| 1 |
rousseau |
269 |
USB CCID IFD Handler |
| 2 |
|
|
==================== |
| 3 |
|
|
|
| 4 |
|
|
This package provides the source code for a generic USB CCID |
| 5 |
|
|
(Chip/Smart Card Interface Devices) driver. See [1] for the USB CCID |
| 6 |
rousseau |
273 |
specifications from the USB working group. |
| 7 |
rousseau |
269 |
|
| 8 |
|
|
|
| 9 |
rousseau |
697 |
Authors: |
| 10 |
|
|
======== |
| 11 |
rousseau |
269 |
|
| 12 |
|
|
- Ludovic Rousseau <ludovic.rousseau@free.fr> |
| 13 |
rousseau |
1015 |
- Carlos Prados for the PPS and ATR parsing code (taken from his |
| 14 |
|
|
towitoto driver) in towitoko/ directory. |
| 15 |
|
|
- Olaf Kirch for the T=1 TPDU code (from the OpenCT package) in openct/ |
| 16 |
|
|
directory. I (Ludovic Rousseau) greatly improved this code. |
| 17 |
rousseau |
269 |
|
| 18 |
|
|
|
| 19 |
|
|
Supported CCID readers: |
| 20 |
|
|
======================= |
| 21 |
|
|
|
| 22 |
rousseau |
273 |
(in alphabetical order) |
| 23 |
rousseau |
1321 |
- Advanced Card Systems ACR 38 [16] |
| 24 |
|
|
old versions of this reader have a bug: the reader do timeout when a |
| 25 |
|
|
special USB frame is sent from the reader. If the frame size if a |
| 26 |
|
|
multiple of wMaxPacketSize the communication is stopped. |
| 27 |
rousseau |
969 |
- Cherry XX33 keyboard [?] |
| 28 |
|
|
- Dell keyboard SK-3106 [?] |
| 29 |
|
|
- Dell smart card reader keyboard [?] |
| 30 |
rousseau |
273 |
- Gemplus GemPC 433 SL [2] |
| 31 |
|
|
- Gemplus GemPC Key [3] |
| 32 |
|
|
- Gemplus GemPC Twin [4] |
| 33 |
rousseau |
1326 |
- Kobil KAAN Base [19] |
| 34 |
|
|
- Kobil KAAN Advanced [20] |
| 35 |
rousseau |
1393 |
- Kobil KAAN SIM III [21] |
| 36 |
rousseau |
1394 |
- Kobil KAAN mIDentity [22] |
| 37 |
rousseau |
273 |
- OmniKey CardMan 3121 [5] |
| 38 |
rousseau |
1314 |
- SCM Micro SCR 331 [6] |
| 39 |
|
|
You shall upgrade the firmware [17] using version 5.18 or later. |
| 40 |
|
|
- SCM Micro SCR 331-DI [11] |
| 41 |
|
|
You shall upgrade the firmware [17] using version 6.22 or later. |
| 42 |
|
|
- SCM Micro SCR 335 [7] |
| 43 |
|
|
The firmware of this reader can't be upgraded so be sure to buy a |
| 44 |
|
|
recent model with firmware 5.14 or later |
| 45 |
rousseau |
1392 |
- SCM Micro SCR 3310 |
| 46 |
rousseau |
1314 |
- SCM Micro SPR 532 [9] |
| 47 |
|
|
You shall contact Torsten Maykranz <tmaykranz@scmmicro.de> to get a |
| 48 |
|
|
firmware upgrade. |
| 49 |
rousseau |
606 |
|
| 50 |
|
|
|
| 51 |
|
|
Should work but untested by me: |
| 52 |
|
|
=============================== |
| 53 |
|
|
|
| 54 |
|
|
I would like to get these readers to perform test and validation and |
| 55 |
|
|
move them in the supported list above. If you are one of the |
| 56 |
|
|
manufacturers, please, contact me. |
| 57 |
|
|
|
| 58 |
rousseau |
1317 |
- Cherry XX44 keyboard (SmartBoard G83-6744) [18] |
| 59 |
rousseau |
708 |
- ActivCard USB reader 2.0 [10] |
| 60 |
rousseau |
709 |
- C3PO LTC32 [13] |
| 61 |
|
|
- SCM Micro SCR 333 [15] |
| 62 |
|
|
- Silitek SK-3105 keyboard [12] or C3PO TLTC2USB [14] |
| 63 |
rousseau |
269 |
|
| 64 |
|
|
|
| 65 |
rousseau |
969 |
Unsupported or partly supported CCID readers: |
| 66 |
|
|
============================================= |
| 67 |
rousseau |
269 |
|
| 68 |
rousseau |
1165 |
- C3PO LTC31 [8] |
| 69 |
|
|
The reader works fine with Linux kernel 2.4 but does not with Linux |
| 70 |
|
|
kernel 2.6. The ioctl() syscall returns EINVAL (Invalid argument) |
| 71 |
rousseau |
269 |
|
| 72 |
rousseau |
1165 |
|
| 73 |
rousseau |
321 |
Supported operating systems: |
| 74 |
|
|
============================ |
| 75 |
|
|
|
| 76 |
|
|
- GNU/Linux (libusb 0.1.7) |
| 77 |
|
|
- MacOS X/Darwin (libusb 0.1.8beta, CVS snapshot. See "Known problems") |
| 78 |
|
|
to libusb) |
| 79 |
|
|
|
| 80 |
|
|
|
| 81 |
rousseau |
862 |
Debug informations: |
| 82 |
|
|
=================== |
| 83 |
|
|
|
| 84 |
|
|
The driver uses the debug function provided by pcscd. So if pcscd sends |
| 85 |
|
|
its debug to stdout (pcscd --foreground) then the CCID will also send |
| 86 |
|
|
its debug to stdout. If pcscd sends its debug to syslog (by default) |
| 87 |
|
|
then the CCID will also send its debug to syslog. |
| 88 |
|
|
|
| 89 |
|
|
You can change the debug level using the Info.plist configuraion file. |
| 90 |
|
|
The Info.plist is installed, by default, in |
| 91 |
|
|
/usr/local/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist |
| 92 |
|
|
|
| 93 |
|
|
The debug level is set in the ifdLogLevel field. It is a binary OR |
| 94 |
|
|
combinaison of 4 different levels. |
| 95 |
|
|
- 1: critical: important error messages |
| 96 |
|
|
- 2: info: informative messages like what reader was detected |
| 97 |
|
|
- 4: periodic: periodic info when pcscd test if a card is present (every |
| 98 |
|
|
1/10 of a second) |
| 99 |
|
|
- 8: comm: a dump of all the bytes exchanged between the host and the |
| 100 |
|
|
reader |
| 101 |
|
|
|
| 102 |
|
|
By default the debug level is set to 3 (1 + 2) and correspond to the |
| 103 |
|
|
critical and info levels. |
| 104 |
|
|
|
| 105 |
|
|
You have to restart the driver so it read the configuration file again |
| 106 |
|
|
and use the new debug level value. To restart the driver you just need |
| 107 |
|
|
to unplug all your CCID readers so the the driver is unloaded and then |
| 108 |
|
|
replug your readers. You can also restart pcscd. |
| 109 |
|
|
|
| 110 |
|
|
|
| 111 |
rousseau |
321 |
Known problems: |
| 112 |
|
|
=============== |
| 113 |
|
|
|
| 114 |
rousseau |
1165 |
MacOSX libusb |
| 115 |
rousseau |
969 |
""""""""""""" |
| 116 |
|
|
There is a bug in libusb that crash the libusb library when you |
| 117 |
|
|
unplug a reader and replug it in another USB socket. So if you |
| 118 |
|
|
unplug a reader replug it in the same USB socket. |
| 119 |
|
|
|
| 120 |
|
|
see http://sourceforge.net/tracker/index.php?func=detail&aid=886778&group_id=1674&atid=101674 |
| 121 |
|
|
|
| 122 |
|
|
|
| 123 |
rousseau |
273 |
Licence: |
| 124 |
|
|
======== |
| 125 |
|
|
|
| 126 |
rousseau |
269 |
This program is free software; you can redistribute it and/or modify |
| 127 |
|
|
it under the terms of the GNU General Public License as published by the |
| 128 |
|
|
Free Software Foundation; either version 2 of the License, or (at your |
| 129 |
|
|
option) any later version. |
| 130 |
|
|
|
| 131 |
|
|
This program is distributed in the hope that it will be useful, but |
| 132 |
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of |
| 133 |
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 134 |
|
|
General Public License for more details. |
| 135 |
|
|
|
| 136 |
|
|
You should have received a copy of the GNU General Public License |
| 137 |
|
|
along with this program; if not, write to the Free Software Foundation, |
| 138 |
|
|
Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 139 |
|
|
|
| 140 |
|
|
|
| 141 |
|
|
History: |
| 142 |
|
|
======== |
| 143 |
|
|
|
| 144 |
rousseau |
1186 |
0.9.2 - 15 August 2004, Ludovic Rousseau |
| 145 |
|
|
- T=1 TPDU code: |
| 146 |
|
|
. the work on T=1 TPDU code was possible thanks to Gemplus |
| 147 |
|
|
validation team who helped me test, debug and bring the code to |
| 148 |
|
|
an EMV validation level. Thanks to Jérôme, Jean-Yves, Xavier and |
| 149 |
|
|
the Gemplus readers department |
| 150 |
|
|
. error code was not checked correctly |
| 151 |
|
|
. avoid a (nearly) infinite loop when resynch are needed. |
| 152 |
|
|
. correctly initialise an internal value to allow more than one |
| 153 |
|
|
reader to work |
| 154 |
|
|
- multi-slots readers |
| 155 |
|
|
. add support for multi-slots readers. The only one I have is a |
| 156 |
|
|
SCM Micro SCR 331-DI with a contact and a contactless interface. |
| 157 |
|
|
The contactless interface may or may not work for you since the |
| 158 |
|
|
reader uses proprietary (undocumented) commands. |
| 159 |
|
|
- GemPC Twin serial reader |
| 160 |
|
|
. perform a command (get the reader firmware) to be sure a GemPC |
| 161 |
|
|
Twin (serial or pcmcia) reader is connected |
| 162 |
|
|
. use a dynamic timeout when reading the serial port. |
| 163 |
|
|
The first timeout used when detecting the reader is 2 seconds to |
| 164 |
|
|
not wait too long if no reader is connected. Later timeouts are |
| 165 |
|
|
set to 1 minute to allow long time APDU. |
| 166 |
|
|
- use `pkg-config libpcsclite --cflags` to locate the pcsc-lite |
| 167 |
|
|
header files |
| 168 |
|
|
- use `pkg-config --print-errors --atleast-version=1.2.9-beta5 libpcsclite` |
| 169 |
|
|
to test the pcsc-lite version |
| 170 |
|
|
- code improvements thanks to the splint tool (http://www.splint.org/) |
| 171 |
|
|
|
| 172 |
rousseau |
1018 |
0.9.1 - 1 July 2004, Ludovic Rousseau |
| 173 |
|
|
- I forgot to define IFD_PARITY_ERROR in a .h file |
| 174 |
|
|
|
| 175 |
rousseau |
1015 |
0.9.0 - 1 July 2004, Ludovic Rousseau |
| 176 |
|
|
- The T=1 TPDU automata from Carlos Prados' Towitoko driver is very |
| 177 |
|
|
limited and do not support error management mechanisms. |
| 178 |
|
|
I then used the T=1 TPDU automata from OpenCT (OpenSC project). |
| 179 |
|
|
This automata is much more powerful but still lacks a lot of error |
| 180 |
|
|
management code. |
| 181 |
|
|
I then added all the needed code to reach the quality level |
| 182 |
|
|
requested by the EMV standard. |
| 183 |
|
|
- add support for new readers: |
| 184 |
|
|
. Advanced Card Systems ACR 38 |
| 185 |
|
|
. Cherry XX33 |
| 186 |
|
|
. Dell keyboard SK-3106 |
| 187 |
|
|
. Dell smart card reader keyboard |
| 188 |
|
|
. SCR 333 |
| 189 |
|
|
- add support of multi procotol cards (T=0 and T=1) |
| 190 |
|
|
- the debug level is now dynamic and set in the Info.plist file (no |
| 191 |
|
|
need to recompile the driver any more) |
| 192 |
|
|
- add support for the libusb naming scheme: usb:%04x/%04x:libusb:%s |
| 193 |
|
|
- INSTALL: add a "configuring the driver for the serial reader |
| 194 |
|
|
(GemPC Twin)" part |
| 195 |
|
|
- use `pkg-config libpcsclite --variable=usbdropdir` so you do not |
| 196 |
|
|
have to use --enable-usbdropdir=DIR or --enable-ccidtwindir=DIR |
| 197 |
|
|
even if pcscd does not use the default /usr/local/pcsc/drivers |
| 198 |
|
|
- add support of IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and |
| 199 |
|
|
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in IFDHControl() |
| 200 |
|
|
- read ifdDriverOptions from Info.plist to limit the use of |
| 201 |
|
|
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE (idea from Peter Williams) |
| 202 |
|
|
- provide an example of use of SCardControl() |
| 203 |
|
|
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and |
| 204 |
|
|
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in example/ |
| 205 |
|
|
- add a --enable-pcsclite option (default to yes) so that the driver |
| 206 |
|
|
can be compiled for a different framework (one needing |
| 207 |
|
|
tokenparser.l like Solaris) |
| 208 |
|
|
- Reset action is power off and power on, not just power on |
| 209 |
|
|
- use the include files from pcsc-lite |
| 210 |
|
|
- add a mechanism to allow power on at 1.8V, 3V and then 5V as |
| 211 |
|
|
specified by ISO 7816. We still use 5V for now to avoid problems |
| 212 |
|
|
with non ISO compliant cards |
| 213 |
|
|
|
| 214 |
rousseau |
703 |
0.4.1 - 14 February 2004, Ludovic Rousseau |
| 215 |
|
|
- distribute missing files readers/supported_readers.txt and |
| 216 |
|
|
src/create_Info_plist.pl |
| 217 |
|
|
'make install' failed because of this. |
| 218 |
|
|
|
| 219 |
rousseau |
697 |
0.4.0 - 13 February 2004, Ludovic Rousseau |
| 220 |
|
|
- support of T=1 with TPDU readers. A lot of the T=1 code comes from |
| 221 |
|
|
Carlos Prados towitoko driver. |
| 222 |
|
|
My code is GNU GPL, his code is GNU LGPL so the global driver is |
| 223 |
|
|
GNU GPL |
| 224 |
|
|
- PPS negotiation if the reader does not do it automatically |
| 225 |
|
|
- add support for the Silitek SK-3105 keyboard. It's a USB device |
| 226 |
|
|
with multiple interfaces |
| 227 |
|
|
- use the create_Info_plist.pl script to generate the installed |
| 228 |
|
|
Info.plist from an Info.plist template and a list of supported |
| 229 |
|
|
readers. The Info.plist was too "complex" to maintain by hand |
| 230 |
|
|
since it now contains 11 entries |
| 231 |
|
|
- add support of IFDHCreateChannelByName to avoid wrong reader |
| 232 |
|
|
enumeration. This is not complete if you have multiple _identical_ |
| 233 |
|
|
readers. You need to use a > 1.2.0 pcsc-lite version (not yet |
| 234 |
|
|
released at that time) |
| 235 |
|
|
- build but do not install the serial ccidtwin driver by default |
| 236 |
|
|
since it is useless on computers without a serial port or without |
| 237 |
|
|
this reader for example. |
| 238 |
|
|
- read and write timeouts are not symmetric. write timout can be |
| 239 |
|
|
shorter since the reader and card is not supposed to do anything |
| 240 |
|
|
before receiving (write) a command |
| 241 |
|
|
- do not try to find usb.h and other libusb files if |
| 242 |
|
|
--disable-libusb is used. Needed if you only want to build the |
| 243 |
|
|
serial driver. Thanks to Niki Waibel for the patch |
| 244 |
|
|
- add a --enable-ccidtwindir argument to ./configure to specify the |
| 245 |
|
|
serial GemPC Twin installation directory |
| 246 |
|
|
- debug and code improvements and simplifications |
| 247 |
|
|
|
| 248 |
rousseau |
552 |
0.3.2 - 4 November 2003, Ludovic Rousseau |
| 249 |
|
|
- src/commands.c: correct a stupid bug that occurs with an APDU with |
| 250 |
|
|
2 bytes response. |
| 251 |
|
|
- Info.plist: add SPR 532 in list of supported readers |
| 252 |
|
|
- parse.c: do not exit if the InterfaceClass is 0xFF (proprietary). |
| 253 |
|
|
It is the case with old readers manufactured before the final |
| 254 |
|
|
release of the CCID specs. |
| 255 |
|
|
- move LTC31 reader from unsupported to supported reader list. It |
| 256 |
|
|
was my f ault since in used odd INS byte in my test applet and odd |
| 257 |
|
|
INS bytes are forbidden by ISO 7816-4 ch. 5.4.2 Instruction byte. |
| 258 |
|
|
Thanks to Josep Moné s Teixidor for pointing the problem. |
| 259 |
|
|
- src/commands.c: comment out the automatic GET RESPONSE part. I |
| 260 |
|
|
don't think it should be in the driver. Maybe in pcscd instead? |
| 261 |
|
|
|
| 262 |
rousseau |
467 |
0.3.1 - 23 September 2003, Ludovic Rouseau |
| 263 |
|
|
- add --enable-multi-thread (enabled by default) for thread safe |
| 264 |
|
|
support an APDU multiplexing. You will need pcsc-lite-1.2.0-rc3 or |
| 265 |
|
|
above to use this feature. |
| 266 |
|
|
- add --enable-libusb=PATH option is your libusb is not installed in |
| 267 |
|
|
/usr or /usr/local |
| 268 |
|
|
- honor DESTDIR in install rules (closes [ #300110 ]). Thanks to |
| 269 |
|
|
Ville Skyttä for the patch. |
| 270 |
|
|
- src/ccid.c: do not switch the GemPC Key and GemPC Twin in APDU |
| 271 |
|
|
mode since it also swicth in EMV mode and may not work with non |
| 272 |
|
|
EMV cards |
| 273 |
|
|
- src/ccid_serial.c: complete reimplementation of the Twin serial |
| 274 |
|
|
protocol using a finite state automata (code much simpler) |
| 275 |
|
|
|
| 276 |
rousseau |
423 |
0.3.0 - 10 September 2003, Ludovic Rousseau |
| 277 |
|
|
- support of GemPC Twin connected to a serial port. Thanks to Niki |
| 278 |
|
|
W. Waibel for a working prototype. |
| 279 |
|
|
- support of auto voltage at power up if the reader support it |
| 280 |
|
|
instead of forcing a 5V in all cases. |
| 281 |
|
|
- support of APDU mode instead of just TPDU if the reader support |
| 282 |
|
|
it. Thanks to Jean-Luc Giraud for the idea and inspiration I got |
| 283 |
|
|
from his "concurrent" driver. |
| 284 |
rousseau |
425 |
- support of "time request" from the card. |
| 285 |
rousseau |
423 |
- parse: new indentation for more readability of supported features. |
| 286 |
|
|
- switch the GemPC Key and GemPC Twin in APDU mode since they |
| 287 |
|
|
support it but do not announce it in the dwFeatures. |
| 288 |
|
|
- new build process using autoconf/automake. |
| 289 |
|
|
|
| 290 |
rousseau |
342 |
0.2.0 - 26 August 2003, Ludovic Rousseau |
| 291 |
|
|
- Works under MacOS X |
| 292 |
|
|
- Info.plist: use an <array></array> for the alias enumeration |
| 293 |
|
|
- Makefile rework for *BSD and MacOS X |
| 294 |
|
|
|
| 295 |
rousseau |
273 |
0.1.0 - 13 August 2003, Ludovic Rousseau |
| 296 |
|
|
- First public release |
| 297 |
rousseau |
269 |
|
| 298 |
|
|
|
| 299 |
rousseau |
425 |
Bibliography: |
| 300 |
|
|
============= |
| 301 |
rousseau |
269 |
|
| 302 |
|
|
[1] http://www.usb.org/developers/devclass_docs/ccid_classspec_1_00a.pdf |
| 303 |
rousseau |
273 |
[2] http://www.gemplus.com/products/gempc433/ |
| 304 |
|
|
[3] http://www.gemplus.com/products/gempckey/ |
| 305 |
rousseau |
269 |
[4] http://www.gemplus.com/products/gempctwin/ |
| 306 |
rousseau |
273 |
[5] http://www.omnikey.com/en/produkt_details.php3?produkt=1&variante=47 |
| 307 |
|
|
[6] http://www.scmmicro.com/security/SCR331.html |
| 308 |
|
|
[7] http://www.scmmicro.com/security/SCR335.html |
| 309 |
rousseau |
709 |
[8] http://www.c3po.es/ltc31.html |
| 310 |
rousseau |
553 |
[9] http://www.scmmicro.com/security/SPR532.html |
| 311 |
rousseau |
606 |
[10] http://www.activcard.com/products/usb_reader.html |
| 312 |
rousseau |
666 |
[11] http://www.scmmicro.com/security/SCR331-DI.html |
| 313 |
rousseau |
677 |
[12] http://www.silitek.com/prod/getProduct.do?xml_id=4_2&menu_id=4_2_8&cid=1_8_5 |
| 314 |
rousseau |
709 |
[13] http://www.c3po.es/ltc32.html |
| 315 |
|
|
[14] http://www.c3po.es/tltc2usb.html |
| 316 |
|
|
[15] http://www.scmmicro.com/security/SCR333.html |
| 317 |
rousseau |
1321 |
[16] http://www.acs.com.hk/Product_Readers.asp?productID=59&PCate=Products_PC_Linked_SmartCard_Readers |
| 318 |
rousseau |
1314 |
[17] http://www.scmmicro.com/support/pcs_product_drivers.html |
| 319 |
rousseau |
1317 |
[18] http://www.cherrycorp.com/english/advanced-line/advanced-line_smartboard_g83-6744.htm |
| 320 |
rousseau |
1326 |
[19] http://www.kobil.com/e/products/smartcard/kaan-base.php |
| 321 |
|
|
[20] http://www.kobil.com/e/products/smartcard/kaan-advanced.php |
| 322 |
rousseau |
1394 |
[21] http://www.kobil.com/d/products/smartcard/kaansim3.php |
| 323 |
|
|
[22] http://www.kobil.com/e/products/index.php?s=midentity |
| 324 |
rousseau |
269 |
|
| 325 |
|
|
$Id$ |
| 326 |
|
|
|
| 327 |
|
|
vim:ts=20 |
Parent Directory
| 
Revision Log