User manual

Page 38 of 61

MS246 User Manual

two purposes in mind: One is for the host to ensure data integrity by comparing

this field with an SHA-1 hash of the decrypted track data and prevent unexpected

noise in data transmission. The other purpose is to enable the host to store a token

of card data for future use without keeping the sensitive card holder data. This

token may be used for comparison with the stored hash data to determine if it is

from the same card.

Some Additional notes: (4/28/2011)

1. “Decode status” bits in “track status” byte is set to 0 for no error (either

decode success or no sampling data), or to 1 for error (has sampling

data, but failed to decode).

2. Please be aware that track status byte in secure output is different from

track status byte in OPOS header (called read error1 and read error2).

OPOS header will only be used in OPOS mode security level 1 and

level 2, and secure output only used in level 3 or level 4.

3. For USB HID Secure Output, the output format is the same as the

secure output structure. No HID header is added, but the total length is

the HID standard (537 bytes). Unused bytes will be filled with 0x00.

This is applied to secure Level 3 and Level 4 output, whether or not the

data is encrypted.

4. Examples for field 8 (clear/mask data sent status) and field 9

(encrypted/hash data sent status):

These two bytes are omitted in original structure. In the enhanced

encrypted structure, these two bytes are used to indicate the presence of

each track’s clear or masked data, encrypted data and hash data.

Example :

field 8 = 0x03 (00000011)

field 9 = 0xBF (10111111)

T1: mask data present; encrypted data present; hash present

T2: mask data present; encrypted data present; hash present

T3: no Mask data; encrypted data present; hash present

KSN: present

Session ID: not present

Additional Settings

Send LRC in secure mode (6F)

53 6F 01 31 // to send LRC in secure mode (Default)

53 6F 01 30 // remove LRC from secure mode

Display expiration data (50)

53 50 01 30 // do not display expiration date (Exp date masked)

(Default)

53 50 01 31 // display expiration data

Reader Serial Number (4E)