Test & Measurement


Debugging smartcards using a logic analyser

12 June 2013 Test & Measurement

Figure 1. An assortment of smartcards.
Figure 1. An assortment of smartcards.

A smartcard, chip card, or integrated circuit card (ICC), is any pocket-sized card with embedded integrated circuits which can process data.

This implies that it can receive input which is processed – by way of the ICC applications – and delivered as an output.

There are two broad categories of ICCs: memory cards contain only non-volatile memory storage components and perhaps some specific security logic, while microprocessor cards contain volatile memory and microprocessor components. The card is made of plastic, generally PVC, but sometimes ABS. It may embed a hologram to avoid counterfeiting.

Figure 2. Connections to a smartcard reader.
Figure 2. Connections to a smartcard reader.

Using smartcards is also a form of strong security authentication for single sign-on within large companies and organisations.

Table 1 describes the contacts of a smartcard and Figure 2 shows a typical smartcard reader which is sold on the market.

Table 1. Smartcard connections.
Table 1. Smartcard connections.

Measurement of ISO 7816 signals with a logic analyser

Figure 3. Protocol interpreter interface for smartcard ISO 7816 protocol.
Figure 3. Protocol interpreter interface for smartcard ISO 7816 protocol.

There are eight contacts on the smartcard in total. It is necessary to connect only three of them (clock, ground and I/O) to the Zeroplus logic analyser when measuring. All Zeroplus logic analysers come with 30 to 60 free protocol interpreters; one of these is the ISO 7816 protocol for communicating with smartcards. The captured waveform on a Zeroplus LA is displayed in Figure 3.

The signal structure of ISO 7816 is similar to that of RS-232C, the difference being that ISO 7816 relies on the clock to synchronise the data while RS-232C uses the baud rate of its signal to synchronise the data. ISO 7816 takes the 16 bits of clock as one unit to start sampling data – see Figure 4.

Figure 4. Analysis of the clock start bit and preamble.
Figure 4. Analysis of the clock start bit and preamble.

As shown in Figure 5, after the clock signal after the start bit has generated 16 cycles (1 ETU), it is time to look for the data; the data packet is analysed in the same way.

Figure 5. Analysis of the whole ISO 7816 packet.
Figure 5. Analysis of the whole ISO 7816 packet.

The format of the signal packet consists of the Start (1 bit), Data (8 bits), Parity Check (1 bit) and Stop (2 bits). Each bit on the data line needs to appear for 16 clock cycles (1 ETU) on the clock line, and the transmission direction of the data is fixed, which is LSB to MSB.

Setting up any protocol interpreters for the Zeroplus LA is made very simple by an intuitive user interface and context-specific menus. Only four properties in two categories need to be specified:

Pin assignment: Setting channel DATA and CLK;

Protocol analyser property: Set the periods of the clock as 1 bit in the ISO 7816 signal. The default is 16 periods, and the maximum can be set as 2048 periods.

Figure 6: Setting up the protocol analyser for ISO 7816 UART in the Zeroplus logic analyser software interface.
Figure 6: Setting up the protocol analyser for ISO 7816 UART in the Zeroplus logic analyser software interface.

Figure 6 displays a screenshot of how to configure the interpreter for the ISO 1786 protocol.

Conclusion

The bottom line for the engineer or the manager is that using a logic analyser with a built-in protocol interpreter for the specific serial bus they are working on, like the Zeroplus logic analysers, will save a lot of time, very quickly paying for the cost of the analyser.

Gone are the days when an engineer can afford to sit for hours decoding digital busses on an oscilloscope. That is simply unproductive when there are logic analysers that can do that job in seconds and are affordable for the individual and small company. It simply does not make financial sense to debug today’s complex serial busses using yesterday’s methods.

As with all our other products at K Measure, we tell our new customers to bring it back for a guaranteed, no-questions-asked refund if the tool they buy does not save them time or cannot do what they expected. We have not had a single customer using that privilege in the full five years we have been selling Zeroplus’ logic analysers.

For more information contact K Measure, +27 (0)87 230 0134, [email protected], www.kmeasure.co.za



Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

60 MHz 16-bit AWG
Vepac Electronics Test & Measurement
Siglent’s SDG1000X Plus series function/arbitrary waveform generator offers a maximum output frequency of 60 MHz, 16-bit vertical resolution, 1 GSa/s sampling rate, and 8 Mpts arbitrary waveform length.

Read more...
AC programmable power
Accutronics Test & Measurement
TDK Corporation has announced the introduction of the TDK-Lambda brand GENESYS AC and GENESYS AC PRO series of 2 kVA and 3 kVA rated programmable AC power sources.

Read more...
QA introduces large chisel tip style probes
Techmet Test & Measurement
The two new probes have a larger diameter to provide better contact reliability.

Read more...
Digital PSU with four variable outputs
Vepac Electronics Test & Measurement
The PeakTech 6215 is a laboratory power supply with four separate voltage outputs, each one infinitely variable using the rotary controls on the front of the unit.

Read more...
High-voltage insulation resistance testers
Comtest Test & Measurement
Two new high-voltage insulation resistance testers, from Fluke, deliver accuracy and speed in industrial and solar PV applications.

Read more...
Digital accelerometer for high dynamics applications
RS South Africa Test & Measurement
TDK extends its Tronics portfolio with the AXO314, a high-performance digital MEMS accelerometer with ±14 g input range for industrial applications operating under shock and vibration.

Read more...
Acceleration sensors for wearables
Future Electronics Test & Measurement
Bosch Sensortec has introduced two new acceleration sensors, the BMA530 and BMA580, both offered in a compact size of only 1,2 x 0,8 x 0,55 mm.

Read more...
Accurate laser measurement
Avnet Silica Test & Measurement
Online Teaser: Panasonic Industry’s laser sensor has a resolution of up to 0,5 µm, a linearity of ±0,05% FS, and a high-speed sampling of 100 µs.

Read more...
Handheld analyser with wide frequency range
Vepac Electronics Test & Measurement
The PXN-400 from Harogic is a handheld spectrum analyser that covers a frequency range of 9 kHz to 40 GHz, with an analytical bandwidth of 100 MHz.

Read more...
Real-time portable spectrum analyser
Vepac Electronics Test & Measurement
The SA series from HAROGIC Technologies is designed as a compact USB real-time spectrum analyser using low SWaP principles.

Read more...