Billions of Mifare Classic cards have been deployed since the 90's. Mifare This trademark of NXP (formerly Philips Semiconductors) is the generic brand name of their PICC products. The ATR indicates the card type, communication protocol and other basic information. ATR Answer to reset: A message that is returned by a smartcard when it is powered up or when its reset pin is activated. This makes those products usable on most operating systems, using an high-level and standardized API.
SpringCard PC/SC Readers comply with this standard. We can see that “Prox’N’Roll” has been replaced by “SpringCard” in the card memory.ĭefinitioner PC/SC The de-facto standard to interface Personal Computers with Smart Cards (and smartcard readers of course). Now, you can read back the whole memory, using FF B0 00 04 0C:
Operation is successful if the card answers 90 00.
We want to replace “Prox’N’Roll” by “SpringCard” in the card memory, so we first have to determine which pages must be updated.
In the developer’s reference manual, the UPDATE BINARY instruction is described in §2.2.5 at the time of this writing. Please note that the card’s reponse ends with “90 00”, which means success. The card has obviously been previously written and the ASCII translation is provided: “ Mifare Ultralight card, used with Prox’N’Roll”. Now, double-clic on the line corresponding to the reader and enter the above-mentioned APDU :Ĭlic on Transmit, or press “Enter”: the APDU is sent to the card and its response is printed in the bottom. To understand what this means, you can check §4.1.2 (at the time of this writing) in the developer’s reference manual. Put the card on the reader: its ATR prints. To send this APDU, please use our PC/SC Diagnostic tool, available on our main site ( QuickStart for PC/SC). We want to read the whole memory, starting from page 4: this means we want to read 12 pages of 4 bytes, so 48 bytes (ie: 30 in hexadecimal).
The four first pages (0-3) contain special bytes: so, we’ll only cover pages 4 to 16. First thing to do is to obtain the documentation of the card from the manufacturer (NXP in this case) and the Prox’N’Roll developer’s reference manual.įrom the card’s functional specifications, we can see that the memory is structured in 16 pages of 4 bytes.