SCL3711 - SCM Microsystems
Contents
1. 9 A A N a a a 10 205 GONMVENNONG ost a AEE 11 General information about SCL3711 eeeeeeeeeeeeeee enne eene nnn nnn nnn nn rnnt rni inne 12 Sle SCS FAT Key DNS naa a Dea ea dud nuin alt tuu 12 32 SOUS TIM ACUTE ELLE 12 SSMO Ecra Ordering intorna oM s UMR RS N Mc cues 13 3 4 SCL3711 customization ODUONS asin aii ba 13 3 5 Contactless communication principles and SCL3711 usage recommendations 14 SOl POWE SHPDIV aa la a ne Aa a hn 14 392 Dala exchange E 14 3 02 FAOCOMMENGAUONS Gasa tat a nr an 15 OT MP Sells Sun na attente ones 16 9S5 oda 16 3 6 2 Applications provided by SCM Microsystems 16 SCS MTNA CLIN OS ce ic la eae 17 4 1 SCL3711 high level architecture ccceccceeceeeeeeeeeeeeeeeeeeeeeeeeseseesseeseessssssessesessseeseees 17 A DIOCK Gla Qi el tops nn ne nan de le de ice 17 4 1 2 Software architecture ada 17 4 2 Quick reference data ee pese tei aea iut un iia tte eae 18 AZ MEE IC ECIAM S EO OO 18 Peeves E A gar ana centu Tem a roS Lade GM 18 423 Oher AA EA a a LM DLL cL 18 SONWAr M A eom RS 20 Bits ANS tala Oca UU TT 20 5 1 1 Command line parameters for installation eeeseeeeeeseeseeeeeeeeeeeee 21 5 1 2 Command line parameters for un installation sess 21 g2 Cn D Cr ccr rc 21 O 22 Duo du Ene moment 22 5 3 2 Supported o2. SCL3711 REFERENCE MANUAL After a few minutes you are notified the installation happened correctly The installer will then prompt you to insert your SCL3711 to update the memory settings You are ready to use your SCL3711 In some very rare cases you may be asked to reboot your PC Please do so if this is the case show the readme file Setup has finished installing SCL3711 NFC Reader Writer Please connect the SCL3711 smart card reader or click Cancel to skip the SCL3711 device memory update now Cancel Memory successfully updated 5 1 1 Command line parameters for installation A few parameters of the installer can be configured when launching the installer from the command line Silent mode of installation Setup exe s v qn Installation with no dialogs Setup exe v LIMITUI 1 21 No reboot dialog Setup exe v REBOOTREQD 0 5 1 2 Command line parameters for un installation A few parameters of the installer can be configured when launching the installer from the command line Silent mode of un installation lt system folder gt Msiexec exe x lt path to msi file gt lt msi file name gt qn De installation with no dialogs lt system folder gt Msiexec exe x lt path to msi file gt lt msi file name gt LIMITUI 1 No reboot dialog lt system folder gt Msiexec exe x lt path to msi file gt lt msi file name gt REBOOTR
3. CLA INS P1 P2 P3 OxFF Ox5A 0x00 Segment 0x00 Address Where P2 is coded as follow Bit Value Description lo b b Segment address value between 0x0 and OxF Response Data SW1 SW2 128 bytes of data 0x90 0x00 6 5 1 7 Read 8 bytes READS Description This command reads out a block of memory Format CLA INS P1 P2 OxFF 0x5C 0x00 Block Address P2 Block Address b8 b1 General block 0x00 OxFF Response Data SW1 SW2 8 bytes of data 0x90 0x00 SCL3711 REFERENCE MANUAL A 6 5 1 8 Write Erase 8 bytes WRITE E8 Description This command erases a memory block and then writes a value to it Format CLA INS P1 P2 P3 Data OxFF Ox5E 0x00 Block 0x08 8 bytes of data to be Address written Where P2 codes the block address value between 0x00 and OxFF Hesponse Data SW1 SW2 8 bytes of data that have been written 0x90 0x00 6 5 1 9 Write No Erase 8 bytes WRITE NE8 Description This command writes with no erase to a block of memory This command does not erase the value of the targeted block before writing the new data Using this command EEPROM bits can be set but not reset Format CLA INS P1 P2 P3 Data OxFF 0x60 0x00 Block 0x08 8 bytes of data to be Address written Where P2 codes the block address value between 0x00 and OxFF Response Data SW1 SW2 8 bytes of data 0x90 0x00 Example Sending the following command to an NFC Forum type 1 tag that
4. Configuration register The configuration register is 1 byte which is coded as follow b5 b4 b3 b2 b1 bO Felica 424 Felica 212 Type B Type A Bit value 1 means SCL3711 will poll for that technology bit value O means SCL3711 will not poll for this value To poll only for FeliCa 424 and type A B1 0x11 6 6 3 3 Output buffer Output buffer NULL SCL3711 REFERENCE MANUAL 53 6 6 4 READER CNTLESS RF SWITCH 6 6 4 1 Description This escape message ID can be used to retrieve the current RF state ON OFF of SCL3711 as well as to switch the RF state ON OFF 6 6 4 2 Input buffer Byte Value Description Configuration parameter byte can take the following values Value Description Switch the RF OFF 0x01 Switch the RF ON Get the current RF field state 6 6 4 3 Output buffer Byte Configuration parameter Output buffer value from input buffer 0x00 or 0x01 NULL OxFF 0x00 if the field is OFF 0x01 if the field is ON 6 6 5 READER CNTLESS DISABLE PPS 6 6 5 1 Description Using this escape command one can enable disable the default automatic PPS behavior of SCL3711 When automatic PPS is disabled communication happens at the lowest baudrate commonly supported by SCL3711 and the user token 6 6 5 2 Input buffer Byte Value Description B1 Enable automatic PPS Disable automatic PPS 6 6 5 3 Output buffer Output buffer NULL SCLS7ITREFERENCEMANUAL A 6 6 6 READER ENABLE DISABL
5. b3 b6 Block number value between 0x0 and 0xE 0 b Number of the key to be used for authentication Response Data SW1 SW2 Byte value that has been written 0x90 0x00 SCL3711REFERENCEMANUAL 5 6 5 1 5 Write No Erase Byte WRITE NE Description This command writes a byte value on an individual memory byte within the static memory model area of blocks 0x0 OxE This command does not erase the value of the targeted byte before writing the new data Execution time of this command by NFC Forum tags type 1 is approximately half that of the normal write command WRITE E Using this command EEPROM bits can be set but not reset Format CLA INS Data Byte Address 1 byte of data to be written Where P2 is coded as follow Bit Value Description bO b2 Eo Byte number to be addressed value between 0x0 and 0x7 b3 b6 a Block number value between 0x0 and OxE Number of the key to be used for authentication Response Data SW1 SW2 Value of the memory byte after execution 0x90 0x00 Example Sending the following command to an NFC Forum type 1 tag that has the value 0x39 in the first EEPROM byte of block 0x1 of its static memory model area CLA ES Data Will give the answer SW1 SW2 0x39 00111001 b 0xA8 10101000 b 0xB9 10111001 b SCL3711 REFERENCE MANUAL 46 6 5 1 6 Read Segment RSEG Description This command reads out a complete segment of memory Format Data
6. MILER OSTER TOMS SCM Microsystems Reference Manual version 1 5 SCL3711 Multiprotocol contactless mobile reader Reference manual SCL3711 Multiprotocol Contactless mobile Reader SCM Microsystems Oskar Messter Strasse 13 85737 Ismaning Germany Phone 49 89 9595 5000 Fax 49 89 9595 5555 Document history Date Version Description of change 06 03 2009 Review and update by product management 18 03 2009 Final review for release 01 04 2009 Update added examples of APDU sequences for a few commands corrected a few typos 01 04 2009 Updates related to Driver version 1 04 29 10 2009 1 5 Updates related to Driver version 1 06 e Various editorial changes e Installation procedure chapter updated e Addition of T CL user command description 6 1 3 e Addition of FELICA PASSTHROUGH escape 6 6 10 Contact information http www scmmicro com products services smart card readers terminals contactless dual interface readers html For sales information please email sales scmmicro com Table of Contents 1 4 5 Legal IMO ee 7 ded SEAN St ses A tie desert el D Manet ra 7 AR A A SR A tee Rte 7 O o LC ETE 7 Introductorio me manta dls alesi 8 2 1 OEI O AM a a 8 2 2 MANGES O A A at indiens miles 8 2 3 Product version corresponding to the manual cece cceee eee eeeeeeeeeeeesaaeeeeeeeeeeseaaeneeees 8 2 4 Definition of various terms and acronyms
7. Once a user credential is selected the driver constructs an ATR from the fixed elements that identify the token Depending on the user technology this ATR can be analyzed as described hereunder SCL3711 REFERENCE MANUAL 2 5 3 3 2 ATR for type A memory user tokens The ATR of the user token is composed as described in the table below In order to allow the application to identify the storage card properly it s Standard and Card name describing bytes must be interpreted according to the Part 3 Supplemental Document maintained by PC SC Byte Value Designation Description following ATR 0x80 TD1 Nibble8 indicates no TA2 TB2 TC2 i O ee 3 0x01 TD2 Nibble8 indicates no TA3 TB3 TC3 Ox8n optional TLV data object Registered identifier on 5 bytes Proprietary identifier extension on 3 bytes MN 0x00 0x00 0x00 0x00 4 RFU bytes Example of the ATR built for a MIFARE Classic 4K card dij SCM Smartcard Commander Jag File Edit Settings Help Hardware System SCL3711 M Mifare Standard 5 CPU card 3B 8F 80 01 80 4F OC 40 00 00 03 06 oppo 02 00 00 00 00 69 Yalue hex Meaning direct 15 historical characters protocol 0 protocol 1 Historical Hex 80 4F OC 40 00 00 03 06 03 00 02 00 00 00 00 Historical ASCII Qs Checksum SCL3711REFERENCEMANUAL 25 5 3 3 3 ATR for an NFC Forum tag type 1 user token Topaz run Value Designation Description TD1 present 2 historical bytes in following
8. e P2 indicate the memory block number where data should be written e Lc 0x10 for MIFARE Classic 1K 4K Lc 0x04 for MIFARE Ultralight 6 2 2 3 Response Data Out SW1 SW2 6 2 2 4 Status Words SW1 SW2 Description Security status not satisfied State of non volatile memory unchanged SCL3711 REFERENCE MANUAL 6 2 2 5 Example For a MIFARE Classic 1K card which has the following memory content Mifare Standard Cardtype Mifare Standard Memory size 1024 Bytes Unique ID FA 92 6C D6 td KeyA KeyB KeyB AC Sector Hex ASCII Write Read Write Read o FA92 6CD6 D288 0400 4649 1652 4530 1008 WALL 03E1 100 PITRE OFOO 03E1 O3E1 O3E1 O3E1 03E1 O3E1 4 4 4 4 4 4 4 O3E1 03E1 OSE1 O3E1 O3E1 O3E1 O3E1 O3E1 AOA1 A2A3 A4A5 7077 0001 277 2229 277 Lar 2 032D D102 2853 7091 010B 5402 656E 4E46 N Sp T enNF 4320 4465 6D6F 5101 1555 0373 636D 6D69 C DemoQ U scmmi 6372 6F2E 636F 6D2F 7363 6C33 3731 30FE cro com scl3710p D3F7 D3F7 DIF 7F07 8840 2722 2222 0 0 0 0 9 0000 0000 0000 0000 0000 0000 0000 0000 s ssssssesseseso 0000 0000 0000 0000 0000 0000 0000 0000 n nn n n 0000 0000 0000 0000 0000 0000 0000 0000 ssssssssssseereo D3F7 D3F7 D3F7 7F07 8840 2229 2277 2999 6 0 D 8 0000 0000 0000 0000 0000 0000 0000 0000 n nnn 0000 0000 0000 0000 0000 0000 0000 0000 ccc 0000 0000 0000 0000 0000 0000 0000 0000 eens D3F7 D3F
9. ATR 0x80 Nibble8 indicates no TA2 TB2 TC2 and TD2 present Nibble O means T 0 3 0x01 TD2 Nibble8 indicates no TA3 TB3 TC3 Nibble 1 means T 1 Card Mode NFC TAG operating at Passive 106 baud rate Card Type Card type is Topaz Example of the ATR built for a Topaz tag 38 SCM Smartcard Commander Joey File Edit Settings Help X System SCL3711 3B 82 80 01 02 44 45 Value hex Meaning 3B direct 2 historical characters protocol 0 protocol 1 Historical Hex Historical ASCII ia QS Checksum SCL3711REFERENCEMANUAL 26 5 3 3 4 ATR for a NFC Forum tag type 3 user token FeliCa run Value Designation Description 0x8C TD1 present 12 historical bytes following ATR 0x80 Nibble8 indicates no TA2 TB2 TC2 and TD2 present Nibble O means T 0 3 0x01 TD2 Nibble8 indicates no TA3 TB3 TC3 Nibble 1 means T 1 i Card Mode NFC TAG operating at Passive 212 baud rate e CI CES CON TT ET NS Example of the ATR built for a FeliCa user token dj SCM Smartcard Commander Jia E File Edit Settings Help X System 2X SCL371 1 HB ATR M CPU card ATR 3B 8C 80 01 04 43 FD 01 14 E4 00 7E 04 CO 31 93 50 Byte Value hex Meaning TS 3B direct TO 8c 12 historical characters TDi 80 protocol 0 TD2 01 protocol 1 Historical Hex 04 43 FD 01 14 E4 00 7E04 CO 31 93 Historical ASCII NAAA Qs 50 Checksum SCL3711REFERENCEMANUAL 27 5 3 3 5 ATR for ISO IEC 14443 4 user tokens T
10. UL C MIFARE PLUS o FeliCa o NFC Peer to peer communication will be available through driver upgrade e PC SC v2 0 compliant SCL3711 REFERENCE MANUAL AR d d SCL3711 ordering information Part number SCL3711 905108 Contactless SDK 905124 3 4 SCL3711 customization options Upon request SCM can customize e The color of the casing e The logo e The product label e The USB strings Terms and conditions apply please contact your local SCM representative or send an email to sales scmmicro com SCL3711REFERENCEMANUAL 4 3 5 Contactless communication principles and SCL3711 usage recommendations SCL3711 is a contactless reader designed to communicate with user tokens User tokens are made of a contactless peer toten integrated circuit card connected to an IN antenna a EA SY User tokens can take several form factors Sy Va o e Credit card sized smart card NX e Key fob e NEC mobile phone etc Communication between SCL3711 and user tokens uses magnetic field inductive coupling The magnetic field generated by SCL3711 has a carrier frequency of 13 56MHz 3 5 1 Power supply When the user token is put in the magnetic field of the reader its antenna couples with the reader and an induction current appears in the antenna thus providing power to the integrated circuit The generated current is proportional to the magnetic flux going through the antenna of the user token 3 5 2 Data exchange T
11. 12MHz controller RF carrier frequency 13 56 MHz 50 ppm Modulation As defined in ISO IEC 14443 Unloaded field strength 1 5 A m to 2 2 A m Un modulated RF on reader casing USB specification USB 2 0 FS Devise SCL3711 REFERENCE MANUAL 79 PDO O NFC forum tag type 1 through SCM specific APDU NFC forum tag type 2 through PC SC defined APDUs NFC forum tag type 3 through SCM specific APDU NFC forum tag type 4 through PC SC APDUs ISO IEC 14443 4 PICC type A and type B MIFARE Classic DESFire Ultralight Ultralight C MIFARE PLUS Non Secure FeliCa Maximum baud rate 848 Kbps Multiple PICC in field Not supported Operating temperature 20 C 470 C range Operating humidity Up to 9596 RH non condensing range 40 C 85 C USB CE FCC VCCI Certifications WEEE RoHS WHQL UL Radio Frequency for Japan ID1 format tokens supported MIFARE PLUS cards in security level 2 ISO14443 3 commands are not supported because the SAK byte of those user tokens doesn t indicate it is supported 5 Software modules SCL3711 is provided with an installer 5 1 Installation Make sure the SCL3711 is not plugged in your PC before you start setup Setup Launcher 20 SCL3711 REFERENCE MANUAL 20 Start the installer by double clicking on setup exe ETS and then follow the wizard instructions Click Next on the welcome page of the installer Read the license agreement You have to accept it in order to
12. 7816 4 6 3 1 4 Status Words Description See ISO IEC 7816 4 As defined in ISO IEC 7816 4 6 3 1 5 Example The following APDU sequence reads the first 256 bytes of the data group 1 as specified in ICAO LDS logical data structure for machine readable travel documents with open access It first selects the issuer application using its AID 0xAO 0x00 0x00 0x02 0x47 0x10 0x01 then selects the DG1 file 0x01 0x01 and then does a read binary APDU 00 A4 04 OC 07 AO 00 00 02 47 1001 SW12 9000 OK APDU 00 44 02 OC 02 01 01 SW12 9000 OK APDU 00 BO 00 00 00 SW12 9000 OK DataOut 61 5B SF 1F 58 50 3C 55 54 4F 45 52 49 4B 53 53 4F 4E 3C 3C 41 4E 4E 41 3C 4D 41 52 49 41 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 3C 4C 38 39 38 39 30 32 43 3C 3 SCL3711 REFERENCE MANUAL A 6 4 MIFARE DESFire commands MIFARE DESFire native commands can be mapped onto case 4 APDU as described hereunder CLA P1 P2 0x90 DESFire 0x00 0x00 Length of DESFire data field command parameters The response from a DESFire user token will be mapped as follow Data SW1 SW2 OxYY is the DESFire native status byte as described in NXP documentation Note In the past SCM Microsystems had its own proprietary APDU for handling DESFire cards that was implemented on SCLO10 and SDI010 products It is still supported but SCM recommends to use this mapping method for any new development 6 5 Set of APDU defined by SCM Microsys
13. against sector 1 or 2 would require sending the following sequence of APDU ATR 3B SF 80 01 80 4F OC 40 00 00 03 06 03 00 01 00 00 00 00 6A APDU FF 82 00 60 06 D3 F7 D3 F7 D3 F7 Sw12 9000 OK APDU FF 86 00 00 05 01 00 09 60 00 512 9000 OK SCL3711 REFERENCE MANUAL 40 6 2 5 STORAGE_CARD_CMDS_VALUE_BLOCK 6 2 5 1 Description This APDU is used to interact with MIFARE Classic e purse applications Please refer to MIFARE Classic documentation available from NXP Semiconductors for further details on MIFARE classic memory mapping and commands 6 2 5 2 Format CLA INS P1 P2 Le Data in Block number Value Where P1 P2 code the address of the block number addressed Where the data field is structured as follow Byte Value Description OxCO Increment Decrement EE Block number Value LSB first 6 2 5 3 Response Data Out SW1 SW2 6 2 sa Status Words Description Security status not satisfied 6 2 5 sa cil CLA INS Data in Will increment block number 0x1E of a MIFARE Classic based user token by a value of 0x01 SCL3711 REFERENCE MANUAL CA 6 3 Set of APDU for ISO IEC 14443 4 user tokens 6 3 1 T CL Command 6 3 1 1 Description Using this command SCL3711 transfers directly ISO IEC7816 4 APDU to the user token 6 3 1 2 Format Description of the APDU commands can be found in ISO IEC 7816 4 specification 6 3 1 3 Response Data Out PICC answer SW1 SW2 As defined in ISO IEC
14. be able to install the driver Then install il SCL3711 NFC Reader Writer InstallShield Wizard Welcome to the InstallShield Wizard for SCL3711 NFC Reader Writer The InstallShield R Wizard will install SCL3711 NFC Reader Writer on your computer To continue click Next WARNING This program is protected by copyright law and international treaties SCL3711 NFC Reader Writer InstallShield Wizard License Agreement Please read the Following license comer carefully IMPORTANT READ CAREFULLY This End User License Agreement Agreement is a legal agreement between you either an individual or a legal entity and SCM Microsystems Inc SCM for the SCM software product identified above which includes computer software and may include associated media printed materials and online or electronic documentation Licensed Product The Licensed Product also includes any updates and supplements to the original Licensed Product provided to you by SCM Any software provided along with the Diana A Ded that in a nnnnnintaal nth m anwnenta inanan ann neat in iv accept the terms in the license agreement OI do not accept the terms in the license agreement InstallShield SCL3711 NFC Reader Writer InstallShield Wizard Ready to Install the Program The wizard is ready to begin installation Click Install to begin the installation Click Cancel to exit the wizard
15. communication to avoid putting SCL3711 in oY close proximity of conductive materials The presence of multiple user tokens in the field also interferes with the communication When several user tokens are in the field of the reader load of the field increases which implies that less energy is available for each of them and that the system is detuned For this reason SCM Microsystems has implemented in its driver the support for 1 slot only It is recommended to present only one user credential at a time in front of SS SCL3711 The communication between the reader and the user token is sensitive to the geometry of the system reader user token Parameters like the geometry and specially the relative size of the reader and user token antennas directly influence the inductive coupling and therefore the communication SCL3711 was primarily designed and optimized to function with user credentials of various technologies having the size of a credit card It may happen that SCL3711 is not capable of communicating with extremely large or extremely small antennas In order to optimize the coupling between the reader and the user token it is recommended to put both antennas as parallel as possible In order to optimize transaction speed between the reader and the card it is recommended to place the user token as close as possible to the reader This will increase the amount of energy supplied to the user credential which will then be able to use
16. has the value 0x01 0x02 0x03 0x04 0x00 0x00 0x00 0x00 in the first EEPROM block Data CLA INS P1 P2 P3 0x05 0x06 0x07 0x08 Will give the answer Data SW1 SW2 0x01 0x03 0x03 0x04 0x90 0x00 0x05 0x06 0x07 0x08 SCL3711 REFERENCE MANUAL 48 6 5 2 Commands for communicating with NFC Forum Tags Type 2 To interact with an NFC Forum tag type 2 the commands STORAGE CMDS READ BINARY and STORAGE CMDS WRITE BINARY previously described in this manual should be used Please refer to NFC Forum tag type 2 specification for definition of the read and write procedures 6 5 3 Commands for communication with NFC Forum Tags Type 3 This section describes APDUs SCM Microsystems defined for the following FeliCa M non secure commands For further details on FeliCa the reader should contact Sony corporation Some description can also be found in the JIS X 6319 4 Japanese Industry Standard or the 15018092 standards e REQC e Request Service e Request Response e Read e Write For further details on processing NFC Forum tag type 3 please refer to NFC Forum tag type 3 specification 6 5 3 1 REQC Description This command is used to detect the presence of a Type C i e NFC Forum Type 3 FeliCa card in the RF field Format CLA INS P1 P2 P3 OxFF 0x40 0x00 0x00 0x04 2 bytes of Service Code 1 byte RFU 1 byte TSN Response Data SW1 SW2 16 bytes of NFCID2 2 bytes of System Code 0x90 0x00 sent only if the RFU byt
17. 000 0000 i 1 2 3 4 5 6 gt 8 OTP Bytes Internal Bytes Data Bytes Lock Bits Read Only Bytes The following APDU sequence can be used to retrieve the identifier and read all the blocks ATR length 7 ATR 3B 82 80 01 02 44 45 APDU FF 50 00 00 00 Sw12 9000 OK DataOut 11 48 07 83 3C 00 6 byte s APDU FF 52 00 00 00 x SW12 9000 OK s DataOut 11 48 07 83 3C 00 00 02 25 00 E1 10 OE 00 03 26 D1 02 21 53 70 91 01 08 55 01 74 65 73 74 2E 64 65 11 01 04 54 05 65 6E 2D 55 53 54 65 73 74 51 03 01 61 63 74 00 FE 00 00 00 00 00 SCL3711 REFERENCE MANUAL AA 6 5 1 3 Read Byte READ Description This command reads a single EEPROM memory byte within the static memory model area of blocks OxO OxE Format CLA INS Data P1 P2 P3 Where P2 is coded as follow Bit Value Description bO b2 Byte number to be addressed value between 0x0 and 0x7 b3 b6 5 Block number value between 0x0 and OxE 0 b Number of the key to be used for authentication Response Data SW1 SW2 1 byte of data 0x90 0x00 6 5 1 4 Write Erase Byte WRITE E Description This commands erases and then writes the value of an individual memory byte within the static memory model area of blocks Ox0 0xE Format CLA INS Data P1 P2 P3 0x00 Byte Address 1 byte of data to be written Where P2 is coded as follow Bit Value Description bO b2 Byte number to be addressed value between 0x0 and 0x7
18. 3 6 Request System Code Description This command searches for the system code registered in the card and returns its value When the card is logically segmented multiple system codes are returned in the form of a list Format CLA INS P1 P2 P3 Data Response Data SW1 SW2 8 bytes IDm No of System Codes n 0x90 0x00 System Code List 2n 6 5 4 Commands for communicating with NFC Forum Tags Type 4 To interact with NFC Forum tag type 4 tags ISO IEC 7816 4 defined APDU are used and sent through SCL3711 using the T CL command described earlier in this manual The reader can find in NFC Forum tag type 4 specification both the definition of the APDU commands to be used and the processing methods SCL3711 REFERENCE MANUAL A 6 6 Escape IOCTL s supported in SCL3711 The reader behavior can be configured with the help of below given IOCTL s The ScardControl method of PC SC see http msdn microsoft com en us library aa379474 VS 85 aspx should be used to send those IOCTLs Code the API as given below define IOCTL_CCID_ESCAPE SCARD_CTL_CODE 3500 SCardControl in SCARDHANDLE hCard Handle obtained through ScardConnect in DWORD dwControlCode Should be set to IOCTL CCID ESCAPE in LPCVOID lpinBuffer First BYTE contains IOCTL code followed by arguments if any in DWORD ninBufferSize Total input buffer length out LPVOID lpOutBuffer Response buffer in DWORD nOutBufferSize Resp
19. 6 2 3 STORAGE_CARD_CMDS_LOAD_KEYS 6 2 3 1 Description Some type of user tokens like MIFARE Classic may require that the an authentication happens before any data can be read or written To encrypt perform this authentication keys need to be loaded in the reader s memory using this command 6 2 3 2 Format CLA NS P1 Data in P2 Lc Where P2 can have the following values please refer to MIFARE documentation from NXP for further details on what is key A and Key B e 0x60 to use the Key A e 0x61 to use the Key B 6 2 3 3 Response Data Out SW1 SW2 6 2 3 4 Status Words SW1 SW2 Description i Mil 0x69 Reader key not supported Secured transmission not supported Non volatile memory not available Key number not valid Key length not correct SCL3711 REFERENCE MANUAL 88 6 2 4 STORAGE CARD CMDS AUTHENTICATE 6 2 4 1 Description This command enables to perform authentication for user tokens based on MIFARE Classic 1K or 4K Before this command can be successfully executed the STORAGE CARD CMDS LOAD KEY command must have been executed 6 2 4 2 Format CLA INS P1 P2 Le Data in Where the data field is structured as follow Byte Value Description MC EE NN NN RE a Address LSB BA Number of the key to be used for authentication Information about memory structure of MIFARE Classic must be requested from NXP Semiconductors 6 2 4 3 Response Data Out SW1 SW2 4 4
20. 6 5 4 Commands for communicating with NFC Forum Tags Type 4 50 6 6 Escape IOCTL s supported in SCL3711 ccc eeeessssssssssnsensssnseesaeeaaeeaeeeeeeeeeeeeeeeeeeess 51 661 READER CNILESS GET ATS AI OB cocos 51 6 6 2 READER GET CARD TYPE POLLING eene 52 6 6 3 SBEADEBR CNTE ESSSSET IRE eet tete t aste Fuori 52 66 4 READER CNTEESS RE lt SWITOH aaa iia 53 6 65 READER CNTLESS DISABLE PPS uitia caue tdt 53 6 6 6 READER ENABLE DISABLE 848 ns 54 6 56 7 READER CNTEESS BAUDRATE iion iras REO D vs eere prensa nea ed 54 65 8 READER FORCE BAUDRALTE tnit na xcd bte coa 55 6 6 9 READER DISABLE NAK POLLING eene 56 6 60 10 FELICA PASSTAROUGA a ces tee de cedet tru Ut ortu 56 ANNEXES massa cosets acta ena neo than ide sums devel sd psi e cd C C e C a Move 57 fe O A TN 57 VT A le tone ane 57 7 012 Furtherintormauon about PO Sordera comede rao il 57 7 2 Annex B Mechanical drawings esse 58 SCL3711 REFERENCE MANUAL 1 Legal information 1 1 Disclaimers The content published in this document is believed to be accurate SCM Microsystems does not however provide any representation or warranty regarding the accuracy or completeness of its content and regarding the consequences of the use of information contained herein If this document has the status Draft its content is still under internal review and yet to
21. 7 D3F7 7F07 8840 2277 0 0 0 60 0000 0000 0000 0000 0000 0000 0000 0000 ZIEL ut Key A Recess Bits Data Bytes General Purpose Bytes Read Only Bytes Issuing the command APDU FF D6 00 09 1011 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Sw12 9000 OK Will have the following effect on the memory content TEST RAE E IN File Settings Help 3 Hardware W System sagi Mifare Standard Card type Mifare Standard Memory size 1024 Bytes Unique 10 FAS 92 6C D6 td Sector Hex o FAJA 6006 D208 NADO 4649 0652 AMEN 1008 GOXO0 PIAR OFOO O3E1 03E1 O3E1 O3E1 O3E1 O3E1 O3E1 46 4 4 4 4 4 4 03E1 O3E1 O3E1 OSE1 03E1 03E1 O3E1 4 4 A2A3 A4A5 7077 BOCI 2227 i6 Yxw A 2222 D102 2853 7091 010B 5402 656E 4E46 N Sp T enNF 4465 6D6F 5101 1555 0373 636D 6D69 C Demod U scmmi 6F2E 636F 6D2F 7363 6C33 3731 30FE cro com scl3710p D3F7 D3F7 7F07 8040 22 2272 2999 022222 0000 0000 0000 0000 0000 0000 0000 m 1111 1111 11131 1111 ILES 2421 111i sossa 0000 0000 0000 0000 0000 0000 0000 sies nn D3F7 D3F7 7F07 8840 2777 2227 0 0 0 0 6222 0000 0000 0000 0000 0000 0000 0000 T 0000 0000 0000 0000 0000 0000 0000 eres tot n 0000 0000 0000 0000 0000 0000 0000 nor D3F7 D3F7 7F07 8840 7777 277 0 0 0 0 62222 0000 0000 0000 0000 0000 0000 0000 RP Key A Access Bits Dara Bytes Read Only Bytes SCL3711 REFERENCE MANUAL 7
22. 8 5 4 Firmware 5 4 1 Transport protocol SCL3711 implements a transport protocol which is proprietary to NXP Semiconductors 5 4 2 Automatic PPS Automatic PPS implemented is implemented SCL3711 will automatically switch the highest baud rate commonly supported by the SCL3711 and the user token The maximum speed supported by SCL3711 is 848Kbps by default SCL3711 REFERENCE MANUAL 29 6 Commands description 6 1 Generic APDUs 6 1 1 Get UID Command 6 1 1 1 Description This command will retrieve the UID or SNR or PUPI of the user token This command can be used for all supported contactless technologies 6 1 1 2 Format CLA INS P1 P2 Data in Le Setting Le 0x00 can be used to request the full UID or PUPI is sent back e For ISO14443A possible lengths are 4 7 or 10 e For ISO14443B possible length is 4 bytes PUPI e For FeliCa or NFC Forum type 3 tags possible length is 12 bytes of NFCID e For NFC Forum type 1 tags possible length is 7 bytes of UID 6 1 1 3 Response Data Out Data SW1 SW2 6 1 1 4 Status Words SW1 SW2 Description 0x90 0x00 NO ERROR 0x62 0x82 WARNING specified Le is greater than data to be retrieved Ox6C OxXX ERROR Wrong Length OxXX is the exact value for Le Further error codes can be found in annex SCL3711 REFERENCE MANUAL 6 1 2 Get DATA Command 6 1 2 1 Description This command can be used to retrieve the ATS of an ISO IEC 14443 4A user token only 6 1 2 2 F
23. D CID etc __ Formatted Bullets and Numbering i 6 1 4 2 Format Data CLA INS P1 P2 P3 gt Formatted ue and Numbers 6 1 4 3 Response Output buffer PICC response data ___ Formatted Bullets and Numbering 6 1 4 4 Status Words NA __ Formatted Bullets and Numbering a 6 1 4 5 Example This command can be used to send commands to a MIFARE Ultralight C The command for generating an 8 byte random number on MIFARE Ultralight C is Ox1A 0x00 Sending the APDU OxFF OxEF 0x00 0x00 0x02 0x1A 0x00 Will return OxAF followed by 8 byte random number SCL3711 REFERENCE MANUAL 3 6 2 Set of APDU for contactless storage user tokens Command specific return codes are given under each command Please refer section 7 1 1 Status words table for common return codes 6 2 1 STORAGE CARD CMDS READ BINARY 6 2 1 1 Description Using this APDU application can read a memory block on user tokens based on technologies like MIFARE Classic 1K or 4K block size 0x10 bytes or MIFARE Ultra light block size 0x04 bytes 6 2 1 2 Format CLA INS P1 P2 Le e P2 indicates the block number from where to read e Le can be a short maximum value 255 or extended maximum value 65535 If Le 0x00 then all the bytes until the end of the file are read within the limit of 256 for a short Le field and 65536 for an extended Le field 6 2 1 3 Response Data Out Data SW1 SW2 6 2 1 4 Status Words SW1 SW2
24. Description 0x69 0x82 Security status not satisfied State of non volatile memory unchanged SCL3711 REFERENCE MANUAL 6 2 1 5 For a MIFARE Classic 1K card which has the following memory content Hardware Mifare Standard td Sector Hex o F 92 6CD6 D288 0400 1649 8652 1530 1006 OFOO O3E1 O3E1 OSE1 OSE1 OSE1 AOA1 A2A3 A4A5 032D D102 2853 4320 4465 6D6F 6372 6F2E 636F D3F7 D3F7 DIF 0000 0000 0000 0000 0000 0000 0000 0000 0000 D3F7 D3F7 D3F7 0000 0000 0000 0000 0000 0000 0000 0000 0000 D3F7 D3F7 D3F7 0000 0000 0000 O3E1 OSE1 7877 7091 5101 6D2F 7F07 0000 0000 0000 7F07 0000 0000 0000 7F07 0000 Card type Mifare Standard Memory size 1024 Bytes Unique ID FA 92 6C D6 03E1 OS 1 88c1 0108 1555 7363 8840 0000 0000 0000 6840 0000 0000 0000 8840 0000 03E1 O3E1 OSE1 OSE1 Example 03E1 O3E1 N Sp T enNF C DemoQ U scmmi cro com sc13710p 6 0 0 0 022227 Data Bytes Read Only Bytes KeyB AC AC Write Read 34 To read the seventh block you have to issue the following command and get the following response APDU FF BO 00 06 10 Sw12 9000 OK DataOut 63 72 6F 2E 63 6F 6D 2F 73 63 6C 33 37 31 30 FE 16 byte s SCL3711 REFERENCE MANUAL 35 6 2 2 STORAGE CARD CMDS WRITE BINARY 6 2 2 1 Description This APDU writes data pattern in to a memory address 6 2 2 2 Format CLA NES Data in P1 P2 Lc Where
25. E 848 6 6 6 1 Description This escape message can be used to enable disable 848kbps support and to get the current state of the 848kbps support Applications may call this function to enable disable 848kbps support 6 6 6 2 Input buffer Byte Value Description 6 6 6 3 Output buffer Byte Configuration parameter Output buffer value from input buffer 0x00 or 0x01 NULL OxFF 0x00 if 848kbps disabled 0x01 if 848kbps enabled 6 6 7 READER CNTLESS BAUDRATE 6 6 7 1 Description This escape message can be used to get the actual communication baud rate between SCL3711 and the user token 6 6 7 2 Input buffer Byte Value Description 6 6 7 3 Output buffer Comment Nibble X corresponds to the baudrate from user token to SCL3711 Nibble Y corresponds to the baudrate from SCL3711 to user token Baudrate Nibble value 106kbps 0x0 212kbps 0x1 424kbps 0x2 SCL3711 REFERENCE MANUALS 6 6 8 READER FORCE BAUDRATE 6 6 8 1 Description This escape command is used to force baud rate between the SCL3711 and the user token Once sent the card needs to be disconnected and reconnected before the specific setting is adopted 6 6 8 2 Input buffer Byte Value Description Escape command code command code a ee baudrate specified by the card Force baudrate En a OxAB Byte present only if B1 0x01 Nibble A is the baudrate between SCL3711 and user token Nibble B is the baudrate between user tok
26. EQD 0 5 2 Utilities NA SCL3711 REFERENCE MANUAL 22 5 3 Driver The driver for Windows platforms is based on Microsoft WDF architecture 1 09 The driver package contains INF SYS CAT and the co installer DLL required for the WDF architecture 5 3 1 SCL3711 listing SCL3711 enumerates as SCL3711 NFC amp RW After the driver is installed SCL3711 appears in Windows resource manager as SCL3711 reader amp NFC device SCL3711 is listed by PC SC applications as SCM Microsystems Inc SCL3711 reader amp NFC device N Where N 0 if only one SCL3711 is connected but is incremented in case several SCL3711 are connected to the host 5 3 2 Supported operating systems Operating systems supported by the driver e Windows 2000 SP4 e Windows 2003 Server 32 64 bit e Windows XP 32 amp 64 bit oS e Windows Vista 32 64 bit e Windows Server 2008 32 amp 64 bit e Linux 32 amp 64 bit e MACOSX SCL3711 REFERENCE MANUAL 23 5 3 3 PC SC 2 0 compliant ATR 5 3 3 1 Determining the technology of the user credential The ScardControl method of PC SC see http msdn microsoft com en us library aa379474 VS 85 aspx should be used to send the 0x90 IOCTL to SCL3711 in order to determine what type of technology is the user token based on The output buffer is a BYTE with the following meaning Technology Value MIFARE1K 0x01 MIFAREAK 0x02 MIFARE Ultralight 0x03 and Ultralight C ISO14443 4A ISO14443 4B
27. Status Words Description LX 0x00 WARNING no further info m has ci status not satisfied 0x84 Referenced key not usable Key type not known SCL3711 REFERENCE MANUAL 8D 6 2 4 5 Example For a MIFARE Classic 1K card which has the following memory mapping CPU card Mifare Standard Card type Mifare Standard Memory size 1024 Bytes Unique ID FA 92 6C D6 td KeyB AC AC Sector Hex Write Read o FA92 6CD6 D280 NADO 4649 8652 ASIN 1008 w OFOO 03E1 O3E1 O3E1 O3E1 O3E1 O3E1 O3E1 03E1 O3E1 O3E1 O3E1 OSE1 OJEL O3E1 OSE1 AOAL A2A3 AdA5 7077 00C1 2227 7772 2202 032D D102 2853 7091 010B 5402 656E 4E46 4320 4465 6D6F 5101 1555 0373 636D 6D69 6372 6F2E 636F 6D2F 7363 6C33 3731 30FE cro com scl3710p D3F7 D3F7 D3F7 7F07 8040 2272 222 092222 0000 0000 0000 0000 0000 0000 0000 0000 1111 1111 1111 1111 1111 1111 1111 1111 0000 0000 0000 0000 0000 0000 0000 0000 D3F7 D3F7 DIF 7F07 8840 7777 7929 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 D3F7 D3F7 D3F7 7F07 8840 7777 7772 2292 0000 0000 0000 0000 0000 0000 0000 0000 Key A Recess Bits Data Bytes General Purpose Bytes Read Only Bytes Authenticating with Key A against sector 0 would require sending the following sequence of APDU APDU FF 82 00 60 06 40 41 42 43 A4 AS 5412 9000 OK APDU FF 86 00 00 05 01 00 02 60 00 gt SW12 9000 OK Authenticating with Key A
28. b4 b3 b2 b1 bO Most significant nbble Least significant nibble lt 1 Byte 8 bits 2 nibbles gt Byte number 2 Byte number 11 Array of 12 bytes gt Example 163 in decimal is represented o in hexadecimal as 0xA3 e in binary as 1010001 1 b The least significant nibble of OxA3 is e 0x8 in hexadecimal e 0011 b in binary The most significant nibble of xA3 is e OxA in hexadecimal o 1010 b in binary SCL3711 REFERENCE MANUAL AR 3 General information about SCL3711 3 1 SCL3711 key benefits With its functional solid mechanical design that has no removable parts that you may loose SCL3711 is perfect for mobile uses While being slim SCL3711 dimensions have been optimized to ensure best RF performance possible with such a form factor The state of the art multi protocol feature set of SCL3711 qualifies it to be used in a wide range of applications such as payment loyalty and ID schemes or to enable devices with NFC connectivity As a latest generation product SCL3711 can be supported by SCM s middleware that resides above the PC SC API and offers better portability of applications and abstraction of smart card related details that need to be handled by applications developed on top of the PC SC API 3 2 SCL3711 key features o Multi protocol 13 56MHz contactless reader o 15014443 type A amp B o MIFARE Classic DESFire UL
29. be formally validated SCM Microsystems reserves the right to change the content of this document without prior notice The content of this document supersedes the content of previous versions of the same document The document may contain application descriptions and or source code examples which are for illustrative purposes only SCM Microsystems gives no representation or warranty that such descriptions or examples are suitable for the application that the reader may want to use them for Should you notice problems with the provided documentation please provide your feedback to support scmmicro com 1 2 Licenses If the document contains source code examples they are provided for illustrative purposes only and subject to the following restrictions e You MAY at your own risk use or modify the source code provided in the document in applications you may develop You MAY distribute those applications ONLY in form of compiled applications e You MAY NOT copy or distribute parts of or the entire source code without prior written consent from SCM Microsystems e You MAY NOT combine or distribute the source code provided with Open Source Software or with software developed using Open Source Software in a manner that subjects the source code or any portion thereof to any license obligations of such Open Source Software If the document contains technical drawings related to SCM Microsystems products they are provided for documentation p
30. e downloaded from the PC SC workgroup web site www pcscworkgroup com Further information on the Microsoft resource manager API can be found online on htto msdn microsoft com en us library aa380149 VS 85 aspx SCL3711 REFERENCE MANUAL 7 2 Annex B Mechanical drawings yA A 5 INAN 58
31. e is 0x01 SCL3711 REFERENCE MANUAL A 6 5 3 2 Request Service Description This command is used to know the area key version of the specified area and the service key version of the specified service of FeliCa card Format Data CLA INS P1 P2 P3 OxFF 0x42 Number of 0x00 2 P1 Service Code List services areas Area Code List Response Data SW1 SW2 8 bytes IDm No of Service or areas n 0x90 0x00 Service version or area version list 2 n 6 5 3 3 Request response Description This command is used to know the current mode Mode 0 1 2 of the Felica card Format CLA INS P1 P2 P3 Data Response Data SW1 SW2 8 bytes IDm Mode 0x90 0x00 6 5 3 4 Read Description This command is used to read the record value of the specified service of the Felica card Format Data CLA INS P1 P2 P3 OxFF 0x46 Number of Number of 2 P1 P2 Service Code List services blocks Block List Response Data SW1 SW2 8 bytes IDm Status Flag 1 Status Flag 0x90 0x00 2 No of blocks n Block data n 16 SCL3711 REFERENCE MANUAL 50 6 5 3 5 Write Description This command is used to write the records of the specified service to the Felica card Format Data CLA INS P1 P2 P3 OxFF 0x48 Number of Number of 2 P1 P2 Service Code List services blocks 16 P2 Block List Block Data Response Data SW1 SW2 8 bytes IDm Status Flag 1 Status Flag 2 0x90 0x00 6 5
32. en and SCL 3711 Nibbles are coded as follow b2 bi UNI 6 6 8 3 Output buffer Byte Value ma noa SCL3711 REFERENCE MANUAL 56 6 6 9 READER DISABLE NAK POLLING 6 6 9 1 Description This escape command can be used to enable disable NAK Polling by SCL3711 once a user token has been selected 6 6 9 2 Input buffer Byte Value Description Bo OxAC Escape command code B1 Enable NAK Polling 0x01 Disable NAK Polling Gets Current state of NAK polling 6 6 9 3 Output buffer Byte Configuration parameter Output buffer value from input buffer 0x00 or 0x01 NULL OxFF 0x00 NAK polling enabled 0x01 NAK polling disabled 6 6 10 FELICA PASSTHROUGH 6 6 10 1 Description This escape command can be used to send FeliCa commans as defined in JIS X 6319 4 specification SCL3711 will add the transport level protocol data required 6 6 10 2 Input buffer Byte Value Description Escape command code FeliCa command code N bytes Data depends on the cmd code 6 6 10 3 Output buffer Byte Output buffer Depends on the command code SCL3711 REFERENCE MANUAL 57 7 Annexes 7 1 Annex A 7 1 1 Status words table SW1 SW2 Description INVALID INSTRUCTION BYTE 0x00 CLASS NOT SUPPORTED 0x00 AUTHENTICATION ERROR STATUS COMMAND FAILED 0x68 0x00 CLASS BYTE INCORRECT FUNCTION NOT SUPPORTED WRONG PARAMETER P1 P2 7 1 2 Further information about PC SC The PC SC specifications can b
33. he carrier frequency of the magnetic field is used as a fundamental clock signal for the communication between the reader and the card It is also use as a fundamental clock input for the integrated circuit microprocessor to function To send data to the user token the reader modulates the amplitude of the field There are several amplitude modulation and data encoding rules defined in ISO IEC 14443 and ISO IEC 18092 The reader should refer to those standards for further details To answer to the reader the integrated circuit card of the user token modulates its way of loading impedance the field generated by the reader Here also further details can be found in ISO IEC 14443 and ISO IEC 18092 In the ISO IEC 14443 standard the reader is called the proximity coupling device PCD n the ISO IEC 14443 standard the user token is called proximity integrated chip card PICC SCL3711 REFERENCE MANUAL 3 5 3 Recommendations The communication between the reader and the user token is sensitive to the presence of material or objects interfering with the magnetic field generated by the reader The presence of conductive materials like metal in the vicinity of the reader and the user token can severally degrade the communication and even make it impossible The magnetic field of the reader generates Eddy or Foucault s currents in the conductive materials the field is literally absorbed by that kind of material It is recommended for proper
34. he user token exposes its ATS or application information which is mapped to an ATR The table describes how this mapping is done Byte Value Designation Description CS RR n indicates the number of historical bytes in following ATR 0x80 TD1 Nibble8 indicates no TA2 TB2 TC2 Nibble O means T 0 0x01 Nibble8 indicates no TA3 TB3 TC3 Nibble 1 means T 1 4 3 n Historical Type A the historical bytes from the ATS up to 15 bytes bytes application Type B 8 bytes information Byte 0 through 3 application data from ATQB Byte 4 through 6 protocol info byte from ATQB Byte 7 higest nibble is the MBLI maximum buffer length index from ATTRIB lowest nibble is OxO Example of the ATR built for an I5O14443 4 user tokens Type A Type B dj SCM Smartcard Commander N MAX d SCM Smartcard Commander h MAX File Edit Settings Help File Edit Settings Help Hardware System 3 System 2 X SCL3711 Ne SCL3711 gt Electronic Passport BR Electronic Passport 1 TR i E i CPU card 3B 89 80 01 80 67 04 12 60 03 02 01 00 49 3B 88 80 01 00 00 00 00 73 81 93 00 68 Yalue hex Meaning Byte Yalue hex Meaning direct TS 3B direct 9 historical characters TO 88 8 historical characters protocol 0 TDi 80 protocol 0 protocol 1 TD2 01 protocol 1 Historical Hex 80 67 04 12 60 03 02 01 00 Historical Hex 00 00 00 00 7381 9300 Historical ASCII Historical ASCII dro hi QS Checksum QS 68 Checksum SCL3711 REFERENCE MANUAL 2
35. its microprocessor at higher speeds 15 SCL3711 REFERENCE MANUAL 16 3 6 Applications 3 6 1 General SCL3711 is a transparent reader designed to interface a personal computer host supporting PC SC interface with 13 56MHz user tokens like public transport cards contactless banking cards NFC forum tags electronic identification documents e g e passports e ID cards driving licenses etc Those user tokens can have several form factors like credit cards key fobs NFC mobile phones or USB dongles like SCT3511 or MAXX Lite that SCM Microsystems markets USB link RF link 13 56MHz PC SC interface 18014443 18092 NFC interface N NN A T7 2 Tokens Host SCL3711 Application logic User personal data for given set of applications Application logic Interface device SCL3711 itself handles the communication protocol but not the application related to the token The application specific logic has to be implemented by software developers on the host 3 6 2 Applications provided by SCM Microsystems SCM Microsystems does not provide payment or transport applications SCM Microsystems provides a few applications for development and evaluation purposes that can function with SCL3711 They are available within the software development kit There are many tools provided but the two main ones are e The NFC forum tag reader writer is a standalone application that enables the u
36. least significant nibble is 0x3 or 0011 b and the most significant nibble is OxA or 1010 b Proximity Coupling Device PC SC Personal Computer Smart Card software interface to communicate between a PC and a smart card PID ProductID SO b The byte value YY is represented in hexadecimal SCL3711 REFERENCE MANUAL 70 2 5 References Doc ref in Description Issuer the manual ISO IEC Identification cards Integrated circuit s cards ISO IEC 7816 4 with contacts Part 4 Interindustry commands for interchange ISO IEC 7816 4 1995 E ISO IEC Identification cards Contactless integrated ISO IEC 14443 4 circuit s cards Proximity cards Part 4 Transmission protocol ISO IEC 14443 4 2001 E ISO IEC Information technology Telecommunications ISO IEC 18092 and information exchange between systems Near Field Communication Interface and Protocol NFCIP 1 ISO IEC 18092 2004 E tag type 1 tag type 2 tag type 3 tag type 4 Personal Computer Systems v2 01 User manual of the NFC wrapper This manual wrapper is part of SCM s Contactless SDK CCID Specification for Integrated Circuit s Cards USB IF Universal Serial Bus Specification 2 0 USB IF SCL3711 REFERENCE MANUAL A 2 6 Conventions Bits are represented by lower case b where followed by a numbering digit Bytes are represented by upper case B where followed by a numbering digit Bit number 5 xy Bit number 0 Y b7 b6 b5
37. onse buffer size out LPDWORD IpBytesReturned Total number of BYTES returned from the ariver 6 6 1 READER CNTLESS GET ATS ATQB 6 6 1 1 Description This escape command can be used to retrieve the ATS bytes of the type A or the ATQB bytes of the type B card present in front of the SCL3711 6 6 1 2 Input buffer Byte Value Description BO 0x93 Escape command code 6 6 1 3 Output buffer The output buffer is Byte Output buffer SCL3711 REFERENCE MANUAL 52 6 6 2 READER GET CARD TYPE POLLING 6 6 2 1 Description Using this escape command one can retrieve the type of the technology which the reader is configured to poll for 6 6 2 2 Input buffer Byte Value Description BO 0x94 Escape command code 6 6 2 3 Output buffer Byte Output buffer Bo Configuration register The output buffer contains 1 byte which is coded as follow b5 b4 b3 b2 b1 bO Felica 424 Felica 212 Type B Type A Bit value 1 means SCL3711 will poll for that technology bit value O means SCL3711 will not poll for this value A reader configured to poll only for type A and type B will therefore answer 0x03 i e 00000011 b to this command 6 6 3 READER CNTLESS SET TYPE 6 6 3 1 Description This escape command can be used to configure the polling loop of SCL3711 Applications may use this to optimize the detection speed performance of their system 6 6 3 2 Input buffer Byte Value Description
38. ormat CLA INS P1 P2 Lc 6 1 2 3 Response Data Out ATS SW1 SW2 6 1 2 4 Status Words SW1 SW2 Description 0x90 0x00 NO ERROR 30 SCL3711 REFERENCE MANUAL AA 6 1 3 T CL user Command 6 1 3 1 Description This command can be used to send raw data to the user token SCL3711 will add T CL protocol data to the raw data you send __ Formatted Bullets and Numbering i 6 1 3 2 Format Data CLA INS P1 P2 P3 __ Formatted Bets and Numbers 6 1 3 3 Response Data Out PICC response data SW1 SW2 ___ Formatted Bullets and Numbering 6 1 3 4 Status Words Description User should refer to the status words defined by the PICC manufacturer for a description of the status words 6 1 3 5 Example Let s consider the Select command defined in ISO7816 4 This command being ISO can be sent to the user token in 2 different way e Using the T CL command e Using the T CL user command Here are the 2 answers for the select command ATR length 14 ATR 56 69 80 01 40 54 43 4F 55 73 01 01 01 3c APDLI 00 44 00 00 SW12 9000 OK APDU FF FE 00 00 04 00 44 00 00 512 9000 OK The T GL command is nevertheless more useful for sending commands which are not defined in SO7816 SCL3711REFERENCEMANUAL 32 6 1 4 PASS THROUGH command 6 1 4 1 Description This command can be used to send raw data to the user token SCL3711 will not add transport protocol data to the raw data e g PCB NA
39. perating systems sisi 22 Ds POS6 2 0 COM AN All RES ee men Meet 23 ee ENDE ns Da ELA EL AN 28 o4 MANS PON DEOIDEOL scans 28 S42 PROM AUC ARS a i 28 Commands GESCHPUOM recitales dl bara ri bl sp 29 o Generic APDUSCc imi vec in 29 6 1 1 Ger UID omia Sasa tai dubia com buses bout iue cd Ep xau Mut epa ut UEM nn 29 res CELDAS us oec ne nee ee tee 30 o3 TESS io a Da 31 6 1 4 PASS THROUGH command essssseeseseseeeen nennen nennen nenne nnn nnns 32 6 2 Set of APDU for contactless storage user tokens 33 6 2 1 STORAGE CARD CMDS READ BINARY een 33 6 2 0 STORAGE CARD CMDS WRITE BINARY ern 35 6 2 3 STORAGE CARD CMDS LOAD KEYS eee 37 6 2 4 STORAGE CARD CMDS AUTHENTICATE eese 38 6 2 5 STORAGE CARD CMDS VALUE BLOCK RL 40 6 3 Set of APDU for ISO IEC 14443 4 user tokens oooccccccccoconoccconcnocononanncnnnonononannncnnnnonoos 41 Gat TEGL COmMMN kanada aaa dd rc dui Fo m dux Diane 41 6 4 MIFARE DESFire commands uos tet orto deus reta e Ue rre EO aves tcs bined Eve ete Ere ead 42 6 5 Set of APDU defined by SCM Microsystems sse 42 6 5 1 Commands for communicating with NFC Forum Tags Type 1 42 6 5 2 Commands for communicating with NFC Forum Tags Type 2 48 6 5 3 Commands for communication with NFC Forum Tags Type 3 48
40. sage of wrapper the different NFC Forum tags with the ee a pian dei Oe SCL3711 and other SCM contactless ando CNE readers It provides a unique API to DNI application developers which enables them ame n to read and modify NDEF records without further knowledge of the underlying Firmware hardware and protocols Detailed information about the NFC wrapper can be found in SCM s Contactless SDK The SCL3711 driver implements PC SC v2 0 API towards upper layers The SCL3711 driver for Windows platforms is based on the Windows Driver Framework WDF version 1 09 SCL3711 REFERENCE MANUAL 78 4 2 Quick reference data 4 2 1 SCL3711 dimensions Item Characteristic Value 10 2 Grams External dimensions mm 65 4 L x 24 W x 10 H Cable length Default color BLACK Textured Finish Default logo SCM logo SCL3711 Panny BARCODE 128 21 12 Y VV VV MANN MN NN 5 N 2112Y Y WWMNNNNN Default label P N BD5108 FCC ID MBPSCL3741 0200 UL 5 ROHS ws wes st ERES ven Made in China by SCM Microsystems 2d Drawing with dimensions of the SCL3711 and accessories can be found in annex 4 2 2 LED behavior The LED behavior of the SCL3711 is given below SCL3711 states LED Indication GREEN 4 2 3 Other data Parameter Value Description Low bus powered SCL3711 draws power from USB bus Voltage 5V DC characteristics Max Current 100mA Suspend current 260uA Clock of the device Max 27
41. ser to read and write NFC forum compliant records into NFC forum compatible tags It is an easy to use tool to configure rapidly NFC forum tag demonstrations e Smart card commander version 1 1 provides a module which for NEC forum tags that parses and presents in XML format the content of the tag Smart card commander also contains powerful scripting functionality which can be very useful for developers to develop and debug their applications SCL3711 REFERENCE MANUAL 7 4 SCL3711 characteristics 4 1 SCL3711 high level architecture 4 1 1 Block diagram The link between SCL3711 and the host to which it is connected is the USB interface providing both the power and the communication channel m monos NFC controller EMC filter T PN533 NXP Matching circuitry E LED SCL3711 is based designed around an NFC controller which handles the USB communication to the host and the RF communication This controller ensures the coding decoding framing modulation demodulation required for the RF communication The matching circuitry provides the transmission and receiver paths adaptation for the antenna to function properly 4 1 2 Software architecture Applications can interface with the driver directly through the PC SC interface or Application through the SCM proprietary interface to the SCM API for POP and NFC wrapper ee A extra services a SCM s NFC The NFC wrapper simplifies the u
42. tems 6 5 1 Commands for communicating with NFC Forum Tags Type 1 Commands for Static and Dynamic Memory Models e Read Identification RID e Read All Blocks 0 Eh RALL e Read Byte READ Commands for Dynamic Memory Model e Read Segment RSEG e Read 8 Bytes READ8 e Write No Erase 8 Bytes WRITE NE8 6 5 1 1 Read Identification RID Description This command is used to retrieve the tag s unique identifier Format CLA INS P1 P2 P3 Data Response Data SW1 SW2 HRO HR1 UIDO UID1 UID2 UID3 0x90 0x00 SCL3711 REFERENCE MANUAL 6 5 1 2 Read All Blocks RALL Description The RALL command reads out the two header ROM bytes and the whole of the static memory blocks 0x0 OxE Format CLA INS P1 P2 P3 Data Response Data SW1 SW2 HRO HR1 120 bytes Blocks 0x0 OxE 0x90 0x00 Example For a Topaz based user token that has the following memory content E SCM Smartcard Commander A l BAX File Settings Help cpu card Card type Topaz card Memory size 120 Bytes Memory Model Static Unique ID 07 83 3C 00 00 02 25 o 0783 3C00 0002 2500 E110 OEOD 0326 D102 2153 7091 0108 5501 7465 7374 2E64 6511 0104 5405 656E 2D55 5354 6573 7451 0301 6163 7400 FEOO 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 5555 AAAA 0000 0000 Bs 0160 0000 0
43. urposes only SCM Microsystems does not grant you any license to its designs 1 3 Trademarks MIFARE is a registered trademark of NXP Semiconductors BV FeliCa is a registered trademark of Sony Corporation Jewel and Topaz are trademarks of Innovision Research and Technology Plc Windows is a registered trademark of Microsoft Corporation SCL3711 REFERENCE MANUAL 2 Introduction to the manual 2 1 Objective of the manual This manual provides an overview of the hardware and software features of the SCL3711 multiprotocol mobile contactless reader hereafter referred to as SCL3711 This manual describes in details interfaces and supported commands available for developers using SCL3711 in their applications 2 2 Target audience This document describes the technical implementation of SCL3711 The manual targets software developers It assumes knowledge about 13 56 MHz contactless technologies like ISO IEC 14443 and commonly used engineering terms Should you have questions you may send them to support scmmicro com 2 3 Product version corresponding to the manual Item Version SCL3711 REFERENCE MANUAL 9 2 4 Definition of various terms and acronyms NFC Forum tag type 3 NFC Data Exchange Format data structure defined by the NFC Forum for NFC Forum tags Near Field Communication Nibble Group of 4 bits 1 digit of the hexadecimal representation of a byte Example OxA3 is represented in binary as 10100011 b The
Download Pdf Manuals
Related Search