Professional Documents
Culture Documents
Exclusive OR
HOST
Total bit length
Exclusive OR
Host
STX Bit_Len_high Bit_Len_low 0X20 Time BCC ETX
1 1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
RF FIELD RF FIELD
(RF Carrier Frequency) (RF Carrier Frequency)
Time [㎳]
2-2. LED1 ON
Host
STX Bit_Len_high Bit_Len_low 0X11 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
Host
STX Bit_Len_high Bit_Len_low 0X12 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
2-4. LED2 ON
Host
STX Bit_Len_high Bit_Len_low 0X13 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
2-5. LED2 OFF
Host
STX Bit_Len_high Bit_Len_low 0X14 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
3. Mifare® (Type-A)
Host
STX Bit_Len_high Bit_Len_low 0X61 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
The operating is available after initializing of the circuit of RF driver/receiver in the reader/writer.
Host
STX Bit_Len_high Bit_Len_low 0X30 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status ATQA UID SAK BCC ETX
1 1 1 1 2 4 1 1 1
ISO-14443-3
Note) In case that the multiple PICCs are in the RF field, the PCD is settled according to the Anti-
collision sequence of ISO-14443.
3-3. Request A & anti-collision/select (Ready state)
Host
STX Bit_Len_high Bit_Len_low 0X33 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status ATQA UID SAK BCC ETX
1 1 1 1 2 4 1 1 1
ISO-14443-3
Note) In case that the multiple PICCs are in the RF field, the PCD is settled according to the Anti-
collision sequence of ISO-14443.
Host
STX Bit_Len_high Bit_Len_low 0X39 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
Host
STX Bit_Len_high Bit_Len_low 0X62 Block KeyA0 – KeyA5 BCC ETX
1 1 1 1 1 6 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
This command is for authentication of the Card and the Card is to be authenticated through the
Key of 6 Byte.
The Key inside of the card is composed of Key-A and Option Key-B and this command is for
KEY-A Authentication.
For more details, refer to Mifare® Standard card in MF1 IC S50
3-6. Authentication1B Command (Key Type B)
Host
STX Bit_Len_high Bit_Len_low 0X63 Block KeyB0 – KeyB5 BCC ETX
1 1 1 1 1 6 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
This command is for authentication of the card and the card is to be authenticated through the
Key of 6 Byte (Mifare® standard).
The Key inside of the card is composed of Key-A and Option Key-B.
It is for KEY-B Authentication. For more details, refer to Mifare® Standard card in MF1 IC S50.
Host
STX Bit_Len_high Bit_Len_low 0X64 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
This command is to start the cryptography between the card and reader and always can be
operated after that the Authentication 1 Command is operated and authenticated only.
For more details, refer to Mifare® Standard card in MF1 IC S50
Host
STX Bit_Len_high Bit_Len_low 0X65 BLOCK BCC ETX
1 1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status Read Block Data BCC ETX
1 1 1 1 16 1 1
Host
STX Bit_Len_high Bit_Len_low 0X66 BLOCK Write Block Data BCC ETX
1 1 1 1 1 16 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
Host
STX Bit_Len_high Bit_Len_low 0X67 E2 Start Address Data BCC ETX
1 1 1 1 1 6 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
It is to write the Key or data on the EEPROM inside of the Card Reader.
As the Key coming from outside could be flowed out, it prevent the Key from the out-flowing
by means of writing the Key on the EEPROM inside of the Card Reader.
The Block Address is to be written so as to be located with the Key of the Card on the basis
of 6 Byte internally.
Host
STX Bit_Len_high Bit_Len_low 0X68 Key Type E2 Start Address
1 1 1 1 1 1
Authentication Block BCC ETX
1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
Authentication E2 Command can operate the Authentication 1 without out-flowing of the data to
outside using the internal EEPROM of the Card Reader.
Using the EEPROM Key Buffer structure as mentioned above, it can be stored in production or
before outgoing. Also if necessary, it can be modified to the goods under operation
Key_Type (00H : Authentication1A, 01H : Authentication1B)
Note : WriteE2 or AuthenticationE2 Command supports Mifare® standard card key format
Host
STX Bit_Len_high Bit_Len_low 0X69 Block Transfer Address
1 1 1 1 1 1
Increment Value BCC ETX
4 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
BLOCK structure
Host
STX Bit_Len_high Bit_Len_low 0X6A Block Transfer Address
1 1 1 1 1 1
Decrement Value BCC ETX
4 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
BLOCK structure
Note) when using it as Debit(value) card, it is necessary to define the trailer access byte as
value block in every sector.
PICC Data maximum bytes: 32bytes
Increment Value: 4byte value for increment
Transfer_Address: transfer the value of card data register to the memory area of the card.
Decrement_Value: as the 4byte value, it is for the processing with the value of PICC value
block.
Host
STX Bit_Len_high Bit_Len_low 0X6B Block BCC ETX
1 1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status BCC ETX
1 1 1 1 1 1
Command Review
Command Description
Increment Increments the contents of a Block and stores the result in the
Internal data register
Decrement Decrements the contents of a Block and stores the result in the
Internal data register
Transfer Writes the contents of the internal Data register to a block
Restore Read the contents of block into the internal data register
Host
STX Bit_Len_high Bit_Len_low 0X6C Sector BCC ETX
1 1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Statu Secter Read Data BCC ETX
s
1 1 1 1 64 1 1
4. Reference
The value is 4byte value with the amount of value stored to the VALUE BLOCK at the first time,
it should be stored three(3) times by inversion or non-inversion.
The ADR should be equal to BLOCK ADDRESS and it should be stored four(4) times with the
inverted or non-inverted value.
Transfer ADR indicates the BLOCK ADDRESS that result of the processing is to be moved, after
completion of INC/DEC command.(Refer to 4-4-2.).
- Write the trailer of sector that is included designated BLOCK by VALUE BLOCK.
- In this moment, the value of SECTOR TRAILER refers to the specification of Mifare®
Standard Card in MF1 IC S50.
Note) The Key-B of SECTOR TRAILER should be set not to be read when SECTOR TRAILER
READ.
- Operates INCREMENT/DECREMENT.
SECTOR2~15
SECTOR1 BLOCK7 SECTOR TRAILER
SECTOR1 BLOCK6
SECTOR1 BLOCK5 VALUE BLOCK
SECTOR1 BLOCK4
SECTOR0 BLOCK3 SECTOR TRAILER
SECTOR0 BLOCK2
SECTOR0 BLOCK1
VALUE INC/DEC SECTOR0 BLOCK0 PRODUCT BLOCK
4BYTE
INC/DEC
TRANSFER
RESTORE TEMP REGISTER
4-5. Abbreviation
UID : Unique identification PICC : Proximity integrated chip card
CT : Cascade Tag SAK : Select acknowledged
PCD : Proximity coupling device MFin : Mifare® input
ATQ : Answer to request REQA : Request type A
MFout: Mifare® output RFU : Reserved for future use
REQB: Request type B BLK : Block
5. Type A
Host
STX Bit_Len_high Bit_Len_low 0X30 BCC ETX
1 1 1 1 1 1
Response
STX Bit_Len_high Bit_Len_low Status ATQA UID SAK BCC ETX
1 1 1 1 2 4 1 1 1
ISO-14443-3
Note) In case that the multiple PICCs are in the RF field, the PCD is settled according to the Anti-
collision sequence of ISO-14443.
ISO-14443-3
Note) In case that the multiple PICCs are in the RF field, the PCD is settled according to the Anti-
collision sequence of ISO-14443.
RATS Command is composed of Start byte and Parameter byte and includes Error check
code CRC-A.
Start byte: 0XE0
Parameter: FSDI+CID
D8 D7 D6 D5 D4 D3 D2 D1
PPSS
D8 D7 D6 D5 D4 D3 D2 D1
1 1 0 1
CID
Shall be set to 1, 0 is RFU
PPS0
D8 D7 D6 D5 D4 D3 D2 D1
0 0 0 0 0 0 1
PPS1
D8 D7 D6 D5 D4 D3 D2 D1
0 0 0 0
DRI
DSI
Shall be set to (0000), all other values are RFU
Host
STX Bit_Len_high Bit_Len_low 0X31 PCB CID NAD INF BCC ETX
1 1 1 1 1 1 1 Ref. ISO-14443-4,5 1 1
Response
STX Bit_Len_high Bit_Len_low Status Data BCC ETX
1 1 1 1 Ref. ISO-14443-4,5 1 1
STX Bit_Len_high Bit_Len_low Status BCC ETX
Or 1 1 1 1 1 1
Block of number
Shall be set to 1
NAD following, if bit is set to 1
CID following, if bit is set to 1
Chaining, if bit is set to 1
Shall be set to 0, 1 is RFU
I-Block
Block of number
Shall be set to 0
(00) DESELECT or
(11) WTX
S-Block
Coding of card identifier
D8 D7 D6 D5 D4 D3 D2 D1
0 0
CID
Type-B Setting command is set up by the transmission protocol stipulated to the ISO-14443-B.
When the PCD is power ON, the PCD is as follows.
10ETU
9ETU
START LSB MSB STOP
1ETU=(1/fc)*128=9.438usec
In case of Type B PICC, PICC is set to Active State through Attrib command after PICC request.
The procedure of Request command can be done by the transmission of the code of APf, AFI,
Parameter, etc in the data frame to the Reader.
Anti-collision prefix byte APf is 05H(0000 0101) b
AFI Coding
AFI AFI Meaning PICCs Examples/note
Most signification Least signification respond from
Half byte Half byte
‘0’ ‘0’ All families and sub- No application preselection
families
X ‘0’ All sub-families of families Wide application preseletion
X
X Y Only the Yth sub-families
Y only
‘0’ Y Proprietary sub-family Y
only
‘1’ ‘0’.Y Transport Mass transit, Bus, Airline
‘2’ ‘0’,Y Financial IEP,Banking, retail
‘3’ ‘0’,Y Identification Access control
‘4’ ‘0’,Y Telecommunication Public telephony, GSM
‘5’ ‘0’,Y Medical
‘6’ ‘0’,Y Multimedia Internet service..
‘7’ ‘0’,Y Gaming
‘8’ ‘0’,Y Data storage Portable files
‘9’-F ‘0’,Y RFU
Note : X=’1’ to Y=’1’ to ‘F’
Coding parameter
B8 B7 B6 B5 B4 B3 B2 B1
RFU REQB/WUPB N(Number of slots)
B4=0 defines REQB: PICCs in idle state or ready state shall process this command
B4=1 defines WUPS: PICCs in idle state or ready state or HALT state shall process this
command
B1, B2 and B3 are used to code the number of slot N according to table
B3 B2 B1 N
0 0 0 1=2^0
0 0 1 2=2^1
0 1 0 4=2^2
0 1 1 8=2^3
1 0 0 16=2^4
1 0 1 RFU
1 1 X RFU
st nd rd th th TH TH TH TH th th th th th
1 2 ,3 ,4 ,5 6 ,7 ,8 ,9 10 ,11 ,12 13 ,14
50H Identifier 4bytes(PUPI) Application data 4bytes Protocol info CRC_B 2bytes
6-2-2. Slot marker Command
Host
STX Bit_Len_high Bit_Len_low 0x41 Slot marker BCC ETX
1 1 1 1 1(Ref. ISO-14443-3) 1 1
Response
STX Bit_Len_high Bit_Len_low Status ATQB BCC ETX
1 1 1 1 14(Ref. ISO-14443-3) 1 1
ST nd rd
1 byte 2 ,3 bytes
APn CRC_B
Identifier
This identifier is the value if the PUPI sent by the PICC in the ATQB
Param4
B8 B7 B6 B5 B4 B3 B2 B1 B4 EOF requires
Minimum TR0 Minimum TR1 EOF SOF RFU 0 Yes
1 No
B3 SOF requires
0 Yes
B8 B7 Minimum TR0
1 No
B6 B5 Minimum TR1 0 0 Default value
0 0 Default value 0 1 48/Fs
Param20 1 64/Fs 1 0 16/Fs
B81 B70 B6 B5
16/Fs B4 B3 1 B2 B1
1 RFU
01 01 0 RFU0 Maximum frame size(byte)
B6 B5 Meaning
0 0 PCD to PICC, 1ETU=128/Fc, bit rate is 106kbps
0 1 PCD to PICC, 1ETU=64/Fc, bit rate is 212kbps
1 0 PCD to PICC, 1ETU=32/Fc, bit rate is 424kbps
1 1 PCD to PICC, 1ETU=16/Fc, bit rate is 847kbps
B8 B7 Meaning
0 0 PICC to PCD, 1ETU=128/Fc, bit rate is 106kbps
0 1 PICC to PCD, 1ETU=64/Fc, bit rate is 212kbps
1 0 PICC to PCD, 1ETU=32/Fc, bit rate is 424kbps
1 1 PICC to PICD, 1ETU=16/Fc, bit rate is 847kbps
Param3
B4=B3=B2=0, B1=1 then PICC compliant with ISO/IEC14443-4
B4=B3=B2=B1=0 then PICC not compliant with ISO/IEC14443-4
B8=B7=B6=B5=0
Param4
B8 B7 B6 B5 B4 B3 B2 B1
0 0 0 0 CID(Card identification)
B4=B3=B2=B1=1 then RFU
HLTB Command
st nd th th th th
1 byte 2 ,r3d,4 ,5 bytes 6 ,7 bytes
50H Identifier (4bytes) PUPI CRC-B
Answer
st nd rd
1 byte 2 ,3 bytes
00 CRC-B 2bytes
6-2-5. Active command
Half duplex block transmission format
7. Dimension
7-1
7-1-1. Connection
Pin number Description Remark
1 VCC 5VDC
2 GND
3 TXD
4 RXD
5 GND
7-2.
7-2-1. Connector
Pin number Description Pin number Description
1 VCC (5~3VDC) 11 NC
2 GND 12 NC
3 RESET (OUTPUT) 13 NC
4 RF Clock 13.56㎒(OUTPUT 14 ANT-GND
5 RFU 15 ANT-GND
6 RFU 16 ANT-DRV
7 RFU 17 GND
8 TXD 18 NC
9 RXD 19 NC
10 NC 20 NC
7-3.