Magtek MagneSafe V5 User manual

MagneSafe V5
COMMUNICATION REFERENCE MANUAL
PART NUMBER 99875475-10
NOVEMBER 2012
REGISTERED TO ISO 9001:2008
1710 Apollo Court
Seal Beach, CA 90740
Phone: [phone]
FAX: [phone]
Technical Support: [phone]
www.magtek.com

ii
Copyright©2001-2013
MagTek®, Inc.
Printed in the United States of America
Information in this document is subject to change without notice. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of MagTek, Inc.
MagTek is a registered trademark of MagTek, Inc.
MagnePrint is a registered trademark of MagTek, Inc.
MagneSafe™is a trademark of MagTek, Inc.
Magensa™is a trademark of MagTek, Inc.
USB (Universal Serial Bus) Specification is Copyright©1998 by Compaq Computer
Corporation, Intel Corporation, Microsoft Corporation, NEC Corporation.
Appendix A is taken from Universal Serial Bus HID Usage Tables, Version 1.12, Section 10,
Keyboard/Keypad Page (0x07) ©1996-2005 USB Implementers’ Forum
Appendix B is taken from Section 8.3 Report Format for Array Items, Device Class Definition
for Human Interface Devices (HID) Version 1.11, ©1996-2001 USB Implementers’ Forum,
[email protected]
REVISIONS
Rev
Number
Date
Notes
1.01
08 Jan 10
Initial Release (previously part of 99875388)
2.01 03/29/2010 Corrected settings for SureSwipe mode; corrected data length
values in a few of the examples
3.01
May 25, 2010
Updated some text to be consistent with other manuals
4.01
July 2, 2010
Added Bulk Encryption
5.01
June, 24, 2011
Corrected default for MP Flags Property; added properties and
commands for Flash, Insert and Serial readers; corrected references
to USB and other interface types; included comprehensive property
map
6.01
November 4, 2011
Property 0x0E available for BulleT
7.01
November 8, 2011
Removed “only once” from the Set Property entry of the USB Serial
Num Property and changed default value to the device serial
number; changed default value of Device Serial Num Property to the
device serial number
8.01 January 12, 2012 Changed “Wireless USB Reader Only” to “BulleT, Flash, Wireless
USB” on Activity Timeout Period and Stay Powered After Swipe
Property.; added note showing how to leave power on continuously
9.01
January 25, 2012
Updated some properties to reflect UART/RS-232 operation
10.01
November 30, 2012
Added BulleT KB interface

iii
LIMITED WARRANTY
MagTek warrants that the products sold pursuant to this Agreement will perform in accordance with MagTek’s
published specifications. This warranty shall be provided only for a period of one year from the date of the
shipment of the product from MagTek (the “Warranty Period”). This warranty shall apply only to the “Buyer”
(the original purchaser, unless that entity resells the product as authorized by MagTek, in which event this
warranty shall apply only to the first repurchaser).
During the Warranty Period, should this product fail to conform to MagTek’s specifications, MagTek will, at its
option, repair or replace this product at no additional charge except as set forth below. Repair parts and
replacement products will be furnished on an exchange basis and will be either reconditioned or new. All replaced
parts and products become the property of MagTek. This limited warranty does not include service to repair
damage to the product resulting from accident, disaster, unreasonable use, misuse, abuse, negligence, or
modification of the product not authorized by MagTek. MagTek reserves the right to examine the alleged
defective goods to determine whether the warranty is applicable.
Without limiting the generality of the foregoing, MagTek specifically disclaims any liability or warranty for
goods resold in other than MagTek’s original packages, and for goods modified, altered, or treated without
authorization by MagTek.
Service may be obtained by delivering the product during the warranty period to MagTek (1710 Apollo Court,
Seal Beach, CA 90740). If this product is delivered by mail or by an equivalent shipping carrier, the customer
agrees to insure the product or assume the risk of loss or damage in transit, to prepay shipping charges to the
warranty service location, and to use the original shipping container or equivalent. MagTek will return the
product, prepaid, via a three (3) day shipping service. A Return Material Authorization (“RMA”) number must
accompany all returns. Buyers may obtain an RMA number by contacting Technical Support at [phone].
EACH BUYER UNDERSTANDS THAT THIS MAGTEK PRODUCT IS
OFFERED AS IS. MAGTEK MAKES NO OTHER WARRANTY, EXPRESS OR
IMPLIED, AND MAGTEK DISCLAIMS ANY WARRANTY OF ANY OTHER
KIND, INCLUDING ANY WARRANTY OF MERCHANTABILITY OR FITNESS
FOR A PARTICULAR PURPOSE.
IF THIS PRODUCT DOES NOT CONFORM TO MAGTEK’S SPECIFICATIONS, THE SOLE REMEDY
SHALL BE REPAIR OR REPLACEMENT AS PROVIDED ABOVE. MAGTEK’S LIABILITY, IF ANY,
SHALL IN NO EVENT EXCEED THE TOTAL AMOUNT PAID TO MAGTEK UNDER THIS
AGREEMENT. IN NO EVENT WILL MAGTEK BE LIABLE TO THE BUYER FOR ANY DAMAGES,
INCLUDING ANY LOST PROFITS, LOST SAVINGS, OR OTHER INCIDENTAL OR CONSEQUENTIAL
DAMAGES ARISING OUT OF THE USE OF, OR INABILITY TO USE, SUCH PRODUCT, EVEN IF
MAGTEK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, OR FOR ANY CLAIM BY
ANY OTHER PARTY.
LIMITATION ON LIABILITY
EXCEPT AS PROVIDED IN THE SECTIONS RELATING TO MAGTEK’S LIMITED WARRANTY,
MAGTEK’S LIABILITY UNDER THIS AGREEMENT IS LIMITED TO THE CONTRACT PRICE OF THIS
PRODUCT.
MAGTEK MAKES NO OTHER WARRANTIES WITH RESPECT TO THE PRODUCT, EXPRESSED OR
IMPLIED, EXCEPT AS MAY BE STATED IN THIS AGREEMENT, AND MAGTEK DISCLAIMS ANY
IMPLIED WARRANTY, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
MAGTEK SHALL NOT BE LIABLE FOR CONTINGENT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES TO PERSONS OR PROPERTY. MAGTEK FURTHER LIMITS ITS LIABILITY OF ANY KIND
WITH RESPECT TO THE PRODUCT, INCLUDING ANY NEGLIGENCE ON ITS PART, TO THE
CONTRACT PRICE FOR THE GOODS.
MAGTEK’S SOLE LIABILITY AND BUYER’S EXCLUSIVE REMEDIES ARE STATED IN THIS SECTION
AND IN THE SECTION RELATING TO MAGTEK’S LIMITED WARRANTY.

iv
FCC WARNING STATEMENT
This equipment has been tested and was found to comply with the limits for a Class B digital device pursuant to
Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful interference
when the equipment is operated in a residential environment. This equipment generates, uses, and can radiate
radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference with radio communications. However, there is no guarantee that interference will not occur
in a particular installation.
FCC COMPLIANCE STATEMENT
This device complies with Part 15 of the FCC Rules. Operation of this device is subject to the following two
conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference
received, including interference that may cause undesired operation.
CANADIAN DOC STATEMENT
This digital apparatus does not exceed the Class B limits for radio noise from digital apparatus set out in the
Radio Interference Regulations of the Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux
appareils numériques de la classe B prescrites dans le Réglement sur le brouillage radioélectrique édicté par le
ministère des Communications du Canada.
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numériqué de la classe B est conformé à la norme NMB-003 du Canada.
CE STANDARDS
Testing for compliance with CE requirements was performed by an independent laboratory. The unit under test
was found compliant with standards established for Class B devices.
UL/CSA
This product is recognized per Underwriter Laboratories and Canadian Underwriter Laboratories 1950.
RoHS STATEMENT
When ordered as RoHS compliant, this product meets the Electrical and Electronic Equipment (EEE) Reduction
of Hazardous Substances (RoHS) European Directive 2002/95/EC. The marking is clearly recognizable, either as
written words like “Pb-free”, “lead-free”, or as another clear symbol ( ).

v
TABLE OF CONTENTS
SECTION 1. SECURITY............................................................................................................1
SECURITY LEVEL 2 ................................................................................................................................1
SECURITY LEVEL 3 ................................................................................................................................ 1
SECURITY LEVEL 4 ................................................................................................................................1
COMMANDS AND SECURITY LEVELS..................................................................................................2
SECTION 2. COMMUNICATIONS.............................................................................................3
HID USAGES............................................................................................................................................ 3
MAGNETIC STRIPE READER USAGE PAGE (HID) ..............................................................................4
REPORT DESCRIPTOR (HID) ................................................................................................................5
MAGNETIC STRIPE READER USAGE PAGE (KB)................................................................................7
REPORT DESCRIPTOR (KB)..................................................................................................................7
CARD DATA (HID) ...................................................................................................................................8
Track 1 Decode Status.......................................................................................................................10
Track 2 Decode Status.......................................................................................................................10
Track 3 Decode Status.......................................................................................................................10
Track 1 Encrypted Data Length..........................................................................................................10
Track 2 Encrypted Data Length..........................................................................................................10
Track 3 Encrypted Data Length..........................................................................................................11
Track 1 Absolute Data Length............................................................................................................11
Track 2 Absolute Data Length............................................................................................................11
Track 3 Absolute Data Length............................................................................................................11
Card Encode Type..............................................................................................................................11
Encrypted Track Data.........................................................................................................................11
Track 1 Encrypted Data......................................................................................................................12
Track 2 Encrypted Data......................................................................................................................12
Track 3 Encrypted Data......................................................................................................................12
Card Status.........................................................................................................................................12
MagnePrint Status..............................................................................................................................13
MagnePrint Data Length.....................................................................................................................13
MagnePrint Absolute Data Length .....................................................................................................13
Encrypted MagnePrint Data ...............................................................................................................14
Device Serial Number.........................................................................................................................14
Track 1 Masked Data Length .............................................................................................................14
Track 2 Masked Data Length .............................................................................................................14
Track 3 Masked Data Length .............................................................................................................14
Masked Track Data ............................................................................................................................14
Track 1 Masked Data .........................................................................................................................15
Track 2 Masked Data .........................................................................................................................15
Track 3 Masked Data .........................................................................................................................16
Encrypted Session ID.........................................................................................................................16
DUKPT Key Serial Number................................................................................................................16
Encryption Counter.............................................................................................................................16
MagneSafe Version Number..............................................................................................................17
Hashed Track 2 Data..........................................................................................................................17
Clear Text CRC ..................................................................................................................................17
Encrypted CRC...................................................................................................................................17
CARD DATA (KB AND OTHER MODELS)............................................................................................17
Reader Encryption Status...................................................................................................................19
Format Code.......................................................................................................................................20
PROGRAMMABLE CONFIGURATION OPTIONS ................................................................................20
Low Level Communications................................................................................................................21
COMMANDS ..........................................................................................................................................21
Privileged Commands ........................................................................................................................22

vi
Command Number.............................................................................................................................22
Data Length........................................................................................................................................23
Data....................................................................................................................................................23
Result Code........................................................................................................................................23
GET AND SET PROPERTY COMMANDS ............................................................................................23
Get Property Command......................................................................................................................23
Set Property Command......................................................................................................................24
Result Codes......................................................................................................................................24
PROPERTIES.........................................................................................................................................24
Property ID..........................................................................................................................................24
Property Default Values......................................................................................................................26
Software ID Property..........................................................................................................................26
USB Serial Num Property (USB)........................................................................................................27
Polling Interval Property (USB) ..........................................................................................................28
Device Serial Num Property...............................................................................................................29
MagneSafe Version Number..............................................................................................................29
Track ID Enable Property...................................................................................................................30
ISO Track Mask Property...................................................................................................................31
AAMVA Track Mask Property.............................................................................................................31
Max Packet Size Property (HID) ........................................................................................................32
UART/RS-232 COMMUNICATIONS PROPERTY (UART/RS-232 READERS ONLY).........................33
Activity Timeout Period Property (BulleT, Flash, Wireless USB).......................................................34
Bluetooth Disconnect Message Property (BulleT Only).....................................................................35
Track Data Transmission Delay Property (Flash Only)......................................................................35
Stay Powered After Swipe Property (BulleT, Flash, Wireless USB)..................................................36
RF Address Property (BulleT and Wireless USB Reader).................................................................36
Interface Type Property......................................................................................................................38
Track Data Send Flags Property (KB, BulleT SPP, Bullet KB, UART, RS-232)................................39
MP Flags Property..............................................................................................................................40
Active Keymap Property (KB).............................................................................................................41
ASCII to Keypress Conversion Type Property (KB)...........................................................................42
CRC Flag Property (KB and Serial Models).......................................................................................43
Keyboard SureSwipe Flag Property (KB, UART, RS-232).................................................................44
Decode Enable Property ....................................................................................................................44
SS JIS Type 2 Property......................................................................................................................45
ES JIS Type 2 Property......................................................................................................................46
Pre Card String Property (KB, BulleT, UART, RS-232) .....................................................................46
Post Card String Property (KB, BulleT, UART, RS-232)....................................................................47
Pre Track String Property (KB, BulleT, UART, RS-232)....................................................................47
Post Track String Property (KB, BulleT, UART, RS-232)...................................................................48
Termination String Property (KB, BulleT, UART, RS-232).................................................................49
FS Property (KB, BulleT, UART, RS-232)..........................................................................................49
SS Track 1 ISO ABA Property (KB, BulleT, UART, RS-232).............................................................49
SS Track 2 ISO ABA Property (KB, BulleT, UART, RS-232).............................................................50
SS Track 3 ISO ABA Property (KB, BulleT, UART, RS-232).............................................................50
SS Track 3 AAMVA Property (KB, BulleT, UART, RS-232)...............................................................50
SS Track 2 7bits Property (KB, BulleT, UART, RS-232)....................................................................51
SS Track 3 7bits Property (KB, BulleT, UART, RS-232)....................................................................51
ES Property (KB, BulleT, UART, RS-232)..........................................................................................51
Format Code Property (KB, BulleT, UART, RS-232) .........................................................................52
ES Track 1 Property (KB, BulleT, UART, RS-232).............................................................................52
ES Track 2 Property (KB, BulleT, UART, RS-232).............................................................................53
ES Track 3 Property (KB, BulleT, UART, RS-232).............................................................................53
Send Encryption Counter Property (KB, BulleT, UART, RS-232)......................................................53
Mask Other Cards Property................................................................................................................54
MSR Direction Property (Insert Reader Only)....................................................................................54

vii
Card Inserted Property (Insert Reader Only) .....................................................................................55
Send Clear AAMVA Card Data Property............................................................................................56
HID SureSwipe Flag Property (HID)...................................................................................................56
Software ID 2 Property (Wireless USB Reader Only)........................................................................57
Inter-Key Delay Property (BulleT KB).................................................................................................58
COMMAND LIST ....................................................................................................................................59
Reset Device Command.....................................................................................................................59
Get Keymap Item Command (KB)......................................................................................................60
Set Keymap Item Command (KB)......................................................................................................61
Save Custom Keymap Command (KB)..............................................................................................63
DUKPT Operation...............................................................................................................................63
Get DUKPT KSN and Counter Command.....................................................................................63
Set Session ID Command..................................................................................................................64
Activate Authenticated Mode Command............................................................................................65
Activation Challenge Reply Command...............................................................................................66
Deactivate Authenticated Mode Command........................................................................................67
Get Reader State Command..............................................................................................................68
Set Security Level Command.............................................................................................................70
Get Transaction Count Command (Flash Reader Only)....................................................................71
Read Oldest Transaction Command (Flash Reader Only) ................................................................71
Erase Oldest Transaction Command (Flash Reader Only)................................................................72
Get Encryption Counter Command....................................................................................................72
Power Down Command (Wireless USB Reader Only) ......................................................................73
Get Battery Status Command (Wireless USB Reader Only) .............................................................74
Encrypt Bulk Data Command.............................................................................................................74
SECTION 3. DEMO PROGRAM..............................................................................................77
INSTALLATION ......................................................................................................................................77
OPERATION...........................................................................................................................................77
SOURCE CODE.....................................................................................................................................78
APPENDIX A. KEYBOARD USAGE ID DEFINITIONS ...........................................................79
KEYBOARD/KEYPAD PAGE (0X07).....................................................................................................79
APPENDIX B. MODIFIER BYTE DEFINITIONS......................................................................87
APPENDIX C. GUIDE ON DECRYPTING DATA.....................................................................89
APPENDIX D. COMMAND EXAMPLES..................................................................................91
APPENDIX E. IDENTIFYING ISO/ABA AND AAMVA CARDS.............................................125
ISO/ABA FINANCIAL CARDS..............................................................................................................125
AAMVA DRIVER LICENSES................................................................................................................126
APPENDIX F. LIST OF PROPERTIES ..................................................................................127

viii

1
SECTION 1. SECURITY
The readers in the family are intended to be secure readers. Security features include:
•Supplies 54 byte MagnePrint value
•Includes Device Serial Number
•Encrypts all track data and the MagnePrint value
•Provides clear text confirmation data including card holder’s name, expiration date, and a
portion of the PAN as part of the Masked Track Data
•Supports Mutual Authentication Mode for use with Magensa.net
•Offers selectable levels of Security
Most of the MagneSafe readers support three Security Levels. The Security Level can be
increased by command but can never be decreased.
SECURITY LEVEL 2
Security Level 2 is the least secure user mode. In this mode, keys are loaded but not used for
most operations (only used to load new keys or move to Security Level 3 or 4). All other
properties and commands are freely usable.
For those products that support keyboard emulation mode or those that provide serial
information (e.g., via RS-232 communication), the reader sends data in the SureSwipe format as
defined in MagTek document 99875206. The default SureSwipe mode can be changed to allow
the reader to send data in the V5 format as described in this document but the MagnePrint data
will not be sent.
In the HID mode, the reader sends track data but does not send MagnePrint data. By default, the
data is sent in the format defined in this manual. Changing the HID SureSwipe Flag property to
0x01 will cause the reader to use the SureSwipe VID/PID and send data as defined in 99875191
(USB HID SureSwipe & USB HID Swipe Technical Reference Manual).
SECURITY LEVEL 3
Security Level 3 enables encryption of track data, MagnePrint data, and the Session ID.
MagnePrint data is always included and it is always encrypted. The format for the data is
detailed later in this document. At Security Level 3, many commands require security—most
notably, the Set Property command. Transition to Security Level 4 requires security.
SECURITY LEVEL 4
When the reader is at Security Level 4, a correctly executed Authentication Sequence is required
before the reader will emit data from a card swipe. Correctly executing the Authentication
Sequence also causes the Green LED to blink, alerting the user to the fact that the reader is being
controlled by a Host with knowledge of the keys—that is, an Authentic Host.
Commands that require security must be sent with a four byte Message Authentication Code
(MAC) appended to the end. The MAC is calculated as specified in ANSI X9.24 Part 1 – 2004,

MagneSafe V5
2
Annex A. Note that data supplied to the MAC algorithm should NOT be converted to the
ASCII-Hex, rather it should be supplied in its raw binary form. The MAC key to be used is as
specified in the same document (“Request PIN Entry 2” bullet 2). Calculating the MAC requires
knowledge of the current DUKPT KSN, which can be retrieved using the Get DUKPT KSN
and Counter command. For each command processed successfully, the DUKPT Key is
advanced.
COMMANDS AND SECURITY LEVELS
The following table shows how security levels affect the various commands. “Y” means the
command can run. “N” means the command is prohibited. “S” means the command is protected
(requires MACing). “X” means other (notes to follow).
Number
Command
Level 2
Level 3
Level 4
0x00
Get Property
Y
Y
Y
0x01
Set Property
Y
S
S
0x02
Reset Device
Y
X*
X*
0x03
Get Keymap Item
Y
Y
Y
0x04
Set Keymap Item
Y
S
S
0x05
Save Custom Keymap
Y
S
S
0x09
Get DUKPT KSN and Counter
Y
Y
Y
0x0A
Set Session ID
Y
Y
Y
0x10
Activate Authenticated Mode
N
Y
Y
0x11
Activation Challenge Reply
N
Y
Y
0x12
Deactivate Authenticated Mode
N
Y
Y
0x14
Get Reader State
Y
Y
Y
0x15
Set Security Level
S
S
S
0x16
Get Transaction count Command (Flash
Reader Only)
Y Y Y
0x17
Read Oldest Transaction Command
(Flash Reader Only)
Y Y Y
X018
Erase Oldest Transaction Command
(Flash Reader Only)
Y Y Y
0x1C
Get Encryption Counter
Y
Y
Y
0x28
Power Down Command (Wireless USB
Reader Only) Y Y Y
0x29
Get Battery Status Command (Wireless
USB Reader Only) Y Y Y
0x30
Encrypt Bulk Data Command
N
Y
Y
* The Reset command has special behavior. When an Authentication sequence has failed, only a
correctly MACd Reset command can be used to reset the reader. This is to prevent a dictionary
attack on the keys and to minimize a denial of service attack.

3
SECTION 2. COMMUNICATIONS
The USB readers covered in this document conform to the USB specification revision 1.1 and to
the Human Interface Device (HID) class specification version 1.1. The USB readers
communicate to the host either as a vendor-defined HID device or as a HID Keyboard Emulation
device. (Refer to Interface Type Property for information on how to change modes.) The latest
versions of the Windows operating system come with standard Windows USB drivers that will
support both modes.
The USB readers have an adjustable endpoint descriptor polling interval value that can be set to
any value in the range of 1ms to 255ms. This property can be used to speed up or slow down the
card data transfer rate. The USB readers also have an adjustable serial number descriptor. More
details about these properties can be found later in this document in the command section.
The USB readers will go into suspend mode when directed to do so by the host. The USB
readers will wake up from suspend mode when directed to do so by the host. The readers do not
support remote wakeup.
All of the USB models are full speed USB devices. They are powered from the USB bus. The
vendor ID (VID) is 0x0801. The product ID (PID) when in the HID mode is 0x0011 for the
swipe reader and 0x0013 for the insert reader. The product ID (PID) when in the Keyboard
Emulation mode is 0x0001 for both the swipe and insert reader. The wireless USB reader dongle
uses the same PID as for the wired USB swipe reader. However, the wireless USB reader can
also be directly connected to the host with a USB cable for updating firmware and charging the
battery. When the wireless reader is directly connected, the PID is 0x0014.
Since this document supplies programming information for a variety of readers, there are some
properties and commands that are exclusive to one or more of the devices. Where a property or
command is unique, it will be identified with HID,KB, Wireless USB, and/or UART/RS-232.
Properties and commands that are common to all models do not include any modifier.
HID USAGES
USB HID devices send data in reports. Elements of data in a report are identified by unique
identifiers called usages. The structure of the reader’s reports and the reader’s capabilities are
reported to the host in a report descriptor. The host usually gets the report descriptor only once,
right after the reader is plugged in. The report descriptor usages identify the reader’s capabilities
and report structures. Usages are four byte integers. The most significant two bytes are called
the usage page and the least significant two bytes are called usage IDs. Usages that are related
can share a common usage page. Usages can be standardized or they can be vendor defined.
Standardized usages such as usages for mice and keyboards can be found in the HID Usage
Tables document and can be downloaded free at www.usb.org.Vendor-defined usages must
have a usage page in the range 0xFF00 – 0xFFFF. All usages for this reader use vendor-defined
magnetic stripe reader usage page 0xFF00. The usage IDs for this reader are defined in the
following tables. The usage types are also listed. These usage types are defined in the HID
Usage Tables document.

MagneSafe V5
4
MAGNETIC STRIPE READER USAGE PAGE (HID)
Magnetic Stripe Reader usage page 0xFF00:
Usage ID
(Hex)
Usage Name
Usage
Type
Report
Type
1 Decoding reader device Collection None
20 Track 1 decode status Data Input
21 Track 2 decode status Data Input
22 Track 3 decode status Data Input
23 MagnePrint status Data Input
28 Track 1 encrypted data length Data Input
29 Track 2 encrypted data length Data Input
2A Track 3 encrypted data length Data Input
2B MagnePrint data length Data Input
30 Track 1 encrypted data Data Input
31 Track 2 encrypted data Data Input
32 Track 3 encrypted data Data Input
33 Encrypted MagnePrint data Data Input
38 Card encode type Data Input
39 Card status Data Input
40 Device Serial Number Data Input
42 Reader Encryption Status Data Input
46 DUKPT serial number/counter Data Input
47 Track 1 Masked data length Data Input
48 Track 2 Masked data length Data Input
49 Track 3 Masked data length Data Input
4A Track 1 Masked Data Data Input
4B Track 2 Masked Data Data Input
4C Track 3 Masked Data Data Input
50 Encrypted Session ID Data Input
51 Track 1 Data Absolute Length Data Input
52 Track 2 Data Absolute Length Data Input
53 Track 3 Data Absolute Length Data Input
54 MagnePrint Data Absolute Length Data Input
55 Encryption Counter Data Input
56 MagneSafe Version Number Data Input
57 Hashed Track 2 Data Data Input
20 Command message Data Feature

Section 2. Communications
5
REPORT DESCRIPTOR (HID)
The Report Descriptor is made available to the hosting system during USB enumeration. The
descriptor is shown here for completeness. Typically the hosting operating system will provide
the ability to parse HID Reports based on the actual Report Descriptor, using the assigned Usage
IDs. We strongly CAUTION the programmer to avoid depending on this specific structure as it
may change in future versions. The Report Descriptor is structured as follows:
Item
Value
(Hex)
Usage Page (Magnetic Stripe Reader) 06 00 FF
Usage (Decoding reader device) 09 01
Collection (Application) A1 01
Logical Minimum (0) 15 00
Logical Maximum (255) 26 FF 00
Report Size (8) 75 08
Usage (Track 1 decode status) 09 20
Usage (Track 2 decode status) 09 21
Usage (Track 3 decode status) 09 22
Usage (Track 1 encrypted data length) 09 28
Usage (Track 2 encrypted data length) 09 29
Usage (Track 3 encrypted data length) 09 2A
Usage (Card encode type) 09 38
Report Count (7) 95 07
Input (Data, Variable, Absolute, Bit Field) 81 02
Usage (Track 1 encrypted data) 09 30
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 2 encrypted data) 09 31
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 3 encrypted data) 09 32
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Card status) 09 39
Report Count (1) 95 01
Input (Data, Variable, Absolute, Bit Field) 81 02
Report Size (32) 75 20
Usage (MagnePrint status) 09 23
Report Count (1) 95 01
Input (Data, Variable, Absolute, Bit Field) 81 02

MagneSafe V5
6
Item
Value
(Hex)
Report Size (8) 75 08
Usage (MagnePrint data length) 09 2B
Report Count (1) 95 01
Input (Data, Variable, Absolute, Bit Field) 81 02
Usage (MagnePrint data) 09 33
Report Count (128) 95 80
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Device serial number) 09 40
Report Count (16) 95 10
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Reader Encryption Status) 09 42
Report Count (2) 95 02
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (DUKPT Serial Number/Counter) 09 46
Report Count (10) 95 0A
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 1 Masked data length) 09 47
Usage (Track 2 Masked data length) 09 48
Usage (Track 3 Masked data length) 09 49
Report Count (3) 95 03
Input (Data, Variable, Absolute, Bit Field) 81 02
Usage (Track 1 Masked data) 09 4A
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 2 Masked data) 09 4B
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 3 Masked data) 09 4C
Report Count (112) 95 70
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Encrypted Session ID) 09 50
Report Count (8) 95 08
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Track 1 Absolute data length) 09 51

Section 2. Communications
7
Item
Value
(Hex)
Usage (Track 2 Masked data length) 09 52
Usage (Track 3 Masked data length) 09 53
Usage (MagnePrint Absolute data length) 09 54
Report Count (4) 95 04
Input (Data, Variable, Absolute, Bit Field) 81 02
Usage (Encryption Counter) 09 55
Report Count (3) 95 03
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (MagneSafe Version Number) 09 56
Report Count (8) 95 08
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Hashed Track 2 Data) 09 57
Report Count (20) 95 14
Input (Data, Variable, Absolute, Buffered Bytes) 82 02 01
Usage (Command Message) 09 20
Report Count (60) 95 3C
Feature (Data, Variable, Absolute, Buffered Bytes) B2 02 01
End Collection C0
MAGNETIC STRIPE READER USAGE PAGE (KB)
Magnetic Stripe Reader usage page 0xFF00:
Usage ID
(Hex)
Usage Name
Usage
Type
Report
Type
20
Command message
Data
Feature
REPORT DESCRIPTOR (KB)
The Report Descriptor is structured as follows:
Item
Value(Hex)
Usage Page (Generic Desktop)
05 01
Usage (Keyboard)
09 06
Collection (Application)
A1 01
Usage Page (Key Codes)
05 07
Usage Minimum (224)
19 E0
Usage Maximum (231)
29 E7
Logical Minimum (0)
15 00
Logical Maximum (1)
25 01
Report Size (1)
75 01

MagneSafe V5
8
Item
Value(Hex)
Report Count (8)
95 08
Input (Data, Variable, Absolute)
81 02
Report Count (1)
95 01
Report Size (8)
75 08
Input (Constant)
81 03
Report Count (5)
95 05
Report Size (1)
75 01
Usage Page (LEDs)
05 08
Usage Minimum (1)
19 01
Usage Maximum (5)
29 05
Output (Data, Variable, Absolute)
91 02
Report Count (1)
95 01
Report Size (3)
75 03
Output (Constant)
91 03
Report Count (6)
95 06
Report Size (8)
75 08
Logical Minimum (0)
15 00
Logical Maximum (101)
25 66
Usage Page (Key Codes)
05 07
Usage Minimum (0)
19 00
Usage Maximum (101)
29 66
Input (Data, Array)
81 00
Logical Maximum (255)
26 FF 00
Usage Page (vendor defined (MSR))
06 00 FF
Usage (command data)
09 20
Report Count
95 18
Feature (Data, Variable, Absolute, Buffered Bytes)
B2 02 01
End Collection
C0
CARD DATA (HID)
The details about how the card data and commands are structured into HID reports follow later in
this section. Windows applications that communicate to this reader can be easily developed.
These applications can communicate to the reader using standard windows API calls that
communicate to the reader using the standard Windows USB HID driver. These applications can
be easily developed using compilers such as Microsoft’s Visual Basic or Visual C++. A
demonstration program and its source code, written in Visual Basic, that communicates with this
reader is available. This demo program can be used to test the reader and it can be used as a
guide for developing other applications. More details about the demo program follow later in
this document.
It is recommended that application software developers become familiar with the HID
specification the USB specification before attempting to communicate with this reader. This
document assumes that the reader is familiar with these specifications. These specifications can
be downloaded free from www.usb.org.

Section 2. Communications
9
Card data is only sent to the host on the Interrupt In pipe using an Input Report. The reader will
send only one Input Report per card swipe. If the host requests data from the reader when no
data is available, the reader will send a NAK to the host to indicate that it has nothing to send.
When a card is swiped, the Input Report will be sent even if the data is not decodable. The
following table shows how the input report is structured.
Offset
Usage Name
0
Track 1 decode status
1
Track 2 decode status
2 Track 3 decode status
3
Track 1 encrypted data length
4 Track 2 encrypted data length
5
Track 3 encrypted data length
6
Card encode type
7 – 118
Track 1 encrypted data
119 – 230 Track 2 encrypted data
231 - 342
Track 3 encrypted data
343 Card status
344 – 347
MagnePrint status
348
MagnePrint data length
349 - 476
MagnePrint data
477 – 492 Device serial number
493-494
Reader Encryption Status
495 – 504 DUKPT serial number/counter
505
Track 1 Masked data length
506
Track 2 Masked data length
507
Track 3 Masked data length
508 – 619 Track 1 Masked data
620 – 731
Track 2 Masked data
732 – 843 Track 3 Masked data
844 – 851
Encrypted Session ID
852
Track 1 Absolute data length
853
Track 2 Absolute data length
854 Track 3 Absolute data length
855
MagnePrint Absolute data length
856-858 Encryption Counter
859-866
MagneSafe Version Number
867-886
Hashed Track 2 Data

MagneSafe V5
10
Track 1 Decode Status
Bits
7-1
0
Value
Reserved
Error
This is a one-byte value, which indicates the status of decoding track 1. Bit position zero
indicates if there was an error decoding track 1 if the bit is set to one. If it is zero, then no error
occurred. If a track has data on it that is not noise, and it is not decodable, then a decode error is
indicated. If a decode error is indicated, the corresponding track data length value for the track
that has the error will be set to zero and no valid track data will be supplied.
Track 2 Decode Status
Bits
7-1
0
Value
Reserved
Error
This is a one-byte value, which indicates the status of decoding track 2. Bit position zero
indicates if there was an error decoding track 2 if this bit is set to one. If it is zero, then no error
occurred. If a track has data on it that is not noise, and it is not decodable, then a decode error is
indicated. If a decode error is indicated, the corresponding track data length value for the track
that has the error will be set to zero and no valid track data will be supplied.
Track 3 Decode Status
Bits
7-1
0
Value
Reserved
Error
This is a one-byte value, which indicates the status of decoding track 3. Bit position zero
indicates if there was an error decoding track 3 if this bit is set to one. If it is zero, then no error
occurred. If a track has data on it that is not noise, and it is not decodable, then a decode error is
indicated. If a decode error is indicated, the corresponding track data length value for the track
that has the error will be set to zero and no valid track data will be supplied.
Track 1 Encrypted Data Length
This one-byte value indicates the number of bytes in the Track 1 encrypted data field. The field
is always a multiple of 8 bytes in length. This value will be zero if there was no data on the track
or if there was an error decoding the track. Once the encrypted data is decrypted, there may be
fewer bytes of decoded track data than indicated by this field. The number of bytes of decoded
track data is indicated by the Track 1 Absolute Data Length field.
Track 2 Encrypted Data Length
This one-byte value indicates the number of bytes in the Track 2 encrypted data field. The field
is always a multiple of 8 bytes in length. This value will be zero if there was no data on the track
or if there was an error decoding the track. Once the encrypted data is decrypted, there may be
fewer bytes of decoded track data than indicated by this field. The number of bytes of decoded
track data is indicated by the Track 2 Absolute Data Length field.

Section 2. Communications
11
Track 3 Encrypted Data Length
This one-byte value indicates the number of bytes in the Track 3 encrypted data field. The field
is always a multiple of 8 bytes in length. This value will be zero if there was no data on the track
or if there was an error decoding the track. Once the encrypted data is decrypted, there may be
fewer bytes of decoded track data than indicated by this field. The number of bytes of decoded
track data is indicated by the Track 3 Absolute Data Length field.
Track 1 Absolute Data Length
This one-byte value indicates the number of useable bytes in the Track 1 Encrypted Data filed
after decryption.
Track 2 Absolute Data Length
This one-byte value indicates the number of useable bytes in the Track 2 Encrypted Data filed
after decryption.
Track 3 Absolute Data Length
This one-byte value indicates the number of useable bytes in the Track 3 Encrypted Data filed
after decryption.
Card Encode Type
This one-byte value indicates the type of encoding that was found on the card. The following
table defines the possible values.
Value
Encode Type
Description
0 ISO/ABA ISO/ABA encode format (see Appendix E. Identifying ISO/ABA and
AAMVA Cards for ISO/ABA description)
1
AAMVA
AAMVA encode format (see Appendix E. Identifying ISO/ABA and
AAMVA Cards for AAMVA description)
2
Reserved
3
Blank
The card is blank.
4 Other The card has a non-standard encode format. For example, ISO/ABA
track 1 format on track 2.
5
Undetermined
The card encode type could not be determined because no tracks could
be decoded.
6 None No decode has occurred. This type occurs if no magnetic stripe data has
been acquired since the data has been cleared or since the reader was
powered on. This reader only sends an Input report when a card has
been swiped so this value will never occur.
Encrypted Track Data
If decodable track data exists for a given track, it is located in the Track x Encrypted Data field
that corresponds to the track number. The length of each Encrypted Data field is fixed at 112
bytes, but the length of valid data in each field is determined by the corresponding Encrypted
Data Length field that corresponds to the track number. Data located in positions greater than
the encrypted track data length field indicates are undefined and should be ignored. The HID
specification requires that reports be fixed in size, but the number of bytes encoded on a card

MagneSafe V5
12
may vary. Therefore, the Input Report always contains the maximum amount of bytes that can
be encoded on the card and the number of valid bytes in each track is indicated by the Encrypted
Data Length field.
The encrypted data from each track is decoded and converted to ASCII, and then is encrypted.
The encrypted track data includes all data starting with the start sentinel and ending with the end
sentinel. The encryption begins with the first 8 bytes of the clear text track data. The 8-byte
result of this encryption is placed in the Encrypted Data buffer for the corresponding track. The
process continues using the CBC (Cipher Block Chaining) method with the encrypted 8 bytes
XORed with the next 8 bytes of clear text. That result is placed in next 8 bytes of the Encrypted
Data buffer and the process continues until all clear text bytes have been encrypted. If the final
block of clear text contains fewer than 8 bytes, it is padded with binary zeros to fill up the 8
bytes. After this final clear text block is XORed with the prior 8 bytes of encrypted data, it is
encrypted and placed in the Encrypted Data buffer. No Initial Vector is used in the process.
Decrypting the data must be done in 8 byte blocks, ignoring any final unused bytes in the last
block. See Appendix C. Guide on Decrypting Data for more information.
Track 1 Encrypted Data
This field contains the encrypted track data for track 1.
Track 2 Encrypted Data
This field contains the encrypted track data for track 2.
Track 3 Encrypted Data
This field contains the encrypted track data for track 3.
Card Status
For the swipe reader, this one byte field is reserved for future use. It is currently not used on the
swipe reader.
For the insert reader this field is defined as follows:
Bits
7-1
0
Value
Reserved
Card Inserted
This is a one-byte value, which indicates the card status. Bit position zero indicates that the card
was swiped in the insertion direction if it is set to 1. If it is set to 0, then the card was swiped in
the withdrawal direction. All other bit positions are reserved.