Sebastian Rittau's Blog

Wednesday
Jun 16 2010

Chipcard Woes

Krankenversicherungskarte, C, Programming, Chipcards

One of my customers, a large dental practice, had a problem from time to time when reading Krankenversicherungskarten (German health insurance card, KVK). The insurance number got all garbled up, which led to problems when reading the patient's insurance data into the health care application. After their sysadmin and I analysed the situation it seemed that the application reading the data from the card and writing it to a file in a custom format was to blame. This program (KVKTool) was included with the Cherry card reader and had been modified by another consultant to write the read data to a file rather than displaying it on the screen.

This C++ program was a huge stinking pile. All card reading was done in a method called CKVKToolDlg::Onreadcard. The name CKVKToolDlg hints at it: This is the class responsible for showing the dialog. (Yes, it had been left in the program by the previous consultant. Only the dlg.DoModal() call had been commented out.) The method was a gigantic 837 lines long and features all kinds of goodies such as lots of copied-and-pasted code that had been modified in some instance to fix bugs, but not in others.

After a long refactoring session (which turned into a rewrite), I was able to spot the problem: a wrong workaround to bugs in a sizable amount of KVKs. Normally, the data on KVKs is structured into fields in an arbitrary order. These fields consist of a one-byte tag to identify the field, a one-byte length marker, and then n bytes of data, where n is the length. All KVK fields are identified by tags between 0x80 and 0x92. But all KVK fields are wrapped by a super-field called the "Versichten-Template" (insurant template, VT) with tag 0x60. Thus, data on a typical (non-buggy) KVK card would start like this:

0x600x890x850x090x53 0x65 0x62 0x61 ...
VT tagVT lenFirst name tagFirst name lengthSeba ...

Now, buggy cards seem to insert a stray 0x81 byte after the 0x60 tag:

0x600x810x890x850x090x53 0x65 0x62 0x61 ...
VT tag???VT lenFirst name tagFirst name lengthSeba ...

This code in the KVKTool was supposed to handle this problem:

    // skip tag 60 and length
    int i=2;

    // some cards seem to have a damaged tag 0x89 after 0x81
    if (responsearray[1] == 0x81)
        i++;

(Snipped the huge indention.)

responsearray is a buffer that contains the KVK data and i is an index into that buffer. This code works fine in most circumstances. It works around cards with the stray byte. But there is one situation where it utterly fails: On correct cards where the Versichten-Template is exactly 129 bytes long. In this case, the first tag is skipped entirely, which usually is the insurant's number. Since it was not, junk (random memory content) was written to the file in place of the insurant's number. Not good, but hopefully fixed now.

Comments

wUHIiyx

by wUHIiyx

IlPeAoDJ

erotyczne wyznanie

by filmy erotyczne

What you do on your blog is really great but more frequent updates, please.

AYhdKhlT

by AYhdKhlT

QcEjyie

I love louboutin shoes

by christian louboutin shoes

<p><font face="Times New Roman">The test now is whether the injured Carter can still move the product. </font>
<p><font face="Times New Roman">When Nike signed Carter, he seemed a pretty good bet to become the kind of athlete who can sell </font><a href="http://www.christianlouboutinshoesmall.com/christian-louboutin-c-45.html"><font face="Times New Roman">christian louboutin</font></a><font face="Times New Roman"> , even with the hefty price tags the new Air Shox carry. </font>
<p><font face="Times New Roman">But things change fast in the image business, and given that last season ended with Carter undergoing knee surgery and this season has started with him on the shelf for the same problem, he isn't the sure thing of a couple of years ago. </font>
<p><font face="Times New Roman">Even the launch of his new </font><a href="http://www.christianlouboutinshoesmall.com/christian-louboutin-c-45.html"><a href="http://www.christianlouboutinshoesmall.com/"><font face="Times New Roman">christian louboutin shoes</font></a><font face="Times New Roman">&nbsp;</a>is being hampered because Carter's not healthy enough to film a new commercial. </font>

fVNfGKLH

by fVNfGKLH

iEmNNP

baby

by christian louboutin

A chauffeur must always present a smart appearance by wearing full uniform, white shirt and collar, black tie, and black christian louboutin . Leather gloves must be worn when driving. Ensure that your cap is worn at all times.

mbt shoes on sale

by mbt and ugg boots

MBT Anti Shoes Cheap?
MBT Lami Shoes?
MBT Changa Shoes?
MBT Kisumu 2 Sandal?
MBT Habari Sandal?
MBT Chapa Men Shoes?
MBT Sport Men Shoes?
MBT Voi Shoes?
MBT Fanaka GTX Shoes
MBT Shuguli GTX Shoes?
MBT Walking Shoes Sale?
MBT Lami Shoes?
MBT Changa Shoes
MBT Kisumu 2 Sandal?
MBT Habari Sandal?
MBT Chapa Men Shoes?
MBT Sport Men Shoes?
MBT Voi Shoes?
MBT Fanaka GTX Shoes
MBT Shuguli GTX Shoes?
MBT Walking Shoes Sale?
http://www.mbtflying.com

UGG Classic Tall
UGG Classic Short Boots
UGG Classic Cardi
UGG Classic Mini
UGG Ultra Tall
UGG Classic Metallic
UGG Sundance II
UGG Bailey Button
UGG Bailey Button Boots
UGG Argyle Knit Boots
UGG Classic Tall Boots
UGG Romantic Flower Boots
UGG Nightfall Boots
UGG Slippers
UGG Ultra Short Boots
http://www.uggvipshop.com

brand handbags on sale

by Gucci handbags

http://www.handbagsonsales.com

Louis Vuitton handbags
Chanel Handbags
Gucci Handbags
Hermes Handbags
Balenciaga Handbags
Bottega Veneta Handbags
Chloe Handbags
Coach Handbags
Dior Handbags
Fendi Handbags
Dolce & Gabbana Handbags
Hermes Handbags
Versace Handbags
Prada Handbags

http://www.handbagsonsales.com

by Chanel handbags

http://www.handbagsonsales.com

Chanel Handbags

Gucci Handbags Gucci 2010 New Handbag

Hermes Handbags

Balenciaga Handbags

Bottega Veneta Handbags

Chloe Handbags

Coach Handbags

Dior Handbags

Fendi Handbags

Dolce & Gabbana Handbags

Hermes Handbags

Versace Handbags

Prada Handbags

air jordan original 2s

by air jordan original 2s

air jordan original 2s

cheap jordan 2

welcome to buy jordan 2 from us.

Dallas Cowboys shop

by dallas cowboys shop

http://www.nflcowboysjerseys.com/cowboys-jerseys-c-1.html Cowboys Jerseys
http://www.nflcowboysjerseys.com/miles-austin-jerseys-c-1_14.html Miles Austin Jersey
http://www.nflcowboysjerseys.com/marion-barber-jerseys-c-1_18.html Marion Barber Jersey
http://www.nflcowboysjerseys.com/tony-romo-jerseys-c-1_11.html Tony Romo Jersey
http://www.nflcowboysjerseys.com/dez-bryant-jerseys-c-1_29.html Dez Bryant Jersey
http://www.nflsaintsshop.com/saint-super-bowl-jerseys Saint Super Bowl Jerseys
http://www.nflsaintsshop.com/saints-jerseys Saints Jerseys
http://www.nflsaintsshop.com/saints-jerseys/garrett-hartley-jerseys Garrett Hartley Jerseys

cheap nike ari max shoes on sale

by Christian louboutin

best nike air shoes store online , buy cheap nike max shoes

<a href="http://www.christianlouboutinonsale.de/">Christian louboutin</a>
<a href="http://www.christianlouboutinonsale.de/">christian louboutin schuhe</a>
<a href="http://www.christianlouboutinonsale.de/">louboutin schuhe</a>
<a href="http://www.christianlouboutinonsale.de/">schuhe christian louboutin</a>
<a href="http://www.christianlouboutinonsale.de/">Christian louboutin</a>|

cheap nike ari max shoes on sale

by Christian louboutin

best nike air shoes store online , buy cheap nike max shoes

<a href="http://www.christianlouboutinonsale.de/">Christian louboutin</a>
<a href="http://www.christianlouboutinonsale.de/">christian louboutin schuhe</a>
<a href="http://www.christianlouboutinonsale.de/">louboutin schuhe</a>
<a href="http://www.christianlouboutinonsale.de/">schuhe christian louboutin</a>
<a href="http://www.christianlouboutinonsale.de/">Christian louboutin</a>|

by wow gold

very cool post

Louis Vuitton Monogram Canvas

by Louis Vuitton Monogram Canvas

Amazing website, saved your site for hopes to see more!<a href="http://www.louisvuittonbagmall.com/goods-590.html" title="louis vuitton mini agenda refill">louis vuitton mini agenda refill</a> <a href="http://www.louisvuittonbagmall.com/Louis-Vuitton-Monogram-Canvas-Baseball-Cap-goods-594.html" title="baseball cap">baseball cap</a> <a href="http://www.louisvuittonbagmall.com/Louis-Vuitton-Monogram-Canvas-Neverfull-MM(brown)-goods-433.html" title="louis vuitton damier speedy">louis vuitton damier speedy</a> <a href="http://www.louisvuittonbagmall.com/Louis-Vuitton-Damier-Canvas-Keepall-55(Black)-goods-3364.html" title="louis vuitton keepall">louis vuitton keepall</a> <a href="http://www.louisvuittonbagmall.com/christmas-gifts/christmas-gift-basket-ideas.html" title="christmas gift basket ideas">christmas gift basket ideas</a> <a href="http://www.louisvuittonbagmall.com/" title="christmas gift basket ideas">christmas gift basket ideas</a> <a href="http://www.louisvuittonbagmall.com/christmas-gifts/" title="Christmas gifts">Christmas gifts</a> <a href="http://www.louisvuittonbagmall.com/christmas-gifts/christmas-gift-exchange-ideas.html" title="homemade christmas gift ideas">homemade christmas gift ideas</a> <a href="http://www.louisvuittonbagmall.com/Monogram-Canvas-category-5-b0.html" title="Louis Vuitton Monogram Canvas">Louis Vuitton Monogram Canvas</a> <a href="http://www.louisvuittonbagmall.com/christmas-gifts/christmas-gift-exchange-ideas.html" title="Louis Vuitton Damier Speedy">Louis Vuitton Damier Speedy</a> <a href="http://www.louisvuittonashop.com/louisvuittonashoparticle/louis-vuitton-have-an-outlet.htm" title="louis vuitton have an outlet ">louis vuitton have an outlet</a> <a href="http://www.louisvuittonebag.com/louisvuittonebagarticles/louis-vuitton-ankle-boots.htm" title="louis vuitton ankle boots">louis vuitton ankle boots</a>

(TIF) zentai & Co. reports financial results

by Bottes UGG

C’est cool ! Votre article est cool ! Et de plus, j’aime bien la doublure en laine de bottes ugg. Vous l’aimez aussi ? Venez portez ces bottes pour l'hiver ! Les bottes ugg sont en soldes. Tout est moins chers!

MGnCCl

by MGnCCl

VrUMNEI

retro jordans

by retro jordans

your post are very interesting
it is also helpful for me
thanks for sharing
look forward more posts