Activation challenge reply command – MagTek MagneSafe V5 User Manual

Page 74

Advertising
background image

MagneSafe V5

66

Response Data:

Offset

Field Name

Description

0

Current Key
Serial Number

This eighty-bit field includes the Initial Key Serial Number
in the leftmost 59 bits and a value for the Encryption
Counter in the rightmost 21 bits.

10

Challenge 1

This eight byte challenge may be used later in an
Activation Challenge Reply command shown below, and
to authenticate the reader as mentioned above.

18

Challenge 2

This eight byte challenge may be used later in a
Deactivate Authenticated Mode command shown below.


Result codes:

0x00 Success
0x03 Redundant – the reader is already in this mode
0x05 Delayed – the request is refused due to anti-hacking mode
0x07 Sequence Error – the current Security Level is too low
0x80 Encryption Counter Expired


Example Activate Authenticated Mode Request (Hex):

Cmd Num

Data Len

Data

10

00


Example Activate Authenticated Mode Response (Hex):

Result Code

Data Len

Data

00

1A

FFFF 0123 4567 8000 0003 9845 A48B 7ED3
C294 7987 5FD4 03FA 8543


Activation Challenge Reply Command

Command number:

0x11

Description:

This command is used as the second part of an Activate Authentication
sequence. In this command, the application sends the first 6 bytes of
Challenge 1 (received in response to the Activate Authenticated Mode
command), two bytes of time information, and (optionally) an eight byte
Session ID encrypted with a variant of the current DUKPT PIN
Encryption Key (Key XOR 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C
3C3C).

The time information contains a count of the maximum number of seconds
the reader should remain in the Authenticated Mode. Regardless of the
value of this timer, a user card swipe in the Authenticated Mode ends the
Authenticated Mode. The maximum time allowed is 3600 seconds (one
hour). To get the full hour, use the value 0x0E10. To get the value of 3
minutes, use the value 0x012C. A value of zero forces the reader to stay
in the Authenticated Mode until a card swipe or power down occurs (no
timeout).

If the Session ID information is included and the command is successful,
it will change the Session ID in the reader.

Advertising