EM4056资料

EM MICROELECTRONIC - MARIN SA EM4056 2KBIT Read/Write with ANTICOLLISION Contactless Identification Device Description The EM4056 is a CMOS integrated circuit intended for use in contactless Read/Write transponders. The user’s configurable 2 kbits EEPROM memory contained in the chip is organised in 125 words of 16 bits, each word can be irreversibly protected against reading or/and writing attempts. The user can define a password and protect part or all of the memory. Serial and identification numbers are laser programmed during IC manufacturing. A reserved application numbering may be made available and customer specific on request. The EM4056 transmits its data towards the reader by amplitude modulation of the magnetic field and receives the commands from the reader in a similar way. Simple set of commands allow the dialogue between the EM4056 and the reader. Read and write commands access directly to an address of memory. The EM4056 has a built-in anticollision protocol which allows an unlimited number of transponders in the reader field to dialogue simultaneously. The transmission antenna is the only external element required, all the other elements are integrated on chip. Features • • • 2 kBits EEPROM organized in 125 words of 16 bits 3 words of 16 Bits Laser ROM for application number and serial number Programmable (OTP) Read and/or Write Protection on every word Programmable PIN coverage of the memory (0, 25, 50, 75 or 100 %) • Power check for EEPROM Write operation • Reader Talk First communication protocol • Data transmission performed by Amplitude Modulation (ASK) and Biphase (CDP) coding • Data rate 2 KBauds (Bit Period = 64 periods of carrier frequency) • 100 to 150kHz carrier frequency • Long range Read/Write operations • Block check of data transmission (CRC) • Anticollision protocol based on unique ID number(unlimited number of tags) • PIN Code identification linked with counter of false attempts • On chip arithmetic operation (addition, comparison of secret and non secret data, etc.) • 340pF ± 3% on chip Resonant Capacitor • No external supply buffer capacitance • On chip Rectifier and Voltage Limiter Applications • Ticketing • Hands free Access control • Prothesis identification • Prepayment devices • Manufacturing automation with portable database • Industrial logistics • Typical Operating Configuration C2LC1EM4056Typical value for inductance L is 4.78mH at fO = 125 KHz Fig. 1 Copyright © 2005, EM Microelectronic-Marin SA 1 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 AnalogCircuitCLKSerial Output Block Diagram Logic CircuitEEPROMPower SupplyAddressingMemoryLaser ROM3x16 bitAntenna(Coil)Safety(incl. PIN Code)125kHz EM couplingModulatorAdderWrite/ReadProtection (OTP)AnticollisionDemodulator125 x 16 bitEEPROMSerial Input Fig. 2 System Principle Reader 125kHz EM coupling EM4056Command Mode Reader Oscillator Reader Coil Modulator RS232 Serial Interface Decoder Demodulator ReaderCoil Transponder Coil Answer Mode Transponder Coil Reader Coil Fig. 3 Copyright © 2005, EM Microelectronic-Marin SA 2 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056Handling Procedures Absolute Maximum Ratings This device has built-in protection against high static voltages or electric fields; however, anti-static precautions Parameter Symbol Min. Max. UnitsVoltage on Power VDD -0.3 6.0 V must be taken as for any other CMOS component. Unless otherwise specified, proper operation can only occur when Supply pads all terminal voltages are kept within the voltage range. Voltage on other pads VPAD VSS - 0.3 VDD+ 0.3V Unused inputs must always be tied to a defined logic Max. AC peak current ICOIL - 30 + 30 mApvoltage level. induced on COIL1 and COIL2 Storage temperature TSTORE -55 +125 oC TOP -40 +85 oC Operating Conditions Operating temperature Parameter Symbol Min Max UnitsVCOIL ICOIL fCOIL TOP (Note 1)Vpp mAp -10 +10 100 150 kHz -40 +85 °C Electrostatic discharge VESD 1000 V Max. AC Voltage on COIL max. to MIL-STS-883C Max. AC coil current method 3015 Stresses above these listed maximum ratings may cause permanent damages to the device. Exposure beyond specified operating conditions may affect device reliability or cause malfunction. Carrier frequency Operating temperature Note 1: Defined by forcing 10mA on Coil1-Coil2 Electrical Characteristics Unless otherwise specified : VDD = 4.0 V, VSS = 0 V, TOP = 25°C, VCOIL = 4.5 Vpp, fCOIL = 125 KHz Sine wave Parameter Symbol Conditions Min Typ Max Unit (Note1) VPOS-REG Supply voltage (not regulated) V VDD VPOS-REG = max (note 1) Supply voltage (regulated) 3.4 4.3 V Min. EEPROM Read voltage Min. EEPROM Write voltage EEPROM Read current EEPROM Write current Power check EEPROM write current EEPROM pwr check threshold voltage EEPROM data endurance EEPROM retention (note 3) Voltage drop VCOIL- VSS on modulator Resonance capacitor POR voltage (high) MONOFLOP delay VRD VWR IRD IWR IPWCHK VPWCHK NCY TRET VON CCOIL VPRH TMONO V Read mode (note 2) 2.5 Write mode Read mode Write mode VDD = 4.0 V 2.5 19 60 70 25 80 95 V µA µA µA 2.52 2.75 3.10 V Erase all / Write all TOP = 55oC after 105 cycles ICOIL = 100 µA ICOIL = 5 mA VDD rising cycle105 10 year 0.50 V 2.50 V 2.0 2.6 V 330 340 350 pF Min. voltage of clock extractor 1 VCLK1min (note 4) Min. voltage of clock extractor 2 VCLK2min (note 5) 25 50 85 µs Vcoil1-coil2 (min for extraction) 4.5 Vpp Vcoil1-coil2 (min for extraction) 1.0 Vpp Note 4: Uplink Note 5: downlink Note 1: Max. supply voltage (not regulated) is defined by forcing a DC current 10 mAp in pins COIL1-COIL2 Note 2: The circuit is not functional under low level POR voltage Note 3: Based on 1000 hours measurement at 150oC Copyright © 2005, EM Microelectronic-Marin SA 3 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 Timing Characteristics Parameter Symbol Conditions Typ Units RF periods Modulation duration ON OFF ON Emission Bit Period Tb0 Bit 0 26 8 Tb1 Bit 1 36 8 Tab Start bit 8 16 8 Tbit RF periods Reception Bit Period 64 Tbitarb RF periods Reception Bit Period Arbitration 32 Select processing time Read processing time Write processing time Arb1 processing time Arb2 processing time Arbitration format duration Read Rom format duration Select format duration Prot format duration Read format duration Write format duration Comp format duration Login format duration EEPROM Write duration Tsp Trp Twp Ta1p Ta2p Tarb Tro Ts Tp Tr Tw Tc Tl Tee RF periods 190 RF periods 126 RF periods 3134 RF periods 62 RF periods 10 ms 115 24.5 19.1 32.2 20.3 36.6 16.6 35.1 VDD = 3V 20.0 Functional Description General The EM4056 has a read enable bit (RdEn) realised with a flip-flop cell. If the RdEn bit is set to « 0 », the transponder is always allowed to answer otherwise it answers only on special commands. At power on, the default value of the RdEn bit is 0. Therefore, after switching the field on, the RdEn bit of all known tags may be set by the reader in order to separate them in two groups. The block check sequence uses a 8 bits CRC which is the same polynom for all CRC blocks. In addition, the CRC block from the EM4056 to the reader is sent in the format of the BitVal frame (see arbitration mode) to increase the error detection rate in the reader. Memory organisation Address Bit Bit 0 is defined as the first bit output Bit 17 1 0 0000000 LASER ROM (3 * 18) 0000010 EEPROM (123 * 18) Read Prot Write Prot 1111110 Configuration Word 1111111 PIN Word Config Word definition + Laser Rom area definition The Read Protected and the Write Protected bit are OTP bit. Once written to one, it is definitively locked. No possibility to erase them to zero. Fig.4 Copyright © 2005, EM Microelectronic-Marin SA 4 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 ROM organisation Address Datas Wp Rp bit17 bit2bit1 bit0 0000000 B15 B01 0 0000001 B31 B161 0 0000010 L7 L0 C7 C01 0 B31-B0 unique code number. L7-L0 8-bit customer ID, standard version = 65hex, 101dec. C7 – C0 CRC calculated on bits B31 to B0 and L7 to L0. (CRC block diagram see figure 4). Note : EM4056 with different customer ID will also have a different unique code number. Commands structure Command Code ReadRom MSB 0010 LSB SelToggle 0100 SelTag 0101 DeselTag 0110 Prot 1000 Read 1010 Write 1100 Add 1101 Comp 1110 Start Arbitration 0001 Continue if “0” 00 Continue if “1” 11 Abort Arbitration 01 or 10 CRC Block Diagram 7MSBX765X54X4321X10LSBX0=1Data InputExclusive ORX Shift RegisterCRC Generating polynomial = X7+X5+X4+X+1 Fig. 5 In uplink the CRC is calculated on all bits of the command (startbit excluded), MSB first. In dowlink the CRC is calculated on all bits of the answer, first bit sent by the chip first. Copyright © 2005, EM Microelectronic-Marin SA 5 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 ReadRom A ReadRomEn command enables only transponders in the field with RdEn bit set to « 0 » to answer. With this command, the address of a single new tag entered in the field can be detected because all known transponders are not allowed to answer if they are deactivated by the RdEn bit (RdEn=1). If more than one transponder answer a CRC error will be detected and it becomes necessary to perform an arbitration to find all new transponder addresses. The command is faster than a full arbitration cycle for new tags. The ReadRomEn command frame consists of three blocks and has a constant length of 13 bits. The Start bit allows the transponder to synchronise to the new command frame. After the Start bit, the frame contains four bits for the Command. A CRC block of 8 bits is calculated over the Command and appended to the end. The transponder frame has a length of 40 bits and starts with the 32 bits ROM block. A CRC block of 8 bits is calculated over the transponder address (ROM) and appended to the end. 1 bit 4 bits 8 bits MSB X8 Reader Start ReadRom CRC 32 bits 8 bits MSB X8 Transponder tsp ROM CRC Fig. 6 SelToggle A SelToggle command addresses a transponder and toggles the RdEn bit (0→1 or 1→0). The transponder returns a frame with the changed value of RdEn bit followed by a CRC. The SelToggle command frame consists of four blocks and has a constant length of 45 bits. The Start bit allows the transponder to synchronise to the new command frame. After the Start bit the frame contains four bits for the Command. Next to the Command, a sequence of 32 bits follows with the transponder address. A CRC block of 8 bits is calculated over the Command and the transponder address and appended to the end. The transponder frame has a length of 10 bits and starts with the RdEn bit and the \"not RdEn\" bit. A CRC block of 8 bits is calculated over the RdEn and the \"not RdEn\" and appended to the end. 1 bit 4 bits 32 bits 8 bits MSB MSB X8 Reader Start SelToggle ROM CRC 2 bits 8 bits X8 Transponder tsp RdEn nRdEn CRC Fig. 7 SelTag The SelTag command address a transponder with its 32 bit address (ROM) and set the flag Select to 1. After this command, the selected transponder can answer to commands : Read, Write, Prot, Add, Comp and Login. 1 bit 4 bits 32 bits 8 bits MSB MSB X8 Reader Start SelTag ROM CRC 2 bits 8 bits X8 Transponder tsp Sel nSel CRC Fig. 8 Copyright © 2005, EM Microelectronic-Marin SA 6 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 DeselTag The DeselTag command address a transponder with its 32 bit address (ROM) and reset the flag Select to 0. 1 bit 4 bits 32 bits 8 bits MSB MSB X8 Reader Start DeselTag ROM CRC 2 bits 8 bits X8 Transponder tsp Sel nSel CRC Fig. 9 Prot Prot command for writing the 2 (OTP) protection bit (read and write) at the specified address. 1 bit 4 bits 8 bits 2 bits 8 bits MSB MSB MSB X8 Reader Start Prot Address Wp/Rp CRC 2 bits 8 bits X8 Transponder twp WOk nWOk CRC Fig. 10 Wp=1, the specified address is protected against writing. Rp=1, the specified address is protected against reading. WOk=1, the protection bit has been successfully written to one. Read Read command to get a 16-bit word located at the specified address. If the address is read protected, the circuit transmits a 65535 value. 1 bit 4 bits 8 bits 8 bits MSB MSB X8 Reader Start Read Address CRC 16 bits 3 bits 8 bits MSB X8 Transponder trpDatas Prot CRC Prot = (Wp / Rp / Suc) Fig. 11 Datas 12345 dec 65535 dec 65535 dec 65535 dec Rp 0 0 1 0 Suc 0 0 x 1 Definition Data = 12345 Data = 65535 Read protected Read protected by PIN Wp=1, the specified address is protected against writing. Rp=1, the specified address is protected against reading. Suc=1, the specified address is protected by the PIN against reading. Copyright © 2005, EM Microelectronic-Marin SA 7 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM40568 bits X8 CRC 2 bits twpWOk nWOk Write Write command for 16 bits of data at the specified address. 1 bit 4 bits 8 bits 16 bits MSB MSB MSB Reader Start Write Address Datas Transponder 8 bits X8 CRC Fig. 12 WOk=1, the write operation has been successfully executed. When a word is written at the address (Adr 126), where the configuration is located this command is restricted to write the uppermost data (Dat_15 à Dat_4), the lower address (Dat_3 to Dat_0) being reserved for safeguarding the PIN counter. The data at the address of the configuration are: 15 0 Z_Suc[2:0] M_Suc No_Ant Sec Conf[2:0] NUNUNUAlm Pin[2:0] Fig. 13 where : • M_suc : selects a internal mode for which no reading nor writing can extract or engrave valid data into the area of the memory presently protected by the PIN code. M_suc=1, area of memory is protected by PIN. • Z_suc[2 :0] : determines the address area which is protected by the PIN code. (0% [000], 25%[100], 50%[101], 75 %[110] or 100%[111]). Z_suc[2:0] Area protected Addresses protected 000 00 % None, incl. PIN 100 25 % Word 127 – Word 96 101 50 % Word 95 – Word 64 110 75 % Word 63 – Word 32 111 100 % Word 31 – Word 0 • No_Ant : selects the bit \"Egal_ROM\" and disables the anticollision mode. No_Ant=1, no anticollision, the tag is always selected (Sel=1). • Sec=1, enables the counter of false attempts for the password (PIN). Sec=0, counter is disabled. • Conf[2 :0] : represents the maximum number of attempts for finding a valid PIN before definitive lock of the card for writing. • Pin[2 :0] : represents the number of remaining attempts for finding the correct PIN. • Alm : alarm bit indicates a permanent lock of the card against write attempts. This bit is activated as soon as the number of PIN erroneous introduction is surpassed. Copyright © 2005, EM Microelectronic-Marin SA 8 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 Add Add command to add one 16-bit data word to another 16-bit data word pointed by the specified address, this command writes the sum at the specified address. It is possible to add a value to an already protected memory location that has been protected against reading, but not to a memory location that has been protected against writing attempts. 1 bit 4 bits 8 bits 16 bits 8 bits MSB MSB MSB X8 Reader Start Add Address Datas CRC 2 bits 8 bits X8 Transponder twpWOk nWOk CRC Fig. 14 Comp Compares a 16 bits data word with another word pointed by the specified address. It is possible to perform a comparison with a value pointed by a read protected address. But it is impossible to compare a value with another one in the opaque area without entering the PIN. In the case of PIN violation, the result of the comparison is always false. Ega=1, comparison successful. 1 bit 4 bits 8 bits 16 bits 8 bits MSB MSB MSB X8 Reader Start Comp Address Datas CRC 2 bits 8 bits X8 Transponder trp Ega nEga CRC Fig. 15 Login Compares a 16 bit data word with the PIN word at the address 127. When a PIN comparison is made (Adr 127) and the identity is established, a write operation occurs in the EEPROM, PIN = CONF , the success bit is released (SUC = 0), the PIN counter is decremented (PIN = PIN - 1) and the corresponding new value is written in the EEPROM. After n erroneous attempts (PIN=0), the ALM bit is set (ALM = 1), and written in the EEPROM. Since that moment the entire memory is irreversibly locked. The unprotected data words (Rp=0) remain accessible for reading the information they are containing. 1 bit 4 bits 16 bits 8 bits MSB LSB MSB LSBX8 1 Reader Start Login Datas CRC 4 bits 8 bits X8 1Transponder twpEga nEga WOk nWOk CRC Fig. 16 Ega=1, password ok. Wok=1, writing operation successful. Copyright © 2005, EM Microelectronic-Marin SA 9 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 Arbitration commands The arbitration mode is a sophisticated command avoiding collisions among transponders. The arbitration method is based on the method of multiprocessor bus arbitration. This feature allows the identification of a transponder out of a group, even if they entered the electromagnetic field at the same time. At each arbitration, the reader detects one address of a new transponder. The arbitration session starts with a special StartArbitration command. If the RdEn bit of the transponder is « 0 », then the transponder belongs to the active group. The arbitration commands will only act on the transponders of the active group. StartArbitration After the Start bit, the reader sends a command field which indicates the beginning of an arbitration cycle. An 8 bits CRC block calculated over the StartArbitration command completes this information. The transponder returns the first BitVal frame corresponding to the LSB of its 32 bits addresses. Start of arbitration 1 bit 4 bits 8 bits 1 bit 2 bits MSB MSB MSB Start_Arbit CRC Start Continue 6 bits Reader Start Bit0 Bit0 X X Bit1 Bit1 Transponder ta1pLSB ROM ta2p Fig. 17 BitVal Frame The BitVal frame consists of 6 bits. If the Nth bit of its address is logic « 0 », the transponder sends two « 0 » at the position Bit0. If the Nth bit of its address is logic « 1 », the transponder sends two « 0 » at the positions Bit1. The bit repetition increases the transmission reliability. The response value of the different transponders is coded with the time position of the answer. Therefore no answer conflicts are generated. Note: Reception Bit Period is 32 RFclocks for all the arbitration (BitVal frame and CRC). Bit0 Bit0 X X Bit1 Bit1 BitVal frame Å 32 Rf period Æ BitVal = 0 0 0 X X X X BitVal = 1 X X X X 0 0 Fig. 18 Copyright © 2005, EM Microelectronic-Marin SA 10 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056 Continue command After receiving the BitVal frame from the different transponders in the field the reader decides whether the tags with « 0 » or « 1 » should continue the arbitration process and communicates this with the Continue frame. The transponders whose last BitVal was not identical with the confirmation in the Continue frame stop the arbitration process and wait for a new command. Arbitration in progress 1 bit 2 bits 1 bit2 bits MSB MSB Reader Start Continue StartContinue 6 bits 6 bits Bit0 Bit0 X X Bit1 Bit1 Bit0 Bit0 X X Bit1 Bit1 Transponder ta1p nth BitVal ta2p ta1p n+1th BitVal Fig. 19 When the Continue frame of the 32nd bit is processed, only one transponder is left. This new identified tag sets the RdEn bit to 1 and belongs no longer to the active group. The arbitration cycle is completed by a transponder frame for selective commands (RdEn,CRC). The CRC is calculated like a transponder frame for general commands. This means the CRC is calculated over ROM and RdEn of the transponder in order to increase the reliability of the arbitration. End of arbitration 1 bit 2 bits 1 bit2 bits MSB MSB Start Continue StartContinue Reader 6 bits 8 bits Bit0 Bit0 X X Bit1 Bit1 MSB thTransponder ta1p 32 BitVal ta2p ta1p CRC Fig. 20 To identify the address of a transponder, it takes 115 ms (including overhead as mentioned before). That makes it possible to detect about 8.7 new transponders per second, independent of the number of transponders in the electromagnetic field. Copyright © 2005, EM Microelectronic-Marin SA 11 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056Read ROM Example of Arbitration protocol * NoCRC error ?YesReset flagRead next bit(from LSB to MSB)Yes0 and 1 ?NoSet flagYes0 ?NoChosen bit: 0Chosen bit: 0Chosen bit: 1NoMSB ?YesChosen bit: 1NoFlag set ?YesAll tags are identified *patented by Biel School of Negineering, MicroLab I3S Fig. 21 Copyright © 2005, EM Microelectronic-Marin SA 12 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056Pad Location Pad Assignment Pin Name Description 1 C1 coil connection 2 3 5 7 TEST_CLK test pad with pull down VPOS unregulated positive supply 6169726075434 VDD positive supply TEST_OUT test pad output TEST test pad with pull down 1955317516732185076 VSS negative supply 8 C2 coil connection EM405681409151666525Y2159XC1, C2 pad size : 200 X 600Other pads size : 100 X 100All dimensions in µm Fig. 22 Package Information CID PackageFRONT VIEWPCB PackageYZJKSYMBOLABDeFgJKRMIN8.23.85.80.381.250.30.420.1150.4TYP8.54.06.00.51.30.40.440.1270.5MAX8.84.26.20.621.350.50.460.1390.6TOP VIEWBXDMARKINGAREAAReC2Fg Dimensions are in mmSYMBOLXYZC2MINC1TYP8.04.0MAXC1F1.0Dimensions are in mmFig. 23 Fig. 24 Copyright © 2005, EM Microelectronic-Marin SA 13 www.emmicroelectronic.com 元器件交易网www.cecb2b.com

EM4056Bit coding Bi-phase Bi-phase Bi-phase Bi-phase Cycle/ bit 64 64 64 64 Package / Die Form Unsawn wafer, 11mils thickness Die in waffle pack, 11mils thickness CID package, 2 pins (length = 2.5mm) PCB package, 2 pins With gold bumps No bumps Bulk Bulk Ordering Information Part Number EM4056B6WW11E EM4056B6WP11 EM4056B6CI2LC EM4056B6CB2RC Delivery Form / Bumping For other packages, please contact EM Microelectronic-Marin SA Product Support Check our Web Site under Products/RF Identification section. Questions can be sent to cid@emmicroelectronic. com EM Microelectronic-Marin SA (EM) makes no warranty for the use of its products, other than those expressly contained in the Company's standard warranty which is detailed in EM's General Terms of Sale located on the Company's web site. EM assumes no responsibility for any errors which may appear in this document, reserves the right to change devices or specifications detailed herein at any time without notice, and does not make any commitment to update the information contained herein. No licenses to patents or other intellectual property of EM are granted in connection with the sale of EM products, expressly or by implications. EM's products are not authorized for use as components in life support devices or systems. © EM Microelectronic-Marin SA, 04/05, Rev. E Copyright © 2005, EM Microelectronic-Marin SA 14 www.emmicroelectronic.com