When the financial IC card applies for online transaction, the terminal will authenticate the issuer and verify the validity of the card. The terminal will get the ARQC returned by the card through the GAC and compare it with the ARQC generated by the terminal itself. If it is consistent, it means that it is a legitimate card issued by the issuer. At the same time, 3DES calculation will be performed on the ARQC and authentication code, and the card will be returned to ARPC. After the card gets the ARPC, external authentication will be performed, It is used to verify the validity of the terminal. The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
The steps for calculating ARQC are: The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
1. Send GAC The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
2. Use the application master key (ARQC KEY, that is, the first 16 bytes of DGI8000) to encrypt the data spliced by the ATC front supplement 0000000000000 and the ATC reverse front supplement 0000000000000 (for example, ATC is 0001, here is 0000000000000000000000000 FFFE) and calculate the process key SKAC by 3DES encryption, The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
3. The authorized amount of organization data should reach the unpredictable amount (the value of TAG 9F49, the data of internal authentication should be sent during dynamic data authentication), plus the verification results of AIP, ATC and card, 80 should be added, The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
4. Use the process key SKAC to perform MAC calculation on the data of the above organization to obtain the ARQC value. For example: The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
1. The terminal sends GAC: 80AE80000340000000123400000000000340156D86004A80000156120516010101010109032000000000000000000000000000000000000000000000000000000000000 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
Card return: 801E80000EF294D7022FA9B05807020103A4B904010A010000000001BFC423C The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
Card application sub key (first 16 bytes of DGI8000): 0D2E3CB0BC1F9E03AED58F663A2F9679 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
It can be seen that the card verification result of ATC=000E ARQC=F294D7022FA9B058 is 03A4B904 AIP: 7C00 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
2. Use card application sub key 0D2E3CB0BC1F9E03AED58F663A2F9679 to encrypt 000000000000E0000000000000FFF1 with 3DES to obtain process key SKAC: C3D3F062E9992B4E923D338D66193526 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
3. Data returned from GAC and AIP are organized: 00000000123400000000340156D86004A800001561205160101010101+7C00+000E+03A4B904+800000 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
4. The above data is calculated by PBOCMac using SKAC: F294D7022FA9B058 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
The calculation process of ARPC is relatively simple: The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
1. XOR ARQC with service code+6 byte 0 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
2. Use the process key to calculate ARQC to encrypt the XOR result with 3DES (the process key is the same as the above ARQC calculation), which is ARPC The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
3. The card uses the ARPC+service code returned by the terminal for external authentication The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
Examples are as follows: The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
ARQC returned by the above GAC: F294D7022FA9B058 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
1. F294D7022FA9B058 and 3030000000000 XOR C2A4D7022FA9B058 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
2. Use C3D3F062E9992B4E923D338D66193526 for 3DES encryption to get the result ARPC: 3846EEB4C8D34271 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
3. External certification: 0082000000A 3846EEB4C8D34271 3030 The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
Source: SingCard's blog The article originates from the fallen fish- https://www.duoluodeyu.com/2313.html
