ISO 7816-4: Annex A: Transportation of APDU messages by T=0

http://www.cardwerk.com/smartcards/smartcard_standard_ISO7816-4_annex-a.aspx

Annex A: Transportation of APDU messages by T=0

A.1 Case 1

The command APDU is mapped onto the T=0 command TPDU by assigning the value ‘00‘ to P3.

Command APDU
CLA INS P1 P2
Command TPDU
CLA INS P1 P2 P3=‘00‘

The response TPDU is mapped onto the response APDU without any change.

Response APDU
SW1 SW2
Response TPDU
SW1 SW2

A.2 Case 2 Short

It this case, Le is valued from 1 to 256 and coded on byte B1 (B1=‘00‘ means maximum, i.e. Le=256).

The command APDU is mapped onto the T=0 command TPDU without any change.

C-APDU
CLA INS P1 P2 Le=B1
C-TPDU
CLA INS P1 P2 P3=B1

The response TPDU is mapped onto the response APDU according to the acceptance of Le and according to the processing of the command.

  • Case 2S.1 - Le accepted

    The response TPDU is mapped onto the the response APDU without any change.

    R-APDU
    Le bytes SW1 SW2
    R-TPDU
    Le bytes SW1 SW2
  • Case 2S.2 - Le definitely not accepted

    Le is not accepted be the card which does not support the service of providing data if the length is wrong.

    The response TPDU from the card indicates that the card aborts the command because of wrong length (SW1=‘67‘). The response TPDU is mapped onto the response APDU without any change.

    R-APDU
    SW1=‘67‘ SW2
    R-TPDU
    SW1=‘67‘ SW2
  • Case 2S.3 - Le not accepted, La indicated

    Le is not accepted by the card and the card indicates the available length La.

    The response TPDU from the card indicates that the command is aborted due to a wrong length and that the right length is La: (SW1=‘6C‘ and SW2 codes La).

    If the transmission system does not support the service of re-issuing the same command, it shall map the response TPDU onto the response APDU without any change.

    R-APDU
    SW1=‘6C‘ SW2=La
    R-TPDU
    SW1=‘6C‘ SW2=La

    If the transmission system supports the service of reissuing the same command, it shall re-issue the same command TPDU assigning the value La to parameter P3.

    C-TPDU
    CLA INS P1 P2 P3=SW2

    The response TPDU consists of La bytes followed by two status bytes.

    If La is smaller that or equal to Le, then the response TPDU is mapped onto the response APDU without any change.

    R-APDU
    La bytes SW1 SW2
    R-TPDU
    La bytes SW1 SW2

    If La is greater that Le, then the response TPDU is mapped onto the response APDU by keeping only the first Le bytes of the body and the status bytes SW1-SW2.

    R-APDU
    Le (< La) bytes SW1 SW2
    R-TPDU
    La bytes SW1 SW2
  • Case 2S.4 - SW1-SW2=‘9XYZ‘, expect ‘9000‘

    The response TPDU is mapped on the response APDU without any change.

A.3 Case 3 Short

In this case, Lc is valued from 1 to 255 and coded on byte B1 (=‘00‘).

The command APDU is mapped onto the T=0 command TPDU without any change.

C-APDU
CLA INS P1 P2 Lc=B1 Lc bytes
C-TPDU
CLA INS P1 P2 P3=B1 Lc bytes

The response TPDU is mapped onto the response APDU without any change.

R-APDU
SW1 SW2
R-TPDU
SW1 SW2

A.4 Case 4 Short

In this case, Lc is valued from 1 to 255 and coded on byte B1. Le is valued from 1 to 256 and coded on byte Bl (Bl=‘00‘ means maximum i.e. Le=256).

The command APDU is mapped onto the T=0 command TPDU by cutting the last byte of the body.

C-APDU
CLA INS P1 P2 Lc=B1 Lc bytes Bl
C-TPDU
CLA INS P1 P2 P3=B1 Lc bytes
  • Case 4S.1 - Command not accepted

    The first response TPDU from the card indicates that the card aborted the command: SW1=‘6X‘, except ‘61‘.

    The response TPDU is mapped onto the response APDU without any change.

    R-APDU
    SW1=‘6X‘ SW2
    R-TPDU
    SW1=‘6X‘ SW2
  • Case 4S.2 - Command accepted

    The first response TPDU from the card indicates that the card performed the command: SW1-SW2=‘9000‘.

    R-TPDU
    SW1=‘90‘ SW2=‘00‘

    The transmission system shall issue a GET RESPONSE command TPDU to the card by assigning the value Le to parameter P3.

    C-TPDU
    CLA INS=GET_RESPONSE P1 P2 P3=Bl

    Depending on the second response TPDU from the card, the transmission system shall react as described in cases 2S.1, 2S.2 and 2S.4 above.

  • Case 4S.3 - Command accepted with information added

    The first response TPDU from the card indicates that the card perfomed the command and gives information on the length of data bytes available: SW1=‘61‘ and SW2 codes Lx.

    R-TPDU
    SW1=‘61‘ SW2=Lx

    The transmission system shall issue a GET RESPONSE command TPDU to the card by assigning the minimum of Lx and Le to parameter P3.

    TPDU
    CLA INS=GET_REPONSE P1 P2 P3=min(Le,Lx)

    The second response TPDU is mapped onto the response APDU without any change.

    R-APDU
    P3 bytes SW1 SW2
    R-TPDU
    P3 bytes SW1 SW2
  • Case 4S.4 - SW1-SW2=‘9XYZ‘, except ‘9000‘

    The response TPDU is mapped onto the response APDU without any change.

A.5 Case 2 Extended

In this case, Le is valued from 1 to 65536 and coded in 3 bytes (B1)=‘00‘, (B2||B3)=any value (B2 and B3 valued to ‘0000‘ means maximum, i.e. Le=65536).

C-APDU
CLA INS P1 P2 B1=‘00‘ B2B3=Le
  • Case 2E.1 - Le<=256, B1=‘00‘, B2B3 from ‘0001‘-‘0100‘

    The command APDU shall be mapped onto the command TPDU by assigning the value of B3 to parameter P3.
    The processing by the transmission system shall be according to case 2S. <1..256 Bytes>

    C-TPDU
    CLA INS P1 P2 P3=B3
  • Case 2E.2 - Le>256, B1=‘00‘, B2B3=either ‘0000‘ or from ‘0101‘ to ‘FFFF‘

    The command APDU shall be mapped onto the command TPDU by assigning the value of ‘00‘ to parameter P3.

    C-TPDU
    CLA INS P1 P2 P3=‘00‘
    • if the first response TPDU from the card indicates that the command is aborted due to a wrong length
      and that the right length is La (SW1=‘6C‘ and SW2=La),
      then the transmission system shall complete the processing as described in case 2S.3.
    • If the first response TPDU is 256 bytes of data followed by SW1-SW2=‘9000‘,
      this means that the card has no more that 256 bytes of data,
      and/or does not support the GET REPONSE command.
      The transmission system shall then map the response TPDU onto the response APDU without any change. 
      R-APDU
      256 bytes SW1=‘90‘ SW2=‘00‘
      R-TPDU
      256 bytes SW1=‘90‘ SW2=‘00‘
    • If the first or subsequent response TPDU from the card is SW1=‘61‘, then SW2 codes Lx
      which is the extra amount of bytes available from the card (SW2 valued to ‘00‘ indicates 256 extra bytes or more),
      the transmission system shall compute Lm=Le (sum of the lengths of the bodies of the prviously received response TPDU(s)) to obtain the amount of remaining bytes to be retrieved from the card.

      If Lm=0, then the transmission system shall concatenate the bodies of all received response TPDUs
      together with the trailer of the last received response TPDU into the response APDU.

      If Lm>0, then the transmission system shall issue a GET RESPONSE command TPDU by assigning the minimum of Lx and Lm to parameter P3.
      The corresponding response TPDU from the card shall be processed

      • according to case d), if SW1=‘61‘
      • as above when Lm=0, if SW1=‘9X‘

A.6 Case 3 Extended

In this case Lc is valued from 1 to 65535 and coded on 3 bytes: (B1)=‘00‘, (B2||B3)!=‘0000‘.

C-APDU
CLA INS P1 P2 B1=‘00‘ B2B3=Lc Lc bytes
  • Case 3E.1 - 0<Lc<256, B1=‘00‘, B2=‘00‘, B3!=‘00‘

    The command APDU is mapped onto the command TPDU by assigning the value of B3 to parameter P3.

    C-TPDU
    CLA INS P1 P2 P3=B3 Lc bytes

    In this case Lc is valued from 1 to 255 and codes on 1 byte. == Case 3 Short

    The response TPDU is mapped onto the response APDU without any change.

  • Case 3E.2 - Lc>255, B1=‘00‘, B2!=‘00‘, B3=any value 
    If the transmission system does not support the ENVELOPE command, it shall return an error response APDU meaning that the length is wrong: SW1=‘67‘. 
    R-APDU
    SW1=‘67‘ SW2
    R-TPDU
    SW1=‘67‘ SW2

    If the transmission system supports the ENVELOPE command, it shall split the APDU into segments of length less than 256, CLA INS P1 P2 00 B2 B3 [ ------ ]
    and send those successive segments into the bodies of consecutive ENVELOPE command TPDUs.

    C-TPDU
    CLA INS=ENVELOPE P1 P2 P3 P3 bytes

    If the first response TPDU from the card indicates that the card does not support the ENVELOPE command (SW1=‘6D‘), Instruction Wrong
    the TPDU shall be mapped onto the response TPDU without any change.

    R-APDU
    SW1=‘6D‘ SW2
    R-TPDU
    SW1=‘6D‘ SW2

    If the first response TPDU from the card indicates that the card does support eh ENVLEOPE command (SW1-SW2=‘9000‘),
    the transmission system shall send further ENVELOPE commands as needed.

    When the ENVELOPE command is used under T=0 for transmitting data strings,
    An empty data field in an ENVELOPE command APDU means end of data string. 
    http://www.cardwerk.com/smartcards/smartcard_standard_ISO7816-4_7_transmission_interindustry_commands.aspx[ 00 C2 00 00 00 ] : Last ENVELOPE TPDU

    R-TPDU
    SW1-SW2=‘9000‘
    C-TPDU
    CLA INS=ENVELOPE P1 P2 P3 P3 bytes

    The resource TPDU corresponding to the last ENVELOPE command is mapped onto the response APDU without any change.

    R-APDU
    SW1 SW2
    R-TPDU
    SW1 SW2

A.7 Case 4 Extended

In this case Lc is valued from 1 to 65535 and coded on 3 bytes: (B1)=‘00‘, (B2||B3)!=‘0000‘, and Le is valued from 1 to 65536 and coded on 2 bytes (Bl-1||Bl)=any value (Bl-1 and Bl valued to ‘0000‘ means maximum, i.e. Le=65536).

C-APDU
CLA INS P1 P2 B1=‘00‘ B2B3=Lc Lc bytes Bl-1Bl=Le
  • Case 4E.1 - Lc<256, B1=‘00‘, B2=‘00‘, B3!=‘00‘

    The command APDU is mapped onto the command TPDU by cutting off the last two bytes Bl-1 and Bl and by assigning the value of B3 to parameter P3.

    C-TPDU
    CLA INS P1 P2 P3=B3 Lc bytes

    In this case Lc is valued from 1 to 255 bytes and coded on 1 byte.

    • If SW1=‘6X‘ in the first response TPDU from the card, then the response TPDU is mapped onto the response APDU without any change.

      R-APDU
      SW1=‘6X‘ SW2
      R-TPDU
      SW1=‘6X‘ SW2
    • If SW1=‘90‘ in first response TPDU from the card then

      If Le<257 (Bl-1 Bl valued from ‘0001‘ to ‘0100‘), then the transmission system shall issue a GET RESPONSE command TPDU by assigning the value of Bl to parameter P3. The subsequent processing by the transmission system shall be according to access 2S.1, 2S.2, 2S.3 and 2S.4 above.

      If Le>256 (Bl-1 Bl valued to ‘0000‘ or more then ‘0100‘), then the transmission system shall issue a GET RESPONSE command TPDU by assigning the value ‘00‘ to parameter P3. The subsequent processing by the transmission system shall be according to case 2E.2 above.

    • If SW1=‘61‘ in the first response TPDU from the card, then the transmission system shall proceed as specified in case 2E.2 d) above.
  • Case 4E.2 - Lc>255, B1=‘00‘, B2!=‘00‘, B3=any value

    The transmission system shall go on according to case 3E.2 described above until the command APDU has been sent completely to the card. It shall then go on as described in case 4E.1 a), b) and c) described above.
时间: 2024-10-29 03:59:51

ISO 7816-4: Annex A: Transportation of APDU messages by T=0的相关文章

ISO 7816-4: Interindustry Commands for Interchange

5. Basic Organizations 5.1 Data structures5.2 Security architecture of the card 5.3 APDU message structure 5.4 Coding conventions for command headers, data fields and response trailers 5.5 Logical channels 5.6 Secure messaging 5.1 Data structures Thi

CSI.CSiCol.v9.0.0 Repack -ISO 1CD柱子设计和分析工具

CSI.CSiCol.v9.0.0 Repack -ISO 1CD柱子设计和分析工具CSI Column v8.4.0 1CD CSI Csicol v8.3.2 Update 1CD(柱子设计和分析工具.适用于任何的混凝土 .钢筋混凝土或混合横截面的柱 子的设计) CSI.Etabs.v9.6.0-ISO 1CD(国际领先的建筑结构分析与设计软件) CSI.Etabs v9.12 CHS 1CD CSI Etabs 中文手册(34.2M) CSI Etabs NL Server v9.0.7

《企业云桌面实施》-小技巧-02-使用ISO光驱安装esxi6.5

<企业云桌面实施>-系列博文-陆续更新中 <企业云桌面实施>-小技巧-01-规划注意事项http://dynamic.blog.51cto.com/711418/1884922 <企业云桌面实施>-小技巧-02-使用ISO光驱安装esxi6.5http://dynamic.blog.51cto.com/711418/1885884 企业云桌面实施>-小技巧-03-vSAN6.5中SAS和SSD的使用建议http://dynamic.blog.51cto.com/7

使用virt-install手动创建qcow2镜像并安装ISO

virt-install是一个使用libvirt库构建新虚拟机的命令行工具,此工具使用串行控制台,SDL(Simple DirectMedia Layer)图形或者VNC客户端/服务器,来支持命令行和图形安装. 1 ubuntu下安装: apt-get install virtinst # apt-get install virtinst Reading package lists... Done Building dependency tree Reading state informatio

RAD Studio 2010~XE8 官方 ISO 下载地址 (2015-03-28更新)

http://bbs.csdn.net/topics/390816856 RAD Studio XE8 目前最新版 v22.0.19027.8951 官方 ISO 文件下载(6.72GB):http://altd.embarcadero.com/download/radstudio/xe8/delphicbuilder_xe8_win.iso RAD Studio XE7 最终版 (with Update 1) v21.0.17707.5020 官方 ISO 文件下载(5.26GB):http:

如何将ISO文件上传到XenServer本地存储中

如何将ISO文件上传到XenServer本地存储中 从XenServer5.0.0之后ISO文件不能直接拷贝到/opt/xensource/packages/目录下,该目录下只能用于存放Xenserver Tools文件,那当用户要挂载ISO进行虚拟机安装时有什么方法呢?有两种方法: 一.通过CIFS挂载Windows共享文件夹的方式,这种方式操作简单,通过XenCenter的New Storage向导即可完成(操作略),而且当ISO较多且变动频繁时,强力推荐该种方法 二.将ISO文件直接上传到

XenServer ISO文件上传 本地存储

如何将ISO文件上传到XenServer本地存储中 2014-05-12 15:09:18 标签:iso xenserver 原创作品,允许转载,转载时请务必以超链接形式标明文章 原始出处 .作者信息和本声明.否则将追究法律责任.http://icitrix.blog.51cto.com/42654/1409861 如何将ISO文件上传到XenServer本地存储中 从XenServer5.0.0之后ISO文件不能直接拷贝到/opt/xensource/packages/目录下,该目录下只能用于

jeos没有消亡,但看 debian 的 netinst .iso格式,那就是jeos的系统!

曾经ubuntu推出专供轻量硬件(如虚拟机)方式的just os格式的.iso [小巧.轻量.快速.干净] 但再 ubuntu 8.04后再也没有继续 ...... 可惜 不曾想,ubuntu的老爸debian却无意中,也推出了类似jeos的 .iso 文件:debian-x-y-netinst.iso 该网络安装(光盘格式)本意是让用户可以拥有一个最小的基本debian系统,然后联网安装其他软件. 其实,只要你不安装网络版安装程序既定的软件包就可以获得一个[小巧.轻量.快速.干净]的jeos系

【译】基于主机的卡仿真(Host-based Card Emulation)

基于主机的卡仿真(Host-based Card Emulation) 能提供NFC功能很多Android手机已经支持NFC卡模拟.在大多数情况下,该卡是由设备中的单独的芯片仿真,所谓的安全元件.由无线运营商提供了许多的SIM卡还包含一个安全元件. 安卓4.4引入卡仿真的附加方法,该方法不涉及安全元件,称为基于主机的卡模拟.这允许任何Android应用程序来模拟卡,并直接与NFC读取器.本文档介绍了如何基于主机的卡仿真( HCE )适用于Android和如何使用这种技术开发的应用程序,模拟的NF