HID OMNIKEY 5553 User Manual
  1. Manuals
  2. Brands
  3. HID Manuals
  4. Rfid Systems
  5. OMNIKEY 5553
  6. User manual
HID OMNIKEY 5553 User Manual

HID OMNIKEY 5553 User Manual

Multi-iso (hid5553) rfid reader
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
15370 Barranca Parkway
Irvine, CA 92618-2215
®
OMNIKEY
Multi-ISO (HID5553) RFID Reader
USER MANUAL
© 2005-2011 HID Global Corporation. All rights reserved.
1508-USM-00-0-04
Firmware Version 1.2.5
May 2011
Doc Number: 1508-USM-00, Rev E.0

Advertisement

Table of Contents
loading

Related Manuals for HID OMNIKEY 5553

Summary of Contents for HID OMNIKEY 5553

  • Page 1 15370 Barranca Parkway Irvine, CA 92618-2215 ® OMNIKEY Multi-ISO (HID5553) RFID Reader USER MANUAL © 2005-2011 HID Global Corporation. All rights reserved. 1508-USM-00-0-04 Firmware Version 1.2.5 May 2011 Doc Number: 1508-USM-00, Rev E.0...
  • Page 2 Phone: +44 1440 714 850 Fax: +44 1440 714 840 support.hidglobal.com HID GLOBAL, HID, the HID logo, and OMNIKEY are the trademarks or registered trademarks of HID Global Corporation, or its licensors, in the U.S. and other countries. Page 2 of 132 May 2011 ©...

  • Page 3: Table Of Contents

    Selection Time-Out ISO 15693 (1Ah) ..................30 2.2.19 Protocol Configuration 3 (1Bh) ....................30 2.2.20 Modulation Conductance 0 (1Dh).....................31 2.2.21 Threshold (1Eh)........................31 2.2.22 Protocol Configuration 4 (20h)....................32 2.2.23 CID (21h)..........................32 May 2011 Page 3 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 4 User data..........................115 4.5 ICODE EPC ........................... 116 4.5.1 Memory organization ......................116 4.5.2 Serial number ......................... 116 4.5.3 Read Block ..........................116 4.5.4 Write Block ..........................116 Page 4 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 5 Figure 18 - RS422 Configuration - Jumper 3 Pin Out................125 Figure 19 - RS485 Configuration - Jumper 3 Pin Out................126 Figure 20 - Jumper 4 Pin Out - Top View ....................126 May 2011 Page 5 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 6 Table 17 - J3 pins in RS422 Configuration - Electrical Characteristics ............ 125 Table 18 - J3 pins in RS485 Configuration - Electrical Characteristics ............ 126 Table 19 - J4 pins - Electrical Characteristics................... 127 Page 6 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 7: Scope

    1508-USM-00-0-05 Scope The HID HF Multi ISO Reader Module supports a broad range of tags compliant with ISO 14443 type A and B standards, including SR176 tags, tags which belong to the NXP MIFARE family, ISO 15693 tags, ISO 18000-3, EPC and UID tags. An open command structure allows the device to communicate with tags that use an operating system.

  • Page 8: Overview

    Key Transfer Transponder Least Significant Bit or Byte Most Significant Bit or Byte Node Address (ISO 14443-4) Open System Interconnection One time programmable Protocol Control Byte (ISO 14443-4) Page 8 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 9 Serial Number of a tag (a 32 bit number) Start of frame TDES Triple DES Value block 32 bit data block format. Used in ticketing application <CR> Carriage return (0Dh) <LF> Line feed (0Ah) May 2011 Page 9 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 10: Supported Tags

       SR176    SLIX 4K   ASK GTML2 ISO   ASK GTML extended setup needed   Sharp B Sharp Page 10 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 11 TempSense   Temperature logging ICode ICode®    ICode® EPC       ICode® UID Performance varies Performance varies May 2011 Page 11 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 12: 5553 Reader Core - Multi Iso

    Dimensions All dimensions listed in millimeters. 30,48 mm 29,21 mm 1,27 mm 25,40 mm 1,27 mm 2,54 mm Figure 1 - Reader Core - Top View Page 12 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 13: Jumper 1 Details

    SAM clock 25mA 3,39MHz SAM IO 25 mA IO for SAM Input and SAM Output SAM RESET 25 mA SAM Reset 25 mA Request to Send May 2011 Page 13 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 14: Jumper 2 Details

    Thus, a series resistor of 50-100 should be used when applying a "low" level to the MCLR/VDD, rather than pulling this pin directly to GND. Schmitt trigger buffer input Page 14 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 15: External Connections

    Insufficient power line filtering could cause unexpected or irregular performance drops. +5V DC OEM Board Figure 2 - Power Supply Option 1 May 2011 Page 15 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 16: Antenna

    L ANT Figure 4 - Typical Antenna Tuning More details about the antenna design are available in the HID Antenna Design guide. Download this document from http://www.hidglobal.com/Omnikey. Reference the specific application notes for the NXP reader IC (MIFARE & I-Code, Micore Reader IC family Directly Matched Antenna Design).

  • Page 17: Serial Interface

    OEM Board 330 Ohm 330 Ohm Figure 7 - Connecting External LEDs - Option 2 In both cases the LED supply voltage levels are TTL levels. May 2011 Page 17 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 18: Sam Connector/Socket

    PIN-outs for 8 Pin SAM Socket and 6 Pin SAM Socket is shown in Appendix Note: The SAM interface hardware does not support error repetition and does not check the parity bit. Page 18 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 19: Software

    HyperTerminal, and the data is transmitted as ASCII hexadecimal that can be easily displayed on the terminal program. Command Data Variable length Variable length May 2011 Page 19 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 20: Binary Protocol

    Bit 1 & 2 defines how to interpret the data in the binary frame. Bit 2 Bit 1 Description No leading character available, all values are hexadecimal. The data contains one leading character. All data bytes are characters. Page 20 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 21 The automatic binary time-out (see Protocol Configuration 1 (0Bh), page 23) is used to detect incomplete binary frames. 2.1.2.9 Examples Station ID Length ‘x’ This instruction frame will reset the reader module with the station ID 64h. May 2011 Page 21 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 22: Register Set

    SR176 Selection Time-out ISO 15693 Selection Time-out Protocol configuration 3 Page Start Modulation conductance 0 (Type B and SR176. Also ISO15693 if set to 10% modulation) Threshold Page 22 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 23: Unique Device Id (00H - 04H)

    The Multitag flag will enable multi-tag recognition in continuous read mode. All tags are detected and displayed. Due to the more complex search algorithm, the continuous read command decreases its detection speed. May 2011 Page 23 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 24 If sending ISO 14443-3 commands this flag has to be switched off. The transfer data telegram command is only supported in normal mode, not in transmit / receive mode. Page 24 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 25 4 bytes 3 bytes 1 byte 1 byte 1 byte For detailed description of Application Data, Protocol Info and MBLI/CID, refer to the ISO 14443 documentation [1]. May 2011 Page 25 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 26: Baud, Baud Rate Control Register (0Ch)

    No flow control 2.2.5.1 CF Card Version The Baud rate of the CF Card version is limited to 115200 baud. 230400 and 460800 are not supported. Page 26 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 27: Command Guard Time (0Dh)

    The RF time-out is used as reader card communication time-out. One time slice is around 300µs. The longest time-out value is 19.7 seconds (FFFFh). Value 0000h is not allowed and internally set to 0001h. May 2011 Page 27 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 28: Type B Framing Register (12H)

    Disable start-up message: bit 1 (default 0) If Disable start-up message is set, the reader suppresses the start-up message in ASCII mode. This flag is ignored in binary protocol mode. Page 28 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 29: Reset Off Time (14H)

    The AFI (Application Family Identifier) is only supported for ISO14443B and ISO15693 tags. If the set value is different from 00h, the AFI is used. Only transponders with an identical AFI will answer to the reader. May 2011 Page 29 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 30: Selection Time-Out Iso 14443A (17H)

    If set the continuous read mode retrieves the content of the tag instead of the serial number. The register Page Start (1Ch) defines the start block and the Page Number (1Fh) defines the number of blocks to be read. Page 30 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 31: Modulation Conductance 0 (1Dh)

    The higher nibble of the Threshold register defines the minimum accepted signal strength at the decoder input. The lower nibble of the Threshold register defines the collision level. For further information, refer to the NXP documentation. [6] May 2011 Page 31 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 32: Protocol Configuration 4 (20H)

    The Card Identifier (CID) is used to activate multiple ISO 14443-4 cards at the same time. If only one tag at the same time is used this value should be left 0. Page 32 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 33: Rxwait (22H)

    0 For more information refer to Modulation Conductance 0 (1Dh), page 31 and Set target modulation conductance register, page 54. 2.2.28 User data (80h - EFh) These registers are for free use. May 2011 Page 33 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 34: Command Set

    2.3.1.29, page 61 'wd' Write data (multiple blocks) 2.3.1.30, page 62 'wp' Write EEPROM register 2.3.1.31, page 63 Reset 2.3.1.32, page 63 Field reset 2.3.1.33, page 64 Page 34 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 35: Table 6 - Card Specific Commands

    Invalid value format, specified block does not match the value format ‘N’ No tag in the field Operation mode failure or file not selected ‘R’ Command parameter out of range Authentication failed May 2011 Page 35 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 36: Common Command Details

    No KTT found, other tag was detected Prepare for KTT is in awareness mode Heartbeat check is not applicable. no response Key uploading is in progress. Page 36 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 37 Reading any block (even the manufacturer block) of the transponder will increase your security. 2.3.1.2.6 LED activity The LED stays green as long as a tag was found; going dark if the tag is removed from the field. May 2011 Page 37 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 38 1, the basic test loop is repeated, adding approximately 6mS to the timeout period. 2.3.1.3.3 This is the UID of the tag the reader is checking. It may be 4, 7 or 10 bytes. Page 38 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 39 Encrypted / Decrypted data (8 bytes) Option byte Option byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 Encode Key Length Key Index May 2011 Page 39 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 40 The station ID has only effect in binary mode. Command Command Data None Answer Answer Description Data Station ID of the reader device (1 byte) Page 40 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 41  01  03 Reader (03) Reader (04)  04 Reader (254)  254 2.3.1.6.2 Binary Protocol Version 2 This command never sends version 2 binary frames. May 2011 Page 41 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 42 A2h … forces reader to 212kBaud from tag to reader A4h … forces reader to 424kBaud from tag to reader A8h … forces reader to 848kBaud from tag to reader Page 42 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 43 Description 106kBaud 212kBaud 424kBaud 848kBaud The higher nibble contains the frame size used for the air interface. Frame Size Description 16 Bytes 24 Bytes 32 Bytes May 2011 Page 43 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 44 See Protocol Configuration 3 (1Bh), page 30 for more information on Extended ID. The RATS answer is inserted between the serial number and baud rate / frame size byte for ISO14443 A tags. Page 44 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 45 Responding tag supports a 256-byte frame size and 424kBaud on the air interface – hw88 0A 20 32 ‘N’ After a reset/recovery period, the reader searched for tags for 200mS (4 * 32h). None found. May 2011 Page 45 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 46 Error: Block already locked Example Command Description Lock block 05. 2.3.1.9.1 Apply settings After locking a block permanently, the tag needs to be selected for the settings to apply. Page 46 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 47 In this case, the ISO 15693 tag always answers on a multi list command even if there was no previous field reset. In this case, deactivate ISO 14443 B and SR 176 tags. May 2011 Page 47 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 48 Kbaud setting is not stored, so the reader cannot open at this speed. The host either remembers the original COM speed or auto-detects the reader settings. Command Command Data ‘o#’ Answer Answer Description C0h 03h Select High Speed acknowledge Page 48 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 49 Command code + String of tag type Tag type character Refer to Set tag type, page 50. Example Command Description Exclude ISO14443-A from the tag types addressed by the reader May 2011 Page 49 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 50 Sets the reader device to address ISO14443-A type tags. Innovision Jewel tag Innovision Jewel tag is part of ISO 14443 Type A. It can not be separately switched on/off. Page 50 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 51 Data (1 byte) Current state of changed flag. Error: Out of range Example Command Description of 01 01 Answer: 01 Enables the New Serial Mode flag. May 2011 Page 51 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 52 CID Extended ID 00 / 01 Internal use / Do not change 2.3.1.16.1 Out of range failure 'R' The entered flag type is out of range. Page 52 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 53: Table 8 - Register Type With Corresponding Register

    ISO 14443A Selection Time-out ISO 14443B Selection Time-out SR176 Selection Time-out Modulation conductance Threshold Page Read Start Page Read Number Command Guard Time Internal use / Do not change May 2011 Page 53 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 54 00h means ASCII and 01h means binary protocol. New baud rate Values of 00h-06h are valid. For baud rate values refer to BAUD, Baud Rate Control Register (0Ch), page 26. Page 54 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 55 State of user port (1 Byte) Answer Answer Description Data State of user port (1 Byte) Error: Error correction fails Error: Transmission Error / No answer received May 2011 Page 55 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 56: Table 9 - Sending Serial Data Frame

    Data Bit 1 State of the User Port Bit 1 Data Bit 0 State of the User Port Bit 0 Parity Bit Even Parity Bit High Stop Bit Page 56 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 57: Table 10 - Receiving Serial Data Frame

    14443-4 command, so it will work only if the ‘Deselect’ command is supported by the corresponding transponder. 2.3.1.22.3 SR176 With SR176 tags the Quiet command always answer with 'Q' because the completion command does not send any acknowledge. May 2011 Page 57 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 58 The block address of the 'r' command conflicts with other commands, therefore the block address has to be limited to 40h. Use the 'rb' command instead. Page 58 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 59 Answer Answer Description Data EEPROM data (1 byte) Error: Out of range failure [entered address is not valid] Example Command Description rp0B Reads protocol configuration register. May 2011 Page 59 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 60 02 00 0C 4D 75 6C 74 69 49 53 4F 20 31 2E 30 1F 03 Binary Mode Example Command Description ‘MultiISO 1.0’ Version of the reader module Page 60 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 61 If the "disable Read after Write flag" is set no read is done, and the returned data is a 00h byte in case of successfully written data. May 2011 Page 61 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 62 If the "disable Read after Write flag" is set no read is done, and the returned data is a 00h byte in case of successfully written data. Page 62 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 63 The power up timing depends on environmental conditions such as voltage ramp up. For handheld devices the timing can vary based on the charge state of the battery. May 2011 Page 63 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 64: Iso 14443 Type A (Mifare ) Only Commands

    No value block 'I' Specified block does not match the value format. The value block is corrupted. A backup block can be used to restore the correct value. Page 64 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 65 Error: copy failure or inability to read after write Error: No tag in field [addressed tag not present or not responding] Error: Operation mode failure [tag is not ISO14443 type A compliant] May 2011 Page 65 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 66 Error: Operation mode failure [tag is not ISO14443 type A compliant] Error: Out of range [entered key type or the sector is out of range] Error: Authentication failed Page 66 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 67 MIFARE cards support two different crypto keys for each sector. Each key is 32 bits long and is stored in the sector trailer (last block of the sector) on the card. It is possible to set different access rights for each key. May 2011 Page 67 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 68 [addressed tag not present or not responding] Error: Operation mode failure [tag is not ISO14443 type A compliant] Example Command Description wv05010055EF Writes value 010055EFh to block 5. Page 68 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 69: Key Management

    Random number key Management (8 bytes) MAC key Management (8 bytes) Answer Answer Description Step 1 Random number reader (8 bytes) Step 2 MAC reader (8 bytes) May 2011 Page 69 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 70 It is possible to log out with Authentication Step 0. Default Keys The following keys are default: Key Type my-d™ 01020407080B0D0E10131516191A1C1Fh Default Master key DESFire 00000000000000000000000000000000h ® MIFARE A0A1A2A3A4A5h ® MIFARE B0B1B2B3B4B5h ® MIFARE FFFFFFFFFFFFh Page 70 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 71 Get Key Access Rights Command Command Data 'ia' Key type (1 byte); Key index (1 byte) Answer Answer Description Data Access rights (2 bytes). Higher Byte is send first May 2011 Page 71 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 72 If the amount of data exceeds 255 bytes, than the answer is divided into more frames. If a frame follows, the Number of keys byte is extended with a set MSB (80h). Page 72 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 73 Data Access rights (2 bytes). Higher Byte has to be sent first. Access rights For more detailed information refer to Get Key Access Rights, page 71. May 2011 Page 73 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 74 Command Command Data ‘uc’ Key type (1 byte) Key index (1 byte) New key type (1 bytes) Answer Answer Description Data Access rights (2 bytes) Page 74 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 75 Action The Action byte defines the action of the key. Action Description Add / Update key Delete Key my-d™ secure key A my-d™ secure key B May 2011 Page 75 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 76 The data stream has to be divided into blocks of 8 bytes. The last enciphered block has to be XORed with the next plain block. block2 Enc(block1) Enc(block2) Page 76 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 77: My-D™ Secure

    If set the tag is in addressed mode. The UID is following as first 8 bytes after the option byte. The my-d™ frame is following. If set the tag is selected. No UID is needed. 4 – 0 May 2011 Page 77 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 78 This page number points to the authentication counter page. Lower byte of the page number is sent first. Diversification data This data is used to diversify the key data. Example Command Answer / Description 'as20040103000000000000000000' 'L' Login into tag. Page 78 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 79 Defines the transponder page index. Lower byte of the page number is sent first. Sector index and access conditions In issuer mode the sector index and the access conditions are added. May 2011 Page 79 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 80 Red LED is flashing fast until the ‘!’ command is received detected Upload finished Green LED is flashing fast until the ‘!’ command is received successfully Upload aborted Red LED is active for 1 second Page 80 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 81: Figure 9 - Ktt State Diagram

    Upload all keys from KTT into Key management Error during Upload Upload ready get upload result '!' Return Upload result Figure 9 - KTT State Diagram May 2011 Page 81 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 82 CRC is computed and added automatically. The commands Write Page, Restricted Write and Write Byte do not need any MAC verification for the answer. Page 82 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 83: T' Command - Data Frame Transfer

    Downlink length new (1 byte) Option byte (1 byte) Transmit byte (1 byte) Receive byte (1 byte) CRC Preset LSB (1 byte) CRC Preset MSB (1 byte) Data (n bytes) May 2011 Page 83 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 84 This byte contains the transfer options for ISO 15693. Description If set the CRC is deactivated for transmit. If set the CRC is deactivated for receive. 5 - 0 Page 84 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 85 Downlink length The downlink length must be zero to activate the Transmit / Receive Mode. 2.3.5.2.2 Downlink length new The downlink length includes only the data length. May 2011 Page 85 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 86 This byte contains the MSB of the CRC preset. 2.3.5.2.8 CRC generation CRC generation is described in ISO 14443-3 Appendix B. The CRC must be interpreted with LSB first. Page 86 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 87: T' Command Block Format & Examples

    Application level command I-Block (CID=05, no NAD) Application level command 0A 05 R-Block (no CID, no NAD) Acknowledged R-Block (CID=06, no NAD) Not acknowledged BA 06 May 2011 Page 87 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 88 Select card with UID 05237487151B04 t02 0F E0 50 0F 0F 77 11 E4 02 00 64 05 7D 02 03 31 80 90 00 Send ATS. Page 88 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 89 The following table lists the example with an expected response length of 8: Command Answer t06 0F 02 00 84 00 00 08 GetChallenge command May 2011 Page 89 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 90: E' Command - Sam Data Frame Transfer

    Error Code 00h – no error 01h – error 02h – wrong parameter Length Data length (2bytes): optional, depends on command code used Data SAM response Page 90 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 91: Table 11 - Version 1 (Option Byte)

    SAM is done. In this case, the BCC of the ATR is not checked. T=0 procedure byte 60h processing If set, the procedure byte 60h of the T=0 protocol is automatically processed. May 2011 Page 91 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 92: Table 12 - Version 2 (Option Byte)

    This command makes a warm reset and returns an ATR. If an error occurs, the SAM is automatically deactivated. Timeout, transmission factor and return length is not used. Page 92 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 93 BWI and CWI are encoded in the same way as in ATR. (See ISO/IEC 7816-3) These values are only used if the manual timeout flag is set – see Table 12 - Version 2 (Option Byte). May 2011 Page 93 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 94 The non-ISO standard transmission factors supporting baud rates up to 847500 Baud. Hardware The SAM interface does not support error repetition and does not check the parity bit. Page 94 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 95: E' Command Block

    DESFire SAM_SelectApplication using T=1 APDU. Notice there is no block format or EDC, just the ‘INF’ APDU data Answer: Data SW1 SW2 [ - 90 00 for ‘ack’] May 2011 Page 95 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 96: Emvco Commands

    The reader then handles the card removal process according to the EMVCo specification. For EMVCo processing details, refer to EMV Contactless Communication Protocol Specification V2.0.1 (July 2009). Page 96 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 97 This command requests the reader ‘Q’ Quit from EMV mode ‘_q’ to exit from EMVCo mode Quit EMVCo mode No data Unknown command ‘?’ May 2011 Page 97 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 98: Table 13 - Emvco Mode - Test Command Set

    EMVCo test mode Request the reader to send a 1. 0x00 followed Single card detected ‘_eb’ WUPB message to the card. by card ATQB Send WUPB Page 98 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 99 EMVCo test mode and return to polling sequence) Exit EMVCo test mode EMVCo polling sequence. No Data 2.’?’ Reject request because the reader is not in EMVCo test mode May 2011 Page 99 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 100: Frequently Asked Questions

    Utility program to set up your reader correctly. Contact support: eusupport@hidglobal.com to acquire the utility. Minimum requirements are WIN98SE, WIN 2000, WIN XP and a free COM port on the PC. Page 100 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 101: Mifare Card Type

    A brute force attack based on trying many different keys is limited by the transaction time (several ms) of the card and would last virtually forever. May 2011 Page 101 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 102 1 with key FFFFFFFFFFFFh key type A rb04 00112233445566778899AABBCCDDEEFF read block 04 Activate continuous read mode to detect a new card Page 102 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 103: Using Nfc

    Then load the "passive_target_106.cmd" file from the "Scripts\Tama\P2P" subfolder into the SCRTester application. Run the code. Now it is possible to get a serial number from the NFC. Command Answer 08123456 May 2011 Page 103 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 104: Supported Tags

    Using key B as a data area will cause a security gap, due to the fact that it is necessary to rewrite key A and the access conditions at each write process. It is not recommended to use key B as a data storage area. Page 104 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 105: Figure 10 - State Diagram

    Reader Instruction Set Idle REQA ISO 14443 Commands Ready Halt Wake Up Select Halt Anticollision Loop Active Authenticate Tag interfacing read/write/... Authenticated commands Figure 10 - State Diagram May 2011 Page 105 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 106: Mifare Ultralight

    These cards can include additional functionalities such as DES or a proprietary encipher algorithm. Before accessing the operating system, the card must be selected. Customized commands are issued using the transfer command. Page 106 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 107: Mifare Desfire

    Application 2 File File File ID 1 ID 2 ID n Application n File File File ID 1 ID 2 ID n Figure 11 - DESFire Memory May 2011 Page 107 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 108: Figure 12 - Desfire State Diagram

    HF Multi ISO RFID Reader User Manual, Firmware V1.2.5 Activate DESFire card Select Application Login to Application Select File with ID Change File Commit / Abort Transaction Figure 12 - DESFire State Diagram Page 108 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 109 The abort transactions command annuls all changes within an application. Power loss will cancel all modifications too. For more details about application settings and access rights refer to [2]. May 2011 Page 109 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 110: My-D™ Ic (Sle 55Rxx)

    Address User data … … User data … … User data … … User data … … User data … … User data Serial number (UID) Page 110 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 111: Iso 14443 Type B

    The Chip ID is defined in the low nibble of page 0Fh. It is manufacturer set and is used internally to select and separate single tags. May 2011 Page 111 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 112: Srix4K

    The MFR Code is listed in ISO/IEC 7816-6:1996/Amd.1: 2000(E). Following manufacturers are tested with our reader. MFR-Code Company ST Microelectronics NXP Semiconductors Infineon Technologies AG Texas Instrument EM Microelectronic-Marin SA Page 112 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 113: Memory Organization

    Byte number within a page Address User data … … User data … … User data Serial number (UID) 4.3.3.1 The UID of SRF55Vxx labels starts with 60h or E0h. May 2011 Page 113 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 114 It only supports 36 pages. The administrative area holds the information of the access condition and the UID. Page Address User data … … User data Administrative area Page 114 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 115: Icode

    ICODE® manual. 4.4.5 User data All other blocks are free for use and changed according to the state of the write access conditions. May 2011 Page 115 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 116: Icode Epc

    It is possible to write the UD data (12 bytes) with the write block 'wb' command using block address 00h. Additionally it is possible to write the destroy code (3 bytes) with the write block 'wb' command using block address 01h. Page 116 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 117: Appendix A - References

    NXP (formerly Philips); Application Note, MIFARE & I-Code, Micore Reader IC family Directly Matched Antenna Design NXP (formerly Philips) Data sheet MC073933 for CL RC632 Reader IC PayPass - ISO 14443 Implementation Specification PayPass - Terminal May 2011 Page 117 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 118: Appendix B - Sam Socket Details

    Communication with the SAM is performed using the ‘e’ command – see ‘e’ command – SAM data frame transfer, page 90. When using a SAM with the HID HF MultiISO OEM board, it is recommended that a 100nF decoupling capacitor be fitted between Vcc and GND close to the SAM socket to ensure proper operation.

  • Page 119: Appendix C - Timings

    ISO 14443 Type A only commands Increment value block 18.4 Decrement value block 18.4 Copy value block 18.5 Read value block Write value block 7.9 - 10.5 MIFARE Login May 2011 Page 119 of 132 © 2005-2011 HID Global Corporation. All rights reserved.
  • Page 120 All timing data is advisory application information and does not form part of the specifications. It may change in future firmware releases. Note: All values specified in Table 14 - Timings depends on the tag used and Command Guard Time. Page 120 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 121: Appendix D - 5553 Reader Board Rs232 Compact Multiiso

    Power Supply: 5VDC ± 10% regulated ) The boot loader makes it easy to download new firmware to the unit without replacing or dismantling the hardware. May 2011 Page 121 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 122: Figure 13 - 5553 Reader Rs232 Compact Multi Iso - Top View

    9,43 mm 11,07 mm 26,31 mm 40,83 mm 42,00 mm 43,00 mm 45,00 mm Figure 13 - 5553 Reader RS232 Compact Multi ISO - Top View Page 122 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 123: Figure 14 - 5553 Reader Rs232 Compact Multi Iso - Side View

    Figure 14 - 5553 Reader RS232 Compact Multi ISO - Side View View B-B' Figure 15 - 5553 Reader RS232 Compact Multi ISO - Front View Figure 16 - Pin Out – Jumper 3 May 2011 Page 123 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 124: Figure 17 - Rs232 Configuration - Jumper 3 Pin Out

    ±9V RS232 Voltage Levels 300kΩ Output Impedance Do not connect Do not connect RS232 Configuration Ground Figure 17 - RS232 Configuration - Jumper 3 Pin Out Page 124 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 125: Figure 18 - Rs422 Configuration - Jumper 3 Pin Out

    PIN No. Conditions Typ. Max. Differential Output Voltage Unloaded Differential Output Voltage Loaded: =50Ω RS422 Configuration Ground Figure 18 - RS422 Configuration - Jumper 3 Pin Out May 2011 Page 125 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 126: Figure 19 - Rs485 Configuration - Jumper 3 Pin Out

    RXA / TXA RXB / TXB Figure 19 - RS485 Configuration - Jumper 3 Pin Out Figure 20 - Jumper 4 Pin Out - Top View Page 126 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 127: Figure 21 - Jumper 4 Pin Out

    Read+ 1.4V @11mA 11mA @15mA Read- 1.4V @11mA 11mA @15mA Power- 1.4V Power+ @11mA 11mA 15mA LEDr LEDg Power Figure 21 - Jumper 4 Pin Out May 2011 Page 127 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 128: Appendix E - Document Version History

    Increased LED flash duration time New command "ox" added to reread all register settings Basic Paypass 1.0 functionality Improved SAM handling & support for new NXP SAM. Page 128 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 129: Appendix F - Firmware Revision History

    ‘c’ command was not working with multiple 15693 cards  multilist command was not detecting all tag types  continuous read was not selecting all tag types May 2011 Page 129 of 132 © 2005-2011 HID Global Corporation. All rights reserved.

  • Page 130: Appendix G - Approvals / Certificates

    HID Global declares that, in conformity with the European CE requirements specified in the EMC Directive 89/336/EEC, the HID HF Multi ISO Plug & Play Modules, the HID HF Multi ISO Desktop Reader and the Plug-In Reader Module, described in this...

  • Page 131: Rohs Compliance

    RoHS Compliance HID Global declares that, in conformity with the Directive 2002/95/EC about the Restriction of Hazardous Substances (RoHS), its HID HF Multi ISO RFID Reader products, listed in this manual, are RoHS compliant The following substances are contained in accordance with the limits required by the Directive.

  • Page 132: Appendix H - Emc Compliance (Radiated Emissions)

    The diagram below shows what is meant by 2-turns (on the left) and 3-turns (on the right) of a cable, through a ferrite clamp. ‘Turns’ means how many times the cable passes through the centre of the ferrite clamp. Page 132 of 132 May 2011 © 2005-2011 HID Global Corporation. All rights reserved.

Table of Contents