智能卡CPU卡开卡指令

00 B0 96 00 06

3B 79 18 00 00 50 53 4D 5F 54 43 31 30 30
3B 79 18 00 00 50 53 4D 5F 54 43 31 30 30
00 B0 96 00 06 B0 01 53 00 02 9D 95 90 00
00 B0 95 00 0A B0 53 01 01 01 00 00 00 17 14 13 90 00
3B 79 18 00 00 50 53 4D 5F 54 43 31 30 30
3B 79 18 00 00 50 53 4D 5F 54 43 31 30 30
00 B0 96 00 06 B0 01 53 00 02 9D 95 90 00
00 B0 95 00 0A B0 53 01 01 01 00 00 00 17 14 13 90 00

00,B0,83,00,06,
00A4000000
00C000000F

    BYTE ucSendBuf[5] = {0x00,0xC0,0x00,0x00};
    ucSendBuf[4] = SW2;

00a40000023f00
00 B0 96 00 06
01 53 00 02 9D 95 90 00

代码	值
CLA	00
INS	B0
P1	xx
P2	xx
Lc	不存在；（CLA=04 时除外）
Data	不存在；（CLA=04 时，应包括MAC）
Le	要读取数据的长度

若P1 的高三位为100，则低5 位为短的文件标识符，P2 为读的偏移量。
若P1 的最高位不为1，则P1 P2 为欲读文件的偏移量(P1 为偏移量高字节，P2 为低字
节)，所读的文件为当前文件。

例子：
1]：文件标识符为0005 的二进制文件，文件主体空间的大小为8 个字节，建立时不采
用线路保护。
读出自偏移量01 开始到文件结束的所有数据，不进行线路保护，则命令为：
00 B0 85 01 00
由卡片返回的响应数据为：
11 22 33 44 55 66 77 9000

80– CLA
E0– INS
00–
06
07
28 00 1E F0 F0 FF 02

代码	值	例子
CLA	80
INS	E0
P1	文件标示(File ID)
P2	文件标示(File ID)
Lc	xx
Data	文件控制信息和DF 名称
Le	要读取数据的长度

代码	值
CLA	80
INS	E0
P1	文件标示(File ID)
P2
Data	文件控制信息和DF 名称
Le	要读取数据的长度

Send Data :00,A4,00,00,00,
Recv Data:61,0F,
Send Data :00,C0,00,00,0F,
Recv Data:6F,0D,84,06,46,4D,53,48,4D,46,A5,03,88,01,01,90,00,
Send Data :00,84,00,00,04,
Recv Data:CA,E9,FD,62,90,00,
Send Data :00,82,00,00,08,DD,4D,2C,FC,5F,31,D6,7E,
Recv Data:90,00,
Send Data :80,0E,00,00,00,
Recv Data:90,00,
Send Data :00,A4,00,00,00,
Recv Data:61,0A,
Send Data :00,C0,00,00,0A,
Recv Data:6F,08,84,06,46,4D,53,48,4D,46,90,00,
Send Data :80,E0,00,00,07,3F,00,B0,01,F0,FF,FF,
Recv Data:90,00,
Send Data :80,D4,01,00,0D,39,F0,F0,AA,55,FF,FF,FF,FF,FF,FF,FF,FF,
Recv Data:90,00,
Send Data :80,E0,3F,01,0D,38,05,20,F0,F0,95,FF,FF,44,44,46,30,31,
Recv Data:90,00,
Send Data :80,E0,00,01,07,3F,01,8F,95,F0,FF,FF,
Recv Data:90,00,
Send Data :80,D4,01,01,08,3A,F0,EF,44,55,12,34,56,
Recv Data:90,00,
Send Data :80,E0,00,03,07,28,00,1E,F0,F0,FF,02,
Recv Data:90,00,
Send Data :80,E0,00,04,07,28,00,0F,F4,F0,FF,02,
Recv Data:90,00,
Send Data :00,A4,00,00,02,00,03,
Recv Data:90,00,
Send Data :00,D6,00,00,05,01,02,03,04,05,
Recv Data:90,00,
Send Data :00,A4,00,00,02,00,04,
Recv Data:90,00,
Send Data :00,D6,00,00,06,11,22,33,44,55,66,
Recv Data:90,00,

Send Data :00,B0,83,00,06,
Recv Data:01,02,03,04,05,00,90,00,
SmartCard Reader Cnt dw =1,
i=0,Gemplus USB Smart Card Reader 0
Gemplus USB Smart Card Reader 0
连接读卡器: Gemplus USB Smart Card Reader 0
通讯协议: T0
Send Data :00,B0,83,00,06,
Recv Data:01,02,03,04,05,00,90,00,

00,A4,00,00,02,3F,01,
80E000160728001EF0F0FF02
80E000150728001EF0F0FF02

00,A4,00,00,02,00,16,
00,D6,00,00,06,01 ,53 ,00 ,02 ,9D ,95

00,A4,00,00,02,00,15,
00,D6,00,00,0A,53 ,01,01 ,01 ,00, 00, 00, 17 ,14 ,13

00 B0 96 00 06
00 B0 95 00 0A

FM1216 开卡指令：

SmartCard Reader Cnt dw =1,
i=0,Gemplus USB Smart Card Reader 0
Gemplus USB Smart Card Reader 0
连接读卡器: Gemplus USB Smart Card Reader 0
通讯协议: T0
Send Data :00,84,00,00,04,
Recv Data:80,3E,F2,2C,90,00,
Send Data :00,82,00,00,08,6B,23,4F,74,12,6F,4C,9A,
Recv Data:90,00,
Send Data :80,0E,00,00,00,
Recv Data:90,00,
Send Data :00,A4,00,00,00,
Recv Data:61,12,
Send Data :00,C0,00,00,12,
Recv Data:6F,10,84,0E,31,50,41,59,2E,53,59,53,2E,44,44,46,30,31,90,00,
Send Data :80,E0,00,00,07,3F,00,B0,01,F0,FF,FF,
Recv Data:90,00,
Send Data :80,D4,01,00,0D,39,F0,F0,AA,55,FF,FF,FF,FF,FF,FF,FF,FF,
Recv Data:90,00,
Send Data :80,E0,00,16,07,28,00,1E,F0,F0,FF,02,
Recv Data:90,00,
Send Data :80,E0,00,15,07,28,00,1E,F0,F0,FF,02,
Recv Data:90,00,
Send Data :00,A4,00,00,02,00,16,
Recv Data:90,00,
Send Data :00,D6,00,00,06,01,53,00,02,9D,95,
Recv Data:90,00,
Send Data :00,A4,00,00,02,00,15,
Recv Data:90,00,
Send Data :00,D6,00,00,0A,53,01,01,01,00,00,00,17,14,13,
Recv Data:90,00,
Send Data :00,B0,96,00,06,
Recv Data:01,53,00,02,9D,95,90,00,
Send Data :00,B0,95,00,0A,
Recv Data:53,01,01,01,00,00,00,17,14,13,90,00,

上述开卡是使用的是如下的软件：
用到的卡片为 复旦FM1216-109 纯16k 双界面卡（即可以接触式，也可以非接触式），淘宝买的

复旦卡的初始密钥为: FFFFFFFFFFFFFFFF

在主目录下建立密钥文件，和建立 16和15两个二进制文件，需要在开卡的时候一次性完成，卡片掉电之后，在主目录再次建立别的二进制文件，会出错。具体原因应该是和卡的机制有关。这句话可能是个人的一个错误的判断，有空验证一下。

\ETC_SmartCard\my_doc\CardIssue1\CardIssue1