Document Version 1.00
Last revised on
Page 76 of 87
2020-04-10
Reference Manual for uTrust 3720F and uTrust 3721F Readers
6.4. Reader Key Management
The uTrust 372x F reader provides provision to store card keys in its non-volatile memory. The
reader can store custom/user card keys. An authenticated user can later refer to them during card
communication using key numbers. This section describes the command used to achieve this
functionality in detail.
6.4.1. Reader Authenticate
The Reader Authenticate command is used to authenticate with uTrust 372x F. The PIN specified in
the command is verified with the PIN stored in the uTrust 372x F.
Only after a successful Reader Authenticate, the user can use the Reader Load Keys command to
store card specific keys or modify the Reader PIN in non-volatile area. The default PIN is “00 00 00
00 00 00 00 00”.
This command ensures that a malicious user does not gain access to modify the keys stored in
reader.
Command APDU:
CLA
INS
P1
P2
Lc
Data
Le
0xFF
0x00 0x00 0x00 0x09 0x09
Reader PIN (8 bytes) -
Response:
Data
Status Word
-
SW1
SW2
The authentication state shall be reset immediately after the first Reader Load Keys command that
follows the Reader Authenticate command; this reset happens irrespective of whether the Reader
Load Keys command is successful or not. So user shall have to authenticate with reader every time
before issuing Load Keys command.
6.4.2. Reader Load Keys
The Reader Load Keys command is used to store card authentication keys and reader PIN in the non-
volatile area of uTrust 372x F.
A successful Reader Authenticate command should have been executed before using this command.
The reader has provision to store
1 Reader PIN
16 MIFARE keys along with key type
4 DESFire keys (1 PICC Master key and 3 Application keys) along with AID, PCD key number
and PICC key number
6 MIFARE Plus AES sector keys and 10 special keys with key block number
1 authentication key for MIFARE Ultralight C cards
