ACOSJ-V

Functional Specification V1.01

Subject to change without prior notice [email protected]

www.acs.com.hk
 Table of Contents
1.0. Overview .................................................................................................................. 4
1.1. History of Modification for ACOSJ-V ..................................................................................... 4
1.2. Symbols and Abbreviations ................................................................................................... 4
2.0. Card Specifications ................................................................................................. 7
2.1. Electrical Specifications ......................................................................................................... 7
2.2. Environmental Specifications................................................................................................. 7
2.3. Communication Protocols ...................................................................................................... 7
2.4. Memory .................................................................................................................................. 7
2.5. Cryptographic Functionalities ................................................................................................ 7
2.6. Compliance to Standards ...................................................................................................... 7
2.7. Answer-to-Reset (ATR, Contact Card) .................................................................................. 8
2.8. Answer to Select (ATS, Contactless Card) ............................................................................ 8
3.0. Card Life Cycle States ........................................................................................... 10
3.1. OP_READY .........................................................................................................................10
3.2. INITIALIZED.........................................................................................................................10
3.3. SECURED ...........................................................................................................................11
3.4. CARD_LOCKED ..................................................................................................................11
3.5. TERMINATED .....................................................................................................................11
4.0. Card Architecture .................................................................................................. 12
5.0. VSDC Applet .......................................................................................................... 13
5.1. VSDC Applet Introduction ....................................................................................................13
5.2. Personalization ....................................................................................................................13
6.0. ACOSJ-V ROOT Application ................................................................................. 14
6.1. ACOSJ-V ROOT Application Command Reference ............................................................14
6.1.1. SELECT Command.....................................................................................................14
6.1.2. READ Command.........................................................................................................14
6.1.3. WRITE Command .......................................................................................................14
6.1.4. ACTIVE Command......................................................................................................15
7.0. ACOSJ-V IDENTIFY Application ........................................................................... 16
7.1. ACOSJ-V IDENTIFY Application Description ......................................................................16
7.2. ACOSJ-V IDENTIFY Application Command Reference ......................................................16
7.2.1. SELECT Command.....................................................................................................16
References ................................................................................................ 17

List of Figures
Figure 1 : Card Life Cycle ..................................................................................................................... 10
Figure 2 : ACOSJ-V System Architecture ............................................................................................ 12

List of Tables
Table 1 : History of Modification for ACOSJ-V ....................................................................................... 4
Table 2 : Symbols and Abbreviations ..................................................................................................... 6
Table 3 : Configuration of the Answer-to-Reset ..................................................................................... 8
Table 4 : Answer-to-Reset Historical Bytes ............................................................................................ 8
Table 5 : Configuration of Answer-to-Select ........................................................................................... 9

Page 2 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 Table 6 : VSDC General Information .................................................................................................... 13

Page 3 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 1.0. Overview
ACOSJ-V is a smart card operating system developed by Advanced Card Systems Ltd. It works based
on the JAVA Card Virtual Machine and complies with GlobalPlatform Card Specification Version 2.2.1,
JAVA Card Specification Version 3.0.4 and Mapping Guidelines 1.0.1 on its functions and
configurations. It is a bank card product for Visa® payment application available as dual-interface.
The purpose of this document is to describe the features and functions of the ACOSJ-V smart card
operating system.

1.1. History of Modification for ACOSJ-V

Version Date Released Modifications

 60KB EEPROM
 Compliance with VIS 1.5.4b
ACOSJ-V v2.00 March 2018
 Compliance with VCPS 2.1.3b
 Compliance with VISA Prepaid 1.1.3a

Table 1: History of Modification for ACOSJ-V

1.2. Symbols and Abbreviations

Abbreviation Description
AES Advanced Encryption Standard
AID Application Identifier
APDU Application Protocol Data Unit
API Application Programming Interface
ASCII American Standard Code for Information Interchange
ATR Answer-to-Reset
ATQ Answer-to-Request (for contactless cards)
BCD Binary Coded Decimal
BER Basic Encoding Rules
CAT Card Application Toolkit; or Cryptographic Authorization Template
CBC Cipher Block Chaining
CCT Control Reference Template for Cryptographic Checksum
CIN Card Image Number/Card Identification Number
CLA Class byte of the command message
CRT Control Reference Template
CT Control Reference Template for Confidentiality
CVM Cardholder Verification Method
DAP Data Authentication Pattern
DEK Data Encryption Key
DER Distinguished Encoding Rules
DES Data Encryption Standard
DST Control Reference Template for Digital Signature

Page 4 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 Abbreviation Description
ECB Electronic Code Book
Europay, MasterCard, and VISA; used to refer to the ICC
EMV
Specifications for Payment Systems
ENC Encryption
FCI File Control Information
HEX Hexadecimal
HMAC Keyed-Hash Message Authentication Code
ICC Integrated Circuit Card
ICV Initial Chaining Vector
IIN Issuer Identification Number
INS Instruction byte of the command message
ISO International Organization for Standardization
Lc Exact length of data in a case 3 or case 4 command
Maximum length of data expected in response to a case 2 or case 4
Le
command
LV Length Value
MAC Message Authentication Code
MULTOS Executable Language. The instruction set of the MULTOS™
MEL
runtime environment
OID Object Identifier
P1 Reference control parameter 1
P2 Reference control parameter 2
PIN Personal Identification Number
PKI Public Key Infrastructure
RAM Random Access Memory
RFU Reserved for Future Use
RID Registered Application Provider Identifier
ROM Read-only Memory
RSA Rivest/Shamir/Adleman asymmetric algorithm
SCP Secure Channel Protocol; or (ETSI) Smart Card Platform
SW Status Word
SW1 Status Word One
SW2 Status Word Two
TLV Tag Length Value
TP Trust Point
Hexadecimal values are expressed as hexadecimal digits between
'xx'
single quotation marks
A value in a cell of a table whose purpose is described in the
'X'
'Meaning' column of the table

Page 5 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 Abbreviation Description
A value (0 or 1) in a cell of a table that does not affect the 'Meaning'
'-'
given for that row of the table

Table 2: Symbols and Abbreviations

Page 6 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 2.0. Card Specifications
This section summarizes the features and functionalities of the ACOSJ-V.

2.1. Electrical Specifications

 Operating Voltage: 2.1 V – 5.5 V
 Maximum External Clock Frequency: 10 MHz
 Maximum CPU Clock Frequency: 28 MHz
 ESD Protection: ≤ 5 KV

2.2. Environmental Specifications

 Operating Temperature: -25°C – 85°C

2.3. Communication Protocols

 T=0 with baud up to 625 kbps (external clock frequency 5MHz)
 T=CL protocol with baud up to 848 kbps

2.4. Memory
 Capacity: 60 KB
 EEPROM Endurance: 500,000 erase/write cycles (25°C)
 Data Retention: 30 years (25°C)

2.5. Cryptographic Functionalities

 DES,2K3DES,3K3DES (ECB and CBC)
 AES: 128/192/256 bits (ECB and CBC)
 RSA: 768 to 2048 bits
 Hash: SHA1, SHA224, SHA256, SHA384, SHA512

2.6. Compliance to Standards

 Compliance with ISO 7816 Parts 1, 2, 3, 4
 Compliance with ISO 14443 Type A
 Compliance with JAVA Card Specification Version 3.0.4
 Compliance with Global Platform Specification Version 2.2.1
 Compliance with Mapping Guidelines 1.0.1
 Compliance with VIS 1.5.4b
 Compliance with VCPS 2.1.3b
 Compliance with Visa Prepaid 1.1.3a

Page 7 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 2.7. Answer-to-Reset (ATR, Contact Card)
After a card reset (e.g., power up) is performed, the card transmits an Answer-to-Reset (ATR) in
compliance with ISO 7816 Part 3. ACOSJ-V supports the contact protocol type T=0 with direct or inverse
convention.
The following is the default ATR:

Parameter ATR Description

TS 3Bh Direct convention, the least significant bit is sent first
T0 69h TB1, TC1 and TD1 followed with 9 historical characters
TB1 00h No programming voltage required
TC1 02h Extra guard time
9 historical characters (ACOSJv200)

Table 3: Configuration of the Answer-to-Reset

The 9 historical bytes are composed of the following:

Historical Bytes ATR Description

T1 41h Indicates 'A'
T2 43h Indicates 'C'
T3 4Fh Indicates 'O'
T4 53h Indicates 'S'
T5 4Ah Indicates 'J'
T6 76h Indicates 'v'
T7 32h Indicates '2'
T8 30h Indicates '0'
T9 30h Indicates '0'

Table 4: Answer-to-Reset Historical Bytes

2.8. Answer to Select (ATS, Contactless Card)

After receiving a Request for Answer to Select (RATS) command from the card reading device, the card
transmits an Answer to Select (ATS) in compliance with ISO 14443 Part 4.
The following table shows the default ATS:

Parameter ATS Description

TL 0Eh Length
T0 78h Format byte …codes Y(1) and FSCI
TA1 00h Interface byte…codes DS and DR
TB1 71h Codes FWI and SFGI
TC1 02h Codes protocol options
T1 41h Indicates 'A'
T2 43h Indicates 'C'

Page 8 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 Parameter ATS Description
T3 4Fh Indicates 'O'
T4 53h Indicates 'S'
T5 4Ah Indicates 'J'
T6 76h Indicates 'v'
T7 32h Indicates '2'
T8 30h Indicates '0'
T9 30h Indicates '0'

Table 5: Configuration of Answer-to-Select

Note: For full description of the ATS, kindly refer to ISO 14443 Part 4.

Page 9 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 3.0. Card Life Cycle States
The ACOSJ-V has five card states: OP_READY, INITIALIZED, SECURED, CARD_LOCKED and
TERMINATED. The figure below shows the card life cycle state transition:

OP_READY

INITIALIZED

SECURED

CARD_LOCKED

TERMINATED

Legend

Privileged Security Domain

Privileged Application

Figure 1: Card Life Cycle

3.1. OP_READY
This state indicates that the runtime environment shall be available and the Issuer Security Domain,
acting as the selected Application, shall be ready to receive, execute and respond to APDU commands.
The card shall be capable of Card Content changes, the loading of the Load Files containing
applications not already present in the card may occur.
The installation, from Executable Load Files, of any Application may occur.
Additionally, if any personalization information is available at this stage, Applications may be
personalized.

3.2. INITIALIZED
This state is an administrative card production state. The state transition from OP_READY to
INITIALIZED is irreversible. Its functionality is beyond the scope of this Specification. This state may be
used to indicate that some initial data has been populated (e.g., Issuer Security Domain keys and/or
data) but the card is not yet ready to be issued to the Cardholder.

Page 10 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 3.3. SECURED
This state is the intended operating card Life Cycle State in Post-Issuance. This state may be used by
Security Domains and Applications to enforce their respective security policies. The state transition from
INITIALIZED to SECURED is irreversible.
The SECURED state should be used to indicate to off-card entities that the Issuer Security Domain
contains all necessary keys and security elements for full functionality.

3.4. CARD_LOCKED
The card Life Cycle state CARD_LOCKED is present to provide the capability to disable the selection
of Security Domain and Applications. The card Life Cycle state transition from SECURED to
CARD_LOCKED is reversible.
Setting the card to the CARD_LOCKED state means that the card shall only allow selection of the
application with the Final Application privilege.
Card Content changes, including any type of data management (specifically Security Domain keys and
data), are not allowed in this state.

3.5. TERMINATED
This state signals the end of the card Life Cycle and the card. The state transition from any other state
to TERMINATED is irreversible.
The state TERMINATED shall be used to permanently disable all card functionality with respect to any
card content management and any life cycle changes. This card state is intended as a mechanism for
an Application to logically 'destroy' the card for such reasons as the detection of a severe security threat
or expiration of the card. If a Security Domain has the Final Application privilege only the GET DATA
command shall be processed, all other commands defined in this specification shall be disabled and
shall return an error. If an application has the Final Application privilege its command processing is
subject to issuer policy.
The OPEN itself, or a Security Domain with Card Terminate privilege, or an Application with Card
Terminate privilege (see GlobalPlatform Card Specification Version 2.2.1), may initiate the transition
from any of the previous states to the state TERMINATED.

Page 11 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 4.0. Card Architecture
To meet the GlobalPlatform specification for Java card, the ACOSJ-V card has the architecture for
applications as shown in the figure below:

Figure 2: ACOSJ-V System Architecture

Page 12 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 5.0. VSDC Applet

5.1. VSDC Applet Introduction

The VSDC 2.8.1G have loaded in the ACOSJ-V before delivery. The general information is shown in
the table below:

Item Description
Manufacturer Visa International Service Association
Applet Name VSDC 2.8.1G
Applet Type And Version Visa Smart Debit Credit(VSDC) 2.8.1G
Platform Product Was Tested On GlobalPlatform
VTF# Of Product Tested On LBADVA03075A
Protocol T=0 , T=TypeA

Table 6: VSDC General Information

The following are the applets that are supported by VSDC2.8.1G：

 Visa Smart Debit/Credit
 Quick Visa Smart Debit/Credit
 Visa prepaid

5.2. Personalization
This applet supports the EMV Card Personalization Specification (EMV CPS) version 1.1. This
specification is available from EMVCo.
For additional personalization support, refer to VSDC Personalization Specification version 2.0.

Page 13 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 6.0. ACOSJ-V ROOT Application
The commands in the ROOT application can be used only after the ROOT application is correctly
selected (using the select command and transmission key). After entering into the ROOT Application,
the user can read or configure card parameters through commands supported by the ROOT Application.
To exit ROOT Application and select another application, the card must be reset.
Under the ROOT Application, parameters of the card can be read or configured.
The ROOT Application will become invalid once the card is activated.

6.1. ACOSJ-V ROOT Application Command Reference

6.1.1. SELECT Command
6.1.1.1. Definition and Scope
The SELECT command is used to select the ROOT application.

6.1.1.2. Processing State Returned in the Response Message

A successful execution of the command shall be indicated by status bytes 90 00h.

6.1.2. READ Command

6.1.2.1. Definition and Scope
This command is used to read from the configuration area. Configuration parameters of the card can
be read through this command.

6.1.2.2. Data Field returned in the Response Message

The read configuration data.

6.1.2.3. Processing State returned in the Response Message

A successful execution of the command shall be indicated by status bytes 90 00h.

6.1.3. WRITE Command

6.1.3.1. Definition and Scope
This command is used to write data to the configuration area. Configuration parameters of the card can
be set through this command.

6.1.3.2. Data Field returned in the Response Message

The data field of the response message shall not be present.

6.1.3.3. Processing State returned in the Response Message

A successful execution of the command shall be indicated by status bytes 90 00h.

Page 14 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 6.1.4. ACTIVE Command
6.1.4.1. Definition and Scope
This command is used to activate the card. Once this command is implemented successfully, the ROOT
Application will become invalid, and the configuration data of the card cannot be read or set directly any
more.

6.1.4.2. Data Field returned in the Response Message

The data field of the response message shall not be present.

6.1.4.3. Processing State returned in the Response Message

A successful execution of the command shall be indicated by status bytes 90 00h.

Page 15 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 7.0. ACOSJ-V IDENTIFY Application
7.1. ACOSJ-V IDENTIFY Application Description
After the IDENTIFY Application is selected with a SELECT Command, ACOSJ-V will return the
version number of ACOSJ-V and indicates whether the card has been activated.

7.2. ACOSJ-V IDENTIFY Application Command Reference

7.2.1. SELECT Command
7.2.1.1. Definition and Scope
The SELECT command is used for selecting the IDENTIFY Application.

7.2.1.2. Response Message

7.2.1.2.1. Data Field returned in the Response Message
The SELECT response data field consists of information specific to the selected Application.

7.2.1.2.2. Processing State returned in the Response Message

A successful execution of the command shall be indicated by status bytes 90 00h.

Page 16 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk
 References
The documents below served as references for the ACOSJ Reference Manual.:
 GlobalPlatform Card Specification Version 2.2.1
 GlobalPlatform Card API Version 1.6
 Java Card 3 API, Classic Edition Version 3.0.4
 Java Card 3 Platform Runtime Environment Specification, Classic Edition Version 3.0.4
September 2011
 Java Card 3 Platform Virtual Machine Specification, Classic Edition Version 3.0.4 September
2011
 GlobalPlatform Card Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1
Version 1.0.1
 Visa Integrated Circuit Card Specification (VIS) Version 1.5.4b
 Visa Contactless Payment Specification (VCPS) version 2.1.3b
 Pilot Visa Prepaid Chip Specification 1.1.3a

EMV is a registered trademark of EMVCo LLC in the United States and other countries.
MULTOS is a registered trademark of MAOSCO Limited.
Visa is a registered trademark of Visa International Service Association.

Page 17 of 17

www.acs.com
ACOSJ-V – Functional Specification [email protected]
.hk
Version 1.01 www.acs.com.hk