multiclass Magnetic Stripe Reader APPLICATION NOTE Barranca Parkway Irvine, CA USA June 11, 2010 AN0134, Rev A.1

Transcription

1 15370 Barranca Parkway Irvine, CA USA multiclass Magnetic Stripe Reader APPLICATION NOTE June 11, 2010 AN0134, Rev A HID Global Corporation. All rights reserved. HID GLOBAL, HID, the HID logo, multiclass and iclass are the trademarks or registered trademarks of HID Global Corporation, or its licensors, in the U.S. and other countries.

2 Contents 1 Overview Credential Compatibility Reversible Mounting Plate Control Panel Interface Wiegand Clock-and-Data Migration Wiegand to Clock-and-Data Migration HID Dorado 644 Reader Migration Credential Read Priorities FAQ... 8 Appendix A Timing Example...9 Magnetic Stripe with Data Manipulation... 9 Magnetic Stripe without Data Manipulation (Pass-Through) iclass and Prox with no Magnetic Stripe Read Appendix B Data Processing Background, Natural ANSI Data Encoding Configuration without Data Manipulation (Pass-Through) Configuration with Data Manipulation ANSI/10 and ANSI/12 for 26-bit and 34-bit Wiegand Output Contacts List of Figures Figure 1 - Magnetic Stripe Data Manipulation... 9 Figure 2 - Magnetic Stripe Data Pass-through without Manipulation Figure 3 Magnetic Stripe without Data Manipulation Figure 4 - iclass and Prox with no Magnetic Stripe Read List of Tables Table 1 Credential Technology - Reader Output Configuration... 5 Table 2 Dorado 644 Reader Compatibility... 6 Table 3 Pass-through Data Behavior Page 2 of 16 June 11, HID Global Corporation. All rights reserved

3 1 Overview The multiclass Magnetic Stripe Reader is a multi-technology combination iclass, HID Prox and magnetic stripe reader offering both streamlined credential migration, as well as extended multi-credential compatibility. Additionally, the reader provides compatibility with both primary MHz iclass cards and temporary visitor badges with magnetic stripe only. This application note provides integration suggestions. The multiclass Magnetic Stripe Reader is available in two models. Model Base Part Number RMK40 RMPK40 623xC MHz iclass and Magstripe MHz iclass, HID Prox, Magstripe 1.1 Credential Compatibility Following is the multiclass Magnetic Stripe RMK40 default credential compatibility MHz iclass, Secure Access Control Application MHz 14443A CSN (MIFARE, DESFire) Magnetic Stripe, Various Data Applications (see table 2) The default credential compatibility for the multiclass Magnetic Stripe RMPK40 adds the following: 125 khz HID Prox, AWID Proximity Access Control Applications June 11, 2010 Page 3 of HID Global Corporation. All rights reserved.

4 2 Reversible Mounting Plate The multiclass Magnetic Stripe RMK40 utilizes a patent pending reversible mounting plate. Provided are the following features: Mount the magnetic stripe either on the left or right side of the iclass reader. This option is field selectable and therefore only requires one part number for ordering. On most formats, the reader automatically detects the direction of the magstripe swipe and adjusts data accordingly. Note: Some formats (for example, raw formats) do not have the appropriate start bits to detect the direction of the swipe. Depending on the direction of the swipe, different data is sent to the control panel. The standard orientation of the magstripe is right of the iclass reader. Remove the magnetic stripe backplate and replace with a standard RK40 backplate after migration from magnetic stripe cards is complete. Simply disconnect the module magnetic stripe connector on the reader back and your multiclass Magnetic Stripe reader (RMPK40 or RMK40) turns becomes a Keypad reader (RPK40 or RK40) without any additional reconfiguration. 3 Control Panel Interface 3.1 Wiegand For Wiegand configurations, the entire access control data format is outputted from the reader, just as it is from non-magnetic stripe iclass and HID Prox readers. For example, when the reader reads an iclass Corporate 1000 credential, containing 35 bits of access control information, the reader will output out the D0 and D1 Wiegand lines the full 35 bits access control data format. 3.2 Clock-and-Data When the panel only accepts a clock-and-data interface, understanding the credential population ensures a successful credential migration. In addition, understanding how the reader interprets the credentials data is important to credential migration. Take the example when a site chooses to match the credential data to the panel between all technologies of the credential populations (magnetic stripe, HID Prox, and iclass, or a combo credential). 125 khz HID Prox reader - processes and outputs HID Prox access control credentials in the same manner as HID Prox readers. Some HID Prox credential formats output the entire access control format without re-formatting. Others are processed by the reader (for instance, adding an additional bit for 5-bit BCD output) and send to the panel. Magnetic Stripe reader - Similar to HID Prox, either outputs the raw data bits from the credential or formats the data per the supported formats MHz reader - The reader never reformats credential data. All bits programmed onto the credential are output, as is, to the access control panel. Note: When outputting data over a clock-and-data interface, by default the iclass reader does not affix leading or trailing 0 s to data from iclass credentials. Additionally, the iclass reader never interprets non-bcd data as BCD. Furthermore, the iclass reader does it insert beginning, field separator, end and LRD sentinels. Page 4 of 16 June 11, HID Global Corporation. All rights reserved

5 4 Migration 4.1 Wiegand to Clock-and-Data Migration Output data from credentials to access control panels utilizing either Wiegand or clock-and-data physical signal interfaces. Regardless of the credential, output the data over the single Wiegand or clock-and-data panel interface. The following table suggests the reader output configuration for the newly installed credential technology. If moving from Wiegand to clock-and-data, ensure panels are able to process data from the magnetic stripe credential (for example, ABA encoded) over a Wiegand physical signal interface. Table 1 Credential Technology - Reader Output Configuration iclass Credential Data Encoding Wiegand Data Encoding Format Examples Corporate 1000, H bit, H bit Recommended Output Wiegand ANSI Data Encoding (BCD) Clock-and-Data H10320 clock-and-data Wiegand migration is the recommended reader output for the following reasons: Compatibility Wiegand is most compatible with the majority of iclass credential encoding. Flexibility Majority of third party applications default to Wiegand (not BCD) encoded data. June 11, 2010 Page 5 of HID Global Corporation. All rights reserved.

6 HID Dorado 644 Reader Migration The output for magnetic stripe credentials is dependent upon the reader configuration chosen at time of order. For full reader ordering information, see the HID Global MHz How to Order Guide ( The following table depicts compatibility with the HID Dorado 644 reader. For those available configurations shown, listed is a configuration card number. Note the configuration card only modifies the magstripe output; the configuration output does not modify other configurations of the reader. Contact Technical Support for ordering a configuration card. Table 2 Dorado 644 Reader Compatibility Dorado 644 Reader Switch Position Magstripe Reader Position & Credential Read Direction Any Orientation Yes Yes Description Available Configuration Card 0 Northern credential to 32 bit Wiegand, (FC=16 bits. ID=16 bits) 1 ABA credential, all bits raw data clock-and-data Yes No 2 Reserved for Custom Prom No N/A N/A 3 ABA credential all bits raw data, except leading 0 s stripped clock-and-data 4 ABA credential all ABA digits, plus 10 leading & 10 trailing 0 s clock-and-data 5 ABA credential all ABA digits, plus 10 leading & 10 trailing 0 s - Wiegand 6 ABA credential convert last 4 ABA digits in first field to binary and output as 26 bit Wiegand 7 ABA credential convert last 7 ABA digits in first field to binary and output as 26 bit Wiegand No N/A N/A Yes Yes Yes Yes Yes Yes Yes Yes 8 EMPI credential to 26 bit Wiegand Yes Yes 9 EMPI credential to 34 bit Wiegand Yes Yes A B C D E ABA credential, convert last 9 ABA digits in first field to binary and output as 34 bit Wiegand Basic MS raw output - all bits Wiegand in order received ABA to 26 bit Wiegand (FC=8 bits, ID=16 bits) ABA to 34 bit Wiegand(FC=16 bits ID=16 bits) ABA to 34 bit Wiegand (Mercury compatible) (FC=12 bits, ID=20 bits) Yes Yes Yes No Yes Yes Yes Yes Yes Yes Page 6 of 16 June 11, HID Global Corporation. All rights reserved

7 Dorado 644 Reader Switch Position Description Available Configuration Card F ABA to 26 bit Wiegand Yes Yes Magstripe Reader Position & Credential Read Direction Any Orientation For all configurations, the multiclass Magnetic Stripe reader reads the data from the credential and outputs it in accordance with the descriptions shown. Output configurations that perform data processing (right column in Table 2 Dorado 644 Reader Compatibility) enables the reversible magnetic reader mounting plate (for Installers) and up and down credential swipes (for the end-user). For more information on data processing, see Appendix B. 5 Credential Read Priorities To control the reading of multi-technology credentials, the multiclass Magnetic Stripe Reader includes a configuration parameter referred to as Technology Priority. The priority modes are useful when two technologies contain different data (for example, iclass Corporate 1000 versus HID Prox 26-bit) or when read-range performance is different. The possible priority configuration settings are as follows: MHz (iclass) Priority (Default) 125 khz (Prox) Priority No Priority With iclass and HID Prox programmed, the same principle exists for tri-technology, iclass / Prox / Magnetic Stripe readers. The following is the reader behavior. With priority set to iclass (default) - The reader reports the magnetic stripe data when sliding the credential through the magstripe slot. There is a slight delay between sliding the credential through the slot and the reader responding with an audio/visual indication. iclass data is reported if the credential is placed near the magstripe slot, but not in the slot. No Prox data is reported. With no priority set - iclass data and then Prox data is reported if the credential is near the magstripe slot, but not in the slot. Generally, when sliding the credential through the magstripe slot, reported is magnetic stripe data. If sliding the credential through the magstripe slot at a slower rate of speed (~1.0 second credential read), iclass data is reported first and then magstripe data. With priority set to Prox - The reader reports magnetic stripe data when sliding the credential through the magstripe slot. There is a slight delay between sliding the credential through the slot and the reader responding with an audio/visual indication. Reported is Prox data if the credential is placed near the magstripe slot, but not in the slot. No iclass data is reported. June 11, 2010 Page 7 of HID Global Corporation. All rights reserved.

8 6 FAQ Q. What configurations work with VertX and Edge controllers? A Setup product configuration to any ABA to Wiegand conversion. Q. When using dual-tech magstripe / iclass or magstripe / Prox credentials, what steps should I take in system programming to ensure successful access for users in the building? A Due to credential, reader and user variables, it is advisable that all credential numbers (magstripe / iclass or Prox) are valid access control numbers in the system. Q. When using tri-tech magstripe / iclass / Prox credentials, what system programming steps should I take to ensure successful access for users in the building? A Due to credential, reader, panel and user variables, when accepting multiple access control numbers during a single credential read, it is advisable that all three credential numbers (magstripe, iclass and Prox) are valid access control numbers in the system. Additionally, if contactless (iclass and Prox) technologies are programmed with different numbers (depending on reader configuration) the reader sees varying output. For more information, see the multiclass Operation and Configuration application note ( uration_(an0122)_an_en.pdf). Q. Does the reader have UL approval? A The reader has UL approval for the Wiegand interface. UL does not currently evaluate the clock-and-data output. Therefore, clock-and-data configurations are not UL listed. This is the same for all iclass readers. Additionally, UL offers additional certification that covers an official outdoor use. Outdoor use is currently in evaluation at UL, but not supported currently. Q. Can I sell this reader worldwide? A The only current radio certifications are for North America. Worldwide Regulatory approval of the reader is pending and expected in Q3 this year. Q. Is the reader outdoor rated? A HID performed a standard set of tests for outdoor suitability. HID Global s internal tests showed comparable results to the HID Dorado 644 reader. To formally certify the reader suitable for outdoor usage, two certifications are pending, Ingress Protection and UL outdoor use. Page 8 of 16 June 11, HID Global Corporation. All rights reserved

9 Appendix A Timing Example Integrating multiclass Magnetic Stripe Readers with multi-technology credentials may prove costly, but operationally feasible when migrating credential technology at a site. This section summarizes reader behavior characteristics when using multi-technology credentials. Consider these characteristics when integrating the reader to access control panels. It is important that different reader configurations, when mixed with multi-technology credentials, produce varying reader output to the panel. Analyzed are three reader configurations: Magnetic Stripe Data Manipulation (Table 2 Dorado 644 Reader Compatibility, far right column = Yes) Magnetic Stripe Data Pass-through without Manipulation (Table 2 Dorado 644 Reader Compatibility, far right column = No) iclass and Prox with no Magnetic Stripe Read To aide the timing explanations, provided are oscilloscope captures documenting credential data and timing. Magnetic Stripe with Data Manipulation When utilizing a configuration with Magnetic Stripe Data Manipulation, see the following reader behaviors. Slide the multi-technology access control credential (iclass / Magstripe) through the magstripe reader at a slow rate of speed (~1.0 second credential read). The result is o iclass Access Control data is reported and, o Magnetic Stripe data is not reported. Figure 1 - Magnetic Stripe Data Manipulation June 11, 2010 Page 9 of HID Global Corporation. All rights reserved.

10 Slide multi-technology access control credential (iclass / Magstripe) through the magnetic stripe reader at a fast rate of speed (~0.5 second credential read). The result is o iclass Access Control data is not reported and, o Magnetic stripe data is reported. Figure 2 - Magnetic Stripe Data Pass-through without Manipulation Page 10 of 16 June 11, HID Global Corporation. All rights reserved

11 Magnetic Stripe without Data Manipulation (Pass-Through) When utilizing a configuration without Magnetic Stripe Data Manipulation, seen are the following reader behaviors. Slide the multi-technology access control credential (iclass / Magstripe) through the magnetic stripe reader at a slow rate of speed (~1.0 second credential read). As shown in Figure 3 Magnetic Stripe without Data Manipulation, there is a 116ms delay between the two data reports. The result is o iclass Access Control Data is reported first and, o Magnetic Stripe data is reported second. Figure 3 Magnetic Stripe without Data Manipulation June 11, 2010 Page 11 of HID Global Corporation. All rights reserved.

12 iclass and Prox with no Magnetic Stripe Read When utilizing a configuration without Magnetic Stripe Data Manipulation, but not reading the magnetic stripe data, seen are the following reader behaviors. Place the Tri-technology Access Control Credential (iclass / Prox / Magstripe) near the magstripe slot, but not in the slot. o First, reported is the iclass HID Access Control data and o Second, reported is the Prox Access Control Data. Note: The default configuration of the reader is iclass priority. The credential was encoded with two different access control numbers. Figure 4 - iclass and Prox with no Magnetic Stripe Read Page 12 of 16 June 11, HID Global Corporation. All rights reserved

13 Appendix B Data Processing The multiclass Magnetic Stripe reader data processing is identical to Dorado readers. The following provides a description of the different processing modes. Background, Natural ANSI Data Encoding ANSI (American National Standards Institute) format for magnetic stripe encoding while natural refers to a code of indefinite length. The early format for this encoding, ABA (American Bankers Association) referred to a specific 37-digit format. Internationally, the format is called ISO (International Standards Organization). Transmit the natural ANSI format credential data to the host system in either Wiegand or clock-and-data bit formats. Note: This is not 26-bit or 34-bit Wiegand, just that the ones and zeros are transmitted on the standard Wiegand data O and data 1 outputs (the physical wiring link and signals between reader and panel). Configuration without Data Manipulation (Pass-Through) Detailed in the following table is behavior for each pass-through data format. Table 3 Pass-through Data Behavior Dorado 644 Reader Switch Position Description Behavior 1 ABA credential, all bits raw data clock-and-data Accepts any ANSI-format credential and reports in clock-and-data format. 4 ABA credential all ABA digits, plus 10 leading & 10 trailing 0 s clock-and-data 5 ABA credential all ABA digits, plus 10 leading & 10 trailing 0 s - Wiegand B Basic MS raw output - all bits Wiegand in order received Accepts any ANSI-format credential and reports in clock-and-data format with addition of 10 leading and 10 trailing 0 s. Accepts any ANSI-format credential and reports in Wiegand format with addition of 10 leading and 10 trailing 0 s. Accepts any ANSI-format credential and reports in Wiegand format June 11, 2010 Page 13 of HID Global Corporation. All rights reserved.

14 Configuration with Data Manipulation Behavior for each data format with data manipulation is detailed in the below table. Dorado 644 Reader Switch Position Description Behavior 0 Northern credential to 32 bit Wiegand, (FC=16 bits. ID=16 bits) 6 ABA credential convert last 4 ABA digits in first field to binary and output as 26 bit Wiegand 7 ABA credential convert last 7 ABA digits in first field to binary and output as 26 bit Wiegand Northern credential data is converted to 32 bits and output over Wiegand. After the start sentinel, converts the last 4 digits of the first field to binary (16 bits), removes most significant 2 bits, and outputs as 26 bits Wiegand. If the first field does not have 7 digits, 0 s are added to the beginning of the number. After the start sentinel, converts the last 7 digits of the first field to binary (28 bits), removes most significant 2 bits, and outputs as 26 bits Wiegand. If the first field does not have 7 digits, 0 s are added to the beginning of the number. 8 EMPI credential to 26 bit Wiegand EMPI data is output as 26 bits Wiegand. If facility code is > 255, facility code is truncated to least significant 8 bits. 9 EMPI credential to 34 bit Wiegand EMPI data is output as 34 bits Wiegand. A ABA credential, convert last 9 ABA digits in first field to binary and output as 34 bit Wiegand After the start sentinel, converts the last 9 digits of the first field to binary (36 bits), removes most significant 2 bits, and outputs as 34 bits Wiegand. If the first field does not have 7 digits, 0 s are added to the beginning of the number. C ABA to 26 bit Wiegand (FC=8 bits, ID=16 bits) Accepts both 10 and 12-digit ANSI cards. The first 5 (or 6) digits are reported as the facility code and the last 5 (or 6) digits are reported as the ID. See below section ANSI/10, ANSI/12 for more information. D ABA to 34 bit Wiegand (FC=16 bits ID=16 bits) Accepts both 10 and 12-digit ANSI cards. The first 5 (or 6) digits are reported as the facility code and the last 5 (or 6) digits are reported as the ID. See below section ANSI/10, ANSI/12 for more information. E ABA to 34 bit Wiegand (Mercury compatible) (FC=12 bits, ID=20 bits) Accepts both 10 and 12-digit ANSI cards. The first 5 (or 6) digits are reported as the facility code and the last 5 (or 6) digits are reported as the ID. See below section ANSI/10, ANSI/12 for more information. F ABA to 26 bit Wiegand Accepts both 10 and 12-digit ANSI cards. The first 5 (or 6) digits are reported as the facility code and the last 5 (or 6) digits are reported as the ID. See below section ANSI/10, ANSI/12 for more information. Page 14 of 16 June 11, HID Global Corporation. All rights reserved

15 ANSI/10 and ANSI/12 for 26-bit and 34-bit Wiegand Output ANSI-coded credential data is output in either 26-bit or 34-bit Wiegand. This method lets the owner or dealer select the site code and encode credentials locally. The credentials must have exactly ten digits consisting of two five-digit fields with no field separator (ANSI/10). Alternatively, the cards must have exactly twelve digits consisting of two six-digit fields with no field separator (ANSI/12). Pad the site and sequential numbers on the left with zeros to make exactly five (ANSI/10) or six digits (ANSI/12). Example of site code 123 with ID sequence number 6789 in each format: Format Name ANSI/10 ANSI/12 Format sssssxxxxx ssssssxxxxxx Example Where s = Site Code Digit and x = Sequence (ID) Number Digit for 34-bit Wiegand format output, the site code can be no larger than 65,535 and the sequential (ID) number can be no larger than 65,535. Larger numbers on a credential, if issued, are reported as 65,535. The 26-bit Wiegand format output is identical to the 34-bit Wiegand format output, except that the site code can be no larger than 255. Site codes from 256 to 65,535 will be truncated to the range (eight bits reported), while site codes over 65,535 will be reported as site code 255. June 11, 2010 Page 15 of HID Global Corporation. All rights reserved.

16 Contacts North America Barranca Parkway Irvine, CA USA Phone: Support: Fax: Europe, Middle East and Africa Phoenix Road Haverhill, Suffolk CB9 7AE England Phone: +44 (0) Support: +44 (0) Fax: +44 (0) Asia Pacific 19/F 625 Kings Road North Point, Island East Hong Kong Phone: Support: Fax: Page 16 of 16 June 11, HID Global Corporation. All rights reserved