. . . "This first request message includes data corresponding to the card or account number, customer PIN and other data as may be necessary to identify the account or user, and to determine if the transaction is authorized." . .