Magtek DynaPro Mini, Руководство программиста

Страница: 56 / 128

3 - Command Set
DynaPro Mini| PIN Encryption Device | Programmer’s Manual (Commands)
Page 56 of 128 ( D99875629-43 )
Table 3-41 - Usage Table for Command 0x30 (Set mode)
Bit 7 6 5 4 3 2 1 0
Byte 0 0x030
Byte 1
Key ID:
0x00 = MSR DUKPT key KSN
After sending this command to the device and getting the ACKSTS report, issue the same command in
Get mode for the KSN Feature Report (see
Table 3-42 ). If a valid DUKPT key is not available, the data
block will be all zeros.
The KSN reported is only valid for 1 minute.
Command 0x31 - Set KSN Encrypted Data should be
sent within the timeout period.
This feature is used for the Token Reversal Function.
Table 3-42 - Usage Table for Command 0x30 (Get mode)
Bit 7 6 5 4 3 2 1 0
Byte 0 0x30
Byte 1
Key ID:
0x00 = MSR DUKPT key KSN
Byte 2..11
Data block:
Bytes 2..11 contain the KSN
Byte 12..19 Device Serial Number
Byte 20..23 Padding
Byte 24..27 CBC-MAC
3.4.27 Command 0x31 - Set KSN Encrypted Data
Before using this command, the host must have already used Command 0x30 - Set / Get KSN to retrieve
the MSR DUKPT KSN from the device. Then the host must use Command 0x10 - Send Big Block
Data to Device to send encrypted PAN data to the device, in the following format:
AAAA /* 2-byte MSB message length excluding padding and CBC-MAC */
F9<len> /* container for MAC structure and generic data */
DFDF54(MAC KSN)<len><val>
DFDF55(MAC Encryption Type)<len><val>
DFDF25(IFD Serial Number)<len><val>
FA<len>/* container for generic data */
DFDF44 (Encrypted PAN data)<len><val>
(Buffer if any to be a multiple of 8 bytes)
CBC-MAC (4 bytes, use MAC variant of MSR dukpt key)
The host can then use this command to direct the device to process data in the big block. The device
decrypts and displays the data until the display timeout expires.
This feature is used for the Token Reversal Function.