KSM ESM -5XYZ REV.C - docs-emea.rs-online.com · Card is to be returned automatically in case the pin can not be fully contacted on IC due to contamination. 1.2.7. KID-2000 Satisfy

DOC. NO. REV. PAGE DATE

C5-307

KSM(ESM) – 5XYZ SERIES

SPECIFICATION D 1 OF 30 2004.04.27

AD-A39 (210mm×297mm) KDE Inc.

KSM(ESM)-5XYZ SERIES MOTORIZED INSERTION STANDARD TYPE MAGNETIC CARD READER & IC CARD READER/WRITER WITH RS-232C INTERFACE

KDE Inc. KDE TOWN, 42-7, Mangwol-Tong, Hanam,Kyungki-Do,Korea TEL : 82-31-790-9300 FAX : 82-31-790-9313

DOC. NO. REV. PAGE DATE

C5-307

KSM(ESM) – 5XYZ SERIES

SPECIFICATION D 2 OF 30 2004.04.27


A P P R O V A L

RESP. DEPT. R & D ORIGINATOR HAN, JAEKEUN

DEPT. Int’l Sales QA Mfg, eng

APPROVED

BY

DEPT. DOC.CONTROL APPROVAL

APPROVAL &

CONFIRMATION

APPROVED

BY

REVISION HISTORY CHECK ISSUED DATE DESCRIPTION TOTAL PAGE

ISSUE REVISION

REVISION REVISION

2002.09.18 2003. 03.14

2004.0427.

- KSM-5XXX SPECIFICATION ISSUE - ADD AN ELECTRONIC SHUTTER - ADD AN EMV - ADD AN SIM CARD - POWER DOWN MODE - ENTRY - MAGNETIC CARD READ ( MAGNETIC CARD DATA REQUEST )

26 29

30 29

DOC. NO. KSM(ESM) – 5XYZ SERIES REV. PAGE DATE

C5-307 SPECIFICATION D 3 OF 30 2004.04.27


1. GENERALS ----------------------------------- 4 2. SYSTEM BLOCK DIAGRAM ---------------------------------- 4 3. SPECIFICATIONS ---------------------------------- 6 4. INTERFACE REQUIREMENTS ---------------------------------- 8

5. COMMUNICATION PROTOCOL SEQUENCE -----------------------------------13 6. COMMUNICATION PROTOCOL DESCRIPTIONS ----------------------------------- 15 7. COMMUNICATION DETAILS ---------------------------------- 17 8. IC CARD SLE 4428 / 4418 / 4442 -----------------------------------21 9. DIMENSIONS ----------------------------------- 27

CONTENTS




1. GENERALS

1.1. Overview This model is a motorized insertion slim type magnetic stripe and IC card reader with RS-232C interface and IFM(Interface Module) that is to decode data on triple (dual, single ) track of magnetic stripe and

*IC card in accordance with ISO 7811/7816. *KID-2000 Supports EMV2000 Level 1

( Please refer to model Information table about each functional option.) * IC CARD is applied to T=0 and T=1 with additional support for selective synchronous IC cards and it uses

SLE4418/4428/4442 1.2. Features

1.2.1. Mechanically designed for robust body structure to meet industrial standard. 1.2.2. Decode data on ISO 1, 2, 3 tracks of magnetic stripe card. 1.2.3. Shutter mechanism with pre-head and sensors is provided.

(1) Closed shutter detection sensor : Confirm the detection of shutter blade's operation (2) Card width sensor : Confirm the width of inserted card as standard

(3) Magnetic stripe detection : A pre-head located at ISO full track position detects magnetic stripe.

1.2.4. When the power is turned on, if a card is inside of KSM(ESM)-5XYZ it will be ejected. 1.2.5. Communication performed by asynchronous or synchronous with interface in IC card

8(16) points of chip-contact pin move down individually and fully contact on chip surface regardless of bend card in accordance with the contact location and transitional contacts

location in ISO 7816. 1.2.6. Card is to be returned automatically in case the pin can not be fully contacted on IC due

to contamination. 1.2.7. KID-2000 Satisfy ISO-7816 (T=0,T=1) 1.2.8. KID-2000 Specification DOC.NO. “C2-307”

2. SYSTEM BLOCK DIAGRAM

IBM PC/XT/AT/PS2 orCompatibles CARD READER/WRITERRS-232-C

IC CARD INTERFACE IC CARD MODULE




2.2 MODEL INFORMATION

R: TTL Interface M: RS-232C Interface

2 : SAM + Capture 4 : 12V With Capture 5 : 12V Without Capture 7 : 24V Without Capture 8 : 24V With Capture 9 : Customized

1: 1Track 2: 2Track 3: 3Track 5: 1,2Track 6: 2,3Track 8: 1,2,3Track

X Y

K: KID-2000 Not Supports EMV E: KID-2000 Supports EMV

0 : Without Shutter 1 : With Mechanical Shutter 2 : With Electronic Shutter 4 : With IC (8pin) + Electronic Shutter 5 : With IC (16pin) + Electronic Shutter 6 : With IC Contact (8pins) 7 : With IC Contact (8pins)&Shutter 8 : With IC Contact (16pin) 9 : With IC Contact (16pins)&Shutter

-M S K 5 Z

*S : Slim type Model

*5: Read Only Model




2.3. RS-232 Connection

SG

TXD

RXD

HOST SG

TXD

RXD

CARDREADER

3. SPECIFICATION 3.1. Card Standard

3.1.1. Magnetic Stripe Card Card Standard ISO 7811 Track ISO 1 Track I (IATA) ISO 2 Track II (ABA) ISO 3Track III (MINTS) Reading Method F2F Card Thickness Plastic : 0.76 + 0.08 mm

3.1.2. ICC Contact Location and dimension (IC Card : ISO 7816 PART 2)

3.1.3. Contact Assignment

C1 Supply voltage(VCC) C5 Ground(GND) C2 Reset(RST) C6 Not used C3 Clock(CLK) C7 Input/output(I/O) C4 RFU C8 RFU




3.2. Environmental Requirement

3.2.1. Ambient Temperature (1) Storage : -20°C ~ 70°C (No functional error to be found in 12 hours after returning to normal environment. )

(2) Operating : 5°C ~ 50°C (No Condensation) 3.2.2. Ambient Relative Humidity

(1) Storage : 0 ~ 95% (No functional error to be found in 12 hours after returning to normal environment. )

(2) Operating : 0 ~ 90% (No Condensation) 3.2.3. Vibration : Amplitude 2 mm within 2G or less,. 10 to 50Hz in X, Y, Z directions for 30 min.

3.2.4. Shock : 30 G, 11 ms (1) No functional error to be found after shock durability test

(2) Direct shock to MSRW, without packing 3.3. Physical Characteristics

3.3.1. Dimensions : See Section 9. Dimension drawing 3.3.2. Weight : Approximately 1,000 g 3.3.3. Power Requirement (1) Input Voltage : 24V DC ± 5% (2) Power Consumption

A. Motor Starting or Reversing B. Card Feeding

: Less than 1.5A (24V DC, 50msec) : Less than 400mA (24V DC)

(3) Ripple 3.3.4. Operating Locus

: Less than 200mVp-p (24V DC) : Less than 50mVp-p ( 5V DC) : Indoor use only

3.4. Operational Characteristics 3.4.1. Card Feeding Speed : 470 mm/sec + 20%( With normal condition card) 3.4.2. Life of a head : Min. 1,000,000passes

(One pass stands for one direction movement in forward and backward ) 3.4.3. Mechanism

(1) Belt Timing :700,000 cycle (2) Mecha(gear):700,000 cycle

3.5. Error Rate Mag. card : Less than 1/200 Times per each track.

Ic card : Less than 1/200 cycles (One cycle : bi-direction movement in forward and backward) 3.6. Jitter Rate

Read : Less than 15% per each track of encoded card 3.7. Warped Cards

This term refers to an evenly warped card having a height from the top of the convex surface to the base of the warped edge.




＊ H = 3.0 mm maximum for card not jamming

2.0 mm maximum for availability to read. 3.7.1. Warped Card Type

54 mm

54 mm

85 mm

85 mm

3.8. Power Down Mode 3.8.1. Definition of Power Down

Supply voltage : 20 VDC or Less Time-out : 200 mS or longer

3.8.2. Operation CARD R/W will finish the job and eject the card depending on the settings of Pd & Wv ( see Section 7.1 for more information ) if the power goes down and a card is inside the CARD R/W)

3.8.3. Recovery CARD R/W needs to be initialized with INITIALIZE command to return to the normal operating mode.

3.8.4. Back-up Power Supply (OPTION) Option 1. Capacitor 60,000 µF ~ 90,000µF (90,000µF~150,000µF required when Wv is set to 31h in INITIALIZE command)

4. INTERFACE REQUIREMENTS

4.1. Physical Constructions 4.1.1. RS-232 Connector.

＊ex) Interface B/D “P/N: 16415006” ☞ CN1 -- MOLEX 5268-05

Interface B/D “P/N: 16415001” ☞ CN3 -- MOLEX 5268-05

H





RS-232-C MSRW Input/Output Function Signal Name CN3

TXD 1 O Transmit Data RXD 2 I Receive Data RTS 3 O Request to Send CTS 4 I Clear to Send SG 5 GND Signal Ground

4.1.2 Power Connector:

＊ex) Interface B/D “P/N: 16415006” ☞ CN6 -- MOLEX 5268-04



Pin No. Signal Name Function

1 24 V +24 VDC 2 GND Ground 3 GND Ground 4 BPC Back-up Power Supply




4.1.3. IC card Zip Connector: CN1 -- 8PIN P=1MM SINGLE SIDE SMD

Pin No. Signal Name Function

1 GND Signal Ground 2 IC-VCC IC card VCC 3 - N/C 4 IC-RST IC card reset 5 IC-SIO IC card I/O 6 IC-CLK IC card clock 7 - N/C 8 - N/C

4.2. Logical Constructions

4.2.1. Interface B/D “P/N: 16415006” ☞ SW1 -- Dip SW : KSD05H

4.2.2. Interface B/D “P/N: 16415001” ☞ SW1 -- Dip SW : KSD08H

Interface B/D “P/N:16425002” ☞ SW1 -- Dip SW : OTAX KHS 08




4.2.3. Transmission Control Specification

(1)Type : Asynchronous, Half duplex. (2)Track Select.

A. Interface B/D “P/N: 16415006” ☞ SW1 – Dip SW : KSD05H SW4 SW5 SW6 Track Select OFF OFF ON ISO- 1 OFF ON OFF ISO- 2 ON OFF OFF ISO- 3 ON ON ON ISO- 1,2,3 OFF ON ON ISO- 1,2 ON ON OFF ISO- 2,3 OFF OFF OFF Not use

B. Interface B/D “P/N: 16415001” ☞ SW1 – KSD08H

Interface B/D “P/N: 16425002” ☞ SW1 – KHS08 SW1 SW2 SW3 Track Select OFF OFF ON ISO- 1 OFF ON OFF ISO- 2 ON OFF OFF ISO- 3 ON ON ON ISO- 1,2,3 OFF ON ON ISO- 1,2 ON ON OFF ISO- 2,3 OFF OFF OFF Not use

(3) Baud Rate : 2400, 4800, 9600 and 19200

A Interface B/D “P/N: 16415006” ☞ SW1 -- Dip SW : KSD05H SW1 SW2 Baud Rate OFF OFF 2400 OFF ON 4800 ON OFF 9600 (default) ON ON 19200

B. Interface B/D “P/N: 16415001” ☞ SW1 – KSD08H

Interface B/D “P/N: 16425002” ☞ SW1 – KHS08 SW4 SW5 Baud Rate OFF OFF 9600 (default) OFF ON 19200 ON OFF 38400




ON ON 57600 (4) Function Select ( SW1 – Dip SW : KSD08H )

A. Interface B/D “P/N : 16415001” ☞ SW1 – KSD08H

B. Interface B/D “P/N : 16425002” ☞ SW1 – KHS08 SW6 SW7 SW8 Function Select OFF ON OFF With EMV Function OFF OFF ON Without EMV Function ( Default ) ON OFF OFF Program Download ( Option )

(5) Data Length : 8 bits, None parity (6) Start bit : 1 bit (7) Stop bit : 1 bit (8) Character Code : ASCII

4.2.4. Transmission Control Method Command / Response method : CARD READER executes a particular operation according IC CARD R/W executes a particular operation according to the command from Host, and reports the results of the execution to Host(using EMV).

4.2.5. Transmission Control Characters STX (02h) Indicate start of text. ETX (03h) Indicate end of text. ENQ (05h) Request to send response. ACK (06h) Send positive response. NAK (15h) Send negative response. DLEEOT (10h04h)

Clear the line and reset MSR

CR (0Dh) Carriage return. 4.2.6. Text Configuration

(1) Command / Response

STX

BCC

ETX

CR

BCC Range

(2) Control Characters

CR

CR

CR

CR

ACK

NAK

ENQ

DLE

EOT

Note : A. BCC & CR are omissible according to Fm in INITIALIZE command. B. Gap between characters is less than 20 msec.

C. BCC does not include STX and calculated by EXCLUSIVE OR in BCC range.




4.2.7. Data Gap During receiving mode, if 20 msec time-out occurs, CARD Reader assumes that receiving 1 block data is completed.

4.2.8. Cancel of Command

Whenever receiving ' DLE EOT ( 10h 04h ) ' characters, CARD Reader stops the current execution right away, sends ' DLE EOT ' and waits for the next command. If ' DLE EOT ' is received during the transmission of response, CARD R/W returns to command receive

mode after the completion of the transmission. If ' DLE EOT ' is received during the processing of ENTRY, RETRIEVE, or EJECT command, the card is ejected.

5. COMMUNICATION PROTOCOL SEQUENCE

5.1. Regular Operations 5.1.1. Commands

Command ENQHOST

ACK Execution ResponseCARD READER

5.1.2. Cancel of Command ( DLE EOT )

5.2. Irregular Operations ( Communications Errors )

5.2.1. Commands

CommandHOST


Command ENQ

20 msec. Time-out




CommandHOST


Command ENQ

NAK

Error

CommandHOST


Command ENQ

NAK

Error

CommandHOST ENQ

Execution Response

ENQ

ACK

Error

ACK

Command

CARD READER

CommandHOST ENQ

Execution Response

ENQ

ACK Response

Error

CARD READER

5.2.2. Cancel of command CommandHOST

Error

DLE EOT DLE EOT

DLE EOTACKCARD READER




CommandHOST

Error

DLE EOT DLE EOT

DLE EOTDLE EOTACKCARD READER

6. COMMUNICATION PROTOCOL DESCRIPTIONS

6.1. Format Details 6.1.1. Command Format

'C( 43h )' cm pm Data* *Only for Initialization commands ( cm = 30h ),and IC card direct ( cm = 39h ) See Section 7. for more information. 6.1.2. Positive Response Format

'P( 50h )' cm pm st1* st0* Data** * Status Code Byte. See Section 6.4 for the status code table.

See Section 7. for more information. 6.1.3. Negative Response Format

'N( 4Eh )' cm pm e1* e0* * Error Code Byte. See Section 6.3 for the error code table.

Note: If e1 = 0 ( 30h ) and e0 = 1 ( 31h ), '01' is the status code and it also applied to the error codes. 6.2. Command Parameter Code List

Command cm Pm Description* INITIALIZE 30h 30h Initialize CARD Reader and IC CARD R/W and then eject the card if a

card is inside CARD Reader 31h Initialize CARD Reader and IC CARD R/W and then capture the card if

a card is inside CARD Reader 32h Initialize CARD Reader and IC CARD R/W and then retain the card if a

card is inside CARD Reader STATUS 31h 30h Report the presence and the position of a card REQUEST 31h Report the presence and the position of a card in detail ENTRY 32h 30h Accept the magnetic card and reads the magnetic card 32h Accept the IC card 34h Accept the RF card (Optional) EJECT 33h 30h Eject the card to the front 31h Eject ( Capture ) the card to the back MAGNETIC CARD 36h 31h Read ISO 1 and transmit data DATA REQUEST 32h Read ISO 2 and transmit data 33h Read ISO 3 and transmit data




35h Read all tracks and transmit data 36h Clear the read buffer memory IC POWER 38h 30h IC power off 31h IC power on 32h IC ( SLE 4418 & 4428 & 4442 ) power on 33h IC ( SLE 4418 & 4428 & 4442 ) power off 34h SIM power off *( DATA : 31h - SIM 1, 32h – SIM 2, 33h – SIM 3, 34h –

SIM 4 ) DEFAULT SIM 1 35h SIM power on *( DATA : 31h - SIM 1, 32h – SIM 2, 33h – SIM 3, 34h –

SIM 4 ) DEFAULT SIM 1 IC CARD DIRECT 39h 30h Data transmit to and from the IC card 31h Data transmit to and from the SIM card on *( DATA : 31h - SIM 1, 32h –

SIM 2, 33h – SIM 3, 34h – SIM 4 ) DEFAULT SIM 1 The remains will be Real data

GET VERSION 3Ch 30h Get version 3Ah 30h Accept non-encoded cards ( e.g., cleaning card ) ENABLE/DISABLE

(SHUTTER) 31h Disable card entry 32h Enable card entry ( Default ) IC CARD DIRECT 4Ah 31h Read IC card and transmit data without protect FOR SLE4418 32h Read IC card and transmit data with protect / SLE4428 33h Write IC card without protect (4418) 34h Write IC card with protect (4418) 35h Full write same character IC card without protect (4418) 36h PSC code verify *(use only SLE4428) 37h PSC modify *(use only SLE4428) 38h Write IC card without protect (4428) 39h Write IC card with protect (4428) 3Ah Full write same character IC card without protect (4428) IC CARD DIRECT 4Bh 31h Read main memory and transmit data FOR SLE4442 32h Read protect memory and transmit data 33h Write without protect 34h Write with protect 35h Full write same character without protect 36h PSC compare 37h PSC modify 38h Read security memory

*See Section 7. for more information 6.3. Error Code List

Code Description '00' Command unidentified '01' Parameter incorrect '02' Command cannot be executed ‘03’ Data Format error '04' Command data error '05' Time error ( For entry ) '06' Card error ( Irregular ) '10' Card jammed ‘12’ IC card not exist




‘13’ IC card no ATR (ATR error) '16' Card position moved '17' Card jammed on retrieve '18' Card jammed on IC card contact '19' IC card communication error ‘20’ Read error '21' Read error - Pre-amble error '22' Read error - Post-amble error '23' Read error - LRC error '24' Read error - Parity error '25' Read error - Blank track '27' Card entry disabled ‘28’ Motor error ‘29’ IC & SIM direct error ‘30’ IC card power on error ‘33’ SIM card power on error ‘34’ SIM card communication error ‘35’ External ram test error ‘36’ EMV module test error ‘37’ EMV module communication error ‘38’ EMV module PTS confirm error ‘39’ Power down error ‘40’ 4442 memory card psc modify error ‘41’ 4442 memory card psc read error ‘42’ 4442 memory card read error ‘43’ 4442 memory card write error ‘44’ 4442 memory card psc not execute ‘45’ 4418/28 memory card read error ‘46’ 4418/28 memory card write error ‘47’ 4428 memory card psc not execute

6.4. Status Code List

Code Description ‘00’ No Card Detected ( including gate ) ‘01’ Card at gate ‘02’ Card inside CARD Reader ( transport )

7. COMMUNICATION DETAILS

7.1. INITIALIZE ( cm = 30h ) After power on, CARD Reader needs to be initialized with INITIALIZE command in order to receive commands from HOST, execute them, and send the results. INITIALIZE command

initializes the CARD Reader with the parameters provided and sets the CARD Reader to the default settings.

7.1.1. Command 'C' 30h Pm 33h* 32h* 34h* 30h* Fm Pd Wv Sh Ds Ty Cp

* Mandatory sequence for future use. 7.1.2. Positive Response

'P' 30h pm st1 st0 Type code*




* Only when Ty is set to 31h. 7.1.3. Negative Response

'N' 30h pm e1 e0 pm: Specifies the ejection of a card inside CARD Reader( Initialization only )

30h Eject the card to front 31h Eject ( capture ) the card to back 32h Retain the card ( in transport )

Fm: Specifies the command format. CR BCC

30h No No 31h Yes No 32h No Yes 33h Yes Yes

Pd: Specifies the card-eject at power down.

30h CARD R/W ejects the card. ( Default ) 32h CARD R/W does not eject the card in any case.

Wv: No function Sh: Specifies the shutter open/close test when CARD Reader is initialized.

31h Shutter open/close not to be tested. (default ‘0’) Ds: No function

Ty: Specifies the response format for type recognizing codes. 30h No type recognizing code in the response. 31h Type recognizing codes ( 5 bytes ) in the response.

'P' 30h pm st1 st0 I* II* III* IC** 32h

* I for ISO Track 1, II for ISO Track 2, and III for ISO Track 3 * Type Recognizing Code

'0' N/A '2' Read Only

** Support IC CARD '0' N/A '1' IC card able

Cp: No function 30h: Default

7.2. STATUS REQUEST ( cm = 31h ) STATUS REQUEST command is sent to know if a card is inside

CARD Reader the position of it. CARD Reader always sends two byte status report( st1 & st0 ) and one or two byte status

report ( se2, se1 & se0 ) is added depending on pm. 7.2.1. Command

'C' 31h pm 7.2.2. Positive Response

'P' 31h pm st1 st0 se1 se0 (With shutter)

'P' 31h pm st1 st0 se1 (Without shutter)

pm: Specifies the response format ( se0 or se1)




30h se not included 31h se included

se0,se1 exist if only pm = 31h. Details of se byte:

se0 : 0 1 0 0 0 b6 b5 b4 se1 : 0 1 0 b7 0 b2 b1 b0

b0 PH1 1: Card detected 0: Card not detected b1 PH2 1: Card detected 0: Card not detected b2 PH3 1: Card detected 0: Card not detected b4 SW1 1: Shutter open. 0: Shutter is closed (Shutter Type) b5 SW2 1: Card detected 0: Card not detected (Shutter Type) b6 PHD 1: Magnetic flux detected 0: Magnetic flux not detected

(Shutter Type) b7 MSW 1: IC card sensing 0: IC card no detected

＊b0~b2 : Mechanic Shutter Type

＊b4~b6 : Electronic Shutter Type 7.3. ENTRY ( cm = 32h )

ENTRY command accept the IC card or magnetic card depending on pm. MAGNETIC CARD ENTRY command accepts the magnetic card and reads the magnetic card that meets the conditions set by DISABLE/ENABLE command. By default, CARD Reader checks the width of the card and the magnetic flux on ISO Track II and III. If card staying on shutter and no inserted more response is time error (code "05"). 7.3.1. Command


'P' 32h pm st1 st0 7.3.3. Negative Response

'N' 32h pm e1 e0 pm: Specifies the entry card

30h Magnetic card 32h IC card 34h RF card

7.4. EJECT ( cm = 33h ) EJECT command ejects the card to front or to back depending on pm. When a card is ejected to front, its one end remains in between rollers so that CARD Reader could retrieve it unless the

card is removed. 7.4.1. Command


'P' 33h pm st1 st0 7.4.3. Negative Response

'N' 33h pm e1 e0 pm: Specifies the eject direction

30h To front 31h To back ( Capture )




7.5. MAGNETIC CARD DATA REQUEST ( cm = 36h )

REQUEST command sends the data to HOST. STX, ETX, and LRC will not be sent to HOST. Should a read error occur, the host will receive some error response from card reader. In case of a single track read, if a read error happens, a negative response will be sent to HOST, but in case of all track read, a positive response will be sent to HOST with the error code in the place of corresponding track data. 7.5.1. Command

'C' 36h pm 7.5.2. Positive Response for one track read for all track read

'P' 36h pm st1 st0 Data 1 00h Data 2 00h Data 3 Each data of between track and track is distinguish as ‘00’ 7.5.3. Negative Response

'N' 36h pm e1 e0 pm: Specifies the track to read.

31h Read ISO 1 32h Read ISO 2 33h Read ISO 3 35h Read All Track 36h Clear the read buffer memory

Notes : If it is not supported track for each model response is code "02" ex) KSM-5751 ( Usable ISO 1, 2 / Not supported ISO 3 ) pm "33h" N6302 ( Negative response : Command cannot be executed ) Error Code for All Track Read

Code Description E1h Pre-amble error E2h Post-amble error E3h LRC error E4h Parity error E5h Blank track

7.6. IC & SIM POWER ( cm = 38h ) IC & SIM POWER command is for power on/off to communicate with the IC & SIM card. 7.6.1. Command 'C' 38h pm Data*

* Only when pm is set to 34h, 35h (SIM number : 31h – SIM-1, 32h – SIM-2, 33h – SIM-3, 34h – SIM-4) 7.6.2. Positive Response

'P' 38h pm st1 st0 Data* * Hexa value ( 2 X n bytes ) 7.6.3. Negative Response

'N' 38h pm e1 e0 pm: Specifies the IC & SIM power on/off

30h IC power off 31h IC power on 32h SLE card power on 33h SLE card power off 34h SIM card power off 35h SIM card power on

7.7. IC & SIM CARD DIRECT ( cm = 39h )




IC & SIM CARD DIRECT command is for communication with the IC & SIM card, and it is available after executing IC POWER ON.

7.7.1. Command 'C' 39h Pm SN** Data*

* Hexa value ( 2 X n bytes ) ** Only when pm is set to 31h. ( SIM card number 1 byte ) 7.7.2. Positive Response

'P' 39h Pm st1 st1 Data* * Hexa value ( 2 X n bytes )

7.7.3. Negative Response ‘N’ 39h Pm e1 e0

pm: specify the commands 30h Communicate with IC Card 31h Communicate with SIM Card

7.8. GET VERSION ( cm = 3Ch ) 7.8.1. Command

'C' 3Ch 30h 7.8.2. Positive Response

'P' 3Ch 30h st1 st0 Data 7.8.3. Negative Response

'N' 3Ch 30h e1 e0 7.9. ENABLE / DISABLE ( cm = 3Ah )

ENABLE/DISABLE command decides what to check on ENTRY command and controls the gate. 7.9.1. Command

'C' 3Ah pm 7.9.2. Positive Response

'P' 3Ah pm st1 st0 7.9.3. Negative Response

'N' 3Ah pm e1 e0 pm: Enable or disable the ENTRY .

30h Accept non-encoded card ( for cleaning card ) 31h Disable card ENTRY 32h Enable card ENTRY ( Default )

8. IC CARD (SLE SMART_CARD)

8.1. IC CARD DIRECT FOR SLE4418/SLE4428( cm = 4Ah ) IC CARD DIRECT FOR SLE4418/SLE4428 command is for communication with the IC card SLE4418/SLE4428), and it is available after executing IC POWER ON. SLE4418 card has same function with SLE4428 just except not using of PSC * sa : start address ( 3bytes : Hexa value : 000h~ 3FFh ) * len : data length ( 3bytes : Hexa value : sa + len <= 3FFh ) 8.1.1. Read IC card without protect ( pm = 31h )

This command is to read data in 2 bytes of hexa value from start address for length the maximum length to read at once is 256 ( 100h ) a. Command

'C' 4Ah 31h sa len*




* len : Max. 100h b. Positive Response

'P' 4Ah 31h st1 st0 Data* * Hexa value : 2 x len bytes ( If sa+len > 3FFh, the unit reads by 3FFh )

c. Negative Response 'N' 4Ah 31h e1 e0

8.1.2. Read IC card with protect ( pm = 32h ) This command is to read data in 3 bytes ( 1byte to check protection existence and 2 bytes in hexa value ) The Maximum length is 256 ( 100h ) from start address for length a. Command

'C' 4Ah 32h sa len* * len : Max. 100h b. Positive Response

'P' 4Ah 32h st1 st0 Data* * Hexa value : 3 x len bytes ( If sa+len > 3FFh, the unit reads by 3FFh ) * data

protect check 2Ah ( * ) : protect

20h (space) : not protect

data ( ex. 46h 31h = F1 )

1byte 2byte

c. Negative Response

'N' 4Ah 32h e1 e0 8.1.3. Write IC card without protect ( pm = 33h, 38h )

This command is to write and verify 2 byte data in hexa value from the start to the end are by one. and the maximum data length which can write at once is 100.

a. Command 'C' 4Ah pm sa Data*

* Data length : Max. 2 x 100 bytes pm : Write SLE4418 & SLE4428 IC card without protect.

33h Write 4418 IC card without protect 38h Write 4428 IC card without protect b. Positive Response

'P' 4Ah pm st1 st0 c. Negative Response

'N' 4Ah pm e1 e0 Data* In case of verify after write error ( e1=39h , e0=30h ), error address, write data, read data (hexa value : 7 bytes)

8.1.4. Write IC card with protect ( pm = 34h, 39h ) This command is same as ' write IC card without protect ' except one point that the unit writes data the protection to prevent over- writing a. Command

'C' 4Ah Pm sa Data* * Data length : Max. 2 x 100 bytes

pm : Write SLE4418 & SLE4428 IC card with protect.




34h Write 4418 IC card with protect 39h Write 4428 IC card with protect b. Positive Response

'P' 4Ah Pm st1 st0 c. Negative Response

'N' 4Ah Pm e1 e0 Data* In case of verify after write error ( e1=39h , e0=30h ) , error address, write data, read data (hexa alue : 7 bytes)

8.1.5. Full write same character IC card without protect ( pm = 35h, 3Ah ) This command is to write same data in 2-byte hexa value from start address and the for length Maximum length to write at once is 100 ( 06Eh ) In case of verify after write error ( e1=39h, e0=30h ), the unit stops writing and shows error address, data to write and read data to verify a. Command

'C' 4Ah pm sa len* Data** * len : Max. 06Eh ** Hexa value : 2 bytes

pm : Full write same character SLE4418 & SLE4428 IC card

35h Full write same character 4418 IC card without protect 3Ah Full write same character 4428 IC card without protect b. Positive Response

'P' 4Ah pm st1 st0 c. Negative Response

'N' 4Ah pm e1 e0 Data* In case of verify after write error ( e1=39h , e0=30h ) , error address, write data, read data (hexa value : 7 bytes)

8.1.6. PSC code verify ( pm = 36h ) : use only SLE4428 This command should be done before writing data If the input PSC code is different from the original PSC code, The value at IC card address 3FDh will be down counted in bit and, if the value of 3FDh be come ' 0 ' after 8 times of miss input the IC card will not be valid any move, Therefore error count should be checked when this command is performed.

1 1 1 1 1 1 1 0

1 1 1 1 1 1 0 0

1'st error

2'nd error

8'th error

Do

Do

- Address : 3FDh -

D7

D7

0 0 0 0 0 0 0 0DoD7

Zero countLock

a. Command

'C' 4Ah 36h Data* * PSC code : hexa value 2 x 2 bytes

b. Positive Response 'P' 4Ah 36h st1 st0 Data*

* Address 3FDh : hexa value 2 bytes c. Negative Response




'N' 4Ah 36h e1 e0 If you want to change PSC code again after it is verified good by this command, you can use

“Write IC card without protect " command and change it in 3FEh, 3FFH, area of SLE 4428 PSC code.

ex) command to change current PSC to "1234" ( sa = 3FEh , data = ' 1234 ' ) 'C' 4Ah 33h 33h 46h 45h 31h 32h 33h 34h

8.1.7. PSC code modify ( pm = 37h ) : use only SLE4428

This is the command to modify PSC after executing PSC CODE VERIFY command. PSC CODE VERIFY must be executed after PSC modification is done.

a. Command 'C' 4Ah 37h Data*

* PSC : hexa value 2 x 2 bytes b. Positive Response

'P' 4Ah 37h st1 st0 c. Negative Response

'N' 4Ah 37h e1 e0

8.2. IC CARD DIRECT FOR SLE4442 ( cm = 4Bh ) IC CARD DIRECT FOR SLE4442 command is for communication with the IC card (SLE4442), and it is available after executing IC POWER ON. To read or write data on an IC card in hexa value, the start address is necessary which is available for 00h ~ max FFh As " len is the length of data to read or write from start address, start address data length " should not be more than FFh. 8.2.1. Read main memory ( pm = 31h ) This command is to read main memory (20h~FFh) data in 2 bytes of hexa value a. Command

'C' 4Bh 31h b. Positive Response

'P' 4Bh 31h st1 st0 Data* *Hexa value : 2 x 224 bytes c. Negative Response

'N' 4Bh 31h e1 e0 8.2.2. Read protect memory ( pm = 32h )

This command is to read protect memory (00h~1Fh) data in 3 bytes of hexa value. a. Command


'P' 4Bh 32h st1 st0 Data* * Hexa value : 3 x 32 bytes

protect check 2Ah ( * ) : protect20h (space) : not protect

data ( ex. 46h 31h = F1 ) 1byte 2byte* data

c. Negative Response

'N' 4Bh 32h e1 e0 8.2.3. Write without protect ( pm = 33h )

This command is to write unprotected memory (00h~FFh) .




a. Command 'C' 4Bh 33h sa* Data*

* sa : start address ( 2bytes : Hexa value : 00h~FFh ) * Data : Hexa value ( length of Data + sa <= FFh )

b. Positive Response 'P' 4Bh 33h st1 st0

c. Negative Response 'N' 4Bh 33h e1 e0

8.2.4. Write with protect ( pm = 34h ) This command is to write with protection to prevent over-writing . This command can write on the area where the new data and exist data are same among protected memories.

a. Command 'C' 4Bh 34h sa* Data*

* sa : start address ( 2bytes : Hexa value : 00h~1Fh ) * Data : Hexa value ( length of Data + sa <= 20h )

b. Positive Response 'P' 4Bh 34h st1 st0


8.2.5. Full write same character without protect ( pm = 35h ) This command is to write unprotected memory (00h~FFh) with same value. a. Command

'C' 4Bh 35h sa* len* Data* * sa : start address ( 2bytes : Hexa value : 00h~FFh ) * len : length of Data ( sa + len <= 100h ) * Data : Hexa value 2 bytes b. Positive Response

'P' 4Bh 35h st1 st0 c. Negative Response

'N' 4Bh 35h e1 e0 8.2.6. PSC compare ( pm = 36h )

This command should be done before writing data If the input PSC code is different from the original PSC code, the value at 00h of security memory will be down counted in bit and, if the value of 00h be come ' 0 ' after 3 times of mis input the IC card will not be valid any move , Therefore error count should be checked when this command is performed. a. Command

'C' 4Bh 36h Data* * PSC : hexa value 2 x 3 bytes b. Positive Response

'P' 4Bh 36h st1 st0 Data* * Security memory Address 00h : hexa value 2 bytes





0 0 0 0 0 1 1 0

0 0 0 0 0 1 0 0

1'st error

2'nd error

3'rd error

Do

Do

- Security memory : 00h -

D7

D7

0 0 0 0 0 0 0 0DoD7

Zero countLock

0 0 0 0 0 1 1 1 no error

DoD7

8.2.7. PSC modify ( pm = 37h ) This is the command to modify PSC after executing PSC COMPARE command. PSC COMPARE must be executed after PSC modification is done. a. Command 'C' 4Bh 37h Data*

* PSC : hexa value 2 x 3 bytes b. Positive Response

'P' 4Bh 37h st1 st0 c. Negative Response

'N' 4Bh 37h e1 e0 8.2.8. Read security memory ( pm = 38h )

This is the command to read security memory where PSC error count and PSC are existed. a. Command


'P' 4Bh 38h st1 st0 Data* * PSC error count + PSC : hexa value 2 x 4 bytes ( PSC area is “00000000” before PSC compare command is executed,

the data is "FFFFFFFF" if not SLE4442.) c. Negative Response

'N' 4Bh 38h e1 e0




9. DIMENSIONS

9.2. WITH ELECTRONICAL SHUTTER & WITH CAPTURE MODEL (KSM-5XXZ,ESM-5XXX SERIES)







9.3 WITH MACHANICAL SHUTTER & WITH CAPTURE MODEL (KSR-5XXX SERIES)




9.4. WITH ELECTRONIC SHUTTER & WITH CAPTURE MODEL (ESM-52XX SERIES)

Documents

KSM ESM -5XYZ REV.C - docs-emea.rs-online.com · Card is to be returned automatically in case the pin can not be fully contacted on IC due to contamination. 1.2.7. KID-2000 Satisfy