manualshive.com logo in svg

ACS ACM1252U-Y3, Reference Manual

Share
Download
ACS ACM1252U-Y3 Reference Manual Download Page 2

 

ACM1252U-Y3 

– Reference Manual

 

[email protected] 

Version 1.03 

www.acs.com.hk

 

Page 2 of 92

 

www.acs.com

.hk 

 

Revision History 

Release Date 

Revision Description 

Version Number 

2015-02-13 

●  Initial Release 

1.00 

2015-03-26 

●  Updated Marketing Name 
●  Updated Section 1.0: Introduction 
●  Updated Section 2.0: Features 
●  Updated Section 5.4.2.8: Set Parameter 

Data Object 

●  Updated Section 5.5.2: Authentication for 

MIFARE Classic 1K/4K 

●  Updated Section 5.5.4: Update Binary 

Blocks 

●  Updated Section 5.10: NFC Card Emulation 

Mode-related Commands 

●  Updated Section 5.11.3: Get the PICC 

Operating Parameter 

1.01 

2017-09-20 

●  Updated Section 1.0: Introduction 
●  Updated Section 2.0: Features 

1.02 

2020-03-17 

●  Updated MIFARE Trademarks 
●  Re-organized Section 5.0 
●  Updated Section 5.1 PCSC API 

●  Updated Section 5.2.4.1 Load 

Authentication Keys 

●  Updated Section 5.2.4.7 Copy Value Block 
●  Updated Section 5.3.8 Set Automatic PICC 

Polling 

●  Updated Section 5.3.9 Read Automatic 

PICC Polling 

●  Added Section 5.3.12 Set Auto PPS 
●  Added Section 5.3.13 Read Auto PPS 
●  Added Section 5.3.14 Read Serial Number 

●  Updated Section 5.5.4 Set Card Emulation 

of MIFARE Ultralight UID 

●  Updated Section 5.5.5 Set Card Emulation 

FeliCa IDm 

●  Updated Section 5.5.6 Set Card Emulation 

Lock Data in NFC 

●  Added Appendix B. Escape Command 

Example 

1.03 

Summary of Contents for ACM1252U-Y3

Page 1: ...Subject to change without prior notice info acs com hk www acs com hk Reference Manual V1 03 ACM1252U Y3 USB NFC Reader Module...

Page 2: ...11 3 Get the PICC Operating Parameter 1 01 2017 09 20 Updated Section 1 0 Introduction Updated Section 2 0 Features 1 02 2020 03 17 Updated MIFARE Trademarks Re organized Section 5 0 Updated Section 5...

Page 3: ...49 5 3 5 Buzzer Status 50 5 3 6 Set LED and Buzzer Status Indicator Behavior for PICC Interface 51 5 3 7 Read LED and Buzzer Status Indicator Behavior for PICC Interface 52 5 3 8 Set Automatic PICC P...

Page 4: ...APDU Flow 17 Figure 3 ACM1252U Y3 Escape Command Flow 18 Figure 4 Peer to Peer Flow for Initiator Mode 61 Figure 5 Peer to Peer Flow for Target Mode 68 List of Tables Table 1 Acronyms and Abbreviation...

Page 5: ...Cards MIFARE cards FeliCa cards and all four types of NFC ISO IEC 18092 tags The ACM1252U Y3 which is the module version of ACR1252U supports the three modes of NFC namely NFC card reader writer Card...

Page 6: ...ilt in anti collision feature only one tag is accessed at a time NFC Support Card Reader Writer mode Peer to Peer mode Card Emulation mode o SAM Interface upon request One SAM Slot upon request Suppor...

Page 7: ...sponse DSL Deselect Request and Deselect Response PSL Parameter Selection Request and Parameter Selection Response RLS Release Request and Release Response WUP Wakeup Request and Wakeup Response DID D...

Page 8: ...and the computer is CCID protocol All communications between PICC and SAM are PC SC compliant Figure 1 ACM1252U Y3 Architecture ACM1252 PCSC SAM Interface Optional PCSC Layer ISO 7816 Parts 1 4 SAM In...

Page 9: ...ource manager context successful Further PCSC operation can be performed 5 0 Host Programming PC linked API 5 1 PCSC API This section will describe some of the PCSC API for application programming usa...

Page 10: ...lable reader which can be used in the system retCode SCardListReaders hContext NULL readerName size if retCode SCARD_S_SUCCESS Listing reader fail if readerName NULL No reader available else Reader li...

Page 11: ...PICC 0 Depends on what reader be used Should connect to PICC interface retCode SCardConnect hContext rName SCARD_SHARE_SHARED SCARD_PROTOCOL_T0 hCard dwActProtocol if retCode SCARD_S_SUCCESS Connecti...

Page 12: ...eader PICC 0 Depends on what reader will be used Should connect to PICC interface retCode SCardConnect hContext rName SCARD_SHARE_DIRECT SCARD_PROTOCOL_T0 SCARD_PROTOCOL_T1 hCard dwActProtocol if retC...

Page 13: ...cessful The RecvBuff stores the firmware version message for int i 0 i RecvLen 5 i FWVersion i RecvBuff 5 i Connection successful RecvLen 262 Turn Green LED on turn Red LED off SendBuff 0 0xE0 SendBuf...

Page 14: ...ACS ACR1252 CL Reader PICC 0 Depends on what reader should be used Should connect to PICC interface retCode SCardConnect hContext rName SCARD_SHARE_SHARED SCARD_PROTOCOL_T0 hCard dwActProtocol if retC...

Page 15: ...ndBuff 2 0x00 SendBuff 3 0x00 SendBuff 4 0x00 SendLen 5 retCode SCardTransmit hCard ioRequest SendBuff SendLen NULL RecvBuff RecvLen if retCode SCARD_S_SUCCESS APDU sending failed return else APDU sen...

Page 16: ...int retCode void main Connection successful retCode SCardDisconnect hCard SCARD_RESET_CARD if retCode SCARD_S_SUCCESS Disconnection failed else Disconnection successful 5 1 6 SCardDisconnect The SCar...

Page 17: ...ersion 1 03 www acs com hk Page 17 of 92 www acs com hk 5 1 7 APDU Flow Figure 2 ACM1252U Y3 APDU Flow SCardEstablishContext SCardListReaders Reader present SCardConnect Connection successful SCardTra...

Page 18: ...hk Version 1 03 www acs com hk Page 18 of 92 www acs com hk 5 1 8 Escape Command Flow Figure 3 ACM1252U Y3 Escape Command Flow SCardEstablishContext SCardListReaders Reader present SCardConnect SCard...

Page 19: ...Lower nibble 0 means T 0 3 01h TD2 Higher nibble 0 means no TA3 TB3 TC3 TD3 following Lower nibble 1 means T 1 4 To 3 N 80h T1 Category indicator byte 80 means A status indicator may be present in an...

Page 20: ...n 0 3Bh Initial Header 1 8Nh T0 Higher nibble 8 means no TA1 TB1 TC1 only TD1 is following Lower nibble N is the number of historical bytes HistByte 0 to HistByte N 1 2 80h TD1 Higher nibble 8 means n...

Page 21: ...o distinguish the ISO 14443A 4 and ISO 14443B 4 PICCs and retrieve the full ATS if available ISO 14443A 3 or ISO 14443B 3 4 PICCs do have ATS returned APDU Command FF CA 01 00 00h APDU Response 06 75...

Page 22: ...If P1 01h Get ATS of a ISO 14443 A card ATS 2 bytes Response Data Out Result ATS SW1 SW2 Response Codes Results SW1 SW2 Meaning Success 90h 00h The operation was completed successfully Warning 62h 82...

Page 23: ...ol Other RFU Response Format Data Out SW1 SW2 Data Field BER TLV encoded Every command returns SW1 and SW2 together with the response data field if available The SW1 SW2 is based on ISO 7816 SW1 SW2 f...

Page 24: ...process the following data objects if they do not depend on the failed data object 5 2 3 2 Manage Session Command This command is used to manage the transparent session This includes starting and end...

Page 25: ...ion The auto polling will be reset to the state before the session has started End Session Data Object Tag Length 1 byte Value 82h 00h 5 2 3 2 3 Version Data Object This command is used to return the...

Page 26: ...he different parameters from the IFD Get Parameter Data Object Tag Length 1 byte Value Tag Len Value FF 6Dh Var TLV_Objects TLV_Objects Parameters Requested Tag Length Frame size for IFD integer FSDI...

Page 27: ...h Param 1 4 for for ISO IEC14443 type B 0Ah 04h 5 2 3 3 Transparent Exchange Command This command is used to transmit and receive any bit or bytes from ICC Transparent Exchange Command Command Class I...

Page 28: ...ing 2 0 insert parity in the transmit data 1 do not insert parity 3 0 expect parity in received date 1 do not expect parity i e no parity checking 4 0 append protocol prologue in the transmit data or...

Page 29: ...s used to transmit the data from IFD to the ICC No response is expected from the ICC after transmit is complete Transmit Data Object Tag Length 1 byte Value 93h DataLen Data N bytes 5 2 3 3 5 Receive...

Page 30: ...collision detected 2 0 no parity error 1 parity error detected 3 0 no framing error 1 framing error detected 4 7 RFU 5 2 3 3 8 Response Data Object Inside the response this command is used to notify t...

Page 31: ...different layers of the standard Switch Protocol Data Object Tag Length 1 byte Value Byte 0 Byte 1 8Fh 02h 00h ISO IEC14443 Type A 01h ISO IEC14443 Type B 03h FeliCa Other RFU 00h If no layer separat...

Page 32: ...SO14443 4A Active Command FF C2 00 02 04 8F 02 00 04 Response C0 03 01 64 01 90 00 if no card present C0 03 00 90 00 5F 51 ATR 90 00 4 Set the PCB to 0Ah and enable the CRC parity and protocol prologu...

Page 33: ...www acs com hk 5 Send the APDU 80B2000008 to card and get response Command FF C2 00 01 0E 5F 46 04 40 42 0F 00 95 05 80 B2 00 00 08 Response C0 03 00 90 00 92 01 00 96 02 00 00 97 0C Card Response 90...

Page 34: ...ey is loaded into the reader volatile memory Other Reserved Key Number 1 byte 00h 01h Volatile memory for storing a temporally key The key will disappear once the reader is disconnected from the PC Tw...

Page 35: ...has a total of 16 sectors and each sector consists of four consecutive blocks e g Sector 00h consists of blocks 00h 01h 02h and 03h sector 01h consists of blocks 04h 05h 06h and 07h the last sector 0...

Page 36: ...03h Sector 1 04h 06h 07h Sector 14 38h 0Ah 3Bh Sector 15 3Ch 3Eh 3Fh Table 2 MIFARE Classic 1K Memory Map Sectors Total 32 sectors Each sector consists of 4 consecutive blocks Data Blocks 3 blocks 16...

Page 37: ...SN0 SN1 SN2 BCC0 0 Serial Number SN3 SN4 SN5 SN6 1 Internal Lock BCC1 Internal Lock0 Lock1 2 OTP OPT0 OPT1 OTP2 OTP3 3 Data read write Data0 Data1 Data2 Data3 4 Data read write Data4 Data5 Data6 Data...

Page 38: ...es for MIFARE Classic 4K Multiple Blocks Mode 15 consecutive blocks Example 1 10h 16 bytes The starting block only Single Block Mode Example 2 40h 64 bytes From the starting block to starting block 3...

Page 39: ...ytes for MIFARE 4K Multiple Blocks Mode 15 consecutive blocks Block Data Multiple of 16 bytes or 4 bytes The data to be written into the binary block blocks Example 1 10h 16 bytes The starting block o...

Page 40: ...he block will then be converted to a value block 01h Increment the value of the value block by the VB_Value This command is only valid for value block 02h Decrement the value of the value block by the...

Page 41: ...umber 04h Where Block Number 1 byte The value block to be accessed Read Value Block Response Format 4 2 bytes Response Data Out Result Value MSB LSB SW1 SW2 Where Value 4 bytes The value returned from...

Page 42: ...locks must be in the same sector Copy Value Block Response Format 2 bytes Response Data Out Result SW1 SW2 Copy Value Block Response Codes Results SW1 SW2 Meaning Success 90 00h The operation was comp...

Page 43: ...emory Cards ISO 7816 4 APDU Format ISO 7816 4 Response Format Data 2 bytes Response Data Out Result Response Data SW1 SW2 Common ISO 7816 4 Response Codes Results SW1 SW2 Meaning Success 90 00h The op...

Page 44: ...hk Version 1 03 www acs com hk Page 44 of 92 www acs com hk Example Read 8 bytes from an ISO 14443 4 Type B PICC ST19XR08E APDU 80 B2 80 00 08h Class 80h INS B2h P1 80h P2 00h Lc None Data In None Le...

Page 45: ...In FeliCa Command start with Length Byte FeliCa Response Format Data 2 bytes Response Data Out Result Response Data Read Memory Block Example 1 Connect the FeliCa The ATR 3B 8F 80 01 80 4F 0C A0 00 00...

Page 46: ...get the reader s firmware message Get Firmware Version Format 5 bytes Command Class INS P1 P2 Lc Get Firmware Version E0h 00h 00h 18h 00h Get Firmware Version Response Format 5 bytes Firmware Message...

Page 47: ...he LED s output LED Control Format 6 bytes Command Class INS P1 P2 Lc Data In LED Control E0h 00h 00h 29h 01h LED Status LED Control Response Format 6 bytes Response Class INS P1 P2 Le Data Out Result...

Page 48: ...eck the existing LED s status LED Status Format 5 bytes Command Class INS P1 P2 Lc LED Status E0h 00h 00h 29h 00h LED Status Response Format 6 bytes Response Class INS P1 P2 Le Data Out Result E1h 00h...

Page 49: ...s used to control the buzzer output Buzzer Control Format 6 bytes Command Class INS P1 P2 Lc Data In Buzzer Control E0h 00h 00h 28h 01h Buzzer On Duration Where Buzzer On Duration 1 byte 00h Turn OFF...

Page 50: ...www acs com hk 5 3 5 Buzzer Status This command is used to check the existing buzzer status Buzzer Status Format 5 bytes Command Class INS P1 P2 Lc Buzzer Status E0h 00h 00h 28h 00h Buzzer Status Resp...

Page 51: ...PICC card is being accessed Bit 1 PICC Polling Status LED To show the PICC Polling Status 1 Enable 0 Disable Bit 2 PICC Activation Status LED To show the activation status of the PICC interface 1 Enab...

Page 52: ...lt E1h 00h 00h 00h 01h Behaviors Behavior 1 byte Behavior Mode Description Bit 0 Card Operation Blinking LED To blink the LED whenever the PICC card is being accessed Bit 1 PICC Polling Status LED To...

Page 53: ...reader will consume less current in power saving mode Note The setting will be saved into non volatile memory Set Automatic PICC Polling Format 6 bytes Command Class INS P1 P2 Lc Data In Set Automati...

Page 54: ...However the response time of PICC Polling will become longer The Idle Current Consumption in Power Saving Mode is about 60 mA while the Idle Current Consumption in Non Power Saving mode is about 130m...

Page 55: ...nse Format 6 bytes Response Class INS P1 P2 Le Data Out Result E1h 00h 00h 00h 01h Polling Setting Polling Setting 1 byte Polling Setting Mode Description Bit 0 Auto PICC Polling 1 Enable 0 Disable Bi...

Page 56: ...ameter E0h 00h 00h 20h 01h Operation Parameter Set the PICC Operating Parameter Response Format 6 bytes Response Class INS P1 P2 Le Data Out Result E1 00h 00h 00h 01h Operation Parameter Operating Par...

Page 57: ...0h 20h 00h Read the PICC Operating Parameter Response Format 6 bytes Operating Parameter 1 byte Operating Parameter Parameter Description Option Bit 0 ISO 14443 Type A The Tag Types to be detected dur...

Page 58: ...s INS P1 P2 Le Data Out Result E1h 00h 00h 00h 04h Max Tx Speed Current Tx Speed Max Rx Speed Current Rx Speed Where Max Tx Speed Maximum Tx Speed 1 Byte Current Tx Speed Current Tx Speed 1 Byte Max R...

Page 59: ...d Auto PPS E0h 00h 00h 24h 00h Read Auto PPS Response Format 9 bytes Response Class INS P1 P2 Le Data Out Result E1h 00h 00h 00h 04h Max Tx Speed Current Tx Speed Max Rx Speed Current Rx Speed Where M...

Page 60: ...hk 5 3 14 Read Serial Number This command reads the serial number Read the Serial Number Format 5 bytes Command Class INS P1 P2 Lc Read the Serial Number E0h 00h 00h 33h 00h Read the Serial Number Re...

Page 61: ...www acs com hk 5 4 NFC Peer to Peer Mode related Commands 5 4 1 Initiator Mode related Commands This section provides the commands that can be used in Initiator Mode The figure below shows the peer to...

Page 62: ...de Timeout Command Format 7 bytes Command Class INS P1 P2 Lc Data In Set Initiator Mode E0h 00h 00h 41h 02h Timeout MSB Timeout LSB Note Unit 10 ms default value of Initiator Mode Timeout 00 64h 100 1...

Page 63: ...P2 Le Data Out Result E1h 00h 00h 00h 03h NFCMode OpMode Speed Where NFCMode 1 byte NFC Device Mode 01h MIFARE Ultralight Card Emulation Mode 03h FeliCa Card Emulation Mode 08h Peer to Peer Initiator...

Page 64: ...1 byte BR 1 byte PP 1 byte LLCP Parameter GiLen 1 byte Gi GiLen bytes ATR Request Response Format Response Class INS P1 P2 Le Data Out Result E1h 00h 00h 00h Len ATR Response Len bytes Where Mode 1 b...

Page 65: ...Command Format Command Class INS P1 P2 Lc Data In DEP Exchange E0h 00h 00h 43h Len 11h PFB 1 byte DepLen 1 byte Dep N bytes DEP Exchange Response Format Response Class INS P1 P2 Le Data Out Result E1...

Page 66: ...ce DSL Request Command Format Command Class INS P1 P2 Lc Data In DSL request E0h 00h 00h 44h 02h 11h DID 1 byte Where DID 1 byte Device Identification DSL Request Response Format Response Class INS P1...

Page 67: ...ce RLS Request Command Format Command Class INS P1 P2 Lc Data In RLS request E0h 00h 00h 45h 02h 11h DID 1 byte Where DID 1 byte Device Identification RLS Request Response Format Response Class INS P1...

Page 68: ...acs com hk Page 68 of 92 www acs com hk 5 4 2 Target Mode related Commands This section provides the commands that can be used when in Target Mode The figure below shows the peer to peer flow of comma...

Page 69: ...arget Mode Set Target Timeout Command Format Command Class INS P1 P2 Lc Data In Set Target Timeout E0h 00h 00h 59h 02h Timeout MSB Timeout LSB Note Unit 100 s default value of Target Timeout 00 C8h 20...

Page 70: ...ormat 8 bytes Response Class INS P1 P2 Le Data Out Result E1h 00h 00h 00h 02h Speed OpMode Enter Target Mode Response Format Response Class INS P1 P2 Le Data Out Result E1h 00h 00h 00h 02h Speed OpMod...

Page 71: ...TR Response Command Format Command Class INS P1 P2 Lc Data In ATR Response E0h 00h 00h 52h Len LLCP Parameter N bytes Where LLCP Parameter N bytes ATR response s General Byte ATR Response Format Respo...

Page 72: ...t Command Class INS P1 P2 Lc Data In DEP Response E0h 00h 00h 53h Len PFB 1 byte DEP Message N bytes Where PFB 1 byte Control the data transmission and error recovery DEP Message N bytes DEP response...

Page 73: ...SL response to the Initiator s DSL request DSL Response Command Format Command Class INS P1 P2 Lc DSL Response E0h 00h 00h 54h 00h DSL Response Format Response Class INS P1 P2 Le Data Out Result E1h 0...

Page 74: ...LS response to the Initiator s RLS request RLS Response Command Format Command Class INS P1 P2 Lc RLS Response E0h 00h 00h 55h 00h RLS Response Format Response Class INS P1 P2 Le Data Out Result E1h 0...

Page 75: ...PSL Response Command Format Command Class INS P1 P2 Lc Data In PSL Response E0h 00h 00h 56h 02h BRS 1 byte FSL 1 byte Where BRS 1 byte BRS Parameter FSL 1 byte FSL Parameter PSL Response Format Respon...

Page 76: ...UP response to the Initiator s WUP request WUP Response Command Format Command Class INS P1 P2 Lc WUP Response E0h 00h 00h 57h 00h WUP Response Format Response Class INS P1 P2 Le Data Out Result E1h 0...

Page 77: ...NFC Initiator device Get Received Data Command Format 5 bytes Command Class INS P1 P2 Lc Get Received Data E0h 00h 00h 58h 00h Get Received Data Response Format 11 bytes Response Class INS P1 P2 Le Da...

Page 78: ...s not supported in emulated MIFARE Ultralight UID is user programmable Enter Card Emulation Mode Command Format 8 bytes Command Class INS P1 P2 Lc Data In Enter Card Emulation Mode E0h 00h 00h 40h 03h...

Page 79: ...14 Data15 12 15 Data read write Data16 Data17 Data18 Data19 16 19 Data read write Data20 Data21 Data22 Data23 20 23 Data read write Data24 Data25 Data26 Data27 24 27 Data read write Data28 Data29 Data...

Page 80: ...write Block 5 80 95 Data read write Block 6 96 111 Data read write Block 7 112 127 Data read write Block 8 128 143 Data read write Block 9 144 159 Table 6 FeliCa Memory Map 160 bytes Where Default Blo...

Page 81: ...nd Class INS P1 P2 Lc Data In Read Card Emulation Data E0h 00h 00h 60h 04h 00h NFCMode StartOffset Length Read Card Emulation Data Response Format Data 5 bytes Response Class INS P1 P2 Le Data Out Res...

Page 82: ...P1 P2 Lc Data In Write Card Emulation Data E0h 00h 00h 60h Length 4 01h NFCMode StartOffset Length Data to write Write Card Emulation Data Response Format 8 bytes Response Class INS P1 P2 Le Data Out...

Page 83: ...UID of the emulated MIFARE Ultralight card Set Card Emulation MIFARE Ultralight UID Command Format 12 bytes Command Class INS P1 P2 Lc Data In Set Card Emulation Ultralight UID E0h 00h 00h 61h 07h 7...

Page 84: ...Card Identification number on the emulated FeliCa card Set Card Emulation FeliCa Card Identification number Command Format 11 bytes Command Class INS P1 P2 Lc Data In Set Card Emulation Felica IDm E0h...

Page 85: ...mand Class INS P1 P2 Lc Data In Set Card Emulation Lock Data E0h 00h 00h 65h 01h Lock Set Card Emulation lock data in NFC Response Format 6 bytes Response Class INS P1 P2 Le Data Out Result E1h 00h 00...

Page 86: ...LED State Mask 1 Update the State 0 No change Bit 3 Green LED State Mask 1 Update the State 0 No change Bit 4 Initial Red LED Blinking State 1 On 0 Off Bit 5 Initial Green LED Blinking State 1 On 0 Of...

Page 87: ...be performed after the LED Blinking operation is completed 2 The LED will not change if the corresponding LED Mask is not enabled 3 The LED will not blink if the corresponding LED Blinking Mask is no...

Page 88: ...mmand is used to retrieve the firmware version of the reader Get Firmware Version Command Format 5 bytes Command Class INS P1 P2 Le Get Firmware FFh 00h 48h 00h 00h Get Firmware Version Response Forma...

Page 89: ...Operating Parameter PICC Operating Parameter Bit Parameter Description Option 7 Auto PICC Polling To enable the PICC Polling 1 Enable 0 Disable 6 Auto ATS Generation To issue ATS Request whenever an...

Page 90: ...h PICC Operating Parameter PICC Operating Parameter Bit Parameter Description Option 7 Auto PICC Polling To enable the PICC Polling 1 Enable 0 Disable 6 Auto ATS Generation To issue ATS Request whenev...

Page 91: ...01 0B 55 01 61 63 73 2E 63 6F 6D 2E 68 6Bh Offset Content Length Description 0 D1 1 NDEF header TNF 01h SR 1 MB 1 ME 1 1 02 1 Record name length 2 bytes 2 0F 1 Length of the Smart Poster data 15 bytes...

Page 92: ...5 5 In the Command Data field type in E0 00 00 18 00 APDU for Get Firmware Version command 6 Click Transmit Control Command and then check the Response Data e g Response Data E1 00 00 00 0F 41 43 52 3...

Reviews:

No comments

Brands by name

Popular brands

Load more brands