Default access permissions for the data block and control block when the M1 card leaves the factory

Memory Structure of M1 S50: Memory.

Two independent passwords can be set for each sector of the M1 card to protect the data in the current sector. Only the specified password can be used to read and write the data in the current sector according to the requirements of the control word of the 3rd block of the current sector.

The 3rd pieces of data for each sector that leaves the factory are:

According to The S50 contactless IC card learning notes, the user program can perform the following operations on the M1 card:

 

So when the M1 card leaves the factory0th ~ 2 Data blocksOperation permission:

 Explanation:When performing a new card operation, you only need to verify any block in the zone for Password A or password B, and then you can perform a verification on the Block 0 ~ Two parts for read/write

 

So when the M1 card leaves the factory3rd control blocks in each regionOperation permission:

 

 

 

 

Explanation: Do the following only when the Password A is verified to be correct:

1. Change Password;

2. Modify the control word;

3. Change Password B and Read Password B.

 

Lab:

Enter the wrong password for the M1 card. After more than 20 verifications, the M1 card does not have an actual lock, the result of reading 3rd pieces of data from each region (namely, reading Password A, control word, and password B) is always:

0x00 0x00 0x00 0x00 0x00 0x00 0xff 0x06 0x80 0x69 0xff 0xff 0xff 0xff 0xff 0xff 0xff

Consistent with the access permission of the preceding control word;