A card without contact via OmniKey, how to get a "UID"?

Question

I am trying to read information from a smart card using a contactless card OmniKey 5321 reader.

Edit : added reward.

I am writing C # 3 in .NET 3.5, so this is a Windows application.

The card has some kind of information printed on it, which I would suggest that it is somehow present in the card data (there is a photo of the card and the reader here.)

The following information is printed on the card:

 1 * 00447 21091328-32

When using the Diagnostics application that comes with the OmniKey card reader, I get the following information:

 Smart Card Name: iCLASS 16KS UID: EE 74 0E 00 FB FF 12 E0
 ATR: 3B 8F 80 01 80 4F 0C A0 00 00 03 06 0A 00 1A 00 00 00 00 78
 Protocol: ISO 15693 (Part 2)

Now, here are some conversions that I reviewed:

• 447 decimal = 1BF hexadecimal (not found)
• 447 octal = 295 decimal (not found as encoding of type BCD)
• 447 octal = 127 hex (not found)
• 447 hexadecimal not found.

Here are my questions:

• Is the UID a unique number I can rely on? I don’t care that number 447, all I need to know is that the information I select from this card uniquely identifies it later, so that I can associate it with the card holder.
• How will I read the UID number? Using WINSCARD.DLL on Windows, I see that I get ATR data, every single byte, but the UID does not seem to be present in this part.

Here is a photo if it gives you any information.

Answer 1

You can rely on the UID, but in your case it is truncated:

UID:EE 74 0E 00 FB FF 12 E0 

Uid usually have a length of 16 bytes.

You can read this Unique Identifier (UID): all ISO-compatible smart cards are equipped with a UID (VIN affinity for a vehicle). For In order to ensure compatibility, UID cards are open and readable by all compatible readers. Since this unique number is not protected by keys, reading the UID of a smart card is comparable to reading a proximity card, magnetic stripe card, or other technology using open, unprotected numbers.

http://www.xceedid.com/pdf/XC5937_Smart_whitepaper.pdf

Answer 2

Recently, I spent too much time looking for a complete example of how to get ATR and proximity OMNIKEY ...

Now that my code works for me, I would like to share it so that others can take advantage.

The best code I found was from SpringCard. (Thanks!)

Other examples I found were time-consuming and misleading, and did not work because DllImport was wrong ...

 using System; using System.Collections.Generic; using System.Text; using System.Threading; using System.Runtime.InteropServices; namespace Test { public delegate void VoidDelegate(); public delegate void CardPresented(string reader, byte[] cardData); public class ReaderList : IDisposable, IEnumerable<string> { public ReaderList() { } public void Dispose() { StopThread(); } private Thread thread; private void StartThread() { if (thread != null) StopThread(); thread = new Thread(Run); thread.IsBackground = true; bStopThread = false; thread.Start(); } private void StopThread() { if (thread != null) { bStopThread = true; Thread.Sleep(50); } if (thread != null) thread.Abort(); if (thread != null) thread.Join(); thread = null; } private List<string> readerNames = new List<string>(); private Dictionary<string, string> lastCardFound = new Dictionary<string, string>(); public int ReaderCount { get { return readerNames.Count; } } public void Refresh() { if (thread == null) StartThread(); } public event VoidDelegate ListChanged; public event CardPresented CardPresented; private bool bStopThread = true; private void Run() { IntPtr hContext = IntPtr.Zero; try { uint result = SCARD.EstablishContext(SCARD.SCOPE_SYSTEM, IntPtr.Zero, IntPtr.Zero, ref hContext); if (result != SCARD.S_SUCCESS) { thread = null; return; } uint notification_state = SCARD.STATE_UNAWARE; while (!bStopThread) // loop 1 - build list, then iterate { SCARD.ReaderState[] states = new SCARD.ReaderState[ReaderCount + 1]; states[0] = new SCARD.ReaderState(@"\\?PNP?\NOTIFICATION"); states[0].dwCurrentState = notification_state; int iState = 0; if (readerNames != null) foreach (string s in readerNames) { iState++; states[iState] = new SCARD.ReaderState(s); states[iState].dwCurrentState = SCARD.STATE_UNAWARE; } while (!bStopThread) // loop 2 - iterate over list built above { result = SCARD.GetStatusChange(hContext, 250, states, (uint)states.Length); if (result == SCARD.E_TIMEOUT) continue; if (result != SCARD.S_SUCCESS) break; bool bReaderListChanged = false; for (int i = 0; i < states.Length; i++) if ((states[i].dwEventState & SCARD.STATE_CHANGED) != 0) if (i == 0) { // reader added or removed notification_state = states[0].dwEventState; // we want to replace the member in one step, rather than modifying it... List<string> tmp = GetReaderList(hContext, SCARD.GROUP_ALL_READERS); if (tmp == null) readerNames.Clear(); else readerNames = tmp; if (ListChanged != null) ListChanged(); bReaderListChanged = true; } else { // card added or removed states[i].dwCurrentState = states[i].dwEventState; if ((states[i].dwEventState & SCARD.STATE_PRESENT) != 0) { byte[] cardData = new byte[states[i].cbATR]; for (int j=0; j<cardData.Length; j++) cardData[j] = states[i].rgbATR[j]; string thisCard = SCARD.ToHex(cardData, ""); string lastCard; lastCardFound.TryGetValue(states[i].szReader, out lastCard); if (thisCard != lastCard) { lastCardFound[states[i].szReader] = thisCard; if (CardPresented != null) CardPresented(states[i].szReader, cardData); } } else lastCardFound[states[i].szReader] = ""; } if (bReaderListChanged) break; // break out of loop 2, and re-build our 'states' list } // end loop 2 } // end loop 1 } catch (Exception ex) { //TODO: error logging } finally { if (hContext != IntPtr.Zero) SCARD.ReleaseContext(hContext); thread = null; } } private List<string> GetReaderList(IntPtr hContext, string sGroup) { uint nStringLength = 0; uint result = SCARD.ListReaders(hContext, sGroup, null, ref nStringLength); if (result != SCARD.S_SUCCESS) return null; string sReaders = new string(' ', (int)nStringLength); result = SCARD.ListReaders(hContext, sGroup, sReaders, ref nStringLength); if (result != SCARD.S_SUCCESS) return null; List<string> list = new List<string> (sReaders.Split('\0')); for (int i = 0; i < list.Count; ) if (list[i].Trim().Length > 0) i++; else list.RemoveAt(i); return list; } public IEnumerator<string> GetEnumerator() { return readerNames.GetEnumerator(); } System.Collections.IEnumerator System.Collections.IEnumerable.GetEnumerator() { return readerNames.GetEnumerator(); } } public class SCARD { [DllImport("WinScard.dll", EntryPoint = "SCardEstablishContext")] public static extern uint EstablishContext( uint dwScope, IntPtr nNotUsed1, IntPtr nNotUsed2, ref IntPtr phContext); [DllImport("WinScard.dll", EntryPoint = "SCardReleaseContext")] public static extern uint ReleaseContext( IntPtr hContext); [DllImport("winscard.dll", EntryPoint = "SCardGetStatusChangeW", CharSet = CharSet.Unicode)] public static extern uint GetStatusChange( IntPtr hContext, uint dwTimeout, [In, Out, MarshalAs(UnmanagedType.LPArray, SizeParamIndex = 3)] SCARD.ReaderState[] rgReaderState, uint cReaders); [DllImport("winscard.dll", EntryPoint = "SCardListReadersW", CharSet = CharSet.Unicode)] public static extern uint ListReaders( IntPtr hContext, string groups, string readers, ref uint size); #region Error codes public const uint S_SUCCESS = 0x00000000; public const uint F_INTERNAL_ERROR = 0x80100001; public const uint E_CANCELLED = 0x80100002; public const uint E_INVALID_HANDLE = 0x80100003; public const uint E_INVALID_PARAMETER = 0x80100004; public const uint E_INVALID_TARGET = 0x80100005; public const uint E_NO_MEMORY = 0x80100006; public const uint F_WAITED_TOO_LONG = 0x80100007; public const uint E_INSUFFICIENT_BUFFER = 0x80100008; public const uint E_UNKNOWN_READER = 0x80100009; public const uint E_TIMEOUT = 0x8010000A; public const uint E_SHARING_VIOLATION = 0x8010000B; public const uint E_NO_SMARTCARD = 0x8010000C; public const uint E_UNKNOWN_CARD = 0x8010000D; public const uint E_CANT_DISPOSE = 0x8010000E; public const uint E_PROTO_MISMATCH = 0x8010000F; public const uint E_NOT_READY = 0x80100010; public const uint E_INVALID_VALUE = 0x80100011; public const uint E_SYSTEM_CANCELLED = 0x80100012; public const uint F_COMM_ERROR = 0x80100013; public const uint F_UNKNOWN_ERROR = 0x80100014; public const uint E_INVALID_ATR = 0x80100015; public const uint E_NOT_TRANSACTED = 0x80100016; public const uint E_READER_UNAVAILABLE = 0x80100017; public const uint P_SHUTDOWN = 0x80100018; public const uint E_PCI_TOO_SMALL = 0x80100019; public const uint E_READER_UNSUPPORTED = 0x8010001A; public const uint E_DUPLICATE_READER = 0x8010001B; public const uint E_CARD_UNSUPPORTED = 0x8010001C; public const uint E_NO_SERVICE = 0x8010001D; public const uint E_SERVICE_STOPPED = 0x8010001E; public const uint E_UNEXPECTED = 0x8010001F; public const uint E_ICC_INSTALLATION = 0x80100020; public const uint E_ICC_CREATEORDER = 0x80100021; public const uint E_UNSUPPORTED_FEATURE = 0x80100022; public const uint E_DIR_NOT_FOUND = 0x80100023; public const uint E_FILE_NOT_FOUND = 0x80100024; public const uint E_NO_DIR = 0x80100025; public const uint E_NO_FILE = 0x80100026; public const uint E_NO_ACCESS = 0x80100027; public const uint E_WRITE_TOO_MANY = 0x80100028; public const uint E_BAD_SEEK = 0x80100029; public const uint E_INVALID_CHV = 0x8010002A; public const uint E_UNKNOWN_RES_MNG = 0x8010002B; public const uint E_NO_SUCH_CERTIFICATE = 0x8010002C; public const uint E_CERTIFICATE_UNAVAILABLE = 0x8010002D; public const uint E_NO_READERS_AVAILABLE = 0x8010002E; public const uint E_COMM_DATA_LOST = 0x8010002F; public const uint E_NO_KEY_CONTAINER = 0x80100030; public const uint W_UNSUPPORTED_CARD = 0x80100065; public const uint W_UNRESPONSIVE_CARD = 0x80100066; public const uint W_UNPOWERED_CARD = 0x80100067; public const uint W_RESET_CARD = 0x80100068; public const uint W_REMOVED_CARD = 0x80100069; public const uint W_SECURITY_VIOLATION = 0x8010006A; public const uint W_WRONG_CHV = 0x8010006B; public const uint W_CHV_BLOCKED = 0x8010006C; public const uint W_EOF = 0x8010006D; public const uint W_CANCELLED_BY_USER = 0x8010006E; public const uint W_CARD_NOT_AUTHENTICATED = 0x8010006F; #endregion public const uint SCOPE_USER = 0; public const uint SCOPE_TERMINAL = 1; public const uint SCOPE_SYSTEM = 2; public const string GROUP_ALL_READERS = "SCard$AllReaders\0\0"; public const string GROUP_DEFAULT_READERS = "SCard$DefaultReaders\0\0"; public const string GROUP_LOCAL_READERS = "SCard$LocalReaders\0\0"; public const string GROUP_SYSTEM_READERS = "SCard$SystemReaders\0\0"; public const uint STATE_UNAWARE = 0x00000000; public const uint STATE_IGNORE = 0x00000001; public const uint STATE_CHANGED = 0x00000002; public const uint STATE_UNKNOWN = 0x00000004; public const uint STATE_UNAVAILABLE = 0x00000008; public const uint STATE_EMPTY = 0x00000010; public const uint STATE_PRESENT = 0x00000020; public const uint STATE_ATRMATCH = 0x00000040; public const uint STATE_EXCLUSIVE = 0x00000080; public const uint STATE_INUSE = 0x00000100; public const uint STATE_MUTE = 0x00000200; public const uint STATE_UNPOWERED = 0x00000400; [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] public struct ReaderState { public ReaderState(string sName) { szReader = sName; pvUserData = IntPtr.Zero; dwCurrentState = 0; dwEventState = 0; cbATR = 0; rgbATR = null; } internal string szReader; internal IntPtr pvUserData; internal uint dwCurrentState; internal uint dwEventState; internal uint cbATR; // count of bytes in rgbATR [MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x24, ArraySubType = UnmanagedType.U1)] internal byte[] rgbATR; } public static string ToHex(byte[] ab, string sDelim) { if (ab == null) return "<NULL>"; return ToHex(ab, 0, ab.Length, sDelim); } public static string ToHex(byte[] ab, int offset, int len, string sDelim) { if (ab == null) return "<NULL>"; StringBuilder sb = new StringBuilder(); len = Math.Min(offset + len, ab.Length); for (int i = offset; i < len; i++) sb.Append(String.Format("{0:x02}", ab[i]).ToUpper() + sDelim); return sb.ToString(); } } } 

Answer 3

The UID can be read by calling the PC / SC 2.01 function with the winscard.dll function. ICLASS cards typically have 8 bytes. Other cards return a 4-8-byte UID (it acts as a phone number to identify several cards in a field and ultimately choose one). APDUs can be exchanged through standard SCardTransmit() using CLA=0xFF to indicate access to the contactless memory card.

Mark

http://www.smartcard-api.com

Note: The UID does NOT reflect the card number printed on the card. The card number is part of the Wiegand data stored in the HID PAC application of application 1 on page 0 of this card.

Answer 4

• Unique Identifier (UID): All ISO-compatible smart cards have a UID number (akin to the VIN number on the vehicle). Source: http://www.accentalarms.com/specsheets/xceed/XceedIDSmartcardOverview.pdf
• About reading the UID: check out http://www.hidglobal.com/faqs.php?techCat=19 , it seems to show how to do this.

Answer 5

Even if the UID is part of the standard, and the standard says that it should be unique throughout the world, you should bear in mind that often manufacturers produce inappropriate (but working) cards.

Conclusion: Until you put something unique on the card, you cannot be sure that the link from the card to the cardholder is satisfied.

Answer 6

The ATR (Answer T o R eset) from the card only indicates which card format, protocol and checksums of this data. See ATR Parsing Online

Now you know which card you should use the appropriate one (RS232 / RS485 / ZPL II / APDU - A pplication Smartrotocol D ata U nit smart card, as defined in ISO / IEC 7816-4) to obtain a UID (depending on whether it is a cascade of 1, 2 or 3, see ACG HF Multi ISO RFID Reader v1.0 p. 50 aka Omnikey5553 RS232) - for 14443 it has a length of up to 14 bytes, occupying the first two blocks in the first 16-byte sector (sector 0) and has built-in checksums. (See ISO14443 Protocols or NXP Semiconductors MF1ICS50 Specifications p. 8).

For 15693, RS232 / RS485 commands return the full 16-byte UID to (S) elect (Omnikey5553 RS232 and USB), but only the last 8 bytes (0xFF 0xCA 0x00 0x00 0x00 on Omnikey5022) will be returned to the APDU, despite being standard, since for a 15693 card, the card only answers 8 bytes at a time. For 14443 you can read a sector at a time (32 bytes of 4 blocks of 8 bytes each, enter the sector before reading / writing for S50), but for 15693 you can read or write only a block of 8 bytes at a time, and has other data in the returned buffer. You must encode whether you are blocking data at 32 or 8. This uses the standard SCardTransmit smart card protocol for the Windows API. Since the diagnostic application returned 16 bytes, this is the UID of the card. In addition, some 15693 addictions use a 14443 inverted key to obfuscate and prevent modification, while others hold a firmware that performs checks — either on a PC or on the card itself.

In all cases, this is not related to what is printed on the card — we use CODE128C barcodes printed on EV1 plastic cards that contain a GUID, which then refers to the corresponding UID in the database for transactions. Others (e.g. Wiegand, etc.) Print other data, such as area codes, key sets, etc.

Additional problems arise when trying to write data to 15693 - make sure that you complete your data on the 4 char interface, otherwise you will have problems with the previous data when you try to write a null "0x00" on top of an existing character in the block - so the code for the belt, braces and a piece of string after updating / writing to the card to make sure the data as needed. If the entire block is null, there is no problem, because the data is written as a 4-character block. DO NOT RUN the card user area unnecessarily, as they are NAND based and have a final record. (After recording, read the card again to make sure that the recorded data is recorded!)

The UID must be unique within the card set, but it also depends on the order of the number of cards, so the serial number was doubled (cascade number), and as soon as you have to moderate the trust in the UID from the Apple phone, since it violates the U in the UID - it can be configured to emulate a different UID.

NDEF is another aspect of cards to understand - it is well explained in the NFC NDEF standards, just be careful with the OTP and LOCK 14443 areas as they are unidirectional only once.

You can always use an Android phone with NFC and the TagData app for verification.