Advertisement

Quick Links

Version 1.6
11-2005
Unit 1008, 10th Floor, Hongkong International Trade and Exhibition Centre
1 Trademart Drive, Kowloon Bay, Hong Kong
Tel: +852 2796 7873
Fax: +852 2796 1286
Email: info@acs.com.hk
Website: www.acs.com.hk

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the AET63 BioTRUSTKey and is the answer not in the manual?

Questions and answers

Summary of Contents for ACS AET63 BioTRUSTKey

  • Page 1 Version 1.6 11-2005 Unit 1008, 10th Floor, Hongkong International Trade and Exhibition Centre 1 Trademart Drive, Kowloon Bay, Hong Kong Tel: +852 2796 7873 Fax: +852 2796 1286 Email: info@acs.com.hk Website: www.acs.com.hk...
  • Page 2: Table Of Contents

    AET63 Reference Manual version 1.6 November 2005 Contents Introduction..........................4 Features............................ 4 Supported Card Types ......................5 Microcontroller-based smart cards (asynchronous interface) ............5 Smart Card Interface ....................... 6 Smart Card Power Supply VCC (C1) ....................6 Programming Voltage VPP (C6)......................6 Card Type Selection ...........................
  • Page 3 AET63 Reference Manual version 1.6 November 2005 Appendix B: Response Status Codes ..................28 Appendix C: Technical Specifications..................29  Advanced Card Systems Ltd. Page 3 of 29...
  • Page 4: Introduction

    1.6 November 2005 1. Introduction The AET63 BioTRUSTKey is an interface for the communication between a computer (for example, a PC), a smart card and TFM (Trusted Fingerprint Module). Different types of smart cards have different commands and different communication protocols. This prevents, in most cases, the direct communication between a smart card and a computer.
  • Page 5: Supported Card Types

    AET63 Reference Manual version 1.6 November 2005 3. Supported Card Types The AET63 can operate MCU card with T=0 and T=1 protocol. The table presented in Appendix A explains which card type selection value must be specified for the various card types supported by the reader. 3.1 Microcontroller-based smart cards (asynchronous interface) The AET63 supports EEPROM microcontroller-based cards with internal programming voltage (VPP) generation and the following programming parameters transmitted in the ATR:...
  • Page 6: Smart Card Interface

    AET63 Reference Manual version 1.6 November 2005 4. Smart Card Interface The interface between the AET63 and the inserted smart card follows the specifications of ISO7816-3 with certain restrictions or enhancements to increase the practical functionality of the AET63. 4.1 Smart Card Power Supply VCC (C1) The current consumption of the inserted card must not be higher than 50mA.
  • Page 7: Power Supply

    AET63 Reference Manual version 1.6 November 2005 5. Power Supply The AET63 requires a voltage of 5V DC, 100mA, regulated, power supply. The AET63 gets the power supply from PC (through the cable supplied along with each type of reader). Status LEDs Green LED on the front of the reader indicate the activation status of the smart card interface: Green LED - Indicates power supply to the smart card is switched on, i.e., the smart card is activated.
  • Page 8: Usb Interface

    Reference voltage level for power supply NOTE - In order for the AET63 to function properly through USB interface, either ACS proprietary device drive or ACS PC/SC device driver has to be installed. Please refer to the Device Driver Installation Guide for more detail.
  • Page 9: Communication Protocol

    AET63 Reference Manual version 1.6 November 2005 7. Communication Protocol In the normal operation, the AET63 acts as a slave device with regard to the communication between a computer and the reader. The communication is carried out in the form of successive command-response exchanges.
  • Page 10: Extended Command

    AET63 Reference Manual version 1.6 November 2005 byte 7.1.2 Extended Command A command consists of six protocol bytes and a variable number of data bytes and has the following structure: byte 6 ... N+5 (N>0) Header Instruction Data Length = N Data Checksum Data Length N...
  • Page 11 AET63 Reference Manual version 1.6 November 2005 byte 5 ... N+4 (0<N<255) Header Data length = N Data Checksum Header to indicate the start of the normal response. to indicate the start of an encrypted response (support from firmware 0.67 onwards, only used in PTVerifySC and PTVerifySCAll Indicates the command execution status:...
  • Page 12: No Transmission Error With Extended Response

    AET63 Reference Manual version 1.6 November 2005 7.2.2 No transmission error with extended response The response by the AET63 to a correctly received command consists of three protocol bytes, two status bytes and a variable number of data bytes and has the following structure: byte 7 ...
  • Page 13: Card Status Message

    AET63 Reference Manual version 1.6 November 2005 If the AET63 responds with a 'NOT ACKNOWLEDGE' message to a command from the computer, the computer would normally transmit the command again. If the computer detects a transmission error in a response from the AET63, it can send the 'NOT ACKNOWLEDGE' to the reader upon which the reader will transmit the most recent response again.
  • Page 14 AET63 Reference Manual version 1.6 November 2005 Within the command and response transmission only ASCII characters representing the hexadecimal (hex) digits 0...F are used. Each byte of a command or response is split into its upper and lower halfbyte (nibble). For each halfbyte is transmitted the ASCII character representing the respective hex digit value.
  • Page 15: Commands

    AET63 Reference Manual version 1.6 November 2005 8. COMMANDS The commands executed by the AET63 can generally be divided into two categories, namely, Control Commands and Card Commands. Control Commands manage the internal operation of the AET63. They do not directly affect the card inserted in the reader and are therefore independent of the selected card type.
  • Page 16: Select_Card_Type

    AET63 Reference Manual version 1.6 November 2005 : card inserted, not powered up : card powered up 8.1.2 SELECT_CARD_TYPE This command sets the required card type. The firmware in the AET63 adjusts the communication protocol between reader and the inserted card according to the selected card type. Command format Instruction Code Data length...
  • Page 17: Set_Option

    AET63 Reference Manual version 1.6 November 2005 Command format Instruction Code Data length Data NOTIFY NOTIFY Specifies whether the Card Status Message shall be transmitted to notify the host computer of card insertion / removal : transmit Card Status Message : do not transmit Card Status Message Response data format No response data...
  • Page 18: Eeprom Commands

    AET63 Reference Manual version 1.6 November 2005 8.2 EEPROM Commands 8.2.1 EEPROM_READ_DATA This command is used to read the specified number of bytes from the specified address of the EEPROM. Command format Instruction Code Data length Data ADDR ADDR Byte address of first byte to be read from the EEPROM. The high byte of the address is specified as the first byte of ADDR.
  • Page 19: Tfm (Trusted Fingerprint Module) Commands

    AET63 Reference Manual version 1.6 November 2005 8.3 TFM (Trusted Fingerprint Module) Commands 8.3.1 TFM_COMMAND This command is used to send the command to the TFM. Command format Instruction Code Data length Data TFM Command … … … Number N of command to be sent to the TFM (0 <...
  • Page 20 AET63 Reference Manual version 1.6 November 2005 Command format Instruction Code Data length Data ADDR ADDR Address of the EEPROM stores the list of APDUs. Please refer to the “Application Notes for Handling Fingerprint Template in AET63” for detailed information Address 0x0000 Enroll (256 bytes max) Address 0x0100...
  • Page 21: Tfm_Open_Secure_Session

    AET63 Reference Manual version 1.6 November 2005 8.3.4 TFM_OPEN_SECURE_SESSION This command sends 24 bytes of random number to AET63. The random number is used to general the session key. Command format Instruction Code Data length Data ….. ….. Data 24 bytes of random number to generate the session key Response data format No response data ...
  • Page 22: Mcu-Based Card

    AET63 Reference Manual version 1.6 November 2005 8.4 MCU-based Card 8.4.1 RESET This command powers up the card inserted in the card reader and performs a card reset. If the card is powered up when the command is being issued, only a reset of the card is carried out. The power supply to the card is not switched off.
  • Page 23: Exchange_T1_Frame

    AET63 Reference Manual version 1.6 November 2005 APDU instruction class byte APDU instruction APDU parameter byte 1 APDU parameter byte 2 APDU command data length BYTE x APDU command data Expected APDU response data length (Le = 0 means no data is expected from the card) NOTE - With the T=0 communication protocol it is not possible to transmit data to the card and from the card in a single command- response pair.
  • Page 24: Security Application Module (Sam)

    AET63 Reference Manual version 1.6 November 2005 8.5 Security Application Module (SAM) Note: The commands in this section ACITIVATE_SAM, DEACTIVATE_SAM, EXCHANGE_SAM_APDU and EXCHANGE_SAM_T1_FRAME can only be used in SAM reader. 8.5.1 ACTIVATE_SAM This command is used to power up and reset the specified SAM and transmit the SAM's ATR in the response.
  • Page 25: Exchange_Sam_Apdu

    AET63 Reference Manual version 1.6 November 2005 8.5.3 EXCHANGE_SAM_APDU To exchange an APDU (Application Protocol Data Unit) command/response pair between the SAM card inserted in the AET63 and the host computer. Command format Instruction Data Data Code length BYTE ...2 BYTE Length of APDU command data, N, + 6 (0 <...
  • Page 26: Exchange_Sam_T1_Frame

    AET63 Reference Manual version 1.6 November 2005 8.5.4 EXCHANGE_SAM_T1_FRAME To exchange an APDU (Application Protocol Data Unit) command/response pair between the SAM card inserted in the AET63 and the host computer using T1 protocol. Command format Instruction Data length Data Code T1 BLOCK FRAME Length of APDU command data, N...
  • Page 27: Appendix A: Supported Card Types

    AET63 Reference Manual version 1.6 November 2005 Appendix A: Supported Card Types The following table summarizes which values must be specified in the SET_CARD_TYPE command for a particular card type to be used, and how the bits in the response to the GET_ACR_STAT command correspond with the respective card types.
  • Page 28 AET63 Reference Manual version 1.6 November 2005 Appendix B: Response Status Codes The following table summarizes the possible status code bytes SW1, SW2 returned by the AET63: Status OK – command successfully executed OK – using T=1 protocol (only in response to the RESET command) OK –...
  • Page 29 AET63 Reference Manual version 1.6 November 2005 Appendix C: Technical Specifications Device AET63 BioTRUSTKey Power supply Power supply ......... USB powered Supply voltage ........Regulated 5V DC Universal Serial Bus Interface Type............USB v1.1, four lines: +5V, GND, D+ and D- Power source.........

Table of Contents