| 6 |
specifications from the USB working group. |
specifications from the USB working group. |
| 7 |
|
|
| 8 |
|
|
| 9 |
Author: |
Authors: |
| 10 |
======= |
======== |
| 11 |
|
|
| 12 |
- Ludovic Rousseau <ludovic.rousseau@free.fr> |
- Ludovic Rousseau <ludovic.rousseau@free.fr> |
| 13 |
|
- Carlos Prados for the PPS and ATR parsing code (taken from his |
| 14 |
|
towitoto driver) in towitoko/ directory. |
| 15 |
|
- Olaf Kirch for the T=1 TPDU code (from the OpenCT package) in openct/ |
| 16 |
|
directory. I (Ludovic Rousseau) greatly improved this code. |
| 17 |
|
|
| 18 |
|
|
| 19 |
Supported CCID readers: |
Supported CCID readers: |
| 20 |
======================= |
======================= |
| 21 |
|
|
| 22 |
(in alphabetical order) |
(in alphabetical order) |
| 23 |
|
- ActivCard USB reader 3.0 |
| 24 |
|
- Advanced Card Systems ACR 38U-CCID [16] |
| 25 |
|
old versions of this reader have a bug: the reader do timeout when a |
| 26 |
|
special USB frame is sent from the reader. If the frame size if a |
| 27 |
|
multiple of wMaxPacketSize the communication is stopped. |
| 28 |
|
- Alcor Micro AU9520 [46] |
| 29 |
|
Firmware 1.01 is bogus. The time request sent by the card is not |
| 30 |
|
forwarded by the reader to the host. |
| 31 |
|
- Athena ASE IIIe USB V2 [29] |
| 32 |
|
- Athena ASE IIIe KB USB [42] |
| 33 |
|
- C3PO LTC31 (new model, USB product id 0x0006) [8] |
| 34 |
|
- Cherry XX33 keyboard [?] |
| 35 |
|
- Cherry XX44 keyboard (SmartBoard G83-6744) [18] |
| 36 |
|
- Cherry SmartTerminal ST2000U [35] |
| 37 |
|
- Cherry ST-1044U [27] |
| 38 |
|
- Dell keyboard SK-3106 [?] |
| 39 |
|
- Dell smart card reader keyboard [?] |
| 40 |
|
- Eutron Digipass 860 [59] |
| 41 |
|
- Eutron SIM Pocket Combo [25] |
| 42 |
|
- Eutron CryptoIdentity [26] |
| 43 |
|
- Eutron Smart Pocket [58] |
| 44 |
- Gemplus GemPC 433 SL [2] |
- Gemplus GemPC 433 SL [2] |
| 45 |
|
- Gemplus GemPC Card [41] |
| 46 |
- Gemplus GemPC Key [3] |
- Gemplus GemPC Key [3] |
| 47 |
|
- Gemplus GemPC PinPad |
| 48 |
- Gemplus GemPC Twin [4] |
- Gemplus GemPC Twin [4] |
| 49 |
- LTC31 from C3PO [8] |
- Gemplus GemCore POS Pro |
| 50 |
|
- Gemplus GemCore SIM Pro |
| 51 |
|
- Kobil KAAN Base [19] |
| 52 |
|
- Kobil KAAN Advanced [20] |
| 53 |
|
- Kobil KAAN SIM III [21] |
| 54 |
- OmniKey CardMan 3121 [5] |
- OmniKey CardMan 3121 [5] |
| 55 |
|
- RSA SecureID SID800 [50] |
| 56 |
- SCM Micro SCR 331 [6] |
- SCM Micro SCR 331 [6] |
| 57 |
|
You shall upgrade the firmware [17] using version 5.18 or later. |
| 58 |
|
- SCM Micro SCR 331-DI [11] |
| 59 |
|
You shall upgrade the firmware [17] using version 6.22 or later. |
| 60 |
- SCM Micro SCR 335 [7] |
- SCM Micro SCR 335 [7] |
| 61 |
|
The firmware of this reader can't be upgraded so be sure to buy a |
| 62 |
|
recent model with firmware 5.14 or later |
| 63 |
|
- SCM Micro SCR 355 |
| 64 |
|
- SCM Micro SCR 3310 [30] |
| 65 |
|
- SCM Micro SCR 3311 [31] |
| 66 |
- SCM Micro SPR 532 [9] |
- SCM Micro SPR 532 [9] |
| 67 |
|
You shall contact Torsten Maykranz <tmaykranz@scmmicro.de> to get a |
| 68 |
|
firmware upgrade. |
| 69 |
Unsupported CCID readers: |
- SmartEpad (v 2.0) [32] |
| 70 |
========================= |
The firmware gives a very strange description of the reader (like a |
| 71 |
|
dwDefaultClock: 1024.000 MHz). So do not expect a perfect behavior. |
| 72 |
None known. |
- Verisign Secure Storage Token [24] |
| 73 |
|
- Verisign Secure Token [?] |
| 74 |
|
- Xiring Teo [52] |
| 75 |
|
|
| 76 |
|
|
| 77 |
|
Should work but untested by me: |
| 78 |
|
=============================== |
| 79 |
|
|
| 80 |
|
I would like to get these readers to perform test and validation and |
| 81 |
|
move them in the supported list above. If you are one of the |
| 82 |
|
manufacturers, please, contact me. |
| 83 |
|
|
| 84 |
|
- Axalto Reflex USB v3 [38] |
| 85 |
|
- C3PO LTC32 [13] |
| 86 |
|
- C3PO TLTC2USB |
| 87 |
|
- C3PO KBR36 |
| 88 |
|
- Charismathics token |
| 89 |
|
- Gemplus GemPC Express |
| 90 |
|
- Fujitsu Siemens Computers SmartCard USB 2A [53] |
| 91 |
|
- Fujitsu Siemens Computers SmartCard Keyboard USB 2A [54] |
| 92 |
|
- Giesecke & Devrient StarSign Card Token 350 (ICCD) [57] |
| 93 |
|
- Giesecke & Devrient StarSign Card Token 550 (ICCD) |
| 94 |
|
- HP USB Smart Card Keyboard [44] |
| 95 |
|
- HP USB Smartcard Reader |
| 96 |
|
- id3 Semiconductors CL1356D [45] (tested by me but I don't have the |
| 97 |
|
reader anymore) |
| 98 |
|
- id3 Semiconductors CL1356T [48] (it should be the same firmware as the |
| 99 |
|
CL1356D) |
| 100 |
|
- Kobil EMV CAP - SecOVID Reader III |
| 101 |
|
- Lenovo Integrated Smart Card Reader |
| 102 |
|
- OmniKey CardMan 1021 |
| 103 |
|
- OmniKey CardMan 3021 [49] |
| 104 |
|
- OmniKey CardMan 3621 [43] |
| 105 |
|
- OmniKey CardMan 3821 [37] |
| 106 |
|
- OmniKey CardMan 4321 [55] |
| 107 |
|
- OmniKey CardMan 5121 [33] |
| 108 |
|
- OmniKey CardMan 5125 [51] |
| 109 |
|
- OmniKey CardMan 5321 [56] |
| 110 |
|
- OmniKey CardMan 6121 [36] |
| 111 |
|
- O2Micro Oz776 (0x7762 and 0x7772 versions) |
| 112 |
|
- Philips JCOP41V221 |
| 113 |
|
- SafeNet IKey4000 |
| 114 |
|
- SCM Micro SCR 331-DI NTTCom [23] |
| 115 |
|
- SCM Micro SCR 3310-NTTCOM [28] |
| 116 |
|
- SCM Micro SCR 3320 [32] |
| 117 |
|
- SCM Micro SCR 333 [15] |
| 118 |
|
- SCM Micro SDI 010 [39] |
| 119 |
|
- SCM SCR 3340 ExpressCard54 [34] |
| 120 |
|
- SchlumbergerSema Cyberflex Access e-gate ICCD |
| 121 |
|
- Silitek SK-3105 keyboard [12] or C3PO TLTC2USB [14] |
| 122 |
|
- Sitecom USB simcard reader MD-010 |
| 123 |
|
- Winbond Electronics (for OEM only) [40] |
| 124 |
|
|
| 125 |
|
|
| 126 |
|
Unsupported or partly supported CCID readers: |
| 127 |
|
============================================= |
| 128 |
|
|
| 129 |
|
- ActivCard USB reader 2.0 [10] |
| 130 |
|
The reader do timeout when a special USB frame is sent from the |
| 131 |
|
reader. If the frame size if a multiple of wMaxPacketSize the |
| 132 |
|
communication is stopped. |
| 133 |
|
- C3PO LTC31 (old model, USB product id 0x0003) [8] |
| 134 |
|
The reader works fine with Linux kernel 2.4 but does not with Linux |
| 135 |
|
kernel 2.6. The ioctl() syscall returns EINVAL (Invalid argument) |
| 136 |
|
- iDream (THRC2002-2) [47] |
| 137 |
|
PPS fails with a Cryptoflex card |
| 138 |
|
powerup fails with a Setcos card |
| 139 |
|
does work with the belgium eID (the reader is sold for this |
| 140 |
|
application) |
| 141 |
|
- Kobil mIDentity [22] |
| 142 |
|
Time requests are not managed correctly and make the firmware fails. |
| 143 |
|
This is not a problem unless you use a time-consuming APDU like RSA |
| 144 |
|
key generation. |
| 145 |
|
A new firmware will correct the bug. |
| 146 |
|
- Reiner-SCT cyberJack pinpad(a) |
| 147 |
|
With a T=0 card: case 1 APDU, case 2 APDU with Le=0xF5 do not work |
| 148 |
|
|
| 149 |
|
|
| 150 |
Supported operating systems: |
Supported operating systems: |
| 155 |
to libusb) |
to libusb) |
| 156 |
|
|
| 157 |
|
|
| 158 |
|
Debug informations: |
| 159 |
|
=================== |
| 160 |
|
|
| 161 |
|
The driver uses the debug function provided by pcscd. So if pcscd sends |
| 162 |
|
its debug to stderr (pcscd --foreground) then the CCID will also send |
| 163 |
|
its debug to stderr. If pcscd sends its debug to syslog (by default) |
| 164 |
|
then the CCID will also send its debug to syslog. |
| 165 |
|
|
| 166 |
|
You can change the debug level using the Info.plist configuration file. |
| 167 |
|
The Info.plist is installed, by default, in |
| 168 |
|
/usr/local/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist |
| 169 |
|
|
| 170 |
|
The debug level is set in the ifdLogLevel field. It is a binary OR |
| 171 |
|
combinaison of 4 different levels. |
| 172 |
|
- 1: critical: important error messages |
| 173 |
|
- 2: info: informative messages like what reader was detected |
| 174 |
|
- 4: comm: a dump of all the bytes exchanged between the host and the |
| 175 |
|
reader |
| 176 |
|
- 8: periodic: periodic info when pcscd test if a card is present (every |
| 177 |
|
1/10 of a second) |
| 178 |
|
|
| 179 |
|
By default the debug level is set to 3 (1 + 2) and correspond to the |
| 180 |
|
critical and info levels. |
| 181 |
|
|
| 182 |
|
You have to restart the driver so it read the configuration file again |
| 183 |
|
and use the new debug level value. To restart the driver you just need |
| 184 |
|
to unplug all your CCID readers so the the driver is unloaded and then |
| 185 |
|
replug your readers. You can also restart pcscd. |
| 186 |
|
|
| 187 |
|
|
| 188 |
Known problems: |
Known problems: |
| 189 |
=============== |
=============== |
| 190 |
|
|
| 191 |
All platforms |
MacOSX libusb |
| 192 |
T=1 and TPDU |
""""""""""""" |
| 193 |
"""""""""""" |
There is a bug in libusb that crash the libusb library when you |
| 194 |
I do not yet included support of T=1 cards when the reader is in |
unplug a reader and replug it in another USB socket. So if you |
| 195 |
TPDU mode. |
unplug a reader replug it in the same USB socket. |
| 196 |
If you have a T=1 card I recommand you to use a reader working in |
|
| 197 |
APDU mode. T=1 and TPDU will be supported in a future version of |
see http://sourceforge.net/tracker/index.php?func=detail&aid=886778&group_id=1674&atid=101674 |
|
the driver. |
|
|
|
|
|
readers enumeration |
|
|
""""""""""""""""""" |
|
|
You may have wrong reader identification if you connect two or |
|
|
more reader at the exact same time. |
|
|
|
|
|
The daemon pcscd and the CCID driver do not list connected readers |
|
|
in the same order. The driver has no way to know which reader has |
|
|
been detected as a new reader by pcscd. |
|
|
|
|
|
So if you plug two readers at the same time (for example if you |
|
|
start pcscd with two readers connected or if you plug a USB hub |
|
|
with two readers on the hub) you may have this (with two readers |
|
|
foo and bar): |
|
|
- pcscd scans the USB bus and finds a new CCID reader foo and |
|
|
calls the driver |
|
|
- the CCID driver scan the USB bus and finds a new different |
|
|
reader bar |
|
|
- pcscd continues scanning the USB bus and finds the second reader |
|
|
bar and calls the driver |
|
|
- the CCID driver scan the USB bus and finds an unused reader foo. |
|
|
|
|
|
Now the reader foo will be called bar by pcscd and bar will be |
|
|
called foo. This may not be a problem if the two readers have |
|
|
the same name. But it is strange to insert a card in the |
|
|
physical reader foo and see pcscd detect the card insertion in |
|
|
the reader he calls bar. |
|
|
|
|
|
The solution is to use IFDHCreateChannelByName() instead of |
|
|
IFDHCreateChannel() and specify the USB device to use. But pcscd |
|
|
does not implement IFDHCreateChannelByName() yet. Maybe in the |
|
|
future. |
|
|
|
|
|
Another solution is to plug readers one after the other and not |
|
|
at the same time. |
|
|
|
|
|
*BSD |
|
|
libusb |
|
|
"""""" |
|
|
The libusb does not yet support USB interrupt endpoints. You will |
|
|
notice that the driver will stop working as soon as you insert a |
|
|
card in the reader. |
|
|
A new version of libusb should fix this bug. |
|
| 198 |
|
|
| 199 |
|
|
| 200 |
Licence: |
Licence: |
| 201 |
======== |
======== |
| 202 |
|
|
| 203 |
This program is free software; you can redistribute it and/or modify |
This library is free software; you can redistribute it and/or modify it |
| 204 |
it under the terms of the GNU General Public License as published by the |
under the terms of the GNU Lesser General Public License as published by |
| 205 |
Free Software Foundation; either version 2 of the License, or (at your |
the Free Software Foundation; either version 2.1 of the License, or (at |
| 206 |
option) any later version. |
your option) any later version. |
| 207 |
|
|
| 208 |
This program is distributed in the hope that it will be useful, but |
This library is distributed in the hope that it will be useful, but |
| 209 |
WITHOUT ANY WARRANTY; without even the implied warranty of |
WITHOUT ANY WARRANTY; without even the implied warranty of |
| 210 |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser |
| 211 |
General Public License for more details. |
General Public License for more details. |
| 212 |
|
|
| 213 |
You should have received a copy of the GNU General Public License |
You should have received a copy of the GNU Lesser General Public License |
| 214 |
along with this program; if not, write to the Free Software Foundation, |
along with this library; if not, write to the Free Software Foundation, |
| 215 |
Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 216 |
|
|
| 217 |
|
|
| 218 |
History: |
History: |
| 219 |
======== |
======== |
| 220 |
|
|
| 221 |
|
1.3.0 - 10 May 2007, Ludovic Rousseau |
| 222 |
|
- add support of ICCD version A and B |
| 223 |
|
- add support for (new) KOBIL mIDentity, SchlumbergerSema Cyberflex |
| 224 |
|
Access e-gate ICCD, Fujitsu Siemens Computers SmartCard USB 2A and |
| 225 |
|
SmartCard Keyboard USB 2A readers, OmniKey CardMan 4321 |
| 226 |
|
- contrib/RSA_SecurID/RSA_SecurID_getpasswd: tool to get the on time |
| 227 |
|
password also displayed on the token screen |
| 228 |
|
- contrib/Kobil_mIDentity_switch: tool to activate the CCID reader |
| 229 |
|
of the Kobil mIDentity. The tool should be started automatically |
| 230 |
|
by the udev rule on Linux |
| 231 |
|
- GemPC pinpad: localisation of the string "PIN blocked", add |
| 232 |
|
Portuguese(pt), Dutch(nl) and Turkish(tr) localisations |
| 233 |
|
- some minor bugs removed |
| 234 |
|
|
| 235 |
|
1.2.1 - 27 January 2007, Ludovic Rousseau |
| 236 |
|
- pcscd_ccid.rules: add non CCID generic (InterfaceClass: 0xFF) |
| 237 |
|
readers |
| 238 |
|
- INSTALL: document how to use --enable-udev on FreeBSD |
| 239 |
|
- move the O2Micro Oz7762 from the unsupported to the supported list |
| 240 |
|
since patches to support it are applied by default |
| 241 |
|
(O2MICRO_OZ776_PATCH) |
| 242 |
|
|
| 243 |
|
|
| 244 |
|
1.2.0 - 19 January 2007, Ludovic Rousseau |
| 245 |
|
- add support for SCARD_ATTR_VENDOR_IFD_VERSION, |
| 246 |
|
SCARD_ATTR_VENDOR_NAME and SCARD_ATTR_MAXINPUT tags used by |
| 247 |
|
SCardGetAttrib(). Read SCARDGETATTRIB.txt for more documentation |
| 248 |
|
- add support for OmniKey CardMan 5125, CardMan 1021, C3PO LTC32, |
| 249 |
|
Teo by Xiring, HP USB Smartcard Reader |
| 250 |
|
- use --enable-twinserial to build the serial reader driver |
| 251 |
|
- use --enable-udev to configure for a use with Linux udev hotplug |
| 252 |
|
mechanism. This will allow pcscd to avoid polling the USB bus |
| 253 |
|
every 1 second |
| 254 |
|
- some minor bugs removed |
| 255 |
|
|
| 256 |
|
|
| 257 |
|
1.1.0 - 11 August 2006, Ludovic Rousseau |
| 258 |
|
- support Extended APDU (up to 64KB) for readers in TPDU mode (many |
| 259 |
|
readers) or Extended APDU mode (very rare). This only works for |
| 260 |
|
T=1 cards. |
| 261 |
|
- add support for C3PO LTC31 (new version), OmniKey CardMan 3021, HP |
| 262 |
|
USB Smart Card Keyboard, Actividentity (ActiveCard) Activkey Sim, |
| 263 |
|
id3 Semiconductors CL1356D and CL1356T, Alcor Micro AU9520 |
| 264 |
|
- support the contactless interface of the SCR331-DI-NTTCOM |
| 265 |
|
- add support of FreeBSD |
| 266 |
|
- increase the USB timeout used for PIN verify/modify to not timeout |
| 267 |
|
before the reader |
| 268 |
|
- the 4-bytes value returned by CM_IOCTL_GET_FEATURE_REQUEST shall |
| 269 |
|
be encoded in big endian as documented in PCSC v2 part 10 ch 2.2 |
| 270 |
|
page 2. The applications using this feature shall be updated (to |
| 271 |
|
respect the PCSC specification). |
| 272 |
|
- use ./configure --enable-twinserial to compile and install the the |
| 273 |
|
driver for the GemPC Twin serial |
| 274 |
|
- some minor bugs removed |
| 275 |
|
|
| 276 |
|
|
| 277 |
|
1.0.1 - 22 April 2006, Ludovic Rousseau |
| 278 |
|
- add support for Axalto Reflex USB v3, SCM Micro SDI 010, Winbond |
| 279 |
|
Electronics W81E381 chipset, Gemplus GemPC Card, Athena ASE IIIe |
| 280 |
|
KB USB, OmniKey CardMan 3621 |
| 281 |
|
- support Solaris (Solaris uses a different libusb) |
| 282 |
|
- better documentation for ./configure arguments |
| 283 |
|
- improve support of Cherry XX44 keyboard for PIN verify and change |
| 284 |
|
(circumvent firmware bugs) |
| 285 |
|
- do not use LTPBundleFindValueWithKey() from pcscd since this |
| 286 |
|
function has been removed from pcscd API |
| 287 |
|
- use -fvisibility=hidden is available to limit the number of |
| 288 |
|
exported symbols |
| 289 |
|
|
| 290 |
|
|
| 291 |
|
1.0.0 - 3 March 2006, Ludovic Rousseau |
| 292 |
|
- add support for ActivCard USB Reader 3.0, Athena ASE IIIe USB V2, |
| 293 |
|
SCM Micro SCR 355, SCR 3311, SCR 3320, SCR 3340 ExpressCard54, |
| 294 |
|
Gemplus GemCore SIM Pro, GemCore POS Pro (serial and USB), GemPC |
| 295 |
|
Express (ExpressCard/54 interface), SmartEpad (v 2.0), OmniKey |
| 296 |
|
CardMan 5121 |
| 297 |
|
- greatly improve support of PIN PAD readers. We now support TPDU |
| 298 |
|
readers with T=1 cards |
| 299 |
|
- use l10n strings for the Gemplus GemPC PIN PAD (it has a screen). |
| 300 |
|
Supported languages are: de, en, es, fr, it |
| 301 |
|
- rename ACS ACR 38 in ACR 38U-CCID since the ACR 38 is a different |
| 302 |
|
reader and is not CCID compatible |
| 303 |
|
- allow to select the Power On voltage using Info.plist instead of |
| 304 |
|
recompiling the source code |
| 305 |
|
- correct bugs in the support of multi-slots readers |
| 306 |
|
- if the card is faster than the reader (TA1=97 for example) we try |
| 307 |
|
to use a not-so-bad speed (corresponding to TA1=96, 95 or 94) |
| 308 |
|
instead of the default speed of TA1=11 |
| 309 |
|
- the src/parse tool do not use the driver anymore. No need to |
| 310 |
|
update the Info.plist file first. |
| 311 |
|
- some minor bugs removed |
| 312 |
|
|
| 313 |
|
|
| 314 |
|
0.9.4 - 27 November 2005, Ludovic Rousseau |
| 315 |
|
- add support for Eutron SIM Pocket Combo, Eutron CryptoIdentity, |
| 316 |
|
Verisign Secure Token and VeriSign Secure Storage Token, GemPC |
| 317 |
|
Card (PCMCIA), SCM SCR331-DI NTTCom, SCM Micro SCR 3310-NTTCom, |
| 318 |
|
Cherry ST-1044U, Cherry SmartTerminal ST-2XXX |
| 319 |
|
- add support of PC/SC v2 part 10 CM_IOCTL_GET_FEATURE_REQUEST add |
| 320 |
|
support of FEATURE_VERIFY_PIN_DIRECT and FEATURE_MODIFY_PIN_DIRECT |
| 321 |
|
remove support of IOCTL_SMARTCARD_VENDOR_VERIFY_PIN (now |
| 322 |
|
obsoleted). A sample code is available in examples/scardcontrol.c |
| 323 |
|
- we need pcsc-lite 1.2.9-beta9 since some structures used for PIN |
| 324 |
|
pad readers are defined by pcsc-lite |
| 325 |
|
- some (bogus) cards require an extra EGT but the ATR does not say |
| 326 |
|
so. We try to detect the bogus cards and set TC1=2 |
| 327 |
|
- IFDHSetProtocolParameters(): only use a data rate supported by the |
| 328 |
|
reader in the PPS negociation, otherwise we stay at the default |
| 329 |
|
speed. |
| 330 |
|
- calculate and store the read timeout according to the card ATR |
| 331 |
|
instead of using a fixed value of 60 seconds |
| 332 |
|
- increase the read timeout if the card sends and WTX request |
| 333 |
|
- improve support of GemPC Twin and GemPC Card (serial protocol) |
| 334 |
|
- reset the device on close only if DRIVER_OPTION_RESET_ON_CLOSE is |
| 335 |
|
set. The problem was that a device reset also disconnects the |
| 336 |
|
keyboard on a keyboard + reader device. |
| 337 |
|
- use color logs |
| 338 |
|
- some minor bugs removed |
| 339 |
|
|
| 340 |
|
|
| 341 |
|
0.9.3 - 14 March 2005, Ludovic Rousseau |
| 342 |
|
- change the licence from GNU GPL to GNU Lesser GPL (LGPL) |
| 343 |
|
- add support for ACS ACR 38, Kobil KAAN Base, Kobil KAAN Advanced, |
| 344 |
|
Kobil KAAN SIM III, Kobil KAAN mIDentity, SCM Micro SCR 331, |
| 345 |
|
SCM Micro SCR 331-DI, SCM Micro SCR 335, SCM Micro SCR 3310, |
| 346 |
|
SCM Micro SCR 532, Cherry XX44 readers |
| 347 |
|
- improve communication speed with readers featuring "Automatic PPS |
| 348 |
|
made by the CCID" |
| 349 |
|
- switch the Cherry xx33 reader in ISO mode if power up in EMV mode |
| 350 |
|
fails. |
| 351 |
|
- add support of character level readers. Thanks to O2Micro for the |
| 352 |
|
patch |
| 353 |
|
- add support for the O2Micro OZ776S reader but the reader firmware |
| 354 |
|
is still bogus |
| 355 |
|
- check firmware version to avoid firmwares with bugs. You can still |
| 356 |
|
use a bogus firmware by setting DRIVER_OPTION_USE_BOGUS_FIRMWARE |
| 357 |
|
in Info.plist |
| 358 |
|
- some minor bugs removed |
| 359 |
|
|
| 360 |
|
0.9.2 - 15 August 2004, Ludovic Rousseau |
| 361 |
|
- T=1 TPDU code: |
| 362 |
|
. the work on T=1 TPDU code was possible thanks to Gemplus |
| 363 |
|
validation team who helped me test, debug and bring the code to |
| 364 |
|
an EMV validation level. Thanks to Jérôme, Jean-Yves, Xavier and |
| 365 |
|
the Gemplus readers department |
| 366 |
|
. error code was not checked correctly |
| 367 |
|
. avoid a (nearly) infinite loop when resynch are needed. |
| 368 |
|
. correctly initialise an internal value to allow more than one |
| 369 |
|
reader to work |
| 370 |
|
- multi-slots readers |
| 371 |
|
. add support for multi-slots readers. The only one I have is a |
| 372 |
|
SCM Micro SCR 331-DI with a contact and a contactless interface. |
| 373 |
|
The contactless interface may or may not work for you since the |
| 374 |
|
reader uses proprietary (undocumented) commands. |
| 375 |
|
- GemPC Twin serial reader |
| 376 |
|
. perform a command (get the reader firmware) to be sure a GemPC |
| 377 |
|
Twin (serial or pcmcia) reader is connected |
| 378 |
|
. use a dynamic timeout when reading the serial port. |
| 379 |
|
The first timeout used when detecting the reader is 2 seconds to |
| 380 |
|
not wait too long if no reader is connected. Later timeouts are |
| 381 |
|
set to 1 minute to allow long time APDU. |
| 382 |
|
- use `pkg-config libpcsclite --cflags` to locate the pcsc-lite |
| 383 |
|
header files |
| 384 |
|
- use `pkg-config --print-errors --atleast-version=1.2.9-beta5 libpcsclite` |
| 385 |
|
to test the pcsc-lite version |
| 386 |
|
- code improvements thanks to the splint tool (http://www.splint.org/) |
| 387 |
|
|
| 388 |
|
0.9.1 - 1 July 2004, Ludovic Rousseau |
| 389 |
|
- I forgot to define IFD_PARITY_ERROR in a .h file |
| 390 |
|
|
| 391 |
|
0.9.0 - 1 July 2004, Ludovic Rousseau |
| 392 |
|
- The T=1 TPDU automata from Carlos Prados' Towitoko driver is very |
| 393 |
|
limited and do not support error management mechanisms. |
| 394 |
|
I then used the T=1 TPDU automata from OpenCT (OpenSC project). |
| 395 |
|
This automata is much more powerful but still lacks a lot of error |
| 396 |
|
management code. |
| 397 |
|
I then added all the needed code to reach the quality level |
| 398 |
|
requested by the EMV standard. |
| 399 |
|
- add support for new readers: |
| 400 |
|
. Advanced Card Systems ACR 38 |
| 401 |
|
. Cherry XX33 |
| 402 |
|
. Dell keyboard SK-3106 |
| 403 |
|
. Dell smart card reader keyboard |
| 404 |
|
. SCR 333 |
| 405 |
|
- add support of multi procotol cards (T=0 and T=1) |
| 406 |
|
- the debug level is now dynamic and set in the Info.plist file (no |
| 407 |
|
need to recompile the driver any more) |
| 408 |
|
- add support for the libusb naming scheme: usb:%04x/%04x:libusb:%s |
| 409 |
|
- INSTALL: add a "configuring the driver for the serial reader |
| 410 |
|
(GemPC Twin)" part |
| 411 |
|
- use `pkg-config libpcsclite --variable=usbdropdir` so you do not |
| 412 |
|
have to use --enable-usbdropdir=DIR or --enable-ccidtwindir=DIR |
| 413 |
|
even if pcscd does not use the default /usr/local/pcsc/drivers |
| 414 |
|
- add support of IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and |
| 415 |
|
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in IFDHControl() |
| 416 |
|
- read ifdDriverOptions from Info.plist to limit the use of |
| 417 |
|
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE (idea from Peter Williams) |
| 418 |
|
- provide an example of use of SCardControl() |
| 419 |
|
IOCTL_SMARTCARD_VENDOR_IFD_EXCHANGE and |
| 420 |
|
IOCTL_SMARTCARD_VENDOR_VERIFY_PIN in example/ |
| 421 |
|
- add a --enable-pcsclite option (default to yes) so that the driver |
| 422 |
|
can be compiled for a different framework (one needing |
| 423 |
|
tokenparser.l like Solaris) |
| 424 |
|
- Reset action is power off and power on, not just power on |
| 425 |
|
- use the include files from pcsc-lite |
| 426 |
|
- add a mechanism to allow power on at 1.8V, 3V and then 5V as |
| 427 |
|
specified by ISO 7816. We still use 5V for now to avoid problems |
| 428 |
|
with non ISO compliant cards |
| 429 |
|
|
| 430 |
|
0.4.1 - 14 February 2004, Ludovic Rousseau |
| 431 |
|
- distribute missing files readers/supported_readers.txt and |
| 432 |
|
src/create_Info_plist.pl |
| 433 |
|
'make install' failed because of this. |
| 434 |
|
|
| 435 |
|
0.4.0 - 13 February 2004, Ludovic Rousseau |
| 436 |
|
- support of T=1 with TPDU readers. A lot of the T=1 code comes from |
| 437 |
|
Carlos Prados towitoko driver. |
| 438 |
|
My code is GNU GPL, his code is GNU LGPL so the global driver is |
| 439 |
|
GNU GPL |
| 440 |
|
- PPS negotiation if the reader does not do it automatically |
| 441 |
|
- add support for the Silitek SK-3105 keyboard. It's a USB device |
| 442 |
|
with multiple interfaces |
| 443 |
|
- use the create_Info_plist.pl script to generate the installed |
| 444 |
|
Info.plist from an Info.plist template and a list of supported |
| 445 |
|
readers. The Info.plist was too "complex" to maintain by hand |
| 446 |
|
since it now contains 11 entries |
| 447 |
|
- add support of IFDHCreateChannelByName to avoid wrong reader |
| 448 |
|
enumeration. This is not complete if you have multiple _identical_ |
| 449 |
|
readers. You need to use a > 1.2.0 pcsc-lite version (not yet |
| 450 |
|
released at that time) |
| 451 |
|
- build but do not install the serial ccidtwin driver by default |
| 452 |
|
since it is useless on computers without a serial port or without |
| 453 |
|
this reader for example. |
| 454 |
|
- read and write timeouts are not symmetric. write timout can be |
| 455 |
|
shorter since the reader and card is not supposed to do anything |
| 456 |
|
before receiving (write) a command |
| 457 |
|
- do not try to find usb.h and other libusb files if |
| 458 |
|
--disable-libusb is used. Needed if you only want to build the |
| 459 |
|
serial driver. Thanks to Niki Waibel for the patch |
| 460 |
|
- add a --enable-ccidtwindir argument to ./configure to specify the |
| 461 |
|
serial GemPC Twin installation directory |
| 462 |
|
- debug and code improvements and simplifications |
| 463 |
|
|
| 464 |
0.3.2 - 4 November 2003, Ludovic Rousseau |
0.3.2 - 4 November 2003, Ludovic Rousseau |
| 465 |
- src/commands.c: correct a stupid bug that occurs with an APDU with |
- src/commands.c: correct a stupid bug that occurs with an APDU with |
| 466 |
2 bytes response. |
2 bytes response. |
| 471 |
- move LTC31 reader from unsupported to supported reader list. It |
- move LTC31 reader from unsupported to supported reader list. It |
| 472 |
was my f ault since in used odd INS byte in my test applet and odd |
was my f ault since in used odd INS byte in my test applet and odd |
| 473 |
INS bytes are forbidden by ISO 7816-4 ch. 5.4.2 Instruction byte. |
INS bytes are forbidden by ISO 7816-4 ch. 5.4.2 Instruction byte. |
| 474 |
Thanks to Josep Moné s Teixidor for pointing the problem. |
Thanks to Josep Moné s Teixidor for pointing the problem. |
| 475 |
- src/commands.c: comment out the automatic GET RESPONSE part. I |
- src/commands.c: comment out the automatic GET RESPONSE part. I |
| 476 |
don't think it should be in the driver. Maybe in pcscd instead? |
don't think it should be in the driver. Maybe in pcscd instead? |
| 477 |
|
|
| 482 |
- add --enable-libusb=PATH option is your libusb is not installed in |
- add --enable-libusb=PATH option is your libusb is not installed in |
| 483 |
/usr or /usr/local |
/usr or /usr/local |
| 484 |
- honor DESTDIR in install rules (closes [ #300110 ]). Thanks to |
- honor DESTDIR in install rules (closes [ #300110 ]). Thanks to |
| 485 |
Ville Skyttä for the patch. |
Ville Skyttä for the patch. |
| 486 |
- src/ccid.c: do not switch the GemPC Key and GemPC Twin in APDU |
- src/ccid.c: do not switch the GemPC Key and GemPC Twin in APDU |
| 487 |
mode since it also swicth in EMV mode and may not work with non |
mode since it also swicth in EMV mode and may not work with non |
| 488 |
EMV cards |
EMV cards |
| 512 |
- First public release |
- First public release |
| 513 |
|
|
| 514 |
|
|
| 515 |
Bibliography: |
References: |
| 516 |
============= |
=========== |
| 517 |
|
|
| 518 |
[1] http://www.usb.org/developers/devclass_docs/ccid_classspec_1_00a.pdf |
[1] http://www.usb.org/developers/devclass_docs/ccid_classspec_1_00a.pdf |
| 519 |
[2] http://www.gemplus.com/products/gempc433/ |
[2] http://www.gemplus.com/products/gempc433/ |
| 520 |
[3] http://www.gemplus.com/products/gempckey/ |
[3] http://www.gemplus.com/products/gempckey/ |
| 521 |
[4] http://www.gemplus.com/products/gempctwin/ |
[4] http://www.gemplus.com/products/gempctwin/ |
| 522 |
[5] http://www.omnikey.com/en/produkt_details.php3?produkt=1&variante=47 |
[5] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=21 |
| 523 |
[6] http://www.scmmicro.com/security/SCR331.html |
[6] http://www.scmmicro.com/security/SCR331.html |
| 524 |
[7] http://www.scmmicro.com/security/SCR335.html |
[7] http://www.scmmicro.com/security/SCR335.html |
| 525 |
[8] http://www.c3po.es/pcsc.htm |
[8] http://www.c3po.es/ltc31.html |
| 526 |
[9] http://www.scmmicro.com/security/SPR532.html |
[9] http://www.scmmicro.com/security/SPR532.html |
| 527 |
|
[10] http://www.activcard.com/products/usb_reader.html |
| 528 |
|
[11] http://www.scmmicro.com/security/SCR331-DI.html |
| 529 |
|
[12] http://www.silitek.com/prod/getProduct.do?xml_id=4_2&menu_id=4_2_8&cid=1_8_5 |
| 530 |
|
[13] http://www.c3po.es/ltc32.html |
| 531 |
|
[14] http://www.c3po.es/tltc2usb.html |
| 532 |
|
[15] http://www.scmmicro.com/security/SCR333.html |
| 533 |
|
[16] http://www.acs.com.hk/Product_Readers.asp?productID=107&PCate=Products_PC_Linked_SmartCard_Readers |
| 534 |
|
[17] http://www.scmmicro.com/support/pcs_product_drivers.html |
| 535 |
|
[18] http://www.cherrycorp.com/english/advanced-line/advanced-line_smartboard_g83-6744.htm |
| 536 |
|
[19] http://www.kobil.com/e/products/smartcard/kaan-base.php |
| 537 |
|
[20] http://www.kobil.com/e/products/smartcard/kaan-advanced.php |
| 538 |
|
[21] http://www.kobil.com/d/products/smartcard/kaansim3.php |
| 539 |
|
[22] http://www.kobil.com/e/products/index.php?s=midentity |
| 540 |
|
[23] http://www.ntt.com/jpki/SCR331DI.html |
| 541 |
|
[24] http://www.verisign.co.uk/products-services/security-services/unified-authentication/usb-tokens/ |
| 542 |
|
[25] http://www.eutron.com/simpocket.asp |
| 543 |
|
[26] http://www.cryptoidentity.eutron.com/eng/home.asp |
| 544 |
|
[27] http://www.cherry.de/english/advanced-line/advanced_smartterminal_st-1044u.htm |
| 545 |
|
[28] http://www.ntt.com/jpki/scr3310.html |
| 546 |
|
[29] http://www.asedrive.com/product.asp?pid=1 |
| 547 |
|
[30] http://www.scmmicro.com/security/SCR3310.html |
| 548 |
|
[31] http://scmmicro.com/security/SCR3311.html |
| 549 |
|
[31] http://scmmicro.com/security/SCR3320.html |
| 550 |
|
[32] http://www.smartepad.com.br/ |
| 551 |
|
[33] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=37 |
| 552 |
|
[34] http://www.scmmicro.com/security/SCR3340.html |
| 553 |
|
[35] http://www.cherry.de/deutsch/advanced-line/advanced_smart_terminal_st-2000u.htm |
| 554 |
|
[36] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=29 |
| 555 |
|
[37] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=33 |
| 556 |
|
[38] http://www.reflexreaders.com/Products/reflex_usbnew.html |
| 557 |
|
[39] http://www.scmmicro.com/security/SDI_010.html |
| 558 |
|
[40] http://www.winbond.com.tw/E-WINBONDHTM/partner/b_2_e_4.htm |
| 559 |
|
[41] http://www.gemplus.com/products/gempc_card/ |
| 560 |
|
[42] http://www.asedrive.com/product.asp?pid=2 |
| 561 |
|
[43] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=31 |
| 562 |
|
[44] http://h18000.www1.hp.com/products/quickspecs/12346_na/12346_na.HTML |
| 563 |
|
[45] http://www.id3semiconductors.com/produits/cl1356D.htm |
| 564 |
|
[46] http://www.alcormicro.com/products_detail.php?main_id=8&p_id=21 |
| 565 |
|
[47] http://www.tai-hao.com/english/products_detail.php?main_id=4&second_id=13&p_id=53&now_rows=1 |
| 566 |
|
[48] http://www.id3semiconductors.com/produits/cl1356T.htm |
| 567 |
|
[49] http://www.omnikey.com/index.php?id=products&tx_okprod_pi1[product]=48 |
| 568 |
|
[50] http://www.rsasecurity.com/products/securid/datasheets/SID800_DS_0205.pdf |
| 569 |
|
[51] http://www.omnikey.com/?id=products&tx_okprod_pi1[product]=39 |
| 570 |
|
[52] http://www.teobyxiring.com/ |
| 571 |
|
[53] http://www.fujitsu-siemens.com/solutions/business_solutions/security/security_products/smartcase_scr_usbex.html |
| 572 |
|
[54] http://www.fujitsu-siemens.com/solutions/business_solutions/security/security_products/smartcase_kbpc_cx.html |
| 573 |
|
[55] http://omnikey.aaitg.com/?id=products&tx_okprod_pi1[product]=50 |
| 574 |
|
[56] http://omnikey.aaitg.com/?id=products&tx_okprod_pi1[product]=41 |
| 575 |
|
[57] http://www.gi-de.com/portal/page?_pageid=42,126834&_dad=portal&_schema=PORTAL |
| 576 |
|
[58] http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=26&IDFamiglia=3 |
| 577 |
|
[59] http://www.eutronsec.com/infosecurity/Contents/ProductLine/Details.aspx?IDProd=62&IDFamiglia=39 |
| 578 |
|
|
| 579 |
$Id$ |
$Id$ |
| 580 |
|
|
Parent Directory
| 
Revision Log
| 
Patch