Open Smart Card Shell Test on dump.js

最新推荐文章于 2024-01-29 16:13:37 发布

原创最新推荐文章于 2024-01-29 16:13:37 发布 · 1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#emv #smartcard #credit #card #shell

smart card 专栏收录该内容

11 篇文章

订阅专栏

本文介绍如何利用OpenSmartCardShell工具及其提供的SmartCardShell脚本环境读取信用卡的基本信息。通过运行特定的JavaScript脚本，可以实现从一张过期的信用卡中提取应用标识符(AID)、应用标签等数据，并展示如何使用EMV TLV解码器分析读取到的数据。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Summary
Installing the Smart Card Shell
Use the Smart Card Shell
Test on dump.js
Reference

Summary

Tested with Open Smart Card Shell tool , it is part of Open Smart Card Development Platform. I used my expired credit card, executed the script dump.js, and read out the basic credit card information.

Installing the Smart Card Shell

Installation is simple, just follow the guide.
GUI

You can also use [Eclipse plug-in] to use the Smart Card Shell.
Eclipse

Use the Smart Card Shell

It is easy to use, just click “SCSH3GUI.CMD” to start the Smart Card Shell Windows GUI.

Below is the command example:

Running setup script config.js ...

Smart Card Shell Scripting Engine (scdp4j) 3.13.220
----------------------------------------------------------------------------
(c) 2005-2016 CardContact Systems GmbH, Minden, Germany (www.cardcontact.de)
Enter 'help' for a command overview or 'quit' to close the shell

>r
0000  3B 69 00 00 80 65 A2 01 01 01 3D 72 D6           ;i...e....=r.

TS  : 3B  Direct logic
TO  : 69  K    =     9 byte [historical characters]
TB1 : 00  pa   =     4 %    [programming voltage accurancy]
          I    =    25 mA   [maximum current]
          P    =     0 V    [programming voltage]
TC1 : 00  N    =     0 etu  [extra guardtime]
Pre-issuing data       : A20101013D ￠...=
Error: Compact TLV length field exceeds historical bytes - truncated
Card capabilities      :
    DF selection by full DF name
    DF selection by partial DF name
    DF selection by file identifier
    Short EF identifier supported
    Record number supported

>help
q | quit                 Quit shell
r | reset                Reset card in reader
a | apdu(string)         Send APDU to card
print(string, ..)        Print string(s)
load(file)               Load and execute file
assert(expression, ..)   Assert that expressions are all true
defineClass(file)        Load Java class defining native objects
restart                  Restart shell (clears all variables)

or any other valid ECMAScript expression.
See doc/index.html for the complete documentation.

If this is the first time you use the Smart Card Shell and you want
to try it out, then insert a card into your reader and enter
 load("tools/explore.js")
>apdu('00A4000400')
Card error SW1/SW2=6b00 - Checking error: Wrong parameter P1-P2

>apdu('00A4040000')
6F 65 84 08 A0 00 00 00 03 00 00 00 A5 59 73 4A 06 07 2A 86 48 86 FC 6B 01 60 0C 06 0A 2A 86 48 86 FC 6B 02 02 01 01 63 09 06 07 2A 86 48 86 FC 6B 03 64 0B 06 09 2A 86 48 86 FC 6B 04 02 55 65 0B 06 09 2B 85 10 86 48 64 02 01 03 66 0C 06 0A 2B 06 01 04 01 2A 02 6E 01 02 9F 6E 06 19 81 22 02 01 00 9F 65 01 FF
>

To run the js script, you just need use load command, example:
load('emv/dump.js')

Test on dump.js

Used my expired Citibank credit card.

Used Omnikey 5321v2 reader.
Card Reader

dump.js shell test result

>load('emv/dump.js')
AIDA0 00 00 00 03 10 10
0000  83 02 02 76                                      ...v

<-----Read application data as indicated in the Application File Locator.------
---------------------Collect input to data authentication.--------------------->
Record No. 2
0000  70 4D 57 13 41 47 46 30 66 66 66 66 D1 70 82 01  pMW.AGF0.c(H.p..
0010  00 00 03 66 10 00 0F 5F 20 1A 58 49 4F 4E 47 20  ...&..._ .XIONG 
0020  48 55 49 4C 49 4E 20 20 20 20 20 20 20 20 20 20  HUILIN          
0030  20 20 20 20 9F 1F 18 30 30 30 30 30 30 30 30 30      ...000000000

Record No. 1
0000  70 81 B3 90 81 B0 67 51 D5 FE 44 74 C7 A7 F9 1D  p.....gQ..Dt....

//below raw date was deleted...
...
//above raw date was deleted...

------------------------------------------------------------------------------>
<----------------------------Display Data Elements----------------------------->

Application Identifier (AID) - card: A0000000031010

Application Label: 5649534120435245444954 - VISA CREDIT


Track 2 Equivalent Data (Magnetic Strip): 
  Primary Account Number: 4147463066666666
  Expiration Date (YYMM): 1705
  Service Code: 201
  Discretionary Data: 0000066660000


//below data element was deleted...
...
//above data element was deleted...

------------------------------------------------------------------------------>

>

EMV TLV Decoder

You can trace the log, and use EMV TLV Decoder to analyze the data, example as below,

00B20314F2
7081EF8F01089224CCE4335A1A3CD7E4271A50B8D804D95ABA4E349811244D73336D196A6D969F25025B27D99F3201039F4681B025EBB698F660FB9E177F4A611E2FD4AB4C14A86A159E8838D10B6E47C99956D78C2E04C870F525227ABAA8D46BFE09CF46A372CD6FEBF8B59CA22FC646B6B38C1A061A5AF1E4D7556303EA5F7924C519D6D5EA5E10A25B6F9A4F4421081F4E9C7865F7ADEC183D39489C0B4A34E947C2D535426A7545EF4A2B9BF3A19DC1A07252F70A63E7A94A85C46FD55AFDB2348C402FA53905123A97A161F07D8E712576DCC15E92A10E93E504804E09629048AE9F4701039F49039F37049F4A01829000

70 EMV Proprietary Template
    8F Certification Authority Public Key Index
        08
    92 Issuer Public Key Remainder
        CCE4335A1A3CD7E4271A50B8D804D95ABA4E349811244D73336D196A6D969F25025B27D9
    9F32 Issuer Public Key Exponent
        03
    9F46 Integrated Circuit Card (ICC) Public Key Certificate
        25EBB698F660FB9E177F4A611E2FD4AB4C14A86A159E8838D10B6E47C99956D78C2E04C870F525227ABAA8D46BFE09CF46A372CD6FEBF8B59CA22FC646B6B38C1A061A5AF1E4D7556303EA5F7924C519D6D5EA5E10A25B6F9A4F4421081F4E9C7865F7ADEC183D39489C0B4A34E947C2D535426A7545EF4A2B9BF3A19DC1A07252F70A63E7A94A85C46FD55AFDB2348C402FA53905123A97A161F07D8E712576DCC15E92A10E93E504804E09629048AE
    9F47 Integrated Circuit Card (ICC) Public Key Exponent
        03
    9F49 Dynamic Data Authentication Data Object List (DDOL)
        9F3704
    9F4A Static Data Authentication Tag List
        82

About the source code

It may not be easy to debug the source code, I use the print function to print out the intermediate data, as below read out application data example shows.

It read out Application Interchange Profile (AIP) and the Application File Locator (AFL). For detail, can refer to EMV_v4.3_Book_3_Application_Specification.

The APDU command example is as below,

80A800000483020276
6114
80C0000014
80127C00080202001001010010030400180102019000

The GET PROCESSING OPTIONS command initiates the transaction within the
ICC.
The ICC returns the Application Interchange Profile (AIP) and the Application
File Locator (AFL).

The source code is as below,

/**
 * Read application data as indicated in the Application File Locator.
 * Collect input to data authentication.
 *
 */
EMV.prototype.readApplData = function() {
    print("<-----Read application data as indicated in the Application File Locator.------");
    print("---------------------Collect input to data authentication.---------------------");
    // Application File Locator must exist
    assert(typeof(this.cardDE[EMV.AFL]) != "undefined");
    var afl = this.cardDE[EMV.AFL];

    //print("4444444444 " + afl);  //08 02 02 00 10 01 01 00 10 03 04 00 18 01 02 01
    // Must be a multiple of 4
    assert((afl.length & 0x03) == 0);

    // Collect input to data authentication 
    var da = new ByteBuffer();

    while(afl.length > 0) {
        var sfi = afl.byteAt(0) >> 3;   // Short file identifier
        var srec = afl.byteAt(1);   // Start record
        var erec = afl.byteAt(2);   // End record
        var dar = afl.byteAt(3);    // Number of records included in data authentication

    //print("4444444444 " + sfi + " " + srec + " " + erec+ " " +dar);

        for (; srec <= erec; srec++) {
            // Read all indicated records
            var data = this.readRecord(sfi, srec);
            print("Record No. " + srec);
            print(data);

            // Decode template
            var tl = new TLVList(data, TLV.EMV);

            //print("55555555 " + TLV.EMV + " 666 " + data);

            assert(tl.length == 1);
            var t = tl.index(0);
            assert(t.getTag() == EMV.TEMPLATE);

            // Add data authentication input            
            if (dar > 0) {
                if (sfi <= 10) {    // Only value
                    da.append(t.getValue());
                    //print("5555555 " + t.getValue());
                } else {        // Full template
                    da.append(data);
                    //print("6666666 " + data);
                }
                dar--;
            }

            // Add card based data elements to internal list
            var tl = new TLVList(t.getValue(), TLV.EMV);
            this.addCardDEFromList(tl);
        }

        // Continue with next entry in AFL
        afl = afl.bytes(4);
    }
    this.daInput = da.toByteString();
    print(this.daInput);
    print("------------------------------------------------------------------------------>\n");
}