background image

 

AET62 Reference Manual 

Version 1.0

 

 

 

Page 10 of 37 

 

 
idvation GmbH 

 

Otto-Hesse-Straße 19 / T5 

Phone +49 6151 4923021 

D-64293 Darmstadt 

Fax +49 6151 3689296 

[email protected] 

www.idvation.com

 

6.  PICC Commands (T=CL Emulation) for Mifare Classic 

Memory Cards 

6.1. 

Load Authentication Keys 

The “Load Authentication Keys command” will load the authentication keys into the reader. The authentication keys are 
used to authenticate the particular sector of the Mifare 1K/4K Memory Card. Two kinds of authentication key locations are 
provided, volatile and non-volatile key locations respectively. 
 

Command

 

Class

 

INS

 

P1

 

P2

 

Lc

 

Data In 

Load 
Authentication 
Keys 

FF 

82 

Key 
Structure 

Key 
Number 

06 

Key (6 
bytes) 

Table 8: Load Authentication Keys APDU Format (11 Bytes) 

 
Key Structure (1 Byte): 
 

0x00   = Key is loaded into the reader volatile memory. 

 

Other  = Reserved. 

Key Number (1 Byte): 
 

0x00 ~ 0x01 = Key Location. The keys will disappear once the reader is disconnected from the PC. 

Key (6 Bytes): 
 

The key value loaded into the reader. E.g. {FF FF FF FF FF FF} 

 

Response  Data Out 

Result 

SW1 

SW2 

Table 9: Load Authentication Keys Response Format (2 Bytes) 

 

Results 

SW1 

SW2 

Meaning 

Success  90 

00 

The operation is completed successfully. 

Success  63 

00 

The operation is failed. 

Table 10: Load Authentication Keys Response Codes 

Example: 

Load a key {

FF FF FF FF FF FF

} into the key location 

0x00

APDU = {

FF 82 00 00 06 

FF FF FF FF FF FF

Summary of Contents for AET62

Page 1: ...Reference Manual idvation GmbH Otto Hesse Stra e 19 T5 Phone 49 6151 9926567 D 64293 Darmstadt Fax 49 6151 3689296 info idvation com www idvation com AET62 NFC Reader...

Page 2: ...r LED Control 19 7 3 Get the Firmware Version of the reader 20 7 4 Get the PICC Operating Parameter 20 7 5 Set the PICC Operating Parameter 21 8 Basic Program Flow for Contactless Applications 22 8 1...

Page 3: ...Value Block Operation Response Format 2 Bytes 16 Table 23 Value Block Operation Response Codes 16 Table 24 Read Value Block APDU Format 5 Bytes 16 Table 25 Read Value Block Response Format 4 2 Bytes...

Page 4: ...erprint sensor can be used independently but combining the two technologies provide a higher level of security in applications The AET62 s system diagram is shown below Figure 1 AET 62 System Block Di...

Page 5: ...r carries out the command issued from the PC whether the command is used in order to communicate with a contactless tag or control the device peripherals i e bi color LED The AET62 uses the PCSC APDUs...

Page 6: ...re used Therefore no ACS drivers are required because the drivers are already built inside the windows operating system You need to modify your computer s registry settings to be able to use the full...

Page 7: ...T 1 4 To 3 N 80 T1 Category indicator byte 80 means A status indicator may be present in an optional COMPACT TLV data object 4F Tk Application identifier Presence Indicator 0C Length RID Registered A...

Page 8: ...er to the ISO14443 3 specification XX XX XX Tk 4 N UU TCK Exclusive oring of all the bytes T0 to Tk Table 3 ATR format for ISO 14443 Part 4 PICCs We take for example an ATR for DESFire which is DESFir...

Page 9: ...4 Get UID APDU Format 5 Bytes Response Data Out Result UID LSB UID MSB SW1 SW2 Table 5 Get UID Response Format UID 2 Bytes if P1 0x00 Response Data Out Result ATS SW1 SW2 Table 6 Get ATS of a ISO 144...

Page 10: ...d Class INS P1 P2 Lc Data In Load Authentication Keys FF 82 Key Structure Key Number 06 Key 6 bytes Table 8 Load Authentication Keys APDU Format 11 Bytes Key Structure 1 Byte 0x00 Key is loaded into t...

Page 11: ...Byte Block Number 1 Byte This is the memory block to be authenticated Key Type 1 Byte 0x60 Key is used as a TYPE A key for authentication 0x61 Key is used as a TYPE B key for authentication Key Number...

Page 12: ...e blocks Data Blocks 15 blocks 16 bytes per block Trailer Block 1 block 16 bytes Sector 32 0x80 0x8E 0x03 Sector 33 0x90 0x9E 0x07 Sector 38 0xE0 0xEE 0x7B Sector 39 0xF0 0xFE 0x7F Mifare Ultralight M...

Page 13: ...ion com www idvation com Example 1 To authenticate the Block 0x04 with a TYPE A key number 0x00 For PC SC V2 01 Obsolete APDU FF 88 00 04 60 00 2 To authenticate the Block 0x04 with a TYPE A key numbe...

Page 14: ...ary APDU Format 5 Bytes where Block Number 1 Byte The block to be accessed Number of Bytes to Read 1 Byte Maximum 16 bytes Response Data Out Result 0 N 16 SW1 SW2 Table 17 Read Binary Block Response F...

Page 15: ...Mifare 1K 4K Table 19 Update Binary APDU Format 4 or 16 5 Bytes where Block Number 1 Byte The starting block to be updated Number of Bytes to Update 1 Byte 16 bytes for Mifare 1K 4K 4 bytes for Mifar...

Page 16: ...a value block 0x01 Increment the value of the value block by the VB_Value This command is only valid for value block 0x02 Decrement the value of the value block by the VB_Value This command is only v...

Page 17: ...Error 63 00 The operation is failed Table 26 Read Value Block Response Codes 6 5 3 Restore Value Block The Restore Value Block command is used to copy a value from a value block to another value bloc...

Page 18: ...ation com Example 1 Store a value 1 into block 0x05 APDU FF D7 00 05 05 00 00 00 00 01 Answer 90 00 2 Read the value block 0x05 APDU FF B1 00 05 00 Answer 00 00 00 01 90 00 9000 3 Copy the value from...

Page 19: ...at Length of the Payload 5 Bytes Lc Number of Bytes to Send 1 Byte Maximum 255 bytes Data In Response Response Data Out Direct Transmit Response Data Table 31 Direct Transmit Response Format 7 2 Bi Co...

Page 20: ...he LED Blinking operation is completed The LED will not be changed if the corresponding LED Mask is not enabled The LED will not be blinking if the corresponding LED Blinking Mask is not enabled Also...

Page 21: ...le 42 Response Format 1 byte Bit Parameter Description Option 7 Auto PICC Polling To enable the PICC Polling 1 Enable 0 Disable 6 Auto ATS Generation To issue ATS Request whenever an ISO14443 4 Type A...

Page 22: ...ails Step 1 The first thing is to connect the AET62 PICC Interface Step 2 Access the PICC by sending APDU commands Step N Disconnect the AET62 PICC Interface Shut down the application NOTE 1 The anten...

Page 23: ...gs as standard ISO 14443 4 tags For more information please refer to topic PICC Commands for Mifare Classic Memory Tags Command Class INS P1 P2 Lc Data In Le ISO 7816 Part 4 Command Length of the Data...

Page 24: ...0x60 Answer 04 01 01 00 02 18 05 91 AF 91AF Step 2 Send an APDU 90 AF 00 00 00 to get the second frame INS 0xAF Answer 04 01 01 00 06 18 05 91 AF 91AF Step 3 Send an APDU 90 AF 00 00 00 to get the la...

Page 25: ...4 40 01 80 00 D4 40 01 is the Data Exchange Command D5 41 00 1D 07 8 byte NFC ID 00 00 01 00 AA 55 AA 55 AA 55 AA 55 AA 55 AA 55 AA 55 AA 90 00 In which D5 41 00 is the Data Exchange Response Note The...

Page 26: ...ce Manual Version 1 0 Page 26 of 37 idvation GmbH Otto Hesse Stra e 19 T5 Phone 49 6151 4923021 D 64293 Darmstadt Fax 49 6151 3689296 info idvation com www idvation com D5 41 00 18 90 00 In which Resp...

Page 27: ...4 Data5 Data6 Data7 Data 2 Data8 Data9 Data10 Data11 Data12 Data13 Data14 Data15 Data 3 Data16 Data17 Data18 Data19 Data20 Data21 Data22 Data23 Data 4 Data24 Data25 Data26 Data27 Data28 Data29 Data30...

Page 28: ...90 00 Or if no tag is in the field D5 05 00 00 00 80 90 00 Err is an error code corresponding to the latest error detected Field indicates if an external RF field is present and detected Field 0x01 or...

Page 29: ...to establish a connection between the PC and the AET62 reader 4 Enter 3500 in the Command text box 5 Enter the PCSC Escape Command e g FF 00 48 00 00 and press the Send button to send the command to...

Page 30: ...dvation com www idvation com Add a DWORD EscapeCommandEnable under HKLM SYSTEM CCS Enum USB Vid_072F Pid_0 102 Device Parameters For Vista the path is Computer HKEY_LOCAL_MACHINE SYSTEMS C urrentContr...

Page 31: ...31 of 37 idvation GmbH Otto Hesse Stra e 19 T5 Phone 49 6151 4923021 D 64293 Darmstadt Fax 49 6151 3689296 info idvation com www idvation com To Modify the value of the EscapeCommandEnable double clic...

Page 32: ...14443 4 Type B tag is used Typical APDU Command and Response Flow Pc Reader Tag Sequences USB Interface 12Mbps RF Interface 13 56MHz 1 The command is sent Contactless Related Command Tag specific Comm...

Page 33: ...C Reader Tag Sequences USB Interface 12Mbps RF Interface 13 56MHz 1 The command is sent Contactless Related Command Tag specific Command Frame Native Command e g 01 08 read memory address 08 Pseudo AP...

Page 34: ...parameter range format 0x10 DEP Protocol The chip configured in target mode does not support the command received from the initiator the command received is not one of the following ATR_REQ WUP_REQ P...

Page 35: ...00 40 00 04 00 00 00 00 Response 90 00 RED and Green LEDs are OFF Example 2 To turn on RED and Green Color LEDs Assume both Red and Green LEDs are OFF initially APDU FF 00 40 0F 04 00 00 00 00 Respon...

Page 36: ...T1 Duration 2000ms 0x14 T2 Duration 0ms 0x00 Number of repetition 0x01 APDU FF 00 40 50 04 14 00 01 01 Response 90 02 Example 5 To blink the Red LED of 1Hz for 3 times After that resume to initial sta...

Page 37: ...ON 1Hz 1000ms Time Interval 500ms ON 500 ms OFF T1 Duration 500ms 0x05 T2 Duration 500ms 0x05 Number of repetition 0x03 APDU FF 00 40 F0 04 05 05 03 03 Response 90 00 Example 7 To blink the Red and G...

Reviews: