With above post in mind here are some of the old card lay outs we all used to know well.
This doc is old but gives a good eplaiantion on card op. voltages
Look Here -> |
With above post in mind here are some of the old card lay outs we all used to know well.
Last edited by Cobra1; 23-12-08 at 01:05 PM. Reason: Dropped link
just dont put 12v on them lol i did thy dont like it
Interesting that there are now 3 types (a,b,c) running on different voltages (5,3,1.8).
I guess gamma is likely type b, and atmel-based smartcards must be type a.
ag
Energy is the father of creation
more interesting is how does the smart card reader and its associated software identify which card is in slot and switch voltage accordingly this is not only for sat but credit card etc
From just after half way down:
When a card is inserted in the reader, the software must first determine what kind of card is connected and what is the type of protocol supported by the card. This is achieved by the ATR issued by the MCU and one of two possible protocols will be provided :
T0: the data on the I/O line will be arranged byte by byte.
T1: the data on the I/O line will be arranged by packet of bytes.
The ATR also gives a bunch of information necessary to read/write to the card during the rest of the transaction:
* operating voltage
* maximum current absorbed by the card
* data direct or inverse convention (MSB or LSB bit first in the byte)
OK so now it's time to dig through the ISO doc libraries for the ATR structure But as we know the ATR can (and is) often hardcoded in s/w and can be set to return anything the card programmer decides...
By logging you'll observe that gammas produce different ATRs depending on how they've been managed, ie different stages of their life cycle. This is analogous to seeing different command line prompts depending on how your PC has been configured.
A gamma card might be birthed to look like an Atmel memory card, perhaps so it looks benign if intercepted by customs
3B B2 11 00 10 80 00 02
In such a state it's locked down to basically do nothing until it's sent a magic unlock code.
When unlocked it changes state and issues a different ATR (eg "GAMMACARD V 1.1")
3B 9F 21 0E 47 41 4D 4D 41 43 41 52 44 20 56 20 31 2E 31 9D
In this state it accepts commands to receive initialisation data of various kinds, or to activate its target application eg Irdeto emulation.
When that occurs it no longer presents its "gammacard" prompt of course, but instead issues ATR like an Irdeto card would. Eg
3B 9F 21 0E 49 52 44 45 54 4F 20 41 43 53 20 56 34 2E 31 9D
Now regarding smart card voltage, the ATR specifies voltage in character TB1 which may or may not be present. Card applications decide for themselves whether to issue TB1 and the indicate that using , as described in . As you can see, Irdeto specifies optional parameters TA1 & TD1 but not TB1 or TC1:
TS (initial character) $3B = direct convention
T0 (format character) $9F (10011111) = TA1 & TD1 are present + 15 historical characters
Therefore, as crypto7 said, the gammas choose not to specify voltage. If they wanted to specify it then the $9F byte would be something like $BF and there'd be an additional byte later on specifying what voltage they wanted to run at following the ATR. Typically the host firmware would check this byte and if it's different to what they are already running they'd shut down the card, reprogram their card controller and restart the card. Those who are interested in what this looks like can find in for the DS8007 card controller.
Last edited by gw1; 09-01-09 at 10:44 PM.
gw1 is correct. an atr can be read like this.
The atr you have can be decoded as follows... A stock Irdeto. This only shows the "current function" of the card, not the card type.
Example
ATR to decode : [3B9F210E49524445544F204143532056342E319D]
TS : 3B - Direct Convention
TO : 9F History Len : F (15 Bytes)
Interface characters : [AD]
TA1 : 21 Max Speed (FI=2) : 6 Mhz F : 558
: (DI=1) D = 1
TD1 : 0E T : T=14 is reserved for protocols standardized by ISO.
History : 49 52 44 45 54 4F 20 41 43 53 20 56 35 2E 33 [IRDETO ACS V4.1]
Check : 9E Calc of Check : 9D
Baud at 6Mhz is : 10752 bps
Bookmarks