SpringCard PMA82TP-BA User manual

PMA82TP-BA
04/03/2009
Headquarters, Europa
SpringCard
13 voie la Cardon
Parc Gutenberg
91120 Palai eau
FRANCE
Phone : [phone]
Fax : [phone]
Americas
SpringCard
964 Fifth Avenue
Suite 235
San Diego, CA 92101
USA
Phone : [phone]
Fax : [phone]
www.springcard.com
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
PROXRUNNER BLUETOOTH RFID SCANNER
R f r nc manual

PMA82TP-BA
2 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
DOCUMENT INFORMATION
Category :
Manual
Keyword :
Group :
ProxRunner RFID Scanner, Reader, Bluetooth, Configuration
Reference :
PMA82TP
Ver ion :
BA
Ab tract :
Statu :
Approved
pma82tp-ba.doc
aved 04/03/09 - printed 04/03/09
REVISION HISTORY
Valid. by
Ver. Date
Author Tech. Qual.
Approv.
by
Remark :
BA 16/02/09 LTX JDA JDA JDA SpringCard branding.
Added reference to “RFID Scanner” family. Common chapter now hared with other
product along the ame family.
Add "template = 0xFF". Allow ID reading of all card upported by reader.
AA 15/01/09 LTX ECL LTX ECL Initial relea e, Pro Active branding

PMA82TP-BA
3 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
TABLE OF CONTENT
1. INTRODUCTION.................................... 5
1.1. A UDIENCE .............................................. 5
1.2. P RODUCT BRIEF ....................................... 5
1.3. R ELATED DOCUMENTS ................................ 6
2. CONFIGURATION ATTRIBUTES ............... 7
2.1. P RINCIPLES ............................................ 7
2.2. G LOBAL C ONFIGURATION A TTRIBUTES ............. 8
3. CARD ACCEPTANCE TEMPLATES ............. 9
3.1. B ASIS .................................................. 9
3.2. ID- ONLY A CCEPTANCE T EMPLATES ................12
3.3. M IFARE C LASSIC A CCEPTANCE T EMPLATE ........17
3.4. M IFARE U LTRA L IGHT A CCEPTANCE T EMPLATE ...22
3.5. D ESFIRE A CCEPTANCE T EMPLATE ..................24
3.6. ISO 7816-4 A CCEPTANCE T EMPLATE ............27
3.7. C ALYPSO A CCEPTANCE T EMPLATE .................31
4. CONFIGURING IWM-X ..........................34
5. CREATING MASTER CARDS USING
SQ844P SOFTWARE ............................ 35
5.1. O VERVIEW ........................................... 35
5.2. C ONFIGURATION FILES ............................. 36
5.3. O PERATION INSTRUCTIONS ........................ 39
5.4. C HANGING AUTHENTICATION KEY FOR M ASTER
C ARDS ................................................ 39
5.5. R EVERTING TO DEFAULT ............................ 41
6. SPECIFICATION OF MASTER CARDS ...... 42
6.1. B UILDING A M ASTER C ARD ........................ 42
6.2. T EMPLATE FOR M ASTER C ARDS ................... 42
6.3. D ATA STRUCTURE ................................... 44
6.4. D IGITAL SIGNATURE ................................ 45
7. SECURITY ALGORITHMS ...................... 46
7.1. HMAC SIGNATURE AND KEY DIVERSIFICATION . 46
7.2. D ESFIRE SAM / RC171 KEY DIVERSIFICATION 48

PMA82TP-BA
4 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.

PMA82TP-BA
5 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
1. I NTRODUCTION
Thi document provide detailed technical information for u e of the SpringCard
ProxRunn r.
1.1. A UDIENCE
Thi reference manual a ume that the reader ha expert knowledge of
computer configuration and u age. It i de igned to be u ed by y tem
integrator .
1.2. P RODUCT BRIEF
a. Abstract
Developed in partner hip with Baracoda Trac ability, a worldwide leader in
barcode olution , ProxRunn r Blu tooth RFID scann r i the ea ie t product
for mobile contactle operation.
Thank to it Bluetooth connection, ProxRunn r i integrated ea ily in PC,
PocketPC or SmartPhone ba ed olution . Lightweight and ruggeddized, the
product i ideal for mobile operation even in unfriendly environment .
It read erial number or data from any tandard ISO/IEC 14443 contactle
card, including popular NXP MIFARE and DESFire familie , and al o ISO/IEC
15693 vicinity tag u ed in RFID y tem .
b. Typical applications
Thi reader i dedicated for loyalty, u er identification and tracking and aim to
replace barcode canner where RFID label may be u ed in tead of barcode :
library or book tore , item management, ….
c. Output modes
Thi reader u e Baracoda Manag r to connect to the ho t (PC, PocketPC,
SmartPhone or blackberrie ) and the data coming from reader i een a
keyboard emulation.
Moreover you can integrate the data collected directly in a oftware with the SDK
included in Baracoda Manag r.

PMA82TP-BA
6 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
1.3. R ELATED DOCUMENTS
You’ll find any detail regarding hardware and phy ical characteri tic of each
reader in the corre ponding data heet.
R f r nc Docum nt titl
PFL8S0P ProxRunner Product Information heet
PMU84QP ProxRunner Quick Start guide

PMA82TP-BA
7 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
2. C ONFIGURATION ATTRIBUTES
There are two familie of configuration attribute :
 Product pecific Global Configuration Attribute ,
 Card Acceptance Template .
The Card Acceptance Template are common to all product in the SpringCard
RFID Scann r family, and are expo ed in detail in the next chapter.
In thi chapter, we’ll introduce configuration tag and detail the ProxRunn r’
pecific configuration attribute .
2.1. P RINCIPLES
a. Configuration tags
Each configuration attribute i recognized by it “tag” and it length. The tag i a
one-byte value, that uniquely identifie the attribute.
The li t of available tag , and their meaning, i the purpo e of thi chapter and
the next one.

Unle pecified, each configuration attribute i exactly one byte (8 bit ) long.
b. Non-volatile memory endurance
ProxRunn r configuration attribute are tored in reader’ non-volatile memory
(fla h). They can be changed up to 100 time .

Changing any configuration attribute more than 100 time may permanently
damage your ProxRunn r reader.

PMA82TP-BA
8 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
2.2. G LOBAL C ONFIGURATION A TTRIBUTES
2.2.1. G n ral options
Nam Tag D scription Siz
OPT
h
60 General option . See table a below. 1
a. General options bits
Bit Valu M aning
7 – 6
RFU (set to 00)
5 – 4
00
01
10
11
Anti-collision model :
RFU
RFU
When 2 card are in the field, proce the 1
t
and ignore the 2
nd
When 2 card are in the field, ignore both
3 – 2
00
01
10
11
Master Card :
Ma ter Card are di abled
1
RFU
RFU
Ma ter Card are enabled all the time
1 – 0
RFU (set to 00)
Default value :
b
00101100
(Master Cards are enabled all the time)
1
Configuration etting are permanently locked, u e thi with care !

PMA82TP-BA
9 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3. C ARD A CCEPTANCE T EMPLATES
Product in the SpringCard RFID Scann rs family are able to manage different
type of card , and different ource of data on each card.
A Card Acc ptanc T mplat define how the reader will recognize the card to
be read, and how it would get the actual data ( erial number, block reading, file
election and reading, authentication key to be u ed for Mifare or De fire, etc).
The template al o define which formatting i to be applied to the data when
ending them to the target device (tran lation to ASCII or to Decimal, con tant
prefix or uffic, etc).
Thi product i able to run up to 4 Card Acceptance Template imultaneou ly.
3.1. B ASIS
Each Card Acceptance Template i configured through a et of configuration
attribute , each attribute having it own tag.
• Template 1 u e Configuration tag
h
10 to
h
1F
• Template 2 u e Configuration tag
h
20 to
h
2F
• Template 3 u e Configuration tag
h
30 to
h
3F
• Template 4 u e Configuration tag
h
40 to
h
4F
In the following page , we u e the convention “ Template t u e Configuration
tag
h
t0 to
h
tF ”. Replace t by the current template number.

PMA82TP-BA
10 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.1.1. Card lookup list
Nam Tag D scription Siz
LKL
h
t0 Card lookup li t of the template. See table a below. 1
a. Available values for L L
Valu Card(s) acc pt d by th t mplat Proc ssing t mplat §
h
01 ISO/IEC 14443 type A (layer 3)
h
02 ISO/IEC 14443 type B (layer 3)
h
03 ISO/IEC 14443 A&B (layer 3)
h
04 ISO/IEC 15693
h
07 ISO/IEC 14443 A&B and ISO/IEC 15693
h
08 NXP ICODE1
h
0C NXP ICODE1 and ISO/IEC 15693
h
0F All of the above
ID only 3.2
h
11 ISO/IEC 14443 type A (layer 4 / T=CL)
h
12 ISO/IEC 14443 type B (layer 4 / T=CL)
h
13 ISO/IEC 14443 A&B (layer 4 / T=CL)
7816-4 3.6
h
22 ST MicroElectronic SR family
h
23 ASK CTS256B and CTS512B
h
24 In ide Contactle PicoTAG
2
ID only 3.2
h
61 NXP Mifare Cla ic 1k & 4k Mifar Classic 3.3
h
62 NXP Mifare UltraLight Mifar UltraLight 3.4
h
71 NXP De fire 4k D sfir 3.5
h
72 Calyp o (Innovatron protocol) ID only or 7816-4 3.2 or 3.7
h
FF All card upported ID only 3.2
Other value are RFU
The LKL tag i mandatory to enable a template group. If not found, the template
group i empty.
2
Al o HID iCla

PMA82TP-BA
11 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.1.2. Summary of oth r tags in t mplat s
Depending of the card lookup li t (LKL tag), a pecific li t of tag control the
behaviour of the Proce ing Template.
The table below ummarize thi .
Tag ID only
Mifar
UltraLight
Mifar
Classic D sfir 7816-4 Calypso
h
t1 Output format
h
t2 Output prefix
h
t3 Off et Location of data
h
t4 Option T=CL option C. option
h
t5 Auth. method & key 1
t
APDU
h
t6 Sign. method & key 2
nd
APDU
h
t7 3
rd
APDU
Grey item are RFU and mu t be kept empty.
3.1.3. Important notic r garding t mplat -ord ring
Be careful that the 4 template are proce ed one after the other. The loop i
ended after the fir t ucce ful match.
If a card matche two (or more) template , it will be handled only by the fir t
one.
Suppo e you want to accept both a pecific kind of 14443-B T=CL card , with
advanced file reading, and another kind of wired-logic 14443-B card , where
only the ID i ignificant. You mu t put the T=CL template before the ID
template, otherwi e the T=CL part will be kipped.

PMA82TP-BA
12 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.2. ID- ONLY A CCEPTANCE T EMPLATES
U e an ID-only Acceptance Template when you want to read the erial number
and/or the protocol-related con tant byte from a contactle card, or a group of
contactle card .
Depending on the etting you define in the Lookup Li t attribute (tag LKL.IDO),
the reader may either
• Find any upported contactle card,
• Find only a pecific family of contactle card ,
• Find ISO compliant contactle card .
A you may have more than one ID-only Acceptance Template (up to 4 in fact),
you may ea ily di play different type of card with a different format.
Including card’ type in the returned ID i al o an intere ting option ( ee
3.2.6.b), a for in tance there’ no rule to prevent an ISO 14443-B card to have
a different erial number than any ISO 14443-A one .
3.2.1. Lookup list
Nam Tag D scription Siz
LKL.IDO
h
t0 ID-only lookup list :
h
01 ≤ value ≤
h
0F for ISO-compliant card ,
h
21 ≤ value ≤
h
2F for non-ISO card ,
value =
h
FF all the upported card .
See 3.1.1.a for detail .
1

PMA82TP-BA
13 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.2.2. Output format
Nam Tag D scription Siz
TOF.IDO
h
t1 ID-only output format. See table a below. 1
a. Output format bits
Bit Valu M aning
7 – 6
00
01
10
11
Byt swapping
Do not wap ID byte (ID i tran mitted “a i ”)
RFU
Swap byte for ingle- ize (4 byte ) ISO 14443-A UID
3
only ; ID of any other
card i tran mitted “a i ”
Swap ID byte for all kind of card
5
0
1
Padding
Left-padding with
h
0
Right-padding with
h
F
4
0
1
ISO 14443-B sp cific
U e ISO 14443-B PUPI (4 byte ) a ID
U e complete ISO 14443-B ATQ (11 byte ) a ID
3 – 0
0000
0001
0010
0011
0100
0101
0110
0111
1000
1001
1010
1011
1100
1101
1110
1111
Output l ngth
Decimal, 4 byte een a 10 digit (i.e. 32  40 bit expan ion)
Fixed length, 4 byte
4
Fixed length, 8 byte
5
Fixed length, 5 byte
Fixed length, 12 byte
6
Fixed length, 7 byte
7
Fixed length, 11 byte
8
RFU
Fixed length, 16 byte
RFU
RFU
RFU
Decimal, 5 byte een a 12 digit (i.e. 40  56 bit expan ion)
Decimal, 5 byte een a 13 digit (i.e. 40  64 bit expan ion)
Decimal, variable length (maximum 13 digit )
Variable length (depend on actual ize of ID)
Default value :
b
10000010
( bytes fixed length, left padding, swap bytes for short ISO 14443-A UIDs only)
3
Thi i the default format in NXP’ Mifare Cla ic related literature.
4
ISO 14443-A ingle- ize UID, ISO 14443-B PUPI, erial number for ASK CTS256B and CTS512B.
5
ISO 15693 ID, erial number for NXP ICODE1, In ide Contactle PicoTag, ST MicroElectronic SR
family…
6
ISO 14443-A triple- ize UID.
7
ISO 14443-A double- ize UID.
8
ISO 14443-B complete ATQB.

PMA82TP-BA
14 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.2.3. Output pr fix
Nam Tag D scription Siz
PFX.IDO
h
t2 ID-only output prefix. Var.
Default value : ab ent (no prefix)
If a non-null ASCII value i pecified (either a ingle character or a tring), it will
be tran mitted before the data (therefore the actual length will be longer than
the pecified length).
3.2.4. Offs t of data
Nam Tag D scription Siz
LOC.IDO
h
t3 Off et in the ID. 1
Default value :
b
00000000 (
d
0)
When TOF.IDO pecifie a fixed length output, u ing LOC.IDO make it po ible
to elect ome byte in the ID, and not only the fir t one . Thi i principally
u eful when working with non-ISO card , a hown in the following paragraph .

PMA82TP-BA
15 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.2.5. Rol of LOC.IDO with non-ISO cards
A few manufacturer till offer non tandard card , mo t of them ba ed on ISO
14443-B bit-level pecification, but with a proprietary frame format (protocol)
and a proprietary command et.
A tho e card don’t an wer to ISO 14443 tandard detection command , a
pecific template mu t be activated to di cover them.
a. ST MicroElectronics SR family
When LKL.IDO=
h
22, the reader perform the lookup equence for card in the ST
MicroElectronic SR family (SR176, SRX, SRIX).
A 8-byte erial number i returned by the card. U e TOF.IDO and LOC.IDO if you
need to truncate it.
b. AS CTS256B and CTS512B
When LKL.IDO=
h
23, the reader perform the lookup equence for card in the
ASK CTS-B family (CTS256B, CTS512B).
A 8-byte identifier i built a follow :
Byt 0 Byt 1 Byt 2 Byt 3 Byt s 4 to 7
Manufacturing
code
Product code Embedded code Application code 4-byte erial
number
 CTS256B’ product code i between
h
50 and
h
5F,
 CTS512B’ product code i between
h
60 and
h
6F,
 See ASK’ documentation for explanation regarding other byte .
Define LOC.IDO=
h
04 (and TOF.IDO=
h
01) if you need only the erial number (and
don’t care for card type and other data).
c. Inside Contactless PicoTAG
9
When LKL.IDO=
h
24, the reader perform the lookup equence for card in the
In ide Contactle PicoTAG family (PicoTAG 16KS).
A 8-byte erial number i returned by the card. U e TOF.IDO and LOC.IDO if you
need to truncate it.
9
Al o HID iCla

PMA82TP-BA
16 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.2.6. Misc llan ous options
Nam Tag D scription Siz
OPT.IDO
h
t4 ID-only mi cellaneou option . See table a below. 1
a. Miscellaneous option bits
Bit Valu M aning
7 – 4
RFU
3 – 2
00
01
10
11
Position of card’s typ in th output
Card type i ent before the prefix
10
Card type i ent after the prefix and before the ID
11
Card type i ent after the actual ID
12
RFU
1 – 0
00
01
10
11
S nd card’s typ in th output
Do not end card’ type
Send card’ type on one byte (2 hex digit ) (see table b below)
Send card’ type a a tring (see table b below)
RFU
Default value :
b
00000000
b. Values for card’s type byte or string
When OPT.IDO i configured to end card’ type in the output, the po ible
value are :
“Physical”
card’s typ
On byt
valu
String
valu
R mark
ISO/IEC 14443 A
h
01 “ A ”
ISO/IEC 14443 B
h
02 “ B ”
Card mu t be compliant with Layer
3 or layer 4
ISO/IEC 15693
h
04 “ V ”
NXP ICODE1
h
08 “ I ”
In ide Contactle PicoTAG
h
10 “ i ” Al o HID iCla
ST MicroElectronic SR family
h
20 “ ”
ASK CTS256B and CTS512B
h
40 “ a ”
Calyp o (Innovatron protocol)
h
80 “ C ”
10
The actual frame i <card type><PFX.IDO><card id> (PFX.IDO may be empty)
11
The actual frame i <PFX.IDO><card type><card id> (PFX.IDO may be empty)
12
The actual frame i <PFX.IDO><card id><card type> (PFX.IDO may be empty)

PMA82TP-BA
17 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.3. M IFARE C LASSIC A CCEPTANCE T EMPLATE
Mifare “Cla ic” refer to NXP Mifare 1k (MF1ICS50) and Mifare 4k (MF1ICS70)
wired-logic contactle card .
Mifare 1k i divided into 64 16-byte block .
Mifare 4k i divided into 256 16-byte block .
Both card have a 4-byte erial number, located at the beginning of block 0. A
tho e card are ISO/IEC 14443-3 compliant, you can read the erial number
through the generic ID-Only template, in tead of u ing thi dedicated template.
3.3.1. Lookup list
Nam Tag D scription Siz
LKL.MIF
h
t0 Mifare cla ic lookup li t, value =
h
61.
See 3.1.1.a for detail .
1
3.3.2. Output format
Nam Tag D scription Siz
TOF.MIF
h
t1 Mifare output format. See table a below. 1
a. Output format bits
Bit Valu M aning
7
0
1
Do not wap byte
Swap byte
6
0
1
RAW data
ASCII encoded data
13
5
0
1
Left-padding with
h
0 (RAW) or <SPACE> (ASCII)
Right-padding with
h
F (RAW) or <SPACE> (ASCII)
4
0
1
Long string r ading option
14
Di able long tring reading option
Enable long tring reading option
3 – 0
Output l ngth
Format depend on bit 6 (RAW or ASCII).
See table b below for RAW data (bit 6 = 0)
See table c below for ASCII data (bit 6 = 1)
Default value :
b
00000010
13
If data read from the memory card i “31 32 33 43 34 35” (hexadecimal notation), output will be
“123C45”. Make ure that only valid digit (value from 31 to 39 and 41 to 46 or 61 to 66) are
encoded in every card, otherwi e actual reader output will be undefined.
14
Thi option i only available on Prox’N’Roll RFID Scanner, RDR-K632 and ProxRunner. If working
with IWM-K632 or IWM-X, plea e ignore thi configuration tag.

PMA82TP-BA
18 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
b. Output length when bit 6 = 0
Bit Valu M aning
3 – 0
0000
0001
0010
0011
0100
0101
0110
0111
1000
1001
1010
1011
1100
1101
1110
1111
Decimal, 4 byte een a 10 digit (i.e. 32  40 bit expan ion)
Fixed length, 4 byte (32 bit )
Fixed length, 8 byte (64 bit )
Fixed length, 5 byte (40 bit )
Fixed length, 12 byte (96 bit )
Fixed length, 7 byte (56 bit )
Fixed length, 11 byte (88 bit )
RFU
Fixed length, 16 byte (128 bit )
RFU
RFU
RFU
Decimal, 5 byte een a 12 digit (i.e. 40  56 bit expan ion)
Decimal, 5 byte een a 13 digit (i.e. 40  64 bit expan ion)
Decimal, variable length (maximum 13 digit )
Variable length (u ing
h
0 and
h
F a end of tring marker )
c. Output length when bit 6 = 1
Bit Valu M aning
3 – 0
0000
0001
to
1111
Max output length =
d
16
Max output length from
d
1 to
d
15
3.3.3. Output pr fix
Nam Tag D scription Siz
PFX.MIF
h
t2 Mifare output prefix. Var.
Sam as ID-only output pr fix (s 3.2.3).
3.3.4. Location of data
Depending on the ize, the LOC.MIF tag can either be
 A block number (= addre of data in Mifare card) when ize = 1,
 An Application Identifier (AID) when ize = 2.

PMA82TP-BA
19 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
a. Fixed block number
Nam Tag D scription Siz
LOC.MIF
h
t3 Block number to be read. 1
Default value :
b
00000100 (
d
4)
When a Mifare card i found, the reader trie to read the block pecified in
LOC.MIF (16 byte ), and then truncate the data according to the length
pecified in TOF.MIF.
The block number hall be
 Between 0 and 63 for Mifare 1k card ,
 Between 0 and 255 for Mifare 4k card .
Note that data mu t tart on a block boundary.

Mifare ector t
railer ( ecurity block ) numbered 3, 7, … can be read, but their
content i ma ked (to protect the key ). U ing uch a block a acce control
identifier i definitely not a good idea.
b. AID in MAD
Nam Tag D scription Siz
LOC.MIF
h
t3 AID to be elected and read. 2
When a Mifare card i found, reader read the MAD (block 1 and 2 of ector 0)
15
and trie to find the pecified AID. The location of the AID in the MAD i the
pointer onto the actual block to be read.
Note that data mu t be located at the beginning of the fir t block marked with
the pecified AID.
Plea e refer to NXP application note for detailed explanation of the MAD.
15
Sector 0 mu t be freely readable either with ba e key A (“A0 A1 A2 A3 A4 A5”), with tran port key
(“FF FF FF FF FF FF”) or with the application key pecified in AUT.MIF .

PMA82TP-BA
20 / 50
PROXRUNNER BLUETOOTH RFID SCANNER - Reference manual
SPRINGCARD, the SPRINGCARD logo, PRO ACTIVE and the PRO ACTIVE logo are regi tered trademark of PRO ACTIVE SAS.
All other brand name , product name , or trademark belong to their re pective holder .
Information in thi document i ubject to change without notice. Reproduction without written permi ion of PRO ACTIVE i forbidden.
3.3.5. Auth ntication k y
Depending on the ize, the AUT.MIF tag can either be
 A pointer to a key located in RC’ ecure EEPROM when ize = 1.
 The Mifare key it elf, when ize = 7,
 A ma ter key and it diver ification option , when ize = 9 or 17
When the AUT.MIF tag i ab ent, all EEPROM key are tried out in equence (thi
can take a long time…).
Nam Tag D scription Siz
AUT.MIF
h
t5 Mifare authentication key. See below
Default value : ab ent
a. Size = 1 : pointer to a key in RC’s secure EEPROM
 Value
h
00 to
h
0F refer to type A key
d
0 to
d
15, re pectively,
 Value
h
80 to
h
8F refer to type B key
d
0 to
d
15, re pectively.
b. Size = 7 : specified Mifare key
Offs t L ngth Cont nt
0 1 Key option . See table c below.
1 6 Mifare key value.
c. ey options bits, when size = 7
Bit Valu M aning
7
0
1
Key i an A key
Key i a B key
6 – 0
RFU
d. Size = 17 : master key diversification using HMAC-MD5
Offs t L ngth Cont nt
0 1 Key option . See table below.
1 16 Ma ter key value.
e. ey options bits, when size = 17
Bit Valu M aning
7
0
1
Diver ified key i an A key
Diver ified key i a B key
6
0
1
Diver ification with card UID and addre fixed to
h
00
Diver ification with card UID and addre = ector number
5 – 4
10 Diver ify the key u ing HMAC-MD5 algorithm
3 – 0
RFU