Siemens AR6181-MS User manual

Building Technologies
Fire Safety & Security Products
Card reader, Ausweisleser
AR6181-MS, AR6182-MS
Operating instructions,
Betriebsanleitung
RS485, CerPass- and UCI – Protocol
Clock / Data Interface

Liefermöglichkeiten und technische Änderungen vorbehalten.
Data and design subject to change without notice. / Supply subject to availability.
© 2010 Copyright by Siemens Building Technologies Fire & Security Products GmbH & Co. oHG
Wir behalten uns alle Rechte an diesem Dokument und an dem in ihm dargestellten Gegenstand vor. Der Empfänger erkennt diese Rechte
an und wird dieses Dokument nicht ohne unsere vorgängige schriftliche Ermächtigung ganz oder teilweise Dritten zugänglich machen oder
außerhalb des Zweckes verwenden, zu dem es ihm übergeben worden ist.
We reserve all rights in this document and in the subject thereof. By acceptance of the document the recipient acknowledges these rights
and undertakes not to publish the document nor the subject thereof in full or in part, nor to make them available to any third party without our
prior express written authorization, nor to use it for any purpose other than for which it was delivered to him.

3
Siemens Building Technologies
Fire Safety & Security Products 02.2010
Table of contents
ENGLISH
1Standard and Guidelines........................................................................5
1.1 Approval....................................................................................................5
1.2 Safety regulations and warnings...............................................................5
1.3 General notes............................................................................................5
2Installation ...............................................................................................7
2.1 Flush mounting..........................................................................................8
2.1.1 Selecting the mounting site.......................................................................8
2.1.2 Installation .................................................................................................8
2.2 Mounting with the distance frame .............................................................9
2.2.1 Wall-mounting with distance frame...........................................................9
2.2.2 Installation .................................................................................................9
2.3 Opening the housing.................................................................................9
3Setting up...............................................................................................10
3.1 Connecting the reader ............................................................................10
3.1.1 Power supply...........................................................................................11
3.1.2 RS485 interface ......................................................................................11
3.1.3 Clock/Data - Interface .............................................................................11
3.2 Dip switch settings ..................................................................................12
3.2.1 Setting the address UCI reader protocol (RS485 bus operation, 2-
wire) ........................................................................................................12
3.2.2 Setting the address CerPass reader protocol (RS485 bus operation,
2-wire) .....................................................................................................13
3.2.3 Setting the address (Clock/Data)............................................................13
3.2.4 Communication Interface and protocol selection....................................13
3.2.5 Information to read out of cards..............................................................14
3.2.6 Operation Mode ......................................................................................15
3.2.7 Commands..............................................................................................16
3.2.8 Brief Explanation of Mifare DESfire EV1 settings ...................................17
3.2.9 Commands, range of values and examples ...........................................17
3.2.9.1 Application-ID..........................................................................................17
3.2.9.2 File-ID......................................................................................................17
3.2.9.3 DESFire EV1 key position.......................................................................18
3.2.9.4 Output length...........................................................................................18
3.2.9.5 Transponder type....................................................................................18
3.2.9.6 Switch show setup ..................................................................................18
3.2.9.7 AES-Keys................................................................................................18
4Appendix................................................................................................19
4.1 Technical specifications ..........................................................................19
4.2 Delivery volume.......................................................................................19
4.3 Definition of Clock/Data Interfaces..........................................................20
4.3.1 Omron 5Bit, Magstripe Track II ...............................................................20
4.3.2 Wiegand ..................................................................................................20
4.4 Dimensions for flush mounting................................................................21
4.5 Dimensions for surface mounting with distance frame ...........................22

4
Siemens Building Technologies
Fire Safety & Security Products 02.2010
DEUTSCH
1Richtlinien und Normen........................................................................24
1.1 Zulassung................................................................................................24
1.2 Sicherheits- und Warnhinweise ..............................................................24
1.3 Allgemeine Hinweise...............................................................................24
2Montage..................................................................................................26
2.1 Montage auf Unterputzdose....................................................................27
2.1.1 Montageort auswählen............................................................................27
2.1.2 Montage ..................................................................................................27
2.2 Montage mit Abstandsrahmen ................................................................28
2.2.1 Wandmontage Abstandsrahmen ............................................................28
2.2.2 Montage ..................................................................................................28
2.3 Öffnen des Gehäuses .............................................................................28
3Inbetriebnahme .....................................................................................29
3.1 Leseranschluss .......................................................................................29
3.1.1 Spannungsversorgung ............................................................................30
3.1.2 RS485 Schnittstelle.................................................................................30
3.1.3 Clock/Data - Schnittstelle ........................................................................30
3.2 Einstellungen DIP – Schalter ..................................................................31
3.2.1 Adresseinstellung UCI-Leserprotokoll (RS485 Busbetrieb, 2-Draht)......31
3.2.2 Adresseinstellung CerPass-Leserprotokoll (RS485 Busbetrieb, 2-
Draht) ......................................................................................................32
3.2.3 Adresseinstellung (Clock/Data)...............................................................32
3.2.4 Datenschnittstelle und Protokoll-Einstellung...........................................32
3.2.5 Zu lesende Information ...........................................................................33
3.2.6 Betriebs - Modus .....................................................................................34
3.2.7 Befehle ....................................................................................................35
3.2.8 Kurze Erläuterung der Mifare DESfire EV1-Einstellungen......................36
3.2.9 Befehle, Wertebereich und Beispiele......................................................36
3.2.9.1 Application-ID..........................................................................................36
3.2.9.2 Datei-ID ...................................................................................................37
3.2.9.3 DESFire EV1 Schlüsselposition..............................................................37
3.2.9.4 Ausgabelänge .........................................................................................37
3.2.9.5 Transpondertyp .......................................................................................37
3.2.9.6 Schalter/ Setup anzeigen ........................................................................37
3.2.9.7 AES –Schlüssel.......................................................................................38
4Anhang...................................................................................................39
4.1 Technische Daten ...................................................................................39
4.2 Lieferumfang ...........................................................................................39
4.3 Detaildefinitionen Clock/Data Schnittstellen ...........................................40
4.3.1 Omron 5Bit, Magstripe Track II ...............................................................40
4.3.2 Wiegand ..................................................................................................40
4.4 Abmessungen Unterputzmontage ..........................................................41
4.5 Abmessungen Aufputzmontage mit Abstandsrahmen............................42

Standard and Guidelines
5
Siemens Building Technologies
Fire Safety & Security Products 02.2010
1 Standard and Guidelines
1.1 Approval
If used according to the instructions, this radio system meets the basic require-
ments of article 3 and the remaining applicable conditions of the R&TTE directive
(1999/5/E6) of March 1999.
1.2 Safety regulations and warnings
The unit must only be used for the purpose intended by the manufacturer.
The operating instructions must be kept to hand and made available to every
user.
Unauthorized changes and the use of spare parts and accessories which are not
sold or recommended by the manufacturer of the unit could cause fire, electric
shock or injury. Therefore, such measures will result in a renunciation of liability
and the manufacturer will not accept any guarantee claims.
The manufacturer's guarantee terms in the version valid at the time of the sale
are applicable to the unit. No liability will be accepted for unsuitably or incorrectly
set parameters – whether automatic or manual – or for inappropriate use of the
unit.
All repairs must be carried out by the manufacturer.
The user is responsible for ensuring that the unit is set up and connected in ac-
cordance with the recognized technical regulations in the country of installation
and any other guidelines valid in the relevant region.
Before opening the unit, always switch off the power supply and take measure-
ments to ensure that there is no power to the unit.
If an operating display goes out, this does not necessarily mean that the unit is
disconnected from the mains and has no power. If you are working on an open
device, remember that live components may be exposed.
1.3 General notes
The ID-card readers AR6181-MS and AR6182-MS (with keypad) are new proximity
ID-Card readers in a Square housing, part of the Access reader range. The read-
ers read proximity ID-card of 13,56MHz technologies like Mifare®. The new Square
Access Reader Design has been created as a simple device for standard flush-
mounting boxes and for simple adjustment. For wall-mounting a distance frame
and for all models an accessory pack is part of delivery.
The identification card readers are connected via the door controller CC30xx to the
CerPass, via dual reader interface DRI to SiPass integrated, via eight reader inter-
face ERI to SiPass integrated or via door controller DC2000 / K24 to SIPORT NT
Access control system. The readers AR6181-MS and AR6182-MS (with keypad)

Standard and Guidelines
6
Siemens Building Technologies
Fire Safety & Security Products 02.2010
read either the unique serial number of Mifare®proximity ID-Cards, or the personal-
ised ID-number out of a sector/block and standard data files. The card number will
be transmitted to the CerPass / SIPORT NT Access control system for processing.
The identification card readers have to be mounted on recess devices in accor-
dance with DIN 49 073 (60 mm perforate distance). In the top of the housing
(reader electronic) is a plug-in connector for the connection to the door control unit
DRI / ERI / CC30xx / DC2000 / K24.
The identification card readers AR6181-MS and AR6182-MS have to be connected
via a RS485 bus-interface, 2-wire, to reader interface of an door controller CC30xx
/ DC2000 / K24. For that a 4-wire, twisted pair, shielded cable is required, one pair
for the 2-wire RS485 party line and the other pair for power supply of the reader.
Max. 8 identification card readers AR618x-MS can be connected to one CC30xx
door control unit and up to 4 readers to DC2000 / K24 (Remark: DC2000 / K24 is
connectable only to SIPORT –Systems). Because of the reader protocol, the
AR618x-MS can only be used with readers of same protocol type at the one door
control unit. The maximum allowed distance between the door controller and the
identification card reader is 50 m. The door management and monitoring is con-
trolled by the door control unit.
The data transmission of the system from the user cards to the identification card
readers is based on an electro-magnetic field, which is created by the aerial of the
identification card reader. If the ID-card is introduced to the electromagnetic field of
the reader aerial, it is supplied with energy and sends its personalised data. The
data is received by the reader aerial.
The reading range of the identification card readers AR618x-MS, depending on the
kind of the arrangement and material the reader is mounted on, is up to 50mm.
The kind of the transponder ID-card has also an significant influence to the reading
distance; e.g. ID-card, keyfob, etc. Electrically conductive materials like metal and
metallised glass surfaces can influence the electro-magnetic field. The distance be-
tween the identification card reader and metallic objects must be at least 30 cm.
Otherwise, the reading range is reduced.
No two adjacent identification card readers should be closer than 50 cm to prevent
mutual interference of the electro-magnetic fields and consequent data transmis-
sion problems. Attention should also be paid not to install the identification card
readers near to computer-terminals, TV sets and so on which would reduce the
card reading range. If the identification card reader is mounted on metal walls or
metallised glass surfaces, the attached delivered mounting frames should be used.
In that case, the reading range might be reduced.
With suitable installation the reader meets protection class IP65. Avoid installing
the reader in places where it is subject to direct sunlight.
The reader has three LED’s with the colours yellow, red and green and an internal
buzzer.

Installation
7
Siemens Building Technologies
Fire Safety & Security Products 02.2010
2 Installation
The reader is designed to be wall-mounted on 60 mm flush-mounting boxes. For
surface mounting, the bottom section of the housing can be affixed to the distance
frame supplied.
NOTES:
The reader should not be mounted directly onto conductive materials, such as
metal surfaces, metal frames (reinforcement) or metal-plated surfaces, as these
surfaces will reduce the reader's range. The clearance to such surfaces should
be at least 3 cm.
If the unit has to be mounted onto a metal surface, the distance frame supplied
can be used to maintain the minimum clearance.
The distance between readers of the same design should not be less than 50
cm.
Before final installation, the planned installation site should be checked for suit-
ability.
You can tell the direction of the distance frame or the bottom section of the
housing from the inscription "TOP ". The arrow must point upwards!
TOP 
Fig. 1 Installation direction

Installation
8
Siemens Building Technologies
Fire Safety & Security Products 02.2010
2.1 Flush mounting
2.1.1 Selecting the mounting site
The unit should be installed on as even a surface as possible.
2.1.2 Installation
1. Remove the top section of the housing from the bottom section.
2. Connect the cable to the terminal strip of the reader (top section of housing).
See chapter „3.1 Connecting the reader“
Do not mount the unit to the wall before you have checked the set-up works
correctly.
3. Screw the bottom section of the housing, onto the flash mounting box. Using
the 3 x 16 mm self-tapping screws.
4. Plug the top section of the housing onto the bottom section of the housing.
5. Screw in the safety screw on the underneath of the bottom section of the
housing.
NOTE
The maximum torque of the safety screw is 1,5 Nm.
Fig. 2 Back view of the bottom section of the housing

Installation
9
Siemens Building Technologies
Fire Safety & Security Products 02.2010
2.2 Mounting with the distance frame
2.2.1 Wall-mounting with distance frame
1. The unit should be installed on as even a surface as possible.
2. Create openings for the lead in the distance frame and pull the lead through.
3. Screw the distance frame onto the base/ wall.
2.2.2 Installation
1. Remove the top section of the housing from the bottom section.
2. Connect the cable to the terminal strip of the reader (top section of housing).
See chapter „3.1 Connecting the reader“
Do not mount the unit to the wall before you have checked the set-up works
correctly.
3. Screw the bottom section of the housing, onto the flash mounting box. Using
the 3 x 16 mm self-tapping screws.
4. Plug the top section of the housing onto the bottom section of the housing.
5. Screw in the safety screw on the underneath of the bottom section of the
housing.
2.3 Opening the housing
If you attach the top section of the housing to the bottom section, it slots into place.
This means you should proceed as follows when opening the housing:
1. Undo the safety screw (1)
2. Insert a screwdriver into the two points on the side of the reader housing be-
tween the top and bottom sections of the housing (2).
3. Remove the top section of the housing from the bottom section.
Fig. 3 Opening the housing

Setting up
10
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3 Setting up
3.1 Connecting the reader
The reader is connected using a removable terminal connector (see: “Fig. 4
Reader board”) in the top section of the housing which is slotted into the bottom
section of the housing.
Fig. 4 Reader board
Terminal Function
Strip Description AR6181-MS / AR6182-MS card reader
RS485 Bus Clock/Data Interface Wiegand Interface
X1 1 *) Buzzer
2 GND Power supply
3 +V Power supply 12-24V
4 *) Clock D1†
5 *) Data D0†
6 *) CLS
7 *) LED green
8 *) LED red
9 RS485 - A *)
10 RS485 - B *)
*) Terminal must not be used, risk of damage!
Tab. 1 Terminal allocation on the terminal board
†Note that the Wiegand signals D0 and D1 are associated with Clock and Data terminals differently from other
equipment.

Setting up
11
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3.1.1 Power supply
The power is supplied through terminals [+ / +V] and [- / GND]. The unit can run off
12 – 24 V DC.
NOTE
The length of cable between the power pack and the reader should be kept as short as possible. The
lead should not be laid directly parallel to other energy supply and low voltage cables.
3.1.2 RS485 interface
With RS485 data buses, it can be necessary to use terminating resistors. For each
installation, checks should be made as to whether it is necessary to use terminat-
ing resistors. Generally, a terminating resistor is only required at the end of the
bus, i.e. on the last unit. In order to do this, switch DIP switch 10 in ON-position.
To operate the bus, you need a central computer with a terminating resistor and
active termination (see Fig. 5 Operating a bus with an RS485 interface)
Controller
without terminating resistor
R/
A
T/B
AR 618x-MS
(with active termination)
with terminating resistor
A
B
AR 618x-MSAR 618x-MS
DIP 10 OFF DIP 10 OFF DIP 10 ON
Fig. 5 Operating a bus with an RS485 interface
3.1.3 Clock/Data - Interface
The reader connection using the Clock/Data interface has to be done according to
figure 6. The cable length is limited to a maximum of 100 cm.
UCI-Box,
DRI
or
DCU-3
DAT
CLK
AR6181-MS
GND
GND
CLOCK
DAT
CLS CLS
Led red/ gree
n
Led red/ green
Fig. 6 Connection, using Clock/Data interface

Setting up
12
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3.2 Dip switch settings
3.2.1 Setting the address UCI reader protocol (RS485 bus operation, 2-wire)
The UCI reader protocol supports bus operation with up to 4 card readers. Each
reader on one bus must have a different “Bus Address” so that the system can dis-
tinguish between them. The Bus Address of a reader is set by DIP switches as
shown below in Figure 7 and Table 2.
Fig. 7 DIP switch positions
DIP 1 DIP 2 DIP 3 DIP 4 Bus address
off off off off 0
off off off on 1
off off on off 2
off off on on 3
Tab. 2 Bus addresses for UCI reader protocol

Setting up
13
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3.2.2 Setting the address CerPass reader protocol (RS485 bus operation, 2-wire)
Bus operation with up to 8 readers connected to controllers CC30xx, DRI or ERI.
All card readers are issued with an individual address as shown in table 3.
DIP 1 DIP 2 DIP 3 DIP 4 Bus address
off off off off 1
off off off on 2
off off on off 3
off off on on 4
off on off off 5
off on off on 6
off on on off 7
off on on on 8
on off off off 9
on off off on 10
on off on off 11
on off on on 12
on on off off 13
on on off on 14
on on on off 15
on on on on 16
Tab. 3 Bus addresses for CerPass reader protocol
3.2.3 Setting the address (Clock/Data)
When the clock/data interface is used there is no need to select a reader address.
as that interface allows only one reader to connect with the interface unit DCU-3 or
with the UCI-interface box.
Selecting the clock data interface see chapter 3.2.4
3.2.4 Communication Interface and protocol selection
The communication interface has to be selected ether to communicate with intelli-
gent controllers via RS485 bus or to connect to a reader interface using Clock/Data
interface.
Within the selected communication interface there are different protocols select-
able.
DIP 5 DIP 6 Communication Interface Protocol
off off RS485 bus operation UCI-reader protocol
off on RS485 bus operation CerPass reader protocol
on off Clock/Data Interface Wiegand
on on Clock/Data Interface Omron (Magstripe Track II)
Tab. 4 Selection of communication interface

Setting up
14
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3.2.5 Information to read out of cards
The information to read out of the access cards has to be selected to suit the
communication interface.
DIP 7 DIP 8 Information to read Card type
off off 4 byte Serial number (UID) Mifare Classic
Note: Unique serial number is also known as Unique Identifier. The first 4 bytes of
any card serial number are transmitted (i.e all of a Mifare Classic serial number but
only part of the DESfire EV1 serial number). This 4 byte data is converted to its deci-
mal equivalent for transmission. If Wiegand interface is used, parity bits are omitted
from output messages.
DIP 7 DIP 8 Information to read Card type
off on 7 byte Serial Number (UID) Mifare Classic, Mifare
DESFire EV1
Note: For the reader to transmit 7 byte UID it is necessary also to select ASCII-
Minimal protocol. Omron interfaces, also known as Mag stripe or Clock/Data, are not
supported. If Wiegand interface is used, parity bits are omitted from output messages.
DIP 7 DIP 8 Information to read Card type
on off ID-Number, BCD coded and
connected via RS-485
Mifare Classic, Mifare
DESFire EV1
Note: For the reader to transmit BCD ID it is necessary also to select ASCII-Minimal
protocol, otherwise no data are transmitted. Omron interfaces, also known as Mag
stripe or Clock/Data, are not supported. If Wiegand interface is used, parity bits are
omitted from output messages.
Please note:
The ID-number is a BCD format (4bit) number written by the user into the
read/write area of the Mifare Classic (sector/ block) or Mifare DESFire EV1 (data
file) access cards. Each 4 bit character is limited to the digits 0-9.
RS485 electrical signals may be connected to models DC2000 or K24 and mes-
sages sent under the UCI protocol. Please note that this connection supports Mi-
fare Classic cards but does not support Mifare DESfire EV1 cards.
RS485 electrical signals may be connected to models DC2000, CC30xx, DRI or
ERI and messages sent under the CerPass-protocol.
The data length of the ID number is limited to 10 digits if the reader is connected to
CC30xx. However in a SiPass integrated system it is possible to transmit 16 digits.

Setting up
15
Siemens Building Technologies
Fire Safety & Security Products 02.2010
DIP 7 DIP 8 Information to read Card type
on on
ID-Number, SIPASS 7bit ASCII
coded decimal digits connected
via RS-485
Mifare Classic, Mifare
DESFire EV1
Please Note: For the reader to transmit BCD ID it is necessary also to select ASCII-
Minimal protocol, otherwise no data are transmitted. Omron interfaces, also known as
Mag stripe or Clock/Data, are not supported.
Please note:
The ID-number is a SIPASS format, 7 bit coded number, written by the user into
the data area of the Mifare access cards. Mifare data areas are divided into sec-
tors and blocks. For each separate data block the reader may have a key code to
enable reading and then another for writing. Without the correct key the data re-
mains protected.
RS485 electrical signals may be connected to models DC2000 or K24 and mes-
sages sent under the UCI protocol. Please note that this connection supports Mi-
fare Classic cards but does not support Mifare DESfire EV1 cards.
RS485 electrical signals may be connected to models DC2000, CC30xx, DRI or
ERI and messages sent under the CerPass-protocol.
NOTE
To operate the card reader AR6181-MS or AR6182-MS in the normal mode,
DIP9 must be OFF!
3.2.6 Operation Mode
The Operation Mode is selected by all the up DIP-switch positions described in the
preceding sections. The special configuration mode can be reached with the fol-
lowing DIP-settings. In this on position no cards will be read or any card informa-
tion transmitted.
DIP1...DIP8 = off or on, DIP9 = on
When finished with configuration, terminate with or without saving the changes.
Then set DIP9 into the off position and restart the reader to return to normal opera-
tion. Within configuration mode you may check or change some additional settings
or get information out of the reader with the proprietary ASCII-Minimal protocol de-
scribed below.
ASCII-Minimal protocol:
The ASCII-Minimal protocol provides additional configuration of your reader. To
operate the ASCII-Minimal protocol the card reader has to be connected to your
PC. Use serial communication line COM1/2, a converter RS485 – V24 (RS232)
and a direct connecting cable. The protocol does not support connection via a bus.
The communication and operation can be done with a terminal program like Hyper-
term.
Data frame: 9600 baud 8 Bit, no parity, 1 stop bit
max. Telegram length: 20 byte
Timeout: 3 sec.
Coding: ASCII: "0" ... "9"; "a"...."z"; "A" ..... "Z"

Setting up
16
Siemens Building Technologies
Fire Safety & Security Products 02.2010
Protocol frame
1 2 ... n-1 n
command parameter end character (CR = 0x0D)
Command: 1 byte ASCII, see: 5.2.5.11 Commands
Response of reader:
1 2 ... n-1 n
command data end character (CR = 0x0D)
Data: The response of the reader can be only a short acknowledge like OK or NOK
or any more or less long information you ask for.
Positive acknowledge: „>“ i.e.: after parameter is changed (Prompt)Receipt:
Negative acknowledge: Error message as text information
3.2.7 Commands
To read out the actual setting information / parameters only send the command
without any parameter to the selected reader. Each command have to be entered
separately and confirmed by ENTER.
A Application ID (A A0 A1 A2) 3byte Hex-value
F File-ID (F File Block Start End)
N DESFire EV1 key position (N Number)
O Output length (4/7byte) Serial number (O 0/1)
R Reset to factory defaults
T Transponder type – Activation (T 0 1)
V Version
S Switch/display Setup
K Keys (K[A|B] X1 X2 X3 X4 X5 X6)
K Key (C C1 C2 C3 ……. C14 C15 C16) for DESFire EV1 transponder only
B ID-Number (B Block Start End), three blocks per sector to calculate!
L LEDs ( red green yellow buzzer, 1=on/0=off)
D Impulse/gaP times (D Itime Ptime) or Bit clock for Magstripe (D Bclock)
U UCI-Configuration
H Recalculation decimal -> hexadecimal (H number)
Q Termination and saving of changes
ESC Termination without saving
All numbers are in Hex, except the Impulse, Gap and Bit clock times.

Setting up
17
Siemens Building Technologies
Fire Safety & Security Products 02.2010
3.2.8 Brief Explanation of Mifare DESfire EV1 settings
A Mifare DESFire EV1 card can hold up to 28 different applications and 32 files per
application. The size of each file is flexible. An access control system requires just
one file within one application so the same card could also be used for other appli-
cations such as vending, ticketing or banking, provided by other suppliers.
Our readers support DESFire EV1 cards of size 2 kbytes, 4 kbytes or 8 kbytes. An
application on a DESFire EV1 card is identified by a 6 digit hexadecimal number
known as the application identifier (AID). The AID is programmed into the card at
enrolment and the reader is configured to use the same AID.
Our readers support any arbitrary AID but we recommend the Siemens registered
DESFire EV1 AID which is F531C0. Within the chosen application, the card is pro-
grammed with a data file at enrolment. This file is given an identifier (file ID) which
is any hexadecimal number chosen in the range 00 to 1F. The reader must be con-
figured to look for the same file ID. The data file contains a number, all or part of
which can be used as the ID number. The reader reports the ID number to the ac-
cess system controller which uses the ID number to recognize the user.
The data in the file is secured by a read encryption key of your choice. This key not
only enables the data to be read from the card but also enciphers data transmis-
sion between the card and the reader. Free directory list access without master key
has to be allowed by the DESFire EV1 card. The application that contains the file
with the ID number shall be accessed using AES mode. The communication mode
with the file that contains the ID number has to be fully enciphered. The key to be
used for read access has to be defined. The key to read out the ID number has to
be the same as the one to access the application. The reading key is 16 bytes
long.
3.2.9 Commands, range of values and examples
Each command has to be entered separately and confirmed by ENTER. Two digits
are allowed in each byte.
Values in hex format which have to be use can be entered directly, e.g.:
A F5 31 C0
3.2.9.1 Application-ID
That means the unique ID of the application containing the file to read data from on
the transponder.
A F5 31 C0 specifies the reserved Siemens ID.
3.2.9.2 File-ID
This will specify the file to be read out.
Range of values:
File: 0x00 – 0x1F (limited to 32 files)
Block number: 0x00 – 0x00
First byte: 0x00 – 0x0F
Last Byte: 0x00 – 0x0F
In file one, block 4 shall be read out from byte zero to seventh byte. The command
has to look like: F 1 4 0 7

Setting up
18
Siemens Building Technologies
Fire Safety & Security Products 02.2010
Each file is divided by the reader into 16 byte logical blocks. In the example the
data are read from byte 65 to byte 72 in file one,
3.2.9.3 DESFire EV1 key position
This selects the position of the key which will be used for reading. The positions
are numbered 0x00 – 0x0D as the transponder can hold up to 14 keys.
3.2.9.4 Output length
This command specifies 4byte output for reading of Mifare Classic and 7byte for
Mifare DESFire EV1 transponder.
O 0 configure the reader for Mifare Classic and O 1 will configure for Mifare DES-
Fire EV1.
3.2.9.5 Transponder type
The two transponder types can be read in parallel or separately. T 0 1 will disable
Mifare Classic and activate Mifare DESFire EV1 transponder. Setting both values
to one will activate both types for migration scenarios.
3.2.9.6 Switch show setup
Each setting which has done can be controlled by using command S. The answer
of the reader might contain the following settings:
>S
- Switches (DIP1…DIP8): 00000110
- Mifare: not activate!
- DESFire EV1: ID-Number
AID: F531C0
Fileinfo: 01 04 00 07
DES key position: 01
Protocol: Cerpass [01], BCD (4Bit)
>
Keys which are stored in the reader can’t be displayed for security reasons.
3.2.9.7 AES-Keys
The reader is able to store three different keys. Key A and B are used for Mifare
Classic and key C will be used for Mifare DESFire EV1. Key A and B are 6 byte
and key C is 16 byte long. Other keys will not be accepted by the reader.

Appendix
19
Siemens Building Technologies
Fire Safety & Security Products 02.2010
4 Appendix
4.1 Technical specifications
Housing PC/ABS plastic
Color
Top section of housing:
Bottom section of housing:
similar to RAL 9006 (white aluminium)
similar to RAL 9006 (white aluminium)
Weight approx. 120 g
Degree of protection IP 65
Power supply 12-24V DC nominal, 9V DC min., 30V DC max.
Power consumption max. 1.0 W
Temperature range -20°C to 70°C
Relative air humidity 98 %
Aerial integrated
Data transfer using trans-
ponder
13,56 MHz
for transponder Mifare
Serial no. (4 bytes), read
Sector / block (up to 16 bytes), read;
Select sector / block and access key (use ASCII
Minimal protocol)
Transducer 3 x LED (orange, red, green)
1 x buzzer
Interfaces RS485 2-wire (max. 4 units)
9600 Baud, 8 data bits, 1 stop bit, no parity
Clock / Data, unidirectional
Address setting for interface DIP switches (4 addresses) and operating mode
EEPROM 10,000 write cycles
Options Keypad ( 0-9, C, E )
4.2 Delivery volume
1 x housing; upper part with reader electronic incl. connector and front foil
1 x housing; lower part with connection board
1 x distance frame
1 x accessory bag
1 x operating instructions
1 x repair form

Appendix
20
Siemens Building Technologies
Fire Safety & Security Products 02.2010
4.3 Definition of Clock/Data Interfaces
4.3.1 Omron 5Bit, Magstripe Track II
Signal diagram:
Before and after data transmission there will be no clock pulses on the line
1010
tn
ta
tb
/CLOCK
/DATA
/CLS
tvts
0
tn1 ms
ta(n) tn/ 3
tb(n) tn/ 2
tv= ts10...12 ms
Structure of information:
According ISO7811-2 Track II (Start sentinel, Data, Stop sentinel, LRC)
Data format: 5 Bit, (4 Data bits, 1 parity)
4.3.2 Wiegand
Signal diagram:
DATA 0 (D0
)
DATA 1 (D1) 11 1
0 0 0
tn
tn1 ms
Structure of information:
The characters / digits read out of cards (transponder) will be transmitted directly
1:1 (no change) without adding any information frames.
If there is a special format required, the corresponding information can be written
into a Mifare as ID-number to satisfy the needs of the customer.