根据先前存储的引脚偏移量验证 IBM3624 PIN

在此示例中，我们将根据发卡机构/处理商存档的密码偏移量对持卡人提供的 PIN 进行验证。这些输入类似于为 IBM3624 引脚生成引脚偏移支付终端（或其他上游提供商，例如信用卡网络）提供的额外加密密码。如果引脚匹配，api 将返回 http 200。其中输出将是加密的 PIN block (PinData. PinBlock）和IBM3624偏移值（pindata.Offset）。

此命令要求密码生成密钥的类型为TR31_V1_IBM3624_PIN_VERIFICATION_KEY，加密密钥的类型为 TR31_P0_PIN_ENCRYPTION_KEY

$ aws payment-cryptography-data generate-pin-data --generation-key-identifier arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --generation-attributes Ibm3624RandomPin="{DecimalizationTable=9876543210654321,PinValidationDataPadCharacter=D,PinValidationData=171234567890123}"

{
"GenerationKeyArn": "arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2",
"GenerationKeyCheckValue": "7F2363",
"EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt",
"EncryptionKeyCheckValue": "7CC9E2",
"EncryptedPinBlock": "AC17DC148BDA645E",
"PinData": {
  "PinOffset": "5507"
}
}