SRIX4KA3T1GE STMicroelectronics, SRIX4KA3T1GE Datasheet

Page 1

MHz short-range contactless memory chip with 4096-bit EEPROM, anticollision and anti-clone functions Features ISO 14443-2 Type B air interface compliant ISO 14443-3 Type B frame format compliant 13.56 MHz carrier frequency 847 kHz subcarrier frequency 106 Kbit/second data transfer ...

Page 2

Contents Contents 1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

Page 3

SRIX4K 6.6 DEACTIVATED state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

Page 4

List of tables List of tables Table 1. Signal names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

Page 5

SRIX4K List of figures Figure 1. Logic diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

Page 6

List of figures Figure 49. 64-bit unique identifier of the SRIX4K ...

Page 7

... The anticollision is based on a probabilistic scanning method using slot markers. The SRIX4K provides an anti- clone function which allows its authentication. Using the STMicroelectronics single chip coupler, CRX14 easy to design a reader with the authentication capability and to build a system with a high level of security ...

Page 8

Signal description The SRIX4K contactless EEPROM can be randomly read and written in block mode (each block containing 32 bits). The instruction set includes the following ten commands: READ_BLOCK WRITE_BLOCK INITIATE PCALL16 SLOT_MARKER SELECT COMPLETION RESET_TO_INVENTORY AUTHENTICATE GET_UID The SRIX4K ...

Page 9

SRIX4K 3 Data transfer 3.1 Input data transfer from the Reader to the SRIX4K (request frame) The reader must generate a 13.56 MHz sinusoidal carrier frequency at its antenna, with enough energy to “remote-power” the memory. The energy received at ...

Page 10

Data transfer Table 2. Bit description Bit b Start bit used to synchronize the transmission Information Byte (command, address or data Stop bit used to indicate the end of a character 9 3.1.2 ...

Page 11

SRIX4K 3.2 Output data transfer from the SRIX4K to the Reader (answer frame) The data bits issued by the SRIX4K use retro-modulation. Retro-modulation is obtained by modifying the SRIX4K current consumption at the antenna (load modulation). The load modulation causes ...

Page 12

Data transfer 3.2.3 Answer end of frame The EOF shown in – followed by 10 ETUs at logic-0, – followed by 2 ETUs at logic-1. Figure 9. Answer end of frame b0 ETU 0 3.3 Transmission frame Between the Request ...

Page 13

SRIX4K 3.4 CRC The 16-bit CRC used by the SRIX4K is generated in compliance with the ISO 14443 Type B recommendation. For further information, please see contents are all 1s: FFFFh. The two-byte CRC is present in every Request and ...

Page 14

Memory mapping 4 Memory mapping The SRIX4K is organized as 128 blocks of 32 bits as shown in accessible by the READ_BLOCK command. Depending on the write access, they can be updated by the WRITE_BLOCK command. A WRITE_BLOCK updates all ...

Page 15

SRIX4K 4.1 Resettable OTP area In this area contains five individual 32-bit Boolean Words (see area). A WRITE_BLOCK command will not erase the previous contents of the block as the Write cycle is not preceded by an Auto Erase cycle. ...

Page 16

Memory mapping Figure 14. WRITE_BLOCK update in Reload mode (Binary format) Previous data stored in block Data to be written New data stored in block 4.2 32-bit binary counters The two 32-bit binary counters located at block addresses 5 and ...

Page 17

SRIX4K Figure 16. Count down example (binary format) Initial data 1-unit decrement 1-unit decrement 1-unit decrement 8-unit decrement Increment not allowed The counter with block address 6 controls the Reload command used to reset the resettable OTP area (addresses 0 ...

Page 18

Memory mapping Figure 17. EEPROM (addresses 7 to 127) MSb Block b31 Address ... 127 4.4 System area This area is used to modify the settings of the SRIX4K. It ...

Page 19

SRIX4K 4.4.1 OTP_Lock_Reg The 8 bits bits in the SRIX4K. They control the Write access to the 9 EEPROM blocks with addresses follows: – When b – When b – When b ...

Page 20

SRIX4K operation 5 SRIX4K operation All commands, data and CRC are transmitted to the SRIX4K as 10-bit characters using ASK modulation. The start bit of the 10 bits, b SRIX4K at the antenna is demodulated by the 10% ASK demodulator, ...

Page 21

SRIX4K 6 SRIX4K states The SRIX4K can be switched into different states. Depending on the current state of the SRIX4K, its logic will only answer to specific commands. These states are mainly used during the anticollision sequence, to identify and ...

Page 22

SRIX4K states 6.6 DEACTIVATED state When in this state, the SRIX4K can only be turned off. All commands are ignored. Figure 19. State transition diagram Out of Field DESELECTED 22/50 POWER-OFF Out of Field READY Chip_ID = RND 8bits INITIATE() ...

Page 23

SRIX4K 7 Anticollision The SRIX4K provides an anticollision mechanism that searches for the Chip_ID of each device that is present in the reader field range. When known, the Chip_ID is used to select an SRIX4K individually, and access its memory. ...

Page 24

Anticollision Figure 21. Description of a possible anticollision sequence 1. The value X in the Answer Chip_ID means a random hexadecimal character from 24/50 SRIX4K ...

Page 25

SRIX4K 7.1 Description of an anticollision sequence The anticollision sequence is initiated by the INITIATE() command which triggers all the SRIX4K devices that are present in the reader field range, and that are in INVENTORY state. Only SRIX4K devices in ...

Page 26

Anticollision Figure 22. Example of an anticollision sequence Tag 1 Tag 2 Command Chip_ID Chip_ID READY State 28h 75h INITIATE () 40h 13h 45h 12h PCALL16() SELECT(30h) SLOT_MARKER(1) SLOT_MARKER(2) 12h SELECT(12h) 12h SLOT_MARKER(3) SLOT_MARKER(4) SLOT_MARKER(5) 45h SLOT_MARKER(6) SLOT_MARKER(N) SLOT_MARKER(F) 40h ...

Page 27

... The Authentication system is based on a proprietary challenge/response mechanism which allows the application software to authenticate any member of the secure memory tag SRXxxx family from STMicroelectronics (of which the SRIX4K is the prime example). A reader system, based on the ST CRX14 chip coupler, can check each SRIX4K tag for authenticity, and protect the application system against silicon copies or emulators ...

Page 28

SRIX4K commands 9 SRIX4K commands See the paragraphs below for a detailed description of the Commands available on the SRIX4K. The commands and their hexadecimal codes are summarized in given in Appendix Table 5. Command code Hexadecimal Code 06h-00h 06h-04h ...

Page 29

SRIX4K 9.1 INITIATE() command Command Code = 06h - 00h INITIATE() is used to initiate the anticollision sequence of the SRIX4K. On receiving the INITIATE() command, all SRIX4K devices in READY state switch to INVENTORY state, set a new 8-bit ...

Page 30

SRIX4K commands 9.2 PCALL16() command Command Code = 06h - 04h The SRIX4K must be in INVENTORY state to interpret the PCALL16() command. On receiving the PCALL16() command, the SRIX4K first generates a new random CHIP_SLOT_NUMBER value (in the 4 ...

Page 31

SRIX4K 9.3 SLOT_MARKER(SN) command Command Code = x6h The SRIX4K must be in INVENTORY state to interpret the SLOT_MARKER(SN) command. The SLOT_MARKER Byte code is divided into two parts: – with fixed value 6. – ...

Page 32

SRIX4K commands 9.4 SELECT(Chip_ID) command Command Code = 0Eh The SELECT() command allows the SRIX4K to enter the SELECTED state. Until this command is issued, the SRIX4K will not accept any other command, except for INITIATE(), PCALL16() and SLOT_MARKER(). The ...

Page 33

SRIX4K 9.5 COMPLETION() command Command Code = 0Fh On receiving the COMPLETION() command, a SRIX4K in SELECTED state switches to DEACTIVATED state and stops decoding any new commands. The SRIX4K is then locked in this state until a complete reset ...

Page 34

SRIX4K commands 9.6 RESET_TO_INVENTORY() command Command Code = 0Ch On receiving the RESET_TO_INVENTORY() command, all SRIX4K devices in SELECTED state revert to INVENTORY state. The concerned SRIX4K devices are thus resubmitted to the anticollision sequence. This command is useful when ...

Page 35

SRIX4K 9.7 READ_BLOCK(Addr) command Command Code = 08h On receiving the READ_BLOCK command, the SRIX4K reads the desired block and returns the 4 data Bytes contained in the block. Data Bytes are transmitted with the Least Significant Byte first and ...

Page 36

SRIX4K commands 9.8 WRITE_BLOCK (Addr, Data) command Command Code = 09h On receiving the WRITE_BLOCK command, the SRIX4K writes the 4 bytes contained in the command to the addressed block, provided that the block is available and not Write- protected. ...

Page 37

SRIX4K Figure 46. WRITE_BLOCK frame exchange between Reader and SRIX4K Reader SOF 09h SRIX4K 9.9 GET_UID() command Command Code = 0Bh On receiving the GET_UID command, the SRIX4K returns its 8 UID Bytes. UID Bytes are transmitted with the Least ...

Page 38

... UID complies with ISO/IEC 15963 and ISO/IEC 7816- read-only code, and comprises (as summarized in an 8-bit prefix, with the most significant bits set to D0h an 8-bit IC Manufacturer code (ISO/IEC 7816-6/AM1) set to 02h (for STMicroelectronics) a 6-bit IC code set to 00 0011b = 3d for SRIX4K a 42-bit Unique Serial Number Figure 49. 64-bit unique identifier of the SRIX4K Figure 50 ...

Page 39

... These are stress ratings only and operation of the device at these or any other conditions above those indicated in the Operating sections of this specification is not implied. Exposure to Absolute Maximum Rating conditions for extended periods may affect device reliability. Refer also to the STMicroelectronics SURE Program and other relevant quality documents. Table 6. ...

Page 40

DC and ac parameters 11 DC and ac parameters Table 7. Operating conditions Symbol T Ambient operating temperature A Table 8. DC characteristics Symbol V Regulated voltage CC I Supply current (Active in Read Supply current (Active in ...

Page 41

SRIX4K Figure 51. SRIX4K synchronous timing, transmit and receive ASK Modulated signal from the Reader to the Contactless device FRAME Transmission between the reader and the contactless device FRAME Transmitted by the SRIX4K in BPSK Data ...

Page 42

Package mechanical 12 Package mechanical In order to meet environmental requirements, ST offers these devices in ECOPACK® packages. These packages have a Lead-free second-level interconnect. The category of Second-Level Interconnect is marked on the package and on the inner box ...

Page 43

SRIX4K Figure 53. A4 antenna specification Table 11. A4 antenna specification Symbol A Coil width B Coil length A1 Inlay width B1 Inlay length Overall thickness of copper antenna coil Silicon thickness Q Unloaded Q value F Unloaded free-air resonance ...

Page 44

Package mechanical Figure 54. A5 antenna specification Table 12. A5 antenna specification Symbol A Coil width B Coil length A1 Inlay width B1 Inlay length Overall thickness of copper antenna coil Silicon thickness Q Unloaded Q value F Unloaded free-air ...

Page 45

... A5T = Copper Antenna on Continuous Tape A5S = Copper Singulated Adhesive Antenna on Tape Customer code XXX = Given by STMicroelectronics Note: Devices are shipped from the factory with the memory content bits erased to 1. For a list of available options (Speed, Package, etc.) or for further information on any aspect of this device, please contact your nearest ST Sales Office ...

Page 46

ISO 14443 Type B CRC calculation Appendix A ISO 14443 Type B CRC calculation #include <stdio.h> #include <stdlib.h> #include <string.h> #include <ctype.h> #define BYTE unsigned char #define USHORT unsigned short unsigned short UpdateCrc(BYTE ch, USHORT *lpwCrc (ch^(BYTE)((*lpwCrc) ...

Page 47

SRIX4K Appendix B SRIX4K command summary Figure 55. INITIATE frame exchange between Reader and SRIX4K Reader SOF 06h SRIX4K Figure 56. PCALL16 frame exchange between Reader and SRIX4K Reader SOF 06h SRIX4K Figure 57. SLOT_MARKER frame exchange between Reader and ...

Page 48

SRIX4K command summary Figure 60. RESET_TO_INVENTORY frame exchange between Reader and SRIX4K Reader SOF 0Ch SRIX4K Figure 61. READ_BLOCK frame exchange between Reader and SRIX4K S Reader O 08h F SRIX4K Figure 62. WRITE_BLOCK frame exchange between Reader and SRIX4K ...

Page 49

SRIX4K Revision history Table 14. Document revision history Date Version 28-Nov-2002 17-Jul-2003 12-Mar-2004 26-Apr-2004 29-Nov-2004 13-Dec-2004 17-Aug-2005 10-Apr-2007 1.0 Document written 1.1 Data briefing extracted 2.0 First public release of full datasheet 3.0 Correction to memory map 4.0 Package mechanical ...

Page 50

... Information in this document is provided solely in connection with ST products. STMicroelectronics NV and its subsidiaries (“ST”) reserve the right to make changes, corrections, modifications or improvements, to this document, and the products and services described herein at any time, without notice. All ST products are sold pursuant to ST’s terms and conditions of sale. ...