Samsung S3CC9P9 - Do I really have this card?

Question

Hello People,
I'm new here. I have got a card with supposed specificiation: http://www.smartcardsource.com/pdf/SamsungJavacard.pdf but I'm not able to do anything with it. (install_for_load, load..., select)
I was able to retrieve following information from the card (via SmartCardShell):
*Card ATR*
3B 69 00 00 80 63 31 46 01 83 FF 9000
*FCP*
6F 19 84 08 A0 00 00 00 03 00 00 00 A5 0D 9F 6E 06 10 01 76 DE 00 05 9F 65 01 7F
*Issuer Identification Number (42)*
00 42 06 00 82 83 00 00 00
*Card Image Number (45)*
00 45 08 00 01 02 03 04 05 06 07
*Card data (66)*
not readable (unknown instruction)
*Key Information Template (E0)*
not readable (unknown instruction)
*Sequence Counter of the default Key Version Number (C1)*
not readable (unknown instruction)
*Confirmation Counter (C2)*
not readable (unknown instruction)The specification gives following example of "Secure Channel Initiation" which means it should use SCP02:
Send 80 50 00 00 08
11 22 33 44 55 66 77 88 (Host challenge)
Response 61 1C (Status Word)
Send 00 C0 00 00 1C
Response 00 00 61 72 01 27 23 90 99 45 (Key diversification data)
FF 02 (Key information)
00 00 (Sequence Counter)
3D 02 9C 31 C7 89 (Card challenge)
10 91 59 B6 9D D1 E8 F7 (Card cryptogram)
90 00 (Status Word)
Send 84 82 00 00 10
6C AB F3 4A CF AA 6C CB F3 46 3E BD 51 AE 8A 55 (Hostcryptogram and MAC)
Response 90 00 (Status Word)BUT: My card only authenticates with SCP01! (does this mean that it can't be http://www.smartcardsource.com/pdf/SamsungJavacard.pdf) ???
Next thing: Preinstalled Applets on this card:
http://www.smartcardsource.com/pdf/SamsungJavacard.pdf says, there should be installed six Applets
Card has the Issuer Security Domain, Supplementary Security Domain
and six ROM applets (Certification Applet, eBook, ATM Applet, K-Cash, PSE and
VSDC). Capabilities of the Issuer Security Domain and these ROM applets are
described in this section.
Issuer Security Domain
Supplementary Security Domain
Certification AppletBut I found only the following ones, which are not selectable (6A82). Only the ISD (A0 00 00 00 03 00 00 00 ) responds with 9000
Length | AID                                         | Life CycleState | Application Privileges |
---------------------------------------------------------------------------------------------------|
[08]     | A0 00 00 00 03 00 00 00           |    [01]               |1A]                           |
[06]     | A0 00 00 00 03 10                    |    [01]               | [00]                          |
[05]     | 31 50 41 59 2E                         |    [01]               | [00]                          | 
----------------------------------------------------------------------------------------------------I tried GPShell: Without mode_211 I'm able to authenticate to the card. With mode_211 I only get the following:
mode_211
enable_trace
establish_context
card_connect
* reader name SCM Microsystems Inc. SCR33x USB Smart Card Reader 0
select -AID a0000000030000
Command --> 00A4040007A0000000030000
Wrapped command --> 00A4040007A0000000030000
Response <-- 6F198408A000000003000000A50D9F6E06100176DE00059F65017F9000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channe
l
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 6A86
*GP211_get_secure_channel_protocol_details() returns 0x80206A86 (6A86: Incorrect parameters (P1, P2).)*I tried to install the HelloWorld.cap from GPshell,
I compiled - by myself - the HelloWorld.cap (jc21), the HelloWorld.cap (jc211) from the JDKs and I'm not able to install anyone of it.
I have used the jcManager from Stefan Braciu as well and tried to install the 3 different cap files. But each time I only get the following:
<- 90 00
Authenticated
UplaodCAP
Get AID from header.cap file
FOR LOAD DATA: EF 04 C6 02 01 9A
AID:A0 00 00 00 62 03 01 0C 01
Applet AID:A0 00 00 00 62 03 01 0C 01 01
Try to delete if existing...
-> 84 E4 00 00 18 33 22 EB 67 5C A3 F5 16 CD 4E EE 62 4D 1E BF A4 53 F5 37 2E 8B C5 12 E4
<- 6A 88
-> 84 E4 00 00 18 F9 44 83 9F 14 5E 1F 2F 29 9B F4 A5 15 5A 57 41 67 5A 50 AD 71 E8 7C 44
<- 6A 88
Loading cap file. Please wait...
Install for Load
-> 84 E6 02 00 20 87 6D 63 C1 FD 30 F4 5F 67 09 CA FB DA A4 87 98 8B 96 84 28 79 B6 E4 F5 D1 71 6D 73 92 2A 34 0D
<- 90 00
Load CAP
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
<- 69 82
-> 84 E6 0C 00 38 6C 98 3C 15 C3 6B D9 2D B1 40 2F 01 19 07 21 4D 25 82 FE 1C 99 80 4A 2B 96 EB 4E F1 55 98 93 0E 40 1E 4B C4 C2 6E EA B8 3D 9B 37 3E 42 81 8A 78 83 D4 97 2A B7 EF 98 3E
<- 69 85
Could not load applet. See debug for more info*6982 --> Security Level is not satisfied*
*6985 --> Conditions of use not satisfied*
How can I determine whether it is really this card? Does someone have such card and could compare the given information? Are the described facts by me saying that it can't be this card?
Please help me!

Answer 1

Hey people,
today I managed to install an applet onto the Samsung S3CC9P9 card.
I want to avoid that anybody will have the same problem like me, since it's not necessary to have...
I used:
Javacard Development Kit 2.2.1 (JCDK2.2.1)
JDK1.3.1_01
Just create an applet with JCDK2.2.1 and JDK1.3.1_01 and notice the packageAid and Applet AID from opt-file.
I recommend to run the HelloWorld example, since it runs on my card.
After having the cap, open JCOP Tools and type into JCOP Shell:
# appid =  A00000006203010C0101
# pkgid =  A00000006203010C01
Authenticate to card using the button in the shell
delete A00000006203010C0101
delete A00000006203010C01
upload -c "C:/Users/its/Desktop/1/HelloWorld2.2.1.cap"
install -i A00000006203010C0101 -q C9#() A00000006203010C01 A00000006203010C0101
/select A00000006203010C0101In my example, the appid is A00000006203010C0101 and the pkgid is A00000006203010C0101
First authenticate to card (the samsungs use SCP01) and then you should try do delete the applet-aid and then the package-aid.
In JCOP Tools you won't see which physical cap files are loaded. (in combination with the samsung's)
In my testings i have only seen the loaded cap files on JCOP10, JCOP21 and JCOP41 cards.
That's why you should try to delete first, even it's not visual to you in this step.
If you don't do that you will get an error trying to load the cap.
After that you must upload the applet with the -c param!
NOTICE: If you don't do so you will not be able to install the applet, since it will respond with Wrong Data!!!
And that's the point! Samsung cards expect the Cap Fille to be loaded component wise.
Most Tools like Gpshell, Smartcardshell and of cource JCOP Tool (standard configuration) try to load blocks of 256 bytes in length.
You can define another block length to instructs the tools to upload with, but this won't help.
If you want to know what componentes are. Just rename your cap file for example to zip and extract the data.
You will see files like (header.cap, import.cap,.., and so on). Those cap files are the componentes.
The components store some worthful information like the pkgAID (in header.cap last bytes) and the appletAID(in Applet.cap more or less at the end of the file)
You can find more about them in the javacard-specification. You can open the componentes with an hexeditor.
If you don't know the packageAID and AppletAid just study the components ;)
The most tools are trying to upload two or more components in one APDU command, but samsung cards require for EACH COMPONENT AN OWN APDU! (you don't have to understand this, but you can just use the -c param in jcop tools). Maybe you can use some of the tools from the JCDK to upload the cap componentwize, but i don't know how to it with that. Then you wouldnot need jcop tools, if you can't get it.
After that you have to install the applet with the "install" command. (just see my first code block)
Finally you can select your applet!
Dont try these things, else your card will be maybe damaged.
I have got 6 cards and only 1 is working, because of my experiments.
The others are not working anymore.
you should take care of the following:
1) Don't try to upload an applet with Gpshell
2) Dont try to upload an applet with SmartCardShell
3) Dont try to upload an apllet with standardconfiguration in JCOP ToolsIf you do it, you will probably get the following erros:
6F00 (no precis diagnosis) on any command you execute
Card Manager AID not selectable anymore (hardware chip communication error)or for instance (the error 64 3A means, that you have too much packackes uploaded on card, even if there is not anyone uploaded)
Start loading Header.cap (26 byte)
=> 80 E8 00 00 1A C4 82 01 2C 01 00 13 DE CA FF ED    ........,.......
    01 02 04 00 01 09 A0 00 00 00 62 03 01 0C 01 00    ..........b.....
(417678 usec)
<= 64 3A     And of cource you will get 0x6424, if you try to upload blockwize.
My working card has following fabrication data (just type get-cplc in jcop tools and compare)
Status: No Error
  IC Fabricator                      : 4250
  IC Type                            : 5039
  Operating System ID                : 1001
  Operating System release date      : 76DE
  Operating System release level     : 0005
  IC Fabrication Date                : 7118 (28.4.2007)
  IC Serial Number                   : 01042138
  IC Batch Identifier                : 33F6
  IC Module Fabricator               : 4252
  IC Module Packaging Date           : 7127 (7.5.2007)
  ICC Manufacturer                   : 5353
  IC Embedding Date                  : 76DE
  IC Pre-Personalizer                : 0000
  IC Pre-Perso. Equipment Date       : 76DE
  IC Pre-Perso. Equipment ID         : AABBCCDD
  IC Personalizer                    : 0000
  IC Personalization Date            : 76DE
  IC Perso. Equipment ID             : AABBCCDDHave good luck and I really hope this helps you!
If you don't unterstand something, you can always get in contact with me.
I will try to help you.
Edited by: dede10 on Aug 2, 2010 12:49 PM