Lowyat.NET Forums

Welcome Guest ( Log In | Register )

LYN wins Intel-Lenovo-Tangs Blogathon challenge. Thank you everybody!
2 Pages  1 2 > 
RSS feedBump TopicReply to this topicStart new topicStart Poll

Outline · [ Standard ] · Linear+

> How to get JPN info + Addres + Photo from myKad

waykeong
post Apr 13 2007, 01:09 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #1


Newbie
*

Group: Junior Member
Posts: 30
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2005




Hi there,

Is there anyone know how to retrieve JPN Info (Name,IC,Gender,etc),IC Photo, and Address from myKad?

I am too noob to do so, preferably using vb.net. :>
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
narf03
post Apr 13 2007, 03:16 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #2


Regular
******

Group: Senior Member
Posts: 1,641
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Dec 2004
From: Metro Prima, Kuala Lumpur, Malaysia, Earth, Sol





U need to buy SDK from IRIS, the SDK include of a MyKad reader, driver, installer and SDK. The price is around RM1.5k.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
waykeong
post Apr 13 2007, 04:37 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #3


Newbie
*

Group: Junior Member
Posts: 30
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2005




I thought the SDK at the very beginning is free?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
narf03
post Apr 13 2007, 04:51 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #4


Regular
******

Group: Senior Member
Posts: 1,641
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Dec 2004
From: Metro Prima, Kuala Lumpur, Malaysia, Earth, Sol





First of all, I do not work for IRIS tongue.gif

The SDK should not be free, unless IRIS declare its, its protected by license agreements. But the software developed by the SDK can be free. But the software developed cannot be modify, if you need to use any programming languages, i think u will need the SDK.

Any1 else heard of any SDK that can read MyKad free ?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xenon
post Apr 21 2007, 03:15 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #5


On my way
****

Group: Senior Member
Posts: 500
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2005
From: Selangor





I'm not confident with this code, but you asked for it. Was having difficulty with VB without pointers. I don't like .NET either, makes program slow, and need more memory.
Please comment.

---
There is one minor edit you can do. The "Get Response" command (named Cmd2 in this code) is not strictly necessary. Therefore you can comment out
CODE

           dLength = 256
           retval = SCardTransmit(hCard, pciT0, Cmd2, 5, pciT0, Buffer, dLength)

in Function SelectApp

This post has been edited by xenon: Aug 10 2007, 08:15 PM

Attached File(s)
Attached File  vbSCread.zip ( 31.23k ) Number of downloads: 992
Attached File  vbSCread__zipfile_.txt ( 31.74k ) Number of downloads: 295
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
waykeong
post Apr 22 2007, 01:04 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #6


Newbie
*

Group: Junior Member
Posts: 30
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2005




Thanks a lot. U really fast. Just a day can write out the code. :>
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
sir_impesto
post Apr 22 2007, 09:29 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #7


On my way
****

Group: Senior Member
Posts: 697
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Mar 2006
From: Kuala Lumpur






QUOTE(waykeong @ Apr 13 2007, 01:09 PM)
Hi there,

Is there anyone know how to retrieve JPN Info (Name,IC,Gender,etc),IC Photo, and Address from myKad?

I am too noob to do so, preferably using vb.net. :>
*




Why u want? U wanna hack it? brows.gif

User is offlineProfile CardPM
Go to the top of the page
+Quote Post
waykeong
post Apr 25 2007, 12:06 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #8


Newbie
*

Group: Junior Member
Posts: 30
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Feb 2005




no lar...hack it for wat... just wanna retrieve info.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
jayoscar
post Apr 26 2007, 10:44 AM
Show posts by this member only |This post's rating (0+, 0-) | Post #9


Getting Started
**

Group: Junior Member
Posts: 213
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jul 2005
From: SK, Desa Serdang, Selangor





QUOTE(xenon @ Apr 21 2007, 03:15 PM)
I'm not confident with this code, but you asked for it. Was having difficulty with VB without pointers. I don't like .NET either, makes program slow, and need more memory.
Please comment.

---
There is one minor edit you can do. The "Get Response" command (named Cmd2 in this code) is not strictly necessary. Therefore you can comment out
CODE

           dLength = 256
           retval = SCardTransmit(hCard, pciT0, Cmd2, 5, pciT0, Buffer, dLength)

in Function SelectApp
*



The code u give can decode the MyKad encrypted data?

U must have installedn the MyKad SDK on your dev PC

Declare Function SCardEstablishContext Lib "winscard.dll" _
(ByVal dwScope As Int32, ByVal pvReserved1 As Int32, _
ByVal pvReserved2 As Int32, ByRef phContext As Int32) As Int32
.....

Since you have that Dll, why not share out let me test it, thanks...

(Last time I try regsvr IRIS some dll at other PC face problem, There're some digital cert thingy need to install, Am I right ?)

QUOTE(waykeong @ Apr 25 2007, 12:06 AM)
no lar...hack it for wat... just wanna retrieve info.
*



Even u try to get info from MyKad, but some of the old contain Not enough info for it.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xenon
post Apr 26 2007, 07:33 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #10


On my way
****

Group: Senior Member
Posts: 500
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2005
From: Selangor





There is no encryption for surface information.
And I do not use SDK. winscard.dll is part of Windows XP.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xflixz
post May 12 2007, 06:31 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #11


Newbie
*

Group: Junior Member
Posts: 13
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Apr 2007





how to use it???where can I find the card reader??
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Leewy
post Jun 8 2008, 07:16 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #12


Newbie
*

Group: New Member
Posts: 4
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jun 2008




QUOTE(xenon @ Apr 21 2007, 03:15 PM)
I'm not confident with this code, but you asked for it. Was having difficulty with VB without pointers. I don't like .NET either, makes program slow, and need more memory.
Please comment.
*

Do you have a program or SDK that can read all the 8 applications on the card?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xenon
post Jun 8 2008, 07:37 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #13


On my way
****

Group: Senior Member
Posts: 500
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2005
From: Selangor





No. I need a sample of the device in order to reverse engineer.
Reading of JPN, Driving license and passport information is all we can get from a keychain reader or from SDK that we can possibly buy.
This thread gives the info on the 3 applications mentioned above.
http://forum.lowyat.net/topic/355950/+20

PKI application is possible to discover as well, but I don't have credit card to pay for a digital certificate. www.mykey.com.my

Health info is very much unknown and rarely used.
ATM (Bankcard), I don't think people like to use MyKad as Bankcard as doing so can cause increased wear and tear, as well as being worried for privacy intrusion.
Touch 'n Go, using wireless interface. I guess it's not different from normal dedicated TnG. If you need to reverse engineer TnG, consider using plain TnG instead of MyKad.
MEPS cash, I don't even know how easy/difficult to use this application.

This post has been edited by xenon: Jun 8 2008, 07:42 PM
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Leewy
post Jun 8 2008, 08:28 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #14


Newbie
*

Group: New Member
Posts: 4
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jun 2008




but can we change the JPN, passport and Driving License application through reverse engg?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xenon
post Jun 8 2008, 09:26 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #15


On my way
****

Group: Senior Member
Posts: 500
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2005
From: Selangor





Logically thinking, updating of license and passport info requires security clearance. Some form of authentication is needed. I believe if the designer of MyKad do it correctly, it should be a cryptographic challenge-response authentication, or perhaps the updated data have to be digitally signed. On the other hand, if a fixed key is used to enable updating, then the fixed key will be easily leaked out. My guess is that challenge-response protocol is used and a Secure Access Module (which is installed to card reader) can prove to MyKad that it is authority now talking to MyKad. I currently do not have any info on the command used for updating. I believe that knowing the command is not a security threat because MyKad will give a different challenge each time, without the SAM, we don't know the correct response to prove to MyKad for the write access.

The card may or may not implement procedures to update JPN info. In practice, JPN info will never be updated. If you change home address, the whole card needs to be changed.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Leewy
post Jun 8 2008, 10:11 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #16


Newbie
*

Group: New Member
Posts: 4
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jun 2008




Oh, yes. Once ago, I heard that MyKAD is a one time burnt-on ROM, which means, it is not editable once data is written to that card. But if it is so, how the passport and the driving license details being updated, since they may expire unlike our personal data.

I believe some type of certificates/crytography they may be using to allow these cards to be able to 'write' again
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Fazli_Super
post Sep 18 2008, 06:03 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #17


Newbie
*

Group: Junior Member
Posts: 48
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Aug 2008




thanks again, it that any different between read mykid and mykad? or it is same? how about the myPR?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
inblues
post Feb 18 2009, 03:49 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #18


Newbie
*

Group: New Member
Posts: 2
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2008




Hi Xenon,

Thanks for your knowledge sharing. Do we need a SAM command/device to read mykad info or only IC command will do?

Thanks

QUOTE(xenon @ Jun 8 2008, 09:26 PM)
Logically thinking, updating of license and passport info requires security clearance. Some form of authentication is needed. I believe if the designer of MyKad do it correctly, it should be a cryptographic challenge-response authentication, or perhaps the updated data have to be digitally signed. On the other hand, if a fixed key is used to enable updating, then the fixed key will be easily leaked out. My guess is that challenge-response protocol is used and a Secure Access Module (which is installed to card reader) can prove to MyKad that it is authority now talking to MyKad. I currently do not have any info on the command used for updating. I believe that knowing the command is not a security threat because MyKad will give a different challenge each time, without the SAM, we don't know the correct response to prove to MyKad for the write access.

The card may or may not implement procedures to update JPN info. In practice, JPN info will never be updated. If you change home address, the whole card needs to be changed.
*


User is offlineProfile CardPM
Go to the top of the page
+Quote Post
narf03
post Feb 18 2009, 04:00 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #19


Regular
******

Group: Senior Member
Posts: 1,641
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Dec 2004
From: Metro Prima, Kuala Lumpur, Malaysia, Earth, Sol





Plz, this thread is like 2 years ago, start a new 1 with your own title, stop digging up history
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
xenon
post Feb 18 2009, 06:10 PM
Show posts by this member only |This post's rating (0+, 0-) | Post #20


On my way
****

Group: Senior Member
Posts: 500
Ratings earned: 0+, 0-
Ratings given: 0+, 0-

Joined: Jan 2005
From: Selangor





Reading JPN info, driving licence info and passport info do not need SAM.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

2 Pages  1 2 >
Bump TopicReply to this topicTopic OptionsStart new topic
 



----debug section please ignore----
Lo-Fi Version Time is now: 23rd November 2009 - 01:59 PM
All Rights Reserved 2003-2009 Vijandren Ramadass (~living on a prayer~)