Document Title Here
Document Title Here
Document Title Here
ACR33U-A1 SmartDuo Reference Manual
Version 1.00
Page 48 of 56
www.acs.com.hk
Response data format (abData field in the RDR_to_PC_DataBlock)
SW1
SW2
SW1, SW2
=
90
H
00
H
if no error
8.2.12.5. AUTHENTICATE_MEMORY_CARD (SLE4436, SLE5536 and SLE6636
only)
To read a card authentication certificate from a SLE5536 or SLE6636 card, the following actions are
executed by the ACR33U-A1 SmartDuo:
-
Select Key 1 or Key 2 in the card as specified in the command
-
Present the challenge data specified in the command to the card
-
Generate the specified number of CLK pulses for each bit of authentication data
computed by the card
-
Read 16 bits of authentication data from the card
-
Reset the card to normal operation mode
The authentication has to be performed in two steps. The first step is to send the Authentication
Certificate to the card. The second step is to get back two bytes of authentication data calculated by
the card.
Step 1: Send Authentication Certificate to the Card
Command format (abData field in the PC_to_RDR_XfrBlock)
Pseudo-APDU
CLA INS
P1
P2
MEM_L
CODE
KEY CLK_
CNT
Byte
1
Byte
2
…
…
Byte
5
Byte
6
FF
H
84
H
00
H
00
H
08
H
KEY
Key to be used for the computation of the authentication certificate:
00
H
: key 1 with no cipher block chaining
01
H
: key 2 with no cipher block chaining
80
H
: key 1 with cipher block chaining (SLE5536 and SLE6636 only)
81
H
: key 2 with cipher block chaining (SLE5536 and SLE6636 only)
CLK_CNT
Number of CLK pulses to be supplied to the card for the computation of each bit of the
authentication certificate. Typical value is 160 clocks (A0
H
)
BYTE 1...6
Card challenge data