IDTECH SecureHead User Manual page 29

of decoded track 1 data is indicated by track 1 unencrypted length field. The remaining bytes
are track 2 data, the length of which is indicated by track 2 unencrypted length filed.
Track 1 and Track 2 Hashed
SecureHead reader uses SHA-1 to generate hashed data for both track 1 and track 2
unencrypted data. It is 20 bytes long for each track. This is provided with two purposes in mind:
One is for the host to ensure data integrity by comparing this field with a SHA-1 hash of the
decrypted Track data, prevent unexpected noise in data transmission. The other purpose is to
enable the host to store a token of card data for future use without keeping the sensitive card
holder data. This token may be used for comparison with the stored hash data to determine if
they are from the same card.
4.1.21. Fixed Key Level 3 Data Output Original Format
Same as 4.14.8 DUKPT Level 3 Data Output Original Format, only change <DUKPT serial number>
to <device serial number> plus two NULL bytes.
4.1.22.
This mode is used when all tracks must be encrypted, or encrypted OPOS support is required, or when
the tracks must be encrypted separately or when cards other than type 0 (ABA bank cards) must be
encrypted or when track 3 must be encrypted. This format is the standard encryption format, but not
yet the default encryption format.
1. Encryption Output Format Setting:
Command: 53 85 01 <Encryption Format>
Encryption Format:
'0': Original Encryption Format
'1': Enhanced Encryption Format
2. Encryption Option Setting: (for enhanced encryption format only)
Command: 53 84 01 <Encryption Option>
Encryption Option: (default 08h)
bit0: 1 – track 1 force encrypt
bit1: 1 – track 2 force encrypt
bit2: 1 – track 3 force encrypt
bit3: 1 – track 3 force encrypt when card type is 0
Copyright © 2010-2013, International Technologies & Systems Corporation. All rights reserved.
SecureHead SPI Interface with FPC User Manual
DUKPT Level 3 Data Output Enhanced Format
Page 29 of 67