ACS AET63 User Manual

AET63 BioTRUSTKey
Reference Manual
Subject to change without prior notice
info@acs.com.hk
www.acs.com.hk

Table of Contents

6.1.1. Normal Command (Length < 255 bytes).......................................................................8
6.1.2. Extended Command.....................................................................................................9
6.2.1. No Transmission Error with Normal Response (Length < 255 bytes)..........................9
6.2.2. No Transmission Error with Extended Response.......................................................10
6.2.3. Transmission error......................................................................................................11
7.1.1. GET_ACR_STAT........................................................................................................13
7.1.2. SELECT_CARD_TYPE ..............................................................................................14
7.1.3. RESET........................................................................................................................14
7.1.4. SET_NOTIFICATION..................................................................................................14
7.1.5. SET_OPTION .............................................................................................................15
7.2.1. EEPROM_READ_DATA.............................................................................................16
7.2.2. EEPROM_WRITE_DATA...........................................................................................16
7.3.1. TFM_COMMAND........................................................................................................17
7.3.2. TFM_RESET...............................................................................................................17
7.3.3. TFM_SMARTCARD....................................................................................................18
7.3.4. TFM_OPEN_SECURE_SESSION .............................................................................19
7.4.1. RESET........................................................................................................................20
7.4.2. POWER_OFF .............................................................................................................20
7.4.3. EXCHANGE_APDU....................................................................................................20
7.4.4. EXCHANGE_T1_FRAME...........................................................................................21
7.5.1. ACTIVATE_SAM.........................................................................................................22
7.5.2. DEACTIVATE_SAM....................................................................................................22
7.5.3. EXCHANGE_SAM_APDU..........................................................................................23
7.5.4. EXCHANGE_SAM_T1_FRAME.................................................................................24
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 2 of 26
info@acs.com.hk
www.acs.com.hk

1.0. Introduction

The AET63 BioTRUSTKey provides an interface for communication between a computer, a smart card, and TFM (Trusted Fingerprint Module). Because different types of smart cards have their own sets of communication protocols and commands, direct communication between a smart card and a computer is prevented in most cases. The BioTRUSTKey establishes a uniform interface between a computer and a smart card for a wide variety of cards. By taking care of card specifics, it relieves the program developer of having to study details of smart card operation – which are, in many cases, not relevant to the implementation of a smart card-based system.
The AET63 BioTRUSTKey is connected to the computer through USB interface. The reader accepts commands from the computer, carries out the specified function at the smart card and/or TFM, and returns the requested data or status information.
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 3 of 26
info@acs.com.hk
www.acs.com.hk

2.0. Supported Card Types

The AET63 can operate MCU card with T=0 and T=1 protocol. The table presented in Appendix A explains which card type selection value must be specified for the various card types supported by the reader.

2.1. Microcontroller-Based Smart Cards (Asynchronous Interface)

The AET63 supports EEPROM microcontroller-based cards with internal programming voltage (VPP) generation and the following programming parameters transmitted in the ATR:
PI1 = 0 or 5 I = 25 or 50
The AET63 performs the Protocol and Parameters Selection (PPS) procedure as specified in ISO7816-3:1997.
When the card ATR indicates the specific operation mode (TA
present; bit b5 of TA2 must be 0) and
2
that particular mode is not supported by the AET63, the reader will reset the card to set it to negotiable mode. If the card cannot be set to negotiable mode, the reader will reject the card.
When the card ATR indicates the negotiable mode (TA
not present) and communication parameters
2
other than the default parameters, the AET63 will execute the PPS and try to use the communication parameters that the card suggested in its ATR. If the card does not accept the PPS, the reader will use the default parameters (F=372, D=1).
For the meaning of the aforementioned parameters, please refer to ISO7816, part 3.
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 4 of 26
info@acs.com.hk
www.acs.com.hk

3.0. Smart Card Interface

The interface between the AET63 and the inserted smart card follows the specifications of ISO7816-3 with certain restrictions or enhancements to increase the practical functionality of the AET63.

3.1. Smart Card Power Supply VCC (C1)

The current consumption of the inserted card must not be higher than 50mA.

3.2. Programming Voltage VPP (C6)

According to ISO 7816-3, the smart card contact C6 (VPP) supplies the programming voltage to the smart card. Since all common smart cards in the market are EEPROM based and do not require the provision of an external programming voltage, the contact C6 (VPP) has been implemented as a normal control signal in the AET63. The electrical specifications of this contact are identical to those of the signal RST (at contact C2).

3.3. Card Type Selection

The controlling PC has to always select the card type through the proper command sent to the AET63 prior to activating the inserted MCU card.
For MCU-based cards, the reader allows selection of the preferred protocol, T=0 or T=1. However, this selection is only accepted and carried out by the reader through the PPS when the card inserted in the reader supports both protocol types. Whenever an MCU-based card supports only one protocol type, T=0 or selected by the application.
T=1, the reader automatically uses that protocol type, regardless of the protocol type

3.4. Interface for Microcontroller-based Cards

For microcontroller-based smart cards only the contacts C1 (VCC), C2 (RST), C3 (CLK), C5 (GND) and C7 (I/O) are used. A frequency of 4 MHz is applied to the CLK signal (C3).

3.5. Card Tearing Protection

The AET63 provides a mechanism to protect the inserted card when it is suddenly withdrawn while it is powered up. The power supply to the card and the signal lines between the AET63 and the card are immediately deactivated when the card is being removed. As a general rule, however, to avoid any electrical damage, a card should only be removed from the reader while it is powered do wn.
NOTE: The AET63 does never by itself switch on the power supply to the inserted card. This must explicitly be done by the controlling computer through the proper command sent to the reader.
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 5 of 26
info@acs.com.hk
www.acs.com.hk

4.0. Power Supply

The AET63 requires a voltage of 5V DC, 100mA, regulated, power supply. The AET63 gets the power supply from PC (through the cable supplied along with each type of reader).
Status LEDs
Two green LED on the front of the reader indicates the activation status of the smart card interface and the status of power supply of the device:
First Green LED Indicates power supply to the device, i.e., the device is receiving power from
the computer. As long as the device is connected to the PC, this LED light is on.
Second Green LED Indicates that a smart card is present in the device, i.e., the smart card is
activated. As long as there is a smart card inserted in the device, this light is on.
NOTE: This is applicable if you are using the PCSC device installer for AET63
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 6 of 26
info@acs.com.hk
www.acs.com.hk

5.0. USB Interface

The AET63 is connected to a computer through a USB following the USB standard.

5.1. Communication Parameters

The AET63 is connected to a computer through USB as specified in the USB Specification. The AET63 is working in low speed mode, i.e. 1.5 Mbps.
USB Interface Wiring
Pin Signal Function
1 V 2 D- Differential signal transmits data between AET63 and PC. 3 D+ Differential signal transmits data between AET63 and PC. 4 GND Reference voltage level for power supply
NOTE: In order for the AET63 to function properly through USB interface, either ACS proprietary device drive or ACS PC/SC device driver has to be installed. Please refer to the Device Driver Installation Guide for more detail.
+5V power supply for the reader
BUS
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
Document Title Here
Page 7 of 26
info@acs.com.hk
www.acs.com.hk

6.0. Communication Protocol

In the normal operation, the AET63 acts as a slave device with regard to the communication between a computer and the reader. The communication is carried out in the form of successive command­response exchanges. The computer transmits a command to the reader and receives a response from the reader after the command has been executed. A new command can be transmitted to the AET63 only after the response to the previous command has been received.
There are two cases where the reader transmits data without having received a command from the computer, namely, the Reset Message of the reader and the Card Status Message.

6.1. Command

6.1.1. Normal Command (Length < 255 bytes)

A command consists of four protocol bytes and a variable number of data bytes and has the following structure:
Byte 1 2 3 4 ... N+3 (0<N<255) N+4
Header Instruction Data length =
Data Checksum
N
Header 01H to indicate the start of a standard command.
02
to indicate the start of an encrypted command (support from firmware 0.67
H
onwards, only used in PTVerifySC
(*)
and PTVerifySCAll
(*)
)
Instruction The instruction code of the command to be carried out by the AET63 Data Length Number of subsequent data bytes.(0 < N < 255) Data Data contents of the command.
For a READ command, for example, the data bytes would specify the start address and the number of bytes to be read. For a WRITE command, the data bytes would specify the start address and the data to be written to the card.
The data bytes can represent values to be written to a card and/or command parameters such as an address, a counter, etc.
Checksum The checksum is computed by XORing all command bytes including header,
instruction, data length and all data bytes.
Note (*) : Please refer to “BioTRUSTKey API Manual.doc” for the descriptions of PTVerifySC
and PTVerifySCAll.
The following example shows the structure of a command with instruction code = 91 bytes with the values 11
, 22H and 33H, respectively:
H
and three data
H
Byte 1 2 3 4 5 6 7
AET63 Reference Manual
Document Title Here
Document Title Here
Version 2.2
01
91
H
03
H
11
H
Document Title Here
22
H
33
H
93 H
H
Page 8 of 26
info@acs.com.hk
www.acs.com.hk
Loading...
+ 18 hidden pages