IDTECH SecureHead SPI User Manual page 25

The example below lists possible settings of these new functions.
Characters
PrePANID
PostPANID
MaskCharID
DisplayExpirationDataID
EncryptionID
SecurityLevelID
Device Serial Number ID
KSN and Counter ID
Session ID
Key Management Type ID
ID TECH SecureHead SPI with TMIV User Manual
Default Setting Description
04h 00h ~ 06h
Allowed clear text from start of PAN
Command format:
02 53 49 01 04 03 LRC
04h 00h ~ 04h
Allowed clear text from end of PAN Command format:
02 53 4A 01 04 03 LRC
'*' 20h ~ 7Eh Command format:
02 53 4B 01 3A 03 LRC
'0' '0' Display expiration data as mask data
'1' Display expiration data as clear data
'1' '0' Clear Text
'1' Triple DES
'2' AES
Command format:
02 53 4C 01 31 03 LRC
'1' '0' ~ '3'
Command format: 02 52 7E 03 LRC
00, 00, 00, 00, 10 bytes number: Command format:
00, Set Serial Number:
00, 00, 00, 00, 02 53 01 4E 09 08 37 36 35 34 33
00 32 31 30 03 LRC
Get Serial Number: 02 52 4E 03 LRC
00, 00, 00, 00, This field includes the Initial Key Serial Number in the leftmost 59 bits
00, and a value for the Encryption Counter in the right most 21 bits. Get
00, 00, 00, 00, DUKPT KSN and Counter:
00 02 52 51 03 LRC
00, 00, 00, 00, This Session ID is an eight-byte string which contains hex data. This
00, field is used by the host to uniquely identify the present transaction. Its
00, 00, 00 primary purpose is to prevent replays. It is only used at Security Level 4
(not supported). After a card is read, the Session ID will be encrypted,
along with the card data, supplied as part of the transaction message.
The cleartext version of this will never be transmitted.
New Session ID stays in effect until one of the following occurs:
1. Another Set Session ID command is received.
2. The reader is powered down.
3. The reader is put into Suspend mode.
'1' Fixed key management by default. '0': Fixed Key
'1': DUKPT Key
Page | 25