Dell CAC Card Reader Tear Down

[DingleBerries]

Quick Note: This was a quick tear down of a Dell SK-3106, standard issue for the United States Military but it is just as easy for a civilian to purchase one. Original Large photos are in my Flickr Stream.

Docs:

hxxps://ascp.monmouth.army.mil/scp/downloads/ standardspolicy_files/Army_CAC_PKI_Program.pdf

hxxp://www.smartcardbasics. com/cardtypes.html

Now the part you guys want, pics :)

This is your standard CAC(SMART) Card.

Here is the I/O layout for the gold contacts.

Reader on the Keyboard

Back of the Keyboard

Controller for both the CAC reader and the keyboard its self.

FRONT:

http://farm3.static.flickr.com/2387/250030..._cdfecdea08.jpg

BACK:

http://farm3.static.flickr.com/2227/249947..._f605112622.jpg

CHIP:

http://farm4.static.flickr.com/3036/249947..._235024161e.jpg

CAC card shots:

Thats all for tonight.. maybe sometime next week i will play more with it and see what all i can do, edit data, execute arb. code? But now i DRINK!

[tim.vangehugten]

Is the I/O layout for the gold contacts almost for every card the same? Cause I've an electronic ID card for a couple of years and I wonder if I could mess with it :P

[moonlit]

Is the I/O layout for the gold contacts almost for every card the same? Cause I've an electronic ID card for a couple of years and I wonder if I could mess with it :P

I believe so. You might run into problems with protection though, some cards lock you out (IIRC they actually self-distruct and blow a tiny fuse) if you try to tamper with them and fail. Some smart cards (SIM cards for example) use 6 pins, so I'd imagine you'd need a different reader. I believe the pinouts are the same on most cards that share the same number of pins.

[DingleBerries]

i have a few cards that a local business uses to pay out money to customers. i am thinking about using an acetone solution and just letting it eat away at the plastic, however if any of the other electronics inside are shielded with a plastic coating then... it just wont work.. so when i take apart a card i will post pics on this thread as well.

The all the chips are from the same manufacture and the documentation is pretty well written

Applications: hxxp://support.gemalto. com/?id=199#310

Documentation: hxxp://support.gemalto. com/fileadmin/user_upload/user_guide/GemPC410/GemCore_v1.21_Reference_Manual.pdf

[moonlit]

Yeah, it's a pretty big name. A lot of CAMs (Conditional Access Modules, the viewing card in your cable or satellite box) are GemPlus cards.

[DingleBerries]

Today i tore down the keyboard and ripped out the...keys lol.. and started tinkering.. This is what i found in the first 5mins or so... There is a reed that, when compressed, activates the reader its self... so i soldered a old reset button i had that way i can tell it to switch on and off with out a card being in... Also the cards do not stay mounted very long, about 15 secs, so i am looking for a way to make it stay mounted, meaning the led goes off after a bit.

PICS:

Original reed that the card depresses when inserted:

Back side:(r12 and r14 are the switches reads)

New switch soldered on:(i was using a Cold/Heat so excuse the sloppiness)

Switch:

LED activated from the new switch:

this is a little more complicated then i had first thought.. but still a fun take down