SpringCard Prox'N'Roll Page 50 Reference Manual Download | Manualshive

Page: 50 / 58

background image

PMA8N9P-BC

50 / 58

PROX'N'ROLL RFID SCANNER - Reference manual

SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are registered trademarks of PRO ACTIVE SAS.

All other brand names, product names, or trademarks belong to their respective holders.

Information in this document is subject to change without notice. Reproduction without written permission of PRO ACTIVE is forbidden.

7. S

PECIFICATION OF

M

ASTER

C

ARDS

☺

This chapter is provided as a mean for security experts to evaluate the Master
Card architecture of

SpringCard RFID Scanners

.

Customers do not need to implement this part themselves, since

cfgfilecreator.exe

software is a convenient tool to create Master Cards. See

chapter 6 for details.

7.1. B

UILDING A

M

ASTER

C

ARD

The Master Card must be a Desfire 4k,

The  reader  tries  to  fetch  configuration  data  from  Desfire  cards  according  to
the Master Card template specified in next paragraph. Data are protected by
an  authentication  key  that  may  be  changed  on  a  per-customer  or  per-site
basis  (i.e.  Master  Cards  belonging  to  customer  X  will  not  work  on customer
Y’s readers),

Before storing new settings in its non-volatile memory, the reader checks
that data comes with a valid digital signature. The signing key can’t be
changed, and is only known by

SpringCard

’s software. This ensure that only

data that has been pre-validated by a genuine software can be loaded in
reader’s non-volatile memory.

7.2. T

EMPLATE FOR

M

ASTER

C

ARDS

7.2.1. Location of data

Name

Tag

Description

Size

LOC.MAS

h

53

Location of data in master cards. See table

a

below.

5

a. Data location bytes

Offset

Length

Content

Specified value

0

3

Application IDentifier (AID).

h

504143

3

1

File IDentifier (FID) for configuration data.

h

01

4

1

File IDentifier (FID) for digital signature.

h

02

«
...
48
49
50
51
52
...
»

Summary of Contents for Prox'N'Roll

Page 1: ...Phone 1 619 544 1450 Fax 1 619 573 6867 www springcard com SPRINGCARD the SPRINGCARD logo PRO ACTIVE and the PRO ACTIVE logo are registered trademarks of PRO ACTIVE SAS All other brand names product names or trademarks belong to their respective holders Information in this document is subject to change without notice Reproduction without written permission of PRO ACTIVE is forbidden PROX N ROLL RF...

Page 2: ...ds Group Prox N Roll RFID Scanner Reader Prox N Roll HID Configuration Reference PMA8N9P Version BC Abstract Status Approved pma8n9p bc doc saved 02 06 09 printed 02 06 09 REVISION HISTORY Valid by Ver Date Author Tech Qual Approv by Remarks BC 02 06 09 LTX LTX LTX ECL Change the default value of General Option OPT BB 13 05 09 LTX LTX LTX ECL Added new keyboard layout BA 20 02 09 LTX JDA JDA JDA S...

Page 3: ...TEMPLATES 16 3 3 MIFARE CLASSIC ACCEPTANCE TEMPLATE 21 3 4 MIFARE ULTRALIGHT ACCEPTANCE TEMPLATE 26 3 5 DESFIRE ACCEPTANCE TEMPLATE 28 3 6 ISO 7816 4 ACCEPTANCE TEMPLATE 31 3 7 CALYPSO ACCEPTANCE TEMPLATE 35 4 SERIAL PROTOCOL AND COMMAND SET 38 4 1 SERIAL OUTPUT FORMAT 38 4 2 SERIAL INPUT 38 5 CONFIGURING PROX N ROLL RFID SCANNER 40 5 1 CONNECTING PROX N ROLL TO A COMPUTER 40 5 2 RETRIEVING PROX N...

Page 4: ...O ACTIVE and the PRO ACTIVE logo are registered trademarks of PRO ACTIVE SAS All other brand names product names or trademarks belong to their respective holders Information in this document is subject to change without notice Reproduction without written permission of PRO ACTIVE is forbidden ...

Page 5: ...in RFID systems Prox N Roll RFID Scanner supports to operating modes Keyboard emulation mode default configuration Serial port emulation mode 1 3 KEYBOARD EMULATION MODE Configured for keyboard emulation1 Prox N Roll RFID Scanner outputs its data as if there were typed on the computer s keyboard just as a bar code scanner behaves This allows a drop in replacement of legacy bar code scanners PS 2 o...

Page 6: ...t Prefix and postfix sequences 1 5 RELATED DOCUMENTS You ll find any details regarding hardware and physical characteristics of each reader in the corresponding datasheet Datasheet Covered products PFL8P9P Prox N Roll RFID Scanner product information sheet PMU84OP Prox N Roll RFID Scanner Quick Start guide 1 6 OTHER PRODUCTS IN THE SAME FAMILY Prox N Roll RFID Scanner firmware is able to run on an...

Page 7: ...ID Scanner family and are exposed in detail in the next chapter In this chapter we ll introduce configuration tags and detail the Prox N Roll RFID Scanner s specific configuration attributes 2 1 PRINCIPLES a Configuration tags Each configuration attribute is recognized by its tag and its length The tag is a one byte value that uniquely identifies the attribute The list of available tags and their ...

Page 8: ... 1 a General options bits Bit Value Meaning 7 RFU set to 0 6 0 1 Shutdown RF field when idle Shutdown RF field only when no card detected3 5 4 00 01 10 11 Anti collision model Process every card one after the other RFU When 2 cards are in the field process the 1st and ignore the 2nd When 2 cards are in the field ignore both 3 2 00 01 10 11 Master Card Master Cards are disabled4 Master Cards are en...

Page 9: ...low 1 a LEDs control bits Bit Value Meaning 7 0 1 Short LED sequences 3 seconds Long LED sequences 10 seconds 6 5 00 01 10 11 When idle blue LED blinks slowly heart beat sequence When idle blue LED is always on When idle blue LED is always off RFU 4 0 1 Green LED stays OFF Green LED blinks when a valid card has been processed 3 0 1 Red LED stays OFF Red LED blinks when an unsupported card has been...

Page 10: ...ERTY using Numeric Pad for number input QWERTZ AZERTY using Shift key for number input All other values are RFU and must not be used Default value b00000000 QWERTY b Keyboard options This entry is RFU and must be left empty c Prefix and postfix KBD BEF defines the character string do be sent before the actual data Default value for KBD DEF absent no prefix KBD AFT defines the character string do b...

Page 11: ...onfiguration bits See table a below 1 a Serial configuration bits Bit Value Meaning 7 0 1 No STX ETX frame markers Use STX and ETX as frame markers 6 5 00 01 10 11 No BEL TAB CR LF frame markers Use CR LF only Use BEL and CR LF as frame markers Use TAB and CR LF as frame markers 4 3 00 01 10 11 Serial Repeat No repeat Repeat 4 times with timeout of 100ms Repeat 4 times with timeout of 250ms Repeat...

Page 12: ...on in this document is subject to change without notice Reproduction without written permission of PRO ACTIVE is forbidden 2 5 OTHER ATTRIBUTES 2 5 1 PIN code Name Tag Description Size PIN h6F PIN code to access reader s console 2 Default value empty no pin code Use this tag to define a 4 digits PIN code to protect access to reader s console The 2 byte value must store 4 valid BCD digits or the re...

Page 13: ...w it would get the actual data serial number block reading file selection and reading authentication keys to be used for Mifare or Desfire etc The template also defines which formatting is to be applied to the data when sending them to the target device translation to ASCII or to Decimal constant prefix or suffic etc This product is able to run up to 4 Card Acceptance Templates simultaneously 3 1 ...

Page 14: ...type A layer 3 h02 ISO IEC 14443 type B layer 3 h03 ISO IEC 14443 A B layer 3 h04 ISO IEC 15693 h07 ISO IEC 14443 A B and ISO IEC 15693 h08 NXP ICODE1 h0C NXP ICODE1 and ISO IEC 15693 h0F All of the above ID only 3 2 h11 ISO IEC 14443 type A layer 4 T CL h12 ISO IEC 14443 type B layer 4 T CL h13 ISO IEC 14443 A B layer 4 T CL 7816 4 3 6 h22 ST MicroElectronics SR family h23 ASK CTS256B and CTS512B...

Page 15: ... Mifare UltraLight Mifare Classic Desfire 7816 4 Calypso ht1 Output format ht2 Output prefix ht3 Offset Location of data ht4 Options T CL options C options ht5 Auth method key 1st APDU ht6 Sign method key 2nd APDU ht7 3rd APDU Grey items are RFU and must be kept empty 3 1 3 Important notice regarding template ordering Be careful that the 4 templates are processed one after the other The loop is en...

Page 16: ...s cards Depending on the settings you define in the Lookup List attribute tag LKL IDO the reader may either Find any supported contactless card Find only a specific family of contactless cards Find ISO compliant contactless cards As you may have more than one ID only Acceptance Template up to 4 in fact you may easily display different types of cards with a different format Including card s type in...

Page 17: ...bytes as ID Use complete ISO 14443 B ATQ 11 bytes as ID 3 0 0000 0001 0010 0011 0100 0101 0110 0111 1000 1001 1010 1011 1100 1101 1110 1111 Output length Decimal 4 bytes seen as 10 digits i e 32 40 bits expansion Fixed length 4 bytes 8 Fixed length 8 bytes 9 Fixed length 5 bytes Fixed length 12 bytes 10 Fixed length 7 bytes 11 Fixed length 11 bytes 12 RFU Fixed length 16 bytes RFU RFU RFU Decimal ...

Page 18: ... Tag Description Size PFX IDO ht2 ID only output prefix Var Default value absent no prefix If a non null ASCII value is specified either a single character or a string it will be transmitted before the data therefore the actual length will be longer than the specified length 3 2 4 Offset of data Name Tag Description Size LOC IDO ht3 Offset in the ID 1 Default value b00000000 d0 When TOF IDO specif...

Page 19: ...lookup sequence for cards in the ST MicroElectronics SR family SR176 SRX SRIX A 8 byte serial number is returned by the card Use TOF IDO and LOC IDO if you need to truncate it b ASK CTS256B and CTS512B When LKL IDO h23 the reader performs the lookup sequence for cards in the ASK CTS B family CTS256B CTS512B A 8 byte identifier is built as follow Byte 0 Byte 1 Byte 2 Byte 3 Bytes 4 to 7 Manufacturi...

Page 20: ...ype is sent after the actual ID16 RFU 1 0 00 01 10 11 Send card s type in the output Do not send card s type Send card s type on one byte 2 hex digits see table b below Send card s type as a string see table b below RFU Default value b00000000 b Values for card s type byte or string When OPT IDO is configured to send card s type in the output the possible values are Physical card s type One byte v...

Page 21: ...ag Description Size LKL MIF ht0 Mifare classic lookup list value h61 See 3 1 1 a for details 1 3 3 2 Output format Name Tag Description Size TOF MIF ht1 Mifare output format See table a below 1 a Output format bits Bit Value Meaning 7 0 1 Do not swap bytes Swap bytes 6 0 1 RAW data ASCII encoded data 17 5 0 1 Left padding with h0 RAW or SPACE ASCII Right padding with hF RAW or SPACE ASCII 4 0 1 Lo...

Page 22: ...8 bytes 64 bits Fixed length 5 bytes 40 bits Fixed length 12 bytes 96 bits Fixed length 7 bytes 56 bits Fixed length 11 bytes 88 bits RFU Fixed length 16 bytes 128 bits RFU RFU RFU Decimal 5 bytes seen as 12 digits i e 40 56 bits expansion Decimal 5 bytes seen as 13 digits i e 40 64 bits expansion Decimal variable length maximum 13 digits Variable length using h0 and hF as end of string markers c ...

Page 23: ... for Mifare 1k cards Between 0 and 255 for Mifare 4k cards Note that data must start on a block boundary Mifare sector trailers security blocks numbered 3 7 can be read but their content is masked to protect the keys Using such a block as access control identifier is definitely not a good idea b AID in MAD Name Tag Description Size LOC MIF ht3 AID to be selected and read 2 When a Mifare card is fo...

Page 24: ...n take a long time Name Tag Description Size AUT MIF ht5 Mifare authentication key See below Default value absent a Size 1 pointer to a key in RC s secure EEPROM Values h00 to h0F refer to type A keys d0 to d15 respectively Values h80 to h8F refer to type B keys d0 to d15 respectively b Size 7 specified Mifare key Offset Length Content 0 1 Key options See table c below 1 6 Mifare key value c Key o...

Page 25: ...r number 5 4 01 Diversify the key using RC171 algorithm 3 0 RFU 3 3 6 Reading a long string from a Mifare Classic card Note This option is only available on Prox N Roll RFID Scanner RDR K632 and ProxRunner When bits 4 and 6 in TOF MIF are set ASCII output long string reading extension enabled the reader behaves as follow The output length bits 0 to 3 of TOF MIF is ignored The reader reads sequenti...

Page 26: ...s a 7 byte serial number located on blocks 0 and 1 As the card is ISO IEC 14443 3 compliant you can read the serial number through the generic ID Only template instead of using this dedicated template 3 4 1 Lookup list Name Tag Description Size LKL MFU ht0 Mifare UltraLight lookup list value h62 See 3 1 1 a for details 1 3 4 2 Output format Name Tag Description Size TOF MFU ht1 Mifare UltraLight o...

Page 27: ... RFID Scanner RDR K632 and ProxRunner When bits 4 and 6 in TOF MIF are set ASCII output long string reading extension enabled the reader behaves as follow The output length bits 0 to 3 of TOF MIF is ignored The reader reads sequentially all Mifare data blocks starting at address specified in LOC MIF absolute address or pointer found in MAD until one of those events occurs o The end of string chara...

Page 28: ...iple DES authentication same ATQ SAK as MF3ICD40 3 5 1 Lookup list Name Tag Description Size LKL DFR ht0 Desfire lookup list value h71 See 3 1 1 a for details 1 3 5 2 Output format Name Tag Description Size TOF DFR ht1 Desfire output format 1 Same as Mifare Classic output format see 3 3 2 3 5 3 Output prefix Name Tag Description Size PFX DFR ht2 Desfire output prefix Var Same as ID only output pre...

Page 29: ...Size AUT DFR ht5 Desfire authentication key See table a below 9 or 17 Default value absent No authentication is performed plain read operation is used to fetch the data a Authentication key bytes Offset Length Content 0 1 Desfire key index and options See table b below 1 8 or 16 Key value 8 bytes for a DES key 16 bytes for a 3 DES key b Key index and options Bit Value Meaning 7 6 00 01 10 11 Commu...

Page 30: ...3 5 7 Reading a long string from a Desfire card Note This option is only available on Prox N Roll RFID Scanner RDR K632 and ProxRunner When bits 4 and 6 in TOF DFR are set ASCII output long string reading extension enabled the reader behaves as follow The output length bits 0 to 3 of TOF DFR is ignored The reader reads the data up to the length specified in LOC DFR 64 bytes max The reader returns ...

Page 31: ...Tag Description Size LKL TCL ht0 7816 4 lookup list h11 value h13 See 3 1 1 a for details 1 3 6 2 Output format Name Tag Description Size TOF TCL ht1 T CL output format 1 Same as Mifare Classic output format see 3 3 2 3 6 3 Output prefix Name Tag Description Size PFX TCL ht2 T CL output prefix Var Same as ID only output prefix see 3 2 3 3 6 4 Location of data Name Tag Description Size LOC TCL ht3 ...

Page 32: ...S DRI 212kbit s if card allows it Perform PPS DRI 424kbit s if card allows it Perform PPS DRI 848kbit s if card allows it 3 0 0000 0001 to 1110 1111 Card identifier CID Empty CID d0 CID from d1 to d14 CID is disabled This tag exists only if T CL card is selected in LST Default value b00001111 3 6 6 T CL APDU 1 Typically this is a Select Application or Select Applet command May be absent if T CL AP...

Page 33: ...ticular error values as defined by ISO 7816 4 between h6100 and h6FFF is considered as an error and the reader will ignore the card Reader s internal buffer is limited to 128 bytes If card s answer is longer the answer will be discarded and the reader will ignore the card 3 6 8 T CL APDU 3 APDU used to actually retrieve the data typically this is a Read Binary command Data have to be found in answ...

Page 34: ...g a long string from a T CL card Note This option is only available on Prox N Roll RFID Scanner RDR K632 and ProxRunner When bits 4 and 6 in TOF TCL are set ASCII output long string reading extension enabled the reader behaves as follow The output length bits 0 to 3 of TOF TCL is ignored The reader fetches the data from offset LOC TCL up to the length of the response to APDU 3 64 bytes max The rea...

Page 35: ...ed either through ID Only or ISO IEC 7816 4 templates Working with Calypso cards is subject to a specific licence fee This function is therefore disabled in our readers unless you order them with the Calypso option Depending on the specified options this Calypso card processing template can retrieve A 4 byte serial number ID Only template Arbitrary data to be read in Calypso files 7816 4 template ...

Page 36: ...h9FFF is considered valid Any other value for SW and in particular error values as defined by ISO 7816 4 between h6100 and h6FFF is considered as an error and the reader will ignore the card Reader s internal buffer is limited to 128 bytes If card s answer is longer the answer will be discarded and the reader will ignore the card 3 7 6 Calypso APDU 2 Typically this is a Select EF command Name Tag ...

Page 37: ...on of PRO ACTIVE is forbidden 3 7 7 Calypso APDU 3 Typically this is a Read Binary command Name Tag Description Size AU3 CYO ht7 Calypso Innovatron APDU 3 Var Card s Status Word is checked by the reader A SW between h9000 and h9FFF is considered valid Any other value for SW and in particular error values as defined by ISO 7816 4 between h6100 and h6FFF is considered as an error and the reader will...

Page 38: ...L is the ASCII bell or ring character h07 CR the ASCII carriage return h0D and LF the ASCII line feed h0A If bits 7 5 b011 frame is TAB BEF 01234567 AFT CR LF where TAB is the ASCII horizontal tab character h09 CR the ASCII carriage return h0D and LF the ASCII line feed h0A If bits 7 5 b100 frame is STX BEF 01234567 AFT ETX where STX is the ASCII start of text character h02 and ETX the ASCII end o...

Page 39: ...nd Action A0 Reader goes inactive tag polling is halted A1 Reader goes active R0 Switch red LED off R1 Switch red LED on R2 Red LED blinks slowly R3 Red LED blinks quickly G0 Switch green LED off G1 Switch green LED on G2 Green LED blinks slowly G3 Green LED blinks quickly Z0 Stop buzzer Z1 Start buzzer Z2 Short buzzer sound Z3 Long buzzer sound Margz Same as sending Aa Rr Gg Zz Mrg Same as sendin...

Page 40: ...iguration values in reader s console serial line access as shown in this chapter Only available for Prox N Roll RFID Scanner in Serial mode Default factory settings for Prox N Roll RFID Scanner firmware are Keyboard mode Reads any kind of ID 8 byte fixed length output 5 1 CONNECTING PROX N ROLL TO A COMPUTER 5 1 1 Activating serial mode Activate the Serial mode using a Master Card configured to mo...

Page 41: ... permanently disabled Enter pinNNNN to allow configuration commands where NNNN is the actual pin code for instance pin1234 24 5 4 ACCESSING PROX N ROLL CONFIGURATION 5 4 1 Reading configuration tags Enter cfg to list all configuration tags Enter cfgXX to read value configuration tag XX hexadecimal address Note that configuration tags h55 h56 and h6F keys used by Master Cards and pin code are maske...

Page 42: ... byte value Content of RC s 4 byte EEPROM is currently not used by Prox N Roll RFID Scanner firmware Please keep this value to 00000000 as it may be used in future versions 5 5 APPLYING NEW CONFIGURATION New configuration is applied only after reset Cycle power or enter rst to reset the reader 5 6 REVERTING TO DEFAULT Sometimes it is necessary to put reader back in out of factory configuration for...

Page 43: ...ing the Master Configuration File SpringCard SQ844P also includes various configuration files that show typical configuration for Prox N Roll RFID Scanner IWM K632 FunkyGate RDR K632 ProxRunner etc SpringCard SQ844P is available only for Microsoft Windows systems a Downloading and installing Go to www springcard com download sdks html and download latest version of package sq884p Double click the ...

Page 44: ...ecreator exe 6 2 CONFIGURATION FILES cfgfilecreator exe uses a configuration file to retrieve configuration data to be written into the Master Card Configuration files are written like standard Windows INI files They can be created using Notepad or any other text editor or using cfgfilecreator html Each line of each section uses the format name value where name is either the name or the tag of the...

Page 45: ...nsport key b2 000000000000 other transport key b3 CCCCCCCCCCCC unused b15 CCCCCCCCCCCC unused This section and each line in it is optional Only keys listed in this section will be written other keys will be left unchanged 6 2 3 Sections for Card Processing Templates SpringCard RFID Scanners run 1 to 4 card accepting templates Each template is configured by sections tpl1 tpl2 tpl3 and tpl4 respecti...

Page 46: ... configuration for future Master Cards The tpl5 section allows to update the card processing template reserved to Master Cards See paragraph 6 4 1 for details tpl5 aut E0 xx xx 16 byte authentication key This 16 byte authentication key in the tpl5 section is the one that will be written in the reader s by the Master Card It is not the key that will be used to create the Master Card itself b Specif...

Page 47: ... until Master Card is written If the Desfire card is not virgin the software will try to format it i e erase the whole file structure with all the data without prior notification Be sure to put on the reader only a virgin card or an old Master Card to be overwritten You ve been warned 6 4 CHANGING AUTHENTICATION KEY FOR MASTER CARDS All SpringCard products ship with the same out of factory authent...

Page 48: ...ines master Master section is empty we use SpringCard s default keys tpl5 aut E0 xx xx where xx xx is the site specific 16 byte authentication key27 Put a virgin card on the Prox N Roll label it 1st level Master Card Enter cfgfilecreator exe c master ini Use this Master Card to write the new authentication key in the reader s 6 4 2 Creating a second level Master Card Create a complete configuratio...

Page 49: ...stance when reader goes from one site to another This is done easily by erasing all tags from reader s memory Create a configuration file say factory ini with only those 3 lines master aut E0 xx xx clear 1 where xx xx is the site specific 16 byte authentication key Put a virgin card on the Prox N Roll label it Erase all Master Card Enter cfgfilecreator exe c factory ini Use this Master Card to put...

Page 50: ...he reader tries to fetch configuration data from Desfire cards according to the Master Card template specified in next paragraph Data are protected by an authentication key that may be changed on a per customer or per site basis i e Master Cards belonging to customer X will not work on customer Y s readers Before storing new settings in its non volatile memory the reader checks that data comes wit...

Page 51: ...replace this key as soon as they receive the readers as explained in 6 4 This is the same structure as AUT DFR Name Tag Description Size AUT MAS h55 Authentication key See table a below 17 a Authentication key bytes Offset Length Content 0 1 Authentication key index and options See table b below 1 16 Authentication key for Master Cards this is 3 DES key b Authentication key index and options Bit V...

Page 52: ... 0 1 Index and options See table b below 1 16 Key data this is 128 bits key b Signing key index and options Bit Value Meaning 7 6 00 Those bits are RFU and must be 00 5 4 00 01 10 11 Key diversification algorithm Use the key as is Diversify the key using Desfire SAM algorithm Diversify the key using HMAC MD5 algorithm RFU 3 0 0000 Those bits are RFU and must be 00 Specified value h20 HMAC MD5 dive...

Page 53: ... s secure EEPROM use the T L V scheme as follow Tag 1 byte h80 key index see chapter Mifare Classic Card Acceptance Template Len 1 byte h06 Value is the Mifare key 6 bytes exactly 7 4 DIGITAL SIGNATURE 7 4 1 Size of file File holding the signature offset 4 in LOC MAS must be exactly 16 byte long 7 4 2 Algorithm This is the signature algorithm when default parameters in SGN KEY are used Let Content...

Page 54: ...is the secret key padded with extra zeros up to 64 bytes m is the message to be authenticated opad is the value h5C repeated 64 times and ipad the value h36 repeated 64 times b HMAC MD5 HMAC MD5 is a particular HMAC function where h is the MD5 standard function as defined by RSA laboratories Size of HMAC is 16 bytes exactly In the SpringCard RFID Scanners family we use HMAC MD5 for both signature ...

Page 55: ...this card Ku HMAC Km uid0 n Ku h88 The diversified key can now be used either for Desfire authentication or for HMAC MD5 signature b Mifare key diversification The algorithm takes as inputs A 16 byte master key Km The 4 byte card serial number uid The 1 byte block address adr It provides as output The 6 byte Mifare key specific to the couple card address Ku HMAC Km uid0 4 h88 adr b0 b1 b2 b3 b4 b5...

Page 56: ...ls The algorithm takes as inputs A 16 byte Triple DES master key Km 34 The 7 byte card serial number uid It provides as output The 16 byte diversified key specific to this card Ku Here s the flowchart Km0 7 Km8 16 TDES or DES uid0 uid1 uid2 uid3 uid4 uid5 uid6 b0 b1 b2 b3 b4 b5 b6 b7 h 88 Km Ku0 7 Ku8 16 TDES or DES The diversified key now be used for Desfire authentication 8 2 2 Mifare key divers...

Page 57: ...he flowchart uid0 uid1 uid2 uid3 Km0 Km1 Km2 Km3 Km4 Km5 adr b0 b1 b2 b3 b4 b5 b6 b7 TDES or DES Kd b0 b1 b2 b3 b4 b5 b6 b7 Ku0 Ku1 Ku2 Ku3 Ku4 Ku5 b Diversification based on UID only If this option is selected the adr input parameter is fixed to h00 whatever the block to be read is c Diversification based on UID and address If this option is selected the adr input parameter is the Mifare sector n...

Page 58: ...results derived from the use of the products described in this document PRO ACTIVE will not be liable for any indirect consequential or incidental damages including but not limited to lost profits or revenues business interruption loss of data arising out of or in connection with the use inability to use or reliance on any product either hardware or software described in this document These produc...

Reviews:

No comments

Related manuals for Prox'N'Roll

FlashMover 16-in-1 USB2.0

Brand: Microdia Pages: 2

Brand: Casio Pages: 32

Brand: SIB Pages: 4

Brand: Cognex Pages: 47

Brand: V.TOP Pages: 9

Brand: IEI Technology Pages: 41

Brand: Nedap Pages: 5

Brand: Kobil Pages: 3

Brand: HP Pages: 52

FL863UT - Workstation - Z400

Brand: HP Pages: 222

FL863UT - Workstation - Z400

Brand: HP Pages: 10

Brand: HP Pages: 10

FL863UT - Workstation - Z400

Brand: HP Pages: 9

Brand: PERCo Pages: 34

Brand: Nordic ID Pages: 47

Brand: Nordic ID Pages: 58

INFINITE M1000 PRO

Brand: tecan Pages: 137

Brand: ARKSCAN Pages: 17

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands