SLE6636-BDM3

Secure Mobile Solutions Eurochip 66 SLE 6636 SLE 6636E Intelligent 237–Bit EEPROM Counter for > 20000 Units with Security Logic and High Security Authentication Short Product Information August 2003 SLE 6636/36E Short Product Information Revision History: Previous Releases: Page Subjects (changes since last revision) Current Version 2003-08-05 Ref.: SPI_SLE6636_0803.doc Important: Further information is confidential and on request. Please contact: Infineon Technologies AG in Munich, Germany, Secure Mobile Solutions, Tel +49 (0)89 / 234-80000 Fax +49 (0)89 / 234-81000 E-Mail: security.chipcard.ics@infineon.com Published by Infineon Technologies AG, SMS Applications Group St.-Martin-Strasse, D-81541 München © Infineon Technologies AG 2003 All Rights Reserved. To our valued customers We constantly strive to improve the quality of all our products and documentation. We have spent an exceptional amount of time to ensure that this document is correct. However, we realise that we may have missed a few things. If you find any information that is missing or appears in error, please use the contact section above to inform us. We appreciate your assistance in making this a better document. Attention please! The information herein is given to describe certain components and shall not be considered as warranted characteristics. Terms of delivery and rights to technical change reserved. We hereby disclaim any and all warranties, including but not limited to warranties of non-infringement, regarding circuits, descriptions and charts stated herein. Infineon Technologies is an approved CECC manufacturer. Information For further information on technology, delivery terms and conditions and prices please contact your nearest Infineon Technologies Office in Germany or our Infineon Technologies Representatives world-wide (see address list). Warnings Due to technical requirements components may contain dangerous substances. For information on the types in question please contact your nearest Infineon Technologies Office. Infineon Technologies components may only be used in life-support devices or systems with the express written approval of Infineon Technologies, if a failure of such components can reasonably be expected to cause the failure of that life-support device or system, or to affect the safety or effectiveness of that device or system. Life support devices or systems are intended to be implanted in the human body, or to support and/or maintain and sustain and/or protect human life. If they fail, it is reasonable to assume that the health of the user or other persons may be endangered. Eurochip 66 Intelligent 237-Bit EEPROM Counter for > 20000 Units with Security Logic and High Security Authentication Features • • Member of Eurochip Family with focus on state of the art security features 221 bit EEPROM and 16 bit ROM 104 bit user memory M3 – 64 bit Identification Area consisting of • 16 bit Manufacturer Code for unique identification of application • SLE 6636: 8 bit Manufacturer data, card issuer dependent (ROM) 40 bit for personalization data of card issuer (PROM) • SLE 6636E: 48 bit for personalization data of card issuer (PROM) – 40 bit Counter Area including 1 bit for personalization (PROM/EEPROM) 133 bit additional memory for advanced features – 4 bit Counter Backup (anti-tearing flags) – 1 bit initiation flag for Authentication Key 2 – 16 bit Data Area 1 for free user access – 48 bit Authentication Key 1 – either 48 bit Data Area 2 for user defined data or 48 bit Authentication Key 2 – 16 bit Data Area 3 for free user access Counter with up to 33352 count units – Five stage abacus counter – Due to testing purposes a maximum of 21064 count units is guaranteed Counter tearing protection fully compatible with Eurochip Family – Backup feature activated at choice by the terminal Note: Counter tearing protection may be disabled permanently during the manufacturing phase on customer demand (Backup bits always „1“) High security authentication unit Individual card authentication based on Extended Authentication mode of Eurochip 2 – Individual secret Authentication Key 1 – Optional individual secret Authentication Key 2 – Random number as challenge – Calculation of up to 16 bit response – Optional Response calculation with Cipher Block Chaining – Certification of the counter value – Calculation of a 16 bit response within 30 ms at a clock frequency of 100 kHz Transport Code protection for delivery • • • • Short Product Information 3/7 2003-08-05 Eurochip 66 Features (cont’d) • Chip circuitry and chip layout optimised for high security against physical and electrical signal analysis Advanced 1.2 µm CMOS-technology optimised for security layout • • • • • EEPROM-cells protected by shield Secure wiring for all security relevant signals Shielding of deeper layers via metal Sensory and logical security functions No isolation on backside necessary Sophisticated electrical characteristics • • • • • • • • Ambient temperature –40 … +80°C Supply voltage 5 V ± 10 % (Class A) Supply current < 1 mA (typical 400 µA) EEPROM programming time 5 ms ESD protection typical 4,000 V Endurance minimum 100,000 write/erase cycles / bit1) Data retention for minimum of 30 years1) Contact configuration and Answer-to-Reset (synchronous transmission) in accordance to standard ISO/IEC 7816 1 Ordering and Packaging information Table 1 Type SLE 6636 M3 SLE 6636 C SLE 6636-BD M3 SLE 6636-BD C SLE 6636E M3 SLE 6636E C SLE 6636E-BD M3 SLE 6636E-BD C Ordering Information Package2) M3 C M3 C M3 C M3 C Counter tearing Voltage Range Access of 3rd byte protection Enabled (on) 5 V ± 10 % Disabled (off) Enabled (on) 5 V ± 10 % Disabled (off) Data of 3rd byte are programmed by Infineon exclusively Data of 3rd byte are programmed by the card manufacturer at personalization 1) 2) Values are temperature dependent Available as a wire-bonded module (M3) for embedding in plastic cards or as a die (C) for customer packaging Short Product Information 4/7 2003-08-05 Eurochip 66 Pin Description VCC RST CLK C1 C2 C3 C5 C6 C7 GND N.C. I/O Figure 1 Pin Configuration Wire-bonded Module (top view) C LK R ST I /O S LE 6636 SLE 6636E VCC G ND Figure 2 Table 2 Pad Configuration Die Pin Definitions and Functions Symbol VCC RST CLK GND N.C. I/O Function Supply voltage Control input (Reset Signal) Clock input Ground Not connected Bi-directional data line (open drain) Card Contact C1 C2 C3 C5 C6 C7 Short Product Information 5/7 2003-08-05 Eurochip 66 2 General Description SLE 6636/36E is designed for applications in prepaid telephone cards. The chip consists of an EEPROM memory of 221 bit, a ROM of 16 or 24 bits respectively, a control/security unit and a special computing unit for chip authentication. Programming Unit Authentication Unit Extended Authentication Mode Memory Unit Data Areas (PROM) Counter (PROM / EEPROM) SLE 6636 Backup Unit SLE 6636E Identification Area 48 bit blockable PROM 16 bit Manufacturer Code Address Unit Authentication Key 1 (PROM) optional Authentication Key 2 (PROM) Identification Area 40 bit blockable PROM 8 bit Manufacturer Data 16 bit Manufacturer Code Control Unit (Security Interface) CLK I/O RST GND VCC Figure 3 • Block Diagram Memory Unit Manufacturer Code (16-Bit Code) and Manufacturer Data (3rd Byte) for unique coding of an application. For SLE 6636E its recommended to use the 3rd byte for administration purpose to uniquely identify the application by the 16-bit manufacturer code and the 3rd byte; — Identification Data (e.g. serial number, expiry date); — Counter; — Data Areas. — • • Address Unit Setting of the address counter is synchronously with the CLK. Programming Unit The programming voltage for the EEPROM/PROM is generated internally. Short Product Information 6/7 2003-08-05 Eurochip 66 • Backup Unit Tearing a card out of a reader is indicated optionally. Note: The product can be delivered with this feature permanently disabled in manufacturing phase (Backup bits always „1“) Authentication Unit The secret algorithm offers a challenge & response procedure for individual card authentication based on the Extended Authentication Mode of Eurochip 2; the optional use of Cipher Block Chaining allows the certification of a counter decreasing procedure. Security Interface Ensures a minimum and a maximum frequency and proper logical voltage levels controlled by sensors. • • 3 Migration SLE 6636/36E is a Member of Infineon’s Telecom ICs family. Sophisticated technology IMEM ratio technology offers sophisticated security features compared to NMOS technology. Due to low power consumption SLE 6636/36E is suited best for line-powered phones. Functional compatibility Identification and Counter fully functional compatible with existing members of Eurochip Family and SLE 4406S/06SE products for easy upgrade to higher security levels. Authentication fully compatible with Extended Authentication Mode of Eurochip 2. Security by authentication Use of authentication is optional and controlled by the terminal. This allows smooth upgrade of the terminals with a Security Access Module (SAM). Short Product Information 7/7 2003-08-05