What is SD card CID number?

Internal SD card information

SD card is a device containing a microcontroller and memory chip attached. SD card specific information is stored in internal registers. Each card has a set of information registers : OCR, CID, CSD, RCA, DSR, and SCR. The OCR, CID, CSD and SCR registers carry the card/content specific information, while the RCA and DSR registers are configuration registers storing actual configuration parameters.

Today we will find out what is the SD card CID register and what information it contains.

CID register

The Card IDentification (CID) register is 16 bytes (128 bits) code that contains information that uniquely identifies the SD card. CID number is set by the manufacturer and cannot be changed after it is set. As a CID number is unique for each SD card, it is very often used for software licensing and content protection. It can be used as a random number for content encryption, SD locking password generation, or license files. However, if a card does not conform to the specification or a backdoor is found this information could be changed and CID usage for security purposes could be compromised this way!

• MID – 8-bit number that identifies the manufacturer.
• OID – 2-character ASCII string that identifies the card OEM and/or the card contents
• PNM – The product name is a string, 5-character ASCII string
• PRV – Product revision. It is composed of two Binary Coded Decimal (BCD) digits, four bits each, representing an “n.m” revision number.
• PSN – Product serial number is 32 bits ordinary number
• MDT – Manufacturing date, composed of 12 bits in YYM format, (offset from 2000)
• CRC – CRC7 is a 7-bit code used for checking errors in the card register

MID – Manufacturer ID

Manufacturer ID (MID) is assigned by the SD Association (SD-3C LLC). It is considered confidential information, so an official list is not published.

Many SD card brands are produced by OEM suppliers, and the MID and OID may reflect this. In some cases, they appear to show the producer of the SD card controller, but not the brand of the SD card. For example, MID 0x27 together with OID  – ‘PH’ indicates PHISON controller, but not the card brand, and can be found in many different brands such as Delkin, Integral, Lexar, Patriot, Sony, Verbatim and others, as the Phison Electronics Corporation is one of the common manufacturers for well-known brands.

Manufacturer ID as well as the whole CID is valid and can be trusted only if SD card is original and not counterfeit. Therefore, based on CID number, one cannot be sure that the card is original. If SD card manufacturer ID obviously doesn’t match the label on the card, it’s a first sign that SD card is counterfeit.

OID – OEM ID

Identifies the card OEM and/or the card contents. The OID is controlled and assigned by the SD-3C, LLC. and kept confidential information as MID.