</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><TR>
<TH WIDTH="30%" ALIGN="LEFT">Data Field 1
<TH WIDTH="70%" ALIGN="LEFT">Data Field 2
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD>Empty
<TD>Empty
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Response Application Protocol Data Unit
<TR>
<TH WIDTH="100%" ALIGN="LEFT">Response
<TR>
<TD><HR>
<TR>
<TD>Le bytes of data followed by 2-byte status
<TR>
<TD><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Example of Use
<TR>
<TH WIDTH="45%" ALIGN="LEFT">APDU
<TH WIDTH="55%" ALIGN="LEFT">Interpretation
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD VALIGN="TOP">CO<SUB>16</SUB> CA<SUB>16</SUB> 02<SUB>16</SUB> 01<SUB>16</SUB> 14<SUB>16</SUB>
<TD>This command retrieves up to 20 bytes of the value of a SIMPLE-TLV structure with ID = 01
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Error Codes (As Specified by ISO/IEC 7816-4: 1995(E))
<TR>
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TR>
<TD COLSPAN="4"><HR>
<TR>
<TD>6281<SUB>16</SUB>
<TD>Returned data error
<TD>6700<SUB>16</SUB>
<TD>Incorrect Le field
<TR>
<TD>6982<SUB>16</SUB>
<TD>Invalid security status
<TD>6985<SUB>16</SUB>
<TD>Invalid conditions
<TR>
<TD>6A81<SUB>16</SUB>
<TD>Invalid function
<TD>6A88<SUB>16</SUB>
<TD>Missing data object
<TR>
<TD>6CXX<SUB>16</SUB>
<TD>Wrong Le length
<TD>&nbsp;
<TD>&nbsp;
<TR>
<TD COLSPAN="4"><HR>
</TABLE>
<H4 ALIGN="LEFT"><A NAME="Heading14"></A><FONT COLOR="#000077">Put Data</FONT></H4>
<P><FONT SIZE="+1"><B>Description</B></FONT></P>
<P>This command provides for the writing of one data object or of several data objects that have been packed into one constructed data object.
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Command Application Protocol Data Unit
<TR>
<TH WIDTH="10%" ALIGN="LEFT">CLA
<TH WIDTH="10%" ALIGN="LEFT">INS
<TH WIDTH="26%" ALIGN="LEFT">Parameter 1
<TH WIDTH="25%" ALIGN="LEFT">Parameter 2
<TH WIDTH="29%" ALIGN="LEFT">Parameter 3
<TR>
<TD COLSPAN="5"><HR>
<TR>
<TD>C0<SUB>16</SUB>
<TD>DA<SUB>16</SUB>
<TD>Data object
<TD>Identifier
<TD>Length of data field
<TR>
<TD COLSPAN="5"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><TR>
<TH WIDTH="35%" ALIGN="LEFT">Data Field 1
<TH WIDTH="65%" ALIGN="LEFT">Data Field 2
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD>Data to be written
<TD>Empty
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Response Application Protocol Data Unit
<TR>
<TH WIDTH="100%" ALIGN="LEFT">Response
<TR>
<TD><HR>
<TR>
<TD>2-byte status
<TR>
<TD><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Example of Use
<TR>
<TH WIDTH="45%" ALIGN="LEFT">APDU
<TH WIDTH="55%" ALIGN="LEFT">Interpretation
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD VALIGN="TOP">CO<SUB>16</SUB> DA<SUB>16</SUB> 02<SUB>16</SUB> 01<SUB>16</SUB> 01<SUB>16</SUB> FF<SUB>16</SUB>
<TD>This command stores a 1-byte value of all ones in the SIMPLE-TLV structure with ID = 01
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Error Codes (As Specified by ISO/IEC 7816-4: 1995(E))
<TR>
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TR>
<TD COLSPAN="4"><HR>
<TR>
<TD>63CX<SUB>16</SUB>
<TD>Success with retries
<TD>6581<SUB>16</SUB>
<TD>Invalid write
<TR>
<TD>6700<SUB>16</SUB>
<TD>Incorrect Le field
<TD>6982<SUB>16</SUB>
<TD>Invalid security status
<TR>
<TD>6985<SUB>16</SUB>
<TD>Invalid conditions
<TD>6A80<SUB>16</SUB>
<TD>Incorrect data parameters
<TR>
<TD>6A81<SUB>16</SUB>
<TD>Invalid function
<TD>6A84<SUB>16</SUB>
<TD>Insufficient file space
<TR>
<TD>6A85<SUB>16</SUB>
<TD>Invalid TLV
<TD>&nbsp;
<TD>&nbsp;
<TR>
<TD COLSPAN="4"><HR>
</TABLE>
<H4 ALIGN="LEFT"><A NAME="Heading15"></A><FONT COLOR="#000077">Select File</FONT></H4>
<P><FONT SIZE="+1"><B>Description</B></FONT></P>
<P>This command establishes a specific file which will then be the target of any subsequent file operation commands.
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Command Application Protocol Data Unit
<TR>
<TH WIDTH="10%" ALIGN="LEFT">CLA
<TH WIDTH="10%" ALIGN="LEFT">INS
<TH WIDTH="26%" ALIGN="LEFT">Parameter 1
<TH WIDTH="25%" ALIGN="LEFT">Parameter 2
<TH WIDTH="29%" ALIGN="LEFT">Parameter 3
<TR>
<TD COLSPAN="5"><HR>
<TR>
<TD>C0<SUB>16</SUB>
<TD>A4<SUB>16</SUB>
<TD>00<SUB>16</SUB>
<TD>00<SUB>16</SUB>
<TD>02<SUB>16</SUB>
<TR>
<TD COLSPAN="5"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><TR>
<TH WIDTH="40%" ALIGN="LEFT">Data Field 1
<TH WIDTH="60%" ALIGN="LEFT">Data Field 2
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD>2-byte file identifier
<TD>N/A
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Response Application Protocol Data Unit
<TR>
<TH WIDTH="100%" ALIGN="LEFT">Response
<TR>
<TD><HR>
<TR>
<TD>2-byte status; if the high-order byte of the status word is 61<SUB>16</SUB>, then the low-order byte is the number of bytes of file description data that can be retrieved with a subsequent <TT>Get Response</TT> command
<TR>
<TD><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Example of Use
<TR>
<TH WIDTH="45%" ALIGN="LEFT">APDU
<TH WIDTH="55%" ALIGN="LEFT">Interpretation
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD VALIGN="TOP">C0<SUB>16</SUB> A4<SUB>16</SUB> 00<SUB>16</SUB> 00<SUB>16</SUB> 02<SUB>16</SUB> 3F<SUB>16</SUB> 00<SUB>16</SUB>
<TD>The master file becomes the currently selected directory
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Error Codes (As Specified by ISO/IEC 7816-4: 1995(E))
<TR>
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TR>
<TD COLSPAN="4"><HR>
<TR>
<TD>6283<SUB>16</SUB>
<TD>File cancelled
<TD>66284<SUB>16</SUB>
<TD>Improper file format
<TR>
<TD>6A81<SUB>16</SUB>
<TD>Invalid function
<TD>6A82<SUB>16</SUB>
<TD>File missing
<TR>
<TD>6A86<SUB>16</SUB>
<TD>P1 and P2 error
<TD>6A87<SUB>16</SUB>
<TD>Wrong Lc
<TR>
<TD COLSPAN="4"><HR>
</TABLE>
<H3><A NAME="Heading16"></A><FONT COLOR="#000077">Security</FONT></H3>
<P>ISO/IEC 7816-4 specifies an application interface for security operations for a smart card. These commands provide mechanisms through which a reader-side application can authenticate its identity to a card, a card can authenticate itself to a reader-side application, and a cardholder can authenticate his or her identity to the card. These mechanisms are used by applications to establish a known security status on a card and hence gain access to data or computational services which are protected by checks on access privileges.
</P>
<H4 ALIGN="LEFT"><A NAME="Heading17"></A><FONT COLOR="#000077">Verify</FONT></H4>
<P><FONT SIZE="+1"><B>Description</B></FONT></P>
<P>This command starts the comparison (in the card) of the verification data sent from the reader/terminal with the reference data stored in the card.
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Command Application Protocol Data Unit
<TR>
<TH WIDTH="10%" ALIGN="LEFT">CLA
<TH WIDTH="10%" ALIGN="LEFT">INS
<TH WIDTH="20%" ALIGN="LEFT">Parameter 1
<TH WIDTH="30%" ALIGN="LEFT">Parameter 2
<TH WIDTH="30%" ALIGN="LEFT">Parameter 3
<TR>
<TD COLSPAN="5"><HR>
<TR>
<TD VALIGN="TOP">C0<SUB>16</SUB>
<TD VALIGN="TOP">20<SUB>16</SUB>
<TD VALIGN="TOP">00<SUB>16</SUB>
<TD>Qualifier of reference data
<TD>Length of data field or empty
<TR>
<TD COLSPAN="5"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><TR>
<TH WIDTH="45%" ALIGN="LEFT">Data Field 1
<TH WIDTH="55%" ALIGN="LEFT">Data Field 2
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD>Verification data or empty
<TD>Empty
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Response Application Protocol Data Unit
<TR>
<TH WIDTH="100%" ALIGN="LEFT">Response
<TR>
<TD><HR>
<TR>
<TD>2-byte status
<TR>
<TD><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Example of Use
<TR>
<TH WIDTH="45%" ALIGN="LEFT">APDU
<TH WIDTH="55%" ALIGN="LEFT">Interpretation
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD VALIGN="TOP">C0<SUB>16</SUB> 20<SUB>16</SUB> 00<SUB>16</SUB> 00<SUB>16</SUB> 03<SUB>16</SUB> 53<SUB>16</SUB> 61<SUB>16</SUB> 53<SUB>16</SUB>
<TD>This command checks to see whether the card password is <TT>SAS</TT>
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Error Codes
<TR>
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TR>
<TD COLSPAN="4"><HR>
<TR>
<TD>6300<SUB>16</SUB>
<TD>Invalid verify
<TD>63CX<SUB>16</SUB>
<TD>Success with retries
<TR>
<TD>6983<SUB>16</SUB>
<TD>Invalid authentication
<TD>6984<SUB>16</SUB>
<TD>Data cancelled
<TR>
<TD>6A86<SUB>16</SUB>
<TD>P1 and P2 error
<TD>6A88<SUB>16</SUB>
<TD>Missing data object
<TR>
<TD COLSPAN="4"><HR>
</TABLE>
<H4 ALIGN="LEFT"><A NAME="Heading18"></A><FONT COLOR="#000077">Internal Authenticate</FONT></H4>
<P><FONT SIZE="+1"><B>Description</B></FONT></P>
<P>This command starts the computation of the authentication data by the card using the challenge data sent from the reader/terminal and a secret (key) stored in the card.
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Command Application Protocol Data Unit
<TR>
<TH WIDTH="10%" ALIGN="LEFT">CLA
<TH WIDTH="10%" ALIGN="LEFT">INS
<TH WIDTH="30%" ALIGN="LEFT">Parameter 1
<TH WIDTH="30%" ALIGN="LEFT">Parameter 2
<TH WIDTH="20%" ALIGN="LEFT">Parameter 3
<TR>
<TD COLSPAN="5"><HR>
<TR>
<TD>C0<SUB>16</SUB>
<TD>88<SUB>16</SUB>
<TD>ID of algorithm in card
<TD>ID of secret (key)<SUB> </SUB>field
<TD>Length of data
<TR>
<TD COLSPAN="5"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><TR>
<TH WIDTH="30%" ALIGN="LEFT">Data Field 1
<TH WIDTH="70%" ALIGN="LEFT">Data Field 2
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD>Challenge data
<TD>Maximum number of bytes expected in response (Le)
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Response Application Protocol Data Unit
<TR>
<TH WIDTH="100%" ALIGN="LEFT">Response
<TR>
<TD><HR>
<TR>
<TD>Le bytes of response to the challenge plus 2-byte status
<TR>
<TD><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Example of Use
<TR>
<TH WIDTH="45%" ALIGN="LEFT">APDU
<TH WIDTH="55%" ALIGN="LEFT">Interpretation
<TR>
<TD COLSPAN="2"><HR>
<TR>
<TD VALIGN="TOP">C0<SUB>16</SUB>88<SUB>16</SUB>00<SUB>16</SUB>00<SUB>16</SUB> 03<SUB>16</SUB>03<SUB>16</SUB>02<SUB>16</SUB>01<SUB>16</SUB>03<SUB>16</SUB>
<TD>This command passes the challenge <TT>321</TT> from the reader to the card; it encrypts this with its known algorithm and key then returns the encrypted challenge back to the reader
<TR>
<TD COLSPAN="2"><HR>
</TABLE>
<P>
</P>
<TABLE WIDTH="100%"><CAPTION ALIGN=LEFT>Error Codes
<TR>
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TH WIDTH="20%" ALIGN="LEFT">Status
<TH WIDTH="30%" ALIGN="LEFT">Meaning
<TR>
<TD COLSPAN="4"><HR>
<TR>
<TD>6984<SUB>16</SUB>
<TD>Data cancelled
<TD>6985<SUB>16</SUB>
<TD>Invalid conditions
<TR>
<TD>6A86<SUB>16</SUB>
<TD>P1 and P2 error
<TD>6A88<SUB>16</SUB>
<TD>Missing data object
<TR>
<TD COLSPAN="4"><HR>
</TABLE>