background image

 

Subject to change without prior notice

 

[email protected]

 

 

www.acs.com.hk

 

 

Reference Manual V2.01 

ACR3801 

PC-linked 
Smart Card Reader 

FIPS 201 Certified 

Summary of Contents for ACR3801

Page 1: ...Subject to change without prior notice info acs com hk www acs com hk Reference Manual V2 01 ACR3801 PC linked Smart Card Reader FIPS 201 Certified ...

Page 2: ...ff 13 8 1 3 PC_to_RDR_GetSlotStatus 14 8 1 4 PC_to_RDR_XfrBlock 15 8 1 5 PC_to_RDR_GetParameters 16 8 1 6 PC_to_RDR_ResetParameters 17 8 1 7 PC_to_RDR_SetParameters 18 8 2 CCID Bulk IN Messages 20 8 2 1 RDR_to_PC_DataBlock 20 8 2 2 RDR_to_PC_SlotStatus 21 8 2 3 RDR_to_PC_Parameters 22 8 3 Memory Card Command Set 23 8 3 1 Recollection Card 1 2 4 8 and 18 Kbit I2C Card 23 8 3 2 Memory Card 32 64 128...

Page 3: ...ence Manual info acs com hk Version 2 01 www acs com hk Page 3 of 62 List of Tables Table 1 Symbols and Abbreviations 4 Table 2 USB Interface Wiring 9 Table 3 Supported Card Types 61 Table 4 Response Error Codes 62 ...

Page 4: ...000 Universal Serial Bus Common Class Specification 1 0 December 16 1997 Universal Serial Bus Device Class Smart Card CCID Specification for Integrated Circuit s Cards Interface Devices Revision 1 1 April 22 2005 The following related documents can be ordered through www ansi org ISO IEC 7816 1 Identification Cards Integrated circuit s cards with contacts Part 1 Physical Characteristics ISO IEC 78...

Page 5: ...CAC Common Access Card o Supports microprocessor cards with T 0 or T 1 protocol o Supports memory cards o Supports PPS Protocol and Parameters Selection o Features Short Circuit Protection Application Programming Interface o Supports PC SC o Supports CT API through wrapper on top of PC SC Supports Android OS 3 1 and above Compliant with the following standards o FIPS 201 o TAA o EN60950 IEC 60950 ...

Page 6: ...ill use the default parameters F 372 D 1 For the meaning of the aforementioned parameters please refer to ISO 7816 3 3 2 Memory based Smart Cards ACR3801 works with several memory based smart cards such as Cards following the I2C bus protocol free memory cards with maximum 128 bytes page with capability including o Atmel AT24C01 02 04 08 16 32 64 128 256 512 1024 o SGS Thomson ST14C02C 4C o Gemplu...

Page 7: ...s both the memory cards and MCU based cards For MCU based cards the reader allows to select the preferred protocol T 0 or T 1 However this selection is only accepted and carried out by the reader through the PPS when the card inserted in the reader supports both protocol types Whenever an MCU based card supports only one protocol type T 0 or T 1 the reader automatically uses that protocol type reg...

Page 8: ...1 Status LED The LED indicates the activation status of the smart card interface Flashing slowly turns on 200 ms for every 2 seconds Indicates ACR3801 is powered up and in the standby state Either the smart card has not been inserted or the smart card has not been powered up if it is inserted Lighting up Indicates power supply to the smart card is switched on i e the smart card is activated Flashi...

Page 9: ...801 and PC 4 GND Reference voltage level for power supply Table 2 USB Interface Wiring Note In order for the ACR3801 to function properly through USB interface either ACS proprietary device driver or the ACS PC SC device driver has to be installed 6 2 Endpoints ACR3801 uses the following endpoints to communicate with the host computer Control Endpoint For setup and control purpose Bulk OUT For com...

Page 10: ...y e g bMaxCCIDBusySlots is equal to 01h for ACR3801 ACR3801 supported CCID features are indicated in its Class Descriptor Offset Field Size Value Description 0 bLength 1 36h Size of this descriptor in bytes 1 bDescriptorType 1 21h CCID Functional Descriptor type 2 bcdCCID 2 0100h CCID Specification Release Number in Binary Coded decimal 4 bMaxSlotIndex 1 00h One slot is available on ACR3801 5 bVol...

Page 11: ...tic baud rate change according to frequency and FI DI parameters TPDU level change with ACR3801 44 dwMaxCCIDMessageLength 4 0000010Fh Maximum message length accepted by ACR3801 is 271 bytes 48 bClassGetResponse 1 00h Insignificant for TPDU level exchanges 49 bClassEnvelope 1 00h Insignificant for TPDU level exchanges 50 wLCDLayout 2 0000h No LCD 52 bPINSupport 1 00h No PIN Verification 53 bMaxCCID...

Page 12: ...by ACR3801 8 1 1 PC_to_RDR_IccPowerOn Activates the card slot and returns ATR from the card Offset Field Size Value Description 0 bMessageType 1 62h 1 dwLength 4 00000000h Size of extra bytes of this message 2 bSlot 1 Identifies the slot number for this command 5 bSeq 1 Sequence number for command 6 bPowerSelect 1 Voltage that is applied to the ICC 00h Automatic Voltage Selection 01h 5 volts 02h 3...

Page 13: ...es the card slot Offset Field Size Value Description 0 bMessageType 1 63h 1 dwLength 4 00000000h Size of extra bytes of this message 5 bSlot 1 Identifies the slot number for this command 6 bSeq 1 Sequence number for command 7 abRFU 3 Reserved for future use The response to this message is the RDR_to_PC_SlotStatus message ...

Page 14: ...t status of the slot Offset Field Size Value Description 0 bMessageType 1 65h 1 dwLength 4 00000000h Size of extra bytes of this message 5 bSlot 1 Identifies the slot number for this command 6 bSeq 1 Sequence number for command 7 abRFU 3 Reserved for future use The response to this message is the RDR_to_PC_SlotStatus message ...

Page 15: ...es the slot number for this command 6 bSeq 1 Sequence number for command 7 bBWI 1 Used to extend the CCIDs Block Waiting Timeout for this current transfer The CCID will timeout the block after this number multiplied by the Block Waiting Time has expired 8 wLevelParameter 2 0000h RFU TPDU exchange level 10 abData Byte array Data block sent to the CCID Data is sent as is to the ICC TPDU exchange lev...

Page 16: ...lot parameters Offset Field Size Value Description 0 bMessageType 1 6Ch 1 DwLength 4 00000000h Size of extra bytes of this message 5 BSlot 1 Identifies the slot number for this command 6 BSeq 1 Sequence number for command 7 AbRFU 3 Reserved for future use The response to this message is the RDR_to_PC_Parameters message ...

Page 17: ...rameters to default value Offset Field Size Value Description 0 bMessageType 1 6Dh 1 DwLength 4 00000000h Size of extra bytes of this message 5 BSlot 1 Identifies the slot number for this command 6 BSeq 1 Sequence number for command 7 AbRFU 3 Reserved for future use The response to this message is the RDR_to_PC_Parameters message ...

Page 18: ... abProtocolDataStructure Byte array Protocol Data Structure Protocol Data Structure for Protocol T 0 dwLength 00000005h Offset Field Size Value Description 10 bmFindexDindex 1 B7 4 FI Index into the table 7 in ISO IEC 7816 3 1997 selecting a clock rate conversion factor B3 0 DI Index into the table 8 in ISO IEC 7816 3 1997 selecting a baud rate conversion factor 11 bmTCCKST0 1 B0 0b B7 2 000000b B...

Page 19: ...type b0 0 for LRC b0 1 for CRC B1 Convention used b1 0 for direct b1 1 for inverse Note The CCID ignores this bit 12 BGuardTimeT1 1 Extra Guardtime 0 to 254 etu between two characters If value is FFh then guardtime is reduced by 1 etu 13 BwaitingIntegerT1 1 B7 4 BWI values 0 9h valid B3 0 CWI values 0 Fh valid 14 bClockStop 1 ICC Clock Stop Support 00h Stopping the Clock is not allowed 01h Stop wi...

Page 20: ..._to_RDR_IccPowerOn PC_to_RDR_XfrBlock and PC_to_RDR_Secure messages Offset Field Size Value Description 0 bMessageType 1 80h Indicates that a data block is being sent from the CCID 1 dwLength 4 Size of extra bytes of this message 5 bSlot 1 Same value as in Bulk OUT message 6 bSeq 1 Same value as in Bulk OUT message 7 bStatus 1 Slot status register as defined in CCID Section 4 2 1 8 bError 1 Slot e...

Page 21: ...n 0 bMessageType 1 81h 1 dwLength 4 00000000h Size of extra bytes of this message 5 bSlot 1 Same value as in Bulk OUT message 6 bSeq 1 Same value as in Bulk OUT message 7 bStatus 1 Slot status register as defined in CCID Section 4 2 1 8 bError 1 Slot error register as defined in CCID Section 4 2 1 and this specification Section 5 2 8 9 bClockStatus 1 Value 00h Clock running 01h Clock stopped in st...

Page 22: ...essage 6 bSeq 1 Same value as in Bulk OUT message 7 bStatus 1 Slot status register as defined in CCID Section 4 2 1 8 bError 1 Slot error register as defined in CCID Section 4 2 1 and this specification Section 5 2 8 9 bProtocolNum 1 Specifies what protocol data structure follows 00h Structure for protocol T 0 01h Structure for protocol T 1 The following values are reserved for future use 80h Stru...

Page 23: ...se refer to PC SC specification Command format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 01h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 1 2 SELECT_PAGE_SIZE This command chooses the page size to read the smart card The default value is 8 byte page write It will reset to default va...

Page 24: ... MEM_L Length of data to be read from the memory card Response Data Format abData field in the RDR_to_PC_DataBlock BYTE 1 BYTE N SW1 SW2 Where BYTE x Data read from memory card SW1 SW2 90 00h if no error 8 3 1 4 WRITE_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Byte Address MEM_L Byte 1 Byte n MSB LSB FFh D0h Where Byte Address Memory address location of t...

Page 25: ...ACR3801 Reference Manual info acs com hk Version 2 01 www acs com hk Page 25 of 62 SW1 SW2 Where SW1 SW2 90 00h if no error ...

Page 26: ...eudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 02h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 2 2 SELECT_PAGE_SIZE This command chooses the page size to read the smart card The default value is 8 byte page write It will reset to default value whenever the card is removed or the reader is powered off Command Format abData fiel...

Page 27: ... MEM_L Length of data to be read from the memory card Response Data Format abData field in the RDR_to_PC_DataBlock BYTE 1 BYTE N SW1 SW2 Where BYTE x Data read from memory card SW1 SW2 90 00h if no error 8 3 2 4 WRITE_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Byte Address MEM_L Byte 1 Byte n MSB LSB FF Where INS D0h for 32 64 128 256 512kbit iic card 110...

Page 28: ...ACR3801 Reference Manual info acs com hk Version 2 01 www acs com hk Page 28 of 62 Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error ...

Page 29: ...mat abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 03h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 3 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L FFh 00h Where INS B0h for reading zone 00b B1h for reading zone 01b B2h...

Page 30: ...dress location of the memory card MEM_L Length of data to be written to the memory card MEM_D Data to be written to the memory card Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 3 4 VERIFY_PASSWORD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Pw 0 Pw 1 Pw 2 FFh 20h 00h 03h Where Pw 0 Pw 1 Pw 2 Passwor...

Page 31: ... 3 3 5 INITIALIZE_AUTHENTICATION Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Q 0 Q 1 Q 7 FFh 84h 00h 00h 08h Where Q 0 Q 1 Q 7 Host random number 8 bytes Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 3 6 VERIFY_AUTHENTICATION Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P...

Page 32: ...ck Pseudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 04h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 4 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Zone Address Byte Address MEM_L FFh Where INS B0h for reading user zone B1h for reading configuration zone or reading fuse Zone Addre...

Page 33: ...2A1A0b is the memory address location of the memory card 1000 0000b for writing fuse MEM_L Length of data to be written to the memory card Byte x Data to be written to the memory card Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 4 4 VERIFY_PASSWORD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Data FF...

Page 34: ...5 INITIALIZE_AUTHENTICATION Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Q 0 Q 1 Q 7 FFh 84h 00h 00h 08h Where Byte Address Memory address location of the memory card Q 0 Q 1 Q 7 Host random number 8 bytes Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 4 6 VERIFY_AUTHENTICATION Command Format abData fi...

Page 35: ...ACR3801 Reference Manual info acs com hk Version 2 01 www acs com hk Page 35 of 62 Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error ...

Page 36: ...ld in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 05h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 5 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Byte Address MEM_L MSB LSB FFh B0h Where MSB Byte Address 0000 00A9A8b is the memory address location of th...

Page 37: ...ed exceeded the maximum number of retries Other values indicate that the last verification has failed DUMMY Two bytes dummy data read from the card SW1 SW2 90 00h if no error 8 3 5 4 READ_PROTECTION_BIT Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Byte Address MEM_L MSB LSB FFh B2h Where MSB Byte Address 0000 00A9A8b is the memory address location of the memory card LS...

Page 38: ...mand Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Byte Address MEM_L Byte 1 Byte N MSB LSB FFh D0h Where MSB Byte Address 0000 00A9A8b is the memory address location of the memory card LSB Byte Address A7A6A5A4 A3A2A1A0b is the memory address location of the memory card MEM_L Length of data to be written to the memory card Byte x Data to be written to the memory card Response ...

Page 39: ...is compared with the data at Byte Address N 1 Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 5 7 PRESENT_CODE_MEMORY_CARD SLE 4428 and SLE 5528 This command is used to submit the secret code to the memory card to enable the write operation with the SLE 4428 and SLE 5528 card the following actions are executed 1 Search a 1 bit in the presen...

Page 40: ...01 www acs com hk Page 40 of 62 Where SW1 90h SW2 ErrorCnt Error Counter FFh indicates successful verification 00h indicates that the password is locked or exceeded the maximum number of retries Other values indicate that current verification has failed ...

Page 41: ...SC specifications Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 Lc Card Type FFh A4h 00h 00h 01h 06h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 6 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L FFh B0h 00h Where Byte Address A7A6A5A4 A3...

Page 42: ...exceeded the maximum number of retries Other values indicate that the last verification has failed DUMMY Three bytes dummy data read from the card SW1 SW2 90 00h if no error 8 3 6 4 READ_PROTECTION_BITS To read the protection bits for the first 32 bytes Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 MEM_L FFh B2h 00h 00h 04h Response Data Format abData field in the...

Page 43: ...re SW1 SW2 90 00h if no error 8 3 6 6 WRITE_PROTECTION_MEMORY_CARD Each byte specified in the command is internally in the card compared with the byte stored at the specified address and if the data match the corresponding protection bit is irreversibly programmed to 0 Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L Byte 1 Byte N FFh D1h 00h Where By...

Page 44: ...unter Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 MEM_L CODE Byte 1 Byte 2 Byte 3 FFh 20h 00h 00h 03h Where CODE Three bytes secret code PIN Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 ErrorCnt 90h Where SW1 90h SW2 ErrorCnt Error Counter 07h indicates that the verification is correct 00h indicates the password is locked exceeded the max...

Page 45: ... acs com hk Page 45 of 62 Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 P2 MEM_L CODE Byte 1 Byte 2 Byte 3 FFh D2h 00h 01h 03h Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error ...

Page 46: ...at abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 7 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L FFh B0h 00h Where Byte Address Memory address location of the memory card MEM_L Length of data to be read from the memory card Response Data Format abData field in the RDR_to_PC_DataBlock BYTE 1 ...

Page 47: ...ue specified in the command is written to the specified address and the command is sent to the card to erase the next lower counter stage Thus this write mode can only be used for updating the counter value in the card Backup bit is enabled to prevent data loss when card tearing occurs With all write modes the byte at the specified card address is not erased prior to the write operation and hence ...

Page 48: ...he presentation counter in the card CODE Three bytes secret code PIN Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 7 5 AUTHENTICATE_MEMORY_CARD SLE 4436 SLE 5536 and SLE 6636 To read a card authentication certificate from a SLE 5536 or SLE 6636 card the ACR3801 executes the following actions 1 Select Key 1 or Key 2 in the card as specifie...

Page 49: ...certificate Typical value is 160 clocks A0 BYTE 1 6 Card challenge data Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 61h 02h Where SW1 SW2 61 02h if no error meaning two bytes of authentication data are ready The authentication data can be retrieved by Get_Response command Step 2 Get back the Authentication Data Get_Response Command Format abData field in the PC_to_RDR_XfrB...

Page 50: ...ata field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 8 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L FFh B0h 00h Where Byte Address Memory address location of the memory card MEM_L Length of data to be read from the memory card Response Data Format abData field in the RDR_to_PC_DataBlock BYTE 1 BYTE N...

Page 51: ...k SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 8 4 ERASE_SCRATCH_PAD_MEMORY_CARD This command is used to erase the data of the scratch pad memory of the inserted card All memory bits inside the scratch pad memory will be programmed to the state of 1 To erase error counter or user area please use the VERIFY_USER_CODE command as specified in the Section 4 8 5 Command Format abData field in the PC_to...

Page 52: ...ion error counter in bits Byte Address Byte address of the key in the card CODE 2 bytes User Code Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 63 00h if there are no more retries Note After SW1SW2 0x9000h has been received read back the User Error Counter to check if the VERIFY_USER_CODE is correct If User Error Counter is erased and is equa...

Page 53: ...ode Response Data Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 63 00h if there are no more retries Note After SW1SW2 0x9000h has been received read back the Application Area can check if the VERIFY_MEMORY_CODE is correct If all data in Application Area is erased and is equal to 0xFFh the previous verification is successful Pseudo APDU CLA INS Error Counte...

Page 54: ... Format abData field in the RDR_to_PC_DataBlock SW1 SW2 Where SW1 SW2 90 00h if no error 8 3 9 2 READ_MEMORY_CARD Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS P1 Byte Address MEM_L FFh B0h 00h Where Byte Address Memory address location of the memory card MEM_L Length of data to be read from the memory card Response Data Format abData field in the RDR_to_PC_DataBlock BY...

Page 55: ...OM memory is organized into 16 bit words Although erases are performed on single bit the ERASE operation clears an entire word in the memory Therefore performing an ERASE on any bit in the word will clear ALL 16 bits of that word to the state of 1 To erase Error Counter or the data in Application Zones please refer to the following 1 ERASE_APPLICATION_ZONE_WITH_ERASE command as specified in Sectio...

Page 56: ... code to the card a Erase the presentation error counter The data in corresponding Application Zone can be erased when the submitted code is correct Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Error Counter LEN Byte Address MEM_L CODE Byte 1 Byte 2 Byte N FFh 20h 00h Where Error Counter LEN Length of presentation error counter in bits The value should be 0x00h always ...

Page 57: ...abled 2 AT88SC102 To erase the data in Application Zone 2 with EC2 Function Enabled 3 AT88SC1003 To erase the data in Application Zone 2 with EC2 Function Enabled With EC or EC2 Function Enabled that is ECEN or EC2EN Fuse is undamaged and in 1 state the following actions are executed 1 Present the specified code to the card 2 Search a 1 bit in the presentation error counter and write the bit to 0 ...

Page 58: ...cuted 1 Present the specified code to the card 2 Search a 1 bit in the presentation error counter and write the bit to 0 3 Erase the presentation error counter The Security Code Attempts Counter can be erased when the submitted code is correct Command Format abData field in the PC_to_RDR_XfrBlock Pseudo APDU CLA INS Error Counter LEN Byte Address MEM_L CODE Byte 1 Byte 2 FFh 20h 08h 0Ah 02h Where ...

Page 59: ...d always be 0x01h State of RST Pin State of the RST pin Please refer to below table for the correct value Fuse Bit Addr High Fuse Bit Addr Low State of RST Pin AT88SC101 Manufacturer Fuse 05h 80h 01h EC_EN Fuse 05h C9h 01h Issuer Fuse 05h E0h 01h AT88SC102 Manufacturer Fuse 05h B0h 01h EC2EN Fuse 05h F9h 01h Issuer Fuse 06h 10h 01h AT88SC1003 Manufacturer Fuse 03h F8h 00h EC2EN Fuse 03h FCh 00h Is...

Page 60: ... RDR_to_PC_DataBlock FIRMWARE MAX_C MAX_R C_TYPE C_SEL C_STAT Where FIRMWARE 10 bytes data for firmware version MAX_C The maximum number of command data bytes MAX_R The maximum number of data bytes that can be requested to be transmitted in a response C_TYPE The card types supported by the ACR3801 This data field is a bitmap with each bit representing a particular card type A bit set to 1 means th...

Page 61: ...col 01h I2C memory card 1k 2k 4k 8k and 16k bits 02h I2C memory card 32k 64k 128k 256k 512k and 1024k bits 03h Atmel AT88SC153 secure memory card 04h Atmel AT88SC1608 secure memory card 05h Infineon SLE 4418 and SLE 4428 06h Infineon SLE 4432 and SLE 4442 07h Infineon SLE 4406 SLE 4436 and SLE 5536 08h Infineon SLE 4404 09h Atmel AT88SC101 AT88SC102 and AT88SC1003 0Ch MCU based cards with T 0 comm...

Page 62: ...OTERROR_CMD_ABORTED FEh SLOTERROR_ICC_MUTE FDh SLOTERROR_XFR_PARITY_ERROR FCh SLOTERROR_XFR_OVERRUN FBh SLOTERROR_HW_ERROR F8h SLOTERROR_BAD_ATR_TS F7h SLOTERROR_BAD_ATR_TCK F6h SLOTERROR_ICC_PROTOCOL_NOT_SUPPORTED F5h SLOTERROR_ICC_CLASS_NOT_SUPPORTED F4h SLOTERROR_PROCEDURE_BYTE_CONFLICE F3h SLOTERROR_DEACTIVATED_PROTOCOL F2h SLOTERROR_BUSY_WITH_AUTO_SEQUENCE E0h SLOTERROR_CMD_SLOT_BUSY Table 4 ...

Reviews: