MB89R118C

FUJITSU SEMICONDUCTOR DATA SHEET DS411-00001-1v0-E ASSP ISO/IEC 15693 Compliant FRAM Embedded TM High-speed RFID LSI MB89R118C ■ DESCRIPTION The MB89R118C is an LSI device that has built-in high-speed, large-capacity FRAM and is used for vicinityRFID. Note : FerVID family is a trademark of Fujitsu Semiconductor Limited, Japan. ■ FEATURES • • • • • • • • • • • • • Memory capacity of 2 Kbytes FRAM (including 2000 bytes of user area) 8-byte/block configuration, 256 blocks High-speed data transmission and reception at 26.48 kbps Fast command supported (data transmission at 52.97 kbps) (Transponder → Reader/Writer) Carrier frequency at 13.56 MHz Anti-collision function : 30 tags per second Endurance : 1010 writes and reads to memory Data Retention : 10 years ( + 70 °C) 64-bit UID FRAM memory data protection Anti-theft (EAS) command Compliance with ISO/IEC 15693 (partly not supported*) Compliance with ISO/IEC 18000-3 (Mode 1) (partly not supported*) * : Refer to “■ NOTES ON USING”. Copyright©2010 FUJITSU SEMICONDUCTOR LIMITED All rights reserved 2010.12 MB89R118C ■ BLOCK DIAGRAM Analog RF interface Antenna coil Rectifier Clock generator Power supply voltage control Modulator VDD Anti-collision function Clock I/O Commands Data output Data input Data output Digital control FRAM 2 Kbytes FRAM access Demodulator Data input R/W 2 DS411-00001-1v0-E MB89R118C ■ MEMORY MAP This section describes the FRAM memory, which is the internal memory of the MB89R118C. • FRAM Configuration The FRAM has 2000 bytes for use as user area and 48 bytes for use as system area. The FRAM memory areas consist of a total of 256 blocks (250 blocks of user area and 6 blocks of system area). Each block can store 64 bits (8 bytes) of data. The block is the unit used for the writing and reading of FRAM data. The memory configuration of FRAM is shown below. • FRAM memory configuration Area Block No. Details Data read Data write User area (2000 bytes) 00H to F9H FAH System area (48 bytes) FBH FCH to FFH User area UID (64 bits) AFI, DSFID, EAS, security status Block security status Yes Yes Yes Yes Yes No Limited No Blocks “00H” to “F9H” are user area. The user area is defined as an area that can be accessed when the corresponding block address is specified. On the other hand, Blocks “FAH” to “FFH” are system area. The system area is defined as an area that can be accessed only with a specific command. The system area consists of 6 blocks and contains UID, AFI, DSFID, EAS bits, and security status (can write or cannot write) data for individual block. UID is fixed and cannot be updated. AFI, DSFID, and EAS bits are written at the factory, and can be updated and locked (disable to write) with commands (Only EAS bit cannot be locked) . As shown in above, “FAH” holds the UID, and “FCH” to “FFH” hold the security status information on individual user areas. The configuration of “FBH” to “FFH” blocks is shown below. “FBH” block is used for EAS status, AFI and DSFID data, the security status data of AFI and DSFID. “FCH” to “FFH” blocks contain block security status data. • Structure of “FBH” MSB 64 57 56 RFU* 33 32 25 24 AFI Lock 17 16 DSFID 9 8 AFI DSFID Lock LSB 1 EAS Status Status Status * : Reserved for future use DS411-00001-1v0-E 3 MB89R118C • Structure of “FCH” to “FFH” Block security status (BSS) of user block 3FH MSB FCH FDH FEH FFH 3F 7F BF 3E 7E BE 3D 7D BD 3C 7C BC 3B 7B BB 3A 7A BA 39 79 B9 F9 03 43 83 C3 02 42 82 C2 01 41 81 C1 Block security status (BSS) of user block 00H LSB 00 40 80 C0 RFU* (6 bits) * : Reserved for future use The security status of the user area is stored in the block security status bit in system area blocks of “FCH” to “FFH” per bit in each block. A user area is unlocked when the corresponding block security status bit is “0”; it is locked (disable to write state) when the corresponding block security status bit is “1”. EAS bit is a single bit, and it is used for setting EAS status. It is possible to read/write data of 2 blocks at one time in the user area (If Read Multiple Blocks Unlimited command is used, up to 256 blocks can be accessed at one time) . 4 DS411-00001-1v0-E MB89R118C ■ DATA ELEMENT DEFINITION 1. Unique Identifier (UID) The MB89R118C has a 64-bit unique identifier (UID) that complies with ISO/IEC 15693-3. The UID is used to distinguish a transponder from another transponder in the Anti-collision algorithm described later. The UID consists of the 3 items shown in the following. • An 8-bit data whose value is always “E0H” (bit 57 to bit 64) • An 8-bit IC manufacturer code whose value is always “08H”, and is defined by ISO/IEC 7816-6/AMI (bit 49 to bit 56) • Unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR (bit 1 to bit 48) Among the unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR, the 1 byte from bit 41 to bit 48 defines MB89R118C code whose value is “01H”. And the 5 bytes from bit 1 to bit 40 define Chip Information. • Structure of UID MSB 64 “E0H” 57 56 49 48 “01H” 41 40 Chip information Unique serial number assigned by FUJITSU SEMICONDUCTOR LSB 1 IC manufacturer code “08H” DS411-00001-1v0-E 5 MB89R118C 2. Application Family Identifier (AFI) The application family identifier (AFI) identifies the type of application set by the transponder. The AFI can be written with a command. The AFI is 8-bit data and is stored in the system area of FRAM. The factory default setting of the AFI is “00H”. • Types of AFI Application Application Family Sub-Family Application Use Field Example/Note (bit 8 to bit 5) (bit 4 to bit 1) “0” X X “0” “1” “2” “3” “4” “5” “6” “7” “8” “9” “A” “B” “C” “D” “E” “F” “0” “0” Y Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y “0”, Y RFU* All families and sub-families All sub-families of family X Only the Yth sub-families of family X All families of Yth sub-families Transport Financial Identification Telecommunication Medical Multimedia Gaming Data storage EAN-UCC system for application identifiers ISO/IEC JTC1/SC31 IATA UPU Portable files Managed by ISO/IEC JTC1/SC31 Data identifiers as defined in ISO/IEC15418 Managed by ISO/IEC JTC1/SC31 Managed by ISO/IEC JTC1/SC31 Managed by ISO/IEC JTC1/SC31 Managed by ISO/IEC JTC1/SC31 Managed by ISO/IEC JTC1/SC31 Internet services Mass transit, bus, airline IEP, banking, retail Access control Public telephone, GSM No application preselection Wide applicative preselection * : Reserved for future use Note : Both X value and Y value are “1” to “F”. In the status of the AFI_flag setting; • If the AFI is not supported by the transponder, no response to all requests is returned. • If the AFI is supported by the transponder, the response is returned only if the value is in accord with the AFIsent from a reader/writer. 3. Data Storage Format Identifier (DSFID) The data storage format identifier (DSFID) indicates how data is structured in the transponder (LSI memory device). The DSFID can be programmed with a command. The DSFID is 8-bit data and is stored in the system area of FRAM. The factory default setting of the DSFID is “01H”. 6 DS411-00001-1v0-E MB89R118C 4. Cyclic Redundancy Check (CRC) When a frame is received, reception of correct data-that is, the characters making up the frame is assumed only when the value of the cyclic redundancy check (CRC) code is valid. For error-checking purposes, a 2byte CRC code value is inserted between data and the EOF signal. The value of CRC code is required from all the data contained between the SOF and CRC field in each frame. Method of calculation is provided in ISO/IEC 13239. The details are provided in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1) . The initial value of the CRC code provided in ISO/IEC 15693-3 is “FFFFH”. The CRC code is transferred, beginning with the lowest-order bit in the lowest-order byte. • CRC bit/byte transition order LSByte LSBit CRC 16 (8 Bits) MSBit LSBit MSByte MSBit CRC 16 (8 Bits) First transmitted bit of the CRC 5. Electronic Article Surveillance (EAS) status EAS status is 1 bit data (LSB side) , which is stored in the system area of FRAM. The initial value is “1”. EAS bit “1” means goods-monitoring status, and EAS bit “0” means that goods-monitoring status is cleared. EAS status can be written by Write EAS command and can be checked “FBH” block (refer to “■ MEMORY MAP”) by Read commands such as Read Single Block command. Together with Gate type reader/writer, EAS command can support anti-theft security functions. DS411-00001-1v0-E 7 MB89R118C ■ FUNCTION DESCRIPTION 1. Communication from Reader/Writer to Transponder (1) Modulation method The MB89R118C supports both 10% ASK modulation and 100% ASK modulation. Modulation index m is defined as m = (a - b)/(a + b) with reference to the modulated waveform shown below. The values a and b indicate, respectively, the maximum and minimum amplitude of magnetic field transmitted from a reader/writer. • Modulation of the carrier for 10% ASK hr y y t2 t1 t3 b hf a 0V 13.56 MHz • Modulation of the carrier for 100% ASK t1 t3 t4 105 % 95 % 60 % a t2 5% 0V b 13.56 MHz Maximum and minimum values of t1, t2, t3 and t4 are shown in the table of “■RECOMMENDED OPERATING CONDITIONS”. In this table, y is 0.05 (a-b) and the maximum value of hf and hr is 0.1(a-b). 8 DS411-00001-1v0-E MB89R118C (2) Data rate and data coding The MB89R118C supports only 1 out of 4 mode for bit coding (Not supports 1 out of 256 mode). In 1 out of 4 mode, 2-bit signals are coded in a period of 75.52 μs as shown in the following. When coding takes place, the data rate is 26.48 kbps (fc/512). Each signal is transmitted beginning with the lowest bit. • Coding Method in 1 out of 4 Mode • “00B” pulse position 9.44 μs 9.44 μs 75.52 μs • “01B” pulse position (1 = LSB) 28.32 μs 9.44 μs 75.52 μs • “10B” pulse position (0 = LSB) 47.20 μs 75.52 μs 9.44 μs • “11B” pulse position 66.08 μs 75.52 μs 9.44 μs (3) Data frame A data frame begins with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The MB89R118C is enabled to receive a frame from a reader/writer within 300 μs after the MB89R118C has sent a frame to the reader/writer. The MB89R118C is also enabled to receive a frame from a reader/ writer within 1 ms after power has been supplied to the MB89R118C. • Waveforms of SOF and EOF signals of a frame sent from a reader/writer SOF 9.44 μs 9.44 μs 9.44 μs 37.76 μs 37.76 μs EOF 37.76 μs 9.44 μs 9.44 μs DS411-00001-1v0-E 9 MB89R118C 2. Communication from Transponder to Reader/Writer • Minimum load modulation amplitude (Vlm) : 10 mV (based on ISO/IEC 10373-7) • Load modulation subcarrier frequency (fs) : 423.75 kHz(fc/32) The MB89R118C supports only a 1-subcarrier system. (Not supports 2-subcarrier system.) • Data rate : The MB89R118C supports the following 2 data rate modes : • Low data rate • High data rate One of the 2 data rate modes is specified by the Data_rate_flag (described later) sent from the reader/writer. In low data rate mode, the data rate is 6.62 kbps (fc/2048); in high data rate mode, it is 26.48 kbps (fc/512). When receiving the Fast commands (Custom commands) , the communication starts from the transponder in the data rate that is twice as fast as normal data rate. In this case, the 2 data rate modes of low data rate and high data rate specified by the Data_rate_flag is supported. In Low data rate mode, the data rate is 13.24 kbps (fc/1024) ; in high data rate mode, it is 52.97 kbps (fc/256) . (1) Bit coding The Manchester coding is used for the bit coding. The following figures show the signals modulated in high data rate mode when ISO command is received and the same signals when fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses for subcarrier and data transfer time are 4 times as large as the number in high data rate mode. • Signal waveforms by load modulation in high data rate mode (ISO commands) • Logic 0 423.75 kHz subcarrier 18.88 μs (modulated) 18.88 μs (not modulated) 37.76 μs • Logic 1 423.75 kHz subcarrier 18.88 μs (not modulated) 18.88 μs (modulated) 37.76 μs • Signal waveforms by load modulation in high data rate response mode (fast commands) • Logic 0 9.44 μs 9.44 μs 18.88 μs • Logic 1 9.44 μs 9.44 μs 18.88 μs 10 DS411-00001-1v0-E MB89R118C (2) Data frame A data frame sent from a transponder starts with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The following figures show the SOF and EOF signals sent in high data rate mode when ISO command is received and the same signals when fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses in subcarrier and data transfer time are 4 times as large as the number in high data rate mode. The reader/writer shall be ready to receive a frame from the transponder within 300 μs after having sent a frame to the transponder. • Waveforms of SOF and EOF signals of a frame sent from a transponder (ISO commands) • SOF 423.75 kHz subcarrier 56.64 μs 56.64 μs 37.76 μs • EOF 37.76 μs 56.64 μs 56.64 μs • Waveforms of SOF and EOF signals of a frame sent from a transponder (fast commands) • SOF 423.75 kHz Subcarrier 28.32 μs 28.32 μs 18.88 μs • EOF 423.75 kHz Subcarrier 18.88 μs 28.32 μs 28.32 μs 3. FRAM Data Protection if Power Lost During Data Writing MB89R118C accesses to FRAM with the unit of 1 byte. When RF power is shut down during accessing FRAM, writing in FRAM is completed by the charges stored in a smoothing capacitor on the LSI and FRAM data writing error is prevented. Therefore, the commands of 1 byte access such as Write AFI, Write DSFID, Write EAS, and Lock command can protect the data from the power down. On the other hand, the commands of more than 2 bytes access such as Write Single Block command may not protect all the data from the power down during the access. In this case, it is recommended to confirm the data by read command if it’s written correctly. DS411-00001-1v0-E 11 MB89R118C 4. Requests/Responses A request is sent from the reader/writer to the transponder. In reply to the request, the transponder sends a response to the reader/writer. Each request, and response, is transmitted in each single frame. • Structure of requests and responses A request consists of the following 5 fields : • Flag • Command code • Parameter (required or optional depending on the command) • Application data • CRC A response consists of the following 4 fields : • Flag • Parameter (required or option depending on the command) • Application data • CRC Each byte is transferred, beginning with the lowest bit. When two or more bytes are transferred, transfer begins with the lowest one. 12 DS411-00001-1v0-E MB89R118C 5. Operating Modes The MB89R118C has the following 3 operating modes : Each mode specifies a different mechanism for how the transponder returns a response in reply to a request from the reader/writer : • Addressed mode The MB89R118C enters Addressed mode when the Address_flag is set to “1”. In Addressed mode, a request includes a UID (the Address_flag is set to “1” simultaneously), and only the transponder that matches the UID in the request returns a response. If no transponder that matches the UID exists, a response is not returned. • Non-Addressed mode The MB89R118C enters Non-Addressed mode when the Address_flag is set to “0”. In Non-Addressed mode, a request does not include a UID. The transponders that receive the request execute processing and return response in accordance with the command in the request. • Select mode The MB89R118C enters select mode when the Select_flag is set to “1”, and the Address_flag is set to “0”. In select mode, do not include a UID as a request. Of the transponders that receive the command, only the transponder in the select state executes processing and returns a response in accordance with the command in the request. 6. Request Format The following figure shows a typical example of the request data format, and the following table shows the definition of request flag bits. • Structure of the request frame SOF Flag Command code Parameter Data CRC EOF • Setting of Bit 1 to Bit 4 Bit Flag name 1 2 3 4 Sub-carrier_flag Data_rate_flag Inventory_flag Protocol_Extension_flag 1/0 0 1 0 1 0 1 0 1 State/Description 1-subcarrier selected 2-subcarrier selected (not supported) Low data rate (6.62 kbps) selected High data rate (26.48 kbps) selected Command other than Inventory command selected Inventory command selected Protocol not extended Protocol extended (RFU*) * : Reserved for future use Note : “Inventory_flag” of bit 3 is determined whether “Inventory command” (select “1”) or other command (select “0”) is used. DS411-00001-1v0-E 13 MB89R118C • Setting of Bit 5 to Bit 8 (When Inventory command is selected [Inventory_flag = “1”]) Bit Flag name 1/0 State/Description 0 5 AFI_flag 1 0 1 0 1 0 1 AFI not set AFI set (response when it is in accord with AFI of the transponder) 16 slots (for one or more transponders) 1 slot (for one transponder) Command option not supported Command option supported (not supported) Set to “0” ⎯ 6 7 8 Nb_slots_flag Option_flag RFU* * : Reserved for future use • Setting of Bit 5 to Bit 8 (When the command other than Inventory command is selected [Inventory_flag = “0”]) Bit Flag name 1/0 State/Description 0 5 Select_flag 1 0 1 0 1 8 RFU* 0 1 Command flag decided by the setting of bit 6 and later bits. Select mode (the response is sent by only the transponder in select state) Non-Addressed mode (UID not included in the command) Addressed mode (UID included in the command) Command option not supported (for the command not supporting the Option_flag) Command option supported Set to “0” ⎯ 6 Address_flag 7 Option_flag * : Reserved for future use 7. Response Format The following figure shows a typical example of the response data format, and the following table shows the definition of the response flag bits. If the Error_flag is set to “1”, an error code field is generated in the response. If the Error_flag is set to “0”, this means no error, and If the Error_flag is set to “1”, this means any error generation. • Structure of the response frame SOF Flag Parameter Data CRC EOF 14 DS411-00001-1v0-E MB89R118C • Response flag definitions Bit Flag name 1 2 3 4 5 6 7 8 Error_flag RFU* RFU* Extension_flag RFU* RFU* RFU* RFU* 1/0 0 1 0 0 0 0 0 0 0 Error not found Error found Set to “0” Set to “0” Set to “0” Set to “0” Set to “0” Set to “0” Set to “0” Description * : Reserved for future use • Error code definitions Error code “01” “02” “03” “0F” “10” “11” “12” “13” “14” Others Meaning The specific command is not supported. Example: Command code error Cannot recognize the command. The number of blocks is over the limit. Example: Format error Specific options are not supported. Other errors The specified block cannot be used (or was not found). The specified block has already been locked and cannot be locked again. The specified block has already been locked, and its contents cannot be updated. The specified block could not be programmed normally (a write verify error occurred). The specified block could not be locked normally (a lock verify error occurred) . Unused. 8. Anti-Collision Algorithm The MB89R118C executes an Anti-collision sequence loop based on an algorithm that complies with ISO/ IEC 15693-3. The Anti-collision algorithm is designed to examine the transponders located within reader/writer communication areas on the basis of UID. The reader/writer issues an Inventory command to transponders, and some transponders return responses while other transponders do not according to the algorithm explained in “10. Execution of Inventory Command by a Transponder”. DS411-00001-1v0-E 15 MB89R118C 9. Request Parameter • Request Parameter Settings Set the reader/writer as follows before issuing the Inventory command. • The Nb_slots_flag (bit 6), which is a request flag, is set to the desired value : “0” : 16 slots (for plural transponders) “1” : 1 slot (for single transponder) • A mask length and a mask value are added after the command code. • The mask length represents the data length of the mask value in bits. • The mask value is integer bytes of data, transmitted beginning with the lowest bit. If the mask data is not a multiple of 8 (bits) in length, 0 is padded on the MSB side of the mask value so that the data is in units of bytes. The following figure shows an example of the mask value with padding. Since the mask length is 12 bits, the mask value is padded with 4 bits on the MSB side so that the mask data is in units of bytes (2 bytes = 16 bits in this case). If the AFI flag in the request flags is set in the format explained in “• Structure of the request frame of 6. Request Format”, an AFI field is added to the format. The command ends with transmission of an EOF signal as described in “1. Communication from Reader/Writer to Transponder”. Thereafter, processing in the first slot starts immediately. To proceed to the next slot, the reader/writer sends an EOF signal. • Format of the Command SOF Flag Command code Optional AFI Mask length 8 bits 8 bits 8 bits 8 bits Mask value 0 to 64 bits CRC 16 bits EOF • Example of the Mask Value with Padding MSB 0000 Pad 0100 1100 1111 LSB Mask value 16 DS411-00001-1v0-E MB89R118C 10. Execution of Inventory Command by a Transponder A transponder returns a response to the reader/writer when its UID is equal to the value that consists of the mask value and the number of slots. The mask value is sent in the Inventory command, and the number of slots is determined by the number of times the EOF signal is transmitted. • Algorithm for execution of processing by a transponder The following figure shows the algorithm for the execution of processing by a transponder when an Inventory command is received. The next figure shows the relationship between the UID and the mask value. • Algorithm for Execution of Processing by a Transponder when Inventory Command NbS SN LSB (value, n) & Slot_Frame SN = 0 : Total number of slots (1 or 16) : Current slot number : The “n” least significant bits of value : Concatenation operator : SOF or EOF Nb_slots_flag=1? YES NbS = 1 SN_length=0 NO NbS = 16 SN_length=4 LSB (UID, SN_length + mask length) = LSB (SN, SN_length) & LSB (mask, mask length) ? NO Wait (Slot_Frame) NO NO YES Response transmission Slot_Frame=SOF? YES Slot_Frame=EOF? YES End of processing End of processing SN < NbS-1 YES SN = SN + 1 NO End of processing DS411-00001-1v0-E 17 MB89R118C • Comparison of the mask value and the number of slots with the UID [Inventory command (the side of a reader/writer)] Inventory command includes the mask value and mask length. The mask value is padded with “0” into the higher bit side so to make the byte-unit length (a multiple of 8 bits). Padding Mask value (specified by the Inventory command) 000••• If Inventory command is received, the slot counter is reset to “0”. Mask length Slot counter If EOF is received, the increment of the slot counter is started by the transponder. Number of Mask value (no padding) slots Ignored Compared The value is compared with the lowest bit in UID of the transponder. If the value is in accord with the mask value, the response is returned by the transponder. Unique Identifier (UID) MSB [Unique Identifier (the side of a transponder) ] LSB 18 DS411-00001-1v0-E MB89R118C 11. Anti-Collision Sequence • Execution of Anti-collision sequence A typical Anti-collision sequence that is applied when the number of slots is 16 is executed as follows : 1) The reader/writer sends an Inventory command. The Nb_slots_flag bit of the request flags is set to “0” to specify the number of slots. 2) In slot 0, transponder 1 transmits its response in the time t1_a from the detection of the rising edge of the EOF. In this case no collision occurs and the UID of transponder is received and registered by the reader/ writer. 3) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the response 1. 4) In slot 1, transponder 2 and transponder 3 transmit their response in the time t1_a from the detection of the rising edge of the EOF. In this case, the reader/writer cannot recognize the UIDs of the two transponders because the collision occurs, and the reader/writer remembers that a collision was detected in slot 1. 5) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the responses. 6) In slot 2, no transponder transmits a response. The reader/writer does not detect any response, and sends an EOF signal to switch to the next slot in the time t3_a from the detection of the rising edge of the EOF. 7) In slot 3, transponder 4 and transponder 5 transmit their response in the time t1_a from the detection of the rising edge of the EOF, and another collision occurs. 8) The reader/writer sends a request (for example, a Read Single Block command, described later) to the transponder 1, which UID was already correctly received. 9) All transponders detect an SOF signal and exit the Anti-collision sequence. In this case, since the request is addressed to transponder 1 (Addressed mode), only transponder 1 transmits its response. 10) All transponders are ready to receive another request from the reader/writer. If the Inventory command is sent again, the Anti-collision sequence starts from slot 0. Note : t1_a, t2_a, t3_a are specified in “12. Timing definitions”. DS411-00001-1v0-E 19 MB89R118C • Example of Anti-Collision Sequence Slot_Counter (1) SOF Inventory command Slot 0 EOF (2) Response 1 (3) EOF (4) Slot 1 Reader/writer MB89R118C Response 2 Response 3 Timing Status Slot_Counter (5) EOF Slot 2 (6) EOF t1_a t2_a t1_a t2_a No collision Slot 3 (7) Response 4 Response 5 t3_a t1_a t2_a EOF Collision Reader/writer MB89R118C Timing Status Slot_Counter No response (8) SOF Command (to Transponder1) Collision Reader/writer MB89R118C EOF (9) Response (Transponder1) Timing Status t3_a t1_a 20 DS411-00001-1v0-E MB89R118C 12. Timing definitions (1) Period during which the MB89R118C waits for the start of response transmission after an EOF signal transmitted from the reader/writer : t1_a After detection of an EOF signal sent from the reader/writer, MB89R118C must wait for a certain time (t1_a) before sending a response to the reader/writer. t1_a begins at the rising edge of the EOF pulse, and it is defined as following. The minimum value is 4320/fc (= 318.6 μs), the nominal value is 4352/fc (= 320.9 μs), and the maximum value is 4384/fc (=323.3 μs). Even if the 10% ASK modulated signal from the reader/writer is detected within the time t1_a, the transponder ignore the signal and wait for further time t1_a before starting to transmit. (2) Period during which the MB89R118C ignores modulated signals after an EOF signal transmitted from the reader/writer : tmit After detection of an EOF signal sent from the reader/writer, MB89R118C must ignore the 10% ASK modulated signals from the reader/writer for a time (tmit). tmit begins at the rising edge of the EOF pulse. The minimum value of tmit is defined as 4384/fc (323.3 μs) + tnrt. In the above expression, tnrt stands for the response time of MB89R118C. (3) Period during which the reader/writer waits before sending a request : t2_a When the reader/writer has received a response from the transponder to a previous request other than Inventory and Stay Quiet command, it shall wait a time t2_a before sending a subsequent request. The minimum value of t2_a is 309.2 μs. It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) . (4) Period during which the reader/writer waits before sending a request during execution of the Inventory command : t2inv While an Inventory command is being executed, the reader/writer sends an EOF signal when it shifts to the next slot. In this case, the wait time is defined as follows depending on whether transponders return responses : Wait time applied when the reader/writer has received one or more responses : t2invwr It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) that when the reader/writer has received one or more responses, the reader/writer must wait until responses from the transponders have been completed (that is, the reader/writer receives an EOF signal or tnrt passes). After that, the reader/writer must wait until t2_a passes before sending an EOF signal to switch to the next slot. Wait time applied when the reader/writer has not received any responses : t3_a When the reader/writer has not received any responses from the MB89R118C, the reader/writer must wait until t3_a passes before sending an EOF signal. In this case, t3_a begins at the rising edge of the EOF pulse that was sent previously. The minimum value of t3_a is defined as shown in the following table. MB89R118C does not support the minimum value of t3_a as “4384/fc (323.3 μs) + tsof” when the reader/ writer sends a 100% modulated EOF, which is defined in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1). (a) If the reader/writer sends a ASK10% modulated EOF, the minimum value of t3_a (ASK10%) is “4384/ fc ( = 323.3 μs + tnrt') (b) If the reader/writer sends a ASK100% modulated EOF, the minimum value of t3_a (ASK100%) is “4384/fc ( = 323.3 μs + tsof') tnrt: The nominal response time of transponder tsof: The time for transponder to transmit a SOF to the reader/writer - DS411-00001-1v0-E 21 MB89R118C • t3_a for ASK10% and ASK100% signal Reader/Writer MB89R118C t1_a t3_a (ASK100 %) SOF Inventory command EOF no response new command (or EOF signal) Timing t3_a (ASK10 %) tsof tnrt Ignore ASK 10 % signal MB89R118C ASK signal handling reset t1_a after receiving ASK 100 % signal ignore ASK 100 % signal possible to receive ASK 10 % signal possible to receive ASK 100 % signal • Timing specification Min t1_a tmit t2_a t2invwr t3_a (ASK10%) t3_a (ASK100%) 4320/fc = 318.6 μs 4384/fc (323.3 μs) + tnrt 4192/fc = 309.2 μs t2_a + tnrt 4384/fc (323.3 μs) + tnrt 4384/fc (323.3 μs) + tsof ⎯ Typ 4352/fc = 320.9 μs ⎯ ⎯ ⎯ ⎯ ⎯ Low data rate : 15708.16 μs High data rate : 3927.04 μs Fast Low data rate : 7854.08 μs Fast High data rate : 1963.52 μs Low data rate : 604.16 μs High data rate : 151.04 μs Fast Low data rate : 302.08 μs Fast High data rate : 75.52 μs Max 4384/fc = 323.3 μs ⎯ ⎯ ⎯ ⎯ ⎯ ⎯ tnrt tsof ⎯ ⎯ 22 DS411-00001-1v0-E MB89R118C ■ COMMAND LIST All Mandatory and Optional commands defined by ISO/IEC 15693-3 are supported. The following Custom commands are supported : • EAS command : Using for preventing the theft of goods and goods-monitoring • Write EAS command : Writing data to the EAS bit • Read Multiple Blocks Unlimited command : Enable to read FRAM area of up to 2048 bytes in a lump • Fast command : Respond at double speed compared to ISO commands • Command list Command code Command name Inventory Stay Quiet Read Single Block Write Single Block Lock Block Read Multiple Blocks Write Multiple Blocks Select Reset to Ready Write AFI Lock AFI Write DSFID Lock DSFID Get System Information Get Multiple Block Security Status EAS Write EAS Read Multiple Blocks Unlimited Fast Inventory Fast Read Single Block Fast Write Single Block Fast Read Multiple Blocks Fast Write Multiple Blocks Fast Write EAS Fast Read Multiple Blocks Unlimited Command Type Details “01H” “02H” “20H” “21H” “22H” “23H” “24H” “25H” “26H” “27H” “28H” “29H” “2AH” “2BH” “2CH” “A0H” “A1H” “A5H” “B1H” “C0H” “C1H” “C3H” “C4H” “D1H” “D5H” Mandatory Execute the Anti-collision sequence and get UID. Mandatory Enter the Quiet state Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Custom Custom Custom Custom Custom Custom Custom Custom Custom Custom Read the requested 1 block data in the user area/system area Write the requested 1 block data in the user area Lock (disable to write) the requested 1 block in the user area Read the requested 1 or 2 blocks data in the user area/ system area Write the requested 1 or 2 blocks data in the user area Enter the select (communication selected) state Enter the ready (communication enabled) state Write AFI (Application Family Identifier) data into FRAM. Lock AFI data (disable to write) Write DSFID (Data Storage Format Identifier) data into FRAM Lock DSFID (Data Storage Format Identifier) data (disable to write) Read the system information value (UID, DSFID, AFI, number of bytes per block, number of blocks in user area, and IC information) Read the block security status stored in system area. When EAS bit is “1”, reply response code 6 times. Write EAS data (1 bit). Data “1” validates anti-theft/goodsmonitoring, and data “0” invalidates them. Read the specified data of up to 256 blocks in the user area/system area. Fast response Inventory command Fast response Read Single Block command Fast response Write Single Block command Fast response Read Multiple Blocks command Fast response Write Multiple Blocks command Fast response Write EAS command Fast response Read Multiple Blocks Unlimited command DS411-00001-1v0-E 23 MB89R118C ■ COMMAND DESCRIPTION 1. Description of Mandatory Command 1-1. Inventory command The Inventory command executes the Anti-collision sequence. Even though an error is detected during execution of this command, a response indicating the error is not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response is returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. • Request [Request from the reader/writer to the transponder] Command SOF Flag Optional AFI (Inventory) 8 bits • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID 64 bits CRC 16 bits EOF 8 bits (“01H”) 8 bits Mask length 8 bits Mask value 0 to 64 bits CRC 16 bits EOF 1-2. Stay Quiet command On receiving the Stay Quiet command, the transponder enters the quiet state. The transponder does not return any responses, including an error indication. In the quiet state, the transponder does not execute any request for which the Inventory_flag (bit 3) is set to “1” and executes only a command for which the Address_flag (bit 6) is set to “1”. The transponder exits the quiet state only in the following cases: • The transponder enters the power-off state. • The transponder receives the Select command and enters the select state. • The transponder receives the Reset to Ready command and enters the ready state. • Request [Request from the reader/writer to the transponder] Command SOF Flag (Stay Quiet) 8 bits • Response [Response from the transponder to the reader/writer] No response 8 bits (“02H”) UID (necessary) 64 bits CRC 16 bits EOF 24 DS411-00001-1v0-E MB89R118C 2. Description of Optional Command 2-1. Read Single Block command On receiving the Read Single Block command, the transponder reads the data stored in the specified singleblock to the reader/writer. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Single Block) (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“20H”) 64 bits Number of blocks 8 bits CRC 16 bits EOF Block security status (option) 8 bits Data 64 bits CRC 16 bits EOF 2-2. Write Single Block command On receiving the Write Single Block command, the transponder writes the single-block data included in the request to the specified block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response “t1nom : typical 320.9 μs” (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command). • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Write Single Block) (Addressed mode) 8 bits 8 bits (“21H”) 64 bits Number of blocks 8 bits Data 64 bits CRC 16 bits EOF DS411-00001-1v0-E 25 MB89R118C • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 2-3. Lock Block command On receiving the Lock Block command, the transponder locks (write disable) permanently the data stored in one specified single-block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response. (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command.) Once the Lock Block command has been received, data in the locked block cannot be changed by the Write Single (Multiple) Block (s) command. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Lock Block) (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“22H”) 64 bits Number of blocks 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 26 DS411-00001-1v0-E MB89R118C 2-4. Read Multiple Blocks Command On receiving the Read Multiple Blocks command, the transponder reads the data stored in the specified successive blocks to the reader/writer. Up to 2 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Read Single Block command). Note : For execution in the Addressed mode, the Read Multiple Blocks command must be run without shutting off the RF power supply after obtaining the UID, for example, using the Inventory command. No response may be expected when RF power supply is not stable. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Multiple Blocks) (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“23H”) 64 bits First block number 8 bits Number of blocks 8 bits CRC 16 bits EOF Block security status (option) 8 bits Repeated as required Data 64 bits CRC 16 bits EOF 2-5. Write Multiple Blocks Command On receiving the Write Multiple Blocks command, the transponder writes the successive multiple-block data included in the request to the specified blocks. Up to 2 blocks of data can be written for one request. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such DS411-00001-1v0-E 27 MB89R118C reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits Command (Write UID Multiple Blocks) (Addressed mode) First block number Number of blocks Data 64 bits or 128 bits CRC 16 bits EOF 8 bits (“24H”) 64 bits 8 bits 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 2-6. Select command Of the transponders that received the Select command, only the transponder whose UID matches the UID included in the request enters the select state and returns a response. The other transponders, whose UIDs do not match the UID in the request, enter the ready states without returning any response. The Select command is used only in Addressed mode. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Select) UID (necessary) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“25H”) 64 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 28 DS411-00001-1v0-E MB89R118C 2-7. Reset to Ready command On receiving the Reset to Ready command, the transponder enters the ready state. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Reset to Ready) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“26H”) UID (Addressed mode) 64 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 2-8. Write AFI command On receiving the Write AFI command, the transponder writes the data of AFI to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write AFI) UID (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“27H”) 64 bits AFI 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF DS411-00001-1v0-E 29 MB89R118C 2-9. Lock AFI command On receiving the Lock AFI command, the transponder locks (write disable) permanently the data of AFI. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock AFI command has been received, the data of AFI cannot be changed by the Write AFI command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock AFI) UID (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“28H”) 64 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 2-10. Write DSFID command On receiving the Write DSFID command, the transponder writes the data of DSFID to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write DSFID) UID (Addressed mode) 8 bits 8 bits (“29H”) 64 bits DSFID 8 bits CRC 16 bits EOF 30 DS411-00001-1v0-E MB89R118C • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 2-11. Lock DSFID command On receiving the Lock DSFID command, the transponder locks (write disable) permanently the data of DSFID. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock DSFID command has been received, the data of DSFID cannot be changed by the Write DSFID command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock DSFID) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“2AH”) UID (Addressed mode) 64 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF DS411-00001-1v0-E 31 MB89R118C 2-12. Get System Information command On receiving the Get System Information command, the transponder reads the chip information of UID, AFI, DSFID, and so on to the reader/writer as a response. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Get System Information) UID (Addressed mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) Error code 8 bits CRC 16 bits EOF 8 bits (“2BH”) 64 bits CRC 16 bits EOF (2) When Error_flag not set SOF Flag Information flag 8 bits (“00H”) 8 bits UID 64 bits DSFID 8 bits AFI 8 bits Memory size IC reference 16 bits 8 bits CRC 16 bits EOF The followings show the definitions of the Information flag and the memory size information (transponder memory size information) included in the response of the Get System Information command. However, the size of blocks and number of blocks in the user area shown in the memory size information about a transponder indicate one less than the actual value. • Definition of information flag Bit Flag name State Description 1 2 3 4 5 6 7 8 DSFID AFI Memory size IC reference RFU* RFU* RFU* RFU* 0 1 0 1 0 1 0 1 ⎯ ⎯ ⎯ ⎯ Set to “0” DSFID is not supported or does not exist. DSFID is supported or exists. AFI is not supported or does not exist. AFI is supported or exists. Memory size information is not supported or does not exist. Memory size information is supported or exists. IC reference information is not supported or does not exist. IC reference information is supported or exists. * : Reserved for future use Note : For MB89R118C, set “0FH” (set “1” for bit 1 to bit 4 and set “0” for bit 5 to bit 8) . 32 DS411-00001-1v0-E MB89R118C • Memory size information about a transponder MSB 16 RFU* 14 13 Size of blocks (Number of bytes in 1 block) 98 Number of blocks in the user area LSB 1 * : Reserved for future use Note : The memory size of the MB89R118C which is consisted of 250 blocks (8 bytes per block) in the user area, the memory size information is hexadecimal “07F9H”. 2-13. Get Multiple Block Security Status Command On receiving the Get Multiple Block Security Status command, the transponder reads the block security status stored in a system area to the reader/writer as a response. Up to 64 blocks of data can be read for one request. The number of blocks specified in this request must be the value that is 1 block less than the actual number of the blocks whose security status is to be obtained. The first block number specified in this request must be a multiple of 8. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Get Multiple Block (Addressed mode) Security Status) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“2CH”) 64 bits First block number 8 bits Number of blocks 8 bits CRC 16 bits EOF Block security status 8 bits (repeated as required) CRC 16 bits EOF DS411-00001-1v0-E 33 MB89R118C 3. Custom Command The IC manufacturing code is required to use a Custom command. The IC manufacturing code for the MB89R118C is “08H”. 3-1. EAS command On EAS command reception, the transponder returns the response code “5AH” repeated 6 times after the specified flag (“00H”) if the EAS bit is “1” or returns no response if the EAS bit is “0”. The EAS command can be executed only when the transponder is in the ready or select state. • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits • Response [Response from the transponder to the reader/writer] SOF Flag Response code 8 bits (“00H”) 48 bits (6 times repeat of “5AH”) CRC 16 bits EOF Command (EAS) 8 bits (“A0H”) IC manufacturer code (necessary) 8 bits (“08H”) CRC 16 bits EOF 3-2. Write EAS command On Write EAS command reception, the transponder writes the EAS bit to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode as the EAS data. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out error occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID SOF Flag (Write EAS) code (necessary) (Addressed mode) 8 bits 8 bits (“A1H”) • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits CRC 16 bits EOF EOF 8 bits (“08H”) 64 bits Data CRC EOF 8 bits (“00H” or “01H”) 16 bits 34 DS411-00001-1v0-E MB89R118C 3-3. Read Multiple Blocks Unlimited Command On receiving the Read Multiple Blocks Unlimited command, the transponder reads the data stored in the specified successive blocks to the reader/writer as a response. Up to 256 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] UID Command First block Number IC manufacturer (Addressed SOF Flag (Read Multiple number of blocks code (necessary) mode) Blocks Unlimited) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“A5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC 16 bits EOF Block security status(option) 8 bits Repeated as required Data 64 bits CRC 16 bits EOF 3-4. Fast Inventory Command The Fast Inventory command is the same as the Inventory Command that executes the Anti-collision sequence. The data rate in the response is twice as defined in ISO/IEC 15693. Even though an error is detected during execution of this command, a response indicating the error is not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response is returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. DS411-00001-1v0-E 35 MB89R118C • Request [Request from the reader/writer to the transponder] Command IC manufacturer SOF Flag (Fast Inventory) code (necessary) 8 bits • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID 64 bits CRC 16 bits EOF 8 bits (“B1H”) 8 bits (“08H”) Optional AFI 8 bits Mask length 8 bits Mask value 0 to 64 bits CRC 16 bits EOF 3-5. Fast Read Single Block Command The Fast Read Single Block command is the same as the Read Single Block command that reads the data stored in the specific single-block. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID Number SOF Flag (Fast Read Single Block) code (necessary) (Addressed mode) of blocks 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“C0H”) 8 bits (“08H”) 64 bits 8 bits CRC 16 bits EOF Block security status(option) 8 bits Data 64 bits CRC 16 bits EOF 3-6. Fast Write Single Block Command The Fast Write Single Block command is the same as the Write Single Block command that writes the singleblock data included in the request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response “t1nom : typical 320.9 μs” (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . 36 DS411-00001-1v0-E MB89R118C • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF UID Command (Fast IC manufacturer Number (Addressed Write Single Block) code (necessary) of blocks mode) 8 bits (“C1H”) 8 bits (“08H”) 64 bits 8 bits Data 64 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 3-7. Fast Read Multiple Blocks Command The Fast Read Multiple Blocks command is the same as the Read Multiple Blocks command that reads the data of the specified successive blocks. Up to 2 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/ IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Fast Read Single Block command). Note : For execution in the Addressed mode, the Fast Read Multiple Blocks command must be run without shutting off the RF power supply after obtaining the UID, for example, using the Inventory command. No response may be expected when RF power supply is not stable. • Request [Request from the reader/writer to the transponder] Command UID IC manufacturer SOF Flag (Fast Read (Addressed code (necessary) Multiple Blocks) mode) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Flag 8 bits (“00H”) Error code 8 bits CRC 16 bits EOF 8 bits (“C3H”) 8 bits (“08H”) 64 bits First block number 8 bits Number of blocks 8 bits CRC 16 bits EOF Block security status(option) 8 bits Repeated as required Data 64 bits CRC 16 bits EOF DS411-00001-1v0-E 37 MB89R118C 3-8. Fast Write Multiple Blocks Command The Fast Write Multiple Blocks command is the same as the Write Multiple Blocks command that writes the successive multiple-block data included in the request. Up to 2 blocks of data can be written for one request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Fast Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Fast Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Fast Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still returns its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] UID First Command Number IC manufacturer (Addressed block SOF Flag (Fast Write of blocks code mode) number Multiple Blocks) 8 bits 8 bits (“C4H”) 8 bits (“08H”) 64 bits 8 bits 8 bits Data CRC EOF 64 bits or 16 bits 128 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF Flag 8 bits (“00H”) CRC 16 bits EOF 38 DS411-00001-1v0-E MB89R118C 3-9. Fast Write EAS Command The Fast Write EAS command is the same as Write EAS command that writes the EAS bit to FRAM. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out error occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] IC manufacturer Command UID SOF Flag code (Fast Write EAS) (Addressed mode) (necessary) 8 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag 8 bits (“01H”) (2) When Error_flag not set SOF Error code 8 bits CRC 16 bits EOF 8 bits (“D1H”) 8 bits (“08H”) 64 bits Data CRC EOF 8 bits (“00H” or “01H”) 16 bits Flag 8 bits (“00H”) CRC 16 bits EOF 3-10. Fast Read Multiple Blocks Unlimited Command The Fast Read Multiple Blocks Unlimited command is the same as the Read Multiple Blocks Unlimited command that reads the data of the specified successive blocks. Up to 256 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] Number Command IC manufacturer UID First block of SOF Flag (Fast Read Multiple code (Addressed number blocks Blocks Unlimited) (necessary) mode) 8 bits • Response [Response from the transponder to the reader/writer] 8 bits (“D5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC 16 bits EOF DS411-00001-1v0-E 39 MB89R118C (1) When Error_flag set SOF Flag 8 bits (“01H”) Error code 8 bits CRC 16 bits EOF (2) When Error_flag not set SOF Flag 8 bits (“00H”) Block security status (option) 8 bits Repeated as required Data 64 bits CRC 16 bits EOF 4. Command Execution Time 4-1. Write Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data writing to all user areas (2000 bytes) of the FRAM and verification with the Write Multiple Blocks command is estimated to be 1.4 seconds. 4-2. Read Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data reading for all user areas (2000 bytes) of the FRAM with the Read Multiple Blocks command is estimated to be 1.5 seconds. In addition, with the Fast Read Multiple Blocks command is estimated to be 1.1 seconds, and with the Fast Read Multiple Blocks Unlimited command is estimated to be 0.35 seconds. 40 DS411-00001-1v0-E MB89R118C ■ STATE TRANSITION DIAGRAM • Definition of states Each state of MB89R118C is defined as follows. • Power-off state : In the power-off state, a transponder cannot fulfill the function so that the voltage from a reader/writer is underpowered. • Ready state : In the ready state, the MB89R118C can execute all commands if the Select_flag is not set. • Quiet state : In the quiet state, the MB89R118C can execute the command for which the Inventory_flag is not set and the Address_flag is set. • Select state : In the select state, the MB89R118C can execute the command for which the Select_flag is set. As shown in figure below, the MB89R118C moves from one state to another according to the status of power and by a command. • State transition diagram Out of field Power-off state Out of field Out of field In field Any other command where Select_flag is not set. Ready state Reset to Ready command Select command (UID) Reset to Ready command where Select_flag is set or Select (different UID) . Stay Quiet (UID) command Select command (UID) Quiet state Stay Quiet (UID) command Select state Any other command where Address_flag is set and where Inventory_flag is not set. Any other command DS411-00001-1v0-E 41 MB89R118C ■ ABSOLUTE MAXIMUM RATINGS Parameter Maximum antenna input current Input current ESD voltage immunity Storage temperature Symbol Imax IRF VESD Tstg Ratings Min ⎯ ⎯ ±2 − 40 Max 90 30 ⎯ + 125 Unit mAp−p mArms kV °C Antenna connected. Human body model Remarks WARNING: Semiconductor devices can be permanently damaged by application of stress (voltage, current, temperature, etc.) in excess of absolute maximum ratings. Do not exceed these ratings. ■ RECOMMENDED OPERATING CONDITIONS Parameter Minimum antenna input voltage ASK modulation index (10%) ASK modulation index (100%) ASK pulse width (10%) Symbol VRF m m t1 t2 t3 t1 ASK pulse width (100%) t2 t3 t4 Input frequency Operating temperature Fin Ta Value Min ⎯ 10 95 6.0 3.0 0 6.0 2.1 1.0 0 13.553 − 20 Typ 6.2 ⎯ ⎯ ⎯ ⎯ ⎯ ⎯ ⎯ ⎯ ⎯ 13.560 ⎯ Max 6.5 30 100 9.44 t1 4.5 9.44 t1 4.5 0.8 13.567 + 85 Unit Vrms % % μs μs μs μs μs μs μs MHz °C Remarks Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. Antenna connected. WARNING: The recommended operating conditions are required in order to ensure the normal operation of the semiconductor device. All of the device's electrical characteristics are warranted when the device is operated within these ranges. Always use semiconductor devices within their recommended operating condition ranges. Operation outside these ranges may adversely affect reliability and could result in device failure. No warranty is made with respect to uses, operating conditions, or combinations not represented on the data sheet. Users considering application outside the listed conditions are advised to contact their representatives beforehand. However, because the communication characteristics is deeply related with the combination of antenna, reader/writer, and operating environment, this condition dose not ensure the complete operation of transponders. Therefore it is recommended to confirm the communication characteristics with the actual antenna and reader/writer beforehand. The values are confirmed with a reference antenna, and its parameters are as following. External size : 75 mm × 46 mm Number of turns :6 Width of conductor : 1 mm Space between 2 conductors : 0.4 mm 42 DS411-00001-1v0-E MB89R118C ■ ELECTRICAL CHARACTERISTICS DC characteristics Parameter Load modulation resistance Input capacitance* (1) (2) Symbol RlSW Cant Value Min ⎯ 22.8 86.4 Typ 1.1 24.0 96.0 Max ⎯ 25.2 105.6 Unit kΩ pF Voltage between antennas = 2 Vrms Remarks * : The capacitance value is an alternative value, which is distinguished with the part number. The values are controlled by PCM (Process Control Monitor) in the wafer. DS411-00001-1v0-E 43 MB89R118C ■ NOTES ON USING • Notes on the radio interface - The performance of transponder is determined by not only LSI specification but also antenna design and reader/writer characteristics. Therefor it is recommended for the customers to optimize the antenna and reader/writer according to the required communication distance and usage environment. - If the user intends to access multiple transponders from a reader/writer, the interference between transponders or between the reader/writer and a transponder may degrade communication performance (transmission distance and communication time) . Therefore, a user who intends to design a system using multiple transponders should consider this point. • FRAM reliability Up to 1010 writes and reads to the FRAM memory and 10 years of data retention at Ta = + 70 °C are guaranteed. For the data retention characteristics of the mounting temperature at + 150 °C or higher, refer to “■ SHIPPING METHOD AND RECOMMENDED ASSEMBLY CONDITIONS”. • Differences of the function between ISO/IEC15693 and MB89R118C. The comparison of the function between ISO/IEC 15693 and MB89R118C is shown in the table below. MB89R118C does not support the following functions. • 1 out of 256 data coding • 2-subcarrier The Read/Write Multiple Blocks command supports up to 2 blocks read/write. It dose not support 3 or more blocks read/write. (A custom command “Read Multiple Blocks Unlimited command” enables to read 3 or more blocks.) • MB89R118C functions compared with ISO/IEC15693 Parameter ISO/IEC15693 specification Modulation Data coding Subcarrier Mandatory command 10% ASK 100% ASK 1 out of 256 1 out of 4 1-subcarrier 2-subcarrier Inventory command Stay Quiet command Read Single Block command Write Single Block command Lock Block command Read Multiple Blocks command Write Multiple Blocks command Select command Optional command Reset to Ready command Write AFI command Lock AFI command Write DSFID command Lock DSFID command Get System Information command Get Multiple Block Security Status command 44 MB89R118C Correspondence Correspondence Not correspondence Correspondence Correspondence Not correspondence Correspondence Correspondence Correspondence Correspondence Correspondence Correspondence up to 2 blocks Correspondence up to 2 blocks Correspondence Correspondence Correspondence Correspondence Correspondence Correspondence Correspondence Correspondence DS411-00001-1v0-E MB89R118C ■ SHIPPING METHOD AND RECOMMENDED ASSEMBLY CONDITIONS • Shipping method The following shows shipping method and ordering information for the MB89R118C. Please inquire separately for the details. Part no. Input capacitance Wafer thickness Chip dicing Bump Shipped form MB89R118C1-DI15 MB89R118C2-DI15 24 pF 96 pF 150 μm ± 25.4 μm Completed Au Plating or Au Ball Wafer (with Frame) • Recommended assembly conditions The MB89R118C is recommended to be mounted in the following condition to maintain the data retention characteristics of the FRAM memory when the chip is mounted. - Mounting temperature of + 175 °C or lower, and 120 minutes or shorter when applied at high temperature, or - Mounting temperature of + 200 °C or lower, and 60 seconds or shorter when applied at high temperature +200 Temperature [ °C] Temperature [ °C] +25 120 60 +175 +25 Time [min] Time [s] DS411-00001-1v0-E 45 MB89R118C MEMO 46 DS411-00001-1v0-E MB89R118C MEMO DS411-00001-1v0-E 47 MB89R118C FUJITSU SEMICONDUCTOR LIMITED Nomura Fudosan Shin-yokohama Bldg. 10-23, Shin-yokohama 2-Chome, Kohoku-ku Yokohama Kanagawa 222-0033, Japan Tel: +81-45-415-5858 http://jp.fujitsu.com/fsl/en/ For further information please contact: North and South America FUJITSU SEMICONDUCTOR AMERICA, INC. 1250 E. Arques Avenue, M/S 333 Sunnyvale, CA 94085-5401, U.S.A. Tel: +1-408-737-5600 Fax: +1-408-737-5999 http://us.fujitsu.com/micro/ Europe FUJITSU SEMICONDUCTOR EUROPE GmbH Pittlerstrasse 47, 63225 Langen, Germany Tel: +49-6103-690-0 Fax: +49-6103-690-122 http://emea.fujitsu.com/semiconductor/ Korea FUJITSU SEMICONDUCTOR KOREA LTD. 206 Kosmo Tower Building, 1002 Daechi-Dong, Gangnam-Gu, Seoul 135-280, Republic of Korea Tel: +82-2-3484-7100 Fax: +82-2-3484-7111 http://kr.fujitsu.com/fmk/ Asia Pacific FUJITSU SEMICONDUCTOR ASIA PTE. LTD. 151 Lorong Chuan, #05-08 New Tech Park 556741 Singapore Tel : +65-6281-0770 Fax : +65-6281-0220 http://www.fujitsu.com/sg/services/micro/semiconductor/ FUJITSU SEMICONDUCTOR SHANGHAI CO., LTD. Rm. 3102, Bund Center, No.222 Yan An Road (E), Shanghai 200002, China Tel : +86-21-6146-3688 Fax : +86-21-6335-1605 http://cn.fujitsu.com/fss/ FUJITSU SEMICONDUCTOR PACIFIC ASIA LTD. 10/F., World Commerce Centre, 11 Canton Road, Tsimshatsui, Kowloon, Hong Kong Tel : +852-2377-0226 Fax : +852-2376-3269 http://cn.fujitsu.com/fsp/ Specifications are subject to change without notice. For further information please contact each office. All Rights Reserved. The contents of this document are subject to change without notice. Customers are advised to consult with sales representatives before ordering. The information, such as descriptions of function and application circuit examples, in this document are presented solely for the purpose of reference to show examples of operations and uses of FUJITSU SEMICONDUCTOR device; FUJITSU SEMICONDUCTOR does not warrant proper operation of the device with respect to use based on such information. When you develop equipment incorporating the device based on such information, you must assume any responsibility arising out of such use of the information. FUJITSU SEMICONDUCTOR assumes no liability for any damages whatsoever arising out of the use of the information. Any information in this document, including descriptions of function and schematic diagrams, shall not be construed as license of the use or exercise of any intellectual property right, such as patent right or copyright, or any other right of FUJITSU SEMICONDUCTOR or any third party or does FUJITSU SEMICONDUCTOR warrant non-infringement of any third-party's intellectual property right or other right by using such information. FUJITSU SEMICONDUCTOR assumes no liability for any infringement of the intellectual property rights or other rights of third parties which would result from the use of information contained herein. The products described in this document are designed, developed and manufactured as contemplated for general use, including without limitation, ordinary industrial use, general office use, personal use, and household use, but are not designed, developed and manufactured as contemplated (1) for use accompanying fatal risks or dangers that, unless extremely high safety is secured, could have a serious effect to the public, and could lead directly to death, personal injury, severe physical damage or other loss (i.e., nuclear reaction control in nuclear facility, aircraft flight control, air traffic control, mass transport control, medical life support system, missile launch control in weapon system), or (2) for use requiring extremely high reliability (i.e., submersible repeater and artificial satellite). Please note that FUJITSU SEMICONDUCTOR will not be liable against you and/or any third party for any claims or damages arising in connection with above-mentioned uses of the products. Any semiconductor devices have an inherent chance of failure. You must protect against injury, damage or loss from such failures by incorporating safety design measures into your facility and equipment such as redundancy, fire protection, and prevention of overcurrent levels and other abnormal operating conditions. Exportation/release of any products described in this document may require necessary procedures in accordance with the regulations of the Foreign Exchange and Foreign Trade Control Law of Japan and/or US export control laws. The company names and brand names herein are the trademarks or registered trademarks of their respective owners. Edited: Sales Promotion Department