1, Selection of an EF in the current DF<br />

4 '0C' P2, no answer data<br />

5 '02' L c<br />

6-7 '00 13' File ID of EF_KEYD<br />

1c. The terminal uses READ RECORD to read the additional information for the key K DAK<br />

from Record ‘02’.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 B2' CLA, INS<br />

3 '02' P1, record number for logical key no. ‘02’<br />

4 ‘04' P2, reference control byte<br />

5 '00' L e<br />

If READ RECORD was successfully executed, the HBCI card returns the following reply<br />

message:<br />

Bytes Value Explanation<br />

1 '02' Logical key number<br />

2 '10' Key length<br />

3 '07' Algorithm ID<br />

4 'XX' Operator error counter<br />

5 'XX' Key version<br />

6-7 ‘XX XX’ Positive return code SW1 SW2


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

The key version is stored.<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

139<br />

2. The previously read and stored sequence counter SEQ is incremented.<br />

3. The signature header is generated and inserted in the HBCI message.<br />

4. The data (signature header, HBCI utilisation data) for the MAC calculation are provided.<br />

5. The MAC on the data is calculated (see section VIII 8.5.1).<br />

6. The terminal overwrites the sequence counter in EF_SEQ with the incremented value.<br />

This takes place by means of UPDATE RECORD EF_SEQ without Secure Messaging.<br />

Due to the access conditions for the EF_SEQ, the command can only be executed if<br />

the HBCI PIN was successfully verified beforehand.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 DC' CLA, INS<br />

3 '01' P1, record number<br />

4 'E4' P2, reference control byte (SFI ‘1C‘)<br />

5 '02' L c<br />

6-7 'XX XX' New sequence counter SEQ<br />

7. The signature closer is generated and inserted in the HBCI message.<br />

8. If necessary, the steps 2 to 7 can be repeated for further messages. Step 1 does not<br />

have to be repeated, since the key version to be used is already stored.<br />

9. The signed HBCI messages can be stored for further processing.<br />

10. If necessary, the start session and the steps 1 to 9 can be repeated for multiple<br />

signatures.


Chapter:<br />

VIII<br />

Page:<br />

140<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.4.4 Encrypting message<br />

HBCI chip card<br />

R1a KV<br />

R1b OK<br />

R1c Data record<br />

R3 RND<br />

R4 e* K ENC(KS L)<br />

R5 RND<br />

R6 e* K ENC(KS R)<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

<br />

C1a<br />

Terminal/Gateway<br />

GET KEYINFO (only type 1)<br />

A1a Store key version KV<br />

C1b SELECT EF_AUTD (only type 0)<br />

C1c<br />

READ RECORD EF_AUTD (only type 0)<br />

A1c Store key version KV<br />

A2 Provide data (HBCI utilisation data and, if<br />

necessary, signature header/signature<br />

closer) for the encryption<br />

C3 GET CHALLENGE<br />

A3<br />

C4<br />

A4<br />

C5<br />

A5<br />

C6<br />

Store RND as message key half KS L<br />

INTERNAL AUTHENTICATE with KS L<br />

Store e* K ENC(KS L)<br />

GET CHALLENGE<br />

Store RND as message key half KS R<br />

INTERNAL AUTHENTICATE with KS R<br />

A6 Store e* K ENC(KS R)<br />

A7 Concatenate e* K ENC(KS L) with e*<br />

K ENC(KS R) to e* K ENC(KS) and store<br />

A8 Concatenate KS L with KS R to KS and<br />

encrypt data with KS (triple DES CBC<br />

mode, IV=0, X9.23 padding)<br />

A9 Construct signature header and insert in<br />

HBCI message<br />

A10 Insert encrypted data as binary data in<br />

HBCI message<br />

A11 If necessary, repeat A2 to A10 for further<br />

messages<br />

A12 Store encrypted and signed HBCI<br />

messages for further processing<br />

♦ Explanation<br />

1. In this step the terminal establishes which version of the encryption key KGK ENC or<br />

K ENC must be used for encrypting the message. In doing so step 1a is only carried out<br />

for cards of type 1, and step 1b and 1c is only carried out for cards of type 0.<br />

1a. If it is an HBCI card of type 1, the command GET KEYINFO is used for this.<br />

Command APDU:


Chapter:<br />

VIII<br />

Page:<br />

142<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

3. The GET CHALLENGE command can be used to give the terminal a random number<br />

from the HBCI card.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 84' CLA, INS<br />

3 '00' P1<br />

4 '00' P2<br />

5 '00' L e<br />

If the command was successfully implemented the HBCI card issues a random number<br />

8 bytes long as an answer date, which is stored as message key half KS L .<br />

4. The INTERNAL AUTHENTICATE command is used for encrypting the value KS L from<br />

the HBCI card with the key K ENC encrypted and transmitted in the answer message as<br />

e* K ENC (KS L ).<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 88' CLA, INS<br />

3 '00' P1<br />

4 '80' '83' P2, type 0: '80' (log. key number '00'),<br />

Type 1: '83' (log. key number '03')<br />

5 '08' L c<br />

6-13 'XX .. XX' Random number KS L<br />

14 '00' L e<br />

The command INTERNAL AUTHENTICATE returns the following answer message:<br />

Bytes Value Explanation<br />

1-8 'XX .. XX' Encrypted value e* K ENC(KS L)<br />

9-10 ‘XX XX’ Positive return code SW1 SW2<br />

5. With the command GET CHALLENGE the terminal can be given a further random<br />

number from the HBCI card, which is stored as message key half KS R .<br />

6. Analogue to step 4 an INTERNAL AUTHENTICATE is carried out with KS R .<br />

7. e* K ENC (KS L ) is concatenated with e* K ENC (KS R ) to e* K ENC (KS) and stored.<br />

8. KS L is concatenated with KS R to KS and the data are encrypted with KS (triple DES<br />

CBC mode, IV=0, X9.23 padding).<br />

9. The encryption header is built up and inserted in the HBCI message.<br />

10. The encrypted data is inserted in the HBCI message as binary data.<br />

11. If necessary, steps 2 to 10 are repeated for further messages (it is not necessary to<br />

repeat step 1).<br />

12. The encrypted and signed HBCI messages are stored for further processing.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

143<br />

VIII.8.4.5<br />

Transmission session<br />

HBCI chip card Terminal/Gateway Financial<br />

Institution<br />

A1 Increment sequence counter<br />

(signature ID) SEQ<br />

A2 Locate user ID from the FI<br />

connection which has already been<br />

read (EF_BNK)<br />

A3 Construct dialogue initialising<br />

message<br />

A4 Construct signature header and<br />

insert in HBCI message<br />

A5 Provide data (signature header,<br />

HBCI utilisation data) for MAC<br />

calculation<br />

<br />

<br />

M6 Calculate MAC from data (see<br />

section VIII 8.5.1)<br />

R7<br />

OK<br />

<br />

<br />

<br />

<br />

<br />

<br />

C7 UPDATE RECORD EF_SEQ with<br />

SEQ<br />

A8 Construct signature closer and insert<br />

in HBCI message<br />

A9<br />

C10 Transmit message (beginning with<br />

dialogue initialisation message)<br />

If answer message encrypted:<br />

provide data (binary data after the<br />

A11 signature header) and d*K ENC(KS)<br />

from the signature header for the<br />

decoding<br />

M12 Decode data (see section VIII 8.5.2)<br />

A13 If financial institution message<br />

signed:<br />

provide data (signature header,<br />

utilisation data) and reference MAC<br />

for MAC testing<br />

M14 Test MAC via data and reference<br />

MAC (see VIII.8.5.1)<br />

A15 Repeat C10 to M14 for all further<br />

HBCI messages<br />

<br />

R10 Transmit<br />

answer<br />

message


Chapter:<br />

VIII<br />

Page:<br />

144<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.5<br />

Macros


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

145<br />

VIII.8.5.1<br />

R3 OK<br />

R4 OK<br />

MAC calculation / test<br />

HBCI chip card<br />

R5 Data from EF_MAC with<br />

CFB-64 MAC over HASH R<br />

(identical to CBC-MAC over<br />

HASH)<br />

<br />

<br />

<br />

<br />

<br />

<br />

Terminal/Gateway<br />

A1 Calculate hash value HASH over data<br />

(RIPEMD160)<br />

A2 Dissect HASH into HASH_L (the left 8<br />

bytes of HASH) and HASH R (the<br />

remaining 12 bytes)<br />

C3 UPDATE RECORD EF_MAC with<br />

HASH R<br />

C4 PUT DATA with HASH L (only type 0)<br />

C5<br />

A5<br />

READ RECORD EF_MAC with secure<br />

messaging<br />

(for type 1 here HASH L is also<br />

transmitted)<br />

When calculating MAC: Save MAC<br />

When making MAC test: compare<br />

MAC from financial institution with<br />

MAC of chip card<br />

♦ Explanation<br />

1. The hash value HASH is calculated over the data (RIPEMD160).<br />

2. The hash value HASH is dissected into HASH L (the left 8 bytes of HASH) and HASH R<br />

(the remaining 12 bytes).<br />

3. HASH R is entered in the first record of the EF_MAC. The access condition for the<br />

EF_MAC ensures that the UPDATE command can only be executed if the HBCI PIN<br />

has been verified beforehand.<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 DC' CLA, INS<br />

3 '01' P1, record number<br />

4 'DC' P2, reference control byte (SFI ‘1B‘)<br />

5 '0C' L c<br />

6-17 'XX .. XX' Record content HASH R<br />

4. The terminal transmits HASH L to the HBCI card by means of PUT DATA. This step is<br />

only carried out for cards of type 0, since for cards of type 1 the random value is<br />

transmitted in the next step as part of the command.<br />

Command APDU:


Chapter:<br />

VIII<br />

Page:<br />

146<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

Bytes Value Explanation<br />

1-2 '00 DA' CLA, INS<br />

3-4 '01 00' P1, P2<br />

5 '08' L c<br />

6-13 'XX..XX' HASH L<br />

5. The terminal uses READ RECORD to read the hash value with secure messaging<br />

which has just been entered in EF_MAC.<br />

Command APDU for chip cards of type 0:<br />

Bytes Value Explanation<br />

1-2 '04 B2' CLA, INS<br />

3 '01' P1, record number<br />

4 'DC' P2, reference control byte<br />

5 '00' L e<br />

If the READ RECORD is successfully executed, the HBCI card returns an answer<br />

message with the following structure:<br />

Bytes Value Explanation<br />

1-12 'XX ... XX' Record content HASH R<br />

13-20 'XX ... XX' CFB-MAC with KENC over the 16 bytes 1-12|’00<br />

00 00 00‘ with ICV= HASH L<br />

21-22 'XX XX' Positive return code SW1 SW2<br />

Command APDU for chip cards of type 1: 19<br />

Bytes Value Explanation<br />

1-2 '08 B2' CLA, INS with secure messaging<br />

3 '01' P1, record number<br />

4 ‘DC' P2, reference control byte<br />

5 '11' L C<br />

6-7 'BA 0C' Day and length for response descriptor<br />

8-9 'B4 0A' Day and length for CCT<br />

10-11 '87 08' Day and length for random number<br />

12-19 'XX..XX' Random number HASH L<br />

20-22 '96 01 00' Day, length and value of the L e data object<br />

23 '00' L e<br />

If the READ RECORD is successfully executed, the HBCI card returns an answer<br />

message with the following structure:<br />

19 With regard to the transfer of ICVs on Response Descriptors see chapter 8.6.1.1 of [LIT 1'].


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

147<br />

Bytes Value Explanation<br />

1-2 '81 0C' Day and length of the plain text data object<br />

3-14 'XX ... XX' Record content HASH R<br />

15-16 '8E 08' Day and length of the MAC data object<br />

17-24 'XX ... XX' CFB-MAC with KENC over bytes 1-12|’80 00 00<br />

00‘with ICV HASH L<br />

25-26 'XX XX' Positive return code SW1 SW2<br />

The terminal stores the MAC value.


Chapter:<br />

VIII<br />

Page:<br />

148<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Chip application for DDV<br />

VIII.8.5.2 Encryption<br />

HBCI chip card<br />

R2 KS L<br />

R3 KS R<br />

<br />

<br />

<br />

<br />

Terminal/Gateway<br />

A1 Dissect d* K ENC(KS) into the two halves d*<br />

K ENC(KS L) and d* K ENC(KS R)<br />

C2 INTERNAL AUTHENTICATE with d*<br />

K ENC(KS L)<br />

A2 Store KS L<br />

C3 INTERNAL AUTHENTICATE with d*<br />

K ENC(KS R)<br />

A3 Store KS R<br />

A4 Concatenate KS L with KS R to KS<br />

concatenate and encrypt data with KS (triple<br />

DES CBC mode, IV=0, X9.23 padding)<br />

♦ Explanation<br />

1. d* K ENC (KS) is dissected into the two halves d* K ENC (KS L ) and d* K ENC (KS R ).<br />

2. With the command INTERNAL AUTHENTICATE the value d* K ENC (KS L ) is encrypted<br />

from the HBCI card with the key K ENC and transmitted in the answer message as KS L .<br />

Command APDU:<br />

Bytes Value Explanation<br />

1-2 '00 88' CLA, INS<br />

3 '00' P1<br />

4 '80' or '83' P2, type 0: '80' (log. key number '00'),<br />

type 1: '83' (log. key number '03')<br />

5 '08' L c<br />

6-13 'XX .. XX' Parameter value d* K ENC(KS L)<br />

14 '08' L e<br />

The command INTERNAL AUTHENTICATE returns the following answer message:<br />

Bytes Value Explanation<br />

1-8 'XX .. XX' Decoded value KS L<br />

9-10 ‘XX XX’ Positive return code SW1 SW2<br />

KS L is stored.<br />

3. Analogous to step 2 an INTERNAL AUTHENTICATE is executed with d* K ENC (KS R ).<br />

The result is stored as KS R .<br />

4. KS L is concatenated with KS R to KS and the data are encrypted with KS (triple DES<br />

CBC mode, IV=0, X9.23 padding).


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Chip application for DDV<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

149<br />

VIII.8.6 Overview of the chip applications parameters (type 1)<br />

♦ File structure<br />

Location File ID Name SFI Access rule<br />

SE #1<br />

(standard)<br />

Access rule<br />

SE #2<br />

(admin)<br />

MF '00 03' EF_ID '19'<br />

'A6 00' DF_BANKING_20 1<br />

DF_BANKING_20 '00 30' EF_RULE '01' 2 3<br />

'00 10' EF_KEY '02' -- 4<br />

'00 12' EF_PWD '03' -- 4<br />

'00 13' EF_KEYD '1E' 2 5<br />

'00 15' EF_PWDD '04' 2 5<br />

'00 16' EF_FBZ '05' 2 5<br />

'03 01' EF_BNK '1A' 6 3<br />

'03 02' EF_MAC '1B' 7 3<br />

'03 03' EF_SEQ '1C' 6 5<br />

♦ Access rules<br />

# READ /<br />

SEARCH<br />

RECORD<br />

APPEND<br />

RECORD<br />

UPDATE<br />

RECORD<br />

IN-/EXCLUDE<br />

CREATE EF<br />

DELETE self<br />

VERIFY<br />

CHANGE<br />

REF DATA<br />

RESET<br />

RETRY<br />

COUNTER<br />

1 K HBCI_Admin-MAC<br />

2 ALW<br />

3 K HBCI_Admin- NEV<br />

MAC<br />

4 K HBCI_Admin-ENC-MAC (K)<br />

K HBCI_Admin-MAC (A)<br />

5 K HBCI_Admin-MAC<br />

6 ALW HBCI PIN<br />

7 HBCI PIN<br />

HBCI PIN<br />

K DAK-MAC<br />

(A)<br />

8 ALW K HBCI_Admin-<br />

MAC<br />

The specified access conditions apply not only to command (K) but also answer<br />

messages (A), except where otherwise indicated by means of brackets.<br />

♦ Keys of the application<br />

Logical key<br />

number<br />

Allowed<br />

SE #<br />

Key<br />

Who knows the master key<br />

'01' 2 K HBCI_Admin Responsible background system<br />

'02' 1 K DAK Responsible background system<br />

'03' 1 K ENC Responsible background system


Chapter:<br />

VIII<br />

Page:<br />

150<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Market identifiers<br />

VIII.9 Market identifiers<br />

The tables below give a list of selected stock markets with the market identifier codes<br />

(MIC) as per ISO 10383. Where several markets with different MICs exist in one<br />

location, the specific market is identified by name in brackets.<br />

German markets<br />

Berlin<br />

Bremen<br />

Düsseldorf<br />

Frankfurt<br />

Hamburg<br />

Hanover<br />

Munich<br />

Stuttgart<br />

XETRA<br />

EUREX<br />

European markets<br />

Amsterdam (Amsterdam Exchanges)<br />

Antwerp<br />

Athens<br />

Barcelona<br />

Bern<br />

Bilbao<br />

Bordeaux<br />

Bratislava<br />

Budapest<br />

Brussels (Société de la Bourse des Valeurs)<br />

Brussels (EASDAQ)<br />

Dublin (Irish Stock Exchange)<br />

Helsinki (Helsinki Stock Exchange)<br />

Istanbul<br />

Copenhagen (Kobenhavns Fondsbors)<br />

Lille<br />

Lisbon<br />

Ljubliana<br />

London (London Stock Exchange)<br />

London (London International Financial Futures and<br />

Options Exchange)<br />

Luxembourg<br />

Lyon<br />

Madrid (Bolsa de Madrid)<br />

Milan<br />

Code<br />

XBER<br />

XBRE<br />

XDUS<br />

XFRA<br />

XHAM<br />

XHAN<br />

XMUN<br />

XSTU<br />

XETR<br />

XEUR<br />

Code<br />

XAMS<br />

XANT<br />

XATH<br />

XBAR<br />

XBRN<br />

XBIL<br />

XBOR<br />

XBRA<br />

XBUD<br />

XBRU<br />

XEAS<br />

XDUB<br />

XHEL<br />

XIST<br />

XCSE<br />

XLIL<br />

XLIS<br />

XLJU<br />

XISE<br />

XLIF<br />

XLUX<br />

XLYO<br />

XMAD<br />

XMIL


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Market identifiers<br />

Marseilles<br />

Nancy<br />

Nantes<br />

Nicosia<br />

Oslo<br />

Paris (Société des Bourses Francaises)<br />

Prague<br />

Reykjavik<br />

Rome (Mercato Italiano Futures)<br />

Sofia<br />

Stockholm<br />

Valencia<br />

Warsaw<br />

Valletta<br />

Vienna (Wiener Wertpapierbörse)<br />

Vienna (Österreichische Termin- und Optionsbörse)<br />

Zagreb<br />

Zurich (Schweizer Börse)<br />

Zurich (ISMA)<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

XMAR<br />

XNAY<br />

XNAN<br />

XCYS<br />

XOSL<br />

XPAR<br />

XPRA<br />

XICE<br />

XMIF<br />

XBUL<br />

XSSE<br />

XVAL<br />

XWAR<br />

XMAL<br />

XVIE<br />

XOTB<br />

XZAG<br />

XSWX<br />

XISM<br />

Chapter:<br />

VIII<br />

Page:<br />

151<br />

International markets (non-exhaustive list)<br />

Bangkok<br />

Boston<br />

Buenos Aires<br />

Chicago (Chicago Stock Exchange)<br />

Hong Kong (Stock Exchange of Hong Kong)<br />

Johannesburg (Johannesburg Stock Exchange)<br />

Kuala Lumpur (Kuala Lumpur Stock Exchange)<br />

Mexico<br />

Montreal (Montreal Exchange)<br />

Moscow<br />

New York (American Stock Exchange)<br />

New York (New York Stock Exchange)<br />

New York (New York Futures Exchange)<br />

Rio de Janeiro<br />

San Francisco (Pacific Stock Exchange)<br />

São Paulo (Bolsa de Valores de São Paulo)<br />

Shanghai (Shanghai Stock Exchange)<br />

Singapore (Stock Exchange of Singapore)<br />

Sydney (Australian Stock Exchange)<br />

Tokyo (Tokyo Stock Exchange)<br />

Toronto (Toronto Stock Exchange)<br />

Code<br />

XBKK<br />

XBOS<br />

XBUE<br />

XCHI<br />

XHKG<br />

XJSE<br />

XKLS<br />

XMEX<br />

XMON<br />

XMOS<br />

XASE<br />

XNYS<br />

XNYF<br />

XRIO<br />

XPSE<br />

XBSP<br />

XSHG<br />

XSES<br />

XASX<br />

XTKS<br />

XTSE


Chapter:<br />

VIII<br />

Page:<br />

152<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Calculation of the check character for internal<br />

VIII.10 Calculation of the check character for internal assignment<br />

data (Customer reference number) 20<br />

(Based on DIN ISO 7064, MOD 11,10)<br />

20<br />

Taken from "Guidelines for uniform payment transaction forms and leaflets for neutral payment<br />

transactions forms".


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Calculation of the check character for internal<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

153<br />

VIII.10.1<br />

Calculation procedure<br />

The internal assignment data (customer reference number) consists of 12 digits plus a<br />

single-digit check character, giving a 13-character string together. This string is<br />

processed from left to right, one character at a time.<br />

Using the index j = 1 to n (where n is the number of characters in the string, including<br />

the check character) and the starting value P 1 = M for j = 1, one calculates as follows:<br />

S j = P j I (M+1) + a (n-j+1)<br />

P (j+1) = S j II M x 2<br />

where<br />

II M is the remainder following division by M; if the remainder is zero, then it is<br />

made equal to M instead<br />

I (M+1) is the remainder following division by (M+1); this remainder will never be equal<br />

to zero<br />

a (n-j+1) is the value of that character digit<br />

The check is considered to be positive if S n = 1 (mod M).<br />

To generate the check character, a 1 is chosen so that<br />

P n I (M+1) + a 1 = 1 (mod M)<br />

The value found for a 1 is added to the internal assignment data (customer reference<br />

number).


Chapter:<br />

VIII<br />

Page:<br />

154<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Calculation of the check character for internal<br />

VIII.10.2<br />

Example<br />

The internal assignment data (customer reference number) proper consist of the string<br />

100845456115. The check character is appended to the string on the trailing end, as<br />

per DIN ISO 7064, MOD 11,10.<br />

Generation of check character<br />

Step<br />

Product<br />

brought<br />

forward<br />

next digit<br />

value<br />

Subtotal<br />

Subtotal<br />

(mod 10) x 2<br />

= Product<br />

Product<br />

(mod 11)<br />

carried forward<br />

j P j I 11 + a (n-j+1) = S j S j II x 2=P (j+1) P (j+1) I 11<br />

1 2 3 4<br />

1 10 + 1 = 11 1 x 2 = 2 2<br />

2 2 + 0 = 2 2 x 2 = 4 4<br />

3 4 + 0 = 4 4 x 2 = 8 8<br />

4 8 + 8 = 16 6 x 2 = 12 1<br />

5 1 + 4 = 5 5 x 2 = 10 10<br />

6 10 + 5 = 15 5 x 2 = 10 10<br />

7 10 + 4 = 14 4 x 2 = 8 8<br />

8 8 + 5 = 13 3 x 2 = 6 6<br />

9 6 + 6 = 12 2 x 2 = 4 4<br />

10 4 + 1 = 5 5 x 2 = 10 10<br />

11 10 + 1 = 11 1 x 2 = 2 2<br />

12 2 + 5 = 7 7 x 2 = 14 3<br />

13 3 + 8 = 1<br />

(mod 10)<br />

The check character is 8.<br />

Explanations<br />

The starting value, to which in the first step the 1st digit value is added, is always 10.<br />

Subtotal (mod 10): The result of the calculation in column 2 is divided by 10,<br />

and the integer remainder gives the subtotal S j II 10 .<br />

If this remainder is 0, then the value 10 is to be assigned<br />

instead.<br />

Product (mod 11): The product in column 3 is divided by 11; the remainder<br />

yields the next step of the calculation.<br />

Check digit:<br />

In the final calculation step, the amount carried forward is<br />

subtracted from 11, i.e. 1 (mod 10). The result of the<br />

subtraction will be the check character. If the amount<br />

carried forward from Step 12 is 1, then the check<br />

character is 0.


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Country codes and currency codes<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

155<br />

VIII.11<br />

Country codes and currency codes<br />

The following table provides, for a limited number of countries, the country code as per<br />

ISO 3166-1, the currency code and the number of decimal places for the national<br />

currency, as per ISO 4217.<br />

Name of country<br />

Country<br />

code<br />

(numeric)<br />

Country<br />

code (Alpha-<br />

2)<br />

Currency<br />

code<br />

Decimal<br />

places<br />

Austria 040 AT ATS 2<br />

Belgium 056 BE BEF 0<br />

Bulgaria 100 BG BGL 2<br />

Canada 124 CA CAD 2<br />

Croatia 191 HR HRK 2<br />

Czech Republic 203 CZ CZK 2<br />

Denmark 208 DK DKK 2<br />

Finland 246 FI FIM 2<br />

France 250 FR FRF 2<br />

Germany 280 21 DE DEM 2<br />

Great Britain 826 GB GBP 2<br />

Greece 300 GR GRD 0<br />

Hungary 348 HU HUF 2<br />

Iceland 352 IS ISK 2<br />

Ireland 372 IE IEP 2<br />

Italy 380 IT ITL 0<br />

Japan 392 JP JPY 0<br />

Liechtenstein 438 LI CHF 2<br />

Luxembourg 442 LU LUF 0<br />

Netherlands 528 NL NLG 2<br />

Norway 578 NO NOK 2<br />

Poland 616 PL PLN 2<br />

Portugal 620 PT PTE 0<br />

Rumania 642 RO ROL 2<br />

Russian Federation 643 RU RUR 2<br />

Slovakia 703 SK SKK 2<br />

Slovenia 705 SI SIT 2<br />

Spain 724 ES ESP 0<br />

Sweden 752 SE SEK 2<br />

Switzerland 756 CH CHF 2<br />

Turkey 792 TR TRL 2<br />

USA 840 US USD 2<br />

Euro 978 EU EUR 2<br />

21<br />

The new Code 276 is not yet used at present, since Code 280 is more usual in the banking business.


Chapter:<br />

VIII<br />

Page:<br />

156<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

European account addressing<br />

VIII.12<br />

European account addressing<br />

The DEG "Account addressing“ (see chapter II.5.3.3) should be filled in the following<br />

way for target countries: 22<br />

Belgium:<br />

Country code: 056<br />

Bank code:<br />

Account/portfolio no.:<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).<br />

The entire character sequence (exactly 12 characters)<br />

must be entered.<br />

3 n 23 7 n 2 n<br />

Bank-Code No. Compte or Rekeningnr. Check digit<br />

Denmark:<br />

Country code: 208<br />

Bank code:<br />

The field is filled with the S.W.I.F.T. code.<br />

8 or 11 an<br />

S.W.I.F.T. code<br />

Account/portfolio no.:<br />

The bank code is a fixed part of the account number.<br />

The entire character sequence (exactly 14 characters)<br />

must be entered.<br />

4 n max. 9 n 1<br />

Bank code Account Check digit<br />

Germany:<br />

Country code: 280<br />

Bank code:<br />

The field is filled with the account number.<br />

8 n<br />

Bank code<br />

22<br />

23<br />

See „Register of European Account Numbers“, ECBS Technical Report TR 201, Version 2.1,<br />

September 1999 (http://www.ecbs.org/download/tr201v2.1.pdf)<br />

The format information indicates length and data type of the respective field/sub-field (n = numerical; an<br />

= alphanumerical)


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: European account addressing<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

157<br />

Account/portfolio no.:<br />

The bank code is not a fixed part of the account<br />

number. The account number must be entered.<br />

10 n<br />

Account number<br />

Finland:<br />

Country code: 246<br />

Bank code:<br />

Account/portfolio no.:<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).<br />

The entire character sequence (exactly 12 characters)<br />

must be entered.<br />

6 n max. 7 n 1<br />

Bank code Account number Check digit<br />

France:<br />

Country code: 250<br />

Bank code:<br />

Account/portfolio no.:<br />

The field is not occupied.<br />

The RIB code is a combination of bank code and<br />

account number. The entire character sequence must<br />

be entered (exactly 23 places).<br />

5 n 5 n 11 an 2 n<br />

Code banque Code guichet No. de Compte Cié RIB<br />

Greece:<br />

Country code: 300<br />

Bank code:<br />

The field is filled with the S.W.I.F.T. code.<br />

8 or 11 an<br />

Account/portfolio no.:<br />

S.W.I.F.T. code<br />

The bank code is a fixed part of the account number.<br />

The entire character sequence must be entered<br />

(exactly 19 characters).<br />

3 n 3n 12 n 1 n<br />

Bank code Branch code Account number Check digit<br />

Great Britain:<br />

Country code: 826<br />

Bank code:<br />

The field is filled with the sort code.


Chapter:<br />

VIII<br />

Page:<br />

158<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

European account addressing<br />

6 n<br />

Sort code<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

8 n<br />

Account number<br />

Ireland:<br />

Country code: 372<br />

Bank code:<br />

The field is filled with the sort code.<br />

6 n<br />

Sort code<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

8 n<br />

Account number<br />

Iceland:<br />

Country code: 352<br />

Bank code:<br />

The field is filled with the bank code. Alternatively the<br />

S.W.I.F.T. code can also be specified.<br />

4 n<br />

Bankanúmer<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

18 n<br />

Reikningsnúmer<br />

Italy:<br />

Country code: 380<br />

Bank code:<br />

The field is filled with the S.W.I.F.T. code.<br />

8 or 11 an<br />

Account/portfolio no.:<br />

S.W.I.F.T. code<br />

1 a 5 n 5 n max. 12 x<br />

The Coordinata Bancaria is a combination of bank code<br />

and account number. The entire character sequence<br />

must be entered (exactly 23 places).<br />

CIN ABI code CAB code Numero di Conto


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: European account addressing<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

159<br />

Liechtenstein:<br />

Country code: 438<br />

Bank code:<br />

The field is filled with the bank code (SIC code).<br />

Alternatively the S.W.I.F.T. can also be entered.<br />

Max. 5 an<br />

SIC code<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

Max. 16 an<br />

Kontonummer<br />

Luxembourg:<br />

Country code: 442<br />

Bank code:<br />

The field is filled with the S.W.I.F.T. code.<br />

8 or 11 an<br />

S.W.I.F.T. code<br />

Account/portfolio no.:<br />

The bank code is a fixed part of the account number<br />

(max. 14 characters).<br />

2 n 6 n 2 n 4 an<br />

Bank- Numeró de Compte Check bankinterne<br />

Code Digit Kennziffer<br />

Netherlands:<br />

Country code: 528<br />

Bank code:<br />

The field is filled with the S.W.I.F.T. code.<br />

8 or. 11 an<br />

S.W.I.F.T. code<br />

Account/portfolio no.:<br />

The bank code is a fixed part of the account number<br />

(altogether max. 9 characters, of these bank code 2 to<br />

3 characters and account number max. 7 characters).<br />

10 n<br />

Rekeningnummer<br />

Norway:<br />

Country code: 578<br />

Bank code:<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).


Chapter:<br />

VIII<br />

Page:<br />

160<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

European account addressing<br />

Account/portfolio no.: The account number should be entered (max. 11<br />

characters).<br />

4 n 7 n 1 n<br />

Registernummer Konto<br />

Check digit<br />

Austria:<br />

Country code: 040<br />

Bank code:<br />

The field is filled with the bank code. Alternatively the<br />

S.W.I.F.T. code can be entered.<br />

5 n<br />

Bankleitzahl<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

11 n<br />

Kontonummer<br />

Portugal:<br />

Country code: 620<br />

Bank code:<br />

Account/portfolio no.:<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).<br />

The entire character sequence must be entered (a total<br />

of max. 21 places).<br />

4 n 4 n 11 n 2 n<br />

National Bank Bank Branch Account number Check<br />

Code Code Digit<br />

Sweden:<br />

Country code: 752<br />

Bank code:<br />

Account/portfolio no.:<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).<br />

The account number must be specified (a total of max.<br />

15 characters, usually 11 characters).<br />

4 n 6 n 1 n<br />

Bank code Account number Check digit<br />

Switzerland:<br />

Country code: 756


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: European account addressing<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

161<br />

Bank code:<br />

The bank code is not a fixed part of the account<br />

number. Alternatively the S.W.I.F.T. code can also be<br />

specified.<br />

max. 5 n<br />

Clearingnummer<br />

Account/portfolio no.:<br />

The account number must be entered.<br />

max. 16 an<br />

Account number<br />

Spain:<br />

Country code: 724<br />

Bank code:<br />

Account/portfolio no.:<br />

4 n 4 n 2 n 10 n<br />

The field is not occupied (the bank code is a fixed part<br />

of the account number).<br />

The entire character sequence must be entered<br />

(exactly 20 characters).<br />

Código de Código de Dígitos Número de cuenta<br />

entidad oficina de control


Chapter:<br />

VIII<br />

Page:<br />

162<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Bibliography<br />

VIII.13<br />

Bibliography<br />

The specification makes use of a variety of different documents which have been<br />

classified by topic below.<br />

♦ General<br />

• ISO 639:1988: Code for the representation of names of languages<br />

• ISO 3166-1:1996: Code for the representation of names of countries and their<br />

subdivisions - <strong>Part</strong> 1: Country code<br />

• ISO 4217:1995: Codes for the representation of currencies and funds<br />

• ISO 8859-1:1987: Information processing - 8 bit single-byte coded graphic character<br />

sets - <strong>Part</strong> 1: Latin alphabet No. 1<br />

• ISO 13616: Banking and related services - International Bank Account Number<br />

(IBAN)<br />

• IBAN: International Bank Account Number (EBS 204), published by European<br />

Committee for Banking Standards, November 1996 (www.ecbs.org/download.html)<br />

• IBAN: Standard Implementation Guidelines (SIG 203), published by European<br />

Committee for Banking Standards, November 1996 (www.ecbs.org/download.html)<br />

♦ Security<br />

• Kryptographische Verfahren des deutschen Kreditgewerbes für die Elektronische<br />

Unterschrift und für die Verschlüsselung im Rahmen der Kunde-Financial institution-<br />

Kommunikation (Cryptographic Procedures of the German Banking Industry for Electronic<br />

Signature and for Encryption in the Framework of Customer-Financial institution-<br />

Communication) in: ZKA-Abkommen über die Datenfernübertragung zwischen<br />

Kunden und Kreditinstituten (DFÜ-Abkommen) v. 15.03.1995, Anlage 2 (ZKA-<br />

Agreement on Data Transmission between Customers and Financial institutions dated<br />

15.03.1995, Appendix 2)<br />

• ISO CD 9735-5: Electronic data interchange for administration, commerce and<br />

transport - (EDIFACT) - Application level syntax rules; <strong>Part</strong> 5: Security rules for batch<br />

EDI (Authenticity; Integrity and Non-repudiation of origin), SJWG, Release 1 1995-<br />

12-14 (not yet published)<br />

• ISO WD 9735-7: Electronic data interchange for administration, commerce and<br />

transport - (EDIFACT) - Application level syntax rules; <strong>Part</strong> 7: Security rules for batch<br />

EDI (Confidentiality), SJWG, Release 1.1 1995-10-18 (not yet published)<br />

• ISO CD 9735-9: Electronic data interchange for administration, commerce and<br />

transport - (EDIFACT) - Application level syntax rules; <strong>Part</strong> 9: Security key and<br />

certificate management (Message type - KEYMAN), SJWG, Release 1 1996-01-12<br />

(not yet published)<br />

• ISO 9796:1991: Information technology - Security techniques - Digital signature<br />

scheme giving message recovery


Homebanking-Computer-Interface (HBCI)<br />

Chapter: <strong>Appendices</strong><br />

Section: Bibliography<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Chapter:<br />

VIII<br />

Page:<br />

163<br />

• ISO 10116: Information technology - Modes of operation for an n-bit block cipher<br />

algorithm<br />

• ISO 10118-2: Information technology - Security techniques - Hash functions <strong>Part</strong> 2:<br />

Hash functions using an n-bit block cipher algorithm<br />

• ISO 10118-3: Information technology - Security techniques - Hash functions <strong>Part</strong> 3:<br />

Dedicated hash functions, Draft, 1997<br />

• ISO 10126: Banking - Procedures for message encipherment (wholesale)<br />

• ANSI X3.92-1981 (R1987): Data Encryption Algorithm<br />

• ANSI X3.106-1983 (R1996): Data Encryption Algorithm, Modes of operation for the<br />

• ANSI X9.19-1996: Financial Institution Retail Message Authentication<br />

• ANSI X9.23-1995 (R1995): Financial Institution Encryption of Wholesale Financial<br />

Messages<br />

• EDIFACT Message Implementation Guidelines: Ciphered Text Message. CIPHER,<br />

SJWG; Working Draft Version, Paris September 16th 1994<br />

• EDIFACT Security Implementation Guidelines, Trade/WP.4/R.1026/Add.2, 22<br />

February<br />

• MIG Handbook UN/EDIFACT Message KEYMAN (proposed draft), June 30, 1995<br />

• R. Rivest, A. Shamir, L. Adleman: A method for obtaining digital signatures and<br />

public key cryptosystems, Communications of the ACM, vol. 21 no. 2, 1978.<br />

• H. Dobbertin, A. Bosselaers, B. Preneel: "RIPEMD-160, a strengthened version of<br />

RIPEMD", Fast Software Encryption - Cambridge Workshop 1996, LNCS, Band<br />

1039, D. Gollmann, Ed., Springer-Verlag, 1996, S. 71-82 (ftp://ftp.esat.kuleuven.ac.be/pub/COSIC/bosselae/ripemd/)<br />

♦ Descriptions of communications media<br />

• Datex-J Rechnerverbund - EHKP Protokollhandbuch, Version 4.3 vom 18.10.1995,<br />

Deutsche Telekom AG, Zentrum MIV Darmstadt (Datex-J Computer Link - EHKP<br />

Protocol Manual, Version 4.3 dated 18.10.1995 )<br />

• Datex-J - X.29 Protokollhandbuch, 3. Ausgabe vom September 1993, Deutsche<br />

Telekom AG, Zentrum MIV Darmstadt (Datex-J - X.29 Protocol Manual, 3rd edition dated<br />

September 1993)<br />

• Functional Specifications for Videotext Terminals, Deutsche Telekom AG, Zentrum<br />

MIV Darmstadt<br />

• Funktionserweiterungen im Datex-J-Dienst - Technische Beschreibung der Datex-J<br />

Release 4.2/4.3, dated 26.6.1995, Deutsche Telekom AG, FTZ Darmstadt, Referat<br />

T24 (Functional extensions in the Datex-J-Service - Technical Specification of Datex-J<br />

Release 4.2/4.3)<br />

• Btx File Interchange Format (BtxFIF) for Transparent Mode, Deutsche Telekom AG,<br />

FTZ Darmstadt, Referat T25, Version 1.1, August 1992<br />

• Request for Comment (RFC) 791: Internet Protocol (IP), September 1981


Chapter:<br />

VIII<br />

Page:<br />

164<br />

Version:<br />

2.2<br />

Edition:<br />

2000-05-10<br />

Homebanking-Computer-Interface (HBCI)<br />

Chapter:<br />

Section:<br />

<strong>Appendices</strong><br />

Bibliography<br />

• Request for Comment (RFC) 793: Transmission Control Protocol (TCP), September<br />

1981<br />

• Request for Comment (RFC) 1700: Assigned Numbers, Oktober 1994<br />

Source for RFC documents: e.g. ftp://ftp.eunet.de/pub<br />

♦ Business transactions<br />

• Richtlinien für einheitliche Zahlungsverkehrsvordrucke und Merkblätter für neutrale<br />

Zahlungsverkehrsvordrucke (Guidelines for uniform payment forms and leaflets for<br />

neutral payment forms)<br />

• S.W.I.F.T. User Handbook, October 1998 Standards Release (see also<br />

http://www.iso15022-org)<br />

• ISO 6166: International Securities Numbering System<br />

• ISO 9362: Financial institution Identifier Code (BIC)<br />

• ISO 10383: Market Identifier Code (MIC)<br />

• Register of European Account Numbers, Technical Report TR 201, Version 2.1,<br />

published by European Committee for Banking Standards, September 1999<br />

(http://www.ecbs.org/download/tr201v2.1.pdf)<br />

• International Payment Instruction (IPI), Electronic Banking Standard EBS 206,<br />

Version 1.4, published by European Committee for Banking Standards, November<br />

1999 (www.ecbs.org/download/ebs206v1.4.pdf)<br />

♦ Chip card specification<br />

[ISO PIN1] ISO 9564-1, Banking – Personal Identification Number Management and<br />

Security, <strong>Part</strong> 1: PIN protection principles and techniques, DIS 1999<br />

[LIT 1']<br />

[LIT 1A]<br />

[LT]<br />

Schnittstellenspezifikation für die ZKA-Chipkarte, Datenstrukturen und<br />

Kommandos (Interface specification for the ZKA chip card, data structures<br />

and commands), Version 4.1, 01.07.1999<br />

Schnittstellenspezifikation für die ec-Karte mit Chip, Dateien des MF<br />

(Interface specification for the ec card with chip, files of the MF, Version<br />

4.2, 01.12.1999<br />

Schnittstellenspezifikation für die ec-Karte mit Chip, Ladeterminal<br />

(Interface specification for the ec card with chip, charging terminal),<br />

Version 3.0, 02.04.1998

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!