Explanation of Data Classification Tag Scheme:
When the text is encrypted, a tag of size 1 byte is added in the front of the text and then encrypted. This tag is to flag the type of data being encrypted. If the tag is e.g. LUK, it implies this data is super sensitive and should not be decrypted to clear outside the secure zone.
This tag is added in front of the encrypted data elements as a one byte header. Up to now I found out that the following values do exist:
21 = PAN
22 = LUK
23 = Token
26 = ICC Private key
Is anybody aware of any further values and what they are meaning?
Solved! Go to Solution
Thanks for being a Visa Developer Community member! Can you please confirm what API product your question relates to?
Visa Developer Team
globally speaking about the VTS APIs using JWS/JWE. The data Classification Tag 21 and 23 were implemented with Visa_Token_Services_Issuer_API_v2.2., but are not yet documented in the specification. Tag 22 and 26 are used on the Token Requestor APIs.
Thank you for being part of the community forum! Documentation is unavailable publically at this time, the program is tightly held, but when the documentation does becomes available, it will be available within the Visa Developer site.