ib technology
Note that as mentioned for the WRITE command, Mifare Ultralight cards DO NOT USE
Security Keys or Authentication and the memory is organised differently as groups of 4 bytes
(Pages). However, unlike the Write command, 16 bytes (4 pages) can be read in a single
operation The same Read command as above is used except the “Block” address is treated as
a “Page Address” and the KeyType/Key number parameter is a dummy 0x00 byte. For page
numbers greater than 12, the card data wraps around to page 0 etc.
B7
B0
Command:
Argument1:
Argument2:
0 1 0 1 0 0 1 0
x x x x N N N N
0 0 0 0 0 0 0 0
(Ascii “R”, 0x52)
(N = UL Card Page Address 0 – 15)
(Dummy byte, 0x00)
Acknowledge: 1 F F F F F F X
Data only follows if Read was successful
(F = Status flags)
Reply1:
Reply2:
Reply3:
Reply4:
D D D D D D D D
D D D D D D D D
D D D D D D D D
D D D D D D D D
(D = LS Byte of data Read from UL card)
16 Bytes of data
Reply13:
Reply14:
Reply15:
Reply16:
D D D D D D D D
D D D D D D D D
D D D D D D D D
D D D D D D D D
(D = MS Byte of data Read from UL card)
Inc Value (only operates on Value Data Structure)
Command to increment integer within a Value Data Structure. The command loads the value
from the specified block address, adds the integer parameter and stores the result at the same
or another block address. Note that the source block must have been formatted as a Value
Block beforehand according to the data structure below, using the WRITE command. The
INC Value command only operates on a "Value Block Structure" and will fail if the block
configuration or the specified key type is incorrect.
Value Block Structure
Example format for value = 100 decimal (0x64), at block address 0.
(Value data stored LS byte first, ADR = block address, ADR = inverted block address)
0x64 00 00 00 9B FF FF FF 64 00 00 00 00 FF 00 FF
Byte:
0
1
2
3
4
5
6
7
8
9 10 11 12 13 14 15
ADR ADR
Value
Inverted Value
Value
ADR
ADR
The first argument is the source block address to load data from, the second argument
specifies which key code and type to use for sector authentication (0-31 and if it is KeyA or
KeyB type).
15
RFSOLUTIONS [ RFSOLUTIONS.LTD ]
