ACR3901U-S1 – Reference Manual
info@acs.com.hk
Version 1.09
www.acs.com.hk
Page 83 of 96
7.2.7.5.
AUTHENTICATE_MEMORY_CARD (SLE 4436, SLE 5536 and SLE
6636)
To read a card authentication certificate from a SLE 5536 or SLE 6636 card, the ACR3901U-S1
executes the following actions:
1. Select Key 1 or Key 2 in the card as specified in the command.
2. Present the challenge data specified in the command to the card.
3. Generate the specified number of CLK pulses for each bit of authentication data computed by
the card.
4. Read 16 bits of authentication data from the card.
5. Reset the card to normal operation mode.
The authentication has to be performed in two steps. The first step is to send the Authentication
Certificate to the card. The second step is to get back two bytes of authentication data calculated by
the card.
Step 1:
Send Authentication Certificate to the Card.
Command Format (
abData
field in the
PC_to_RDR_XfrBlock
)
Pseudo-APDU
CLA
INS
P1
P2
MEM_L
CODE
KEY
CLK_CNT
Byte 1
Byte 2
……
Byte 5
Byte 6
FFh
84h
00h
00h
08h
Where:
KEY
Key to be used for the computation of the authentication certificate:
00h: Key 1 with no cipher block chaining
01h: Key 2 with no cipher block chaining
80h: Key 1 with cipher block chaining (SLE 5536 and SLE 6636 only)
81h: Key 2 with cipher block chaining (SLE 5536 and SLE 6636 only)
CLK_CNT
Number of CLK pulses to be supplied to the card for the computation of each bit
of the authentication certificate. Typical value is 160 clocks (A0h)
BYTE 1...6
Card challenge data
Response Data Format (
abData
field in the
RDR_to_PC_DataBlock
)
SW1
SW2
61h
02h
Where:
SW1 SW2
= 61 02h if no error, meaning two bytes of authentication data are ready. The
authentication data can be retrieved by
Get_Response
command
