17-Aid of Bangladesh 470 cards

When debugging a 470 card in Bangladesh, it was found that this card is a bit similar to the card of China Telecom, but it also has two aids. The following data

=>0x00 0xa4 0x00 0x04 0x02 
<=0xa4 
=>0x2f 0x00 
<=0x61 0x1f 
=>0x00 0xc0 0x00 0x00 0x1f 
<=0xc0 0x62 0x1d 0x82 0x05 0x42 0x21 0x00 0x30 0x02 0x83 0x02 0x2f 0x00 0x8a 0x01 0x05 0x8b 0x06 0x2f 0x06 0x00 0x04 0x01 0x04 0x80 0x02 0x00 0x60 0x88 0x01 0xf0 0x90 0x00 
=>0x00 0xb2 0x01 0x04 0x30 
<=0xb2 0x61 0x2e 0x4f 0x10 0xa0 0x00 0x00 0x00 0x87 0x10 0x02 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00 0x50 0x04 0x55 0x53 0x49 0x4d 0x73 0x14 0xa0 0x12 0x80 0x01 0x17 0x81 0x02 0x6f 0x34 0x82 0x09 0x45 0x41 0x50 0x20 0x4c 0x41 0x42 0x45 0x4c 0x90 0x00 
=>0x00 0xb2 0x02 0x04 0x30 
<=0xb2 0x61 0x2e 0x4f 0x10 0xa0 0x00 0x00 0x00 0x87 0x10 0x04 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00 0x50 0x04 0x49 0x53 0x49 0x4d 0x73 0x14 0xa0 0x12 0x80 0x01 0x17 0x81 0x02 0x6f 0x34 0x82 0x09 0x45 0x41 0x50 0x20 0x4c 0x41 0x42 0x45 0x4c 0x90 0x00 

You can see aid1 is

0xa0 0x00 0x00 0x00 0x87 0x10 0x02 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00

aid2 is

0xa0 0x00 0x00 0x00 0x87 0x10 0x04 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00

When you choose this aid file and look at the fcp file, it is a bit different from the ordinary one

=>0x00 0xa4 0x04 0x04 0x10 
<=0xa4 
=>0xa0 0x00 0x00 0x00 0x87 0x10 0x02 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00 
<=0x61 0x32 
=>0x00 0xc0 0x00 0x00 0x32 
<=0xc0 0x62 0x30 0x82 0x02 0x78 0x21 0x83 0x02 0xad 0xf1 0x84 0x10 0xa0 0x00 0x00 0x00 0x87 0x10 0x02 0xf2 0x30 0xff 0x01 0x89 0x07 0x02 0x00 0x00 0x8a 0x01 0x05 0x8b 0x06 0x2f 0x06 0x00 0x03 0x01 0x03 0xc6 0x09 0x90 0x01 0x40 0x83 0x01 0x01 0x83 0x01 0x81 0x90 0x00

Telecom Card ADF

=>0x00 0xA4 0x04 0x04 0x10
<=0xA4
=>0xA0 0x00 0x00 0x00 0x87 0x10 0x02 0xFF 0x86 0xFF 0xFF 0x89 0xFF 0xFF 0xFF 0xFF
<=0x61 0x2E
=>0x00 0xC0 0x00 0x00 0x2E
<=0xC0 0x62 0x2C 0x82 0x02 0x78 0x21 0x84 0x10 0xA0 000000871002FF86FFFF89FFFFFFFF8A01058B032F0602C60C90016083010183018183010A 0x90 0x00

There are more bytes in the middle of the data of Bengal card 0x83 0x02 0xad 0xf1. . . So you can't read aid from inside, you must read from 2F00, it is wrong to write wrong when writing logic.

Another problem is that when the heartbeat data F2, you will need to return the aid data. Is the first aid or the second aid returned?

The test found that Bangladesh used the first aid, indicating that the network application of Bangladesh Card used the data under the first aid.

But the domestic telecommunications card uses the aid behind

Published 106 original articles · praised 76 · 130,000 visits +

Guess you like

Origin blog.csdn.net/Creator_Ly/article/details/105674880