Council Regulation (EEC) No 3821/85Show full title

[F1 [F2 3.6.9. External authenticate U.K.

This command is compliant with ISO/IEC 7816-4.

Using the EXTERNAL AUTHENTICATE command, the card can authenticate the IFD.

The authentication process is described in Appendix 11. It includes the following statements:

[TCS_354] A GET CHALLENGE command must precede the EXTERNAL_AUTHENTICATE command immediately. The card issues a challenge to the outside (RND3).

[TCS_355] The verification of the cryptogram uses RND3 (challenge issued by the card), the card private key (implicitly selected) and the public key previously selected by the MSE command.

[TCS_356] The card verifies the cryptogram, and if it is correct, the AUT access condition is opened.

[TCS_357] [X1 The input cryptogram carries the second element for session key agreement K2.]

Editorial Information

X1 Substituted by Corrigendum to Commission Regulation (EC) No 1360/2002 of 13 June 2002 adapting for the seventh time to technical progress Council Regulation (EEC) No 3821/85 on recording equipment in road transport (Official Journal of the European Communities L 207 of 5 August 2002).

[TCS_358] Command Message

Byte	Length	Value	Description
CLA	1	′00h′	CLA
INS	1	′82h′	INS
P1	1	′00h′	P1
P2	1	′00h′	P2 (the public key to be used is implicitly known, and has been previously set by the MSE command)
Lc	1	′80h′	Lc (Length of the data sent to the card)
#6-#133	128	′XX..XXh′	Cryptogram (see Appendix 11)

[TCS_359] Response Message

Byte	Length	Value	Description
SW	2	′XXXXh′	Status words (status words (SW1, SW2))

• If the command is successful, the card returns ′9000′,

• if no Public Key is present in the Security Environment, ′6A88′ is returned,

• if the CHA of the currently set public key is not the concatenation of the Tachograph application AID and of a VU equipment Type, the processing state returned is ′6F00′ (see Appendix 11),

• if no Private Key is present in the Security Environment, the processing state returned is ′6A88′,

• if the verification of the cryptogram is wrong, the processing state returned is ′6688′,

• if the command is not immediately preceded with a GET CHALLENGE command, the processing state returned is ′6985′,

• if the selected private key is considered corrupted, the processing state returned is ′6400′ or ′6581′.

[TCS_360] If the EXTERNAL AUTHENTICATE command is successful, and if the first part of the session key is available from a successful INTERNAL AUTHENTICATE recently performed, the session key is set for future commands using secure messaging.

[TCS_361] If the first session key part is not available from a previous INTERNAL AUTHENTICATE command, the second part of the session key, sent by the IFD, is not stored in the card. This mechanism ensures that the mutual authentication process is done in the order specified in Appendix 11.] ]

Textual Amendments

F1 Inserted by Council Regulation (EC) No 2135/98 of 24 September 1998 amending Regulation (EEC) No 3821/85 on recording equipment in road transport and Directive 88/599/EEC concerning the application of Regulations (EEC) No 3820/85 and (EEC) No 3821/85.

F2 Substituted by Commission Regulation (EC) No 1360/2002 of 13 June 2002 adapting for the seventh time to technical progress Council Regulation (EEC) No 3821/85 on recording equipment in road transport (Text with EEA relevance).