ACS ACR3901U-S1 User manual

Subject to change without prior notice [e-mail]
www.acs.com.hk
Reference Manual V1.01
ACR3901U-S1
Bluetooth®
ContactCardReader

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 2 of 88
Table of Contents
1.0. Introduction .............................................................................................................5
1.1. Reference Documents...........................................................................................................5
1.2. Symbols and Abbreviations...................................................................................................5
2.0. Features ...................................................................................................................6
3.0. Smart Card Support ................................................................................................7
3.1. MCU Cards............................................................................................................................7
3.2. Memory-based Smart Cards..................................................................................................7
4.0. System Block Diagram............................................................................................8
5.0. Hardware Design.....................................................................................................9
5.1. Battery....................................................................................................................................9
5.1.1. Battery charging............................................................................................................9
5.1.2. Battery life.....................................................................................................................9
5.2. Bluetooth Interface.................................................................................................................9
5.3. USB Interface ........................................................................................................................9
5.3.1. Communication Parameters .........................................................................................9
5.3.2. Endpoints ....................................................................................................................10
5.4. User Interface ......................................................................................................................10
5.4.1. Mode Selection Switch................................................................................................10
5.4.2. Status LED..................................................................................................................10
5.5. Smart Card Interface ...........................................................................................................11
5.5.1. Smart Card Power Supply VCC (C1)..........................................................................11
5.5.2. Programming Voltage VPP (C6).................................................................................11
5.5.3. Card Type Selection....................................................................................................11
5.5.4. Interface for Microcontroller-based Cards...................................................................12
5.5.5. Card Tearing Protection..............................................................................................12
6.0. Software Design ....................................................................................................13
6.1. Bluetooth Connection Program Flow...................................................................................13
6.2. Profile Selection...................................................................................................................14
6.3. Authentication......................................................................................................................16
6.4. Frame Format......................................................................................................................19
6.4.1. Bluetooth Frame Format.............................................................................................19
6.4.2. Bluetooth Frame Format after Mutual Authentication.................................................19
6.5. Bluetooth Communication Protocol .....................................................................................20
6.5.1. Card Power On ...........................................................................................................21
6.5.2. Card Power Off ...........................................................................................................22
6.5.3. Get Card Presence .....................................................................................................23
6.5.4. APDU Command.........................................................................................................24
6.5.5. Escape Command.......................................................................................................25
6.5.6. Customer Master Key Reset Request ........................................................................32
6.6. Mutual Authentication and Encryption Protocol...................................................................34
6.6.1. SPH_to_RDR_ReqAuth..............................................................................................35
6.6.2. RDR_to_SPH_AuthRsp1............................................................................................35
6.6.3. SPH_to_RDR_AuthRsp..............................................................................................36
6.6.4. RDR_to_SPH_AuthRsp2............................................................................................37
6.6.5. SPH_to_RDR_DataReq..............................................................................................37
6.6.6. RDR_to_SPH_DataRsp..............................................................................................38
7.0. USB Communication Protocol..............................................................................39
7.1. CCID Bulk-OUT Messages..................................................................................................41
7.1.1. PC_to_RDR_IccPowerOn...........................................................................................41
7.1.2. PC_to_RDR_IccPowerOff...........................................................................................41
7.1.3. PC_to_RDR_GetSlotStatus........................................................................................41

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 3 of 88
7.1.4. PC_to_RDR_XfrBlock.................................................................................................42
7.1.5. PC_to_RDR_GetParameters......................................................................................42
7.1.6. PC_to_RDR_ResetParameters..................................................................................42
7.1.7. PC_to_RDR_SetParameters ......................................................................................43
7.2. CCID Bulk-IN Messages......................................................................................................45
7.2.1. RDR_to_PC_DataBlock..............................................................................................45
7.2.2. RDR_to_PC_SlotStatus..............................................................................................45
7.2.3. RDR_to_PC_Parameters............................................................................................46
8.0. Memory Card Command Set.................................................................................47
8.1. Memory Card – 1, 2, 4, 8, and 16 kilobit I2C Card..............................................................47
8.1.1. SELECT_CARD_TYPE ..............................................................................................47
8.2. Memory Card – 32, 64, 128, 256, 512, and 1024 kilobit I2C Card......................................50
8.2.1. SELECT_CARD_TYPE ..............................................................................................50
8.2.2. SELECT_PAGE_SIZE................................................................................................50
8.2.3. READ_MEMORY_CARD............................................................................................51
8.2.4. WRITE_MEMORY_CARD..........................................................................................51
8.3. Memory Card – ATMEL AT88SC153 ..................................................................................53
8.3.1. SELECT_CARD_TYPE ..............................................................................................53
8.3.2. READ_MEMORY_CARD............................................................................................53
8.3.3. WRITE_MEMORY_CARD..........................................................................................54
8.3.4. VERIFY_PASSWORD................................................................................................55
8.3.5. INITIALIZE_AUTHENTICATION.................................................................................55
8.3.6. VERIFY_AUTHENTICATION .....................................................................................56
8.4. Memory Card – ATMEL AT88C1608...................................................................................57
8.4.1. SELECT_CARD_TYPE ..............................................................................................57
8.4.2. READ_MEMORY_CARD............................................................................................57
8.4.3. WRITE_MEMORY_CARD..........................................................................................58
8.4.4. VERIFY_PASSWORD................................................................................................59
8.4.5. INITIALIZE_AUTHENTICATION.................................................................................59
8.4.6. VERIFY_AUTHENTICATION .....................................................................................60
8.5. Memory Card – SLE4418/SLE4428/SLE5518/SLE5528 ....................................................61
8.5.1. SELECT_CARD_TYPE ..............................................................................................61
8.5.2. READ_MEMORY_CARD............................................................................................61
8.5.3. READ_PRESENTATION_ERROR_COUNTER_MEMORY_CARD (SLE4428 and
SLE5528) 62
8.5.4. READ_PROTECTION_BIT.........................................................................................62
8.5.5. WRITE_MEMORY_CARD..........................................................................................63
8.5.6. WRITE_PROTECTION_MEMORY_CARD ................................................................64
8.5.7. PRESENT_CODE_MEMORY_CARD (SLE4428 and SLE5528)...............................64
8.6. Memory Card – SLE4432/SLE4442/SLE5532/SLE5542 ....................................................66
8.6.1. SELECT_CARD_TYPE ..............................................................................................66
8.6.2. READ_MEMORY_CARD............................................................................................66
8.6.3. READ_PRESENTATION_ERROR_COUNTER_MEMORY_CARD (SLE 4442 and
SLE 5542) 67
8.6.4. READ_PROTECTION_BITS ......................................................................................67
8.6.5. WRITE_MEMORY_CARD..........................................................................................68
8.6.6. WRITE_PROTECTION_MEMORY_CARD ................................................................68
8.6.7. PRESENT_CODE_MEMORY_CARD (SLE 4442 and SLE 5542).............................69
8.6.8. CHANGE_CODE_MEMORY_CARD (SLE 4442 and SLE 5542) ..............................70
8.7. Memory Card – SLE 4406/SLE 4436/SLE 5536/SLE 6636 ................................................71
8.7.1. SELECT_CARD_TYPE ..............................................................................................71
8.7.2. READ_MEMORY_CARD............................................................................................71
8.7.3. WRITE_ONE_BYTE_MEMORY_CARD.....................................................................72
8.7.4. PRESENT_CODE_MEMORY_CARD........................................................................73
8.7.5. AUTHENTICATE_MEMORY_CARD (SLE 4436, SLE 5536 and SLE 6636).............74
8.8. Memory Card – SLE 4404 ...................................................................................................76
8.8.1. SELECT_CARD_TYPE ..............................................................................................76
8.8.2. READ_MEMORY_CARD............................................................................................76
8.8.3. WRITE_MEMORY_CARD..........................................................................................77

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 4 of 88
8.8.4. ERASE_SCRATCH_PAD_MEMORY_CARD ............................................................77
8.8.5. VERIFY_USER_CODE...............................................................................................78
8.8.6. VERIFY_MEMORY_CODE ........................................................................................79
8.9. Memory Card – AT88SC101/AT88SC102/AT88SC1003....................................................80
8.9.1. SELECT_CARD_TYPE ..............................................................................................80
8.9.2. READ_MEMORY_CARD............................................................................................80
8.9.3. WRITE_MEMORY_CARD..........................................................................................81
8.9.4. ERASE_NON_APPLICATION_ZONE........................................................................81
8.9.5. ERASE_APPLICATION_ZONE_WITH_ERASE ........................................................82
8.9.6. ERASE_APPLICATION_ZONE_WITH_WRITE_AND_ERASE.................................83
8.9.7. VERIFY_SECURITY_CODE ......................................................................................84
8.9.8. BLOWN_FUSE ...........................................................................................................85
9.0. Other Commands Access via PC_to_RDR_XfrBlock..........................................86
9.1. GET_READER_INFORMATION.........................................................................................86
List of Figures
Figure 1 : ACR3901U-S1 Architecture...................................................................................................8
Figure 2 : Bluetooth Connection Flow..................................................................................................13
Figure 3 : nRFgo Studio GATT Setting Interface.................................................................................14
Figure 4: Authentication Procedure.....................................................................................................17
List of Tables
Table 1 : Symbols and Abbreviations.....................................................................................................5
Table 2 : Estimated Battery Lifespan......................................................................................................9
Table 3 : USB Interface Wiring...............................................................................................................9
Table 4 : Mode Selection Switch ..........................................................................................................10
Table 5 : Status LED.............................................................................................................................11
Table 6 : ACR3901U-S1 Service Handles and UUID Information List.................................................15
Table 7 : Bluetooth Frame Format........................................................................................................19
Table 8 : Encrypted Frame Format after Mutual Authentication...........................................................19
Table 9 : Command Code Summary....................................................................................................20
Table 10 : Response Code Summary ..................................................................................................20
Table 11 : Supported Card Types ........................................................................................................87
Table 12 : Error Code...........................................................................................................................88

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 5 of 88
1.0.Introduction
ACR3901U-S1 Bluetooth Contact Card Reader acts as an interface for the communication between a
computer/mobile device and a smart card. Different types of smart cards have different commands
and different communication protocols which, in most cases, prevent direct communication between a
smart card and a computer/mobile device. ACR3901U-S1 Bluetooth Contact Card Reader establishes
a uniform interface from the computer/mobile device to the smart card for a wide variety of cards. By
taking care of the card’s particulars, it releases the computer software programmer from being
responsible with smart card operations’ technical details, which in many cases, are not relevant to the
implementation of a smart card system.
1.1. Reference Documents
The following related documents are available from www.usb.org
•Universal Serial Bus Specification 2.0 (also referred to as the USB specification), April 27,
2000
•Universal Serial Bus Common Class Specification 1.0, December 16, 1997
•Universal Serial Bus Device Class: Smart Card CCID Specification for Integrated Circuit(s)
Cards Interface Devices, Revision 1.1, April 22, 2005
The following related documents can be ordered through www.ansi.org
•ISO/IEC 7816-1; Identification Cards – Integrated circuit(s) cards with contacts - Part 1:
Physical Characteristics
•ISO/IEC 7816-2; Identification Cards – Integrated circuit(s) cards with contacts - Part 2:
Dimensions and Locations of the contacts
•ISO/IEC 7816-3; Identification Cards – Integrated circuit(s) cards with contacts - Part 3:
Electronic signals and transmission protocols
1.2. Symbols and Abbreviations
Abbreviation Description
ATR Answer-To-Reset
CCID Chip/Smart Card Interface Device
ICC Integrated Circuit Cards
IFSC Information Field Sized for ICC for protocol T=1
IFSD Information Field Sized for CCID for protocol T=1
NAD Node Address
PPS Protocol and Parameters Selection
RFU Reserved for future use1
TPDU Transport Protocol Data Unit
USB Universal Serial Bus
Table 1: Symbols and Abbreviations
1Must be set to zero unless stated differently.

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 6 of 88
2.0.Features
•USB 2.0 Full Speed Interface
•Bluetooth® Smart Interface
•Plug and Play – CCID support brings utmost mobility
•USB Firmware Upgradeability2
•Smart Card Reader:
oSupports ISO 7816 Class A, B and C (5 V, 3 V, 1.8 V) cards
oSupports microprocessor cards with T=0 or T=1 protocol
oSupports memory cards
oSupports PPS (Protocol and Parameters Selection)
oFeatures Short Circuit Protection
oSupports AES-128 encryption algorithm
•Application Programming Interface:
oSupports PC/SC
oSupports CT-API (through wrapper on top of PC/SC)
•Supports Android™ 4.3 and above3
•Supports iOS 5.0 and above4
•Built-in Peripherals:
oLEDs
•Compliant with the following standards:
oEN60950/IEC 60950
oISO 7816
oCE
oFCC
oVCCI
oPC/SC
oCCID
oEMV™ 2000 Level 1
oBluetooth® Smart
oMicrosoft®WHQL
oRoHS 2
oREACH
2Applicable under PC-linked mode
3PC/SC and CCID support are not applicable
4Same as above

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 7 of 88
3.0.Smart Card Support
3.1. MCU Cards
ACR3901U-S1 is a PC/SC compliant smart card reader that supports ISO 7816 Class A, B and C (5
V, 3 V, and 1.8 V) smart cards. It also works with MCU cards following either the T=0 and T=1
protocol.
The card ATR indicates the specific operation mode (TA2 present; bit 5 of TA2 must be 0) and when
that particular mode is not supported by the ACR3901U-S1, it will reset the card to negotiable mode. If
the card cannot be set to negotiable mode, the reader will then reject the card.
When the card ATR indicates the negotiable mode (TA2 not present) and communication parameters
other than the default parameters, the ACR3901U-S1 will execute the PPS and try to use the
communication parameters that the card suggested in its ATR. If the card does not accept the PPS,
the reader will use the default parameters (F=372, D=1).
For the meaning of the aforementioned parameters, please refer to ISO 7816-3.
3.2. Memory-based Smart Cards
ACR3901U-S1 works with several memory-based smart cards such as:
•Cards following the I2C bus protocol (free memory cards) with maximum 128 bytes page with
capability, including:
oAtmel®: AT24C01/02/04/08/16/32/64/128/256/512/1024
oSGS-Thomson: ST14C02C, ST14C04C
oGemplus: GFM1K, GFM2K, GFM4K, GFM8K
•Cards with secure memory IC with password and authentication, including:
oAtmel®: AT88SC153 and AT88SC1608
•Cards with intelligent 1 KB EEPROM with write-protect function, including:
oInfineon®: SLE4418, SLE4428, SLE5518 and SLE5528
•Cards with intelligent 256 bytes EEPROM with write-protect function, including:
oInfineon®: SLE4432, SLE4442, SLE5532 and SLE5542
•Cards with ‘104’ type EEPROM non-reloadable token counter cards, including:
oInfineon®: SLE4406, SLE4436, SLE5536 and SLE6636
•Cards with Intelligent 416-bit EEPROM with internal PIN check, including:
oInfineon®: SLE4404
•Cards with Security Logic with Application Zone(s), including:
oAtmel®: AT88SC101, AT88SC102 and AT88SC1003

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 8 of 88
4.0.System Block Diagram
Figure 1: ACR3901U-S1 Architecture
ACR3901U-S1
Power
Management
MCU
Bluetooth
Mobile device or
Computer
LEDs
Full-sized
Card
Re-chargeable
battery
Bluetooth module
USB
Computer

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 9 of 88
5.0.Hardware Design
5.1. Battery
ACR3901U-S1 is using a rechargeable Lithium-ion battery which has a capacity of 320 mAh.
5.1.1. Battery charging
Once the battery of ACR3901U-S1 runs out, it may be charged in any of the following modes: OFF,
USB, Bluetooth; as long as it is connected to a power outlet.
5.1.2. Battery life
The battery life is dependent on the usage of the device. Below is an estimate of the battery life
depending on the various work conditions:
Mode Estimated Battery Life
Working Mode 10 hours*
Standby Mode 7 days
OFF Mode 8 years
Table 2: Estimated Battery Lifespan
*Note: Results may vary as it depends on the smart card used.
5.2. Bluetooth Interface
ACR3901U-S1 uses Bluetooth Low Energy (LE) 4.0 as the medium to pair the device with
computers/mobile devices.
5.3. USB Interface
The Micro USB port is used to connect the ACR3901U-S1 to the computer as battery charging port.
This port is also used in order for the ACR3901U-S1 to operate in PC-linked mode.
5.3.1. Communication Parameters
ACR3901U-S1 is connected to a computer through USB as specified in the USB Specification 2.0.
ACR3901U-S1 is working in full speed mode, i.e. 12 Mbps.
Pin Signal Function
1 VBUS +5 V power supply for the reader
2 D- Differential signal transmits data between ACR3901U-S1 and PC
3 D+ Differential signal transmits data between ACR3901U-S1 and PC
4 GND Reference voltage level for power supply
Table 3: USB Interface Wiring

ACR3901U-S1 – Reference Manual [e-mail]
Version 1.01 www.acs.com.hk
Page 10 of 88
5.3.2. Endpoints
ACR3901U-S1 uses the following endpoints to communicate with the host computer:
Control Endpoint For setup and control purpose
Bulk OUT For command to be sent from host to ACR3901U-S1
(data packet size is 64 bytes)
Bulk IN For response to be sent from ACR3901U-S1 to host
(data packet size is 64 bytes)
Interrupt IN For card status message to send from ACR3901U-S1 to host
(data packet size is 8 bytes)
5.4. User Interface
5.4.1. Mode Selection Switch
ACR3901U-S1 has three modes: USB, Off and Bluetooth. User can select one mode at a time as a
data transmission interface.
Symbol Switch Active Mode
USB PC-linked
Off No power
Bluetooth Bluetooth
Table 4: Mode Selection Switch
5.4.2. Status LED
ACR3901U-S1 has three LEDs to show the various operation status, where:
•Red LED - Battery status
•Blue LED - Bluetooth status
•Green LED - Card and reader status
Color LED Activity Status
Red
Off
•The battery is fully charged
•The reader is powered off
•The voltage of the battery is greater than 2.8 V and
no USB powered is being supplied
On •The battery is charging
Slow flash
(1 second/flash) •The battery needs to be charged
Blue Off
•The reader is powered off
•There is no Bluetooth device paired, or being paired
•The reader is in USB mode