Activation Data; Deactivate Authenticated Mode Command - ID Tech SecureMag User Manual

Encrypted magstrip reader

Hide thumbs Also See for SecureMag:

Table of Contents

Authenticated Mode timeout duration, and 8-bytes Session ID encrypted with the result of current

DUKPT Key exclusive- or'ed with <3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C>.

The Authenticated Mode timeout specifies the maximum time (in seconds) in which a reader would

remain in Authenticated Mode. A value of zero forces the reader to stay in Authenticated Mode until

a card swipe or power down occurs. The minimum timeout duration required is 120 seconds. If the

specified time is less than the minimum, 120 seconds would be used for timeout duration.

If Session ID information is included and the command is successful, the Session ID will be changed.

The Activate Authenticated Mode succeeds if the device decrypts Challenge Reply responds

correctly. If the device cannot decrypt Challenge Reply command, Activate Authenticated Mode fails

and DUKPT KSN advances.

Command Structure

Host -> Device:

Device -> Host:

<ACK> (success)

<NAK> (fail)

11.6.1. Activation Data

8 or 16-bytes, structured as <Challenge 1 Response> <Session ID>

Challenge 1 Response: 6-bytes of Challenge 1 random data with 2-bytes of Authenticated Mode

timeout duration. It's encrypted using the key derived from the current DUKPT Key.

Session ID: Optional 8-bytes Session ID, encrypted using the key derived from the current DUKPT

Key.

This command is used to exit Authenticated Mode. The Host needs to send the first 7-bytes of

Challenge 2 (from the response of Activate Authenticated Mode command) and the Increment Flag

(0x00 indicates no increment, 0x01 indicates increment of the KSN) encrypted with current DUKPT

Key exclusive- or'ed with <3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C>.

If device decrypts Challenge 2 successfully, the device will exit Authenticated Mode. The KSN will

increase if the Increment Flag is set to 0x01. If device cannot decrypt Challenge 2 successfully, it will

stay in Authenticated Mode until a timeout occurs or when customer swipes a card.

SecureMag Encrypted MagStrip Reader User Manual

Page | 51

Table of Contents