DATE : JUL. 25 TH, 2014 APPROVAL SHEET CUSTOMER : Description MODEL NO. : Slim Motor Driven Magnetic & IC Card Reader : TTM-M610S-D0 SUPPLIER DRAWER CHECKED APPROVED 2014... 2014... 2014... CUSTOMER APPROVED 2014... 2014... 2014...
0.1 2 OF 44 2014.07.25 CARD FORMAT MS ISO 7810 ID-1 ISO 7811(TRACK1,TRACK2,TRACK3) Read Capable only Hico/Loco Capable F2F Reading Method 500,000 Pass Capable(4,000,000 Pass Option) IC ISO/IEC 7816 Contact Landing Type(Sam socket 1 Option) EMV2000 Ver 4.3 300,000 Pass Capable Feeding Speed 210mm/sec+-10% Shutter Width Sensor Only INTERFACE RS-232C, USB +12Vdc +-10%, 2A POWER WEIGHT DEMENSION +5Vdc +-10% Ripple : Less than 120m Vp-p(12Vdc) Less Than 50m Vp-p(5Vdc) 400 g less than 86mm(W) * x 43mm(H) x162mm (L) (Anti-Skimming Same Size) 86mm(W)* : Without Base Frame Sub & Front Knob width 1) Add Only Base Frame Sub Dim : 89.4mm 2) Add Base Frame Sub & Front Knob Dim : 97mm 3) Add Only Front Knob Dim : 93.4mm ENVIRONMENT CONDITION Operating Temperature : 5 ~ 50 Operating Humidity : 20 ~ 80 RH Storage Temperature : -20 ~ 70 Storage Humidity : 20~80 RH
0.1 3 OF 44 2014.07.25 SPECIFICATION MAGNETIC READER & IC READER Model : TTM-M610S-D0 DEPT. DRAWER APPROVAL & CONFIRMATION APPROVAL BY DEPT. APPROVAL BY
0.1 4 OF 44 2014.07.25 Contents SUMMARY...8 Construction...8 2.1 Flow...8 2.2. Summarized System Construction...8 H/W INTERFACE... 11 3.1. POWER CONNECTOR(PWR1) : YEONHO, 20017WR-04... 11 3.2. RS-232 CONNECTOR(RS232C1) : YEONHO, 12502WR-10A00... 11 3.3. USB CONNECTOR(USB1) : POLYPLASTICS CO., LTD, CN442... 12 3.4. RF CONNECTOR(RF1) : YEONHO, 12505WR-04A00_OPTIONAL SPEC... 12 3.5. SPARE CONNECTOR(SPR1) : YEONHO, 12505WR-05A00_OPTIONAL SPEC... 13 3.6. MS READ CONNECTOR(MSR1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B... 13 3.7. MS READ CONNECTOR(MSR4) : YEONHO, 05004HR-H08ED_OPTIONAL SPEC... 14 3.8. PATH SENSOR CONNECTOR(PS1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B... 14 3.9. MOTOR CONNECTOR(MOT1) : YEONHO, 12505WR-02A00... 15 3.10. IC SOLENOID CONNECTOR(IS1) : YEONHO, 12505WR-02A00... 15 3.11. IFM CONNECTOR(IFM1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B... 16 3.12. IFM POWER CONNECTOR(IFM_PWR1) : YEONHO, 12505WR-02A00_NOT USED... 16 3.13. IFM DEBUG CONNECTOR(IFM_DEBUG) : YEONHO, 12505WR-05A00_NOT USED... 17 3.14. SHUTTER CONNECTOR(SH1) : KORYO INDUSTIRAL, CO.,LTD, FPC1.0-SMT11-10WS-1B... 17 3.15. DIP SWITCH (SW1) and Working TABLE : KSD05S... 18 Communication Control Method & Configuration... 19 4.1. Transmission Control Method... 20 4.2. Transmission Control Characters... 20 4.3. Text Configuration... 20 4.4. Cancel of Command... 20 COMMUNICATION PROTOCOL SEQUENCE... 19 5.1. Regular Operations... 19 5.2. Irregular Operations ( Communications Errors )... 220 COMMUNICATION PROTOCOL DESCRIPTIONS... 231 6.1. Format Details... 231 6.1.1. Command Format... 231
0.1 5 OF 44 2014.07.25 6.1.2. Positive Response Format... 231 6.1.3. Negative Response Format... 231 6.2. Command Parameter Code List... 231 6.3. Status Code List... 243 6.4. Error Code List... 254 6.5. IC Error Code List... 26 COMMUNICATION DETAILS... 275 7.1. INITIALIZE ( cm = 30h )... 27 7.2. STATUS REQUEST ( cm = 31h )... 28 7.3. ENTRY ( cm = 32h )... 29 7.4. CARD CARRY ( cm = 33h )... 28 7.5. RETRIEVE ( cm = 34h )... 28 7.6. MAGNETIC CARD READ ( cm = 36h )... 29 7.7. ENABLE / DISABLE ( cm = 3Ah )... 320 7.8. RETRY ( cm = 3Eh )... 331 7.9. GET REVISION ( cm = 41h )... 331 7.10. Retract Counter Command ( cm = 43h )... 342 7.11. IC Card Power ( cm = 38h )... 33 7.12. IC Card Direct ( cm = 39h )... 34 7.13. IC Memory Card Direct ( cm = 49h )... 35 7.14. Life Counter Read Command ( cm = 63h )... 36 7.15. MSRW Reset Command ( cm = 66h )... 37 7.16. Sensor Level Read Command ( cm = 60h )... 38 7.17. LED Control Command ( cm = 35h )... 38 7.17. Decoder Direct Command ( cm = 73h )... 40 DIMENSION... 41 8-1 STANDARD DIMENSION 1... 41 8-2 STANDARD DIMENSION 2... 42 8-3 STANDARD DIMENSION 3... 43 8-4 STANDARD DIMENSION 4... 44
0.1 6 OF 44 2014.07.25
0.1 7 OF 44 2014.07.25 Management of History Version Date Contents 비고제품 Rev 0.1 2014.07.25 ISSUE Proto Rev0.1
0.1 8 OF 44 2014.07.25 SUMMARY This product is MOTORIZED MS/IC CARD READER. This has been designed to meet ISO 7810, ISO 7811(MSRW), and ISO 7816(IC CARD) standard. And IC part acquired certification of EMV2000 Ver.4.3. Construction 2.1 Flow FORWARD Card Insert and Eject CARD READ PART IC CONTACT PART Card Capture BACKWARD 2.2. Summarized System Construction CARD READ MCU IC CONTROL IC CONTACT DC +12 MAIN B/D DC MOTOR & SOLENOID USB & RS-232C
0.1 9 OF 44 2014.07.25 2.3. Specifications 2.3.1 Card Standard ISO 7810 ID-1 2.3.2 Magnetic Card 2.3.2.1 Mag-stripe Standard ISO 7811 (Track 1, Track 2, Track3) 2.3.2.2 R/W Read Only (Bi-directional capability (insert/pull out) 2.3.2.3 Coercivity Hi-co/Lo-co Capable F2F Reading Method 2.3.2.4 Card Speed 210mm/s+-10% capability (at flat card) 2.3.2.5 Warped Card Ability to Read - long side : 4mm Short side : 2mm 2.3.3. Shutter The shutter automatically opens and closes when a card is inserted. The shutter accepts a card, of which width should be longer than 53.5mm. The main purpose of shutter is blocking the dust from outside and preventing someone to insert a tolling in order to cheat the card reader 2.3.4. Interface RS-232C or USB 2.3.5. Power Consumption 2.3.5.1. Input Voltage +12V DC ± 10%, +5Vdc±10% 2.3.5.2. Ripple Less Than 120 m Vp-p(12Vdc) Less Than 50m Vp-p(5Vdc) 2.3.5.3. Operating 1500mA less 2.3.6 Electrostatic Discharge 2.3.6.1. Contact discharge ±9kV (standard : ±4 kv) 2.3.6.2. Air discharge ±9kV (standard : ±8 kv) 2.3.7. Life 2.3.7.1. Unit life 1,000,000 passes 2.3.7.2. Mag-stripe Head 500,000 pass 4,000,000 pass(option) 2.3.7.3. IC contact unit 300,000 contacts(more than) 2.3.8. Environment 2.3.8.1. Operating Temperature 5 ~ 50
0.1 10 OF 44 2014.07.25 Humidity 20 ~ 80 RH 2.3.8.2. Storage Temperature -20 ~ 70 Humidity 20 ~ 80 RH 2.3.9. Dimensions 86mm(W) * * 43mm(H) * 162mm(L) (Anti-Skimming Same Size)) 86mm(W) * : Without Base Frame Sub & Front Knob Width 1) Add Only Base Frame Sub Dim : 89.4mm 2) Add Base Frame Sub & Front Knob Dim : 97mm 3) Add Only Front Knob Dim : 93.4mm More Detail View Ref 8-1.Standard Drawing. 2.3.10. Weight 400g less than
0.1 11 OF 44 2014.07.25 H/W INTERFACE 3.1. POWER CONNECTOR(PWR1) : YEONHO, 20017WR-04 Pin No. Signal Name Function 1 12V +12 VDC 2 GND Ground 3 GND Ground 4 12V BATTERY +12 VDC BATTERY POWER 53015-04 Top View 4 3 2 1 Top View 3.2. RS-232 CONNECTOR(RS232C1) : YEONHO, 12505WR-10A00 Pin No. Signal Name Function 1 DCD Data Carrier Detect(Optional Spec) 2 RXD Receive Data 3 TXD Transmit Data 4 DTR Data Terminal Ready 5 GND Ground 6 DSR Data Set Ready 7 RTS Ready To Send 8 CTS Clear To Send 9 N.C Reserved 10 N.C Reserved
0.1 12 OF 44 2014.07.25 3.3. USB Connector(USB1) : POLYPLASTICS CO., LTD, CN442 Pin No. Signal Name Function 1 USB_VCC USB POWER 2 D+ USB DATA + Signal 3 D- USB DATA - Signal 4 GND Ground 3.4. RF CONNECTOR(RF1) : YEONHO, 12505WR-04A00_OPTIONAL SPEC Pin No. Signal Name Function 1 VCC +5VDC 2 TXD Transmit Data 3 RXD Receive Data 4 GND Ground 4 12505WR-04A00 Top View 1
0.1 13 OF 44 2014.07.25 3.5. SPARE CONNECTOR(SPR1) : YEONHO, 12505WR-05A00_OPTIONAL SPEC Pin No. Signal Name Function 1 VCC +5VDC 2 TXD Transmit Data 3 RXD Receive Data 4 GND Ground 5 GPIO CPU GPIO 3.6. MS READ CONNECTOR(MSR1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B Pin No. Signal Name Function 1 GND Ground 2 GND Ground 3 TRACK3_RD- Track 3 MS Read Data- 4 TRACK3_RD+ Track 3 MS Read Data+ 5 TRACK2_RD- Track 2 MS Read Data- 6 TRACK2_RD+ Track 2 MS Read Data+ 7 TRACK1_RD- Track 1 MS Read Data- 8 TRACK1_RD+ Track 1 MS Read Data+ 9 GND Ground 10 GND Ground
0.1 14 OF 44 2014.07.25 3.7. MS READ CONNECTOR(MSR4) : YEONHO, 05004HR-H08ED_OPTIONAL SPEC Pin No. Signal Name Function 1 NC Not Connection 2 NC Not Connection 3 TXD Transmit Data 4 RXD Received Data 5 NC Not Connection 6 MSR_VCC +3.3V MSR Power 7 GND Ground 8 MS HEAD GND MS Head Ground 3.8. PATH SENSOR CONNECTOR(PS1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B Pin No. Signal Name Function 1 SEN1_VCC SENSOR1 LED Current 2 SEN2_VCC SENSOR2 LED Current 3 SEN3_VCC SENSOR3 LED Current 4 SEN4_VCC SENSOR4 LED Current 5 GND Ground 6 SIG Solenoid ON signal 7 SIG Solenoid ON signal 8 GND Ground 9 N.C Reserved 10 N.C Reserved
0.1 15 OF 44 2014.07.25 3.9. MOTOR CONNECTOR(MOT1) : YEONHO, 12505WR-02A00 Pin No. Signal Name Function 1 MS_MOT_B Backward Signal 2 MS_MOT_A Forward Signal 3.10. IC SOLENOID CONNECTOR(IS1) : YEONHO, 12505WR-02A00 Pin No. Signal Name Function 1 SIG Solenoid ON signal 2 GND Ground
0.1 16 OF 44 2014.07.25 53015-02 Top View 2 1 3.11. IFM CONNECTOR(IFM1) : KORYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B Pin No. Signal Name Function 1 CRDVCC IC Card Interface VCC 2 CRDVCC IC Card Interface VCC 3 CRDRST IC Card Interface Reset 4 GND Ground 5 CRDCLK IC Card Interface Clock 6 GND Ground 7 CRDIO IC Card Interface I/O 8 C4 Reserved 9 C8 Reserved 10 NC Not Used 3.12. IFM POWER CONNECTOR(IFM_PWR1) : YEONOH, 12505WR-02A00_NOT USED Pin No. Signal Name Function 1 +5V_IFM IFM Power
0.1 17 OF 44 2014.07.25 2 GND Ground 3.13. IFM DEBUG CONNECTOR(IFM_DEBUG) : YEONHO, 12505WR-05A00_NOT USED Pin No. Signal Name Function 1 VCC +5VDC 2 TXD Transmit Data 3 RXD Receive Data 4 GND Ground 3.14. SHUTTER CONNECTOR(SH1) : KYRYO INDUSTRIAL, CO.,LTD, FPC1.0-SMT11-10WS-1B Pin No. Signal Name Function 1 SEN_VCC +5V SENSOR VCC 2 +12V +12V POWER VCC 3 SEN1_SIG CARD WIDTH CHECK SENSOR 4 SEN2_SIG SHUTTER SOLEDNOID SENSOR 5 LED_VCC LED Current
0.1 18 OF 44 2014.07.25 6 SEN3_SIG SENSOR3 Signal 7 SIG ANTI-SKIMMING OUT Signal(Option) 8 SIG ANTI-SKIMMING IN Signal(Option) 9 GND Ground 10 GND Ground 3.15. DIP SWITCH (SW1) and Working TABLE : KSD05S ON 1 5 <Working TABLE> No. 1 2 3 4 5 Function 1 Off Off Off Off X Shutter Mode,38400BPS 2 On Off Off Off X Non-Shutter Mode,38400BPS 3 4 5 6 7 8
0.1 19 OF 44 2014.07.25 9 10 11 12 13 14 15
0.1 20 OF 44 2014.07.25 Communication Control Method & Configuration 4.1. Transmission Control Method Command / Response method : CARD R/W executes a particular operation according to the command from Host, and reports the results of the execution to Host. 4.2. Transmission Control Characters STX (02h) Indicate start of text. ETX (03h) Indicate end of text. ENQ (05h) Request to send response. ACK (06h) Send positive response. NAK (15h) Send negative response. DLE EOT (10h 04h) Clear the line and reset MSRW CR (0Dh) Carriage return. 4.3. Text Configuration (1) Command / Response S T X E T X B C C C R BCC Range (2) Control Characters A C K C R N A K C R E N Q C R D L E E O T C R 1) BCC does not include STX and calculated by EXCLUSIVE OR in BCC range. 4.4. Cancel of Command Whenever receiving ' DLE EOT ( 10h 04h ) ' characters, CARD R/W stops the current execution right away, sends ' DLE EOT ' and waits for the next command. If ' DLE EOT ' is received during the transmission of response, CARD R/W returns to command receive mode after the completion of the transmission.
0.1 21 OF 44 2014.07.25 COMMUNICATION PROTOCOL SEQUENCE 5.1. Regular Operations 5.1.1. Commands HOST Command ENQ CARD R/W ACK Execution Response * Card Ready Command Sequence HOST Command ENQ CARD R/W ACK Response Execution 5.1.2. Cancel of Command ( DLE EOT ) HOST Command DLE EOT CARD R/W ACK DLE EOT * Card Ready Cancel Sequence HOST Command ENQ DLE EOT ` ` CARD R/W ACK Execution DLE EOT Response
0.1 22 OF 44 2014.07.25 5.2. Irregular Operations ( Communications Errors ) 5.2.1. Commands 3 sec. Time-out HOST Comman d Comman d ENQ CARD R/W AC K Execution Response HOST Command Command ENQ Error CARD R/W NAK ACK Execution Response HOST Command Command ENQ Error CARD R/W NAK ACK Execution Response HOST Command ENQ Command ENQ Error CARD R/W ACK ACK Execution Response
0.1 23 OF 44 2014.07.25 COMMUNICATION PROTOCOL DESCRIPTIONS 6.1. Format Details 6.1.1. Command Format 'C' ( 43h ) cm pm Data 6.1.2. Positive Response Format 'P' ( 50h ) cm pm st1* st0* Data * Status Code Byte. See Section 7.3 for the status code table. 6.1.3. Negative Response Format 'N' ( 4Eh ) cm pm e1* e0* * Error Code Byte. See Section 7.4 for the error code table. 6.2. Command Parameter Code List Command cm pm Description* INITIALIZE 30h 30h Initialize CARD R/W and eject the card if a card is inside CARD R/W 31h Initialize CARD R/W and capture the card if a card is inside CARD R/W 32h Initialize CARD R/W and retain the card if a card is inside CARD R/W STATUS REQUEST 31h 30h Report the presence and the position of a card 31h Report the presence and the position of a card in detail ENTRY 32h 30h Front accept the Card 32h Fornt accept the IC Card and contact solenoid 40h Front accept the Card (Anti Skimming Feeding) 42h Fornt accept the IC Card and contact solenoid (Anti Skimming Feeding) CARD CARRY 33h 30h Eject the card to the front 31h Capture the card to the back RETRIEVE 34h 30h Retrieve card, which is in Gate position MAGNETIC CARD 36h 30h Move card without reading ( for cleaning purpose ) READ 31h Read ISO 1 and transmit data 32h Read ISO 2 and transmit data 33h Read ISO 3 and transmit data 35h Read all tracks (ISO1,2,3)and transmit data 36h Clear the read/write buffer memory ENABLE / 3Ah 30h Accept non-encoded cards ( e.g., cleaning card ) DISABLE 31h Disable card entry 32h Enable card entry RETRY 3Eh 30h Set retry count to 0 31h Set retry count to 1 32h Set retry count to 2 33h Set retry count to 3 34h Set retry count to 4 ( Default ) IC CONTACT 40h 30h Move card to IC contact position and contact IC solenoid. 31h Release IC solenoid. GET REVISION 41h 30h MCRW F/W Version 39h MCRW Serial Number(Option)
0.1 24 OF 44 2014.07.25 RETRACT Counter 42h 30h Retract Counter Read. 31h Retract Counter Set. IC POWER 38h 30h IC power off IC POWER 31h IC power on (EMV mode) 33h IC power on (ISO mode) 34h IC power(5v) on (ISO mode) 35h IC power(3v) on (ISO mode) 40h SAM 1 power() off 41h SAM 1 power on (EMV mode) IC CARD DIRECT 39h 30h Data transmit to and from the IC card (T=0 Communication) 31h Data transmit to and from the IC card (T=1 Communication) 32h Data transmit to and from the IC card (Automatic Communication) 40h Data transmit to and from the SAM1(T=0 Communication) 41h Data transmit to and from the SAM1(T=1 Communication) 42h Data transmit to and from the SAM1(Automatic Communication) Memory IC Card 4Dh 30h MEMORY IC CARD MODE CHANGE / Power On (Option) Direct 31h MEMORY IC CARD Power off (option) 33h Data transmit to and from the Memory IC card(option) Life Counter Read 63h 30h MS Head used (Option) 31h IC Contact used.(option) 32h Shutter open used.(option) MSRW Reset 66h 30h MSRW Module Reset(Option) 31h IFM Module Reset(Option) 32h RF Module Reset(Option) LED Control 35h 30h LED Control Mode 31h LED Control Time Sensor Level Read Command 60h 30h Path Sensor Level Check Decoder Direct 73h 30h Saved read data transmit Command 31h Data transmit to the Decoder chip * See Section 7. for more information 6.3. Status Code List st1 st0 Description 30h 30h No Card Detected ( including gate ) 30h 31h Card at gate 30h 32h Card inside CARD R/W ( transport )
0.1 25 OF 44 2014.07.25 6.4. Error Code List e1 e0 Description 30h 30h Command unidentified 30h 31h Parameter incorrect 30h 32h Command cannot be executed 30h 34h Command data error 30h 35h Time error ( For entry ) 30h 36h Card error ( Irregular ) 31h 30h Card jammed 31h 31h Shutter error 31h 32h IC card not exist 31h 33h IC card no ATR 31h 36h Card position moved 31h 37h Card jammed on retrieve 31h 38h Card jammed on IC card contact 31h 39h IC card communication error (T=0) 32h 30h Write error 32h 31h Read error - Pre-amble error 32h 32h Read error - Post-amble error 32h 33h Read error - LRC error 32h 34h Read error - Parity error 32h 35h Read error - Blank track 32h 37h Card entry disabled 32h 38h PH4 Sensing Error 33h 30h Power down 33h 31h Shutter Open Error 33h 32h IC Card Communication Timeout 34h 30h Not Support Protocol 34h 31h IC card communication error (T=1) 34h 32h IC card Receive error 34h 33h IC card Parity error 34h 34h IC card Missing 34h 35h IC card Over Circuit 34h 36h IC card Power up error 34h 37h IC solenoid error 36h 30h Command Cancel 36h 31h Entry Position Error(Warning) 36h 35h Not inside Card 36h 36h Card Compulsion Eject Error 36h 37h Retract Count Full Error 37h 30h Write Jitter Error 37h 31h Write Data verify Error
0.1 26 OF 44 2014.07.25 6.5. IC Error Code List Status codes returned by the card are listed in the following table: Status Code 00h 01h 02h 03h Description The command is not supported or not allowed. Wrong command length. The reader detects an excessive current. The card is powered off. The reader detects a defective voltage. The card is powered off. 05h The slot number is invalid (it must be set to 0 to 4). 07h, 08h, 09h The byte displayed is invalid. 0Ah,15h A2h The byte displayed is invalid. The card is short-circuiting. The card is powered off. A3h The ATR is too long (the number of bytes is greater than 33). B0h BBh BDh BEh 83h F4h F7h F8h FCh FDh FEh The reader is in EMV mode and the T=1 message sent by the card is too long. The buffer is limited to 254 bytes under the T=1 protocol. The reader has encountered a protocol error in the EMV mode (for example, erroneous first byte of the ATR, bad checksum (TCK) character, parity error, timeout during reception of the ATR, ATR is not EMVcompliant). Card protocol error during a T=1 exchange. The APDU command length is wrong. A buffler overflow occurred during card data reception. Wrong procedure byte received during a T=0 exchange. The checksum byte (TCK) of the ATR is invalid (reader in PC/SC - ISO mode). The first byte (TS) of the ATR is invalid (reader in PC/SC - ISO mode). The reader receives a data from the card while it sends data to the card. Parity error during a microprocessor exchange. The card is not present or it is mute.
0.1 27 OF 44 2014.07.25 COMMUNICATION DETAILS 7.1. INITIALIZE ( cm = 30h ) On power up, CARD R/W needs to be initialized with INITIALIZE command in order to receive commands from HOST, execute them, and send the results. INITIALIZE command initializes the CARD R/W with the parameters provided and sets the CARD R/W to the default settings. 7.1.1. Command 'C' 30h pm 33h* 32h* 34h* 30h* Fm Pd Wv Sh Ds Ty Cp * Mandatory sequence for future use. pm: Specifies the ejection of a card inside CARD R/W ( Initialization only ) 30h Eject the card to front 31h Eject ( capture ) the card to back 32h Retain the card ( in transport ) Fm: Specifies the command format.(33h Default) CR BCC 30h No No 31h Yes No 32h No Yes 33h Yes Yes Pd: Specifies the card-eject at power down. 30h CARD R/W ejects the card. ( Default ) 31h CARD R/W ejects the card except Write mode. 32h CARD R/W does not eject the card in any case. 33h If the card is not taken by the customer for 30 seconds after Card R/W operation has been completed, then capture the card. Wv: Specifies the operation of CARD R/W at power down during executing WRITE command. 30h CARD R/W stops the operation. 31h CARD R/W continues the operation. Sh: Specifies the shutter open/close test when CARD R/W is initialized. 30h Shutter open/close to be tested. 31h Shutter open/close not to be tested. Ds: No function, 30h : Default Ty: Specifies the response format for type recognizing codes. 30h No type recognizing code in the response. 31h Type recognizing codes ( 5 bytes ) in the response. Cp: No function, 30h : Default 7.1.2. Positive Response 'P' 30h Pm st1 st0 Type code*
0.1 28 OF 44 2014.07.25 * Only when Ty is set to 31h. ( Status Code Byte(st1,st0). See Section 7.3. for the status code table.) Type code(5 bytes) I* II* III* IC** 32H * I for ISO Track I, II for ISO Track 2, and III for ISO Track 3 30h N/A 31h Read Only 32h Read / Write ** IC (Support IC CARD ) 30h N/A 31h IC card able 7.1.3. Negative Response 'N' 30h pm e1 e0 ( Error Code Byte(e1,e0). See Section 7.4 for the error code table.) 7.2. STATUS REQUEST ( cm = 31h ) STATUS REQUEST command is sent to know if a card is inside MCRW and the position of it. MCRW always sends two byte status report( st1 & st0 ) and one or two byte status report (se1 & se0 ) is added depending on pm. 7.2.1. Command 'C' 31h pm 7.2.2. Positive Response 'P' 31h pm st1 st0 se1 se0 Se2 pm: Specifies the response format ( se0, se1, se2 ) 30h se not included 31h se included se0,se1,se2 exist if only pm = 31h. Details of se byte: se1 0 1 0 0 0 S3 S2 S1 se0 0 1 0 0 S6 0 S5 S4 Se2 0 1 0 0 0 0 0 S7 S1 PH1 1: Card detected 0: Card not detected S2 PH2 1: Card detected 0: Card not detected S3 PH3 1: Card detected 0: Card not detected S4 SW1 1: Shutter open. 0: Shutter is closed. S5 SW2 1: Card detected 0: Card not detected S6 MSW 1: IC card sensing 0: IC card no detected S7 PH4 1: Card detected 0: Card not detected 7.2.3. Sensor position
0.1 29 OF 44 2014.07.25 7.2.4. Negative Response 'N' 31h pm e1 e0 7.3. ENTRY ( cm = 32h ) ENTRY command accept the IC card or magnetic card depending on pm. This command does not allow MCRW to send response to HOST until MCRW completes to carry the card inside MCRW (except Rear Entry command). Send DLE + EOT from HOST in order to cancel this command. If MCRW can not move the card on the way of carrying it, MCRW sends jam error to HOST. 7.3.1. Command 'C' 32h pm 7.3.2. Positive Response 'P' 32h pm st1 st0 7.3.3. Negative Response 'N' 32h pm e1 e0 pm: Specifies the entry card 30h Front accept the Card 31h Front accept the MS Card 32h Front accept the IC Card 40h Front accept the Card (Anti Skimming Feeding) 41h Front accept the MS Card (Anti Skimming Feeding) 42h Front accept the IC Card (Anti Skimming Feeding)
0.1 30 OF 44 2014.07.25 7.4. CARD CARRY ( cm = 33h ) CARD CARRY command move the card to front or to back depending on pm. When a card is ejected to front, its one end remains in between rollers so that MCRW could retrieve it unless the card is removed. 7.4.1. Command 'C' 33h Pm 7.4.2. Positive Response 'P' 33h Pm st1 st0 7.4.3. Negative Response 'N' 33h Pm e1 e0 pm: Specifies the eject direction 30h To front 31h To back ( Capture ) 7.5. RETRIEVE ( cm = 34h ) RETRIEVE command retrieves the ejected card that is not removed. Move the card (which is stay at gate position) into the MCRW. 7.5.1. Command 'C' 34h 30h 7.5.2. Positive Response 'P' 34h 30h st1 st0 7.5.3. Negative Response 'N' 34h 30h e1 e0
0.1 31 OF 44 2014.07.25 7.6. MAGNETIC CARD READ ( cm = 36h ) READ command reads the card and sends the data to HOST. STX, ETX, and LRC will not be sent to HOST. When read error occur, MCRW retries to read the card depending on RETRY count set by RETRY command. In case of a single track read, if a read error happens, a negative response will be sent to HOST, but in case of all track read, a positive response will be sent to HOST with the error code in the place of corresponding track data. 7.6.1. Command 'C' 36h Pm 7.6.2. Positive Response for one track read 'P' 36h Pm st1 st0 Data for all track read(iso1,2,3) 'P' 36h Pm st1 st0 Data1 00h Data2 00h Data3 00h Data4 7.6.3. Negative Response 'N' 36h Pm e1 e0 pm: Specifies the track to read. 30h Move card without reading ( for cleaning purpose ) 31h Read ISO 1 and transmit data 32h Read ISO 2 and transmit data 33h Read ISO 3 and transmit data 35h Read all tracks (ISO1,2,3)and transmit data 36h Clear the read/write buffer memory Error Code for All Track Read(pm = 35h) e1 e0 Description 45h 31h Pre-amble error 45h 32h Post-amble error 45h 33h LRC error 45h 34h Parity error 45h 35h Blank track
0.1 32 OF 44 2014.07.25 7.7. ENABLE / DISABLE ( cm = 3Ah ) ENABLE/DISABLE command control accept/inhibit the card entry. MCRW immediately sends the response to this command. MCRW status should be recognized by Status request command form HOST. Choose Enable/Disable or Entry command according to customer s control system. 7.7.1. Command 'C' 3Ah pm Data 7.7.2. Positive Response 'P' 3Ah pm st1 st0 7.7.3. Negative Response 'N' 3Ah pm e1 e0 pm: Enable or disable the ENTRY. 30h Accept non-encoded card ( for cleaning card ) 31h Disable card ENTRY 32h Enable card ENTRY ( Default ) 5Ah H/W Anti-Skimming Enable/Disable Data: 0x30 anti-skimming Disable 0x31 anti-skimming Enable
0.1 33 OF 44 2014.07.25 7.8. RETRY ( cm = 3Eh ) RETRY command sets the number of retries when a read error occurs. 7.8.1. Command 'C' 3Eh pm Data 7.8.2. Positive Response 'P' 3Eh pm st1 st0 7.8.3. Negative Response 'N' 3Eh pm e1 e0 pm: Number of retries 30h 0 31h 1 32h 2 33h 3 34h 4 ( Default ) 3Ah IC Power On Retry (Data) 7.9. GET REVISION ( cm = 41h ) 7.9.1. Command 'C' 41h pm 7.9.2. Positive Response 'P' 41h pm st1 st0 Data 7.9.3. Negative Response 'N' 41h pm e1 e0 pm 30h 39h MCRW F/W Version MCRW Serial Number(Option)
0.1 34 OF 44 2014.07.25 7.10. Retract Counter Command ( cm = 43h ) 7.10.1. Retract Counter Read Command 'C' 42h 30h 7.10.2. Positive Response 'P' 42h 30h st1 st0 ct1 ct0 7.10.3. Negative Response 'N' 42h 30h e1 e0 ct: Retract Counter Value( 00<= ct <= 99 ) Ex) Counter Value 90 -> ct1 = 39H, ct0= 30H 7.10.4. Retract Counter Set Command 'C' 42h 31h ct1 ct0 7.10.5. Positive Response 'P' 42h 31h st1 st0 7.10.6. Negative Response 'N' 42h 31h e1 e0 Value range is 00 ~ 99. Ex) In case of setting "00" in Retract counter. -> ct1 =30H, ct0=30h
0.1 35 OF 44 2014.07.25 7.11 IC Card POWER ( cm = 38h ) IC POWER command is for power on/off to communicate with the IC card. 7.11.1. Command 'C' 38h pm pm: Specifies the IC power on/off 30h IC power OFF 31h IC power ON(EMV mode) 33h ISO IC power ON(ISO mode) 34h IC power(5v) on (ISO mode) 35h IC power(3v) on (ISO mode) 40h SAM1 power OFF 41h EMV SAM1 power ON 42h SAM 1 Status 7.11.2. Positive Response 'P' 38h pm st1 st0 Data* * Only when pm is set to 31h (Hexa value) * Status Command Response Data Pm: 32h, 42h, 52h Data 0x30 Idle 0x31 IC Power On and Online 0x32 IC Power Off 0x33 IC Chip Busy 0x34 Chip No Device 0x35 Chip Hardware Error 0x36 Chip No Card 7.11.3. Negative Response 'N' 38h pm e1 e0
0.1 36 OF 44 2014.07.25 7.12 IC CARD DIRECT ( cm = 39h ) IC CARD DIRECT command is for communication with the IC card, and it is available after exciting IC POWER ON. 7.12.1. Command 'C' 39h 30h Data* * Hexa value ( 2 X n bytes ) 7.12.2. Positive Response 'P' 39h Pm st1 st0 Data* * Hex value 7.12.3. Negative Response 'N' 39h Pm e1 e0 pm: specify the commands 30h Data transmit to and from the IC card (T=0 Communication) 31h Data transmit to and from the IC card (T=1 Communication) 32h Data transmit to and from the IC card (Automatic Communication) 40h Data transmit to and from the SAM1(T=0 Communication) 41h Data transmit to and from the SAM1(T=1 Communication) 42h Data transmit to and from the SAM1(Automatic Communication)
0.1 37 OF 44 2014.07.25 7.13 MEMORY IC CARD DIRECT ( cm = 4Dh ) MEMORY IC CARD DIRECT command is for communication with the IC card 7.13.1. Command 'C' 4Dh pm Data* * Hexa value( 2 X n bytes ) pm: specify the commands 30h MEMORY IC power ON 31h MEMORY IC power OFF 33h Communicate with Memory IC card *Data: pm : 30h 30h 31h SLE4418/4428 SLE4432/4442 pm : 33h Card Type: SLE 4418/4428(GPM8K) Command Data code Read Data Area (ISO OUT) 00h B0h (AddressH) (AddressL) (Read Length) Write Data Area (ISO IN) 00h D0h 00h (AddressH) (AddressL) (Write Length) (Data,.., Data) Present Card Secret Code (ISO IN) 00h 20h 00h 00h 02h (Code2, Code1) Read Protection Area (ISO OUT) 00h B0h (80h + AddressH) 00h 20h Write Protection Area (ISO IN) 00h D0h (80h + AddressH) (AddressL) 01h (Data) Read Security Area (ISO OUT) 00h B0h C0h 00h 03h Write Security Area (ISO IN) 00h D0h C0h (Address) (Write Length) (Data,.., Data) Card Type: SLE 4432/4442(GPM2K) Command Data code Read Data Area (ISO OUT) 00h B0h 00h (Address) (Read Length) Write Data Area (ISO IN) 00h D0h 00h (Address) (Write Length) (Data,.., Data) Read Protection Area (ISO OUT) 00h B0h 80h 00h 04h Write Protection Area (ISO IN) 00h D0h 80h (Address) (Write Length) (Data,.., Data) Read Security Area (ISO OUT) 00h B0h 80h 00h 04h Write Security Area (ISO IN) 00h D0h 80h (Address) (Write Length) (Data,.., Data) Present Card Secret Code (ISO IN) 00h 20h 00h 00h 03h (Code3, Code2, Code1) 7.13.2. Positive Response 'P' 4Dh pm st1 st0 Data* * Only when pm is set to 31h (Hexa value ) 7.13.3. Negative Response 'N' 4Dh pm e1 e0
0.1 38 OF 44 2014.07.25 7.14 Life Counter Read Command ( cm = 63h ) 7.14.1. Command 'C' 63h pm 7.14.2. Positive Response 'P' 63h pm st1 St0 data 7.14.3. Negative Response 'N' 63h pm e1 e0 pm 0x30 0x31 0x32 Data Number of passing on magnetic head Number of shutter open Number of contact press 00000000 ~ 99999999, Length: 8byte(ASCII)
0.1 39 OF 44 2014.07.25 7.15 MSRW Reset Command ( cm = 66h ) 7.15.1. Command 'C' 66h pm pm 0x30 0x31 0x32 MSRW Module Reset IFM Module Reset RF Module Reset 7.15.2. Positive Response 'P' 66h pm st1 St0 7.15.3. Negative Response 'N' 66h pm e1 e0
0.1 40 OF 44 2014.07.25 7.16. Sensor Level Read Command ( cm = 60h ) 7.16.1. Command 'C' 60h 30h 7.16.2. Positive Response 'P' 60h 30h st1 St0 R1 R2 R3 R4 R5 R6 R7 R8 7.16.3. Negative Response 'N' 60h 30h e1 e0 R1 PH1 00 ~ 33, Length : 2byte R2 PH2 00 ~ 33, Length : 2byte R3 PH3 00 ~ 33, Length : 2byte R4 PH4 00 ~ 33, Length : 2byte (Spare Sensor) R5 PH5 00 ~ 33, Length : 2byte R6 SW1 00 ~ 33, Length : 2byte R7 SW2 00 ~ 33, Length : 2byte R8 MSW 00 ~ 33, Length : 2byte 7.17. LED Control Command ( cm = 35h ) 7.17.1. Command 'C' 35h pm *Data pm 0x30 0x31 0x31(data) *Data(6byte) LED OFF LED ON LED on-and-off data(6byte) Data 0, Data1(2byte) LED On Time ( 1 = 100ms),(0~255) Data2, Data3(2byte) LED Off Time( 1 = 100ms), (0~255) Data4, Data5(2byte) LED on-and-off Count (0~255) Ex) 1) 0x30 0x35 0x30 0x36 0x30 0x3A 0x30 0x35: Led on time (500ms) 0x30 0x36: Led off time (600ms) 0x30 0x3A: Led on/off Count (10) 2) 0x31 0x30 0x31 0x30 0x31 0x30 0x31 0x30: Led on time (1600ms) 0x31 0x30: Led off time (1600ms) 0x31 0x30: Led on/off Count (16) 7.17.2. Positive Response 'P' 35h pm st1 St0 7.17.3. Negative Response 'N' 35h pm e1 e0
0.1 41 OF 44 2014.07.25 7.18. Decoder Direct Command ( cm = 73h ) Decoder Direct command is for communication with the Decoder Chip. 7.18.1. Command 'C' 73h 30h Data* * Hexa value ( 2 X n bytes ) pm 0x30 0x31 Saved read data transmit Data transmit to the Decoder chip 7.18.2. Positive Response 'P' 73h 30h st1 st0 Data* * Hex value 7.18.3. Negative Response 'N' 73h 30h e1 e0
0.1 42 OF 44 2014.07.25 DIMENSION 8-1 STANDARD DIMENSION 1 (Without Base & Front Knob)
0.1 43 OF 44 2014.07.25 8-2 STANDARD DIMENSION 2 (With Only Base Frame Sub)
0.1 44 OF 44 2014.07.25 8-3 STANDARD DIMENSION 3 (With Only Front Knob)
0.1 45 OF 44 2014.07.25 8-4 STANDARD DIMENSION 4 (With Base Frame Sub & Front Knob)