Kobil KAAN Standard Plus Manual

Copyright © 2000-2002 KOBIL Systems GmbH.
All rights reserved. This manual may not be copied, or reproduced in any other way,
without prior permission by KOBIL System GmbH. This applies equally to any part of
the manual.
Every effort has been made to guarantee the correctness of this manual.
Nonetheless, KOBIL Systems GmbH assumes no warranty regarding its correctness
or completeness. The serviceability and suitability for any specific purposes is not
guaranteed. Information contained in this manual is subject to change without prior
notification, with no legal claims arising out of this fact.
Information that was unavailable until after this manual went into print may be found
– where applicable – in the file README.TXT on the enclosed data medium.
For further information on KOBIL smart card terminals, technical assistance, and
other KOBIL security products, confer the internet under http://www.kobil.com/.
Version: 1.2
Date: December 3, 2002
Editor: hjr
All brand and product name identified here are trademarks or registered trademarks
the rights to which are held by their respective legal rights owners.
Published by KOBIL Systems GmbH
Copyright © 2000-2002

KOBIL Smart Card Terminal Manual
Page
3
1 Contents
1 Contents ............................................................................................................... 3
2 Abbreviations........................................................................................................ 6
3 General Information.............................................................................................. 7
4 Installation and Startup......................................................................................... 7
4.1 Items Included in the Package ..................................................................... 7
4.2 System Requirements .................................................................................. 8
4.3 Connecting to PC with Windows Operating System..................................... 9
4.3.1 Product: KAAN Standard Plus USB / SecOVID Reader Plus USB ........... 9
Step 1: Installing the Driver......................................................................................... 9
Step 2: Shutting down the Computer.......................................................................... 9
Step 3: Connecting the Smart Card Terminal ........................................................... 10
Step 4: Rebooting your Computer ............................................................................ 11
How to Insert the Smart card:................................................................................... 11
Function of the ‘C’ Button ......................................................................................... 12
4.3.2 Product: KAAN Standard Plus serial / SecOVID Reader Plus serial....... 13
Step 1: Installing the Drivers..................................................................................... 13
Step 2: Shutting down the Computer........................................................................ 13
Step 3: Connecting the Smart card Terminal............................................................ 13
Step 4: Rebooting the Computer .............................................................................. 15
How to Insert the Smart card:................................................................................... 15
Function of the ‘C’ button.......................................................................................... 16
4.4 Installing the Software ................................................................................ 17
5 Security-relevant Functions ................................................................................ 18
5.1 Secure PIN Input........................................................................................ 20
5.2 Secure PIN Change ................................................................................... 21
5.3 SecOVID .................................................................................................... 23
5.3.1 SecOVID Online Mode ........................................................................... 24
5.3.2 SecOVID Offline Mode ........................................................................... 25
6 System Overview................................................................................................ 27
7 The CT–API........................................................................................................ 29
7.1 Functions.................................................................................................... 29
7.2 CT_init........................................................................................................ 30
7.3 CT_data ..................................................................................................... 31
7.4 CT_close .................................................................................................... 32
7.5 General Return Codes of the CT-API Functions ........................................ 32
7.6 Using the CT-API: The Example of the Public Health Insurance Card....... 33
8 Tag Length Value (TLV) Representation ............................................................ 35
8.1 Set-up of a TLV Field ................................................................................. 35
8.2 Coding Rules.............................................................................................. 35
8.3 Coding the Tags ......................................................................................... 36
9 The Smart card Terminal File System ................................................................ 39
9.1 File Control Information .............................................................................. 39
9.2 Directories .................................................................................................. 40
9.3 Hierarchical Set-up..................................................................................... 41
9.4 HOST Configuration File ............................................................................ 41
9.5 HOST Status File ....................................................................................... 42

KOBIL Smart Card Terminal Manual
Page
4
9.6 CT Configuration File ................................................................................. 42
9.7 HOST / CT Configuration File .................................................................... 43
9.8 HOST / CT Status File................................................................................ 43
9.9 Freeze Configuration File ........................................................................... 43
9.10 Freeze Status File ...................................................................................... 44
9.11 ICC Configuration File ................................................................................ 44
9.12 ICC Status File ........................................................................................... 44
10 Application Commands .................................................................................. 45
10.1 CT Application Commands......................................................................... 45
10.2 Command Overview................................................................................... 46
10.3 Status Bytes SW1 and SW2....................................................................... 47
10.4 Erase Binary............................................................................................... 48
10.5 Verify .......................................................................................................... 49
10.6 Select File .................................................................................................. 50
10.7 Read Binary ............................................................................................... 51
10.8 Write Binary................................................................................................ 52
10.9 Reset.......................................................................................................... 53
10.10 Reset CT ................................................................................................ 54
10.11 Request ICC ........................................................................................... 55
10.12 Deactivate............................................................................................... 57
10.13 Eject ICC ................................................................................................ 58
10.14 Get Status............................................................................................... 59
10.15 Input........................................................................................................ 60
10.16 Output..................................................................................................... 61
10.17 Perform Verification ................................................................................ 62
10.18 Modify Verification Data.......................................................................... 65
10.19 Reset 1 ................................................................................................... 67
10.20 Set Interface Parameter.......................................................................... 68
10.21 Freeze .................................................................................................... 69
10.22 Wait Freeze ............................................................................................ 70
10.23 ICC Application Commands.................................................................... 71
10.24 Selecting Synchronous ICCs - (only KAAN Standard Plus).................... 72
10.25 Commands for Selecting Synchronous ICCs - (only KAAN Standard Plus)
73
10.26 File Types - (only KAAN Standard Plus)............................................... 73
10.27 Handling the Public Health Insurance Card (only KAAN Standard Plus) 73

KOBIL Smart Card Terminal Manual
Page
5
Change Management
Version Changes
V 1.2.1 MAY 5, 03 In section10.14 Get Status in the table
response DOs:
the designations of the functional units in the functional unit data
object have been corrected in the following manner:
'01' = ICC1, '02' = ICC2, '40' = display, '50' = keyboard
V 1.2 DEC 3, 02 Deployment area, replacing the battery
V 1.1 NOV 21, 02 SecOVID online, synchronous protocols, TAGS table 9, image
labels
V 1.0 NOV 13, 02 Initial version

KOBIL Smart Card Terminal Manual
Page
6
2 Abbreviations
API Application Programming Interface
ATR Answer to Reset
CLA Class-Byte
CT Smart Card Terminal
CTN Card Terminal Number
CWT Character Waiting Time
DAD Device Address; here: Destination Address
DO Data Object (also confer TLV)
GKAPI GeldKarte Application Programming Interface (for German cash card type)
HTSI Host Transport Service Interface
IA5 International Alphabet No. 5
ICC Integrated Circuit Card
ID Identification
INS Instruction Byte
KSS KAAN serial interface (Protocol, commands... etc.)
KVK Kranken-Versicherten-Karte (German public health insurance card)
LED Light Emitting Diode
P1 Parameter Byte 1
P2 Parameter Byte 2
PTS Protocol Type Select
SAD Source Address
SW1 Status Byte 1
SW2 Status Byte 2
TLV Tag Length Value
USB Universal Serial Bus
Table 1: Abbreviations

KOBIL Smart Card Terminal Manual
Page
7
3 General Information
This manual describes the performance features, installation, operation, and
programming of KOBIL smart card terminals KAAN Standard Plus and SecOVID
Reader Plus. Sections 6 though 10 serve exclusively the documentation of the
programming interfaces.
Important information is highlighted in bold type.
4 Installation and Startup
4.1 Items Included in the Package
Included in your KOBIL smart card terminal package are:
• KOBIL smart card terminal KAAN Standard Plus or SecOVID Reader Plus,
respectively
• Data medium including manual, drivers and test applications
• Set of cables (either a serial cable or a USB cable)
• Device base station
• Quick guide for start-up
Image 1 shows the three security labels of the smart card terminal. Since the smart
card terminal is offering a variety of security-related functions, it is essential for the
three decals displayed on the backside of the smart card terminal (“security labels”)
to show that the housing has not been tampered with.
Please make sure that none of the three security labels have been removed or
destroyed. This is the only way to guarantee that the smart card terminal
functions properly. The security labels protect you as a consumer against
unauthorized manipulation of the hardware and/or software of the smart card
terminal.
Please be sure to read up on the security features of the smart card terminal
under Section 5.
Image 1 also shows the function buttons of the smart card terminal (cancel/correct-,
function-, and confirm buttons).

KOBIL Smart Card Terminal Manual
Page
8
4.2 System Requirements
You will need a free COM port and a (sliding contact) PS/2 socket, or a USB port.
Software drivers for MS Windows 9x / ME / NT / 2000 / XP as well as for Linux,
Solaris, HP-UX and OS/2 are enclosed. Drivers for MS-DOS versions 5.0 and higher,
as well as for MS Windows 3.1, can be obtained from KOBIL Systems upon request.
You will find other drivers as well as updated versions in the internet under
www.kobil.com.
Image 1: Arrangement of Buttons and Security Labels

KOBIL Smart Card Terminal Manual
Page
9
4.3 Connecting to PC with Windows Operating System
The smart card terminal will be ready for operation as soon as it is connected
to your PC. It requires no configuration. In order to enable your application to
access the smart card terminal you need to install a driver. The subsequent
sections will discuss the installation process in detail.
4.3.1 Product: KAAN Standard Plus USB / SecOVID Reader Plus USB
Note: Before connecting the KAAN Standard Plus / SecOVID Reader Plus you
will have to install a driver!
Note for Windows NT users: Windows NT will not support the USB variation of
the smart card terminal at present.
Step 1: Installing the Driver
Start your PC. The smart card terminal has not yet been connected. Insert
the driver CD enclosed. The set-up should start automatically. In case it does
not, use the Explorer to start the set-up manually.
Note: Please quit all running programs before starting the set-up,
because the PC will automatically reboot once the set-up has been
executed.
Step 2: Shutting down the Computer
Setup will now cause your computer to shut down. Please switch off your
computer off as soon as it has shut down.

KOBIL Smart Card Terminal Manual
Page
10
Step 3: Connecting the Smart Card Terminal
There are two options for connecting the KAAN Standard Plus / SecOVID
Reader Plus to your PC:
a) Use the USB cable enclosed to connect the base station of the smart card
terminal to a free USB port of your PC (cf. Image 2). Afterwards, place the
smart card terminal in the base station. When doing so, make sure that the
triangular markings on the smart card terminal are exactly aligned with those
of the base station (cf. Image 4 below).
Image 2
b) Use the USB cable enclosed to connect the smart card terminal directly to a
free USB port at your PC (cf. Image 3).
Image 3
Note: If you are using a USB hub, please make sure that it is a so-
called “powered hub” complete with its own power supply.

KOBIL Smart Card Terminal Manual
Page
11
Step 4: Rebooting your Computer
Please switch your computer back on now. After the start of Windows the set-
up will resume automatically and conclude the installation.
Note: Under Windows 2000 and Windows XP it can happen that a
warning message regarding the digital signature of the drivers is
being displayed. You may simply skip his warning message by
clicking on “Continue Installation.”
How to Insert the Smart card:
Thanks to its card tray, the KAAN Standard Plus / SecOVID Reader Plus
allows you to insert both smart cards of credit card size (ID-1 format) and
smaller SIM cards (ID-000 format).
Before inserting a “normal” smart card, please make sure that the tray has
been removed from the device. Now insert the card with the chip (gold-
colored) head-first into the smart card terminal (cf. Image 4).
Image 4

KOBIL Smart Card Terminal Manual
Page
12
In order to insert a small-format SIM card, please remove the tray. The SIM
card can only be placed in the tray in one position. Make sure when emplacing
the card that the card contacts remain visible. Afterwards, reinsert the
emplaced card into the device (cf. Image 5).
Image 5
Function of the ‘C’ Button
During the secure PIN input, or during PIN change via the keyboard of the
KAAN Standard Plus / SecOVID Reader Plus, the ‘C’ button serves the
purpose of deleting the digit last entered. Pressing the ‘C’ button before any
digit has been entered, or after all entered digits have been deleted, will cause
the entire process to abort.

KOBIL Smart Card Terminal Manual
Page
13
4.3.2 Product: KAAN Standard Plus serial / SecOVID Reader Plus serial
Note: Before connecting the KAAN Standard Plus / SecOVID Reader Plus
you will have to install the drivers!
Step 1: Installing the Drivers
Start your PC. The smart card terminal has not yet been connected. Insert
the driver CD enclosed. The set-up should start automatically. If it does not,
use the Explorer to start the set-up manually.
Note: Please quit all running programs before starting the set-up,
because the PC will automatically reboot once the set-up has been
executed.
Step 2: Shutting down the Computer
The set-up will now shut down your computer. Please switch your computer off
as soon as it has shut down.
Step 3: Connecting the Smart card Terminal
First of all, please make sure that your PC is switched off, otherwise you might
damage the PS/2 port if the Reader is plugged in or out while the PC is up and
running.

KOBIL Smart Card Terminal Manual
Page
14
You have two options for connecting the smart card terminal to your PC:
a) Connect the base station of the smart card terminal to the serial
interface (COM1 or COM2) of the PC (nine pin socket). The power is
supplied through a PS/2 adapter which is looped in the PS/2 socket of
keyboard or mouse, that is, the adapter is plugged directly into the PC
and the keyboard or mouse into the adapter (cf. Image 6). Afterwards,
place the smart card terminal in its base station. Make sure when doing
so that the triangular markings are exactly aligned with those of the
base station (cf. Image 8 below).
Image 6
b) Use the Y cable enclosed to connect the smart card terminal directly to
the serial interface (COM1 or COM2) of the PC (nine pin socket). The
power is supplied through a PS/2 adapter which is looped in the PS/2
socket of the keyboard of the mouse, that is, the adapter is plugged
directly into the PC and the keyboard or mouse into the adapter (cf.
Image 7).
Image 7
Mouse or Keyboard
Mouse or

KOBIL Smart Card Terminal Manual
Page
15
If your computer does not come with a PS/2 port, get an adapter at your
electronics dealer’s.
Step 4: Rebooting the Computer
Please switch your computer back on now. After the Windows start the set-up
will automatically resume and conclude the installation.
Note: Under Windows 2000 and Windows XP it may happen that a
warning message regarding the digital signature of the drivers is
displayed. You may simply skip his warning message by clicking on
“Continue Installation.”
How to Insert the Smart card:
Thanks to its card tray, the KAAN Standard Plus / SecOVID Reader Plus
allows you to insert both smart cards of credit card size (ID-1 format) and
smaller SIM cards (ID-000 format).
To insert a “normal” smart card, please make sure that the tray has been
removed from the device. Then insert the card with the chip (gold-colored)
head-first into the top of the smart card terminal (cf. image 8).
Image 8

KOBIL Smart Card Terminal Manual
Page
16
In order to insert a small-format SIM card, please remove the tray. The SIM
card can only be placed in the tray in one position. Make sure when emplacing
the card that the card contacts remain visible. Afterwards, reinsert the
embedded card into the device (cf. Image 9).
Image 9
Function of the ‘C’ button
During the secure PIN input, or during PIN change via the keyboard of the
KAAN Standard Plus / SecOVID Reader Plus, the ‘C’ button serves the
purpose of deleting the digit last entered. Pressing the ‘C’ button before any
digit has been entered, or after all entered digits have been deleted, will cause
the entire process to abort.

KOBIL Smart Card Terminal Manual
Page
17
4.4 Installing the Software
If you wish to install drivers, the new smart card terminal should not yet be
connected.
Insert the drivers CD enclosed. The set-up should start automatically. If it does not,
please use your Explorer to start the file “setup.exe” manually on your data medium
(diskette or CD-ROM). Select the software of your choice and follow the steps as
displayed on the screen.
Note: Please quit all running program before starting the driver set-up,
because your PC will automatically reboot after executing the driver set-
up.
Download updated version of the driver software under. www.kobil.com.
Optionally, you may install the files for software development in your workstation.
You will need these files only if you intend to develop applications for accessing and
using the smart card terminal. To this end you will have to install the corresponding
header files CT_API.H and the corresponding import library and DLL into any
directory.

KOBIL Smart Card Terminal Manual
Page
18
5 Security-relevant Functions
The KOBIL smart card terminals KAAN Standard Plus and SecOVID Reader Plus are
intended for deployment in the customer’s domestic sphere and at non-public work
places. They are explicitly not intended for unsupervised public usage.
The smart card terminals come with several security-relevant functions designed to
protect you as a user. From this perspective it is important for you to verify that the
smart card terminal has not been subject to manipulation.
Please see for yourself that none of the three security labels (Image 10: Security
Label) has been removed or destroyed (Image 1: Arrangement of Buttons and
Security Labels). This is the only way to guarantee that the smart card terminal is
functioning properly. The security labels are printed on a special film, making it
impossible to remove a given label without destroying it. Another security feature is
the special imprint. When exposed to UV light, the lettering “KOBIL” will become
visible. The security labels are designed to protect you as customer against
unauthorized manipulation of the hardware and/or software of the smart card
terminal.
Image 10: Security Label
Please make sure before taking any security-relevant functions into operation
that your KOBIL smart card terminal is equipped with a certified firmware for
the purpose. The respective firmware version is identified on the label in the
back of the smart card terminal.

KOBIL Smart Card Terminal Manual
Page
19
KOBIL Smart Card
Terminal
Certification / Evaluation Versions
SecOVID Reader Plus
1
ITSEC “E2-high,”
confirmed in compliance with the
German Signature Act (SigG)
FW: 02101612
KAAN Standard Plus
ITSEC “E2-high,”
confirmed in compliance with the
German Signature Act (SigG)
FW: 02101652
Table 2: Certified Firmware Versions of KOBIL Smart card Terminals
Replacing the batteries: In case the batteries of your SecOVID Reader Plus need
to be replaced, you can request KOBIL Systems GmbH to take care of it against a
charge. In the process, the batteries and the label on the battery compartment will be
replaced. To this end, you will find a corresponding order form on our homepage
http://www.kobil.com. Please note that the battery will only be replaced by KOBIL if
all security labels are intact.
1The SecOVID functionality of the SecOVID Reader Plus as described in Chapter 5.3 was not part of
the ITSEC-Evaluation.

KOBIL Smart Card Terminal Manual
Page
20
5.1 Secure PIN Input
The smart card terminal KAAN Standard Plus / SecOVID Reader Plus (in the online
mode) supports the secure input of your smart card PINs. This application allows
you, for instance, to enter the PIN (personal identification number) of your smart card
– such as for smart cards compliant with the German Signature Act – directly at the
smart card terminal. The advantage of doing so is that no virus or malicious software
can intercept the PIN on your PC. Make sure when buying security-relevant software
that it supports secure PIN input according to the MKT standard.
The character 'P’ followed by a sequence of vertical bars in the lower half of the
display will prompt you to enter your PIN. Whenever a digit is entered the next
vertical bar (from left to right) will move into the upper half of the display.
Image 11: Sequence of Secure PIN Input
Image 11 shows the sequence of the secure PIN entry. Secure PIN input is indicated
when the letter ‘P’ is followed by a sequence of fourteen vertical bars in the lower half
of the display (cf. Image 11).
 Whenever you see the letter ‘P,’ followed by a sequence of fourteen
vertical bars in the lower half of the display, you can safely enter your PIN
through the keyboard of the smart card terminal. Never enter your PIN into
the keyboard of the smart card terminal if your display shows a different
message.