Le 07/06/2012 11:47, Martin Paljak a écrit :
> For card detection: ATR is supposed to be a technical interface
> descriptor.
Yes. And only for contact cards, not contactless. In practice this is a very bad
solution:

-contactless cards have no atr, what is returned by the reader is a fake byte
string that looks like an atr and is mostly reader dependent.

-the meaningful bit is the application, not the container, this is more and more
true with loadable objects, such as javacards and nfc phones. Two objects  can
have totally different ATRs and still host the exact same application.

-some cards have a serial number in the atr, so a simple match will only work
for one card. You need a mask, which adds complexity.

So if anyone is designing a card recognition application, he should just avoid
the atr. The fact that MS did it is not a good reason :)

Regards
Sebastien
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to