NFC & MIFARE & ISO14443A&B & ISO15693 & ISO18000 & ISO7816 IC CARD MODULE QM-ABCM7 Series IC Card Module General Technical Manual (Revision 6.21) Quick Ohm Küpper & Co. GmbH February 17, 2022 Please read this manual carefully before using. If any problem, please feel free to contact us, we will offer a satisfied answer ASAP.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Contents Contents........................................................................................................................................................... 1 Document update records ................................................................................................................................ 7 1 Introduction ...........................................................................
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 4.3 SPI interface ................................................................................................................................. 17 4.3.1 Physical Interface ..................................................................................................................... 17 4.3.1.1 Bus working mode ..................................................................................................
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.4.4 ISO14443-4 TYPE B Request .................................................................................................. 34 5.4.5 Request Card according to EMV and PBOC............................................................................ 34 5.4.6 Send APDU to ISO14443-4 Card ............................................................................................. 35 5.4.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.7.3.2 MIFARE Plus Data Block Read ....................................................................................... 52 5.7.3.3 MIFARE Plus Data Block Write ...................................................................................... 52 5.7.3.4 MIFARE Plus Purse Create .............................................................................................. 53 5.7.3.5 MIFARE Plus Purse Read ....
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.8.3.6 DESFire Limited Credit ................................................................................................... 68 5.8.3.7 DESFire Write Record ..................................................................................................... 68 5.8.3.8 DESFire Read Record ...................................................................................................... 69 5.8.3.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.13 I.CODE 1 Operation Commands .................................................................................................. 85 5.13.1 I.CODE1 Inventory .............................................................................................................. 85 5.13.2 I.CODE 1 Read .................................................................................................................... 85 5.13.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Document update records Revision Date Update information V4.51 May. 15, 2015 Support MIFARE Ultralight EV1 V4.62 Jan. 15, 2015 Modify MIFARE Plus and MIFARE DESFire translation. Add sample to SR series cards. V4.63 Jan. 29, 2015 Modify spelling errors. V5.00 Feb. 2, 2015 Module authentication 5.3 added V5.10 Mar. 18, 2016 Support encryption communication, chapter 5.3.4 V5.20 Mar.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 1 Introduction This file describes “working modes” and “communication protocol” of QM-ABCM7 series IC card module in details. It's suitable for the programmers who are using Series QM-ABCM7 RFID module to do the development. If you have any question during the programming, please feel free to contact our technical support via kontakt@quio-rfid.de. 2 Function QM-ABCM7 series IC card module is high efficient product.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de ISO14443A T=CL card could be detected when the automatic detecting cards function is open. If you need to operate the card, you need to send RATS command (0x30) to the module firstly. After the module got successful response from the CPU card, then the automatic detecting cards function will be closed automatically, please notice the information above.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 2.6 EMV/PBOC Certification Mode Some of the QM-ABCM7 modules have PBOC and EMV certification modes. These modes support EMV& PBOC (LEVEL 1) protocol certification and electrical characteristics certification. This mode could be open via sending the commands. We are capability of designing the Reader which could pass the EMV/PBOC certification. If you need the help, please feel free to contact us. 2.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de functions. This mode could support active mode too. It could work with other NFC devices which support active mode. If the initiator only supports passive mode, passive mode is the only mode could be chosen. 2.12 NFC Tag Simulation Functions The reader module of supporting NFC target mode could be simulated as a NFC Tag. It is a FLASH data storage space with 128 bytes.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 3 Communincation Protocol 3.1 Test Software We supply test software "TransPort”. New users could use this tool to understand the protocol of JCP04 & JCP05. The reader module could be directly connected with the PC via RS232C or USB HID interface. And we supply MT500 (JMY IC Card Module Tester) for test I²C and UART interface modules. MT500 could convert RS232C signal to UART or I²C signal to operate the module.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 3.3 JCP05 Communication Protocol 3.3.1 Data sent format Host send: Length 3.3.2 C.A. Command Data Checksum Length: 2 bytes, number of bytes from Length byte to the last byte of Data, MSB first, length from 0x0004 to 0x01FE. C.A. (communication address): 1 byte, the address of UART or RS232C multi-device communication, default address: 0x01; broadcast address: 0x00.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 4 Communication Interface 4.1 UART and RS232C interface 4.1.1 Physical Interface The Universal Asynchronous Receiver/Transmitter (UART) takes bytes of data and transmits the individual bits in a sequential fashion. And the interface level is TTL-level specification. The communication between UART and PC is via TX, RX and GND pins.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de important to get a stable communication and faster speed. The host's SDA pin should connect to the device's SDA pin; meanwhile the host's SCL pin should connect to the device's SCL pin. I²C bus is able to connect with 128 devices. The I²C address of module is default 0xA0. Users may change the address setting via sending the command (0x19), so that user could connect multi modules on the same I²C bus. 4.2.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de happens during the ninth clock cycle. 4.2.2.5 Bus Status When the module has received command, it doesn’t acknowledge I²C bus until ends with the card communication. 4.2.2.6 Device Address The module requires a 8-bit device address following a start condition to enable the chip for a read or write operation. The device address word consists of 7 addressing bits and 1 operation select bit.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 4.2.3 www.quio-rfid.de Data Transaction The module is a slave device of the I²C bus, so the host needs to write the command package to module. The module will execute the command. Then the host needs to poll the status of the module while it is working by sending out the command of “read” continuously. If the module send an ACK to a read operation, then the last command execution were finished.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 4.3.1.1 www.quio-rfid.de Bus working mode It is standard SPI working mode 3. SCK idle high. Data sample at 2nd edge of SCK. 4.3.1.2 Write operation Master writes a byte to Slave. The data is msb first. 4.3.1.3 Read operation Master read a byte from Slave. Copyright © 2003-2022 Quick Ohm Küpper & Co. GmbH. All rights reserved.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 4.3.2 www.quio-rfid.de Data links 4.3.2.1 SPI inquire: SPI write data: SPI read data: 4.3.2.2 SPI instructions 0x04 0x10 0x20 inquire the state of SPI Slave device send data to SPI Slave device get data from SPI Slave device SPI state code This code is answer to SPI inquire command. 0x42 Slave device is ready to receive new command 0x08 Slave device is ready for read result of previous command or ready to receive new command.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5 Application-layer Protocol 5.1 Overview Chapter 5 includes the whole contents of JCP04 and JCP05. Some of the QM-ABCM7 doesn't support the whole parts. For example: some no SAM slots; some don't support some kind of card types (ISO14443B or ISO15693). So users need to make sure the command could operate the card. Otherwise, the wrong information will be returned from the module.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.2 System commands 5.2.1 Module reset to factory default Function: Reset all configurations of the module to factory default setting. The new setting will effect after re-power on. The module will be reset by system watch dog after this command. Host send: Frame 0x0F 52 45 53 45 54 Frame 0x0F Checksum Frame 0xF0 Checksum Checksum Success: Failure: We use JMY6801H to do the test.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.2.3 www.quio-rfid.de Read PCD information (including UID) Function: read the PCD information, including Product identification code, UID, and configuration information. Host send: Frame 0x03 Checksum Frame 0x03 Info. Success: Checksum Info.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.2.5 www.quio-rfid.de Set Module Idle Function: set the module idle. In idle mode, the module of RF output turn to OFF, PCD power down, and CPU in idle mode, so the power consumption reduces to about 100uA. Sending the next command to module will wake up the module, and then the RF output ON and automatic detecting card restore the settings.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Time: 1 byte time, time unit is 10mS. If time is 0x0A, the beep time is 100mS. Success: Frame 0x14 Checksum Frame 0xEB Checksum Failure: Example: Send: 0x00 05 00 14 AA BB Return: 0x00 04 01 14 11 5.2.8 Read Data from FLASH in MCU Function: read data from FLASH in MCU of the module.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.2.10 www.quio-rfid.de Read Data from FLASH on Module Function: read data from FLASH on module. This FLASH size is 512KB. The FLASH is 264 bytes per block and 2048 blocks totally. The operations are with in a BLOCK. If you need read data in 2 blocks, then you must send read command twice. Host sends: Frame 0x05 BlockNo Address Bytes Checksum BlockNo: 2 bytes, the reading block number: 0x0000 ~ 0x07FF, MSB first.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de previous baud rate. At last it will set to the new baudrate. UART communication baud rate is default 19200bps. Settings will SAVE in the module, and it won't be lost after power OFF. Host sends: Frame Baud rate: 0x17 Baud rate Checksum 1 byte, baud rate code; 0: 19200bps; 1: 115200bps; 2: 9600bps; 3: 38400bps; 4: 57600bps.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0xE6 www.quio-rfid.de Checksum Example: Send: 0x00 05 00 19 A0 BC Return: 0x00 04 01 19 1C 5.2.15 Set Multi-card Operation Function: set multi-card operation. If users need to operate one card from multi-card, they need to use the multi-card operation. If users set the automatic detecting card, the multi-card operation will be prohibited.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.2.17 www.quio-rfid.de Set Automatic Detecting Card Interval Time Function: set interval time of automatic detecting card function. The default is 100ms. Settings will save in the module; it will be not lost after power OFF. Host sends: Frame 0x1C Time Checksum Time: 1 byte, 0x00 to 0xFF, unit is 10mS, 0x01 means 10mS.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de BIT4:BIT3 = 0:0 JCP04 BIT4:BIT3 = 0:1 JCP05 BIT4:BIT3 = 1:0 JCP02 BIT4:BIT3 = 1:1 JCP03 BIT5 = 0: ON; BIT5 = 1: OFF BIT6 = 0: ON; BIT6 = 1: OFF BIT7 = 1(MUST BE 1); Process ISO15693: Process ISO14443 TYPE A: RFU: Success: Frame 0x1E Checksum Frame 0xE1 Checksum Failure: Example: Send: 0x00 05 00 1E 00 1B Return: 0x00 04 01 1E 1B 5.2.20 Set the RF Output Level Function: To set the RF output level.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Success: Frame 0x70 Checksum Frame 0x8F Checksum Failure: Example: Send: 0x00 05 00 70 00 75 Return: 0x00 04 01 70 75 5.2.22 Set Current Antenna Function: Set the Current Antenna for Multi Antenna readers. Host sends: Frame 0x04 Number Checksum Number: 1 byte, 0~255, the number of the antenna.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.3 Module security 5.3.1 Get authentication code Function: Get authentication code from module; this is the 1st step of module authentication. Host sends: Frame 0x07 Code Checksum Code: 8 bytes, ciphered authentication code. Success: Frame 0x07 Checksum Example: Send: 0x00 04 00 07 03 Return: 0x00 0C 01 07 D0 9B 09 33 2C B7 9F FB 84 5.3.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0xF6 www.quio-rfid.de Checksum Example: Send: 0x00 24 00 09 1F 7A 61 4D 9D 65 35 1D B4 D0 A7 45 41 14 72 61 82 2B BF ED C0 AD 98 86 B0 0B 5F 5A 80 0C 18 50 86 Return: 0x00 04 01 09 0C 5.3.4 Encrypted Communication Function: send commands to reader with encryption.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.4 ISO14443A/B CPU Card Commmands 5.4.1 ISO14443 TYPE A Request Function: ISO14443A request cards, cards include MIFARE and other ISO14443A cards. In the returned results, user could judge the length of serial number via the returned data package length, and judge the card type by ATQA, also users can judge whether the card supports ISO14443-4 by SAK.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de needs to request card and verify the card support ISO14443-4 via SAK of card. If the automatic detecting card function is on, after a successful implementation of the RATS command, the automatic detecting card function will be forced OFF. Host sends: Frame 0x30 EN_NADCID Checksum EN_ NADCID: 1: enable NADCID; 0: disable NADCID (EMV is disable) Success: Frame 0x30 ATS Checksum ATS: ATS, length depends on card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x32 Type Info www.quio-rfid.de Checksum Type: 0x41: ISO14443 TYPE A; 0x42: ISO14443 TYPE B; 0x4D: Multi card in the Antenna field, request failed. Info: TYPE A card returned data: 0x41, 1 byte UID Length; Length bytes UID; 2 bytes ATQA; 1 byte SAK; ATS (ATS is not fixed. Please reference the Datasheet of the card from the suppliers.).
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x9D www.quio-rfid.de Checksum Example: Send: 0x00 08 01 62 00 00 00 00 6B Return: 0x00 04 01 62 67 Copyright © 2003-2022 Quick Ohm Küpper & Co. GmbH. All rights reserved.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.5 MIFARE 1K/4K/mini Card Commands 5.5.1 MIFARE Request MIFARE series cards request, please refer to ISO14443 TYPE A Request. 5.5.2 MIFARE 1K/4K Data Block Read Function: Read MIFARE 1K/4K one block data.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Key: 6 bytes, the key of the card. Success: Frame 0x2A Data Checksum Data: blocks * 16 bytes card data per block Failure: Frame 0xD5 Checksum Example: Send: 0x00 0D 00 2A 00 01 02 FF FF FF FF FF FF 24 Return: 0x00 24 01 2A 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F 0F 5.5.4 MIFARE 1K/4K Data Block Write Function: Write the data to a block of MIFARE 1K/4K.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x2B Checksum Frame 0xD4 Checksum www.quio-rfid.de Failure: Example: Send: 0x00 2D 00 2B 00 01 02 FF FF FF FF FF FF 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F 05 Return: 0x00 04 01 2B 2E 5.5.6 MIFARE 1K/4K Purse Block Initialization Function: Initialize a block of MIFARE 1K/4K as a purse. The format of purse uses MIFARE 1K/4K’s default.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Send: 0x00 0C 00 24 00 01 FF FF FF FF FF FF 29 Return: 0x00 08 01 24 04 03 02 01 29 5.5.8 MIFARE 1K/4K Purse Increment Function: Purse increment of MIFARE 1K/4K. The format of the purse uses MIFARE 1K/4K’s default. Purse increment means the increment on the basis of the original value.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.5.10 www.quio-rfid.de MIFARE 1K/4K Purse Backup Function: Copy the MIFARE 1K/4K purse to another block in the same sector. The format of the purse uses MIFARE 1K/4K’s default.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Key: Success: www.quio-rfid.de 6 bytes, the key of the card to be stored in module. Frame 0x2D Checksum Frame 0xD2 Checksum Failure: Example: Send: 0x00 0B 00 2D 00 FF FF FF FF FF FF 26 Return: 0x00 04 01 2D 28 Copyright © 2003-2022 Quick Ohm Küpper & Co. GmbH. All rights reserved.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.5.13 www.quio-rfid.de About KEY Identifier There is a byte of KEY identifier in command of MIFARE 1K/4K cards. This byte will identify the way to get the card key. KeyIdentifier BIT7 BIT6 BIT5 BIT4 BIT3 BIT2 BIT1 BIT0 BIT0 = 0: KEY A; authenticate Key A of the card. BIT0 = 1: KEY B; authenticate Key B of the card. BIT1 = 0: Using the following 6 bytes Key in command. BIT1 = 1: Using the downloaded Key by command.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.6 MIFARE Ultralight/Ultralight C/Ultralight EV1 Card Commands 5.6.1 MIFARE Ultralight/Ultralight C/Ultralight EV1 Request For MIFARE UltraLight/UltraLight C card request, please refer to ISO14443 TYPE A Request. 5.6.2 MIFARE Ultralight/Ultralight C/Ultralight EV1 Card Read Function: Read the data from MIFARE UltraLight/UltraLight C cards. A read command will read 4 blocks data from the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x42 Checksum Frame 0xBD Checksum www.quio-rfid.de Failure: Example: Send: 0x00 09 00 42 05 55 55 55 55 4E Return: 0x00 04 01 42 47 5.6.4 MIFARE UltraLight C Key Authentication Function: Inputting UltraLight C key, the device directly authenticate the key. This process of authentification is controled by the module.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.6.6 www.quio-rfid.de MIFARE Ultralight C Ek (RndA + RndB') Authentication Function: Input the "RndA + RndB'" which have already been encrypted. Host sends: Frame 0x45 Ek (RndA＋RndB') Checksum Ek (RndA＋RndB'): 16 bytes' result which "RndA + RndB'" be encrypted via using DES CBC. RndA is 8bytes random number specified by the user. RndB is obtained by the 0x44 command.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Success: Frame Card data: Failure: 0x47 Card data Checksum Blocks * 4 bytes card data. Frame 0xB8 Checksum Example: Send: 0x00 06 00 47 00 05 44 Return: 0x00 1C 01 47 04 52 7F A1 42 F9 38 80 03 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9A 5.6.9 Ultralight EV1 READ_CNT Function: The READ_CNT command is used to read the current value of one of the 3 one-way counters of the Ultralight EV1.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.6.11 www.quio-rfid.de Ultralight EV1 PWD_AUTH Function: A protected memory area can be accessed only after a successful password authentication using the PWD_AUTH command. Host sends: Frame 0x4A PWD Checksum PWD: 4byte, Ultralight EV1 card password. Success: Frame 0x4A Checksum Frame 0xB5 Checksum Failure: Example: Send: 0x00 08 00 4A FF FF FF FF 42 Return: 0x00 06 01 4A 00 00 4D 5.6.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Address: 1byte, Ultralight EV1 counters address. Success: Frame 0x8C Flag Checksum Flag: 1byte, valid flag for this counter. Failure: Frame 0x73 Checksum Example: Send: 0x00 05 00 8C 00 89 Return: 0x00 05 01 8C BD 35 5.6.14 Ultralight EV1 VCSL Function: The VCSL command is used to enable a unique identification and selection process across different MIFARE cards and card implementations on mobile devices.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.7 MIFARE Plus Card Commands QM-ABCM7 series reader module support MIFARE Plus card operation. NXP MIFARE Plus cards are used to instead MIFARE 1 card. We provide application commands which are based on Level 3. In the card level 3, the authentication use AES encryption algorithm. In the communication process between module and card, all are using encrypted data + command with MAC + response with MAC mode.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.7.2.2 www.quio-rfid.de MIFARE Plus Commit Perso Function: Level 0 command, to switch Level0 to Level1 or Level3. Target Level depends on the card. If need switch to Level 1 or Level 3, please tell the suppliers when purchasing. Before using this command, please use MIFARE Plus Write Perso command to write all AES key and the initial value of all the blocks, then make the changed data effective.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x36 Status www.quio-rfid.de Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Failure: Frame 0xC9 Checksum Example: Send: 0x00 17 00 36 01 00 04 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 24 Return: 0x00 04 01 36 33 5.7.3.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.7.3.4 www.quio-rfid.de MIFARE Plus Purse Create Function: Level 3 command, creating a block of MIFARE Plus as a purse. Host sends: Frame 0x39 Block Value Checksum Block: 2 bytes (MSB first), block number. Value: 4 bytes (LSB first), purse initial value. Success: Frame 0x39 Status Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Example: Send: 0x00 0A 00 3B 00 04 00 01 00 00 34 Return: 0x00 04 01 3B 3E 5.7.3.7 MIFARE Plus Purse Decrement Function: Level 3 command, purse decrement of MIFARE Plus. Host sends: Frame 0x3C Block Value Checksum Block: 2 bytes (MSB first), block number. Value: 4 bytes (LSB first), value to decrease Success: Frame 0x3C Status Checksum Status: status code returned from the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x3E Status www.quio-rfid.de Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Failure: Frame 0xC1 Checksum Example: Send: 0x00 16 00 3E 40 02 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 6A Return: 0x00 04 01 3E 3B 5.7.3.10 MIFARE Plus Following Authenticate Function: Level 1/3 Command.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.8 DESFire Card Commands We are here to provide a separate operation for DESFire card. DESFire card authentication and communication use DES encryption algorithm. The encryption of communication between QM-ABCM7 and DESFire cards is set by users. If the user sets the RF communication process is encrypted then the card data security is extremely high.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Failure: Frame 0x6F Checksum Example: Send: 0x00 15 00 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85 Return: 0x00 15 01 90 00 CC 6C E1 74 46 42 09 8D 1B 78 17 03 49 4C 67 A1 85 5.8.1.5 DESFire Authenticate first step Get ekNo (RndB) Function: Authentication is initiated by the module. Get the ekNo (RndB) from the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x70 www.quio-rfid.de Checksum Example: Send: 0x00 14 00 8F 42 FF CF C7 87 A1 90 32 B9 CC B8 A5 E7 70 C6 F5 66 Return: 0x00 0D 01 8F 00 28 4C 45 14 2A 60 17 67 8C 5.8.1.7 DESFire Select Application Function: Select the specified card application. The following operation will be effective to this application. Host sends: Frame 0x98 AID Checksum Status Checksum AID: 3 bytes (LSB in first).
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Success: Frame 0x95 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x6A Checksum Example: Send: 0x00 09 00 95 12 34 56 EF 03 00 Return: 0x00 05 01 95 00 91 5.8.2.3 DESFire Change Key Settings Function: Modify the master key/application master key configuration setting.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Host sends: Frame 0x93 KeyID ekKey Checksum KeyID: 1 byte. ekKey: 24bytes (Refer to the datasheet for encryption calculations, or use the tools we provide and refer to source code). Success: Frame 0x93 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Return: 0x00 05 01 96 00 92 5.8.2.8 DESFire Get Version Function: Get card manufacturer and production information. Host sends: Frame 0x9A Checksum Frame 0x9A Status Success: Data Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Data: 28 bytes card manufacturer and production information.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x64 www.quio-rfid.de Checksum Example: Send: 0x00 04 00 9B 9F Return: 0x00 08 01 9B 00 03 04 01 94 5.8.2.11 DESFire Get File Settings Function: Get specified file setting in current application. Host sends: Frame 0x9C FID Checksum FID: 1byte. Success: Frame 0x9C Status Data Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x62 www.quio-rfid.de Checksum Example: Send: 0x00 08 00 9D 03 00 11 11 96 Return: 0x00 05 01 9D 00 99 5.8.2.13 DESFire Create STD Data File Function: Create Standard Data File in current application. Host sends: Frame FID: Comm.Sett: AccessRight: Size: Success: 0x9E FID Comm.Sett AccessRight Size Checksum 1 byte. 1 byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption. 2 bytes (LSB in first).
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Host sends: Frame 0xA0 FID Comm. Sett Access Right Lower limit Upper limit Value Limited Credit enable Checks um FID: 1 byte. Comm.Sett: 1byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption. AccessRight: 2 bytes (LSB in first). Lower limit: 4 bytes (Signed int, LSB in first). Upper limit: 4 bytes (Signed int, LSB in first). Value: 4 bytes (Signed int, LSB in first).
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Host sends: Frame 0xA2 FID: Comm.Sett: AccessRight: Record Size: Max Records: Success: Comm. Sett FID Access Right Record Size Max Records Checksum 1 byte. 1byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption. 2 bytes (LSB in first). 3 bytes (LSB in first), bytes of single record. 3 bytes (LSB in first), total record numbers of the file.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Success: Frame 0xA4 Status Data Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Data: data returned from the card. Failure: Frame 0x5B Checksum Example: Send: 0x00 0B 00 A4 03 00 00 00 10 00 00 BC Return: 0x00 15 01 A4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B0 5.8.3.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x59 www.quio-rfid.de Checksum Example: Send: 0x00 05 00 A6 01 A2 Return: 0x00 09 01 A6 00 22 22 22 22 AE 5.8.3.4 DESFire Credit Function: Increase value in specified Value File in current application. Commitment is needed to take effect after this operation, refer to: DESFire Commit Transaction please. Host sends: Frame FID: Data: 0xA7 FID Data Checksum 1 byte.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.8.3.6 www.quio-rfid.de DESFire Limited Credit Function: Increase a limited value in specified Value File in current application without having full Read&Write permissions to the file. Commitment is needed to take effect after this operation, refer to: DESFire Commit Transaction please. Host sends: Frame FID: Data: 0xA9 FID Data Checksum 1 byte. There are two lengths, depending on whether it is encrypted.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.8.3.8 www.quio-rfid.de DESFire Read Record Function: Read one or multi records from specified Record File in current application. Host sends: Frame 0xAB FID Offset Length Checksum FID: 1 byte. Offset: 3 bytes (LSB in first), offset of the record. Length: 3 bytes (LSB in first), number of records to be read. Success: Frame 0xAB Status Data Checksum Status: status code returned from the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x52 www.quio-rfid.de Checksum Example: Send: 0x00 04 00 AD A9 Return: 0x00 05 01 AD 00 A9 5.8.3.11 DESFire Abort Transaction Function: Abort all WRITE operation of Backup Data file, Value file and Record file in current application. Host sends: Frame 0xAE Frame 0xAE Checksum Success: Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.8.4 www.quio-rfid.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.9 SR176 Card Commands 5.9.1 SR Serial Cards 1 Slot Initiate Card Function: SR serial cards (SR176/SRI512/SRI1K/SRI2K/SRI4K/SRIX4K, the same below) single channel initiate card. Before read/write card, it needs to use the command of “SR serial cards select” to select the card. For more detailed card operations please refer to the card manual please.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x67 Checksum Frame 0x98 Checksum www.quio-rfid.de Failure: Example: Send: 0x00 04 00 67 63 Return: 0x00 04 01 67 62 5.9.4 SR176 Card Read Function: Read data block of SR176 card. Host sends: Frame StartBlock: BlockNumbers: Success: Frame 0x68 StartBlock BlockNumbers Checksum 1 byte. 1 byte; the quantity of blocks to be read. 0x68 Data Checksum Data: 2 bytes * BlockNumbers, data from the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.9.6 www.quio-rfid.de SR176 Block Lock Function: Write Lock Register of SR176 card. The module will check the lock result after written. Host sends: Frame 0x6A LOCK_REG Checksum LOCK_REG: 1byte, the lock register values to be written. Success: Frame 0x6A Checksum Frame 0x95 Checksum Failure: Example: Send: 0x00 05 01 6A EF 81 Return: 0x00 04 01 6A 6F 5.10 SRI512/1K/2K/4K Card Commands 5.10.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.10.3 www.quio-rfid.de SR Serial Cards Select Please reference: SR serial cards select. 5.10.4 SRI Serial Cards Return to Inventory Function: Set a selected SRI card returning to inventory status. Host sends: Frame 0x66 Checksum Frame 0x66 Checksum Frame 0x99 Checksum Success: Failure: Example: Send: 0x00 04 00 66 62 Return: 0x00 04 01 66 63 5.10.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de compare. If it is not equal, it will return failure. Host sends: Frame StartBlock: BlockNumbers: Data: Success: 0x6C StartBlock BlockNumbers Data Checksum 1 byte. 1 byte; the quantity of blocks to be written. 4 bytes * BlockNumbers, data to be written to the card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.10.10 SRIX Serial Cards Authentication Function: SRIX serial card authentication; Anti clone function of the SRIX serial card. Host sends: Frame 0x6F Data Checksum Result Checksum Data: 6 bytes, data input. Success: Frame 0x6F Result: 3 bytes, result return.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.11 SAM or CPU Card Commands 5.11.1 SAM or CPU Card Reset Function: Reset SAM or CPU card, get ATR and set the relevant communication parameters. Host sends: Frame SAM.No: BaudRate: 0x4D SAM.No BaudRate Checksum 1 byte, 0: CPU card, other value: SAM slot number. 1 byte, reset baud rate. 0: 9600bps; 1: 19200bps; 2: 38400 bps; 3: 55800 bps; 4: 57600 bps; 5: 115200 bps; 6: 230400 bps; other value: RFU.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module APDU: Success: APDU need to send. Frame Response: Failure: www.quio-rfid.de 0x4F SAM.No Response Checksum response of SAM, length depending on the type of APDU. Frame 0xB0 Checksum Example: Send: 0x00 0A 00 4F 01 00 84 00 00 08 C8 Return: 0x00 0F 01 4F 01 58 CE 18 13 43 E3 6B 10 90 00 96 5.11.4 Power Down and Eject CPU Card Function: Power down and eject CPU card from slot 0. Host sends: Frame SAM.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.12 ISO15693 Operation Commands 5.12.1 ISO15693 Inventory Function: Find a card in RF effective field. If it is successful, set the tag as CURRENT TAG. If automatic detecting card function is turned on, this command will take the result of automatic detecting card, it won't to detect card after received the command. Host sends: Frame 0x5C AFI Checksum AFI: 1byte AFI, detect card equal to AFI only.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.12.3 www.quio-rfid.de ISO15693 Stay Quiet Function: Set the CURRENT TAG stay quiet. This command is only for "Inventory" and "get system information". Read and write card commands are based on the address, so even with this command; it could also read and write operations. Host sends: Frame 0x5D Checksum Frame 0x5D Checksum Frame 0xA2 Checksum Success: Failure: Example: Send: 0x00 04 00 5D 59 Return: 0x00 04 01 5D 58 5.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Return: 0x00 04 01 5F 5A 5.12.6 ISO15693 Read Blocks Function: Read data blocks of CURRENT TAG. Host sends: Frame StartBlock: BlockNumbers: Success: Frame Data: Failure: 0x54 StartBlock BlockNumbers Checksum 1 byte, the start block number to be read. 1 byte, number of blocks to be read, Max. 62. 0x54 Data Checksum Blocks * bytes per block (depend on the cards).
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Failure: Frame 0xA9 Checksum Example: Send: 0x00 05 00 56 08 5B Return: 0x00 04 01 56 53 5.12.9 ISO15693 Write AFI Function: Write AFI to CURRENT TAG. Host sends: Frame 0x57 AFI Checksum AFI: 1 byte, AFI value to be written. Success: Frame 0x57 Checksum Frame 0xA8 Checksum Failure: Example: Send: 0x00 05 00 57 08 5A Return: 0x00 04 01 57 52 5.12.10 ISO15693 Lock AFI Function: Lock AFI of CURRENT TAG.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0xA6 www.quio-rfid.de Checksum Example: Send: 0x00 05 00 59 09 55 Return: 0x00 04 01 59 5C 5.12.12 ISO15693 Lock DSFID Function: Lock DSFID of CURRENT TAG. Host sends: Frame 0x5A Checksum Frame 0x5A Checksum Frame 0xA5 Checksum Success: Failure: Example: Send: 0x00 04 00 5A 5E Return: 0x00 04 01 5A 5F 5.12.13 ISO15693 Get Blocks Security Function: Get blocks security information of CURRENT TAG.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.13 I.CODE 1 Operation Commands 5.13.1 I.CODE1 Inventory Function: Search I.CODE1 card in RF effective field. Host sends: Frame 0x80 Checksum Frame 0x80 SNR 0x7F Checksum Success: Checksum SNR: 8 bytes. Failure: Frame Example: Send: 0x00 04 00 80 84 Return: 0x00 0C 01 80 5D 9A D4 0F 00 00 00 01 90 5.13.2 I.CODE 1 Read Function: Read data from I.CODE1.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x7D www.quio-rfid.de Checksum Example: Send: 0x00 09 00 82 08 12 34 56 78 8B Return: 0x00 04 01 82 87 5.13.4 I.CODE 1 Stay Quiet Function: I.CODE1 stays quiet. Host sends: Frame 0x83 Checksum Frame 0x83 Checksum Frame 0x7C Checksum Success: Failure: Example: Send: 0x00 04 00 83 87 Return: 0x00 04 01 83 86 Copyright © 2003-2022 Quick Ohm Küpper & Co. GmbH. All rights reserved.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.14 NFC Functions 5.14.1 Set NFC Device Working Mode Function: Set NFC device working mode. Host sends: Frame 0xC0 MODE Frame 0xC0 Checksum Checksum Success: MODE: 1 byte = 0x00 passive initiator (default) = 0x01 passive target = 0x02 active initiator = 0x03 active target = 0x04 NFC Tag simulation Failure: Frame 0x3F Checksum Example: Send: 0x00 05 00 C0 01 C4 Return: 0x00 04 01 C0 C5 5.14.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Success: Frame 0xC2 DATA Checksum DATA: returned data from target Failure: Frame 0x3D Checksum Example: Send: 0x00 0C 00 C2 11 22 33 44 55 66 77 88 46 Return: 0x00 08 01 C2 12 34 56 78 C3 5.14.3 Target Commands 5.14.3.1 Target Prepare Exchange Data Function: store exechange data to target to wait initiator exchange command from RF interface.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.15 NFC Tag Functions 5.15.1 Summary Some module with NFC target function could be set to NFC Tag mode. It could be operated by NFC Tag readers after set. The commands for target are command to operate NFC Tag FLASH space over communication port. The commands for initiator are command to operate NFC Tag FLASH space over RF interface. The data storage space is 128 bytes. Organization is 4bytes/page * 32 pages.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Send: 0x00 09 00 C9 07 07 07 07 07 C7 Return: 0x00 04 01 C9 CC 5.15.3 Target Commands 5.15.3.1 Read Data from NFC Tag Function: read data from NFC Tag over communication port.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module Frame 0x33 www.quio-rfid.de Checksum Example: Send: 0x00 0B 00 CC 01 02 03 04 05 06 07 C7 Return: 0x00 04 01 CC C9 Copyright © 2003-2022 Quick Ohm Küpper & Co. GmbH. All rights reserved.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.16 FeliCa Command 5.16.1 Transaction of FeliCa command Function: Transmit and command and get the result from FeliCa card. Host sends: Frame 0x2F DATA Checksum DATA: FeliCa command and parameters. Success: Frame 0x2F RETURN Checksum RETURN: data return from FeliCa card.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.17 ISO18000-3M3 5.17.1 Returned Status Code Retrned status code in reply of module Error-Coder Support Error Code (binary) Error-Code Name Error specific 0000 0000 Other error 0000 0011 Memory overrun 0000 0100 Memory locked 0000 1011 Insufficient power Non specific 0000 1111 Non specific error Reader operation Error 1111 1111 No tag in field 5.17.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Failure: Frame 0x7A 0x01 ErrorCode Checksum Error Code: Returned status code from tag Example: Send: 00 06 00 85 01 01 83 Return: 00 07 01 85 01 C9 1C 57 5.17.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de Return: 00 0F 01 85 02 00 00 00 00 00 00 00 00 A2 D4 FF 5.17.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de communications at 13.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module UII memory TID memory User memory RFU Byte5_6 handle www.quio-rfid.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module 5.17.8 www.quio-rfid.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de (For i.Code ILT-m, WordCount = 01h to 02h. If WordCount = 00h, the tag shall ignore the BlockWrite. If WordCount = 01h, the tag shall write a single data word. The max.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 02h. If WordCount = 00h, the tag shall ignore the BlockWrite. If WordCount = 01h, the tag shall write a single data word. The max. write length is 2 words) Byte5_6 handle 2 bytes handle Success: Frame 0x85 0x08 Handles Checksum Frame 0x 7A 0x08 Error Code Checksum Failure: Error Code: Returned status code from tag 5.17.
NFC & MIFARE & ISO14443AB & ISO15693 & ISO18000 & ISO7816 IC Card Module www.quio-rfid.de 5.17.12 ReqRnCard Function: get the handle of the tag, uses with Inventory Host sends: Frame 0x85 0x0B Info Checksum Info: 1byte info length + n bytes info.
