Home

OMNIKEY HF MIFARE Easy Module

1. Power Off Peset Reader Instruction Set Idle REQA ISO 14443 Commands B E 2 Halt Wake Up Select Halt Active Antio Loop E Authenticate Oo d TRE ag interfacin read write Authenticated EH cdd gab J Figure 2 1 State diagram November 4 2008 Page 9 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 2 2 MIFARE Standard The MIFARE Standard card consists of 16 sectors A sector includes four blocks 16 bytes each Sector 0 Block 0 3 Block 8 Data or value 16 bytes Sector 1 Block 4 7 Block 9 Data or value 16 bytes Sector 2 Block 8 11 Block 10 Data or value 16 bytes f Block 11 Access Conditions 4 bytes Key A Key B 16 bytes Sector 15 Block 60 63 Figure 2 2 MIFARE Standard sector diagram 2 2 1 Definitions Sector Memory segment of the MIFARE Standard Card Each segment consists of 4 blocks and has individual keys and access conditions Typically in a multi application environment each block is assigned to an application Key 6 byte structure assigned to each sector of the card The reader may store up to 32 keys in its EEPROM or one key in its RAM Transport Key Key as stored after delivery from the manufacturer for example AOA1A2A3A4A5 BOB1B2B3B4B5 or FFFFFFFFFFFF Block 16 byte memory segment of the MIFARE Standard card Value 4 byte unsigned long variab
2. 2 6 2 State diagram of DESFire Activate DESFire card ey Nf Select Application E Login to Application AA Select File with ID i Change File E 3 uo 4x v3 m XL OUR hls Nf Commit Abort Transaction 8 NEM Figure 2 7 DESFire State diagram 2 6 2 1 Activate PICC Prior to any access to a DESFire card the card must be selected A DESFire card has 7 bytes UID After activation the card is powered up and ready to accept a DESFire command Application 0 is selected automatically 2 6 2 2 Select application with ID To jump into another application it has to be selected An application can be seen as a directory which contains up to 16 files The size of the application depends on the stored files Page 14 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 2 6 2 3 2 6 2 4 2 6 2 5 2 6 2 6 Login to application Each application can be set to specific access rights A login to an application allows changing the application organization Login to a file opens a secured file for access A file can be accessed in four different ways plain with no security secured with MAC single DES or triple DES Select file with ID Prior to any access to a file a file must be selected Change file A selected file can be changed accor
3. Answer Description 0 Data Value 4 bytes T Error value block failure E Error increment failure IN Error No tag in field Ka Error Unable to read after write 0400000001 subtract 1 to value block 4 0500000100 subtract 256 to value block 5 4 4 3 2 1 No value block I Specified block does not match the value format The value block is corrupted A backup block can be used to restore the correct value 4 4 3 2 2 Decrement failure F General failure during decrement procedure or unable to read after write 4 4 3 2 3 No tag error N The reader does not detect a response of the tag There is either no tag present or the tag does not respond the request November 4 2008 Page 29 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 2 4 Unable to read after write X The tag was removed from field immediately after decrement instruction Data was decremented but the tag did not respond to the read after decrement instruction which is done automatically by the reader module 4 4 3 3 Copy value block backup Copies a value block to another block of the same sector A read after write is done automatically to ensure data integrity Used for backup and error recovery A previous log in is needed to access a block Command Source block 1 byte Target block 1 byte Data New
4. Common commands SE Increment value block credit V Decrement value block debit Copy value block backup c Continuous read g Get Station ID il Login authenticate tag m MultiTag select tag list poff pon Antenna power off on pr pw Read write user port r rb Read block re Read EEPROM register rv Read value block s Select v Get version w wb Write block we Write EEPROM register wm Write master key wv Write value block Xx Reset Figure 4 8 Command overview November 4 2008 2008 HID Global Corporation All rights reserved Page 27 of 63 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 2 Error Codes Following figure shows an overview of all error messages of the reader device M Unknown command E Invalid key format FE General failure Invalid value format specified block does not match the value format N No tag in the field O Operation mode failure U Read after write failure x Authentication failed Figure 4 9 Error codes 4 4 3 Common commands 4 4 3 1 Increment value block credit Increments a value block with a defined value A read after write is done automatically to verify data integrity The command fails if the source block is not in value block format A previous log in is needed to access a block Command
5. 4 4 3 13 1 Select a single tag No previous continuous read is required The command executes an automatic field reset 4 4 3 13 2 Extended ID For more information of the Extended ID refer to Protocol configuration register 4 4 3 13 3 Multiple tags This command is designed for fast access of a single tag in the field If multiple cards are used the m instruction has to be used instead 4 4 3 14 Get Version This command returns the current version of the reader module Command v None Answer MIFARE 1 0 CR LF ASCII Mode 02 00 0A 4D 69 66 61 72 65 20 31 2E 30 31 03 Binary Mode Example V MIFARE 1 0 Version of the reader module Page 40 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 15 Write block This command writes data to a block A read after write is done automatically to ensure correct writing Command Iw Block address 1 byte valid range 00h 40h Data n bytes wb Block address 1 byte Data n bytes Answer SE Data Block data depends on tag type E Error Write failure N Error No tag in field O Error Operation mode failure Example wb0511223344 Writes data 11223344 on block 05 4 4 3 15 1 Write failure F This error is displayed if bad transmission conditions are given If the block address exceeds
6. 0 RFU RFU RFU RFU RFU RFU BS1 BSO Figure 4 5 Baud rate register This register defines the baud rate of the device 0 0 9600 baud default 0 1 19200 baud 1 0 38400 baud 1 1 57600 baud Figure 4 6 Baud rate settings Following figure describes the communication settings a iE 8 data bits No parity bit 1 stop bit No flow control Figure 4 7 Communication settings 4 3 6 Reset Off Time 07h The Reset Off Time register represents the field off time in ms This register is used for the select continuous read and multi tag commands Default value is 10h 4 3 7 Reset Recovery Time 08h The Reset Recovery Time register represents the recovery time in ms after the field is turned on This register is used for the select continuous read and multi tag commands Default value is 10h Page 26 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 4 3 8 User data 10h 13h These registers are for free use 4 4 Instruction Set Following table describes all commands of the reader device Each command returns an answer to the host Exceptions are mentioned explicitly The green LED is acknowledging a successfully executed command The red LED indicates an error 4 4 1 Overview
7. 4 3 EEPROM memory 4 3 2 Unique device ID 00h 03h The unique device ID identifies a reader module It is factory programmed and cannot be changed 4 3 3 StationID 04h The station ID is used in binary mode to address a device in party line set up The station ID has the range of 01h to FEh and can be set freely The value 00h is reserved for the bus master All readers send their response to this device The broadcast message FFh forces all readers to response to the command Default value is 01h Page 24 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 3 4 Protocol configuration 05h The protocol configuration register PCON specifies general behavior of the reader device Default value is 01h Protocol configuration register Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 RFU RFU RFU Multitag Binary Extend ID Binary Auto Start Timeout 4 3 4 1 4 3 4 2 Figure 4 4 Protocol configuration register Autostart default 1 If set the reader device will start up in continuous read mode automatically Protocol default 0 If set the reader uses binary protocol mode Refer to binary protocol for further information on the binary protocol format Default setting ASCII protocol 0 Extended ID default 0 This setting does only affect the commands continuous rea
8. Page 42 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 17 1 Writing master keys Keys are write only It is not possible to read the keys Nevertheless the reader returns correct error messages if the writing process fails A verification of the master key can only be done using an appropriate card and a successful login 4 4 3 17 2 Using master keys for authentication Master keys may be used for ISO 14443 A tag authentication It is possible to use every stored for key A as well as key B authentication Each key is 6 bytes long and stored redundantly for data security 4 4 3 18 Write value block This command formats a block as a value block containing a 32 bit value A read after write is performed automatically Value blocks need a complete 16 byte block due to redundant storage A successful login is required to run the command Command wv Value block 1 byte Value 4 bytes Dat Written value 4 bytes T Error value block failure E Error increment failure IN Error No tag in field U Error Read after write failure Example wv05010055EF Writes value 010055EFh to block 5 4 4 3 18 1 Invalid value T The value read back after the write value instruction is a not a value block Data was written corruptly 4 4 3 18 2 Write failure F Additional to a data read e
9. cards 2 DESFire Documentation Philips http www semiconductors philips com 3 Antenna Design Guide 4 Philips Application Note MIFARE amp I Code Micore Reader IC family Directly Matched Antenna Design November 4 2008 Page 49 of 63 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 01 User Manual Firmware V1 0 Appendix A Compact P amp P Module Dimensions All dimensions in mm Lag 2913mm 70 00 mm 67 00 mm 63 50 mm 7 450mm November 4 2008 Page 50 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 03 HF MIFARE Easy Module User Manual Firmware V1 0 View A A 9 00 mm 9 00 mm View B B L JK A 1 60 mm 3 10 mm Page 51 of 63 November 4 2008 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Pin Out Pin Out of J3 PIN PIN No Description RFU 1 RFU VDD 2 Supply Voltage GND 3 Ground RX RXA 4 RS232 RX RS422 RXA TX TXA 5 RS232 TX RS422 TXA RXB 6 RS422 RXB TXB 7 RS422 TXB Page 52 of 63 2008 HID Global Corporation All rights reserved November 4 2008 HF MIFARE Easy Mo
10. contains 16 bytes EOF End of frame hex xxh value in Hexadecimal notation LSB Least Significant Bit or Byte MSB Most Significant Bit or Byte PCON Protocol Configuration byte of the reader REQA Request ISO Type A RFU Reserved for Future Use sector For MIFARE Standard one sector contains 4 blocks SID Station ID SN Serial Number of a tag SOF Start of frame value block 32 bit data block format Used in ticketing application lt CR gt Carriage return ODh lt LF gt Line feed OAh November 4 2008 2008 HID Global Corporation All rights reserved Page 7 of 63 HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 01 Supported Tags 1 N N N N uoeutu G H9931S pepnyour you uond oue M N uoeuyu 91 80 V0HSS3 IS M N N N UOSUIJU SSeurrsa ls N N sdilud XW Hews 2020 pepnyjour jou uond Joue N M sdilud eJl4S3Q gAYVAIN N I N M sdillud XOld 438 V4lIN N N N N sdiud Wenn 2121 h P N sdilid A JAYAN N N N N sdilud Diepueg 2021 November 4 2008 Page 8 of 63 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 2 MIFARE transponder family The MIFARE transponder family consists of various 13 56 MHz transponders IC all according to ISO 14443 2 1 State Diagram All MIFARE cards use following state diagram
11. performance drops Option 1 5V DC al OEM Board 20 19 OS Option 2 5V DC OEM Board D 3 4 The board can be connected as shown above Both alternatives are possible and can be used as they fit best into the layout of the carrier board The two VDD PINs and the two GND PINs are connected internally November 4 2008 Page 19 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 3 1 5 2 Antenna The typical antenna tuning and matching network is shown below The external antenna has to have the right inductance and a certain resistor and capacitor combination for an optimized frequency tuning and antenna matching OEM Board More details about the antenna design are available in the Antenna Design guide manual This document can be downloaded from www hidglobal com Please refer also to the specific application notes for the Philips reader IC MIFARE amp l Code Micore Reader IC family Directly Matched Antenna Design 3 1 5 3 Serial Interface The OEM Board can be connected directly with a micro controller Alternatively the OEM Board also can be connected to most serial interface types by using the right interface converter circuit In order to optimize the communication quality the specific application note of the interface converter circuit needs to be taken into consideration Interfa
12. returned data depends on the used tag The block address range depends on the present tag Command Ka address 1 byte valid range 00h 40h rb Block address 1 byte Answer Data block data depends on tag type F Error read failure N Error No tag in field O Error Operation mode failure Example rb05 Reads block 05 4 4 3 10 1 Read failure F This error is returned if the reader receives either bad data or the block address exceeds the block address range of the sector 4 4 3 10 2 No tag in field N The tag does not respond There is either no tag present or not addressed 4 4 3 10 3 Operation mode failure O The block address of the command is higher than 40h The block address of the r command conflicts with other commands therefore the block address has to be limited to 40h Use the rb command instead Page 38 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 11 Read reader EEPROM This command reads the internal reader EEPROM It contains all startup parameters and the device ID Changes of the startup settings will only be taken into effect after a reset of the device Command re EEPROM address 1 byte 00h 13h Answer Data EEPROM data 1 byte Example rp05 Reads protocol configuration register 4 4 3 12
13. supports different tag types at the same time To increase the reading performance switch to a single tag mode If more than one tag of the same tag type should be detected at the same time the Multitag flag must be activated The response data length depends on the tag type Command Command Data Gi none Answer Answer Description data serial number n bytes N Error No Tag in the field only binary protocol 4 4 3 4 1 Multitag continuous read mode If the Multitag flag is set in the Protocol Configuration PCON register the reader reads multiple tags continuously 4 4 3 4 2 Auto start The continuous read mode is started automatically The auto start flag must be set in the PCON register 4 4 3 4 3 Binary mode This command is not fully supported in binary protocol mode Continuous Read in binary mode does not startup automatically at boot time even if the corresponding EEPROM flag is set Within the single shot timeout only one response is sent 4 4 3 4 4 Simple access control applications Serial numbers are always sent plain Data encryption is activated after a successful log in For simple access control applications it is recommended to use read only blocks for the identification of the tag Reading any block even the manufacturer block of the transponder will increase your security November 4 2008 Page 31 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01
14. value of target block 4 bytes T Error value block failure F Error increment failure N Error No tag in field Ka Error Unable to read after write Example 0405 copy value block 4 to block 5 720506 copy value block 5 to block 6 4 4 3 3 1 Target block The target block needs not to be a valid value block If source block is not in value format the command fails 4 4 3 3 2 No value block I Source value block does not match the value format The value block is corrupted A backup block can be used to restore the correct value 4 4 3 3 3 Copy failure F General failure during copy procedure or unable to read after write 4 4 3 3 4 No tag error N The reader does not detect a response of the tag There is either no tag present or the tag does not respond the request Page 30 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 3 5 Unable to read after write X The tag was removed from field immediately after copy instruction Data was decremented but the tag did not respond to the read after copy instruction which is done automatically by the reader module 4 4 3 4 Continuous Read The reader device reads and displays serial numbers continuously while one or more tags remain in the field This command stops if any character is sent to the reader module The reader
15. 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 4 5 Extended ID If Extended ID is activated a prefix byte extends the serial number For more information refer to Protocol Configuration register 4 4 3 5 Get Station ID This command returns the station ID of the reader device The answer is time slotted to enable that all devices in party line mode are detected The station ID has only effect in binary mode Command g None Answer Data Station ID of the reader device 1 byte 4 4 3 5 1 Time slotted answer In party line mode more than one reader can be used simultaneously The time slotted answer allows separating all connected devices The station ID is used to determine the correct time slot The reader supports up to 254 unique time slots Following formula calculates the needed time of one time slot Only one baud rate on the same party line is supported 10 es uk 6 Baudrate Ts Figure 4 10 Time slot formula Page 32 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 Following figure shows the timing diagram of time slotted answers timeslot reader 01 HOST reader 03 reader 04 reader 254 To T T2 Ts T4 Ts lt 01 03 252 T253 Figure 4 11 Timing diagram of time slotted answers 253 T254 254
16. 1 copy value block 15 read value block 4 write value block 15 5 Power conditions Power on 145 excluded raising time of power supply Enable on 114 All timing data is advisory application information and does not form part of the specification It may change in further firmware releases Please note also that all in the above table specified values depend on the used tag November 4 2008 Page 59 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Appendix D Version History Revision History Dat 10 27 08 Version 1 0 Rev 2 0 HID Format 10 07 2005 Version 1 0 Rev 1 1 04 13 2005 Version 1 0 Rev 1 0 MIFARE 1 0 Initial Release Page 60 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 Appendix E Approvals Certificates CE Declaration HID Global declares that in conformity with the European CE requirements specified in the EMC Directive 89 336 EEC the MIFARE Easy Plug amp Play Read Write Module described in this manual is CE compliant The relevant documents are available If any of the HF MIFARE Easy Plug amp Play Read Write Module is operated from a mains power supply all power connections and additional components of the final device must also comply with the EMC Directive 89 336 EEC d
17. 8SE at a minimum and a computer COM port 5 3 What type of MIFARE card should I use MIFARE Standard is designed for multi application environment It contains 16 sectors each with 2 individual keys access conditions 3 data or value blocks Some applications use the 1 Kbytes of the MIFARE Standard Card Memory just as storage MIFARE Ultralight has not a crypto unit on chip It only supports 16 blocks MIFARE Standard 4k cards have the same features as MIFARE Standard card but increased memory capacity November 4 2008 Page 45 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 5 4 How safe is MIFARE Standard for cashless payment Security is always a property of the overall system not of the components It requires careful design A properly designed system will require ALL barriers to be hacked in order to be broken For good design start specifying feasible attacks Then create barriers to block them MIFARE was specifically designed for cashless payment applications The MIFARE concept provides following barriers Anti collision selection Atomic value transaction Ciphered communication Storage of values and data protected by mutual authentication Weak field keys that allow decrement only Stored keys in the reader that are not readable Keys in the card that are not readable A brute force attack by trying different keys is li
18. Ka Block 1 byte Value 4 bytes Answer Data Value 4 bytes T Error value block failure F Error increment failure N Error No tag in field Ka Error Unable to read after write Example 0400000001 adds 1 to value block 4 0500000100 adds 256 to value block 5 4 4 3 1 1 No value block I Specified block does not match the value format The value block is corrupted A backup block can be used to restore the correct value Page 28 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 1 2 Increment failure F General failure during increment procedure or unable to read after write 4 4 3 1 3 No tag error N The reader does not detect a response of the tag There is either no tag present or the tag does not respond the request 4 4 3 1 4 Unable to read after write X The tag was removed from field immediately after increment instruction Data was decremented but the tag did not respond to the read after increment instruction which is done automatically by the reader module 4 4 3 2 Decrement value block debit Decrements a value block with a defined value A read after write is done automatically to verify data integrity The command fails if the source block is not in value block format A previous log in is needed to access a block Command 5 Block 1 byte Value 4 bytes Answer
19. MIFARE Application Oriented Protocol is a reader Interface to communicate with MIFARE transponders The major applications to be supported are D Access control Identification Reading the serial numbers of all cards in the field e Data Storage Performing encrypted read and write operations e Ticketing Performing read write increment and decrement operations in an encrypted environment e Multi applications Performing read write increment and decrement operations on various sectors of the MIFARE Standard tags using different encryption keys Extended Documentation Note All confidential materials are not part of this documentation You can obtain extended documentation containing that material after signing a NDA Overview Definitions Anti collision loop Algorithm processed to identify and handle a dialogue between reader and one or more tags in its antenna field Hex notation A hexadecimal value is noted with a following h for example A1h has the value A1 hexadecimal ASCII notation ASCII characters are listed within apostrophes for example x means a single x Page 6 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 Abbreviations Abbreviation Description ASCII American Standard Code for Information Interchange block For MIFARE Standard one block
20. Read value block Reads a value block The command checks if data is in value block format The read value block command needs a successful login Command rv Value block 1 byte Answer Data Read value 4 bytes P Error General failure IN Error value block failure IN Error No tag in field Example rv04 Reads value of block 4 4 4 3 12 1 No value block I The value read back after the write value instruction is a not a value block Data was written corruptly 4 4 3 12 2 No tag error N This means that the tag does not respond because there is either no tag present or none of the tags in the field is authenticated T instruction 4 4 3 12 3 General failure F Additional to a data read error caused by bad transmission conditions this error appears if a sector is addressed which is not located in the authenticated sector November 4 2008 Page 39 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 13 Select This command selects a single card in the antenna field It can only be used in single tag mode In the case of success the command returns the UID of the selected card The reader detects the length of the card automatically Command s None Answer Data serial number N Error No Tag in the field Example S 1234567890ABCD Select the card with its UID 1234567890SABCD
21. Sector Trailer contain key A data the last six bytes byte 10 15 contain key B data Byte number 6 to byte number 9 contain the access conditions for each block of the sector It is possible to configure the access rights read write increment decrement restore different for each block in the sector and in dependence to the key used in the authentication login procedure Access conditions for the Sector Trailer himself are different form access conditions of a data block increment decrement copy is never allowed for the Sector Trailer as of course this block never contains value data The access conditions are stored redundant for data security reasons Please consider that enabled keys are not readable and therefore return 00 on reading It is possible to configure each block of one sector as Value Block Ticketing or Data Block As an example you may use the following values for the access rights Block 0 Block 1 Block 2 Sector Trailer 08 77 8F FF 48 77 8B FF 28 77 8D FF 68 77 89 FF 18 77 8E FF 58 77 8A FF 38 77 8C FF CO O OU c c i D U lt lt O0 O lt lt Disse 78 77 88 FF 5 5 1 5 5 1 1 5 5 1 2 Where D denotes a data block and V value block All access conditions are configured that way that key B has write access to the Sector Trailer and so may change the configuration Each of the 16 sectors consists of 4 blocks includi
22. T255 November 4 2008 2008 HID Global Corporation All rights reserved Page 33 of 63 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 6 Login authenticate tag Performs an authentication to access one sector of a MIFARE card Only one sector can be accessed at the same time Optionally to transmit the key data to the reader stored keys in the reader EEPROM can be used To store keys in the EEPROM the write master key command is used It is possible to store up to 32 master keys in the reader EEPROM The login requires a successful select Command T Sector 1 byte valid range 00h 3Fh Key type 1 byte Key 6 bytes CR 1 byte optional AAh authenticate with key type A FFh authenticate with key type A transport key FFFFFFFFFFFFh BBh authenticate with key type B 10h 2Fh authenticate with key type A using stored key 00h 1Fh 30h 4Fh authenticate with key type B using stored key 00h 1Fh By transmitting CR instead of the keydata authentication is done with manufacturers transport keys AOA1A2A3A4A5h BOB1B2B3B4B5h FFFFFFFFFFFFh data Login status 1 byte L Login success E Error Invalid key format E Error General failure N Error No tag Example IO2AA CR Authenticate for sector 2 using the transport key A AOA1A2A3A4A5h key
23. TABnology RFID NFC Intelligent Contactless Identification united knowledge in RFID NFC webshop HF MIFARE Easy Module 2008 HID Global Corporation All rights reserved 1506 USM 01 0 03 Firmware Version 1 0 November 4 2008 Doc Number 1506 USM 01 Rev A 0 TAGnology d GmbH GERMAN TAGnology d o TAGnology RFID GmbH AUSTRIA q E Mail austria tagnology com E Ma E Mai germ tagnology com E Mail croatia TAGnology ME FZC United Arab Emirates E Mail uae tagnology com http www tagnology com 2013 TAGnology Group 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Warning Read before start up The product may only be used for the intended purpose designed by for the manufacturer The operation manual should be conveniently kept available at all times for each user Unauthorized changes that have not been sold or recommended by the manufacturer may have a negative influence on the system the program has been installed or copied on Such unauthorized measures shall exclude any liability by the manufacturer The liability prescriptions of the manufacturer in the issue valid at the time of purchase are valid for the device The manufacturer shall not be held legally responsible for inaccuracies errors or omissions in the manual or automatically set parameters for a device or for an incorrect application of a device Only qualified personnel should carry out installation op
24. a sophisticated uP development system All you need is a PC a connection cable and a power supply for the reader If you are using Microsoft Windows 95 98 NT take the following steps e Make sure that your reader is RS232 interface type e Start HyperTerminal e Create a new connection FILE NEW CONNECTION e Enter name of connection as you like for example MIFARE e Select connect COM2 COM1 direct connection e Connection setup 9600 8 n 1 no handshake e Connect your reader to COM2 COM1 of the PC and apply appropriate the supply voltage The reader transmits a string MIFARE 1 0 to the PC e This String denotes the firmware provided by your reader module e Puta tag to your reader Serial numbers should be displayed properly e Enter commands via keyboard They should be transmitted to the reader and the reader should reply If using an operating system different from Microsoft Windows you may use any other terminal program which is capable of receiving transmitting data via the serial port of your PC 5 2 How should the MIFARE Easy Reader be personalized In ASCII protocol applications no personalization is necessary In applications that are using the binary protocol mode a personalization procedure is required Use the Utility program to set up your reader correctly Ask the reseller or the sales representative of the reader for the Utility software or download software from www hidcorp com Omnikey System requirements are WIN9
25. atic binary timeout see protocol configuration register is used to detect incomplete binary frames The reader module answers in the same telegram format with the ID field set to 0 The Data block of the answers in binary protocol mode does match the ASCII mode answers with the only difference that data values are transmitted binary instead of ASCII Hex November 4 2008 Page 23 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 2 8 Examples 02h 64h 01h 78h 1Dh 03h STX Station ID Length x BCC ETX This instruction frame will reset the reader module with the station ID 64h 4 3 Register Set The reader has several system flags to customize its behavior The flags are stored non volatile in its EEPROM The reader accepts changes of the setting only during the start up phase It is recommended to clear all RFU bits to guarantee further compatibility The reader is able to store up to 32 authentication keys to log in Standard MIFARE cards internally All keys are read only and cannot be accessed via the interface lines 4 3 1 EEPROM memory organization Register Description 00h O3h Unique device ID read only 04h Station ID 05h Protocol configuration 06h Baud rate 07h Reset Off Time 08h Reset Recovery time 09h Internal use Do no change OAh OFh RFU 10h 13h User data Figure
26. binary watchdog timer internally to ensure correct framing STX Station ID Length Data BCC ETX 1 byte 1 byte 1 byte Various length 1 byte 1 byte Figure 4 2 Binary Frame 4 2 1 STX Start of transmission 02h 4 2 2 Station ID Unique ID of the station 00h reserved for the bus master Readers send response to this device ID FFh Broadcast message All devices will execute the command and send its response 4 2 3 Length Data Length Indicator Denotes the length of the Data block Page 22 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 2 4 Data This part contains the command and data The command values are the same as in ASCII protocol mode xv s whereas data is transmitted binary The length of the command block depends on the instruction 4 2 5 Block Check Character BCC The BCC is used to detect transmission errors The BCC is calculated XOR ing each byte of the transmission frame excluding the STX BCC and ETX character BCC StatID XOR Length XOR Data XOR XOR Data y Station ID Length Data 0 Data 1 XOR acc Data n 4 2 6 ETX End of transmission 03h 4 2 7 Remarks If the reader device receives an invalid instruction frame for example BCC wrong or the requested station ID does not match the internal ID of the reader the command is not executed The reader waits for the next valid frame The autom
27. ce Converter Circuit OEM Board Host Interface Page 20 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 3 1 5 4 Function Control LEDs Two external LEDs can be connected to the OEM Board There are two alternatives possible Option 1 Option 2 In both cases the LED supply voltage levels are TTL levels November 4 2008 Page 21 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Software As default data is transmitted at 9600 n 8 1 no handshaking Two protocol modes are supported The protocol mode is configured in the reader EEPROM As factory default the ASCII protocol is used 4 1 ASCII Protocol This protocol is designed for easy handling The commands are issued using a terminal program Data is transmitted as ASCII hexadecimal that can be displayed on any terminal program for example HyperTerminal Command Data Various length Various length Figure 4 1 ASCII protocol frame 4 2 Binary Protocol This protocol is designed for industrial applications with synchronization and frame checking Also an addressing byte for party line master slave multi drop is included The protocol usually requires a device driver Data is transmitted binary The reader uses a
28. ding c select Ce and multi tag select m If set a the unique serial number of the transponder is extended by a single prefix byte The values for the prefix byte are prefix description 01h MIFARE Light Transponder 02h MIFARE Standard Transponder 03h MIFARE 4k Transponder 04h MIFARE ProX Transponder 05h MIFARE UltraLight Transponder 06h MIFARE DESFire Transponder FFh Unknown Transponder 4 3 4 3 Binary Timeout default 0 This flag is only interpreted if the reader operates in binary mode If the serial bus stays idle for more than 96 ms no data is transmitted the reader will clear its command buffer and enter Command Read mode The Command Read mode means that the reader is waiting for valid data frames beginning with the STX code November 4 2008 Page 25 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 3 4 4 Multitag default 0 The Multitag flag will enable multi tag recognition in continuous read mode All tags are detected and displayed Due to the more complex search algorithm the continuous read command decreases its detection speed 4 3 5 BAUD Baud rate control register 06h The baud rate register defines the communication speed of the reader device Default value is OOh Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit
29. ding its access rights If a file is secured a login is needed before Commit Abort transaction Value files backup files linear record files and cyclic record files only adapt its value after the commit transaction command Several files can be changed within an application at the same time The abort transactions command is where all changes within an application are annulated Power loss will cancel all modifications too For more details about the application settings and access rights refer to 2 November 4 2008 Page 15 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 3 Hardware 3 1 Dimensions All dimensions are listed in mm re 30 50 29 21 7 20 pci 127 k 00 00000000 E o00 0000 0 c 2 54 1 27 25 40 e Top view Page 16 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 3 1 1 Pin out of J1 PIN PIN No Description ARX 1 Antenna RX ATX1 2 Antenna TX1 VDD 3 Supply Voltage GND 4 Ground ATX2 5 Antenna TX2 TGND 6 Antenna Ground RFU 7 Reserved for future use RFU 8 Reserved for future use RFU 9 Reserved for future use RFU 10 Reserved for future use 3 1 2 Electrical characteristics of J1 PINs Figure 3 1 P
30. dule User Manual Firmware V1 0 1506 USM 01 0 03 Electrical characteristics of J3 PINs in RS232 Configuration PIN PIN No Min Typ Max Description RFU 1 Do not connect VDD 2 4 5V 5V 5 5V Supply Voltage 150mA 250mA Supply Current without SAM GND 3 GND Ground for Power Supply and Interface RX RXA 4 15V 15V RS232 Voltage Levels 3kQ 5kQ 7kQ Input Impedance TX TXA 5 5V 9V RS232 Voltage Levels 300kOQ Output Impedance RXB 6 Do not connect TXB 7 Do not connect Pin out of jumper 3 in RS232 Configuration RS232 Configuration RX TX 5V Ground November 4 2008 Page 53 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Pin Out of 34 Top View PIN PINNo Description S O Read 1 Connector for green Read Indicator LED Read 2 Connector for red Read Error Indicator LED Power 3 Ground Powert 4 Connector for Power Indicator LED Electrical characteristics of J4 PINs IEN PINNo Min Typ Read 1 1 4V VDDmax 11mA 11mA 15mA Read 2 1 4V VDD max 11mA 11mA 15mA Power 3 GND Power 4 1 AN VDD max 11mA 11mA 15mA Pin out of J4 LEDr LEDg Power Page 54 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manua
31. e will be reset EN 16 TTE 25 mA Enable reader logic low will disable the reader Open or logic high LEDr 17 VDDnin VDDyp VDD max LED red 25mA 11mA 0 mA Output Voltage 11mA 25mA External Resistor min 200 Q 1 Universal Synchronous Asynchronous Receiver Transmitter TTL buffer output input S Voltage spikes below GND at the RES Vpp pin including currents greater than 80mA may cause latch up Thus a series resistor of 50 1000 should be used when applying a low level to the RES Vpp rather than pulling this pin directly to GND Schmitt trigger buffer input Page 18 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 PIN PIN No Min Typ Max Description LEDg 18 1 4V VDD LED green reading LED 11mA OmA with 330 Q internal serial resistor 11mA 15mA GND 19 GND Ground VDD 20 4 5V 5 0V 5 5V Supply Voltage IDD 32 mA 150 mA 250 mA Supply Current Figure 3 4 Electrical characteristics of pins 3 1 5 External Connections 3 1 5 1 Power Supply If the supply voltage and any noise modulated on the supply voltage remains within the specified limits no further filtering is required In some cases it is recommended to use additional filtering for the power supply line Insufficient power line filtering could cause unexpected or irregular
32. ed off and reset The stand by mode is only entered manually To switch off the whole unit pin 16 Enable has to be set to logic low 4 4 3 8 2 Power on The reader leaves the stand by mode and is ready for the next command Sending a tag command for example select continuous read the reader is powered up 4 4 3 8 3 Reset Timing The power up timing depends on environmental conditions such as voltage ramp up 4 4 3 9 Read Write user port This command sets or reads the state of the user port pin 14 of the OEM reader device The port is set either as output or as input Command pr none pw State of user port 1 Byte Answer Data State of user port 1 Byte Example pr Reads user port pw01 Sets user port state to high 4 4 3 9 1 Read port The port read command returns the current state of the USER port 00 USER port is low 01 USER port is high Figure 4 12 Read USER port return values November 4 2008 Page 37 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 9 2 Write port If user port is used as an output a 1kQ resistor has to be integrated into the wire Otherwise the reader device can be damaged d USER port to low 01 Sets USER port to high Figure 4 13 Write User port settings 4 4 3 10 Read block This command reads a data block on a card Size of
33. eration and maintenance procedures Use of the program and its installation must be in accordance with national legal requirements When working on devices the valid safety regulations must be observed International copyrights are applicable to this program Unauthorized copying distribution or resale of this program or of parts of this program is a violation of applicable laws and will be prosecuted Page 2 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 Read Me First About This Guide This manual describes the HF MIFARE Easy Read Write Module Its goal is to describe the reader how it works how to integrate it and how to use it Contacts HID Global Corporation Ltd Haverhill UK email eusupport hidglobal com main 44 0 1440 714 850 support 44 0 1440 711 822 fax 44 0 1440 714 840 November 4 2008 Page 3 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Contents Warning Read before start up cccssescceseeeeeeeeeeneeeeseeeseeeseeeseeeseeeseeeseeeseseseaesesesseaeseseseanseeeseanseeenaes 2 Read Me F irst eee eere E EES EE a 3 SCOPC wD DER 6 Extended Documentation eeeeeeeeeeeeeeeeeeeeee eene nennen nnn nn nennt n nnne entra nnne nn inne nn nn inne nonnen mnene 6 p
34. eserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 Figure 3 4 Electrical characteristics of pins enm nemen enne 19 Figure 4 1 e protocol rame 2 atr na d deren de iden Eater tena do d ta uie rax 22 Figure 4 2 Binary Erame 5 side biu Decet itu ue t de Ds emet MTS 22 Figure 4 3 EEPROM Memory rti ato pia nt et ict d eu entr ae 24 Figure 4 4 Protocol configuration register nennen menn nnns 25 Figure 4 5 Baud irate register ed ene et quiet dle eet eoe etc eti e 26 Fig re 4 6 Ba d rate settings ien ed e cha e det eae eiie 26 Figure 4 7 Communication settings ssssseseenee emen nenne nennen enn nnne 26 Figure 4 8 Command Overview 5 2 eco oett eese lees beoe baee iue eee beo eed Leu lue Lees eso tet eeu edente 27 Figure 4 9 Error Codes aede ei iude eei a da eda d uei d dtu d eee d cei eo ni eund 28 Figure 4 10 Time slot formula 5 ts seh ee 1 itte i rid cete on n e Eaton ece ten ad tc Eno er 32 Figure 4 11 Timing diagram of time slotted answers 33 Figure 4 12 Read USER port return values ee eene eene nemen nre nnns 37 Figur 4 13 Write User port settlings ciie eie ced depen eed ehe de e 38 Figure 5 1 Using a MIFARE Elte ODE 48 Figure 5 2 Get a serial number from NFC 48 November 4 2008 Page 5 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Scope The
35. g distance Each card needs a specific amount of power The reader always provides the same power Therefore the reading distance will decrease if more tags are present Basically the reading distance depends on the used tag antenna and its tuning 4 4 3 7 3 Multi tag select Using the serial number with CR as parameter the according tag will be selected High level interactions can be performed addressing only this card All other tags remain silent 4 4 3 7 4 Multi tag reset The antenna field reset can be deactivated with Protocol configuration 2 register By suppressing the antenna field reset it is possible to detect only new tags in the antenna field 4 4 3 7 5 Maximum number of tags The maximum number of tags in the antenna field is limited to the physical characteristics of the antenna The implementation detects up to 16 tags 4 4 3 8 Antenna power on off This command controls the antenna power It can be used to decrease the power consumption of the reader Command Switch on reader pon poff Reader enters the stand by mode Answer P Positive acknowledge Example poff Reader enters stand by mode Page 36 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 8 1 Power off The reader enters the stand by mode Power consumption is decreased All tags in the antenna field are power
36. ge Levels 300kQ Output Impedance RXB 6 Do not connect TXB 7 Do not connect Pin Out of 34 Top View Read 1 Connector for green Read Indicator LED Read 2 Connector for red Read Error Indicator LED Power 3 Ground Power 4 Connector for Power Indicator LED November 4 2008 Page 57 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Electrical characteristics of J4 PINs PIN PIN No Min Typ Max Description Read 1 1 4V VDDmax 11mA 11mA 15mA Read 2 1 4V VDD max 11mA 11mA 15mA Power 3 GND Powert 4 1 4V VDDmax 11mA 11mA 15mA LEDr LEDg Power Page 58 of 63 2008 HID Global Corporation All rights reserved November 4 2008 HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 Appendix C Timings Command texec ms Comments Common commands cont read 7 Reset Off and Recovery Time multi select 10 Reset Off and Recovery Time multi select no tag 35 4 Reset Off and Recovery Time antenna on 0 5 antenna off 0 6 port read 0 3 port write 0 3 read block 4 1 write block 11 6 reset 107 select 8 8 Reset Off and Recovery Time select no tag 35 4 Reset Off and Recovery Time increment value block 15 1 decrement value block 15
37. he fact that it is necessary to rewrite key A and access conditions each write process It is not recommended to use it as data storage 2 3 MIFARE Ultralight MIFARE Ultralight cards have no encryption included They only support plain text data transmission MIFARE Ultralight are only supporting 4 byte per sector but the command set uses 16 byte per sector Only the 4 least significant bytes are valid when using MIFARE Ultralight Ensure that the other bytes matching with tag content when using the write command otherwise the read back will fail November 4 2008 2008 HID Global Corporation All rights reserved Page 11 of 63 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 2 4 MIFARE 4k MIFARE 4k cards have an increased memory Beginning from sector 32 20h a sector has 16 blocks Due to compatibility reasons the sector indices has changed according following figure The login sector has to be used to access the according sector on the card Sector Block Login sector 00h 00h 03h 00h 01h 04h 07h 01h 1Fh 7Ch 7Fh 1Fh 20h 80h 8Fh 20h 21h 90h 9Fh 24h 22h AOh AFh 28h 23h BOh BFh 2Ch 24h COh CFh 30h 25h DOh DFh 34h 26h EOh EFh 38h 27h FOh FFh 3Ch DES or a proprietary encipher algorithm Figure 2 5 MIFARE 4k sector index table 2 5 MIFARE Proxy MIFARE Prox tags have an operating sy
38. ights and key B is disabled Using a MIFARE card This example demonstrates detecting a card in the antenna field with continuous read and additional reading of a page Command Answer Activate continuous read mode B2197B58 a card responses with his serial number S abort continuous read mode B2197B58 select card 101 AAFFFFFFFFFFFF L login into sector 1 with key FFFFFFFFFFFFh key type A rb04 00112233445566778899AABBCCDDEEFF read block 04 Activate continuous read mode to detect a new card Figure 5 1 Using a MIFARE card Using NFC The example shows how to communicate with NFC using the NFC demo board PN531 The reader is the initiator The NFC has to be configured as passive target using MIFARE 106kbps other NFC modes are not supported As first step place the reader on top of the NFC demo board antenna in 3 cm distance Then load the passive target 106 cmd file from the Scripts Tama WP2P subfolder into the SCRTester application Run the code Now it is possible to get a serial number from the NFC Command Answer S 08123456 Figure 5 2 Get a serial number from NFC Page 48 of 63 2008 HID Global Corporation All rights reserved November 4 2008 HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 References 1 ISO IEC 14443 Part 1 4 Identification Cards Contactless integrated circuit s cards Proximity
39. in out of J1 PIN PIN No Min Typ Max Description ARX 1 1 1V 4 4V Antenna RX ATX1 2 13 56 MHz 13 56MHz Antenna TX1 100 mApp 34 Vpp 50V pp VDD 3 4 5V 5 0V 5 5V Supply Voltage 32mA 150mA 250mA Supply Current GND 4 GND Ground ATX2 5 13 56 MHz 13 56MHz Antenna TX2 100 mApp 34 Vpp 50Vpp TGND 6 GND Antenna Ground RFU 7 Do not connect RFU 8 Do not connect RFU 9 Do not connect RFU 10 Do not connect Figure 3 2 Electrical characteristics of pins November 4 2008 2008 HID Global Corporation All rights reserved Page 17 of 63 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 3 1 3 Pin out of J2 PIN PIN No Description RX 11 RX from PC TX 12 TX to PC DIR 13 Direction of RS 485 USER 14 User Port RES 15 Hardware reset if logic low EN 16 Enable reader open or logic high LEDr 17 LED red LEDg 18 LED green reading LED GND 19 Ground VDD 20 Supply Voltage Figure 3 3 Pin out of J2 3 1 4 Electrical characteristics of J2 PINs PIN PIN No Min Typ Max Description RX 11 USART TTL 25 mA RX to PC To RS232 RS485 or RS422 device driver TX 12 USART TTL 25 mA TX to PC To RS232 RS485 or RS422 device driver DIR 13 TTL 25 mA Direction of RS 485 Logic High Reader to Host Logic Low Host to Reader USER 14 TTL 25 mA User Port RES 15 TTL On logic low hardwar
40. irective Customers selling into Europe must themselves make sure that the final device conforms to the EMC Directive 89 336 EEC directive For HID Global the compliance of important international regulations into business practices are a priority and the implementation of the EMC Directive 89 336 EEC is fully in line with the company s commitment to continuously improve its Quality Management System November 4 2008 Page 61 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 FCC Declaration HID Global declares that in conformity with the U S Directive FCC part 15 the HF MIFARE Easy Plug amp Play Read Write Module described in this manual is FCC part15 compliant The relevant documents are available If any of the HF MIFARE Easy Plug amp Play Read Write Module is operated from a mains power supply all power connections and additional components of the final device must also comply with the US FCC Part 15 directive Customers selling into the USA must themselves make sure that the final device conforms to the US FCC Part 15 directive Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment For HID Global the compliance of important international regulations into business practices are a priority and the implementation of the FCC part 15 i
41. l Firmware V1 0 1506 USM 01 0 03 Appendix B Short Range P amp P Module Dimensions All dimensions are listed in mm A x SS o gt 2 54 mm 110 00 mm 106 50 mm 85 00 mm IIT SS SES 8 50 mm 37 31 mm CO 4112mm Lem A Le 3 50 mm 67 00 mm November 4 2008 Page 55 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 E E s E View A A J4 J3 E E o e gt i View B B T dL T T E EE o o gt q c Pin Out Pin Out of J3 PIN PIN No Description RFU 1 RFU VDD 2 Supply Voltage GND 3 Ground RX RXA 4 RS232 RX RS422 RXA TX TXA 5 RS232 TX RS422 TXA RXB 6 RS422 RXB TXB 7 RS422 TXB Page 56 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 RFU 1 Do not connect VDD 2 4 5V 5V 5 5V Supply Voltage 150mA 250mA Supply Current without SAM GND 3 GND Ground for Power Supply and Interface RX RXA 4 15V 15V RS232 Voltage Levels 3kO 5kO kO Input Impedance TX TXA 5 5V 9V RS232 Volta
42. le stored in a special format in a block or page Values are 2s complement numbers that can be negative also Values are used for cashless payment Values consume a complete block each using redundancy for integrity checking Card ID 4 byte unique serial number single size type Together with manufacturer code and check byte 16 bytes Read only It Is stored in block 0 sector 0 of each tag Page 10 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module User Manual Firmware V1 0 1506 USM 01 0 03 2 2 2 Sector 0 Block O Block 0 is read only Serial Number 4 byte Check byte 1 byte Manufacturer data 11 byte Figure 2 3 MIFARE Standard sector 0 block 0 2 2 3 Block 3 7 11 15 Transport keys are set on delivery Key A 6 byte Access Conditions 4 bytes Key B 6 byte Figure 2 4 MIFARE Standard block 3 7 11 15 Key A AO A1 A2 A3 A4 A5 Infineon or FF FF FF FF FF FF new Philips cards Key B BO B1 B2 B3 B4 B5 Infineon or FF FF FF FF FF FF new Philips cards Access Conditions FF 07 80 xx key A used to read or write the key A itself is not readable key B is data only For further information refer to Frequently asked questions or MIFARE card manual Remarks Enabled keys are always read as 00 00 00 00 00 00 Using key B as data area will cause a security gap due to t
43. mited by the transaction time several msec of the card and would last virtually forever etc The Application can and should provide more barriers Sector access conditions It is possible to assign access conditions in a way that only decrementing of values is allowed with the keys used in the field So even a manipulated field station cannot be used to charge cards with additional values As a rule key A is used as a field key allowing decrement and read only and key B to format the card or charge values Diversified keys To make life even harder for attackers keys can be modified using serial number and memory content of the card So each card uses different keys and a listening attack on the reader interface would be hopeless Limiting cash volume stored on a card Do not use the transport keys keys as programmed after delivery for ticketing applications Ciphered and scrambled data storage Sabotage alarm etc Even higher security with contactless controller cards like DESFire MIFARE ProX MIFARE Smart MX etc Page 46 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 5 5 MIFARE Standard Sector Trailer and Access Conditions The last block of each sector contains configuration data for the sector This configuration data includes key A key B and the access conditions The first six byte byte 0 5 of the
44. ng the sector trailer Block 0 of sector 0 contains the serial number and some manufacturer data It is read only For detailed description of the Sector Trailer Access Conditions please refer to the datasheets of your chip manufacturer As it is possible to destroy the tag permanently make a block read and write protected it is strongly recommended not to change the Sector Trailer without detailed knowledge and under safe environment with good reading writing only Examples Ticketing Applications For ticketing applications it is recommended to use both keys of the MIFARE card Key Aasa field key with rights for read copy and decrement only Key B is used as master key with full access rights including increment and changing the access conditions and keys Data Handling Applications For data handling Applications it is recommended to disable ticketing operations increment decrement copy Key A is user as slave key with reading rights only Key B is used as master key with read write access to all blocks November 4 2008 Page 47 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 5 5 1 3 No Security open configuration 5 6 5 7 For open configuration applications it always possible not to change the sector trailer FF 07 80 xx and use the configuration as defined by the card manufacturer Key A is set as master key with full access r
45. rom EEPROM Each key stored in the reader EEPROM can be used as keytype A or keytype B To use a key as type A the value 10h must be added to the key index 30h must be added to use a key as type B 4 4 3 6 4 Usage of key A key B MIFARE cards support two different crypto keys for each sector Each key is 32 bit long and is stored in the sector trailer last block of the sector on a card It is possible to set different access rights for each key 4 4 3 7 Multi Tag Selection List This command detects several tags at the same time It replaces the fast select command s in multiple tag surroundings The Multi Tag list command lists all tags with its serial numbers Use the Multi Tag Select command to select a single tag Each tag has to be selected separately Command m Serial number n bytes CR 1 byte Data serial number IN Error No Tag in the field November 4 2008 Page 35 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 Example m lt CR gt 04E9E700000000 gt first card 34030F07 gt second card 02 gt number of detected tags m04E9E700000000 lt CR gt Select card with its serial number 4 4 3 7 1 Multi tag list Sending a CR as first parameter the reader returns a list of all present tags in the antenna field In the end the amount of detected tags are returned 4 4 3 7 2 Readin
46. rror caused by bad transmission conditions this error appears if a sector is addressed which is not located in the authenticated sector 4 4 3 18 3 No tag error N This error is returned if no tag is present or the card does not respond November 4 2008 Page 43 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 18 4 Writing values The write value block command is designed to create blocks which match the value format This command requires write access to specified block It is not recommended to use this instruction for ticketing operations For ticketing applications special instructions Increment Decrement Copy are supported 4 4 3 19 Reset This command executes a power on software reset New configuration settings will be loaded It resets all tags in the antenna field Command X None Answer MIFARE 1 0 lt CR gt lt LF gt ASCII Mode None Binary Mode 4 4 3 19 1 Reset Timing The power up timing depends on environmental conditions such as voltage ramp up For handheld devices the timing can change on the charging state of the battery Page 44 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 Frequently Asked Questions 5 1 Getting Started To test and interface the MIFARE Easy Module you do not need
47. s fully in line with the company s commitment to continuously improve its Quality Management System Page 62 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 RoHS Compliance HID Global declares that in conformity with the Directive 2002 95 EC about the Restriction of Hazardous Substances RoHS its HF MIFARE Easy RFID Reader products listed in this manual are RoHS compliant The following substances are contained in accordance with the limits required by the Directive Cadmium and cadmium compounds Lead and lead compounds Mercury and mercury compounds Hexavalent chromium compounds Polybrominated biphenyls PBB Polybrominated Diphenyl Ethers BPDE For HID Global the integration of environmental considerations into business practices are a priority and the implementation of RoHS Directive is fully in line with the company s commitment to continuously improve its Quality Management System November 4 2008 Page 63 of 63 2008 HID Global Corporation All rights reserved
48. stem onboard Data organization depends on the operating system installed on the card These cards can include additional functionalities such as Prior to any access of the operating system the card must be selected Customized commands are issued using the transfer command Page 12 of 63 2008 HID Global Corporation All rights reserved November 4 2008 HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 2 6 MIFARE DESFire This tag supports additional security algorithms DES Triple DES MAC for security sensitive applications DESFire tags are addressed using a specific command set see DESFire command set 2 6 1 Memory organization The memory of a DESFire card can be personalized to own requirements The card can be seen as data storage like a hard disk in a PC The memory is divided in up to 28 different applications directories and with 16 files each An application has up to 14 keys Depending on keys and access conditions a file can be accessed in four different ways Plain data is never secured Data is secured using a MAC single DES or triple DES enciphers Following figure describes the memory organization of a DESFire card DESFire card Application 0 Application 1 Application 2 Figure 2 6 DESFire memory organization November 4 2008 Page 13 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0
49. the physical number of blocks of a tag this error is thrown 4 4 3 15 2 No tag error N This error is returned if no tag is present or the card does not respond 4 4 3 15 3 Operation mode failure O The block address of the w command is higher than 40h The block address of the w command conflicts with other commands therefore the block address has to be limited to 40h Use the wb command instead November 4 2008 Page 41 of 63 2008 HID Global Corporation All rights reserved 1506 USM 01 0 01 HF MIFARE Easy Module User Manual Firmware V1 0 4 4 3 16 Write EEPROM Writes to the internal reader EEPROM It contains all startup parameters and the device ID Changes of the startup settings will only be taken into effect after a reset of the device Command we Address 1 byte valid range 04h 13h Data 1 byte Answer Data EEPROM data 1 byte E Error Read after write failure Example we0401 Set EEPROM address 04 Station ID to 01h 4 4 3 17 Write master key This command stores a MIFARE Standard key into the master key memory of the reader The reader can store up to 32 keys Command wm Key number 1 byte OOh 1Fh Key 6 bytes Answer data written key 6 bytes d F Error Write failure Example wm00112233445566 Store key 112233445566h in EEPROM key number 0 wm02A0A1A2A3A4A5 Store transport key 1 in EEPROM key 2
50. type A I3FBB lt CR gt Authenticate for sector 63 using the transport key 2 BOB1B2B3B4B5h key type B IO4FF CR Authenticate for sector 4 using the transport key 3 FFFFFFFFFFFFh key type A IOFAAFFFFFFFFFFFF Authenticate for sector 15 using key FFFFFFFFFFFFh key type A IOE14 Authenticate for sector 14 using EEPROM key 4 key type A 10530 Authenticate for sector 5 using EEPROM key 0 key type B 10732 Authenticate for sector 7 using EEPROM key 2 key type B 10110 Authenticate for sector 1 using EEPROM key 0 key type A IOABBFF12FFFFFF35 Authenticate for sector 10 using key FF12FFFFFF35h key type B Page 34 of 63 November 4 2008 2008 HID Global Corporation All rights reserved HF MIFARE Easy Module 1506 USM 01 0 03 User Manual Firmware V1 0 4 4 3 6 1 No tag error N The reader does not detect a response of the tag There is either no tag present or the tag does not respond the request 4 4 3 6 2 lt CR gt Three transport keys are implemented to access cards fast Transmitting CR instead of the key the reader module uses transport keys for the login procedure LxxAA lt CR gt Authenticate for sector xx using the transport key A AOA1A2A3A4A5h key type A LxxBB lt CR gt Authenticate for sector xx using the transport key 2 BOB1B2B3B4B5h key type B LxxFF lt CR gt Authenticate for sector xx using the transport key 3 FFFFFFFFFFFFh key type A 4 4 3 6 3 Login with keydata f
51. ul qc M 6 1 S pported Tags EN 8 2 MIFARE transponder ILE 9 3 ele UE 16 4 el AT ER 5 Frequently Asked Questions cssecccesseeeeeseeneeeeeeenseeeseeeeseeeseaeseseseeeseseseaeseseseanseseseanseseneaes 45 References eebe ee Ee Sec ee LUI ee Dan ta 49 Appendix A Compact P amp P Module ccccceseesseeeeeeeeeeneeeeeeeeeeeeeeeenseeaseaeeeseeeseseeeeaeeeseeeseaeeeeenees 50 Appendix B Short Range P amp P Module cccccccesseeeeeceeeeeeeeeseeeceeeeeeeesensseaneeseeeenseeaeeeeeseeeseseeeenenees 55 feel ates iru eS 59 Appendix D Version HistOry a tte EENS 60 Appendix E Approvals Certificates esseeeeeeeeeee eren nnne nnne rnnt nennen 61 List of Figures Ile CET EE 9 Figure 2 2 MIFARE Standard sector CAG FANN ENEE 10 Figure 2 3 MIFARE Standard sector EE Eege 11 Figure 2 4 MIFARE Standard block Oel Ad We Digs ses attested cates EA dcm svtdce rise cce pad 11 Figure 2 5 MIPARE 4k sector index tables indt oto ete accion E 12 Figure 2 6 DESFire memory organization esses nennen menn nemen nnns 13 Figure 2 7 DESFire State diagr aie ennemi nnne T EETA 14 Figure 3 T Pin Out ot JT iiec Le dee e etude e e dete e EC cn aire o ted 17 Figure 3 2 Electrical characteristics of DINS osuba a nennen eene 17 Figure 3 9 Pin out ot J2 ae ed EEGENEN eL EE LA e edu E edd 18 Page 4 of 63 November 4 2008 2008 HID Global Corporation All rights r

OMNIKEY HF MIFARE Easy Module

Contents

Download Pdf Manuals

Related Search

Related Contents