Page 1
Version 1.6 11-2005 Unit 1008, 10th Floor, Hongkong International Trade and Exhibition Centre 1 Trademart Drive, Kowloon Bay, Hong Kong Tel: +852 2796 7873 Fax: +852 2796 1286 Email: info@acs.com.hk Website: www.acs.com.hk...
1.6 November 2005 1. Introduction The AET63 BioTRUSTKey is an interface for the communication between a computer (for example, a PC), a smart card and TFM (Trusted Fingerprint Module). Different types of smart cards have different commands and different communication protocols. This prevents, in most cases, the direct communication between a smart card and a computer.
AET63 Reference Manual version 1.6 November 2005 3. Supported Card Types The AET63 can operate MCU card with T=0 and T=1 protocol. The table presented in Appendix A explains which card type selection value must be specified for the various card types supported by the reader. 3.1 Microcontroller-based smart cards (asynchronous interface) The AET63 supports EEPROM microcontroller-based cards with internal programming voltage (VPP) generation and the following programming parameters transmitted in the ATR:...
AET63 Reference Manual version 1.6 November 2005 4. Smart Card Interface The interface between the AET63 and the inserted smart card follows the specifications of ISO7816-3 with certain restrictions or enhancements to increase the practical functionality of the AET63. 4.1 Smart Card Power Supply VCC (C1) The current consumption of the inserted card must not be higher than 50mA.
AET63 Reference Manual version 1.6 November 2005 5. Power Supply The AET63 requires a voltage of 5V DC, 100mA, regulated, power supply. The AET63 gets the power supply from PC (through the cable supplied along with each type of reader). Status LEDs Green LED on the front of the reader indicate the activation status of the smart card interface: Green LED - Indicates power supply to the smart card is switched on, i.e., the smart card is activated.
Reference voltage level for power supply NOTE - In order for the AET63 to function properly through USB interface, either ACS proprietary device drive or ACS PC/SC device driver has to be installed. Please refer to the Device Driver Installation Guide for more detail.
AET63 Reference Manual version 1.6 November 2005 7. Communication Protocol In the normal operation, the AET63 acts as a slave device with regard to the communication between a computer and the reader. The communication is carried out in the form of successive command-response exchanges.
AET63 Reference Manual version 1.6 November 2005 byte 7.1.2 Extended Command A command consists of six protocol bytes and a variable number of data bytes and has the following structure: byte 6 ... N+5 (N>0) Header Instruction Data Length = N Data Checksum Data Length N...
Page 11
AET63 Reference Manual version 1.6 November 2005 byte 5 ... N+4 (0<N<255) Header Data length = N Data Checksum Header to indicate the start of the normal response. to indicate the start of an encrypted response (support from firmware 0.67 onwards, only used in PTVerifySC and PTVerifySCAll Indicates the command execution status:...
AET63 Reference Manual version 1.6 November 2005 7.2.2 No transmission error with extended response The response by the AET63 to a correctly received command consists of three protocol bytes, two status bytes and a variable number of data bytes and has the following structure: byte 7 ...
AET63 Reference Manual version 1.6 November 2005 If the AET63 responds with a 'NOT ACKNOWLEDGE' message to a command from the computer, the computer would normally transmit the command again. If the computer detects a transmission error in a response from the AET63, it can send the 'NOT ACKNOWLEDGE' to the reader upon which the reader will transmit the most recent response again.
Page 14
AET63 Reference Manual version 1.6 November 2005 Within the command and response transmission only ASCII characters representing the hexadecimal (hex) digits 0...F are used. Each byte of a command or response is split into its upper and lower halfbyte (nibble). For each halfbyte is transmitted the ASCII character representing the respective hex digit value.
AET63 Reference Manual version 1.6 November 2005 8. COMMANDS The commands executed by the AET63 can generally be divided into two categories, namely, Control Commands and Card Commands. Control Commands manage the internal operation of the AET63. They do not directly affect the card inserted in the reader and are therefore independent of the selected card type.
AET63 Reference Manual version 1.6 November 2005 : card inserted, not powered up : card powered up 8.1.2 SELECT_CARD_TYPE This command sets the required card type. The firmware in the AET63 adjusts the communication protocol between reader and the inserted card according to the selected card type. Command format Instruction Code Data length...
AET63 Reference Manual version 1.6 November 2005 Command format Instruction Code Data length Data NOTIFY NOTIFY Specifies whether the Card Status Message shall be transmitted to notify the host computer of card insertion / removal : transmit Card Status Message : do not transmit Card Status Message Response data format No response data...
AET63 Reference Manual version 1.6 November 2005 8.2 EEPROM Commands 8.2.1 EEPROM_READ_DATA This command is used to read the specified number of bytes from the specified address of the EEPROM. Command format Instruction Code Data length Data ADDR ADDR Byte address of first byte to be read from the EEPROM. The high byte of the address is specified as the first byte of ADDR.
AET63 Reference Manual version 1.6 November 2005 8.3 TFM (Trusted Fingerprint Module) Commands 8.3.1 TFM_COMMAND This command is used to send the command to the TFM. Command format Instruction Code Data length Data TFM Command … … … Number N of command to be sent to the TFM (0 <...
Page 20
AET63 Reference Manual version 1.6 November 2005 Command format Instruction Code Data length Data ADDR ADDR Address of the EEPROM stores the list of APDUs. Please refer to the “Application Notes for Handling Fingerprint Template in AET63” for detailed information Address 0x0000 Enroll (256 bytes max) Address 0x0100...
AET63 Reference Manual version 1.6 November 2005 8.3.4 TFM_OPEN_SECURE_SESSION This command sends 24 bytes of random number to AET63. The random number is used to general the session key. Command format Instruction Code Data length Data ….. ….. Data 24 bytes of random number to generate the session key Response data format No response data ...
AET63 Reference Manual version 1.6 November 2005 8.4 MCU-based Card 8.4.1 RESET This command powers up the card inserted in the card reader and performs a card reset. If the card is powered up when the command is being issued, only a reset of the card is carried out. The power supply to the card is not switched off.
AET63 Reference Manual version 1.6 November 2005 APDU instruction class byte APDU instruction APDU parameter byte 1 APDU parameter byte 2 APDU command data length BYTE x APDU command data Expected APDU response data length (Le = 0 means no data is expected from the card) NOTE - With the T=0 communication protocol it is not possible to transmit data to the card and from the card in a single command- response pair.
AET63 Reference Manual version 1.6 November 2005 8.5 Security Application Module (SAM) Note: The commands in this section ACITIVATE_SAM, DEACTIVATE_SAM, EXCHANGE_SAM_APDU and EXCHANGE_SAM_T1_FRAME can only be used in SAM reader. 8.5.1 ACTIVATE_SAM This command is used to power up and reset the specified SAM and transmit the SAM's ATR in the response.
AET63 Reference Manual version 1.6 November 2005 8.5.3 EXCHANGE_SAM_APDU To exchange an APDU (Application Protocol Data Unit) command/response pair between the SAM card inserted in the AET63 and the host computer. Command format Instruction Data Data Code length BYTE ...2 BYTE Length of APDU command data, N, + 6 (0 <...
AET63 Reference Manual version 1.6 November 2005 8.5.4 EXCHANGE_SAM_T1_FRAME To exchange an APDU (Application Protocol Data Unit) command/response pair between the SAM card inserted in the AET63 and the host computer using T1 protocol. Command format Instruction Data length Data Code T1 BLOCK FRAME Length of APDU command data, N...
AET63 Reference Manual version 1.6 November 2005 Appendix A: Supported Card Types The following table summarizes which values must be specified in the SET_CARD_TYPE command for a particular card type to be used, and how the bits in the response to the GET_ACR_STAT command correspond with the respective card types.
Page 28
AET63 Reference Manual version 1.6 November 2005 Appendix B: Response Status Codes The following table summarizes the possible status code bytes SW1, SW2 returned by the AET63: Status OK – command successfully executed OK – using T=1 protocol (only in response to the RESET command) OK –...
Page 29
AET63 Reference Manual version 1.6 November 2005 Appendix C: Technical Specifications Device AET63 BioTRUSTKey Power supply Power supply ......... USB powered Supply voltage ........Regulated 5V DC Universal Serial Bus Interface Type............USB v1.1, four lines: +5V, GND, D+ and D- Power source.........
Need help?
Do you have a question about the AET63 BioTRUSTKey and is the answer not in the manual?
Questions and answers