IT lexicon › Security › PDOL

PDOL

Security På svenska → Updated: 2026-11-01

The list in which a chip card states, within the first second of a transaction, what it wants to know about the terminal before it gets going.

The Processing Options Data Object List lives in tag 9F38 and comes back once the terminal has selected the card's application. Like the CDOL, it is a run of tags and lengths. The terminal fills in the values and sends them in the GET PROCESSING OPTIONS (GPO) command. If there is no PDOL, the terminal sends an empty template and the card makes do.

On contact cards the PDOL is often short or missing. In contactless it carries most of the weight: Visa's kernel reads the terminal's capabilities, the amount and a random number right here and can return a finished cryptogram in the GPO response itself, because the card is only in the field for a few hundred milliseconds. Ordinary cards answer GPO with the AIP and AFL: what the card can do and where the rest of its data lives.

← Back to the lexicon