GEMPLUS MPCOS-EMV Reference Manual v3.1 (1999-08)

1 ABOUT THIS MANUAL

1.1 Audience

1.2 How to Use This Manual

* Overview

* MPCOS-EMV Files

* MPCOS-EMV Initial Status

* Access Conditions in MPCOS-EMV

* MPCOS-EMV Cryptography

* MPCOS-EMV Optional Features

* MPCOS-EMV Command Format

* MPCOS-EMV Commands

* Appendix A

* Appendix B

* Appendix C

* Appendix D

* Appendix E

* Glossary

1.3 Notation

* Bit numbering

* RFU

* 3DES_16

10 MPCOS-EMV COMMANDS

10.1 MPCOS-EMV Commands Quick Reference Guide

10.1.1 Administration Commands

10.1.2 Payment Commands

10.2 Administration Commands

10.2.1 Append Record (ApdRec)

* Secure Messaging

* File Type

10.2.10 Read Record (RdRec)

10.2.11 Select File (SelFil)

10.2.12 Select File Key (SelFk)

10.2.13 Set Card Status

10.2.14 Set Secret Code (SetCod)

10.2.15 Switch Protocol (SwtPrt)

10.2.16 Update Binary (UpdBin)

10.2.17 Update Record (UpdRec)

10.2.18 Verify

10.2.19 Write Binary (WrBin)

10.2.2 Create file (CrtFile)

Secure Messaging

File Type

To create a Dedicated File, the data field is as follows:

* File Identifier

*FDB

* OPT

* Name Length

* Group 1 AC and Group 2 AC

* Name

* Cryptographic checksum

To create an Elementary File, the data field is as follows:

* File Identifier

* FDB

* Body Size

* Group 1 AC, Group 2 AC, Group 3 AC

* Cryptographic checksum

10.2.4 Freeze Access conditions (FreezeAC)

Secure Messaging

File Type

10.2.5 Get Challenge (GetChal)

10.2.6 GetInfo

10.2.7 Get Response (GetResp)

10.2.8 Internal Authenticate (IntAut)

10.2.9 Read Binary (RdBin)

10.3 Payment Commands

10.3.1 Cancel Debit (CanDeb)

10.3.2 Credit

10.3.3 Debit

10.3.4 Read Balance (RdBal)

10.3.5 Select Purse & Key (SelP&K)

10.3.6 Set Options (SetOpts)

10.3.7 Sign

2 OVERVIEW

2.1 Range Presentation

2.2 Product History

2.3 Data Structure

2.4 Command Set

2.5 Data Access Management

2.6 Security

2.7 Communication

2.8 Custom Configurations

3 MPCOS-EMV FILES

3.1 The Master File

3.2 Dedicated Files

3.2.1 File Descriptor

Dedicated File Descriptor:

The following table describes the field size and contents:

3.2.2 File Body Structure

3.2.3 Selection by partial name

3.3 Elementary Files

3.3.1 File Descriptor

Elementary File Descriptor:

The following table describes the field size and contents:

3.3.2 File Body Structure

3.3.3 EF Types

3.3.3.1 Purse Files

3.3.3.10 Linear Variable Files

Data referencing in a Linear File with Records of variable Size

3.3.3.11 Cyclic Elementary Files

Data referencing in a Cyclic File with Records of fixed Size

3.3.3.2 Enhanced Purse files

3.3.3.3 Key Files

Key rights according to key types.

3.3.3.4 Transaction Manager Files

Transaction manager files have the following structure:

3.3.3.5 Secret Code Files

Secret codes have the following structure:

3.3.3.6 IADF Internal Application Data File

Example:

3.3.3.7 Transparent Files

Data Referencing in a Transparent File

3.3.3.8 Structured files

Examples:

Optimum sizing:

3.3.3.9 Linear Fixed Files

Data referencing in a Linear File with Records of Fixed Size

4 MPCOS-EMV INITIAL STATUS

4.1 Initialization processes

4.10 EEPROM Size

4.11 Lock Byte

4.2 Initial File Structure

Initial File Structure

4.3 Master File

4.4 EFKey File

4.5 DFSystem

4.6 EFCard File

* Card Serial Number

* Issuer Reference Number

4.7 EFIssuer File

4.8 Personalization Flag

4.9 IO Buffer size

5 ACCESS CONDITIONS IN MPCOS-EMV

5.1 General

5.2 Access Conditions

* Data files

* Sensitive files

5.3 Authorization Registers

Example

6 MPCOS-EMV CRYPTOGRAPHY

6.1 3DES Algorithm

Triple DES implementation in EDE mode

Inverse Triple DES implementation

6.1.1 Key Diversification

Temporary Diversified 3DES Key : SK (SKl; SKr)

6.1.2 Authentication / Computation of Certificates

Certificate computation

6.1.3 Computation of the Cryptographic Checksum (CRYCKS)

Zero-Padding

6.2 MPCOS-EMV Keys

6.2.1 Key Types Loadable in Cards

6.2.2 Temporary Keys Generated by MPCOS-EMV

* When Temporary Keys Are Lost

6.3 Cryptographic security implementation

6.3.1 Card/Terminal Authentication

6.3.2 Secure Messaging

For commands that send data to the card (such as Update or Create):

* The terminal:

* The card:

For commands that only retrieve data from the card (such as Read):

* The terminal:

* The card:

6.3.3 Payment Certificates

Terminal Transaction Counters

6.3.4 Payment Command Cryptograms

7 MPCOS-EMV OPTIONAL FEATURES

7.1 Communication Speed

7.1.1 The SwtPrt Command

7.1.2 The Double Reset Mechanism

7.2 Communication Protocols

7.3 Answer to Reset

7.4 Custom OS Extensions

8 ELECTRONIC PURSE ARCHITECTURE

9 MPCOS-EMV COMMAND FORMAT

9.1 Command Format

9.2 Header Fields

9.3 Body Fields

9.4 Response Format

A.1 MPCOS-EMV 8k, 16k, 32k, 64k

APPENDIX A - THE MPCOS-EMV DEFAULT ANSWER TO RESET

APPENDIX B - CARD RETURN CODES

* Transmission protocol related codes SW1 = 6xh:

* Application related return codes SW1 = 9xh

APPENDIX C - IMPLEMENTATION OF EMV COMPATIBLE FEATURES

APPENDIX D - T=1 PROTOCOL

C.1 File Structure

C.1.1 Payment System Environment DDF

C.1.2 Payment System Directory EF

C.1.3 Payment System Application Identifiers (AID)

C.1.4 The Application Data File (ADF)

C.2 Implementation in the terminal

C.2.1 Use of the Payment System Directory

C.2.2 Selecting the Application to be run

C.3 Examples of implementation in cards;This section describes two examples of implementation of the MPCOS/EMV card.

C.3.1 Single application context - EPurse

C.3.2 Multi-application context

C.4 MPCOS-EMV Personalization

C.4.1 Create DDF and ADF(s)

C.4.2 Create FCI files

C.4.3 Fill FCI File

C.4.4 The DDF FCI file

C.4.5 The ADFs FCI files

C.4.6 Create the Payment System Directory EF

C.4.7 Fill the Payment System Directory EF

D.1 Scope

D.1.1 T=1 principles

D.1.2 Selecting T=1

D.2 Block frame

D.3 Basic elements of a block

D.3.1 Prologue field

D.3.2 Information field (INF)

D.3.3 Epilogue field (EDC)

D.4 Supported blocks

D.4.1 I-blocks

D.4.2 R-blocks

D.4.3 S-blocks

D.5 Specific interface parameters

D.5.1 IFSD and IFSC

D.5.2 Character waiting time

D.5.3 Block guard time and block waiting time

D.6 Chaining rules

D.7 Error handling

E.1 Items Required

E.2 Batch Card Description

E.3 Mapping

E.4 ATR

E.5 BSN Form

E.6 Mother System Key

E.7 Recovering the Mother System Key

* Recovering the Mother System Key

E.8 Card-by-Card Personalization

* Recovering the System Key of an Individual Card

GLOSSARY