e142-aq@hercules.Berkeley.EDU (Alan Nishioka) (09/26/90)
Does anybody know how information is encoded on the magnetic stripe for credit cards, bank cards, my student id, etc.? Any references? A trip to the library and looking thru the reader 's guide didn't get me anywhere. I just bought a card reader which had 5 ttl level outputs. Two for each of 2 head tracks and a 5th that goes low when a card is being run thru. The chips don't seem to be identifiable. I discovered that cards seem to use two different levels of stripe, for a total of 4 tracks on my bank card, but only two on my student id, which are at the wrong level for my reader. Looking at the bank card with magnaview film (from Edmund Scientific) I can see two levels of stripes, so maybe only two tracks are actually used. The code must be self-clocking and I would guess just have simple error checking (parity) since the card can just be run thru again if necessary. BTW, I just want to read, not commit bank fraud :-) I would have to build another card input/output assembly for that :-) --------------------------------------------------------------------------- Alan Nishioka atn@cory ...!ucbvax!cory!atn
ropg@ooc.uva.nl (Rop Gonggrijp) (09/26/90)
e142-aq@hercules.Berkeley.EDU (Alan Nishioka) writes: >Does anybody know how information is encoded on the magnetic stripe for >credit cards, bank cards, my student id, etc.? Any references? A trip >to the library and looking thru the reader 's guide didn't get me anywhere. Well, there's three tracks (ISO 3554), all 0.110" wide. The top one is 210 BPI and has 7 bits per chr. (incl. parity). Total 79 alpha-num. chrs. The second track has 75 BPI, 5 bits per chr. (incl. par.) total 40 digits The third track has agian 210 BPI, 5 bits per chr (yeah incl. par.) total 107 digits. Data is coded reversing the polarity of the magnetic field once or twice in the field for that bit. Since you cannot double of half the speed of the card within the space for 1 bit, it all works. >I just bought a card reader which had 5 ttl level outputs. Two for each >of 2 head tracks and a 5th that goes low when a card is being run thru. >The chips don't seem to be identifiable. Well, the bad news is that you'll have to write the decoding software yourself. Not much to it, I did it on a Commodore-64. Our magazine ("Hack-Tic") printed the full specs on all this in the last issue. -- Rop Gonggrijp (ropg@ooc.uva.nl) is also editor of Hack-Tic (hack/phreak mag.) quote: "We don't care about freedom of the mind, | Postbus 22953 (in DUTCH) freedom of signature will do just fine" | 1100 DL AMSTERDAM Any opinions in this posting are wasted on you | tel: +31 20 6001480
jad@dayton.UUCP (J. Deters) (09/28/90)
> Article <28174@pasteur.Berkeley.EDU> From: e142-aq@hercules.Berkeley.EDU > (Alan Nishioka) >Does anybody know how information is encoded on the magnetic stripe for >credit cards, bank cards, my student id, etc.? Any references? A trip >to the library and looking thru the reader 's guide didn't get me anywhere. You'll want to see the American National Standard X4.16 (which I just happen to have sitting in my lap.) It is available from the American National Standards Institute, Inc. 1430 Broadway New York, NY 10018 My version is dated 1983. I suspect it has been superceded by now. It details everything (everything!) you ever could possibly want to know about mag stripe encoding for financial services cards. >I just bought a card reader which had 5 ttl level outputs. Two for each >of 2 head tracks and a 5th that goes low when a card is being run thru. >The chips don't seem to be identifiable. In most all of the MSR's I've taken apart, the chips are custom. One of our vendor's configurations for the wiring looked like this: 1 RDT1 Data from track 1 2 RCL1 Clock from track 1 3 GND 4 +5V 5 n/c 6 RCL2 Clock from track 2 7 CLD Card Presence 8 RDT2 Data from track 2 You could use a scope to determine which is which -- track 2 is recorded at 75 bits/inch while track 1 is 210 bits/inch. Just watch the blinking! The data is self clocking. _____ __ __ _____ __ | |_____| |__| |__| |__| |_____ ^ ^ ^ ^ ^ ^ ^ 0 0 1 1 0 1 0 >I discovered that cards seem to use two different levels of stripe, for >a total of 4 tracks on my bank card, but only two on my student id, which >are at the wrong level for my reader. Your bank card will typically only use the read-only tracks one and two. Track 3 is a read/write track that has the same electromagnetic properties as track 1, but its usage is not standardized within the industry. Many cards issued today do not even have magnetic media at the location for track 3. (It was originally intended for off-line ATM authorization, but guess what happened to that idea!) >The code must be self-clocking and I would guess just have simple >error checking (parity) since the card can just be run thru again if >necessary. The parity checking is pretty impressive. Track 1 characters are 6 bits plus one (odd) parity bit. There is also an LRC (Longitudinal Redundancy Check) character after the end sentinel character. The LRC bits are parity bits for all the characters in the track such that the total one bits are odd. (The LRC parity bit is simply a parity check on the LRC character.) This scheme protects against almost all random card damage, as you would have to have four bits wrong (the corners of a rectangle, physically) to escape detection. Track 2 parity detection is the same, but track 2 characters are only 4 bits plus one (odd) parity bit. The character sets are fairly simple subsets of ASCII. Tracks 1 & 3 use this table: 0 1 2 3 00 01 10 11 <-MSD 0 0000 SP 0 @a P 1 0001 !a 1 A Q 2 0010 "a 2 B R 3 0011 #b 3 C S 4 0100 $ 4 D T 5 0101 %c 5 E U 6 0110 &a 6 F V 7 0111 'a 7 G W 8 1000 ( 8 H X 9 1001 ) 9 I Y A 1010 *a :a J Z B 1011 +a ;a K [d C 1100 ,a <a L \d D 1101 - =a M ]d E 1110 . >a N ^c F 1111 / ?c O _d a For the encoding of data on magnetic stripe cards, these character positions shall not contain information characters (data content). b Optional additional graphic. c These characters shall have the following meaning for this application: 25 % represents start sentinel. 3F ? represents end sentinel. 5E ^ represents separator. d These character positions are reserved for additional national characters when required. They shall not be used internationally. Track 1 format: Format A. Reserved for proprietary use of card issuer. Format B. Start sentinel 1 character Format code = "B" 1 character - alpha only Primary Account Number Up to 19 characters (Note 1) Separator 1 character Country code 3 characters (Note 2) Name 2-26 characters (note 3) Surname Surname separator="/" First name or initial Space (when required) (Note 4) Middle name or initial Period (when followed by title) Title (when used) Separator 1 character Expiration date or 4 characters or 1 character separator (Note 5) Discretionary data The balance to maximum record length End sentinel 1 character LRC 1 character (see above for LRC calculation) Total 79 characters max. Notes: 1 In accordance with the account numbering scheme in ANSI X4.13-1983. 2 When the primary account number commences with major industry identifier "5" followed by "9", the encoding of the country in this position is mandatory. In all other situations, the expiration date or separator shall immediately follow the separator that terminates the primary account number. The country code for the United States is 840. 3 The absolute minimum data encoded in the name field will be a single alpha character in the surname area and the surname separator (/). 4 The space character is required to separate the logical elements of the name field other than the surname. The separator terminating the name field should be encoded following the last logical element of the name field. If only the surname is encoded, it will follow the surname separator. 5 In accordance with ANSI X3.30-1971. If no expiration date is associated with the card, a separator shall be encoded. The format for the expiration date is YYMM. Format Codes C through M. The format codes are reserved for use by ANSI Subcommittee X3B10 in connection with other data formats of track 1. Format Codes N through Z. Available for use by individual card issuers. Track 2 uses the following 4 bit character set: 0 0000 0 1 0001 1 2 0010 2 3 0011 3 4 0100 4 5 0101 5 6 0110 6 7 0111 7 8 1000 8 9 1001 9 A 1010 Note 1 B 1011 Start sentinel (start character) C 1100 Note 2 D 1101 Separator E 1110 Note 1 F 1111 End sentinel (stop character) Notes: 1 These characters are available for hardware control purposes and shall not be used for data content. 2 This character is reserved for future definition in connection with the data format on track 2. Track 2 format: Start sentinel 1 character Primary Account Number Up to 19 characters (Note 1) Separator 1 character Country code 3 characters (Note 2) Expiration date or 4 characters or 1 character separator (Note 3) Discretionary data The balance to maximum record length End sentinel 1 character LRC 1 character (see above for LRC calculation) Total 40 characters max. Notes: 1 In accordance with the account numbering scheme in ANSI X4.13-1983. 2 When the primary account number commences with major industry identifier "5" followed by "9", the encoding of the country in this position is mandatory. In all other situations, the expiration date or separator shall immediately follow the separator that terminates the primary account number. The country code for the United States is 840. 3 In accordance with ANSI X3.30-1971. If no expiration date is associated with the card, a separator shall be encoded. The format for the expiration date is YYMM. >BTW, I just want to read, not commit bank fraud :-) I would have to build >another card input/output assembly for that :-) I've seen some scams based on ATM card fraud, but it may be tough to fool Mother Visa...particularily when you have to hand your card to a living, breathing human. Do me a favor and mail me a copy of your interface circuit when you get it working, OK? -j, now you know all our little secrets, eh? -- J. Deters Ask me about my PS/2. // INTERNET: jad@dayton.DHDSC.MN.ORG Then, // UUCP: ...!bungia!dayton!jad ask me about my Amiga! \\ // ICBM: 44^58'36"N by 93^16'12"W \X/