Positive ONE GroupNFC, EMV and magnetic stripe testing Level 1 — RF and protocol ProxiSPY Quest

Level 1 · RF and protocol

ProxiSPY Quest

Name: ProxiSPY Quest
Brand: KEOLABS

Captures and analyses communication between a contactless card and a reader, surfacing interoperability problems from the analogue to the application layer.

Vendor: Keolabs Specifications ISO/IEC 14443 A/B (VHBR ASK) · ISO/IEC 15693 · ISO/IEC 18092 · FeliCa · NFC Forum · MIFARE · Calypso B' Analyser

**ProxiSPY Quest unit** Desktop size. Connects to a PC over USB and is operated from the Quest software.

**Unit, probe and card reader** The probe is placed in the communication path to capture the exchange with the reader holding the card under test.

**Analog Viewer and Trace views** Waveforms and protocol analysis sit side by side, so noise can be traced to the exchange that produced it.

**PICC LMA Analyser** Measures load modulation amplitude and displays it alongside the reference values of the standards.

**Python automation with Scenario** Programs calling the product’s functions can be written to automate card and reader testing.

**RF probe** A non-invasive probe placed in the communication path; it measures without contacting the DUT.

The test bench as a whole

A test bench has four elements: software, tester, fixtures and the device under test. This shows where the product sits.

STEP 1 — test programmeSpecification test suite (execution environment: SCRIPTIS™)Test programmes for each specification run on SCRIPTIS™. Delivery form and licence configuration are confirmed per quotation. During a run, prompts appear for placing the device under test and changing fixtures.

STEP 2 — tester platformProxiLAB Quest and similarThe hardware that generates and measures signals, emulating a card or a reader

STEP 3 — fixtures and automationReference antennas, probes and robotsThe reference fixtures defined by the specification must be connected. Without them the suite cannot run. A robot automates position sweeps

STEP 4 — device under testDevice under test: card, terminal or mobile deviceThe product under development, whose conformance and interoperability are being verified

What it does

Captures and analyses communication between a contactless card and a reader, surfacing interoperability problems from the analogue to the application layer.

Display and analysis functions

What this product displays and how. Captured communication is presented in views organised by purpose.

Analog ViewerAnalog Viewer

Displays captured analogue frames as oscilloscope-style waveforms, for checking signal strength and diagnosing noise and read failures.

RF data: view the signal waveform directly, which makes anticollision analysis straightforward
I/Q modulation data: see where noise power arises

Digital Viewer and tracesDigital Viewer

Analyses communication frames automatically and presents them by protocol and response, with dynamic protocol documentation so you do not have to open the specification each time.

List and sequence views, organised by stage and by protocol (ISO/IEC 14443, ISO/IEC 15693, FeliCa)
Statistical analysis, with protocol warnings and errors identified automatically
Annotation, filtering and export

Timing analysisCommunication Timing Analyzer

Plots communication against time to show durations and intervals, with precise timing measurement between messages.

Durations and intervals of each exchange made visible
Card and reader state transitions followed in the Sequence view

PCD waveform analysis and scenariosPCD Waveform Analyzer / Scenario

Analyses PCD waveforms automatically. Programs that call the Quest functions can be written and run to automate card and reader inspection.

COM component support, so automation is possible from JScript, C, VB, Python and others
Used for running inspection sequences automatically and for regression

Supported protocols

ISO/IEC 14443 A/B (VHBR ASK)ISO/IEC 15693, all modesISO 18092 (P2P/Passive/Active)JIS X 6319 FeliCaNFC Forum (NFC-IP1/IP2 / LLCP/SNEP / NDEF / V-card)Topaz / MIFARE / Calypso(B')

Interface

USBGeneral-purpose I/O: one analogue and two digital outputs for synchronisation and signal measurementTCP-IP

The analysis software is the common KEOLABS environment, Quest and RGPA. RGPA is free of charge, so capture data can be shared with partners who do not own KEOLABS equipment. This is a different product from the Barnes SPY 3000.

Which one suits you

Choose ProxiSPY Quest ifProxiSPY Quest is the better fityou need precise analysis down to analogue waveforms and noise; you are doing outgoing inspection or interoperability quality assurance; you want a fixed bench setup; or you need broad contactless analysis including FeliCa and ISO/IEC 15693

Choose NomadLAB ifNomadLAB →you need to take it to the development bench or into the field; you need end-to-end analysis across contact and contactless; you want to develop a reader by emulation without physical cards; or you want stand-alone operation from the unit's own screen

Using both together also works well: precise laboratory analysis with ProxiSPY and field work with NomadLAB, sharing capture data through the bundled RGPA analysis software.

Technical characteristics

Technical characteristics
Main functions	Non-intrusive probe; advanced I/Q demodulation; automatic decoding with no need to select the protocol in advance; high-precision analogue capture at 25 points per clock cycle; an API for test benches; real-time triggering with three digital I/O; transaction analysis covering timing and the application layer; a data logger; and native support for every protocol and bit rate
Supported protocols	ISO/IEC 14443 A/B (VHBR ASK); ISO/IEC 15693 in all modes; ISO/IEC 18092 (peer-to-peer, passive and active); analysis down to APDU level; JIS X 6319 FeliCa; NFC Forum (ECMA 340 NFC-IP1 and ECMA 352 NFC-IP2); LLCP and SNEP; NDEF; V-card; Topaz; MIFARE; and B' (Calypso Innovatron)
Hardware interface	USB; 3 general-purpose I/O; 2 analogue inputs

ProxiSPY Quest compared with NomadLAB

ProxiSPY Quest is a monitoring-only bench instrument. Its strengths are precise analysis from the analogue layer down to bit level, and broad contactless protocol coverage including ISO/IEC 15693. If you need card emulation, analysis of contact communication over ISO/IEC 7816 or SWP, or portability, see NomadLAB instead, which works to byte level and runs stand-alone. A detailed comparison table is on that page.

Where it is used

Setting up Level 1 verification for a new development
Regression after a configuration change or update
Coverage checks ahead of certification

Relationship to certification

What this product performs is conformance testing. Formal type approval is carried out by an accredited test laboratory, and the Letter of Approval is issued by EMVCo or the payment system. What we supply is the test environment and support in operating it.