NXP Semiconductors

P5DF081_SDS

MIFARE secure access module SAM AV2

Command

Description

The only difference with AV1 is that whether the secret key is retrieved in plain or encrypted depends

on the SAM-Host protection mode of the logical channel.

Table 12. MIFARE Classic in non-X-mode commands...continued

8.6.7 DESFire and ULC in non-X-mode commands

Command

Description

SAM_AuthenticatePICC

In this procedure both the PICC as well as the MIFARE SAM AV2 device show in an

encrypted way that they posses the same secret which especially means the same key. This

procedure not only confirms that both entities are permitted to do operations on each other but

also creates a session key which can be used to keep the further communication path secure.

As the name ‘session key’ implicitly indicates, each time a new authentication procedure is

successfully completed a new key for further cryptographic operations is obtained.

SAM_IsoAuthenticatePICC The ISO authentication procedure is intended to authenticate with a card using the standard

ISO commands GetChallenge, ExternalAuthenticate and InternalAuthenticate. This

authentication procedure can be used to authenticate a DESFire PICC but also another

MIFARE SAM AV2. However, the MIFARE SAM AV2 will treat the authentication procedure as

a PICC authentication, which means that commands requiring a host authentication will not be

available.

SAM_ChangeKeyPICC

This command generates the cryptogram that has to be sent to the PICC in order to change

any key stored in the PICC. Both the current and the new key need to be stored in the KST

to execute this command. This means a new PICC key needs to be loaded into the MIFARE

SAM AV2, prior to issuing this command.

Table 13. DESFire and ULC in non-X-mode commands

8.6.8 RC52x or RC663 configuration commands

Command

Description

RC_ReadRegister Read the content of one or more register(s) of the connected reader chip.

The command allows reading 255 registers with one command. If a register address is listed more

than once in the data field, the content of this register will be re-read every time.

RC_WriteRegister

Write the content of one or more register(s) of the connected reader chip.

The command allows writing 127 registers with one command. If a register address with its related

content is listed more than once in the data field, the content of this register will be re-written every

time.

RC_RFControl

This command allows the radio frequency field to be turned off and on. The basic behavior is the

reset functionality where the controller turns off the field for the time given in the data field. If a

zero value is passed, the field is totally turned off. After turning off the field, to turn it on again, the

command can be issued with any value other than zero. Take into account that the passed time value

also in this case will force the MIFARE SAM AV2 to wait this additional time until turning on the field

again.

RC_Init

Establishes the serial connection between MIFARE SAM AV2 and RC52x or RC663 and initializes the

reader chip with the register values stored in the selected register value set.

RC_LoadRegister

ValueSet

Stores a customer defined register value set for the RC52x or RC663 in the non-volatile memory

of the MIFARE SAM AV2. This set can then be used for initializing the reader chip with the RC_Init

command. The address of and the related value for the register have to be placed consecutively in

the command data field of the APDU.

Table 14. RC522x or RC663 configuration commands

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

© 2023 NXP B.V. All rights reserved.

Product short data sheet

Rev. 3.3 — 13 September 2023

23 / 40