QUIO Communication Protocol QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 1 / 52 CONTENT 1. COMMUNICATION DATA FORMAT................................................................................................................ 4 2. COMMUNICATION METHOD AND CONTROL BYTES ................................................................................ 4 3. COMMUNICATION PACKET FORMAT AND RELATED BYTES .................................................................
QUIO Communication Protocol QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 2 / 52 9.7 SAM CARD OPERATION.....................................................................................................................................................19 9.7.1 Active SAM Command ..........................................................................................................................................19 9.7.2 Deactivate SAM Command......................................
QUIO Communication Protocol QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 3 / 52 9.10.8 SRIX 4K TRANSPARENCY .....................................................................................................................................45 9.11 READ SERIAL NUMBER.....................................................................................................................................................46 9.11.1 Read serial number..........................................
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 4 / 52 1. Communication Data Format Baud Rate(BPS): 9600/19200/38400/57600(Auto Detection and Self-Adaptive) Communication Type: Asynchronous Communication Communication Mode: Half-Duplex, Daisy Chain Supported for multiple Connection of up to 16 machines.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.
QUIO Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 6 / 52 4. Machine Address Setting Multiple Machines can be controlled via one COM port by Daisy Chain connection of multiple machines with different addresses. Address Definition is as following: Machine Address #0 #1 #2 #3 #4 #5 #6 #7 #8 #9 #10 #11 #12 #13 #14 #15 ADDR 00H 01H 02H 03H 04H 05H 06H 07H 08H 09H 0AH 0BH 0CH 0DH 0EH 0FH Notes: Ex-work machine has default address of #0(0FH).
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 7 / 52 5.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series Case 6 QU-TK-F3x 2019/1/10 1.03 8 / 52 300msec Timeout (HOST) Command EOT EOT X error (Execution) (Dispenser) ACK EOT (discontinue) Case 7 (HOST) Command ACK EOT X error (Execution) (Dispenser) QUIO ACK https://www.quio-rfid.de Response Email: kontakt@quio-rfid.
QUIO Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 9 / 52 6. Card machine operation command list Command Chapter Function Description Command Parameter Command Parameter Descritpion (CM) (PM) If Card is inside machine, move to target position. If no card, rotate motor and return firmware version. 30H Get Machine Status 31H Move Card inside machine between different positions 32H Ch9.1 Reset/Initialization Ch9.2 Inquire Status Ch9.
QUIO Communication Protocol QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 10 / 52 7.
QUIO Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 11 / 52 8.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 12 / 52 9. Command Description 9.1 Reset/Initialization HOST Command: “C” 30H Pm Positive Return: “P” 30H Pm st0 st1 30H Pm e1 e0 st2 Firmware Version Negative Return: “N” This is the first necessary command after powering on and can be executed anytime during operation. On first run, dispenser will check and adapt to host baud rate.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 13 / 52 9.2 Inquire Status HOST Command “C” 31H Pm 31H Pm st0 st1 31H Pm e1 e0 Positive response “P” st2 Sensor (10 bytes) Negative response “N” Pm=30H: Report current card status with st0, st1, st2. Pm=31H: Report Sensor Status with 10 bytes of data. (Usually used for Debugging and Maintenance) Refer to Sensor Layout Drawing For locations of different sensors.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 14 / 52 9.3 Card Movement HOST Command “C” 32H Pm Positive response “P” 32H Pm st0 st1 Pm e1 e0 st2 Negative response “N” 32H Pm=30H Move and hold card at gate position; Pm=31H Move card to contact IC position; Pm=32H Move card to RF Antenna Position; Pm=33H Capture Card to Error Card Bin (Recycle Box) Pm=39H Eject Card out of Machine Notes: 1.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 15 / 52 9.5 IC/RF Card Detection 9.5.1 Auto-Check IC Card Type: HOST Command “C” 50H 30H 50H 30H st0 st1 50H 30H e1 e0 Positive response “P” st2 Card Type Negative response “N” Detect contact IC Card Type.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 16 / 52 9.6 CPU Card Operation 9.6.1 CPU Card Reset HOST Command “C” 51H 30H Vcc 51H 30H st0 st1 51H 30H e1 e0 Positive response “P” st2 Type ATR Negative response “N” ATR Cold Reset: machine provides power (Vcc), clock (CLK), and reset (RST) signals to card and card responds with ATR. Vcc options: 30H: Vcc=+5V and mode EMV2000 ver4.0. 33H: Vcc=+5V and mode ISO/IEC7816-3. 35H: Vcc=+3.
QUIO “C” Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series 51H 32H 51H 32H st0 st1 51H 32H e1 e0 QU-TK-F3x 2019/1/10 1.03 17 / 52 Positive response “P” st2 Sti Negative response “N” Machine tells the status of IC card with sti status: sti =30H Card is not activated =31H Card is activated, current CPU Card working frequency is 3.57 MHZ =32H Card is activated, current CPU Card working frequency is 7.16 MHZ If IC Card power error, Error Code: e1, e0= “60” 9.6.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 18 / 52 9.6.5 T=0 CPU Card APDU Transmission HOST Command “C” 51H 34H C-APDU Positive response “P” 51H 34H st0 st1 34H e1 e0 st2 R-APDU Negative response “N” 51H This exchanges data between CPU card by protocol T=1 Dispenser should follow T=1 protocol to combine C-APDU as I-block and send to CPU card.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 19 / 52 Warm Reset keeps the card activated and get the ATR again. Type: CPU Card communication protocol =30H T=0 Protocol =31H T=1 Protocol 9.6.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series ATR (Answer to Reset) format: TS TO TA1 … TB1 QU-TK-F3x 2019/1/10 1.03 20 / 52 TCK See details from ISO7816 standard Vcc=30H: ICRW supplies with +5V to VCC and activates in line with the EMV2000 ver4.0. Vcc=33H: ICRW supplies with +5V to VCC and activates in line with the ISO/IEC7816-3. Vcc=35H: ICRW supplies with +3V to VCC and activates in line with the ISO/IEC7816-3.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 21 / 52 Stj =32H Third SAM card connector (Optional) Stj =33H Fourth SAM card connector (Optional) Stj =34H Fifth SAM card connector (Optional) An error e1,e0=“60” is returned when a power failure is detected. 9.7.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 22 / 52 “63” is sent. If any other protocol error occurs, QU-TK-F31 deactivates an IC card and error code “64” is sent. If HOST tries to communicate before IC card activation, error code “65” is sent. Note: Refer to ISO/IEC7816-3 and COS command for more about T=1 APDU 9.7.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 23 / 52 9.7.8 Select SAM HOST Command “C” 52H 40H SAMn Positive response “P” 52H 40H st0 st1 40H e1 e0 st2 Negative response “N” 52H HOST can select SAM 1,2,3,4 or 5. Sel = 30H: SAM 1. Sel = 31H: SAM 2. (option) Sel = 32H: SAM 3. (option) Sel = 33H: SAM 4. (option) Sel = 34H: SAM 5. (option) SAM command is effective only in the module selection.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 24 / 52 Positive response “P” 53H 31H st0 st1 31H e1 e0 st2 Negative response “N” 53H 9.8 SLE4442/4428 Control 9.8.1 SLE4442/4428 Reset HOST Command “C” 53H 30H Positive response “P” 53H 30H st0 st1 30H e1 e0 st2 ATR(4 byte) Negative response “N” 54H The QU-TK-F31 supplies power (VCC) and clock (CLK), then reset (RST) release. After reset, return ATR.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 25 / 52 9.8.3 Inquire status of SLE4442/4428: HOST Command “C” 53H 32H Positive response “P” 53H 32H st0 st1 32H e1 e0 st2 Sti Negative response “N” 54H QU-TK-F31 tells the status of SLE4442/4428 with Sti after the command successfully execute. Sti= 30H SLE4442/4428 Deactivated Sti= 31H SLE4442 Activated Sti= 32H SLE4428 Activated 9.8.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 26 / 52 cd H: the length of bytes of data to read QU-TK-F31 reads data from the main memory of SLE4442, and transmits data on cdH bytes from the address abH. The capacity of the main memory is 256 bytes. All the contents of the main memory can be read with the following command. ex). "CR3"+00B0000000 9.8.4.2.
Communication Protocol QUIO QU-TK-F3 Series “P” 53H 33H st0 st1 33H e1 e0 st2 Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 27 / 52 data Negative response “N” 53H Notes: ab H: the start address to write data in the main memory cd H: the length of bytes of data to write ef H: the data to write first (cd H bytes) Before write to main memory, the validation of key is must. The capacity of the main memory is 256 bytes. The byte number "00" of data to write means 256bytes.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 28 / 52 Protection condition can be set up at one time in the data which continued in the main memory. 9.8.4.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 29 / 52 9.8.5 SLE4428 Control These functions are specified by a command data form like C-APDU which format is based on T=0 standard. In this case, QU-TK-F31 recognizes the meaning of the command data, and executes the treatment related to the card by controlling hardware. After the command was executed properly, QU-TK-F31 returns a positive response with response data 9000H like from the IC card.
Communication Protocol QUIO QU-TK-F3 Series “P” 53H 34H st0 st1 34H e1 e0 st2 Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 30 / 52 data Negative response “N” 53H Notes: ab H: the start address to read the image of protection data of the main memory cd H: the number of bytes of data to read The protection conditions of 1024bytes of main-memory are changed into the data on 1024bits, and it is read. 1024bits is equivalent to 128bytes.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 31 / 52 Negative response “N” 53H 34H e1 e0 Notes: abcH: the start address to write data in the main memory de H: the number of bytes of data to write fg H: the data to write first (de H bytes) QU-TK-F31 writes data in the main memory. QU-TK-F31 returns a result after written data are checked. Before doing this operation, password check must be done. 9.8.5.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 32 / 52 Ex) "CR4"+ 0020000002xxxx (xxxx: security code 2bytes) The presented data are compared with internal data in SLE4428 card itself. User should know the password of card if they want to change the data in SLE4442, ErrorCounter can be reset in the zero from 7 or less than 7. When error-counter is reset as zero, lock the card. 9.9 I2C Memory Card Control Command 9.9.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 33 / 52 Positive response “P” 54H 31H st0 st1 31H e1 e0 st2 Negative response “N” 54H QU-TK-F31 stop supplying a power supply (Vcc), Clock(CLK), Reset(RST). 9.9.3 Inquire Status of I2C memory card HOST Command “C” 54H 32H Positive response “P” 54H 32H st0 st1 32H e1 e0 st2 Sti Negative response “N” 54H This command is used to inquire status of I2C card and return status by Sti.
Communication Protocol QUIO QU-TK-F3 Series 6FH 00H Fail 6BH 00H Address overflow 67H 00H Operation length overflow Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 34 / 52 Write/Read I2C and Address scope is showed below: Card_type ab, cd 24C01 0000H ~ 007FH 24C02 0000H ~ 00FFH 24C04 0000H ~ 01FFH 24C08 0000H ~ 03FFH 24C16 0000H ~ 07FFH 24C32 0000H ~ 0FFFH 24C64 0000H ~ 1FFFH 24C128 0000H ~ 3FFFH 24C256 0000H ~ 7FFFH 9.9.4.
QUIO “N” Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series 54H 34H e1 QU-TK-F3x 2019/1/10 1.03 35 / 52 e0 This command is recognized as follows. abH: The upper address of head address which begins to write data cdH: The lower address of head address which begins to write data efH: The number of bytes of data to write ghH: the data to write first (the head data of the data on ef H bytes) QU-TK-F31 read efH length and return to HOST according to address specified by abH, cdH.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 36 / 52 ATQA( 2 byte), UID_data (4—10 byte) and SAK( 1 byte). 2).ISO/IEC 14443 Type A: 1.Request A (REQ A)/ Answer Request A (ATQ A). 2.Anticollision 3.Select (SEL) / Unique Identifier (UID) & Select Acknowledge (SAK) 4.Request for answer to select (RATS) / Answer to Select (ATS) 5.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 37 / 52 Mifare one, ISO/IEC 14443 Type A return UID (The length of UID_data) UID_len=4 The length of UID_data is 4 byte. UID_len=7 The length of UID_data is 7 byte. UID_len=10 The length of UID_data is10 byte. 9.10.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 38 / 52 which is based on ISO/IEC 7816-3. Sw1 Sw2 Specification 90H 00H Success 6FH 00H Fail 6BH 00H Address overflow 67H 00H Operation length overflow 9.10.4.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 39 / 52 9.10.4.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 40 / 52 Positive response “P” 60H 33H st0 st1 33H e1 e0 st2 rdata Negative response “N” 60H Read block and sequence blocks from RF card sn (1 byte): sector number bn (1 byte): block number le (1 byte): block number (le=01H read one block, le=03H read three blocks) rdata (2 byte): return data (Positive response with data 9000H, and negative response with “ sw1+sw2”) Notes: 1.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 41 / 52 1. Ultralight Card only have one block in one sector,every block have 4 byte data. S50,S70 have16 byte data in one block 2.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series “P” 60H 33H st0 st1 33H e1 e0 st2 QU-TK-F3x 2019/1/10 1.
Model No. Date Ver. Page Communication Protocol QUIO QU-TK-F3 Series QU-TK-F3x 2019/1/10 1.03 43 / 52 9.10.4.
QUIO “N” Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series 60H 35H e1 QU-TK-F3x 2019/1/10 1.03 44 / 52 e0 This exchanges data between RF card by protocol RF Type B T=CL according to ISO/IEC 144434 Notes: The max. length of C-APDU is 261 bytes, the max. length of R-APDU is 258 byte. 9.10.7 ISO15693 RF card Communication 9.10.7.
Communication Protocol QUIO QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 45 / 52 9.10.7.4 Write AFI HOST Command “C” 60H 77H CMP CMP Length(Bytes) Meaning <1> 1 AFI Positive response “P” 60H 77H st0 st1 77H e1 e0 78H st0 st1 78H e1 e0 79H CMP st2 Negative response “N” 60H 9.10.7.5 Lock Block AFI HOST Command “C” 60H 78H Positive response “P” 60H st2 Negative response “N” 60H 9.10.7.
QUIO “C” Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series 60H 80H CMP 80H st0 st1 80H e1 e0 QU-TK-F3x 2019/1/10 1.03 46 / 52 Positive response “P” 60H st2 RDT st2 len Negative response “N” 60H E.g. For Reading Block #0: 43 60 02 08 00 9.11 Read Serial Number 9.11.
Model No. Date Ver.
QUIO “N” Model No. Date Ver. Page Communication Protocol QU-TK-F3 Series A5H 30H e1 QU-TK-F3x 2019/1/10 1.03 48 / 52 e0 After reset error-card bin counter, Capture on card, counter one plus Count= “000” ~ “999” Counter overflow will return machine status (e1,e0=“50”) 9.14.2 Set initial value of error-card bin HOST Command “C” A5H 31H Count (3 byte) 31H st0 st1 31H e1 e0 Positive response “P” A5H st2 Negative response “N” A5H Set initial value of error-card bin.
Communication Protocol QUIO 2. QU-TK-F3 Series Model No. Date Ver. Page QU-TK-F3x 2019/1/10 1.03 49 / 52 Software Setting allows host machine to set address of the dispenser machine by sending commands. Software setting is available on certain specified models. Host Machine uses 0F address as broadcasting address to set target machine address from 0x01 to 0x0E (1~14 in decimal) HOST Command “C” FFH 30H Addr Positive response “P” FFH 30H st0 st1 30H e1 e0 st2 Negative response “N” FFH 9.