The TI smartcards contain user certificates and secrets for authorization and electronic signature operations. To provide a two-factor-authorization smartcards also require their user to enter personal PIN codes for certain operations.
- new cards come with transport-PINs that must be replaced by the user before the first use of the card
- card pins can be changed on user request
All card operations can be executed via the telematik API.
GetCards
GetCards is a GET request returning all cards currently available in the connected card readers.
{{baseURL}}/{{tenant}}/TI?action=$getcards
Example: request for all cards in all connected card readers
The request returns an XML data set with all cards found in all card readers connected. For each card the card handle is returned which is to be used for identifying the card in further requests.
<ConnectorResponse> <Card> <CardType>SMC-B</CardType> <CardHandle>6974e884-465d-4f23-abad-5ae61a538d26</CardHandle> <Iccsn>80276883110000117848</Iccsn> <CtId>00:0D:F8:08:AD:79</CtId> <SlotId>4</SlotId> <CardHolderName>Praxis Dr. Steffi SänderTEST-ONLY</CardHolderName> </Card> <Card> <CardType>HBA</CardType> <CardHandle>aabff9f7-001f-4f43-bb4d-a2d1bf7906d7</CardHandle> <Iccsn>80276883110000121207</Iccsn> <CtId>00:0D:F8:08:AD:79</CtId> <SlotId>2</SlotId> <CardHolderName>Helmut Stauffenberg-KleinschmidtTEST-ONLY</CardHolderName> </Card> </ConnectorResponse>
GetCards by IP
GetCard by IP is a GET request returning all cards currently available in the card reader specified by its IP address. Using this request allows to fetch card data from a specific card terminal in the network. The card terminal IP address can be set in the card terminal settings by the system administrator.
{{baseURL}}/{{tenant}}/TI?action=$getcards&cardreader=172.20.129.41
Example: request for all cards in all connected card reader with IP address 172.20.129.41
<ConnectorResponse> <Card> <CardType>SMC-B</CardType> <CardHandle>6974e884-465d-4f23-abad-5ae61a538d26</CardHandle> <Iccsn>80276883110000117848</Iccsn> <CtId>00:0D:F8:08:AD:79</CtId> <SlotId>4</SlotId> <CardHolderName>Praxis Dr. Steffi SänderTEST-ONLY</CardHolderName> </Card> <Card> <CardType>HBA</CardType> <CardHandle>aabff9f7-001f-4f43-bb4d-a2d1bf7906d7</CardHandle> <Iccsn>80276883110000121207</Iccsn> <CtId>00:0D:F8:08:AD:79</CtId> <SlotId>2</SlotId> <CardHolderName>Helmut Stauffenberg-KleinschmidtTEST-ONLY</CardHolderName> </Card> </ConnectorResponse>
GetPINStatus
GetPINStatus is a GET request returning the current status of all pins of all cards in all card terminals. This requests fetches all cards and then requires each card to return its PIN status. Processing time of this request depends on the number of terminals connected.
{{baseURL}}/{{tenant}}/TI?action=$getpinstatus
Example: GetPINStatus request
<ConnectorResponse> <Card> <CardType>SMC-B</CardType> <CtId>00:0D:F8:08:AD:79</CtId> <CardHandle>6974e884-465d-4f23-abad-5ae61a538d26</CardHandle> <PinStatus>VERIFIED</PinStatus> <Status>OK</Status> </Card> <Card> <CardType>HBA</CardType> <CtId>00:0D:F8:08:AD:79</CtId> <CardHandle>aabff9f7-001f-4f43-bb4d-a2d1bf7906d7</CardHandle> <PinStatus>NOT_VERIFIED</PinStatus> <Status>4072</Status> </Card> </ConnectorResponse>
- VERIFIED - this card has been confirmed by a user PIN entry and may be used for operations
- VERIFIABLE, NOT VERIFIED - confirmation is pending, user must enter the PIN in order to use the card for operations
- TRANSPORT_PIN, EMPTY_PIN - card has not been initialized yet, a new PIN must be set by user
- REJECTED - a wrong PIN was entered
- BLOCKED, NOWBLOCKED, WASBLOCKED - wrong PIN has been entered too many times, card has been blocked and must be verified using the PUK
GetPINStatus by IP
GetPINStatus is a GET request returning the current status of all pins of all cards in the card terminal specified by its IP address.
{{baseURL}}/{{tenant}}/TI?action=$getpinstatus&cardreader=172.20.129.41
Example of a GetPINStatus by IP request for card terminal with IP address 172.20.129.41
<ConnectorResponse> <Card> <CardType>SMC-B</CardType> <CtId>00:0D:F8:08:AD:79</CtId> <CardHandle>6974e884-465d-4f23-abad-5ae61a538d26</CardHandle> <PinStatus>VERIFIED</PinStatus> <Status>OK</Status> </Card> <Card> <CardType>HBA</CardType> <CtId>00:0D:F8:08:AD:79</CtId> <CardHandle>aabff9f7-001f-4f43-bb4d-a2d1bf7906d7</CardHandle> <PinStatus>NOT_VERIFIED</PinStatus> <Status>4072</Status> </Card> </ConnectorResponse>