GL-S MirrorBit® Eclipse™ Flash Non-Volatile Memory Family S29GL01GS S29GL512S S29GL256S S29GL128S 1 Gbit 512 Mbit 256 Mbit 128 Mbit (128 Mbyte) (64 Mbyte) (32 Mbyte) (16 Mbyte) GL-S MirrorBit® Family Cover Sheet CMOS 3.0 Volt Core with Versatile I/O Data Sheet Notice to Readers: This document states the current technical specifications regarding the Spansion product(s) described herein. Each product described herein may be designated as Advance Information, Preliminary, or Full Production. See Notice On Data Sheet Designations for definitions. Publication Number S29GL_128S_01GS_00 Revision 07 Issue Date December 21, 2012 D at a S hee t Notice On Data Sheet Designations Spansion Inc. issues data sheets with Advance Information or Preliminary designations to advise readers of product information or intended specifications throughout the product life cycle, including development, qualification, initial production, and full production. In all cases, however, readers are encouraged to verify that they have the latest information before finalizing their design. The following descriptions of Spansion data sheet designations are presented here to highlight their presence and definitions. Advance Information The Advance Information designation indicates that Spansion Inc. is developing one or more specific products, but has not committed any design to production. Information presented in a document with this designation is likely to change, and in some cases, development on the product may discontinue. Spansion Inc. therefore places the following conditions upon Advance Information content: “This document contains information on one or more products under development at Spansion Inc. The information is intended to help you evaluate this product. Do not design in this product without contacting the factory. Spansion Inc. reserves the right to change or discontinue work on this proposed product without notice.” Preliminary The Preliminary designation indicates that the product development has progressed such that a commitment to production has taken place. This designation covers several aspects of the product life cycle, including product qualification, initial production, and the subsequent phases in the manufacturing process that occur before full production is achieved. Changes to the technical specifications presented in a Preliminary document should be expected while keeping these aspects of production under consideration. Spansion places the following conditions upon Preliminary content: “This document states the current technical specifications regarding the Spansion product(s) described herein. The Preliminary status of this document indicates that product qualification has been completed, and that initial production has begun. Due to the phases of the manufacturing process that require maintaining efficiency and quality, this document may be revised by subsequent versions or modifications due to changes in technical specifications.” Combination Some data sheets contain a combination of products with different designations (Advance Information, Preliminary, or Full Production). This type of document distinguishes these products and their designations wherever necessary, typically on the first page, the ordering information page, and pages with the DC Characteristics table and the AC Erase and Program table (in the table notes). The disclaimer on the first page refers the reader to the notice on this page. Full Production (No Designation on Document) When a product has been in production for a period of time such that no changes or only nominal changes are expected, the Preliminary designation is removed from the data sheet. Nominal changes may include those affecting the number of ordering part numbers available, such as the addition or deletion of a speed option, temperature range, package type, or VIO range. Changes may also include those needed to clarify a description or to correct a typographical error or incorrect specification. Spansion Inc. applies the following conditions to documents in this category: “This document states the current technical specifications regarding the Spansion product(s) described herein. Spansion Inc. deems the products to have been in sufficient production volume such that subsequent versions of this document are not expected to change. However, typographical or specification corrections, or modifications to the valid combinations offered may occur.” Questions regarding these document designations may be directed to your local sales office. 2 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 GL-S MirrorBit® Eclipse™ Flash Non-Volatile Memory Family S29GL01GS S29GL512S S29GL256S S29GL128S 1 Gbit 512 Mbit 256 Mbit 128 Mbit (128 Mbyte) (64 Mbyte) (32 Mbyte) (16 Mbyte) CMOS 3.0 Volt Core with Versatile I/O Data Sheet General Description The Spansion® S29GL01G/512/256/128S are MirrorBit Eclipse flash products fabricated on 65 nm process technology. These devices offer a fast page access time as fast as 15 ns with a corresponding random access time as fast as 90 ns. They feature a Write Buffer that allows a maximum of 256 words/512 bytes to be programmed in one operation, resulting in faster effective programming time than standard programming algorithms. This makes these devices ideal for today’s embedded applications that require higher density, better performance and lower power consumption. Distinctive Characteristics 65 nm MirrorBit Eclipse Technology Single supply (VCC) for read / program / erase (2.7V to 3.6V) Versatile I/O Feature – Wide I/O voltage range (VIO): 1.65V to VCC Advanced Sector Protection (ASP) – Volatile and non-volatile protection methods for each sector Separate 1024-byte One Time Program (OTP) array with two lockable regions x16 data bus Common Flash Interface (CFI) parameter table Asynchronous 32-byte Page read Temperature Range – Industrial (-40°C to +85°C) – In-Cabin (-40°C to +105°C) 512-byte Programming Buffer – Programming in Page multiples, up to a maximum of 512 bytes Single word and multiple program on same word options 100,000 erase cycles for any sector typical Sector Erase 20-year data retention typical – Uniform 128-kbyte sectors Suspend and Resume commands for Program and Erase operations Status Register, Data Polling, and Ready/Busy pin methods to determine device status Publication Number S29GL_128S_01GS_00 Packaging Options – – – – 56-pin TSOP 64-ball LAA Fortified BGA, 13 mm x 11 mm 64-ball LAE Fortified BGA, 9 mm x 9 mm 56-ball VBU Fortified BGA, 9 mm x 7 mm Revision 07 Issue Date December 21, 2012 This document states the current technical specifications regarding the Spansion product(s) described herein. Spansion Inc. deems the products to have been in sufficient production volume such that subsequent versions of this document are not expected to change. However, typographical or specification corrections, or modifications to the valid combinations offered may occur. D at a S hee t Performance Summary Maximum Read Access Times Density 128 Mb 256 Mb 512 Mb 1 Gb Random Access Time (tACC) Voltage Range Page Access Time (tPACC) CE# Access Time (tCE) OE# Access Time (tOE) Full VCC= VIO 90 15 90 25 VersatileIO VIO 100 25 100 35 Full VCC= VIO 90 15 90 25 VersatileIO VIO 100 25 100 35 Full VCC= VIO 100 15 100 25 VersatileIO VIO 110 25 110 35 Full VCC= VIO 100 15 100 25 VersatileIO VIO 110 25 110 35 Typical Program and Erase Rates Buffer Programming (512 bytes) 1.5 MB/s Sector Erase (128 kbytes) 477 kB/s Maximum Current Consumption 4 Active Read at 5 MHz, 30 pF 60 mA Program 100 mA Erase 100 mA Standby 100 µA GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table of Contents General Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Distinctive Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Performance Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Software Interface 2. Address Space Maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.1 Flash Memory Array. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.2 Device ID and CFI (ID-CFI) ASO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.3 Status Register ASO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.4 Data Polling Status ASO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.5 Secure Silicon Region ASO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2.6 Sector Protection Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 13 14 15 16 16 17 3. Data Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.1 Device Protection Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.2 Command Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.3 Secure Silicon Region (OTP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.4 Sector Protection Methods. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 18 18 18 19 4. Read Operations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 4.1 Asynchronous Read. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 4.2 Page Mode Read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 5. Embedded Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.1 Embedded Algorithm Controller (EAC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.2 Program and Erase Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.3 Command Set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.4 Status Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.5 Error Types and Clearing Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5.6 Embedded Algorithm Performance Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6. Software Interface Reference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 6.1 Command Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 6.2 Device ID and Common Flash Interface (ID-CFI) ASO Map . . . . . . . . . . . . . . . . . . . . . . . . . 60 25 25 26 27 37 42 46 Hardware Interface 7. Signal Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7.1 Address and Data Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7.2 Input/Output Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7.3 Versatile I/O Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7.4 Ready/Busy# (RY/BY#) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7.5 Hardware Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 65 65 65 66 66 8. Signal Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.1 Interface States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.2 Power-Off with Hardware Data Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.3 Power Conservation Modes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.4 Read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.5 Write. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 67 67 68 68 69 9. Electrical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9.1 Absolute Maximum Ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9.2 Latchup Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9.3 Operating Ranges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9.4 DC Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9.5 Capacitance Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 71 71 71 74 76 10. Timing Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 10.1 Key to Switching Waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 10.2 AC Test Conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 5 D at a 10.3 10.4 6 S hee t Power-On Reset (POR) and Warm Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 AC Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 11. Physical Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11.1 56-Pin TSOP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11.2 64-Ball FBGA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11.3 56-Ball FBGA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12. Special Handling Instructions for FBGA Package. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 13. Ordering Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 14. Other Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14.1 Links to Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14.2 Links to Application Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14.3 Specification Bulletins . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14.4 Contacting Spansion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15. Revision History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 GL-S MirrorBit® Family 91 91 93 96 100 100 100 101 101 S29GL_128S_01GS_00_07 December 21, 2012 Data She et Figures Figure 1.1 Figure 3.1 Figure 5.1 Figure 5.2 Figure 5.3 Figure 5.4 Figure 5.5 Figure 5.6 Figure 9.1 Figure 9.2 Figure 9.3 Figure 9.4 Figure 10.1 Figure 10.2 Figure 10.3 Figure 10.4 Figure 10.5 Figure 10.6 Figure 10.7 Figure 10.8 Figure 10.9 Figure 10.10 Figure 10.11 Figure 10.12 Figure 10.13 Figure 10.14 Figure 10.15 Figure 10.16 Figure 10.17 Figure 10.18 Figure 10.19 Figure 10.20 Figure 11.1 Figure 11.2 Figure 11.3 Figure 11.4 Figure 11.5 Block Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Advanced Sector Protection Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Word Program Operation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Write Buffer Programming Operation with Data Polling Status . . . . . . . . . . . . . . . . . . . . . . . Write Buffer Programming Operation with Status Register . . . . . . . . . . . . . . . . . . . . . . . . . . Sector Erase Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Data# Polling Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Toggle Bit Program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Power-up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Power-down and Voltage Drop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Maximum Negative Overshoot Waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Maximum Positive Overshoot Waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Test Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Input Waveforms and Measurement Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Power-Up Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Hardware Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Back to Back Read (tACC) Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Back to Back Read Operation (tRC)Timing Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Page Read Timing Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Back to Back Write Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Back to Back (CE#VIL) Write Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . Write to Read (tACC) Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Write to Read (tCE) Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Read to Write (CE# VIL) Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Read to Write (CE# Toggle) Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . Program Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Chip/Sector Erase Operation Timing Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Data# Polling Timing Diagram (During Embedded Algorithms) . . . . . . . . . . . . . . . . . . . . . . . Toggle Bit Timing Diagram (During Embedded Algorithms) . . . . . . . . . . . . . . . . . . . . . . . . . DQ2 vs. DQ6 Relationship Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Back to Back (CE#) Write Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . (CE#) Write to Read Operation Timing Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56-Pin Standard TSOP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56-Pin Thin Small Outline Package (TSOP), 14 x 20 mm . . . . . . . . . . . . . . . . . . . . . . . . . . . 64-ball Fortified Ball Grid Array . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . LAE064—64-ball Fortified Ball Grid Array (FBGA), 9 x 9 mm . . . . . . . . . . . . . . . . . . . . . . . . 56-ball Fortified Ball Grid Array . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 10 19 27 29 30 33 39 41 72 72 73 73 77 77 78 79 82 82 82 83 84 84 85 85 86 87 87 88 88 88 89 90 91 92 93 94 96 7 D at a S hee t Tables Table 1.1 Table 2.1 Table 2.2 Table 2.3 Table 2.4 Table 2.5 Table 2.6 Table 3.1 Table 3.2 Table 5.1 Table 5.2 Table 5.3 Table 5.4 Table 5.5 Table 5.6 Table 5.7 Table 5.8 Table 5.9 Table 5.10 Table 5.11 Table 5.12 Table 5.13 Table 5.14 Table 5.15 Table 5.16 Table 5.17 Table 5.18 Table 5.19 Table 5.20 Table 5.21 Table 5.22 Table 5.23 Table 5.24 Table 5.25 Table 5.26 Table 6.1 Table 6.2 Table 6.3 Table 6.4 Table 6.5 Table 6.6 Table 7.1 Table 8.1 Table 9.1 Table 9.2 Table 9.3 Table 9.4 Table 9.5 Table 9.6 Table 9.7 Table 10.1 Table 10.2 Table 10.3 Table 10.4 Table 10.5 Table 10.6 8 S29GL-S Address Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S29GL01GS Sector and Memory Address Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S29GL512S Sector and Memory Address Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S29GL256S Sector and Memory Address Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S29GL128S Sector and Memory Address Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ID-CFI Address Map Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Secure Silicon Region . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Sector Protection States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Lock Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Write Buffer Programming Command Sequence. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Status Register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Data Polling Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Embedded Algorithm Characteristics (-40°C to +85°C) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Embedded Algorithm Characteristics (-40°C to +105°C) . . . . . . . . . . . . . . . . . . . . . . . . . . . . Read Command State Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Read Unlock Command State Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase Suspend State Command Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase Suspend Unlock State Command Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase Suspend - DYB State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase Suspend - Program Command State Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase Suspend - Program Suspend Command State Transistion. . . . . . . . . . . . . . . . . . . . . Program State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Program Unlock State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Program Suspend State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Lock Register State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CFI State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Secure Silicon Sector State Command Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Secure Silicon Sector Unlock State Command Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . Secure Silicon Sector Program State Command Transition . . . . . . . . . . . . . . . . . . . . . . . . . Password Protection Command State Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Non-Volatile Protection Command State Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . PPB Lock Bit Command State Transition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Volatile Sector Protection Command State Transition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . State Transition Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Command Definitions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ID (Autoselect) Address Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CFI Query Identification String. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CFI System Interface String. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CFI Device Geometry Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CFI Primary Vendor-Specific Extended Query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . I/O Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Interface States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Absolute Maximum Ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Power-Up/Power-Down Voltage and Timing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DC Characteristics (-40°C to +85°C) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DC Characteristics (-40°C to +105°C) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Connector Capacitance for FBGA (LAA) Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Connector Capacitance for FBGA (LAE) Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Connector Capacitance for TSOP Package . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Test Specification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Power ON and Reset Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +85°C) . . . . . . . . . . . . . . . . . . . . . . . . . Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +85°C) . . . . . . . . . . . . . Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +105°C) . . . . . . . . . . . . . . . . . . . . . . . . Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +105°C) . . . . . . . . . . . . GL-S MirrorBit® Family 11 13 13 13 14 14 16 21 21 31 38 42 46 47 48 48 48 49 49 49 50 50 51 51 51 52 52 52 52 53 53 54 54 54 55 57 60 61 61 62 63 65 67 71 72 74 75 76 76 76 77 78 80 80 81 81 S29GL_128S_01GS_00_07 December 21, 2012 Data Table 10.7 Table 10.8 Table 10.9 Table 13.1 She et Write Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erase/Program Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Alternate CE# Controlled Write Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . S29GL-S Valid Combinations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 83 86 89 98 9 D at a 1. S hee t Product Overview The GL-S family consists of 128-Mbit to 1Gbit, 3.0V core, Versatile I/O, non-volatile, flash memory devices. These devices have a 16-bit (word) wide data bus and use only word boundary addresses. All read accesses provide 16 bits of data on each bus transfer cycle. All writes take 16 bits of data from each bus transfer cycle. Figure 1.1 Block Diagram DQ15–DQ0 RY/BY# VCC Sector Switches VSS VIO Erase Voltage Generator Input/Output Buffers RESET# WE# WP# State Control Command Register PGM Voltage Generator Chip Enable Output Enable Logic CE# OE# AMax**–A0 Address Latch Timer Data Latch Y-Decoder Y-Gating X-Decoder Cell Matrix STB VCC Detector STB : Note: ** AMAX GL01GS = A25, AMAX GL512S = A24, AMAX GL256S = A23, AMAX GL128S = A22 The GL-S family combines the best features of eXecute In Place (XIP) and Data Storage flash memories. This family has the fast random access of XIP flash along with the high density and fast program speed of Data Storage flash. Read access to any random location takes 90 ns to 120 ns depending on device density and I/O power supply voltage. Each random (initial) access reads an entire 32-byte aligned group of data called a Page. Other words within the same Page may be read by changing only the low order 4 bits of word address. Each access within the same Page takes 15 ns to 30 ns. This is called Page Mode read. Changing any of the higher word address bits will select a different Page and begin a new initial access. All read accesses are asynchronous. 10 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 1.1 S29GL-S Address Map Type Count Addresses Address within Page 16 A3 - A0 Address within Write Buffer 256 A7 - A0 Page 4096 A15 - A4 Write-Buffer-Line 256 A15 - A8 1024 (1 Gb) 512 (512 Mb) Sector 256 (256 Mb) AMAX - A16 128 (128 Mb) The device control logic is subdivided into two parallel operating sections, the Host Interface Controller (HIC) and the Embedded Algorithm Controller (EAC). HIC monitors signal levels on the device inputs and drives outputs as needed to complete read and write data transfers with the host system. HIC delivers data from the currently entered address map on read transfers; places write transfer address and data information into the EAC command memory; notifies the EAC of power transition, hardware reset, and write transfers. The EAC looks in the command memory, after a write transfer, for legal command sequences and performs the related Embedded Algorithms. Changing the non-volatile data in the memory array requires a complex sequence of operations that are called Embedded Algorithms (EA). The algorithms are managed entirely by the device internal EAC. The main algorithms perform programming and erase of the main array data. The host system writes command codes to the flash device address space. The EAC receives the commands, performs all the necessary steps to complete the command, and provides status information during the progress of an EA. The erased state of each memory bit is a logic 1. Programming changes a logic 1 (High) to a logic 0 (Low). Only an Erase operation is able to change a 0 to a 1. An erase operation must be performed on an entire 128-kbyte aligned and length group of data call a Sector. When shipped from Spansion all Sectors are erased. Programming is done via a 512-byte Write Buffer. It is possible to write from 1 to 256 words, anywhere within the Write Buffer before starting a programming operation. Within the flash memory array, each 512-byte aligned group of 512 bytes is called a Line. A programming operation transfers volatile data from the Write Buffer to a non-volatile memory array Line. The operation is called Write Buffer Programming. The Write Buffer is filled with 1’s after reset or the completion of any operation using the Write Buffer. Any locations not written to a 0 by a Write to Buffer command are by default still filled with 1’s. Any 1’s in the Write Buffer do not affect data in the memory array during a programming operation. As each Page of data that was loaded into the Write Buffer is transferred to a memory array Line. Sectors may be individually protected from program and erase operations by the Advanced Sector Protection (ASP) feature set. ASP provides several, hardware and software controlled, volatile and non-volatile, methods to select which sectors are protected from program and erase operations. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 11 D at a S hee t Software Interface 2. Address Space Maps There are several separate address spaces that may appear within the address range of the flash memory device. One address space is visible (entered) at any given time. Flash Memory Array: the main non-volatile memory array used for storage of data that may be randomly accessed by asynchronous read operations. ID/CFI: a memory array used for Spansion factory programmed device characteristics information. This area contains the Device Identification (ID) and Common Flash Interface (CFI) information tables. Secure Silicon Region (SSR): a One Time Programmable (OTP) non-volatile memory array used for Spansion factory programmed permanent data, and customer programmable permanent data. Lock Register: an OTP non-volatile word used to configure the ASP features and lock the SSR. Persistent Protection Bits (PPB): a non-volatile flash memory array with one bit for each Sector. When programmed, each bit protects the related Sector from erasure and programming. PPB Lock: a volatile register bit used to enable or disable programming and erasure of the PPB bits. Password: an OTP non-volatile array used to store a 64-bit password used to enable changing the state of the PPB Lock Bit when using Password Mode sector protection. Dynamic Protection Bits (DYB): a volatile array with one bit for each Sector. When set, each bit protects the related Sector from erasure and programming. Status Register: a volatile register used to display Embedded Algorithm status. Data Polling Status: a volatile register used as an alternate, legacy software compatible, way to display Embedded Algorithm status. The main Flash Memory Array is the primary and default address space but, it may be overlaid by one other address space, at any one time. Each alternate address space is called an Address Space Overlay (ASO). Each ASO replaces (overlays) the entire flash device address range. Any address range not defined by a particular ASO address map, is reserved for future use. All read accesses outside of an ASO address map returns non-valid (undefined) data. The locations will display actively driven data but the meaning of whatever 1’s or 0’s appear are not defined. There are four device operating modes that determine what appears in the flash device address space at any given time: Read Mode Data Polling Mode Status Register (SR) Mode Address Space Overlay (ASO) Mode In Read Mode the entire Flash Memory Array may be directly read by the host system memory controller. The memory device Embedded Algorithm Controller (EAC), puts the device in Read mode during Power-on, after a Hardware Reset, after a Command Reset, or after an Embedded Algorithm (EA) is suspended. Read accesses and command writes are accepted in read mode. A subset of commands are accepted in read mode when an EA is suspended. While in any mode, the Status Register read command may be issued to cause the Status Register ASO to appear at every word address in the device address space. In this Status Register ASO Mode, the device interface waits for a read access and, any write access is ignored. The next read access to the device accesses the content of the status register, exits the Status Register ASO, and returns to the previous (calling) mode in which the Status Register read command was received. In EA mode the EAC is performing an Embedded Algorithm, such as programming or erasing a non-volatile memory array. While in EA mode, none of the main Flash Memory Array is readable because the entire flash device address space is replaced by the Data Polling Status ASO. Data Polling Status will appear at every word location in the device address space. 12 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et While in EA mode, only a Program / Erase suspend command or the Status Register Read command will be accepted. All other commands are ignored. Thus, no other ASO may be entered from the EA mode. When an Embedded Algorithm is suspended, the Data Polling ASO is visible until the device has suspended the EA. When the EA is suspended the Data Polling ASO is exited and Flash Array data is available. The Data Polling ASO is reentered when the suspended EA is resumed, until the EA is again suspended or finished. When an Embedded Algorithm is completed, the Data Polling ASO is exited and the device goes to the previous (calling) mode (from which the Embedded Algorithm was started). In ASO mode, one of the remaining overlay address spaces is entered (overlaid on the main Flash Array address map). Only one ASO may be entered at any one time. Commands to the device affect the currently entered ASO. Only certain commands are valid for each ASO. These are listed in the Table 6.1 on page 57, in each ASO related section of the table. The following ASOs have non-volatile data that may be programmed to change 1’s to 0’s: Secure Silicon Region Lock Register Persistent Protection Bits (PPB) Password Only the PPB ASO has non-volatile data that may be erased to change 0’s to 1’s When a program or erase command is issued while one of the non-volatile ASOs is entered, the EA operates on the ASO. The ASO is not readable while the EA is active. When the EA is completed the ASO remains entered and is again readable. Suspend and Resume commands are ignored during an EA operating on any of these ASOs. 2.1 Flash Memory Array The S29GL-S family has uniform sector architecture with a sector size of 128 kB. Table 2.1 to Table 2.4 shows the sector architecture of the four devices. Table 2.1 S29GL01GS Sector and Memory Address Map Sector Size (kbyte) Sector Count 128 1024 Sector Range Address Range (16-Bit) Notes SA00 0000000h-000FFFFh Sector Starting Address : : – SA1023 3FF0000h-3FFFFFFh Sector Ending Address Table 2.2 S29GL512S Sector and Memory Address Map Sector Size (kbyte) Sector Count 128 512 Sector Range Address Range (16-Bit) Notes SA00 0000000h-000FFFFh Sector Starting Address : : – SA511 1FF0000h-1FFFFFFh Sector Ending Address Table 2.3 S29GL256S Sector and Memory Address Map Sector Size (kbyte) Sector Count 128 256 December 21, 2012 S29GL_128S_01GS_00_07 Sector Range Address Range (16-Bit) Notes SA00 0000000h-000FFFFh Sector Starting Address : : – SA255 0FF0000h-0FFFFFFh Sector Ending Address GL-S MirrorBit® Family 13 D at a S hee t Table 2.4 S29GL128S Sector and Memory Address Map Sector Size (kbyte) 128 Sector Count 128 Sector Range Address Range (16-Bit) Notes SA00 0000000h-000FFFFh Sector Starting Address : : – SA127 07F0000h-07FFFFFh Sector Ending Address Note: These tables have been condensed to show sector related information for an entire device on a single page Sectors and their address ranges that are not explicitly listed (such as SA001-SA510) have sectors starting and ending addresses that form the same pattern as all other sectors of that size. For example, all 128 kB sectors have the pattern XXX0000h-XXXFFFFh. 2.2 Device ID and CFI (ID-CFI) ASO There are two traditional methods for systems to identify the type of flash memory installed in the system. One has traditionally been called Autoselect and is now referred to as Device Identification (ID). The other method is called Common Flash Interface (CFI). For ID, a command is used to enable an address space overlay where up to 16 word locations can be read to get JEDEC manufacturer identification (ID), device ID, and some configuration and protection status information from the flash memory. The system can use the manufacturer and device IDs to select the appropriate driver software to use with the flash device. CFI also uses a command to enable an address space overlay where an extendable table of standard information about how the flash memory is organized and operates can be read. With this method the driver software does not have to be written with the specifics of each possible memory device in mind. Instead the driver software is written in a more general way to handle many different devices but adjusts the driver behavior based on the information in the CFI table. Traditionally these two address spaces have used separate commands and were separate overlays. However, the mapping of these two address spaces are non-overlapping and so can be combined in to a single address space and appear together in a single overlay. Either of the traditional commands used to access (enter) the Autoselect (ID) or CFI overlay will cause the now combined ID-CFI address map to appear. The ID-CFI address map appears within, and overlays the Flash Array data of, the sector selected by the address used in the ID-CFI enter command. While the ID-CFI ASO is entered the content of all other sectors is undefined. The ID-CFI address map starts at location 0 of the selected sector. Locations above the maximum defined address of the ID-CFI ASO to the maximum address of the selected sector have undefined data. The ID-CFI enter commands use the same address and data values used on previous generation memories to access the JEDEC Manufacturer ID (Autoselect) and Common Flash Interface (CFI) information, respectively. Table 2.5 ID-CFI Address Map Overview Word Address Description Read / Write (SA) + 0000h to 000Fh Device ID (traditional Autoselect values) Read Only (SA) + 0010h to 0079h CFI data structure Read Only (SA) + 0080h to FFFFh Undefined Read Only For the complete address map see Table 6.2 on page 60. 14 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 2.2.1 She et Device ID The Joint Electron Device Engineering Council (JEDEC) standard JEP106T defines the manufacturer ID for a compliant memory. Common industry usage defined a method and format for reading the manufacturer ID and a device specific ID from a memory device. The manufacturer and device ID information is primarily intended for programming equipment to automatically match a device with the corresponding programming algorithm. Spansion has added additional fields within this 32-byte address space. The original industry format was structured to work with any memory data bus width e. g. x8, x16, x32. The ID code values are traditionally byte wide but are located at bus width address boundaries such that incrementing the device address inputs will read successive byte, word, or double word locations with the ID codes always located in the least significant byte location of the data bus. Because the device data bus is word wide each code byte is located in the lower half of each word location. The original industry format made the high order byte always 0. Spansion has modified the format to use both bytes in some words of the address space. For the detail description of the Device ID address map see Table 6.2 on page 60. 2.2.2 Common Flash Memory Interface The JEDEC Common Flash Interface (CFI) specification (JESD68.01) defines a standardized data structure that may be read from a flash memory device, which allows vendor-specified software algorithms to be used for entire families of devices. The data structure contains information for system configuration such as various electrical and timing parameters, and special functions supported by the device. Software support can then be device-independent, Device ID-independent, and forward-and-backward-compatible for entire Flash device families. The system can read CFI information at the addresses within the selected sector as shown in Device ID and Common Flash Interface (ID-CFI) ASO Map on page 60. Like the Device ID information, CFI information is structured to work with any memory data bus width e. g. x8, x16, x32. The code values are always byte wide but are located at data bus width address boundaries such that incrementing the device address reads successive byte, word, or double word locations with the codes always located in the least significant byte location of the data bus. Because the data bus is word wide each code byte is located in the lower half of each word location and the high order byte is always 0. For further information, please refer to the Spansion CFI Specification, Version 1.4 (or later), and the JEDEC publications JEP137-A and JESD68.01. Please contact JEDEC (http://www.jedec.org/) for their standards and the Spansion CFI Specification may be found at the Spansion Web site (http://www.spansion.com/Support/TechnicalDocuments/Pages/ApplicationNotes.aspx at the time of this document's publication) or by contacting a local Spansion sales office listed on the web site. 2.3 Status Register ASO The Status Register ASO contains a single word of registered volatile status for Embedded Algorithms. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The Status Register content appears on all word locations. The first read access exits the Status Register ASO (with the rising edge of CE# or OE#) and returns to the address space map in use when the Status Register read command was issued. Write commands will not exit the Status Register ASO state. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 15 D at a 2.4 S hee t Data Polling Status ASO The Data Polling Status ASO contains a single word of volatile memory indicating the progress of an EA. The Data Polling Status ASO is entered immediately following the last write cycle of any command sequence that initiates an EA. Commands that initiate an EA are: Word Program Program Buffer to Flash Chip Erase Sector Erase Erase Resume / Program Resume Program Resume Enhanced Method Blank Check Lock Register Program Password Program PPB Program All PPB Erase The Data Polling Status word appears at all word locations in the device address space. When an EA is completed the Data Polling Status ASO is exited and the device address space returns to the address map mode where the EA was started. 2.5 Secure Silicon Region ASO The Secure Silicon Region (SSR) provides an extra flash memory area that can be programmed once and permanently protected from further changes i. e. it is a One Time Program (OTP) area. The SSR is 1024 bytes in length. It consists of 512 bytes for Factory Locked Secure Silicon Region and 512 bytes for Customer Locked Secure Silicon Region. The sector address supplied during the Secure Silicon Entry command selects the Flash Memory Array sector that is overlaid by the Secure Silicon Region address map. The SSR is overlaid starting at location 0 in the selected sector. Use of the sector 0 address is recommended for future compatibility. While the SSR ASO is entered the content of all other sectors is undefined. Locations above the maximum defined address of the SSR ASO to the maximum address of the selected sector have undefined data. Table 2.6 Secure Silicon Region 16 Word Address Range Content Size (SA) + 0000h to 00FFh Factory Locked Secure Silicon Region 512 bytes (SA) + 0100h to 01FFh Customer Locked Secure Silicon Region 512 bytes (SA) + 0200h to FFFFh Undefined 127 kbytes GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 2.6 2.6.1 She et Sector Protection Control Lock Register ASO The Lock register ASO contains a single word of OTP memory. When the ASO is entered the Lock Register appears at all word locations in the device address space. However, it is recommended to read or program the Lock Register only at location 0 of the device address space for future compatibility. 2.6.2 Persistent Protection Bits (PPB) ASO The PPB ASO contains one bit of a Flash Memory Array for each Sector in the device. When the PPB ASO is entered, the PPB bit for a sector appears in the Least Significant Bit (LSB) of each address in the sector. Reading any address in a sector displays data where the LSB indicates the non-volatile protection status for that sector. However, it is recommended to read or program the PPB only at address 0 of the sector for future compatibility. If the bit is 0 the sector is protected against programming and erase operations. If the bit is 1 the sector is not protected by the PPB. The sector may be protected by other features of ASP. 2.6.3 PPB LOCK ASO The PPB Lock ASO contains a single bit of volatile memory. The bit controls whether the bits in the PPB ASO may be programmed or erased. If the bit is 0 the PPB ASO is protected against programming and erase operations. If the bit is 1 the PPB ASO is not protected. When the PPB Lock ASO is entered the PPB Lock bit appears in the Least Significant Bit (LSB) of each address in the device address space. However, it is recommended to read or program the PPB Lock only at address 0 of the device for future compatibility. 2.6.4 Password ASO The Password ASO contains four words of OTP memory. When the ASO is entered the Password appears starting at address 0 in the device address space. All locations above the forth word are undefined. 2.6.5 Dynamic Protection Bits (DYB) ASO The DYB ASO contains one bit of a volatile memory array for each Sector in the device. When the DYB ASO is entered, the DYB bit for a sector appears in the Least Significant Bit (LSB) of each address in the sector. Reading any address in a sector displays data where the LSB indicates the non-volatile protection status for that sector. However, it is recommended to read, set, or clear the DYB only at address 0 of the sector for future compatibility. If the bit is 0 the sector is protected against programming and erase operations. If the bit is 1 the sector is not protected by the DYB. The sector may be protected by other features of ASP. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 17 D at a 3. S hee t Data Protection The device offers several features to prevent malicious or accidental modification of any sector via hardware means. 3.1 3.1.1 Device Protection Methods Power-Up Write Inhibit RESET#, CE#, WE#, and, OE# are ignored during Power-On Reset (POR). During POR, the device can not be selected, will not accept commands on the rising edge of WE#, and does not drive outputs. The Host Interface Controller (HIC) and Embedded Algorithm Controller (EAC) are reset to their standby states, ready for reading array data, during POR. CE# or OE# must go to VIH before the end of POR (tVCS). At the end of POR the device conditions are: all internal configuration information is loaded, the device is in read mode, the Status Register is at default value, all bits in the DYB ASO are set to un-protect all sectors, the Write Buffer is loaded with all 1’s, the EAC is in the standby state. 3.1.2 Low VCC Write Inhibit When VCC is less than VLKO, the HIC does not accept any write cycles and the EAC resets. This protects data during VCC power-up and power-down. The system must provide the proper signals to the control pins to prevent unintentional writes when VCC is greater than VLKO. 3.2 Command Protection Embedded Algorithms are initiated by writing command sequences into the EAC command memory. The command memory array is not readable by the host system and has no ASO. Each host interface write is a command or part of a command sequence to the device. The EAC examines the address and data in each write transfer to determine if the write is part of a legal command sequence. When a legal command sequence is complete the EAC will initiate the appropriate EA. Writing incorrect address or data values, or writing them in an improper sequence, will generally result in the EAC returning to its Standby state. However, such an improper command sequence may place the device in an unknown state, in which case the system must write the reset command, or possibly provide a hardware reset by driving the RESET# signal Low, to return the EAC to its Standby state, ready for random read. The address provided in each write may contain a bit pattern used to help identify the write as a command to the device. The upper portion of the address may also select the sector address on which the command operation is to be performed. The Sector Address (SA) includes AMAX through A16 flash address bits (system byte address signals amax through a17). A command bit pattern is located in A10 to A0 flash address bits (system byte address signals a11 through a1). The data in each write may be: a bit pattern used to help identify the write as a command, a code that identifies the command operation to be performed, or supply information needed to perform the operation. See Table 6.1 on page 57 for a listing of all commands accepted by the device. 3.3 Secure Silicon Region (OTP) The Secure Silicon Region (SSR) provides an extra flash memory area that can be programmed once and permanently protected from further changes i. e. it is a One Time Program (OTP) area. The SSR is 1024 bytes in length. It consists of 512 bytes for Factory Locked Secure Silicon Region and 512 bytes for Customer Locked Secure Silicon Region. 18 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 3.4 3.4.1 She et Sector Protection Methods Write Protect Signal If WP# = VIL, the lowest or highest address sector is protected from program or erase operations independent of any other ASP configuration. Whether it is the lowest or highest sector depends on the device ordering option (model) selected. If WP# = VIH, the lowest or highest address sector is not protected by the WP# signal but it may be protected by other aspects of ASP configuration. WP# has an internal pull-up; when unconnected, WP# is at VIH. 3.4.2 ASP Advanced Sector Protection (ASP) is a set of independent hardware and software methods used to disable or enable programming or erase operations, individually, in any or all sectors. This section describes the various methods of protecting data stored in the memory array. An overview of these methods is shown in Figure 3.1. Figure 3.1 Advanced Sector Protection Overview Lock Register (One Time Programmable) Password Method Persistent Method (DQ2) (DQ1) 64-bit Password (One Time Protect) 1,2,3 PPB Lock Bit 0 = PPBs Locked 1 = PPBs Unlocked 1. Bit is volatile, and defaults to “1” on reset (to “0” if in Password Mode). 2. Programming to “0” locks all PPBs to their current state. 3. Once programmed to “0”, requires hardware reset to unlock or application of the password. Memory Array Persistent Protection Bit (PPB)5,6 Sector 0 PPB 0 DYB 0 Sector 1 PPB 1 DYB 1 Sector 2 PPB 2 DYB 2 Sector N-2 PPB N-2 DYB N-2 Sector N-1 PPB N-1 DYB N-1 PPB N DYB N Sector N 4 4. N = Highest Address Sector. 5. 0 = Sector Protected, 1 = Sector Unprotected. 6. PPBs programmed individually, but cleared collectively Dynamic Protection Bit (DYB)7,8,9 7. 0 = Sector Protected, 1 = Sector Unprotected. 8. Protect effective only if corresponding PPB is “1” (unprotected). 9. Volatile Bits: defaults to user choice upon power-up (see ordering options). Every main flash array sector has a non-volatile (PPB) and a volatile (DYB) protection bit associated with it. When either bit is 0, the sector is protected from program and erase operations. The PPB bits are protected from program and erase when the PPB Lock bit is 0. There are two methods for managing the state of the PPB Lock bit, Persistent Protection and Password Protection. The Persistent Protection method sets the PPB Lock to 1 during POR or Hardware Reset so that the PPB bits are unprotected by a device reset. There is a command to clear the PPB Lock bit to 0 to protect the PPB bits. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 19 D at a S hee t There is no command in the Persistent Protection method to set the PPB Lock bit therefore the PPB Lock bit will remain at 0 until the next power-off or hardware reset. The Persistent Protection method allows boot code the option of changing sector protection by programming or erasing the PPB, then protecting the PPB from further change for the remainder of normal system operation by clearing the PPB Lock bit. This is sometimes called Boot-code controlled sector protection. The Password method clears the PPB Lock bit to 0 during POR or Hardware Reset to protect the PPB. A 64bit password may be permanently programmed and hidden for the password method. A command can be used to provide a password for comparison with the hidden password. If the password matches the PPB Lock bit is set to 1 to unprotect the PPB. A command can be used to clear the PPB Lock bit to 0. The selection of the PPB Lock management method is made by programming OTP bits in the Lock Register so as to permanently select the method used. The Lock Register also contains OTP bits, for protecting the SSR. The PPB bits are erased so that all main flash array sectors are unprotected when shipped from Spansion. The Secured Silicon Region can be factory protected or left unprotected depending on the ordering option (model) ordered. 3.4.3 PPB Lock The Persistent Protection Bit Lock is a volatile bit for protecting all PPB bits. When cleared to 0, it locks all PPBs and when set to 1, it allows the PPBs to be changed. There is only one PPB Lock Bit per device. The PPB Lock command is used to clear the bit to 0. The PPB Lock Bit must be cleared to 0 only after all the PPBs are configured to the desired settings. In Persistent Protection mode, the PPB Lock is set to 1 during POR or a hardware reset. When cleared, no software command sequence can set the PPB Lock, only another hardware reset or power-up can set the PPB Lock bit. In the Password Protection mode, the PPB Lock is cleared to 0 during POR or a hardware reset. The PPB Lock can only set to 1 by the Password Unlock command sequence. The PPB Lock can be cleared by the PPB Lock Bit Clear command. 3.4.4 Persistent Protection Bits (PPB) The Persistent Protection Bits (PPB) are located in a separate nonvolatile flash array. One of the PPB bits is assigned to each sector. When a PPB is 0 its related sector is protected from program and erase operations. The PPB are programmed individually but must be erased as a group, similar to the way individual words may be programmed in the main array but an entire sector must be erased at the same time. Preprogramming and verification prior to erasure are handled by the EAC. Programming a PPB bit requires the typical word programming time. During a PPB bit programming operation or PPB bit erasing, Data polling Status DQ6 Toggle Bit I will toggle until the operation is complete. Erasing all the PPBs requires typical sector erase time. If the PPB Lock is 0, the PPB Program or erase commands do not execute and time-out without programming or erasing the PPB. The protection state of a PPB for a given sector can be verified by executing a PPB Status Read command when entered in the PPB ASO. 3.4.5 Dynamic Protection Bits (DYB) Dynamic Protection Bits are volatile and unique for each sector and can be individually modified. DYBs only control protection for sectors that have their PPBs erased. By issuing the DYB Set or Clear command sequences, the DYB are set to 0 or cleared to 1, thus placing each sector in the protected or unprotected state respectively, if the PPB for the Sector is 1. This feature allows software to easily protect sectors against inadvertent changes, yet does not prevent the easy removal of protection when changes are needed. The DYB can be set to 0 or cleared to 1 as often as needed. 20 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 3.4.6 She et Sector Protection States Summary Each sector can be in one of the following protection states: Unlocked – The sector is unprotected and protection can be changed by a simple command. The protection state defaults to unprotected after a power cycle or hardware reset. Dynamically Locked – A sector is protected and protection can be changed by a simple command. The protection state is not saved across a power cycle or hardware reset. Persistently Locked – A sector is protected and protection can only be changed if the PPB Lock Bit is set to 1. The protection state is non-volatile and saved across a power cycle or hardware reset. Changing the protection state requires programming or erase of the PPB bits. Table 3.1 Sector Protection States Protection Bit Values Sector State PPB Lock 3.4.7 PPB DYB 1 1 1 Unprotected - PPB and DYB are changeable 1 1 0 Protected - PPB and DYB are changeable 1 0 1 Protected - PPB and DYB are changeable 1 0 0 Protected - PPB and DYB are changeable 0 1 1 Unprotected - PPB not changeable, DYB is changeable 0 1 0 Protected - PPB not changeable, DYB is changeable 0 0 1 Protected - PPB not changeable, DYB is changeable 0 0 0 Protected - PPB not changeable, DYB is changeable Lock Register The Lock Register holds the non-volatile OTP bits for controlling protection of the SSR, and determining the PPB Lock bit management method (protection mode). Table 3.2 Lock Register Bit Default Value 15-9 1 Reserved Name 8 0 Reserved 7 X Reserved 6 1 SSR Region 1 (Customer) Lock Bit 5 1 Reserved 4 1 Reserved 3 1 Reserved 2 1 Password Protection Mode Lock Bit 1 1 Persistent Protection Mode Lock Bit 0 0 SSR Region 0 (Factory) Lock Bit The Secure Silicon Region (SSR) protection bits must be used with caution, as once locked, there is no procedure available for unlocking the protected portion of the Secure Silicon Region and none of the bits in the protected Secure Silicon Region memory space can be modified in any way. Once the Secure Silicon Region area is protected, any further attempts to program in the area will fail with status indicating the area being programmed is protected. The Region 0 Indicator Bit is located in the Lock Register at bit location 0 and Region 1 in bit location 6. As shipped from the factory, all devices default to the Persistent Protection method, with all sectors unprotected, when power is applied. The device programmer or host system can then choose which sector protection method to use. Programming either of the following two, one-time programmable, non-volatile bits, locks the part permanently in that mode: Persistent Protection Mode Lock Bit (DQ1) Password Protection Mode Lock Bit (DQ2) December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 21 D at a S hee t If both lock bits are selected to be programmed at the same time, the operation will abort. Once the Password Mode Lock Bit is programmed, the Persistent Mode Lock Bit is permanently disabled and no changes to the protection scheme are allowed. Similarly, if the Persistent Mode Lock Bit is programmed, the Password Mode is permanently disabled. If the password mode is to be chosen, the password must be programmed prior to setting the corresponding lock register bit. Setting the Password Protection Mode Lock Bit is programmed, a power cycle, hardware reset, or PPB Lock Bit Set command is required to set the PPB Lock bit to 0 to protect the PPB array. The programming time of the Lock Register is the same as the typical word programming time. During a Lock Register programming EA, Data polling Status DQ6 Toggle Bit I will toggle until the programming has completed. The system can also determine the status of the lock register programming by reading the Status Register. See Status Register on page 37 for information on these status bits. The user is not required to program DQ2 or DQ1, and DQ6 or DQ0 bits at the same time. This allows the user to lock the SSR before or after choosing the device protection scheme. When programming the Lock Bits, the Reserved Bits must be 1 (masked). 3.4.8 Persistent Protection Mode The Persistent Protection method sets the PPB Lock to 1 during POR or Hardware Reset so that the PPB bits are unprotected by a device reset. There is a command to clear the PPB Lock bit to 0 to protect the PPB. There is no command in the Persistent Protection method to set the PPB Lock bit to 1 therefore the PPB Lock bit will remain at 0 until the next power-off or hardware reset. 3.4.9 3.4.9.1 Password Protection Mode PPB Password Protection Mode PPB Password Protection Mode allows an even higher level of security than the Persistent Sector Protection Mode, by requiring a 64-bit password for setting the PPB Lock. In addition to this password requirement, after power up and reset, the PPB Lock is cleared to 0 to ensure protection at power-up. Successful execution of the Password Unlock command by entering the entire password sets the PPB Lock to 1, allowing for sector PPB modifications. Password Protection Notes: The Password Program Command is only capable of programming 0’s. The password is all 1’s when shipped from Spansion. It is located in its own memory space and is accessible through the use of the Password Program and Password Read commands. All 64-bit password combinations are valid as a password. Once the Password is programmed and verified, the Password Mode Locking Bit must be set in order to prevent reading or modification of the password. The Password Mode Lock Bit, once programmed, prevents reading the 64-bit password on the data bus and further password programming. All further program and read commands to the password region are disabled (data is read as 1's) and these commands are ignored. There is no means to verify what the password is after the Password Protection Mode Lock Bit is programmed. Password verification is only allowed before selecting the Password Protection mode. The Password Mode Lock Bit is not erasable. The exact password must be entered in order for the unlocking function to occur. The addresses can be loaded in any order but all 4 words are required for a successful match to occur. The Sector Addresses and Word Line Addresses are compared while the password address/data are loaded. If the Sector Adddress don't match than the error will be reported at the end of that write cycle. The status register will return to the ready state with the Program Status Bit set to 1, Program Status Register Bit set to 1, and Write Buffer Abort Status Bit set to 1 indicating a failed programming operation. It is a failure to change the state of the PPB Lock bit because it is still protected by the lack of a valid password. The data polling status will remain active, with DQ7 set to the complement of the DQ7 bit in the last word of the password unlock command, and DQ6 toggling. RY/BY# will remain low. 22 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et The specific address and data are compared after the Program Buffer To Flash command has been given. If they don't match to the internal set value than the status register will return to the ready state with the Program Status Bit set to 1 and Program Status Register Bit set to 1 indicating a failed programming operation. It is a failure to change the state of the PPB Lock bit because it is still protected by the lack of a valid password. The data polling status will remain active, with DQ7 set to the complement of the DQ7 bit in the last word of the password unlock command, and DQ6 toggling. RY/BY# will remain low. The device requires approximately 100 µs for setting the PPB Lock after the valid 64-bit password is given to the device. The Password Unlock command cannot be accepted any faster than once every 100 µs ± 20 µs. This makes it take an unreasonably long time (58 million years) for a hacker to run through all the 64-bit combinations in an attempt to correctly match a password. The EA status checking methods may be used to determine when the EAC is ready to accept a new password command. If the password is lost after setting the Password Mode Lock Bit, there is no way to clear the PPB Lock. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 23 D at a 4. 4.1 S hee t Read Operations Asynchronous Read Each read access may be made to any location in the memory (random access). Each random access is selftimed with the same latency from CE# or address to valid data (tACC or tCE). 4.2 Page Mode Read Each random read accesses an entire 32-byte Page in parallel. Subsequent reads within the same Page have faster read access speed. The Page is selected by the higher address bits (AMAX-A4), while the specific word of that page is selected by the least significant address bits A3-A0. The higher address bits are kept constant and only A3-A0 changed to select a different word in the same Page. This is an asynchronous access with data appearing on DQ15-DQ0 when CE# remains Low, OE# remains Low, and the asynchronous Page access time (tPACC) is satisfied. If CE# goes High and returns Low for a subsequent access, a random read access is performed and time is required (tACC or tCE). 24 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5. She et Embedded Operations 5.1 Embedded Algorithm Controller (EAC) The EAC takes commands from the host system for programming and erasing the flash memory array and performs all the complex operations needed to change the non-volatile memory state. This frees the host system from any need to manage the program and erase processes. There are four EAC operation categories: Standby (Read Mode) Address Space Switching Embedded Algorithms (EA) Advanced Sector Protection (ASP) Management 5.1.1 EAC Standby In the standby mode current consumption is greatly reduced. The EAC enters its standby mode when no command is being processed and no Embedded Algorithm is in progress. If the device is deselected (CE# = High) during an Embedded Algorithm, the device still draws active current until the operation is completed (ICC3). ICC4 in DC Characteristics on page 74 represents the standby current specification when both the Host Interface and EAC are in their Standby state. 5.1.2 Address Space Switching Writing specific address and data sequences (command sequences) switch the memory device address space from the main flash array to one of the Address Space Overlays (ASO). Embedded Algorithms operate on the information visible in the currently active (entered) ASO. The system continues to have access to the ASO until the system issues an ASO Exit command, performs a Hardware RESET, or until power is removed from the device. An ASO Exit Command switches from an ASO back to the main flash array address space. The commands accepted when a particular ASO is entered are listed between the ASO enter and exit commands in the command definitions table. See Command Summary on page 57 for address and data requirements for all command sequences. 5.1.3 Embedded Algorithms (EA) Changing the non-volatile data in the memory array requires a complex sequence of operations that are called Embedded Algorithms (EA). The algorithms are managed entirely by the device internal Embedded Algorithm Controller (EAC). The main algorithms perform programming and erasing of the main array data and the ASO’s. The host system writes command codes to the flash device address space. The EAC receives the commands, performs all the necessary steps to complete the command, and provides status information during the progress of an EA. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 25 D at a 5.2 S hee t Program and Erase Summary Flash data bits are erased in parallel in a large group called a sector. The Erase operation places each data bit in the sector in the logical 1 state (High). Flash data bits may be individually programmed from the erased 1 state to the programmed logical 0 (low) state. A data bit of 0 cannot be programmed back to a 1. A succeeding read shows that the data is still 0. Only erase operations can convert a 0 to a 1. Programming the same word location more than once with different 0 bits will result in the logical AND of the previous data and the new data being programmed. The duration of program and erase operations is shown in Embedded Algorithm Performance Table on page 46. Program and erase operations may be suspended. An erase operation may be suspended to allow either programming or reading of another sector (not in the erase sector). No other erase operation can be started during an erase suspend. A program operation may be suspended to allow reading of another location (not in the Line being programmed). No other program or erase operation may be started during a suspended program operation - program or erase commands will be ignored during a suspended program operation. After an intervening program operation or read access is complete the suspended erase or program operation may be resumed. The resume can happen at any time after the suspend assuming the device is not in the process of executing another command. Program and Erase operations may be interrupted as often as necessary but in order for a program or erase operation to progress to completion there must be some periods of time between resume and the next suspend commands greater than or equal to tPRS or tERS in Embedded Algorithm Performance Table on page 46. When an Embedded Algorithm (EA) is complete, the EAC returns to the operation state and address space from which the EA was started (Erase Suspend or EAC Standby). The system can determine the status of a program or erase operation by reading the Status Register or using Data Polling Status. Refer to Status Register on page 37 for information on these status bits. Refer to Data Polling Status on page 38 for more information. Any commands written to the device during the Embedded Program Algorithm are ignored except the Program Suspend, and Status Read command. Any commands written to the device during the Embedded Erase Algorithm are ignored except Erase Suspend and Status Read command. A hardware reset immediately terminates any in progress program / erase operation and returns to read mode after tRPH time. The terminated operation should be reinitiated once the device has returned to the idle state, to ensure data integrity. For performance and reliability reasons reading and programming is internally done on full 32-byte Pages. ICC3 in DC Characteristics on page 74 represents the active current specification for a write (Embedded Algorithm) operation. 5.2.1 Program Granularity The S29GL-S supports two methods of programming, Word or Write Buffer Programming. Each Page can be programmed by either method. Pages programmed by different methods may be mixed within a Line for the Industrial Temperature version (-40°C to +85°C). For the In-Cabin version (-40°C to +105°C) the device will only support one programming operation on each 32-byte page between erase operations and Single Word Programming command is not supported. Word programming examines the data word supplied by the command and programs 0’s in the addressed memory array word to match the 0’s in the command data word. Write Buffer Programming examines the write buffer and programs 0’s in the addressed memory array Pages to match the 0’s in the write buffer. The write buffer does not need to be completely filled with data. It is allowed to program as little as a single bit, several bits, a single word, a few words, a Page, multiple Pages, or the entire buffer as one programming operation. Use of the write buffer method reduces host system 26 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et overhead in writing program commands and reduces memory device internal overhead in programming operations to make Write Buffer Programming more efficient and thus faster than programming individual words with the Word Programming command. 5.2.2 Incremental Programming The same word location may be programmed more than once, by either the Word or Write Buffer Programming methods, to incrementally change 1’s to 0’s. 5.3 Command Set 5.3.1 5.3.1.1 Program Methods Word Programming Word programming is used to program a single word anywhere in the main Flash Memory Array. The Word Programming command is a four-write-cycle sequence. The program command sequence is initiated by writing two unlock write cycles, followed by the program set up command. The program address and data are written next, which in turn initiate the Embedded Word Program algorithm. The system is not required to provide further controls or timing. The device automatically generates the program pulses and verifies the programmed cell margin internally. When the Embedded Word Program algorithm is complete, the EAC then returns to its standby mode. The system can determine the status of the program operation by using Data Polling Status, reading the Status Register, or monitoring the RY/BY# output. See Status Register on page 37 for information on these status bits. See Data Polling Status on page 38 for information on these status bits. See Figure 5.1 on page 27 for a diagram of the programming operation. Any commands other than Program Suspend written to the device during the Embedded Program algorithm are ignored. Note that a hardware reset (RESET# = VIL) immediately terminates the programming operation and returns the device to read mode after tRPH time. To ensure data integrity, the Program command sequence should be reinitiated once the device has completed the hardware reset operation. A modified version of the Word Programming command, without unlock write cycles, is used for programming when entered into the Lock Register, Password, and PPB ASOs. The same command is used to change volatile bits when entered in to the PPB Lock, and DYB ASOs. See Table 6.1 on page 57 for program command sequences. Figure 5.1 Word Program Operation START Write Program Command Sequence Data Poll from System Embedded Program algorithm in progress Verify Word? No Yes No Last Addresss? Increment Address Yes Programming Completed December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 27 D at a 5.3.1.2 S hee t Write Buffer Programming A write buffer is used to program data within a 512-byte address range aligned on a 512-byte boundary (Line). Thus, a full Write Buffer Programming operation must be aligned on a Line boundary. Programming operations of less than a full 512 bytes may start on any word boundary but may not cross a Line boundary. At the start of a Write Buffer programming operation all bit locations in the buffer are all 1’s (FFFFh words) thus any locations not loaded will retain the existing data. See Product Overview on page 10 for information on address map. Write Buffer Programming allows up to 512 bytes to be programmed in one operation. It is possible to program from 1 bit up to 512 bytes in each Write Buffer Programming operation. It is recommended that a multiple of Pages be written and each Page written only once. For the very best performance, programming should be done in full Lines of 512 bytes aligned on 512-byte boundaries. Write Buffer Programming is supported only in the main flash array or the SSR ASO. The Write Buffer Programming operation is initiated by first writing two unlock cycles. This is followed by a third write cycle of the Write to Buffer command with the Sector Address (SA), in which programming is to occur. Next, the system writes the number of word locations minus 1. This tells the device how many write buffer addresses are loaded with data and therefore when to expect the Program Buffer to flash confirm command. The Sector Address must match in the Write to Buffer command and the Write Word Count command. The Sector to be programmed must be unlocked (unprotected). The system then writes the starting address / data combination. This starting address is the first address / data pair to be programmed, and selects the write-buffer-Line address. The Sector address must match the Write to Buffer Sector Address or the operation will abort and return to the initiating state. All subsequent address / data pairs must be in sequential order. All write buffer addresses must be within the same Line. If the system attempts to load data outside this range, the operation will abort and return to the initiating state. The counter decrements for each data load operation. Note that while counting down the data writes, every write is considered to be data being loaded into the write buffer. No commands are possible during the write buffer loading period. The only way to stop loading the write buffer is to write with an address that is outside the Line of the programming operation. This invalid address will immediately abort the Write to Buffer command. Once the specified number of write buffer locations has been loaded, the system must then write the Program Buffer to Flash command at the Sector Address. The device then goes busy. The Embedded Program algorithm automatically programs and verifies the data for the correct data pattern. The system is not required to provide any controls or timings during these operations. If an incorrect number of write buffer locations have been loaded the operation will abort and return to the initiating state. The abort occurs when anything other than the Program Buffer to Flash is written when that command is expected at the end of the word count. The write-buffer embedded programming operation can be suspended using the Program Suspend command. When the Embedded Program algorithm is complete, the EAC then returns to the EAC standby or Erase Suspend standby state where the programming operation was started. The system can determine the status of the program operation by using Data Polling Status, reading the Status Register, or monitoring the RY/BY# output. See Status Register on page 37 for information on these status bits. See Data Polling Status on page 38 for information on these status bits. See Figure 5.2 on page 29 for a diagram of the programming operation. The Write Buffer Programming Sequence will be Aborted under the following conditions: Load a Word Count value greater than the buffer size (255). Write an address that is outside the Line provided in the Write to Buffer command. The Program Buffer to Flash command is not issued after the Write Word Count number of data words is loaded. When any of the conditions that cause an abort of write buffer command occur the abort will happen immediately after the offending condition, and will indicate a Program Fail in the Status Register at bit location 4 (PSB = 1) due to Write Buffer Abort bit location 3 (WBASB = 1). The next successful program operation will clear the failure status or a Clear Status Register may be issued to clear the PSB status bit. The Write Buffer Programming Sequence can be stopped by the following: Hardware Reset or Power cycle. However, these using either of these methods may leave the area being programmed in an intermediate state 28 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et with invalid or unstable data values. In this case the same area will need to be reprogrammed with the same data or erased to ensure data values are properly programmed or erased. Figure 5.2 Write Buffer Programming Operation with Data Polling Status Write “Write to Buffer” command Sector Address Write “Word Count” to program - 1 (WC) Sector Address Write Starting Address/Data Yes WC = 0? Write to a different Sector Address No ABORT Write to Buffer Operation? Yes Write to Buffer ABORTED. Must write “Write-to-Buffer ABORT RESET” command sequence to return to READ mode. No Write next Address/Data pair (Note 4) WC = WC - 1 Write Program Buffer to Flash Confirm, Sector Address Read DQ7-DQ0 with Addr = LAST LOADED ADDRESS Yes DQ7 = Data? No No No DQ1 = 1? Yes DQ5 = 1? Yes Read DQ7-DQ0 with Addr = LAST LOADED ADDRESS Yes DQ7 = Data? No FAIL or ABORT (Note 2) PASS Notes: 1. DQ7 should be rechecked even if DQ5 = 1 because DQ7 may change simultaneously with DQ5. 2. If this flowchart location was reached because DQ5 = 1, then the device FAILED. If this flowchart location was reached because DQ1 = 1, then the Write Buffer operation was ABORTED. In either case the proper RESET command must be written to the device to return the device to READ mode. Write-Buffer-Programming-Abort-Rest if DQ1 = 1, either Software RESET or Write-Buffer-Programming-AbortReset if DQ5 = 1. 3. See Table 6.1, Command Definitions on page 57 for the command sequence as required for Write Buffer Programming. 4. When Sector Address is specified, any address in the selected sector is acceptable. However, when loading Write-Buffer address locations with data, all addresses MUST fall within the selected Write-Buffer Page. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 29 D at a S hee t Figure 5.3 Write Buffer Programming Operation with Status Register Write “Write to Buffer” command Sector Address Write “Word Count” to program - 1 (WC) Sector Address Write Starting Address/Data Yes WC = 0? Write to a different Sector Address No ABORT Write to Buffer Operation? Yes Write to Buffer ABORTED. Must write “Write-to-Buffer ABORT RESET” command sequence to return to READ mode. No (Note 2) Write next Address/Data pair WC = WC - 1 Write Program Buffer to Flash Confirm, Sector Address Read Status Register DRB SR[7] = 0? Yes No PSB SR[4] = 0? Yes No Program Fail Yes Program Successful WBASB SR[3] = 1? No SLSB SR[1] = 0? Yes No Program aborted during Write to Buffer command Sector Locked Error Program Fail Notes: 1. See Table 6.1, Command Definitions on page 57 for the command sequence as required for Write Buffer Programming. 2. When Sector Address is specified, any address in the selected sector is acceptable. However, when loading Write-Buffer address locations with data, all addresses MUST fall within the selected Write-Buffer Page. 30 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.1 Write Buffer Programming Command Sequence Sequence Address Data Comment Issue Unlock Command 1 555/AAA AA Issue Unlock Command 2 2AA/555 55 Issue Write to Buffer Command at Sector Address SA 0025h Issue Number of Locations at Sector Address SA WC WC = number of words to program - 1 Starting Address PD Selects Write-Buffer-Page and loads first Address/Data Pair. Load next Address / Data pair WBL PD All addresses MUST be within the selected write-bufferpage boundaries, and have to be loaded in sequential order. Load LAST Address/Data pair WBL PD All addresses MUST be within the selected write-bufferpage boundaries, and have to be loaded in sequential order. SA 0029h Example: WC of 0 = 1 words to pgm WC of 1 = 2 words to pgm Load Starting Address / Data pair Issue Write Buffer Program Confirm at Sector Address This command MUST follow the last write buffer location loaded, or the operation will ABORT. Device goes busy. Legend: SA = Sector Address (Non-Sector Address bits are don't care. Any address within the Sector is sufficient.) WBL = Write Buffer Location (MUST be within the boundaries of the Write-Buffer-Line specified by the Starting Address.) WC =Word Count PD = Program Data 5.3.2 Program Suspend / Program Resume Commands The Program Suspend command allows the system to interrupt an embedded programming operation so that data can read from any non-suspended Line. When the Program Suspend command is written during a programming process, the device halts the programming operation within tPSL (program suspend latency) and updates the status bits. Addresses are don't-cares when writing the Program Suspend command. There are two commands available for program suspend. The legacy combined Erase / Program suspend command (B0h command code) and the separate Program Suspend command (51h command code). There are also two commands for Program resume. The legacy combined Erase / Program resume command (30h command code) and the separate Program Resume command (50h command code). It is recommended to use the separate program suspend and resume commands for programming and use the legacy combined command only for erase suspend and resume. After the programming operation has been suspended, the system can read array data from any nonsuspended Line. The Program Suspend command may also be issued during a programming operation while an erase is suspended. In this case, data may be read from any addresses not in Erase Suspend or Program Suspend. After the Program Resume command is written, the device reverts to programming and the status bits are updated. The system can determine the status of the program operation by reading the Status Register or using Data Polling. Refer to Status Register on page 37 for information on these status bits. Refer to Data Polling Status on page 38 for more information. Accesses and commands that are valid during Program Suspend are: Read to any other non-erase-suspended sector Read to any other non-program-suspended Line Status Read command Exit ASO or Command Set Exit Program Resume command The system must write the Program Resume command to exit the Program Suspend mode and continue the programming operation. Further writes of the Program Resume command are ignored. Another Program Suspend command can be written after the device has resumed programming. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 31 D at a S hee t Program operations can be interrupted as often as necessary but in order for a program operation to progress to completion there must be some periods of time between resume and the next suspend command greater than or equal to tPRS in Embedded Algorithm Controller (EAC) on page 25. Program suspend and resume is not supported while entered in an ASO. While in program suspend entry into ASO is not supported. 5.3.3 Blank Check The Blank Check command will confirm if the selected main flash array sector is erased. The Blank Check command does not allow for reads to the array during the Blank Check. Reads to the array while this command is executing will return unknown data. To initiate a Blank Check on a Sector, write 33h to address 555h in the Sector, while the EAC is in the standby state The Blank Check command may not be written while the device is actively programming or erasing or suspended. Use the Status Register read to confirm if the device is still busy and when complete if the sector is blank or not. Bit 7 of the Status Register will show if the device is performing a Blank Check (similar to an erase operation). Bit 5 of the Status Register will be cleared to 0 if the sector is erased and set to 1 if not erased. As soon as any bit is found to not be erased, the device will halt the operation and report the results. Once the Blank Check is completed, the EAC will return to the Standby State. 5.3.4 5.3.4.1 Erase Methods Chip Erase The chip erase function erases the entire main Flash Memory Array. The device does not require the system to preprogram prior to erase. The Embedded Erase algorithm automatically programs and verifies the entire memory for an all 0 data pattern prior to electrical erase. After a successful chip erase, all locations within the device contain FFFFh. The system is not required to provide any controls or timings during these operations. The chip erase command sequence is initiated by writing two unlock cycles, followed by a set up command. Two additional unlock write cycles are then followed by the chip erase command, which in turn invokes the Embedded Erase algorithm. When WE# goes high, at the end of the 6th cycle, the RY/BY# goes low. When the Embedded Erase algorithm is complete, the EAC returns to the standby state. Note that while the Embedded Erase operation is in progress, the system can not read data from the device. The system can determine the status of the erase operation by reading RY/BY#, the Status Register or using Data Polling. Refer to Status Register on page 37 for information on these status bits. Refer to Data Polling Status on page 38 for more information. Once the chip erase operation has begun, only a Status Read, Hardware RESET or Power cycle are valid. All other commands are ignored. However, a Hardware Reset or Power Cycle immediately terminates the erase operation and returns to read mode after tRPH time. If a chip erase operation is terminated, the chip erase command sequence must be reinitiated once the device has returned to the idle state to ensure data integrity. See Table 5.4 on page 46, Asynchronous Write Operations on page 83 and Alternate CE# Controlled Write Operations on page 89 for parameters and timing diagrams. Sectors protected by the ASP DYB and PPB lock bits will not be erased. See ASP on page 19. If a sector is protected during chip erase, chip erase will skip the protected sector and continue with next sector erase. The status register erase status bit and sector lock bit are not set to 1 by a failed erase on a protected sector. 32 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.3.4.2 She et Sector Erase The sector erase function erases one sector in the memory array. The device does not require the system to preprogram prior to erase. The Embedded Erase algorithm automatically programs and verifies the entire sector for an all 0 data pattern prior to electrical erase. After a successful sector erase, all locations within the erased sector contain FFFFh. The system is not required to provide any controls or timings during these operations. The sector erase command sequence is initiated by writing two unlock cycles, followed by a set up command. Two additional unlock write cycles are then followed by the address of the sector to be erased, and the sector erase command. When WE# goes high, at the end of the 6th cycle, the RY/BY# goes low. The system can determine the status of the erase operation by reading the Status Register or using Data Polling. Refer to Status Register on page 37 for information on these status bits. Refer to Data Polling Status on page 38 for more information. Once the sector erase operation has begun, the Status Register Read and Erase Suspend commands are valid. All other commands are ignored. However, note that a hardware reset immediately terminates the erase operation and returns to read mode after tRPH time. If a sector erase operation is terminated, the sector erase command sequence must be reinitiated once the device has reset operation to ensure data integrity. See Embedded Algorithm Controller (EAC) on page 25 for parameters and timing diagrams. Sectors protected by the ASP DYB and PPB lock bits will not be erased. See ASP on page 19. Figure 5.4 Sector Erase Operation Write Unlock Cycles: Address 555h, Data AAh Address 2AAh, Data 55h Unlock Cycle 1 Unlock Cycle 2 Write Sector Erase Cycles: Address 555h, Data 80h Address 555h, Data AAh Address 2AAh, Data 55h Sector Address, Data 30h Command Cycle 1 Command Cycle 2 Command Cycle 3 Specify first sector for erasure Perform Write Operation Status Algorithm Yes Status may be obtained by Status Register Polling or Data Polling methods. Done? No Erase Error? No Error condition (Exceeded Timing Limits) Yes PASS. Device returns to reading array. December 21, 2012 S29GL_128S_01GS_00_07 FAIL. Write reset command to return to reading array. GL-S MirrorBit® Family 33 D at a 5.3.5 S hee t Erase Suspend / Erase Resume The Erase Suspend command allows the system to interrupt a sector erase operation and then read data from, or program data to, the main flash array. This command is valid only during sector erase or program operation. The Erase Suspend command is ignored if written during the chip erase operation. When the Erase Suspend command is written during the sector erase operation, the device requires a maximum of tESL (erase suspend latency) to suspend the erase operation and update the status bits. After the erase operation has been suspended, the part enters the erase-suspend mode. The system can read data from or program data to the main flash array. Reading at any address within erase-suspended sectors produces undetermined data. The system can determine if a sector is actively erasing or is erasesuspended by reading the Status Register or using Data Polling. Refer to Status Register on page 37 for information on these status bits. Refer to Data Polling Status on page 38 for more information. After an erase-suspended program operation is complete, the EAC returns to the erase-suspend state. The system can determine the status of the program operation by reading the Status Register, just as in the standard program operation. If a program failure occurs during erase suspend the Clear or Reset commands will return the device to the erase suspended state. Erase will need to be resumed and completed before again trying to program the memory array. Accesses and commands that are valid during Erase Suspend are: Read to any other non-suspended sector Program to any other non-suspended sector Status Register Read Status Register Clear Enter DYB ASO DYB Set DYB Clear DYB Status Read Exit ASO or Command Set Exit Erase Resume command To resume the sector erase operation, the system must write the Erase Resume command. The device will revert to erasing and the status bits will be updated. Further writes of the Resume command are ignored. Another Erase Suspend command can be written after the chip has resumed erasing. Erase suspend and resume is not supported while entered in an ASO. While in erase suspend entry into ASO is not supported. 34 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.3.6 5.3.6.1 She et ASO Entry and Exit ID-CFI ASO The system can access the ID-CFI ASO by issuing the ID-CFI Entry command sequence during Read Mode. This entry command uses the Sector Address (SA) in the command to determine which sector will be overlaid and which sector's protection state is reported in word location 2h. See the detail description Table 6.2 on page 60. The ID-CFI ASO allows the following activities: Read ID-CFI ASO, using the same SA as used in the entry command. Read Sector Protection State at Sector Address (SA) + 2h. Location 2h provides volatile information on the current state of sector protection for the sector addressed. Bit 0 of the word at location 2h shows the logical NAND of the PPB and DYB bits related to the addressed sector such that if the sector is protected by either the PPB=0 or the DYB=0 bit for that sector the state shown is protected. (1= Sector protected, 0= Sector unprotected). This protection state is shown only for the SA selected when entering ID-CFI ASO. Reading other SA provides undefined data. To read a different SA protection state ASO exit command must be used and then enter ID-CFI ASO again with the new SA. ASO Exit. The following is a C source code example of using the CFI Entry and Exit functions. Refer to the Spansion Low Level Driver User's Guide (available on www.spansion.com) for general information on Spansion flash memory software development guidelines. /* Example: CFI Entry command */ *( (UINT16 *)base_addr + 0x55 ) = 0x0098; /* write CFI entry command */ /* Example: CFI Exit command */ *( (UINT16 *)base_addr + 0x000 ) = 0x00F0; /* write cfi exit command */ 5.3.6.2 Status Register ASO The Status Register ASO contains a single word of registered volatile status for Embedded Algorithms. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The Status Register content appears on all word locations. The first read access exits the Status Register ASO (with the rising edge of CE# or OE#) and returns to the address space map in use when the Status Register read command was issued. Write commands will not exit the Status Register ASO state. 5.3.6.3 Secure Silicon Region ASO The system can access the Secure Silicon Region by issuing the Secure Silicon Region Entry command sequence during Read Mode. This entry command uses the Sector Address (SA) in the command to determine which sector will be overlaid. The Secure Silicon Region ASO allows the following activities: Read Secure Silicon Regions. Programming the customer Secure Silicon Region is allowed using the Word or Write Buffer Programming commands. ASO Exit using legacy Secure Silicon Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 35 D at a 5.3.6.4 S hee t Lock Register ASO The system can access the Lock Register by issuing the Lock Register entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The Lock Register appears at word location 0 in the device address space. All other locations in the device address space are undefined. The Lock Register ASO allows the following activities: Read Lock Register, using device address location 0. Program the customer Lock Register using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. 5.3.6.5 Password ASO The system can access the Password ASO by issuing the Password entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The Password appears at word locations 0 to 3 in the device address space. All other locations in the device address space are undefined. The Password ASO allows the following activities: Read Password, using device address location 0 to 3. Program the Password using a modified Word Programming command. Unlock the PPB Lock bit with the Password Unlock command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. 5.3.6.6 PPB ASO The system can access the PPB ASO by issuing the PPB entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The PPB bit for a sector appears in bit 0 of all word locations in the sector. The PPB ASO allows the following activities: Read PPB protection status of a sector in bit 0 of any word in the sector. Program the PPB bit using a modified Word Programming command. Erase all PPB bits with the PPB erase command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. 5.3.6.7 PPB Lock ASO The system can access the PPB Lock ASO by issuing the PPB Lock entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The global PPB Lock bit appears in bit 0 of all word locations in the device. The PPB Lock ASO allows the following activities: Read PPB Lock protection status in bit 0 of any word in the device address space. Set the PPB Lock bit using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. 36 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.3.6.8 She et DYB ASO The system can access the DYB ASO by issuing the DYB entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The DYB bit for a sector appears in bit 0 of all word locations in the sector. The DYB ASO allows the following activities: Read DYB protection status of a sector in bit 0 of any word in the sector. Set the DYB bit using a modified Word Programming command. Clear the DYB bit using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. 5.3.6.9 Software (Command) Reset / ASO exit Software reset is part of the command set (See Table 6.1, Command Definitions on page 57) that also returns the EAC to standby state and must be used for the following conditions: Exit ID/CFI mode Clear timeout bit (DQ5) for data polling when timeout occurs Software Reset does not affect EA mode. Reset commands are ignored once programming or erasure has begun, until the operation is complete. Software Reset does not affect outputs; it serves primarily to return to Read Mode from an ASO mode or from a failed program or erase operation. Software Reset may cause a return to Read Mode from undefined states that might result from invalid command sequences. However, a Hardware Reset may be required to return to normal operation from some undefined states. There is no software reset latency requirement. The reset command is executed during the tWPH period. 5.4 Status Monitoring There are three methods for monitoring EA status. Previous generations of the S29GL flash family used the methods called Data Polling and Ready/Busy# (RY/BY#) Signal. These methods are still supported by the S29GL-S family. One additional method is reading the Status Register. 5.4.1 Status Register The status of program and erase operations is provided by a single 16-bit status register. The status is receiver by writing the Status Register Read command followed by a read access. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The contents of the status register is aliased (overlaid) on the full memory address space. Any valid read (CE# and OE# low) access while in the Status Register ASO will exit the ASO (with the rising edge of CE# or OE# for tCEPH/tOEPH time) and return to the address space map in use when the Status Register Read command was issued. The status register contains bits related to the results - success or failure - of the most recently completed Embedded Algorithms (EA): Erase Status (bit 5), Program Status (bit 4), Write Buffer Abort (bit 3), Sector Locked Status (bit 1), RFU (bit 0). and, bits related to the current state of any in process EA: Device Busy (bit 7), Erase Suspended (bit 6), December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 37 D at a S hee t Program Suspended (bit 2), The current state bits indicate whether an EA is in process, suspended, or completed. The upper 8 bits (bits 15:8) are reserved. These have undefined High or Low value that can change from one status read to another. These bits should be treated as don't care and ignored by any software reading status. The Soft Reset Command will clear to 0 bits [5, 4, 1, 0] of the status register if Status Register bit 3 =0. It will not affect the current state bits. The Clear Status Register Command will clear to 0 the results related bits of the status register but will not affect the current state bits. Table 5.2 Status Register Bit # Bit Description 15:8 Reserved Bit Name 7 6 Device Ready Bit Erase Suspend Status Bit DRB 5 4 3 2 1 0 Erase Status Bit Program Status Bit Write Buffer Abort Status Bit Program Suspend Status Bit Sector Lock Status Bit Reserved ESSB ESB PSB WBASB PSSB SLSB 0 0 0 0 Invalid Invalid Invalid Invalid 0=No Program in suspension 0=Sector not locked during operation Reset Status X 1 0 0 0 Busy Status Invalid 0 Invalid Invalid Invalid Ready Status X 1 0=No Erase in Suspension 0=Program not aborted 0=Erase successful 1=Erase in 1=Erase fail Suspension 0=Program successful 1=Program fail 1=Program aborted during Write to Buffer command 1=Program in suspension X 1=Sector locked error Notes: 1. Bits 15 thru 8, and 0 are reserved for future use and may display as 0 or 1. These bits should be ignored (masked) when checking status. 2. Bit 7 is 1 when there is no Embedded Algorithm in progress in the device. 3. Bits 6 thru 1 are valid only if Bit 7 is 1. 4. All bits are put in their reset status by cold reset or warm reset. 5. Bits 5, 4, 3, and 1 are cleared to 0 by the Clear Status Register command or Reset command. 6. Upon issuing the Erase Suspend Command, the user must continue to read status until DRB becomes 1. 7. ESSB is cleared to 0 by the Erase Resume Command. 8. ESB reflects success or failure of the most recent erase operation. 9. PSB reflects success or failure of the most recent program operation. 10. During erase suspend, programming to the suspended sector, will cause program failure and set the Program status bit to 1. 11. Upon issuing the Program Suspend Command, the user must continue to read status until DRB becomes 1. 12. PSSB is cleared to 0 by the Program Resume Command. 13. SLSB indicates that a program or erase operation failed because the sector was locked. 14. SLSB reflects the status of the most recent program or erase operation. 5.4.2 Data Polling Status During an active Embedded Algorithm the EAC switches to the Data Polling ASO to display EA status to any read access. A single word of status information is aliased in all locations of the device address space. In the status word there are several bits to determine the status of an EA. These are referred to as DQ bits as they appear on the data bus during a read access while an EA is in progress. DQ bits 15 to 8, DQ4, and DQ0 are reserved and provide undefined data. Status monitoring software must mask the reserved bits and treat them as don't care. Table 5.3 on page 42 and the following subsections describe the functions of the remaining bits. 38 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.4.2.1 She et DQ7: Data# Polling The Data# Polling bit, DQ7, indicates to the host system whether an Embedded Algorithm is in progress or has completed. Data# Polling is valid after the rising edge of the final WE# pulse in the program or erase command sequence. Note that the Data# Polling is valid only for the last word being programmed in the writebuffer-page during Write Buffer Programming. Reading Data# Polling status on any word other than the last word to be programmed in the write-buffer-page will return false status information. During the Embedded Program algorithm, the device outputs on DQ7 the complement of the data bit programmed to DQ7. This DQ7 status also applies to programming during Erase Suspend. When the Embedded Program algorithm is complete, the device outputs the data bit programmed to bit 7 of the last word programmed. In case of a Program Suspend, the device allows only reading array data. If a program address falls within a protected sector, Data# Polling on DQ7 is active for approximately 20 µs, then the device returns to reading array data. During the Embedded Erase or Blank Check algorithms, Data# Polling produces a 0 on DQ7. When the algorithm is complete, or if the device enters the Erase Suspend mode, Data# Polling produces a 1 on DQ7. This is analogous to the complement / true datum output described for the Embedded Program algorithm: the erase function changes all the bits in a sector to 1; prior to this, the device outputs the complement or '0'. The system must provide an address within the sector selected for erasure to read valid status information on DQ7. After an erase command sequence is written, if the sector selected for erasing is protected, Data# Polling on DQ7 is active for approximately 100 µs, then the device returns to reading array data. When the system detects DQ7 has changed from the complement to true data, it can read valid data at DQ15-DQ0 on the following read cycles. This is because DQ7 may change asynchronously with DQ6-DQ0 while Output Enable (OE#) is asserted Low. This is illustrated in Figure 10.16 on page 88. Table 5.3 on page 42 shows the outputs for Data# polling on DQ7. Figure 5.2 on page 29 shows the Data# polling algorithm use in Write Buffer Programming. Valid DQ7 data polling status may only be read from: the address of the last word loaded into the Write Buffer for a Write Buffer programming operation; the location of a single word programming operation; or a location in a sector being erased or blank checked; or a location in any sector during chip erase. Figure 5.5 Data# Polling Algorithm START Read DQ7-DQ0 - DQ7 = Data? Yes No No DQ5 = 1? Yes Read DQ 7 -DQ0 DQ7 = Data? Yes No FAIL PASS Note: 1. DQ7 should be rechecked even if DQ5 = 1 because DQ7 may change simultaneously with DQ5. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 39 D at a 5.4.2.2 S hee t DQ6: Toggle Bit I Toggle Bit I on DQ6 indicates whether an Embedded Program or Erase algorithm is in progress or complete, or whether the device has entered the Program Suspend or Erase Suspend mode. Toggle Bit I may be read at any address, and is valid after the rising edge of the final WE# pulse in the command sequence (prior to the program or erase operation). During an Embedded Program or Erase algorithm operation, successive read cycles to any address cause DQ6 to toggle. (The system may use either OE# or CE# to control the read cycles). When the operation is complete, DQ6 stops toggling. After an erase command sequence is written, if the sector selected for erasing is protected, DQ6 toggles for approximately 100 µs, then the EAC returns to standby (Read Mode). If the selected sector is not protected, the Embedded Erase algorithm erases the unprotected sector. The system can use DQ6 and DQ2 together to determine whether a sector is actively erasing or erasesuspended. When the device is actively erasing (that is, the Embedded Erase algorithm is in progress), DQ6 toggles. When the device enters the Program Suspend mode or Erase Suspend mode, DQ6 stops toggling. However, the system must also use DQ2 to determine which sectors are erasing, or erase-suspended. Alternatively, the system can use DQ7 (see DQ7: Data# Polling on page 39). DQ6 also toggles during the erase-suspend-program mode, and stops toggling once the Embedded Program algorithm is complete. Table 5.3 on page 42 shows the outputs for Toggle Bit I on DQ6. Figure 5.6 on page 41 shows the toggle bit algorithm in flowchart form, and the Reading Toggle Bits DQ6/DQ2 on page 41 explains the algorithm. Figure 5.6 on page 41 shows the toggle bit timing diagrams. Figure 5.2 on page 29 shows the differences between DQ2 and DQ6 in graphical form. See also DQ2: Toggle Bit II on page 40. 5.4.2.3 DQ3: Sector Erase Timer After writing a sector erase command sequence, the system may read DQ3 to determine whether or not erasure has begun. See Sector Erase on page 33 for more details. After the sector erase command is written, the system should read the status of DQ7 (Data# Polling) or DQ6 (Toggle Bit I) to ensure that the device has accepted the command sequence, and then read DQ3. If DQ3 is 1, the Embedded Erase algorithm has begun; all further commands (except Erase Suspend) are ignored until the erase operation is complete. Table 5.3 on page 42 shows the status of DQ3 relative to the other status bits. 5.4.2.4 DQ2: Toggle Bit II Toggle Bit II on DQ2, when used with DQ6, indicates whether a particular sector is actively erasing (that is, the Embedded Erase algorithm is in progress), or whether that sector is erase-suspended. Toggle Bit II is valid after the rising edge of the final WE# pulse in the command sequence. DQ2 toggles when the system reads at addresses within the sector selected for erasure. (The system may use either OE# or CE# to control the read cycles). But DQ2 cannot distinguish whether the sector is actively erasing or is erase-suspended. DQ6, by comparison, indicates whether the device is actively erasing, or is in Erase Suspend, but cannot distinguish if the sector is selected for erasure. Thus, both status bits are required for sector and mode information. Refer to Table 5.3 on page 42 to compare outputs for DQ2 and DQ6. Figure 5.5 on page 39 shows the toggle bit algorithm in flowchart form, and the Reading Toggle Bits DQ6/ DQ2 on page 41 explains the algorithm. See also Figure 5.6 on page 41 shows the toggle bit timing diagram. Figure 5.2 on page 29 shows the differences between DQ2 and DQ6 in graphical form. 40 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.4.2.5 She et Reading Toggle Bits DQ6/DQ2 Refer to Figure 5.5 on page 39 for the following discussion. Whenever the system initially begins reading toggle bit status, it must read DQ7-DQ0 at least twice in a row to determine whether a toggle bit is toggling. Typically, the system would note and store the value of the toggle bit after the first read. After the second read, the system would compare the new value of the toggle bit with the previous value. If the toggle bit is not toggling, the device has completed the program or erases operation. The system can read array data on DQ15-DQ0 on the following read cycle. However, if after the initial two read cycles, the system determines that the toggle bit is still toggling, the system also should note whether the value of DQ5 is High (see DQ5: Exceeded Timing Limits on page 41). If it is, the system should then determine again whether the toggle bit is toggling, since the toggle bit may have stopped toggling just as DQ5 went High. If the toggle bit is no longer toggling, the device has successfully completed the program or erase operation. If it is still toggling, the device did not complete the operation successfully, and the system must write the reset command to return to reading array data. The remaining scenario is that the system initially determines that the toggle bit is toggling and DQ5 has not gone High. The system may continue to monitor the toggle bit and DQ5 through successive read cycles, determining the status as described in the previous paragraph. Alternatively, it may choose to perform other system tasks. In this case, the system must start at the beginning of the algorithm when it returns to determine the status of the operation (top of Figure 5.6 on page 41). Figure 5.6 Toggle Bit Program START Read DQ7 -DQ0 Read DQ7 -DQ0 (Note 1) Toggle Bit = Toggle? No Yes No DQ5 = 1? Yes Read DQ7 -DQ0 Twice (Notes 1, 2) Toggle Bit = Toggle? No Yes Erase/Program Operation Not Complete Erase/Program Operation Complete Notes: 1. Read toggle bit twice to determine whether or not it is toggling. See text. 2. Recheck toggle bit because it may stop toggling as DQ5 changes to 1. See text. 5.4.2.6 DQ5: Exceeded Timing Limits DQ5 indicates whether the program or erase time has exceeded a specified internal pulse count limit. Under these conditions DQ5 produces a 1. This is a failure condition that indicates the program or erase cycle was not successfully completed. The system must issue the reset command to return the device to reading array data. When a timeout occurs, the software must send a reset command to clear the timeout bit (DQ5) and to return the EAC to read array mode. In this case, it is possible that the flash will continue to communicate busy for up to 2 µs after the reset command is sent. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 41 D at a 5.4.2.7 S hee t DQ1: Write-to-Buffer Abort DQ1 indicates whether a Write-to-Buffer operation was aborted. Under these conditions DQ1 produces a 1. The system must issue the Write-to-Buffer-Abort-Reset command sequence to return the EAC to standby (Read Mode) and the Status Register failed bits are cleared. See Write Buffer Programming on page 28 for more details. Table 5.3 Data Polling Status DQ7 (Note 2) DQ6 DQ5 (Note 1) DQ3 DQ2 (Note 2) DQ1 (Note 4) RY/BY# Embedded Program Algorithm DQ7# Toggle 0 N/A No Toggle 0 0 Reading within Erasing Sector 0 Toggle 0 1 Toggle N/A 0 Reading Outside erasing Sector 0 Toggle 0 1 No Toggle N/A 0 INVALID INVALID INVALID INVALID INVALID INVALID (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) 1 Reading within Non-Program Suspended Sector Data Data Data Data Data Data 1 Reading within Erase Suspended Sector 1 No Toggle 0 N/A Toggle N/A 1 Reading within Non-Erase Suspend Sector Data Data Data Data Data Data 1 Programming within Non-Erase Suspended Sector DQ7# Toggle 0 N/A N/A N/A 0 DQ7# Toggle 0 N/A No Toggle 0 0 Operation Standard Mode Program Suspend Mode (Note 3) Erase Suspend Mode Reading within Program Suspended Sector BUSY State Write-toBuffer Exceeded Timing Limits (Notes 4, 5) ABORT State DQ7# Toggle 1 N/A N/A 0 0 DQ7# Toggle 0 N/A N/A 1 0 Notes: 1. DQ5 switches to '1' when an Embedded Program or Embedded Erase operation has exceeded the maximum timing limits. See DQ5: Exceeded Timing Limits on page 41 for more information. 2. DQ7 and DQ2 require a valid address when reading status information. Refer to the appropriate subsection for further details. 3. Data are invalid for addresses in a Program Suspended Line. All addresses other than the program suspended line can be read for valid data. 4. DQ1 indicates the Write-to-Buffer ABORT status during Write-Buffer-Programming operations. 5. Applies only to program operations. 5.5 Error Types and Clearing Procedures There are three types of errors reported by the embedded operation status methods. Depending on the error type, the status reported and procedure for clearing the error status is different. Following is the clearing of error status: 42 If an ASO was entered before the error the device remains entered in the ASO awaiting ASO read or a command write. If an erase was suspended before the error the device returns to the erase suspended state awaiting flash array read or a command write. Otherwise, the device will be in standby state awaiting flash array read or a command write. GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.5.1 She et Embedded Operation Error If an error occurs during an embedded operation (program, erase, blank check, or password unlock) the device (EAC) remains busy. The RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows ready with valid status bits. The device remains busy until the error status is detected by the host system status monitoring and the error status is cleared. During embedded algorithm error status the Data Polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer or last word of the password in the case of the password unlock command. DQ7 = 0 for an erase or blank check failure DQ6 continues to toggle DQ5 = 1; Failure of the embedded operation DQ4 is RFU and should be treated as don’t care (masked) DQ3 = 1 to indicate embedded sector erase in progress DQ2 continues to toggle, independent of the address used to read status DQ1 = 0; Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) During embedded algorithm error status the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended during the EA error SR[5] = 1 on erase or blank check error; else = 0 SR[4] = 1 on program or password unlock error; else = 0 SR[3] = 0; Write buffer abort SR[2] = 0; Program suspended SR[1] = 0; Protected sector SR[0] = X; RFU, treat as don’t care (masked) When the embedded algorithm error status is detected, it is necessary to clear the error status in order to return to normal operation, with RY/BY# High, ready for a new read or command write. The error status can be cleared by writing: Reset command Status Register Clear command Commands that are accepted during embedded algorithm error status are: Status Register Read Reset command Status Register Clear command December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 43 D at a 5.5.2 S hee t Protection Error If an embedded algorithm attempts to change data within a protected area (program, or erase of a protected sector or OTP area) the device (EAC) goes busy for a period of 20 to 100 µs then returns to normal operation. During the busy period the RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows not ready with invalid status bits (SR[7] = 0). During the protection error status busy period the data polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer. DQ7 = 0 for an erase failure DQ6 continues to toggle, independent of the address used to read status DQ5 = 0; to indicate no failure of the embedded operation during the busy period DQ4 is RFU and should be treated as don’t care (masked) DQ3 = 1 to indicate embedded sector erase in progress DQ2 continues to toggle, independent of the address used to read status DQ1 = 0; Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) Commands that are accepted during the protection error status busy period are: Status Register Read When the busy period ends the device returns to normal operation, the data polling status is no longer overlaid, RY/BY# is High, and the status register shows ready with valid status bits. The device is ready for flash array read or write of a new command. After the protection error status busy period the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended after the protection error busy period SR[5] = 1 on erase error, else = 0 SR[4] = 1 on program error, else = 0 SR[3] = 0; Program not aborted SR[2] = 0; No Program in suspension SR[1] = 1; Error due to attempting to change a protected location SR[0] = X; RFU, treat as don’t care (masked) Commands that are accepted after the protection error status busy period are: 44 Any command GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 5.5.3 She et Write Buffer Abort If an error occurs during a Write to Buffer command the device (EAC) remains busy. The RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows ready with valid status bits. The device remains busy until the error status is detected by the host system status monitoring and the error status is cleared. During write to buffer abort (WBA) error status the Data Polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer DQ6 continues to toggle, independent of the address used to read status DQ5 = 0; to indicate no failure of the programming operation. WBA is an error in the values input by the Write to Buffer command before the programming operation can begin DQ4 is RFU and should be treated as don’t care (masked) DQ3 is don't care after program operation as no erase is in progress. If the Write Buffer Program operation was started after an erase operation had been suspended then DQ3 = 1. If there was no erase operation in progress then DQ3 is a don't care and should be masked. DQ2 does not toggle after program operation as no erase is in progress. If the Write Buffer Program operation was started after an erase operation had been suspended then DQ2 will toggle in the sector where the erase operation was suspended and not in any other sector. If there was no erase operation in progress then DQ2 is a don't care and should be masked. DQ1 = 1: Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) During embedded algorithm error status the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended during the WBA error status SR[5] = 0; Erase successful SR[4] = 1; Programming related error SR[3] = 1; Write buffer abort SR[2] = 0; No Program in suspension SR[1] = 0; Sector not locked during operation SR[0] = X; RFU, treat as don’t care (masked) When the WBA error status is detected, it is necessary to clear the error status in order to return to normal operation, with RY/BY# High, ready for a new read or command write. The error status can be cleared and device returned to normal operation by writing: Write Buffer Abort Reset command – Clears the status register and returns to normal operation Status Register Clear command Commands that are accepted during embedded algorithm error status are: Status Register Read Write Buffer Abort Reset command Status Register Clear command December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 45 D at a 5.6 S hee t Embedded Algorithm Performance Table Table 5.4 Embedded Algorithm Characteristics (-40°C to +85°C) Parameter Typ (Note 2) Max (Note 3) Unit Sector Erase Time 128 kbyte 275 1100 ms Single Word Programming Time (Note 1) 125 400 µs 2-byte (Note 1) 125 750 32-byte (Note 1) 160 750 64-byte (Note 1) 175 750 128-byte (Note 1) 198 750 256-byte (Note 1) 239 750 512-byte 340 750 512-byte 1.33 Buffer Programming Time Effective Write Buffer Program Operation per Word Comments Includes pre-programming prior to erasure (Note 5) µs Sector Programming Time 128 kB (full Buffer Programming) 108 µs 192 ms Erase Suspend/Erase Resume (tESL) 40 µs Program Suspend/Program Resume (tPSL) 40 µs (Note 6) Erase Resume to next Erase Suspend (tERS) 100 µs Minimum of 60 ns but ≥ typical periods are needed for Erase to progress to completion. Program Resume to next Program Suspend (tPRS) 100 µs Minimum of 60 ns but ≥ typical periods are needed for Program to progress to completion. Blank Check 6.2 NOP (Number of Program-operations, per Line) 8.5 ms 256 Notes: 1. Not 100% tested. 2. Typical program and erase times assume the following conditions: 25°C, 3.0V VCC, 10,000 cycle, and a random data pattern. 3. Under worst case conditions of 90°C, VCC = 2.70V, 100,000 cycles, and a random data pattern. 4. Effective write buffer specification is based upon a 512-byte write buffer operation. 5. In the pre-programming step of the Embedded Erase algorithm, all words are programmed to 0000h before Sector and Chip erasure. 6. System-level overhead is the time required to execute the bus-cycle sequence for the program command. See Table 6.1, Command Definitions on page 57 for further information on command definitions. 46 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.5 Embedded Algorithm Characteristics (-40°C to +105°C) Parameter Sector Erase Time 128 kbyte Single Word Programming Time (Note 1) Typ (Note 2) Max (Note 3) Unit 275 1100 ms µs 125 400 2-byte (Note 1) 150 1050 32-byte (Note 1) 200 1050 64-byte (Note 1) 220 1050 128-byte (Note 1) 250 1050 256-byte (Note 1) 320 1050 512-byte 420 1050 512-byte 1.64 Buffer Programming Time Effective Write Buffer Program Operation per Word Comments Includes pre-programming prior to erasure (Note 5) µs Sector Programming Time 128 kB (full Buffer Programming) 108 µs 269 ms Erase Suspend/Erase Resume (tESL) 50 µs Program Suspend/Program Resume (tPSL) 50 µs (Note 6) Erase Resume to next Erase Suspend (tERS) 100 µs Minimum of 60 ns but ≥ typical periods are needed for Erase to progress to completion. Program Resume to next Program Suspend (tPRS) 100 µs Minimum of 60 ns but ≥ typical periods are needed for Program to progress to completion. Blank Check 7.6 NOP (Number of Program-operations, per Line) 9.0 ms 1 per 16 word Notes: 1. Not 100% tested. 2. Typical program and erase times assume the following conditions: 25°C, 3.0V VCC, 10,000 cycle, and a random data pattern. 3. Under worst case conditions of 105°C, VCC = 2.70V, 100,000 cycles, and a random data pattern. 4. Effective write buffer specification is based upon a 512-byte write buffer operation. 5. In the pre-programming step of the Embedded Erase algorithm, all words are programmed to 0000h before Sector and Chip erasure. 6. System-level overhead is the time required to execute the bus-cycle sequence for the program command. See Table 6.1, Command Definitions on page 57 for further information on command definitions. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 47 D at a 5.6.1 S hee t Command State Transitions Table 5.6 Read Command State Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Blank Check CFI Entry Address RA xh x555h x555h x555h (SA)555h (SA)55h Data RD xF0h x70h x71h xAAh x33h x98h Read Protect = False READ READ READSR (READ) READ READUL1 - (return) - - READ READSR - - CFI BLCK - - - Table 5.7 Read Unlock Command State Transition Current State READUL1 Read Status Register Read Enter Unlock 2 Address RA x555h x2AAh x555h Data RD x70h x55h xA0h - READU L1 Command and Condition READSR READU (READ) L2 Read Protect = True Word Write to Program Buffer Entry Enter Lock Register Entry Password ASO Entry PPB Entry PPB Lock Entry DYB ASO Entry x555h x555h x555h x555h x555h x40h x60h xC0h x50h xE0h - - - - - - - - - - PPBLB DYB Erase Enter ID (Autoselect) Entry (SA)xh x555h (SA)555h (SA)555h x25h x80h x90h x88h - - - - - - - SSR Entry READUL2 Read Protect = False READU L2 READSR (READ) - CFI PG1 Read Protect = False and LR(8) = 0 WB ER PP SSR LR PPB Table 5.8 Erase State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Unlock 2 Chip Erase Start Sector Erase Start Erase Suspend Enhanced Method (2) Address RA xh x555h x555h x555h x2AAh x555h (SA)xh xh Data RD xF0h x70h x71h xAAh x55h x10h x30h xB0h - ERUL1 - - - - ER - ER - READSR (READ) ERUL1 - ERUL1 - READSR (READ) - - ERUL2 - - - ERUL2 - ERUL2 - READSR (READ) - - - CER SER - CER (1) - CER - ERSR (CER) - - - - - - - - - - ESR (ES) - - - - - SR(7) = 0 SER (1) SER SR(7) = 1 READ SR(7) = 0 BLCK (1) BLCK SR(7) = 1 ERSR - READ ERSR (SER) ERSR (BLCK) READ READ (return) Notes: 1. State will automatically move to READ state at the completion of the operation. 2. Also known as Erase Suspend/Program Suspend Legacy Method. 48 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.9 Erase Suspend State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Sector Erase Start Address RA xh x555h x555h x555h (SA)xh Data RD xF0h x70h x71h xAAh x30h - ESR ERSR (ESR) - - ESR (1) - SR(7) = 0 - ES ES ES ESSR (ES) ES ESUL1 SR(7) = 1 ESSR SER - (return) - - - - - Note: 1. State will automatically move to ES state by tESL. Table 5.10 Erase Suspend Unlock State Command Transition Current State Status Software Register Reset / Read ASO Exit Enter WritetoBufferAbort Reset Start Erase Resume Enhanced Method (1) DYB ASO Entry (SA)xh x555h xh x555h NOT x555h xh NOT x2AAh xh xA0h x25h xF0h x30h xE0h xh NOT xF0h xh NOT x55h - - - - - - - - ESPG ESPG - - Command and Condition Read Address RA xh x555h x2AAh x555h Data RD xF0h x70h x55h ESUL1 - ESSR (ES) ESUL2 Unlock 1 Word Write to Program Buffer Entry Enter NOT a valid “Write-to-BufferAbort Reset” Command ESUL1 SR(3) = 1 DQ(1) = 1 - ESUL2 - Read Protect = False - ES - - ESDYB ESSR (ES) ESUL2 - ESPG1 ES_WB SER SR(3) = 1 - ES - ESPG ESPG DQ(1) = 1 Note: 1. Also known as Erase Resume/Program Resume Legacy Method. Table 5.11 Erase Suspend - DYB State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Command Set Exit Entry Command Set Exit DYB Set/ Clear Entry Password Word Count Address RA xh x555h x555h xh xh xh xh Data RD xF0h x70h x71h x90h x00h xA0h x03h ESDYB ESDYBEXT - ESDYBSET - ESDYB - ESDYB ES ESSR (ESDYB) ESDYBSET - ESDYBSET - - - - - - - ESDYBEXT - ESDYBEXT - - - - ES - ES December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 49 D at a S hee t Table 5.12 Erase Suspend - Program Command State Transition Current State ES_WB Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Program Erase Suspend Suspend Enhanced Enhanced Method Method (1) Address RA xh x555h x555h x555h xh xh xh Data RD xF0h x70h x71h xAAh xB0h x51h xh ES_WB - - - - - - WC > 256 or SA ≠ SA WC ≤ 256 and SA = SA ESPG ES_WB_ D WC < 0 or Write Buffer ≠ Write Buffer ES_WB_D ESPG ES_WB_D - - - - - - WC > 0 and Write Buffer = Write Buffer ESPG1 - ES_WB_ D ESPG1 SR(7) = 0 ESPG - - - ES ESPGSR (ESPG) - - - ESPG SR(7) = 1 ESPGSR Write Data - (return) - - - ESPG - ESUL1 ESPSR (ESPG) ESPSR (ESPG) ESPG ES - - - (return) Note: 1. Also known as Erase Suspend/Program Suspend Legacy Method. Table 5.13 Erase Suspend - Program Suspend Command State Transistion Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Unlock 2 Erase Resume Enhanced Method (2) Program Resume Enhanced Method Address RA xh x555h x555h x555h x2AAh xh xh Data RD xF0h x70h x71h xAAh x55h x30h x50h ESPSR (1) - ESPSR - ESPGSR (ESPSR) - - - - - ESPS - ESPS ESPS ESPSSR (ESSP) ESPS ESPSUL1 - ESPG ESPG ESPSSR - (return) - - - - - - - - - ESPSUL2 - - - - - ESPG ESPG ESPSUL1 - ESPSUL1 - ESPSSR (ESPS) ESPSUL2 - ESPSUL2 - ESPSSR (ESPS) Notes: 1. State will automatically move to ESPS state by tPSL. 2. Also known as Erase Resume/Program Resume Legacy Method. 50 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.14 Program State Command Transition Current State Command and Condition Read Status Register Read Enter Status Register Clear Unlock 1 Program Buffer to flash (confirm) Erase Suspend Enhanced Method (2) Program Suspend Enhanced Method Write Data Address RA xh x555h x555h x555h (SA)xh xh xh xh Data RD xF0h x70h x71h xAAh x29h xB0h x51h xh WB - - - - - - - WC > 256 or SA ≠ SA WB Software Reset / ASO Exit PG WC ≤ 256 and SA = SA WB_D Write Buffer ≠ Write Buffer PG WC = 0 WB_D WB_D - - - - - - PBF - WC > 0 and Write Buffer = Write Buffer WB_D PBF - - - - - - PG - - PG PG1 - PG1 - - - - - - - PG - - PSR (PG) PSR (PG) READ WBUL1 - - SR(7) = 0 PG (1) - SR(7) = 1 PG PGSR (PG) - READ SR(7) = 1 and SR(1) = 0 PG Notes: 1. State will automatically move to READ state at the completion of the operation. 2. Also known as Erase Suspend/Program Suspend Legacy Method. Table 5.15 Program Unlock State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Unlock 2 NOT a valid “Write-to-Buffer-Abort Reset” Command Address RA xh x555h x2AAh NOT x555h xh NOT x2AAh xh Data RD xF0h x70h x55h xh NOT xF0h xh NOT x55h - - WBUL1 - - WBUL2 - PG PG - - - - WBUL1 SR(3) = 1 DQ(1) = 1 - WBUL2 SR(3) = 1 WBUL2 READ - - - PG PG - - - DQ(1) = 1 PGSR - (return) - - - Table 5.16 Program Suspend State Command Transition Current State Command and Condition Read Status Register Read Enter Status Register Clear Erase Resume Enhanced Method (2) Program Resume Enhanced Method Address RA x555h x555h xh xh Data RD x70h x71h x30h x50h PSR (1) - PSR PGSR (PSR) - - - PS - PS PSSR (PS) PS PG PG PSSR - (return) - - - - Notes: 1. State will automatically move to PS state by tPSL. 2. Also known as Erase Resume/Program Resume Legacy Method. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 51 D at a S hee t Table 5.17 Lock Register State Command Transition Command and Condition Current State Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Command Set Exit Entry Command Set Exit PPB Lock Bit Set Entry Password Word Count Address RA xh x555h x555h xh xh xh Xh Data RD xF0h x70h x71h x90h x00h xA0h x03h LR - LR READ LRSR (LR) LR LREXT - LRPG1 - LRPG1 - LRPG1 - - - - - - - - - - - - LRPG - LRPG - LRSR (LRPG) LRSR - (return) - - - - - - - LREXT - LREXT - - - - READ - READ Table 5.18 CFI State Command Transition Command and Condition Current State Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Address RA xh x555h x555h Data RD xF0h x70h x71h CFI - CFI READ CFISR (CFI) CFI CFISR - (return) - - - Table 5.19 Secure Silicon Sector State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Address RA xh x555h x555h x555h Data RD xF0h x70h x71h xAAh - SSR READ SSRSR (SSR) SSR SSRUL1 SSR Table 5.20 Secure Silicon Sector Unlock State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Unlock 2 Word Program Entry Write to Buffer Enter Comman d Set Exit Entry Address RA xh x555h x2AAh x555h (SA)xh x555h NOT x555h xh NOT x2AAh xh Data RD xF0h x70h x55h xA0h x25h x90h xh NOT xF0h xh NOT x55h - - SSRPG SSRPG - - NOT a valid “Write-to-Buffer-Abort Reset” Command SSRUL1 DQ(1) = 1 SSRUL1 READ SSRSR (SSR) SSRUL2 - - - - - - - SR(3) = 1 SSRUL2 DQ(1) = 1 SSRUL2 SSR SSRPG1 SSR_WB - - SSRPG SSRPG SSREXT SR(3) = 1 52 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.21 Secure Silicon Sector Program State Command Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Unlock 1 Command Set Exit Address RA xh x555h x555h x555h xh Data RD xF0h x70h x71h xAAh x00h - SSRPG1 - - SSRPG1 - - SSR_WB - - - - - SSR_WB_D - - - - - SSRPG1 WC > 256 or SA ≠ SA SSR_WB WC ≤ 256 and SA = SA WC < 0 or Write Buffer ≠ Write Buffer SSR_WB_D WC > 0 and Write Buffer = Write Buffer SR(7) = 0 - SR(7) = 1 - SR(7) = 1 and DQ(1) = 0 SSRPG SSRPG SSR SSRSR (SSRPG) READ - DQ(1) = 1 - - SSRUL1 SR(3) = 1 SSRSR - (return) - - - - - SSREXT - SSREXT - SSRSR (SSR) - - READ Table 5.22 Password Protection Command State Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Password ASO Unlock Enter Password ASO Unlock Start Command Set Exit Entry Command Set Exit Program Entry Password Word Count Address RA xh x555h x555h 0h 0h xh xh xh Xh Data RD xF0h x70h x71h x25h x29h x90h x00h xA0h x03h PP - PP READ PPSR (PP) PP PPWB25 - PPEXT - PPPG1 - PPWB25 - PPWB25 - - - - - - - - PPD WC > 0 PPD WC ≤ 0 - - - - - - - - - - PPPG1 PPD PPPG1 PPPG - - - - - - - - - - PPSR (PPPG) - - - - - - - PPPG - PPPG PPSR - (return) - - - - - - - - - PPEXT - PPEXT - - - - - - READ - - December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 53 D at a S hee t Table 5.23 Non-Volatile Protection Command State Transition Current State Command and Condition PPB PPBPG1 Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Command Set Exit Entry Command Set Exit Program Entry DYB Set Start All PPB Erase Enter All PPB Erase Start Address RA xh x555h x555h xh xh xh (SA)xh Xh 0h Data RD xF0h x70h x71h x90h x00h xA0h x00h x80h x30h - PPB READ PPBSR (PPB) PPB PPBEXT - PPBPG1 - PPBPG1 - - PPBPG1 READ - - - PPBPG - PPB - PPBER PPBSR (PPBPG) - - - - - - - - - - - - SR(7) = 0 - PPBPG PPBPG SR(7) = 1 READ SR(7) = 0 - PPBER - READ PPBSR (PPBER) READ PPBER SR(7) = 1 READ PPBSR - (return) - - - - - - - - - PPBEXT - PPBEXT - - - - READ - - - - Table 5.24 PPB Lock Bit Command State Transition Current State Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Command Set Exit Entry Command Set Exit Program Entry Address RA xh x555h x555h xh xh xh Data RD xF0h x70h x71h x90h x00h xA0h PPBLB PPBLBEXT - PPBLBSET PPBLB - PPBLB READ PPBLBSR (PPBLB) PPBLBSR - (return) - - - - - - PPBLBSET LR(2) = 0 and LR(5) = 0 PPBLBSET - - - - PPBLB - PPBLBEXT - PPBLBEXT - - - - READ - Table 5.25 Volatile Sector Protection Command State Transition Current State DYB 54 Command and Condition Read Software Reset / ASO Exit Status Register Read Enter Status Register Clear Command Set Exit Entry Command Set Exit Program Entry DYB Set Start DYB Clear Start Address RA xh x555h x555h xh xh xh (SA)xh (SA)xh Data RD xF0h x70h x71h x90h x00h xA0h x00h x01h - DYB READ DYBSR (DYB) DYB DTBEXT - DYBSET - - DYBSR - (return) - - - - - - - - DYBSET - DYBSET - - - - - - DYB DYB DYBEXT - DYBEXT - - - - READ - - - GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 5.26 State Transition Definitions (Sheet 1 of 2) Current State Command Transition Definition BLCK Table 5.8 Blank Check CER Table 5.8 Chip Erase Start CFI Table 5.18 ID (Autoselect) CFISR Table 5.18 ID (Autoselect) - Status Register Read DYB Table 5.25 DYB ASO DYBEXT Table 5.25 DYB ASO - Command Exit DYBSET Table 5.25 DYB ASO - Set DYBSR Table 5.25 DYB ASO - Status Register Read ER Table 5.8 Erase Enter ERSR Table 5.8 Erase - Status Register Read ERUL1 Table 5.8 Erase - Unlock Cycle 1 ERUL2 Table 5.8 Erase - Unlock Cycle 2 ES Table 5.9 Erase Suspended ESDYB Table 5.11 Erase Suspended - DYB ASO ESDYBEXT Table 5.11 Erase Suspended - DYB Command Exit ESDYBSET Table 5.11 Erase Suspended - DYB Set/Clear ESPG Table 5.12 Erase Suspended - Program ESPGSR Table 5.12 Erase Suspended - Program - Status Register Read ESPG1 Table 5.12 Erase Suspended - Word Program ESPS Table 5.13 Erase Suspended - Program Suspended ESPSR Table 5.13 Erase Suspended - Program Suspend ESPSSR Table 5.13 Erase Suspended - Program Suspend - Status Register Read ESPSUL1 Table 5.13 Erase Suspended - Program Suspend - Unlock 1 ESPSUL2 Table 5.13 Erase Suspended - Program Suspend - Unlock 2 ESR Table 5.9 Erase Suspend Request ESSR Table 5.9 Erase Suspended - Status Register Read ESUL1 Table 5.10 Erase Suspended - Unlock Cycle 1 ESUL2 Table 5.10 Erase Suspended - Unlock Cycle 2 ES_WB Table 5.12 Erase Suspended - Write to Buffer ES_WB_D Table 5.12 Erase Suspended - Write to Buffer Data LR Table 5.17 Lock Register LREXT Table 5.17 Lock Register - Command Exit LRPG Table 5.17 Lock Register - Program LRPG1 Table 5.17 Lock Register - Program Start LRSR Table 5.17 Lock Register - Status Register Read PBF Table 5.14 Page Buffer Full PG Table 5.14 Program PGSR Table 5.15 Program - Status Register Read PG1 Table 5.14 Word Program PP Table 5.22 Password ASO PPB Table 5.23 PPB PPBER Table 5.23 PPB - Erase PPBEXT Table 5.23 PPB - Command Exit PPBLB Table 5.24 PPB Lock Bit PPBLBEXT Table 5.24 PPB Lock Bit - Command Exit PPBLBSET Table 5.24 PPB Lock Bit - Set PPBLBSR Table 5.24 PPB Lock Bit - Status Register Read PPBPG Table 5.23 PPB - Program December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 55 D at a S hee t Table 5.26 State Transition Definitions (Sheet 2 of 2) Current State 56 Command Transition Definition PPBPG1 Table 5.23 PPB - Program Request PPBSR Table 5.23 PPB - Status Register Read PPD Table 5.22 Password ASO - Data PPEXT Table 5.22 Password ASO - Command Exit PPPG Table 5.22 Password ASO - Program PPPG1 Table 5.22 Password ASO - Program Request PPSR Table 5.22 Password ASO - Status Register Read PS Table 5.16 Program Suspended PSR Table 5.16 Program Suspend Request PSSR Table 5.16 Program Suspended - Status Register Read PPWB25 Table 5.22 Password ASO - Unlock READ Table 5.6 Read Array READSR Table 5.6 Read Status Register READUL1 Table 5.7 Read - Unlock Cycle 1 READUL2 Table 5.7 Read - Unlock Cycle 2 SER Table 5.8 Sector Erase Start SSR Table 5.19 Secure Silicon SSREXT Table 5.21 Secure Silicon - Command Exit SSRPG Table 5.21 Secure Silicon - Program SSRPG1 Table 5.21 Secure Silicon - Word Program SSRSR Table 5.21 Secure Silicon - Status Register Read SSRUL1 Table 5.20 Secure Silicon - Unlock Cycle 1 SSRUL2 Table 5.20 Secure Silicon - Unlock Cycle 2 SSR_WB Table 5.21 Secure Silicon - Write to Buffer SSR_WB_D Table 5.21 Secure Silicon - Write to Buffer - Write Data WB Table 5.14 Write to Buffer WBUL1 Table 5.15 Write Buffer - Unlock Cycle 1 WBUL2 Table 5.15 Write Buffer - Unlock Cycle 2 WB_D Table 5.14 Write to Buffer Write Data GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 6. She et Software Interface Reference 6.1 Command Summary Command Sequence (Note 1) Cycles Table 6.1 Command Definitions (Sheet 1 of 3) Bus Cycles (Notes 2-5) First Second Addr Data 1 RA RD Reset/ASO Exit (Notes 7, 16) 1 XXX F0 Data XXX RD Third Fourth Addr Data Addr Fifth Data Sixth Seventh Addr Data Addr Data Status Register Read 2 555 70 Status Register Clear 1 555 71 Word Program 4 555 AA 2AA 55 555 A0 PA PD Write to Buffer 6 555 AA 2AA 55 SA 25 SA WC WBL PD WBL PD Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 11) 3 555 AA 2AA 55 555 F0 Chip Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 555 10 Sector Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 SA 30 Erase Suspend/Program Suspend Legacy Method (Note 9) 1 XXX B0 1 XXX 30 Program Suspend Enhanced Method 1 XXX 51 Program Resume Enhanced Method 1 XXX 50 Blank Check 1 (SA) 555 33 ID-CFI (Autoselect) ASO Read (Note 6) Addr ID (Autoselect) Entry 3 555 AA 2AA 55 (SA) 555 90 CFI Enter (Note 8) 1 (SA) 55 98 ID-CFI Read 1 RA RD Reset/ASO Exit (Notes 7, 16) 1 XXX F0 WBL PD WBL PD Addr Data Erase Suspend Enhanced Method Erase Resume/Program Resume Legacy Method (Note 10) Erase Resume Enhanced Method Secure Silicon Region (SSR) ASO Secure Silicon Region Command Definitions 2AA 55 (SA) 555 88 AA 2AA 55 555 A0 PA PD 555 AA 2AA 55 SA 25 SA WC 1 SA 29 Write-to-Buffer-Abort Reset (Note 11) 3 555 AA 2AA 55 555 F0 SSR Exit (Note 11) 4 555 AA 2AA 55 555 90 XX 0 Reset/ASO Exit (Notes 7, 16) 1 XXX F0 SSR Entry 3 555 AA Read (Note 6) Word Program 1 RA RD 4 555 Write to Buffer 6 Program Buffer to Flash (confirm) December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 57 D at a S hee t Command Sequence (Note 1) Cycles Table 6.1 Command Definitions (Sheet 2 of 3) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Fifth Data Sixth Seventh Addr Data Addr Data Addr Data 2 PWD2 3 PWD 3 0 29 Lock Register Command Set Definitions Lock Register ASO Lock Register Entry 3 555 AA 2AA 55 Program (Note 15) 2 Read (Note 15) 1 XXX A0 XXX PD 0 RD Command Set Exit (Notes 12, 16) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 16) 1 XXX F0 555 40 Password Protection Command Set Definitions Password ASO Password ASO Entry 3 555 AA 2AA 55 PWDx 555 60 Program (Note 14) 2 XXX A0 PWA x Read (Note 13) 4 0 PWD0 1 PWD1 2 PWD2 3 PWD 3 Unlock 7 0 25 0 3 0 PWD0 1 PWD 1 Command Set Exit (Notes 12, 16) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 16) 1 XXX F0 PPB Entry 3 555 AA 2AA PPB Program (Note 17) 2 XXX A0 SA 0 All PPB Erase (Note 17) 2 XXX 80 0 30 PPB Read (Note 17) 1 SA RD (0) Command Set Exit (Notes 12, 16) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 16) 1 XXX F0 PPB (Non-Volatile Sector Protection) Non-Volatile Sector Protection Command Set Definitions 55 555 C0 PPB Lock Bit Global Non-Volatile Sector Protection Freeze Command Set Definitions 58 PPB Lock Entry 3 555 AA 2AA 55 PPB Lock Bit Cleared 2 XXX A0 XXX 0 PPB Lock Status Read (Note 17) 1 XXX RD (0) Command Set Exit (Notes 12, 16) 2 XXX 90 XXX 0 Reset/ASO Exit (Note 16) 1 XXX F0 555 50 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Command Sequence (Note 1) Cycles Table 6.1 Command Definitions (Sheet 3 of 3) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Data Fifth Addr Data Sixth Addr Data Seventh Addr Data DYB (Volatile Sector Protection) ASO Volatile Sector Protection Command Set Definitions DYB ASO Entry 3 555 AA 2AA 55 DYB Set (Note 17) 2 XXX A0 SA 0 DYB Clear (Note 17) 2 XXX A0 SA 1 DYB Status Read (Note 17) 1 SA RD (0) Command Set Exit (Notes 12, 16) 2 XXX 90 XXX 0 Reset/ASO Exit (Note 16) 1 XXX F0 555 E0 Legend: X = Don't care. RA = Address of the memory to be read. RD = Data read from location RA during read operation. PA = Address of the memory location to be programmed. PD = Data to be programmed at location PA. SA = Address of the sector selected. Address bits AMAX-A16 uniquely select any sector. WBL = Write Buffer Location. The address must be within the same Line. WC = Word Count is the number of write buffer locations to load minus 1. PWAx = Password address for word0 = 00h, word1 = 01h, word2 = 02h, and word3 = 03h. PWDx = Password data word0, word1, word2, and word3. Notes: 1. See Table 8.1, Interface States on page 67 for description of bus operations. 2. All values are in hexadecimal. 3. Except for the following, all bus cycles are write cycle: read cycle during Read, ID/CFI Read (Manufacturing ID / Device ID), Indicator Bits, Secure Silicon Region Read, SSR Lock Read, and 2nd cycle of Status Register Read . 4. Data bits DQ15-DQ8 are don't care in command sequences, except for RD, PD, WC and PWD. 5. Address bits AMAX-A11 are don't cares for unlock and command cycles, unless SA or PA required. (AMAX is the Highest Address pin.). 6. No unlock or command cycles required when reading array data. 7. The Reset command is required to return to reading array data when device is in the ID-CFI (autoselect) mode, or if DQ5 goes High (while the device is providing status data). 8. Command is valid when device is ready to read array data or when device is in ID-CFI (autoselect) mode. 9. The system can read and program/program suspend in non-erasing sectors, or enter the ID-CFI ASO, when in the Erase Suspend mode. The Erase Suspend command is valid only during a sector erase operation. 10. The Erase Resume/Program Resume command is valid only during the Erase Suspend/Program Suspend modes. 11. Issue this command sequence to return to READ mode after detecting device is in a Write-to-Buffer-Abort state. IMPORTANT: the full command sequence is required if resetting out of ABORT. 12. The Exit command returns the device to reading the array. 13. The password portion can be entered or read in any order as long as the entire 64-bit password is entered or read. 14. For PWDx, only one portion of the password can be programmed per each A0 command. Portions of the password must be programmed in sequential order (PWD0 - PWD3). 15. All Lock Register bits are one-time programmable. The program state = 0 and the erase state = 1. Also, both the Persistent Protection Mode Lock Bit and the Password Protection Mode Lock Bit cannot be programmed at the same time or the Lock Register Bits Program operation aborts and returns the device to read mode. Lock Register bits that are reserved for future use are undefined and may be 0’s or 1's. 16. If any of the Entry commands was issued, an Exit command must be issued to reset the device into read mode. 17. Protected State = 00h, Unprotected State = 01h. The sector address for DYB set, DYB clear, or PPB Program command may be any location within the sector - the lower order bits of the sector address are don't care. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 59 D at a 6.2 S hee t Device ID and Common Flash Interface (ID-CFI) ASO Map The Device ID portion of the ASO (word locations 0h to 0Fh) provides manufacturer ID, device ID, Sector Protection State, and basic feature set information for the device. ID-CFI Location 02h displays sector protection status for the sector selected by the sector address (SA) used in the ID-CFI enter command. To read the protection status of more than one sector it is necessary to exit the ID ASO and enter the ID ASO using the new SA. The access time to read location 02h is always tACC and a read of this location requires CE# to go High before the read and return Low to initiate the read (asynchronous read access). Page mode read between location 02h and other ID locations is not supported. Page mode read between ID locations other than 02h is supported. For additional information see ID-CFI ASO on page 35. Table 6.2 ID (Autoselect) Address Map Description Address Manufacture ID (SA) + 0000h Device ID (SA) + 0001h 227Eh (SA) + 0002h Sector Protection State (1= Sector protected, 0= Sector unprotected). This protection state is shown only for the SA selected when entering ID-CFI ASO. Reading other SA provides undefined data. To read a different SA protection state ASO exit command must be used and then enter ID-CFI ASO again with the new SA. Protection Verification Read Data 0001h DQ15-DQ08 = 1 (Reserved) DQ7 - Factory Locked Secure Silicon Region 1 = Locked, 0 = Not Locked DQ6 - Customer Locked Secure Silicon Region 1 = Locked Indicator Bits (SA) + 0003h 0 = Not Locked DQ5 = 1 (Reserved) DQ4 - WP# Protects 0 = lowest address Sector 1 = highest address Sector DQ3 - DQ0 = 1 (Reserved) (SA) + 0004h Reserved (SA) + 0005h Reserved (SA) + 0006h Reserved (SA) + 0007h Reserved (SA) + 0008h Reserved RFU (SA) + 0009h Reserved (SA) + 000Ah Reserved (SA) + 000Bh Reserved Bit 0 - Status Register Support 1 = Status Register Supported 0 = Status Register not supported Bit 1 - DQ polling Support 1 = DQ bits polling supported Lower Software Bits (SA) + 000Ch 0 = DQ bits polling not supported Bit 3-2 - Command Set Support 11 = reserved 10 = reserved 01 = Reduced Command Set 00 = Classic Command set Bits 4-15 - Reserved = 0 60 Upper Software Bits (SA) + 000Dh Reserved Device ID (SA) + 000Eh 2228h = 1 Gb 2223h = 512 Mb 2222h = 256 Mb 2221h = 128 Mb Device ID (SA) + 000Fh 2201h GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 6.3 CFI Query Identification String Word Address Data (SA) + 0010h 0051h (SA) + 0011h 0052h (SA) + 0012h 0059h (SA) + 0013h 0002h (SA) + 0014h 0000h (SA) + 0015h 0040h (SA) + 0016h 0000h (SA) + 0017h 0000h (SA) + 0018h 0000h (SA) + 0019h 0000h (SA) + 001Ah 0000h Description Query Unique ASCII string “QRY” Primary OEM Command Set Address for Primary Extended Table Alternate OEM Command Set (00h = none exists) Address for Alternate OEM Extended Table (00h = none exists) Table 6.4 CFI System Interface String Word Address Data (SA) + 001Bh 0027h VCC Min. (erase/program) (D7-D4: volts, D3-D0: 100 mV) Description (SA) + 001Ch 0036h VCC Max. (erase/program) (D7-D4: volts, D3-D0: 100 mV) (SA) + 001Dh 0000h VPP Min. voltage (00h = no VPP pin present) (SA) + 001Eh 0000h VPP Max. voltage (00h = no VPP pin present) (SA) + 001Fh 0008h Typical timeout per single word write 2N µs (SA) + 0020h 0009h Typical timeout for max multi-byte program, 2N µs (00h = not supported) (SA) + 0021h 0008h Typical timeout per individual block erase 2N ms 0012h (1 Gb) (SA) + 0022h 0011h (512 Mb) 0010h (256 Mb) Typical timeout for full chip erase 2N ms (00h = not supported) 000Fh (128 Mb) (SA) + 0023h 0001h Max. timeout for single word write 2N times typical (SA) + 0024h 0002h Max. timeout for buffer write 2N times typical (SA) + 0025h 0003h Max. timeout per individual block erase 2N times typical (SA) + 0026h 0003h Max. timeout for full chip erase 2N times typical (00h = not supported) December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 61 D at a S hee t Table 6.5 CFI Device Geometry Definition Word Address Data Description 001Bh (1 Gb) (SA) + 0027h 001Ah (512 Mb) 0019h (256 Mb) Device Size = 2N byte; 0018h (128 Mb) (SA) + 0028h 0001h (SA) + 0029h 0000h Flash Device Interface Description 0 = x8-only, 1 = x16-only, 2 = x8/x16 capable (SA) + 002Ah 0009h (SA) + 002Bh 0000h (SA) + 002Ch 0001h (SA) + 002Dh 00XXh (SA) + 002Eh 000Xh (SA) + 002Fh 0000h (SA) + 0030h 000Xh (SA) + 0031h 0000h (SA) + 0032h 0000h (SA) + 0033h 0000h (SA) + 0034h 0000h (SA) + 0035h 0000h (SA) + 0036h 0000h (SA) + 0037h 0000h (SA) + 0038h 0000h Max. number of byte in multi-byte write = 2N (00 = not supported) Number of Erase Block Regions within device 1 = Uniform Device, 2 = Boot Device Erase Block Region 1 Information (refer to JEDEC JESD68-01 or JEP137 specifications) 00FFh, 0003h, 0000h, 0002h =1 Gb 00FFh, 0001h, 0000h, 0002h = 512 Mb 00FFh, 0000h, 0000h, 0002h = 256 Mb 007Fh, 0000h, 0000h, 0002h = 128 Mb Erase Block Region 2 Information (refer to CFI publication 100) Erase Block Region 3 Information (refer to CFI publication 100) (SA) + 0039h 0000h (SA) + 003Ah 0000h (SA) + 003Bh 0000h Erase Block Region 4 Information (refer to CFI publication 100) 62 (SA) + 003Ch 0000h (SA) + 003Dh FFFFh Reserved (SA) + 003Eh FFFFh Reserved (SA) + 003Fh FFFFh Reserved GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 6.6 CFI Primary Vendor-Specific Extended Query (Sheet 1 of 2) Word Address Data (SA) + 0040h 0050h (SA) + 0041h 0052h (SA) + 0042h 0049h (SA) + 0043h 0031h (SA) + 0044h 0035h Description Query-unique ASCII string “PRI” Major version number, ASCII Minor version number, ASCII Address Sensitive Unlock (Bits 1-0) 00b = Required 01b = Not Required Process Technology (Bits 5-2) 0000b = 0.23 µm Floating Gate 0001b = 0.17 µm Floating Gate (SA) + 0045h 001Ch 0010b = 0.23 µm MirrorBit 0011b = 0.13 µm Floating Gate 0100b = 0.11 µm MirrorBit 0101b = 0.09 µm MirrorBit 0110b = 0.09 µm Floating Gate 0111b = 0.065 µm MirrorBit Eclipse 1000b = 0.065 µm MirrorBit 1001b = 0.045 µm MirrorBit (SA) + 0046h 0002h Erase Suspend 0 = Not Supported 1 = Read Only 2 = Read and Write (SA) + 0047h 0001h Sector Protect 00 = Not Supported 0000h Temporary Sector Unprotect 00 = Not Supported X = Number of sectors in smallest group (SA) + 0048h 01 = Supported (SA) + 0049h 0008h Sector Protect/Unprotect Scheme 04 = High Voltage Method 05 = Software Command Locking Method 08 = Advanced Sector Protection Method (SA) + 004Ah 0000h Simultaneous Operation 00 = Not Supported 0000h Burst Mode Type 00 = Not Supported X = Number of banks (SA) + 004Bh 01 = Supported Page Mode Type 00 = Not Supported (SA) + 004Ch 0003h 01 = 4 Word Page 02 = 8 Word Page 03=16 Word Page (SA) + 004Dh 0000h ACC (Acceleration) Supply Minimum 00 = Not Supported D7-D4: Volt D3-D0: 100 mV (SA) + 004Eh 0000h ACC (Acceleration) Supply Maximum 00 = Not Supported D7-D4: Volt D3-D0: 100 mV December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 63 D at a S hee t Table 6.6 CFI Primary Vendor-Specific Extended Query (Sheet 2 of 2) Word Address Data Description WP# Protection 00h = Flash device without WP Protect (No Boot) 01h = Eight 8 kB Sectors at TOP and Bottom with WP (Dual Boot) (SA) + 004Fh 0004h (Bottom) 0005h (Top) 02h = Bottom Boot Device with WP Protect (Bottom Boot) 03h = Top Boot Device with WP Protect (Top Boot) 04h = Uniform, Bottom WP Protect (Uniform Bottom Boot) 05h = Uniform, Top WP Protect (Uniform Top Boot) 06h = WP Protect for all sectors 07h = Uniform, Top and Bottom WP Protect 0001h Program Suspend 00 = Not Supported (SA) +0051h 0000h Unlock Bypass 00 = Not Supported (SA) + 0052h 0009h Secured Silicon Sector (Customer OTP Area) Size 2N (bytes) (SA) + 0050h 01 = Supported 01 = Supported Software Features bit 0: status register polling (1 = supported, 0 = not supported) bit 1: DQ polling (1 = supported, 0 = not supported) bit 2: new program suspend/resume commands (1 = supported, 0 = not supported) (SA) + 0053h 008Fh bit 3: word programming (1 = supported, 0 = not supported) bit 4: bit-field programming (1 = supported, 0 = not supported) bit 5: autodetect programming (1 = supported, 0 = not supported) bit 6: RFU bit 7: multiple writes per Line (1 = supported, 0 = not supported) (SA) + 0054h 0005h Page Size = 2N bytes (SA) + 0055h 0006h Erase Suspend Timeout Maximum < 2N (µs) (SA) + 0056h 0006h Program Suspend Timeout Maximum < 2N (µs) FFFFh Reserved (SA) + 0078h 0006h Embedded Hardware Reset Timeout Maximum < 2N (µs) Reset with Reset Pin (SA) + 0079h 0009h Non-Embedded Hardware Reset Timeout Maximum < 2N (µs) Power on Reset (SA) + 0057h to (SA) + 0077h 64 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Hardware Interface 7. Signal Descriptions 7.1 Address and Data Configuration Address and data are connected in parallel (ADP) via separate signal inputs and I/Os. 7.2 Input/Output Summary Table 7.1 I/O Summary Symbol 7.3 Type Description Hardware Reset. At VIL, causes the device to reset control logic to its standby state, ready for reading array data. RESET# Input CE# Input Chip Enable. At VIL, selects the device for data transfer with the host memory controller. OE# Input Output Enable. At VIL, causes outputs to be actively driven. At VIH, causes outputs to be high impedance (High-Z). WE# Input Write Enable. At VIL, indicates data transfer from host to device. At VIH, indicates data transfer is from device to host. AMAX-A0 Input Address inputs. A25-A0 for S29GL01GS A24-A0 for S29GL512S A23-A0 for S29GL256S A22-A0 for S29GL128S DQ15-DQ0 Input/Output Data inputs and outputs WP# Input Write Protect. At VIL, disables program and erase functions in the lowest or highest address 64-kword (128-kB) sector of the device. At VIH, the sector is not protected. WP# has an internal pull up; When unconnected WP# is at VIH. RY/BY# Output - open drain Ready/Busy. Indicates whether an Embedded Algorithm is in progress or complete. At VIL, the device is actively engaged in an Embedded Algorithm such as erasing or programming. At High-Z, the device is ready for read or a new command write - requires external pull-up resistor to detect the High-Z state. Multiple devices may have their RY/BY# outputs tied together to detect when all devices are ready. VCC Power Supply Core power supply VIO Power Supply Versatile IO power supply. VSS Power Supply Power supplies ground NC No Connect Not Connected internally. The pin/ball location may be used in Printed Circuit Board (PCB) as part of a routing channel. RFU No Connect Reserved for Future Use. Not currently connected internally but the pin/ball location should be left unconnected and unused by PCB routing channel for future compatibility. The pin/ball may be used by a signal in the future. DNU Reserved Do Not Use. Reserved for use by Spansion. The pin/ball is connected internally. The input has an internal pull down resistance to VSS. The pin/ball can be left open or tied to VSS on the PCB. Versatile I/O Feature The maximum output voltage level driven by, and input levels acceptable to, the device are determined by the VIO power supply. This supply allows the device to drive and receive signals to and from other devices on the same bus having interface signal levels different from the device core voltage. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 65 D at a 7.4 S hee t Ready/Busy# (RY/BY#) RY/BY# is a dedicated, open drain output pin that indicates whether an Embedded Algorithm, Power-On Reset (POR), or Hardware Reset is in progress or complete. The RY/BY# status is valid after the rising edge of the final WE# pulse in a command sequence, when VCC is above VCC minimum during POR, or after the falling edge of RESET#. Since RY/BY# is an open drain output, several RY/BY# pins can be tied together in parallel with a pull up resistor to VIO. If the output is Low (Busy), the device is actively erasing, programming, or resetting. (This includes programming in the Erase Suspend mode). If the output is High (Ready), the device is ready to read data (including during the Erase Suspend mode), or is in the standby mode. Table 5.3, Data Polling Status on page 42 shows the outputs for RY/BY# in each operation. If an Embedded algorithm has failed (Program / Erase failure as result of max pulses or Sector is locked), RY/BY# will stay Low (busy) until status register bits 4 and 5 are cleared and the reset command is issued. This includes Erase or Programming on a locked sector. 7.5 Hardware Reset The RESET# input provides a hardware method of resetting the device to standby state. When RESET# is driven Low for at least a period of tRP, the device immediately: terminates any operation in progress, exits any ASO, tristates all outputs, resets the Status Register, resets the EAC to standby state. CE# is ignored for the duration of the reset operation (tRPH). To meet the Reset current specification (ICC5) CE# must be held High. To ensure data integrity any operation that was interrupted should be reinitiated once the device is ready to accept another command sequence. 66 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 8. She et Signal Protocols The following sections describe the host system interface signal behavior and timing for the 29GL-S family flash devices. 8.1 Interface States Table 8.1 describes the required value of each interface signal for each interface state. Table 8.1 Interface States Interface State Power-Off with Hardware Data Protection VCC VIO RESET# CE# OE# WE# AMAX-A0 DQ15-DQ0 < VLKO ≤ VCC X X X X X High-Z X X X X X High-Z L X X X X High-Z H H X X X High-Z H L X X Valid Output Available H L H H Valid High-Z H L L H Valid Output Valid Power-On (Cold) Reset ≥ VCC min Hardware (Warm) Reset ≥ VCC min Interface Standby ≥ VCC min Automatic Sleep (Notes 1, 3) ≥ VCC min Read with Output Disable (Note 2) ≥ VCC min Random Read ≥ VCC min Page Read ≥ VCC min Write ≥ VCC min ≥ VIO min ≤ VCC ≥ VIO min ≤ VCC ≥ VIO min ≤ VCC ≥ VIO min ≤ VCC ≥ VIO min ≤ VCC ≥ VIO min ≥ VIO min ≤ VCC ≥ VIO min ≤ VCC H L L H H L H L AMAX-A4 Valid A3-A0 Modified Valid Output Valid Input Valid Legend: L = VIL H = VIH X = either VIL or VIH L/H = rising edge H/L = falling edge Valid = all bus signals have stable L or H level Modified = valid state different from a previous valid state Available = read data is internally stored with output driver controlled by OE# Notes: 1. WE# and OE# can not be at VIL at the same time. 2. Read with Output Disable is a read initiated with OE# High. 3. Automatic Sleep is a read/write operation where data has been driven on the bus for an extended period, without CE# going High and the device internal logic has gone into standby mode to conserve power. 8.2 Power-Off with Hardware Data Protection The memory is considered to be powered off when the core power supply (VCC) drops below the lock-out voltage (VLKO). When VCC is below VLKO, the entire memory array is protected against a program or erase operation. This ensures that no spurious alteration of the memory content can occur during power transition. During a power supply transition down to Power-Off, VIO should remain less than or equal to VCC. If VCC goes below VRST (Min) then returns above VRST (Min) to VCC minimum, the Power-On Reset interface state is entered and the EAC starts the Cold Reset Embedded Algorithm. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 67 D at a 8.3 8.3.1 S hee t Power Conservation Modes Interface Standby Standby is the default, low power, state for the interface while the device is not selected by the host for data transfer (CE# = High). All inputs are ignored in this state and all outputs except RY/BY# are high impedance. RY/BY# is a direct output of the EAC, not controlled by the Host Interface. 8.3.2 Automatic Sleep The automatic sleep mode reduces device interface energy consumption to the sleep level (ICC6) following the completion of a random read access time. The device automatically enables this mode when addresses remain stable for tACC + 30 ns. While in sleep mode, output data is latched and always available to the system. Output of the data depends on the level of the OE# signal but, the automatic sleep mode current is independent of the OE# signal level. Standard address access timings (tACC or tPACC) provide new data when addresses are changed. ICC6 in DC Characteristics on page 74 represents the automatic sleep mode current specification. Automatic sleep helps reduce current consumption especially when the host system clock is slowed for power reduction. During slow system clock periods, read and write cycles may extend many times their length versus when the system is operating at high speed. Even though CE# may be Low throughout these extended data transfer cycles, the memory device host interface will go to the Automatic Sleep current at tACC + 30 ns. The device will remain at the Automatic Sleep current for tASSB. Then the device will transition to the standby current level. This keeps the memory at the Automatic Sleep or standby power level for most of the long duration data transfer cycles, rather than consuming full read power all the time that the memory device is selected by the host system. However, the EAC operates independent of the automatic sleep mode of the host interface and will continue to draw current during an active Embedded Algorithm. Only when both the host interface and EAC are in their standby states is the standby level current achieved. 8.4 8.4.1 Read Read With Output Disable When the CE# signal is asserted Low, the host system memory controller begins a read or write data transfer. Often there is a period at the beginning of a data transfer when CE# is Low, Address is valid, OE# is High, and WE# is High. During this state a read access is assumed and the Random Read process is started while the data outputs remain at high impedance. If the OE# signal goes Low, the interface transitions to the Random Read state, with data outputs actively driven. If the WE# signal is asserted Low, the interface transitions to the Write state. Note, OE# and WE# should never be Low at the same time to ensure no data bus contention between the host system and memory. 68 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 8.4.2 She et Random (Asynchronous) Read When the host system interface selects the memory device by driving CE# Low, the device interface leaves the Standby state. If WE# is High when CE# goes Low, a random read access is started. The data output depends on the address map mode and the address provided at the time the read access is started. The data appears on DQ15-DQ0 when CE# is Low, OE# is Low, WE# remains High, address remains stable, and the asynchronous access times are satisfied. Address access time (tACC) is equal to the delay from stable addresses to valid output data. The chip enable access time (tCE) is the delay from stable CE# to valid data at the outputs. In order for the read data to be driven on to the data outputs the OE# signal must be Low at least the output enable time (tOE) before valid data is available. At the completion of the random access time from CE# active (tCE), address stable (tACC), or OE# active (tOE), whichever occurs latest, the data outputs will provide valid read data from the currently active address map mode. If CE# remains Low and any of the AMAX to A4 address signals change to a new value, a new random read access begins. If CE# remains Low and OE# goes High the interface transitions to the Read with Output Disable state. If CE# remains Low, OE# goes High, and WE# goes Low, the interface transitions to the Write state. If CE# returns High, the interface goes to the Standby state. Back to Back accesses, in which CE# remains Low between accesses, requires an address change to initiate the second access. See Asynchronous Read Operations on page 80. 8.4.3 Page Read After a Random Read access is completed, if CE# remains Low, OE# remains Low, the AMAX to A4 address signals remain stable, and any of the A3 to A0 address signals change, a new access within the same Page begins. The Page Read completes much faster (tPACC) than a Random Read access. 8.5 8.5.1 Write Asynchronous Write When WE# goes Low after CE is Low, there is a transition from one of the read states to the Write state. If WE# is Low before CE# goes Low, there is a transition from the Standby state directly to the Write state without beginning a read access. When CE# is Low, OE# is High, and WE# goes Low, a write data transfer begins. Note, OE# and WE# should never be Low at the same time to ensure no data bus contention between the host system and memory. When the asynchronous write cycle timing requirements are met the WE# can go High to capture the address and data values in to EAC command memory. Address is captured by the falling edge of WE# or CE#, whichever occurs later. Data is captured by the rising edge of WE# or CE#, whichever occurs earlier. When CE# is Low before WE# goes Low and stays Low after WE# goes High, the access is called a WE# controlled Write. When WE# is High and CE# goes High, there is a transition to the Standby state. If CE# remains Low and WE# goes High, there is a transition to the Read with Output Disable state. When WE# is Low before CE# goes Low and remains Low after CE# goes High, the access is called a CE# controlled Write. A CE# controlled Write transitions to the Standby state. If WE# is Low before CE# goes Low, the write transfer is started by CE# going Low. If WE# is Low after CE# goes High, the address and data are captured by the rising edge of CE#. These cases are referred to as CE# controlled write state transitions. Write followed by Read accesses, in which CE# remains Low between accesses, requires an address change to initiate the following read access. Back to Back accesses, in which CE# remains Low between accesses, requires an address change to initiate the second access. The EAC command memory array is not readable by the host system and has no ASO. The EAC examines the address and data in each write transfer to determine if the write is part of a legal command sequence. When a legal command sequence is complete the EAC will initiate the appropriate EA. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 69 D at a 8.5.2 S hee t Write Pulse “Glitch” Protection Noise pulses of less than 5 ns (typical) on WE# will not initiate a write cycle. 8.5.3 Logical Inhibit Write cycles are inhibited by holding OE# at VIL, or CE# at VIH, or WE# at VIH. To initiate a write cycle, CE# and WE# must be Low (VIL) while OE# is High (VIH). 70 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 9. She et Electrical Specifications 9.1 Absolute Maximum Ratings Table 9.1 Absolute Maximum Ratings Storage Temperature Plastic Packages -65°C to +150°C Ambient Temperature with Power Applied -65°C to +125°C Voltage with Respect to Ground All pins other than RESET# (Note 1) -0.5V to (VIO + 0.5V) RESET# (Note 1) -0.5V to (VCC + 0.5V) Output Short Circuit Current (Note 2) 100 mA VCC -0.5V to +4.0V VIO -0.5V to +4.0V Notes: 1. Minimum DC voltage on input or I/O pins is -0.5V. During voltage transitions, input or I/O pins may undershoot VSS to -2.0V for periods of up to 20 ns. See Figure 9.3 on page 73. Maximum DC voltage on input or I/O pins is VCC +0.5V. During voltage transitions, input or I/O pins may overshoot to VCC +2.0V for periods up to 20 ns. See Figure 9.4 on page 73 2. No more than one output may be shorted to ground at a time. Duration of the short circuit should not be greater than one second. 3. Stresses above those listed under Absolute Maximum Ratings may cause permanent damage to the device. This is a stress rating only; functional operation of the device at these or any other conditions above those indicated in the operational sections of this data sheet is not implied. Exposure of the device to absolute maximum rating conditions for extended periods may affect device reliability. 9.2 Latchup Characteristics This product complies with JEDEC standard JESD78C latchup testing requirements. 9.3 9.3.1 Operating Ranges Temperature Ranges Industrial (I) Devices Ambient Temperature (TA) 9.3.2 -40°C to +85°C Power Supply Voltages VCC VIO 2.7V to 3.6V 1.65V to VCC + 200 mV Operating ranges define those limits between which the functionality of the device is guaranteed. 9.3.3 Power-Up and Power-Down During power-up or power-down VCC must always be greater than or equal to VIO (VCC ≥ VIO). The device ignores all inputs until a time delay of tVCS has elapsed after the moment that VCC and VIO both rise above, and stay above, the minimum VCC and VIO thresholds. During tVCS the device is performing power on reset operations. During power-down or voltage drops below VCC Lockout maximum (VLKO), the VCC and VIO voltages must drop below VCC Reset (VRST) minimum for a period of tPD for the part to initialize correctly when VCC and VIO again rise to their operating ranges. See Figure 9.2 on page 72. If during a voltage drop the VCC stays above VLKO maximum the part will stay initialized and will work correctly when VCC is again above VCC minimum. If the part locks up from improper initialization, a hardware reset can be used to initialize the part correctly. Normal precautions must be taken for supply decoupling to stabilize the VCC and VIO power supplies. Each device in a system should have the VCC and VIO power supplies decoupled by a suitable capacitor close to the package connections (this capacitor is generally on the order of 0.1 µF). At no time should VIO be greater then 200 mV above VCC (VCC ≥ VIO - 200 mV). December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 71 D at a S hee t Table 9.2 Power-Up/Power-Down Voltage and Timing Symbol Parameter Min Max Unit VCC VCC Power Supply 2.7 3.6 V VLKO VCC level below which re-initialization is required (Note 1) 2.25 2.5 V VRST VCC and VIO Low voltage needed to ensure initialization will occur (Note 1) 1.0 V tVCS VCC and VIO ≥ minimum to first access (Note 1) 300 µs tPD Duration of VCC ≤ VRST(min) (Note 1) 15 µs Note: 1. Not 100% tested. Figure 9.1 Power-up P o w e r S u p p ly V o lta g e V cc (m a x) V cc (m in ) V IO (m a x) V IO (m in) V cc tVC S V IO F u ll D e vice A ccess tim e Figure 9.2 Power-down and Voltage Drop V C C a n d V IO V C C (m a x) N o D e vice A cce ss A llo w e d V C C (m in ) tVC S V L K O (m a x) F u ll D e vice A ccess A llo w e d V R S T (m in ) tP D tim e 72 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 9.3.4 She et Input Signal Overshoot Figure 9.3 Maximum Negative Overshoot Waveform 20 ns 20 ns VIL max VIL min –2 .0 V 20 n s Figure 9.4 Maximum Positive Overshoot Waveform 20 ns VIO + 2.0 V VIH max VIH min 20 ns December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 20 ns 73 D at a 9.4 S hee t DC Characteristics Table 9.3 DC Characteristics (-40°C to +85°C) Parameter Typ (Note 2) Max Unit VIN = VSS to VCC, VCC = VCC max +0.02 ±1.0 µA Description Test Conditions Min ILI Input Load Current ILO Output Leakage Current VOUT = VSS to VCC, VCC = VCC max +0.02 ±1.0 µA ICC1 VCC Active Read Current CE# = VIL, OE# = VIH, Address switching@ 5 MHz, VCC = VCC max 55 60 mA ICC2 VCC Intra-Page Read Current CE# = VIL, OE# = VIH, Address switching@ 33 MHz, VCC = VCC max 9 25 mA ICC3 VCC Active Erase/Program Current (Notes 1, 2) CE# = VIL, OE# = VIH, VCC = VCC max 45 100 mA ICC4 VCC Standby Current CE#, RESET#, OE# = VIH, VIH = VIO VIL = VSS, VCC = VCC max 70 100 µA ICC5 VCC Reset Current (Notes 2, 7) CE# = VIH, RESET# = VIL, VCC = VCC max 10 20 mA VIH = VIO, VIL = VSS , VCC = VCC max, tACC + 30 ns 3 6 mA VIH = VIO, VIL = VSS, VCC = VCC max, tASSB 100 150 µA RESET# = VIO, CE# = VIO, OE# = VIO, VCC = VCC max, 53 80 mA -0.5 0.3 x VIO V 0.7 x VIO VIO + 0.4 V 0.15 x VIO V ICC6 Automatic Sleep Mode (Note 3) ICC7 VCC Current during power up (Notes 2, 6) VIL Input Low Voltage (Note 4) VIH Input High Voltage (Note 4) VOL Output Low Voltage (Notes 4, 8) IOL = 100 µA for DQ15-DQ0; IOL = 2 mA for RY/BY# VOH Output High Voltage (Note 4) IOH = 100 µA VLKO Low VCC Lock-Out Voltage (Note 2) VRST Low VCC Power on Reset Voltage (Note 2) 0.85 x VIO V 2.25 2.5 1.0 V V Notes: 1. ICC active while Embedded Algorithm is in progress. 2. Not 100% tested. 3. Automatic sleep mode enables the lower power mode when addresses remain stable for the specified designated time. 4. VIO = 1.65V to VCC or 2.7V to VCC depending on the model. 5. VCC = 3V and VIO = 3V or 1.8V. When VIO is at 1.8V, I/O pins cannot operate at >1.8V. 6. During power-up there are spikes of current demand, the system needs to be able to supply this current to insure the part initializes correctly. 7. If an embedded operation is in progress at the start of reset, the current consumption will remain at the embedded operation specification until the embedded operation is stopped by the reset. If no embedded operation is in progress when reset is started, or following the stopping of an embedded operation, ICC5 will be drawn during the remainder of tRPH. After the end of tRPH the device will go to standby mode until the next read or write. 8. The recommended pull-up resistor for RY/BY# output is 5k to 10k Ohms. 74 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 9.4 DC Characteristics (-40°C to +105°C) Parameter Description Test Conditions Min Typ (Note 2) Max Unit ILI Input Load Current VIN = VSS to VCC, VCC = VCC max +0.02 ±1.0 µA ILO Output Leakage Current VOUT = VSS to VCC, VCC = VCC max +0.02 ±1.0 µA ICC1 VCC Active Read Current CE# = VIL, OE# = VIH, Address switching@ 5 MHz, VCC = VCC max 55 60 mA ICC2 VCC Intra-Page Read Current CE# = VIL, OE# = VIH, Address switching@ 33 MHz, VCC = VCC max 9 25 mA ICC3 VCC Active Erase/Program Current (Notes 1, 2) CE# = VIL, OE# = VIH, VCC = VCC max 45 100 mA ICC4 VCC Standby Current CE#, RESET#, OE# = VIH, VIH = VIO VIL = VSS, VCC = VCC max 70 200 µA ICC5 VCC Reset Current (Notes 2, 7) CE# = VIH, RESET# = VIL, VCC = VCC max 10 20 mA VIH = VIO, VIL = VSS , VCC = VCC max, tACC + 30 ns 3 6 mA VIH = VIO, VIL = VSS, VCC = VCC max, tASSB 100 200 µA RESET# = VIO, CE# = VIO, OE# = VIO, VCC = VCC max, 53 80 mA ICC6 Automatic Sleep Mode (Note 3) ICC7 VCC Current during power up (Notes 2, 6) VIL Input Low Voltage (Note 4) -0.5 0.3 x VIO V VIH Input High Voltage (Note 4) 0.7 x VIO VIO + 0.4 V VOL Output Low Voltage (Notes 4, 8) IOL = 100 µA for DQ15-DQ0; IOL = 2 mA for RY/BY# 0.15 x VIO V VOH Output High Voltage (Note 4) IOH = 100 µA VLKO Low VCC Lock-Out Voltage (Note 2) VRST Low VCC Power on Reset Voltage (Note 2) 0.85 x VIO V 2.25 2.5 1.0 V V Notes: 1. ICC active while Embedded Algorithm is in progress. 2. Not 100% tested. 3. Automatic sleep mode enables the lower power mode when addresses remain stable for the specified designated time. 4. VIO = 1.65V to VCC or 2.7V to VCC depending on the model. 5. VCC = 3V and VIO = 3V or 1.8V. When VIO is at 1.8V, I/O pins cannot operate at >1.8V. 6. During power-up there are spikes of current demand, the system needs to be able to supply this current to insure the part initializes correctly. 7. If an embedded operation is in progress at the start of reset, the current consumption will remain at the embedded operation specification until the embedded operation is stopped by the reset. If no embedded operation is in progress when reset is started, or following the stopping of an embedded operation, ICC7 will be drawn during the remainder of tRPH. After the end of tRPH the device will go to standby mode until the next read or write. 8. The recommended pull-up resistor for RY/BY# output is 5k to 10k Ohms. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 75 D at a 9.5 S hee t Capacitance Characteristics Table 9.5 Connector Capacitance for FBGA (LAA) Package Parameter Symbol Parameter Description Test Setup Typ Max Unit CIN Input Capacitance VIN = 0 8 9 pF COUT Output Capacitance VOUT = 0 5 7 pF CIN2 Control Pin Capacitance VIN = 0 4 8 pF RY/BY# Output Capacitance VOUT = 0 3 4 pF Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Table 9.6 Connector Capacitance for FBGA (LAE) Package Parameter Symbol Parameter Description Test Setup Typ Max Unit CIN Input Capacitance VIN = 0 7 8 pF COUT Output Capacitance VOUT = 0 5 6 pF CIN2 Control Pin Capacitance VIN = 0 3 7 pF RY/BY# Output Capacitance VOUT = 0 3 4 pF Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Table 9.7 Connector Capacitance for TSOP Package Parameter Symbol Parameter Description Test Setup Typ Max Unit CIN Input Capacitance VIN = 0 7 8 pF COUT Output Capacitance VOUT = 0 5 6 pF CIN2 Control Pin Capacitance VIN = 0 3 7 pF RY/BY# Output Capacitance VOUT = 0 3 4 pF Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. 76 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et 10. Timing Specifications 10.1 Key to Switching Waveforms Waveform Inputs Outputs Steady Changing from H to L Changing from L to H 10.2 Don't Care, Any Change Permitted Changing, State Unknown Does Not Apply Center Line is High Impedance State (High-Z) AC Test Conditions Figure 10.1 Test Setup Device Under Test CL Table 10.1 Test Specification All Speeds Units Output Load Capacitance, CL Parameter 30 pF Input Rise and Fall Times (Note 1) 1.5 ns 0.0-VIO V Input timing measurement reference levels VIO/2 V Output timing measurement reference levels VIO/2 V Input Pulse Levels Note: 1. Measured between VIL max and VIH min. Figure 10.2 Input Waveforms and Measurement Levels VIO 0.0 V Input 0.5 VIO December 21, 2012 S29GL_128S_01GS_00_07 Measurement Level GL-S MirrorBit® Family 0.5 VIO Output 77 D at a 10.3 S hee t Power-On Reset (POR) and Warm Reset Normal precautions must be taken for supply decoupling to stabilize the VCC and VIO power supplies. Each device in a system should have the VCC and VIO power supplies decoupled by a suitable capacitor close to the package connections (this capacitor is generally on the order of 0.1 µF). Table 10.2 Power ON and Reset Parameters Parameter Description Limit Value Unit Min 300 µs VIO Setup Time to first access (Notes 1, 2) Min 300 µs RESET# Low to CE# Low Min 35 µs tVCS VCC Setup Time to first access (Notes 1, 2) tVIOS tRPH tRP RESET# Pulse Width Min 200 ns tRH Time between RESET# (High) and CE# (low) Min 50 ns tCEH CE# Pulse Width High Min 20 ns Notes: 1. Not 100% tested. 2. Timing measured from VCC reaching VCC minimum and VIO reaching VIO minimum to VIH on Reset and VIL on CE#. 3. RESET# Low is optional during POR. If RESET is asserted during POR, the later of tRPH, tVIOS, or tVCS will determine when CE# may go Low. If RESET# remains Low after tVIOS, or tVCS is satisfied, tRPH is measured from the end of tVIOS, or tVCS. RESET must also be High tRH before CE# goes Low. 4. VCC ≥ VIO - 200 mV during power-up. 5. VCC and VIO ramp rate can be non-linear. 6. Sum of tRP and tRH must be equal to or greater than tRPH. 10.3.1 Power-On (Cold) Reset (POR) During the rise of power supplies the VIO supply voltage must remain less than or equal to the VCC supply voltage. VIH also must remain less than or equal to the VIO supply. The Cold Reset Embedded Algorithm requires a relatively long, hundreds of µs, period (tVCS) to load all of the EAC algorithms and default state from non-volatile memory. During the Cold Reset period all control signals including CE# and RESET# are ignored. If CE# is Low during tVCS the device may draw higher than normal POR current during tVCS but the level of CE# will not affect the Cold Reset EA. CE# or OE# must transition from High to Low after tVCS for a valid read or write operation. RESET# may be High or Low during tVCS. If RESET# is Low during tVCS it may remain Low at the end of tVCS to hold the device in the Hardware Reset state. If RESET# is High at the end of tVCS the device will go to the Standby state. When power is first applied, with supply voltage below VRST then rising to reach operating range minimum, internal device configuration and warm reset activities are initiated. CE# is ignored for the duration of the POR operation (tVCS or tVIOS). RESET# Low during this POR period is optional. If RESET# is driven Low during POR it must satisfy the Hardware Reset parameters tRP and tRPH. In which case the Reset operations will be completed at the later of tVCS or tVIOS or tRPH. During Cold Reset the device will draw ICC7 current. Figure 10.3 Power-Up Diagram tVCS VCC tVIOS VIO RESET# tRH tCEH CE# 78 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 10.3.2 She et Hardware (Warm) Reset During Hardware Reset (tRPH) the device will draw ICC5 current. When RESET# continues to be held at VSS, the device draws CMOS standby current (ICC4). If RESET# is held at VIL, but not at VSS, the standby current is greater. If a Cold Reset has not been completed by the device when RESET# is asserted Low after tVCS, the Cold Reset# EA will be performed instead of the Warm RESET#, requiring tVCS time to complete. See Figure 10.4, Hardware Reset on page 79. After the device has completed POR and entered the Standby state, any later transition to the Hardware Reset state will initiate the Warm Reset Embedded Algorithm. A Warm Reset is much shorter than a Cold Reset, taking tens of µs (tRPH) to complete. During the Warm Reset EA, any in progress Embedded Algorithm is stopped and the EAC is returned to its POR state without reloading EAC algorithms from non-volatile memory. After the Warm Reset EA completes, the interface will remain in the Hardware Reset state if RESET# remains Low. When RESET# returns High the interface will transit to the Standby state. If RESET# is High at the end of the Warm Reset EA, the interface will directly transit to the Standby state. If POR has not been properly completed by the end of tVCS, a later transition to the Hardware Reset state will cause a transition to the Power-on Reset interface state and initiate the Cold Reset Embedded Algorithm. This ensures the device can complete a Cold Reset even if some aspect of the system Power-On voltage ramp-up causes the POR to not initiate or complete correctly. The RY/BY# pin is Low during cold or warm reset as an indication that the device is busy performing reset operations. Hardware Reset is initiated by the RESET# signal going to VIL. Figure 10.4 Hardware Reset tRP RESET# tRH tRPH tCEH CE# December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 79 D at a 10.4 S hee t AC Characteristics 10.4.1 Asynchronous Read Operations Table 10.3 Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +85°C) Parameter Speed Option Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 128 Mb, 256 Mb 90 100 110 Min ns CE# = VIL OE# = VIL 100 128 Mb, 256 Mb 90 OE# = VIL 110 100 Max ns 512 Mb, 1 Gb 100 90 110 100 Max ns 512 Mb, 1 Gb 100 128 Mb, 256 Mb tGLQV 100 512 Mb, 1 Gb 128 Mb, 256 Mb tPACC 90 Page Access Time 15 110 20 Max ns 512 Mb, 1 Gb 15 20 tOE Output Enable to Output Delay Max 25 ns tAXQX tOH Output Hold time from addresses, CE# or OE#, Whichever Occurs First Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 15 ns Read Min 0 ns Toggle and Data# Polling Min 10 ns Typ 5 µs Max 8 µs tOEH Output Enable Hold Time (Note 1) tASSB Automatic Sleep to Standby time (Note 1) CE# = VIL, Address stable Note: 1. Not 100% tested. Table 10.4 Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +85°C) Parameter Speed Options Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 128 Mb, 256 Mb 110 100 110 120 Min ns 512 Mb, 1 Gb CE# = VIL OE# = VIL 110 128 Mb, 256 Mb 100 OE# = VIL 120 110 Max ns 512 Mb, 1 Gb 110 128 Mb, 256 Mb 100 120 110 Max ns 512 Mb, 1 Gb 110 128 Mb, 256 Mb tPACC 100 Page Access Time 25 120 30 Max 512 Mb, 1 Gb ns 25 30 tOE Output Enable to Output Delay Max 35 ns tAXQX tOH Output Hold time from addresses, CE# or OE#, Whichever Occurs First Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 20 ns Read Min 0 ns Toggle and Data# Polling Min 10 ns Typ 5 µs Max 8 µs tGLQV tOEH Output Enable Hold Time (Note 1) tASSB Automatic Sleep to Standby time (Note 1) CE# = VIL, Address stable Note: 1. Not 100% tested. 80 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Table 10.5 Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +105°C) Parameter Speed Option Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 100 128 Mb, 256 Mb 100 tGLQV 120 110 Min ns 512 Mb, 1 Gb CE# = VIL OE# = VIL 110 128 Mb, 256 Mb 100 110 ns 512 Mb, 1 Gb 110 128 Mb, 256 Mb OE# = VIL 120 Max 100 120 110 Max ns 512 Mb, 1 Gb 110 128 Mb, 256 Mb tPACC 110 Page Access Time 15 120 20 Max ns 512 Mb, 1 Gb 15 20 tOE Output Enable to Output Delay Max 25 ns tAXQX tOH Output Hold time from addresses, CE# or OE#, Whichever Occurs First Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 15 ns Read Min 0 ns Toggle and Data# Polling Min 10 ns tOEH Output Enable Hold Time (Note 1) tASSB Automatic Sleep to Standby time (Note 1) CE# = VIL, Address stable Typ 5 µs Max 8 µs Note: 1. Not 100% tested. Table 10.6 Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +105°C) Parameter Speed Option Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 110 128 Mb, 256 Mb 110 130 120 Min ns 512 Mb, 1 Gb CE# = VIL OE# = VIL 120 128 Mb, 256 Mb 110 120 ns 120 128 Mb, 256 Mb OE# = VIL 130 Max 512 Mb, 1 Gb 110 130 120 Max ns 512 Mb, 1 Gb 120 128 Mb, 256 Mb tPACC 120 Page Access Time 25 130 30 Max 512 Mb, 1 Gb ns 25 30 tOE Output Enable to Output Delay Max 35 ns tAXQX tOH Output Hold time from addresses, CE# or OE#, Whichever Occurs First Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 20 ns Read Min 0 ns Toggle and Data# Polling Min 10 ns tGLQV tOEH Output Enable Hold Time (Note 1) tASSB Automatic Sleep to Standby time (Note 1) CE# = VIL, Address stable Typ 5 µs Max 8 µs Note: 1. Not 100% tested. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 81 D at a S hee t Figure 10.5 Back to Back Read (tACC) Operation Timing Diagram tACC tOH Amax-A0 tDF tCE tOH CE# tDF tOE tOH OE# DQ15-DQ0 Figure 10.6 Back to Back Read Operation (tRC)Timing Diagram tRC tACC tOH Amax-A0 tCE CE# tOE tOH tDF OE# DQ15-DQ0 Note: Back to Back operations, in which CE# remains Low between accesses, requires an address change to initiate the second access. Figure 10.7 Page Read Timing Diagram tACC Amax-A4 A3-A0 tCE CE# tOE OE# tPACC DQ15-DQ0 Note: Word Configuration: Toggle A0, A1, A2, and A3. 82 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 10.4.2 She et Asynchronous Write Operations Table 10.7 Write Operations Parameter VIO = 2.7V to VCC Description VIO = 1.65V to VCC Unit JEDEC Std tAVAV tWC Write Cycle Time (Note 1) Min 60 ns tAVWL tAS Address Setup Time Min 0 ns tASO Address Setup Time to OE# Low during toggle bit polling Min 15 ns tAH Address Hold Time Min 45 ns tAHT Address Hold Time From CE# or OE# High during toggle bit polling Min 0 ns tDVWH tDS Data Setup Time Min 30 ns tWHDX tDH Data Hold Time Min 0 ns tOEPH Output Enable High during toggle bit polling or following status register read. Min 20 ns tGHWL Read Recovery Time Before Write (OE# High to WE# Low) Min 0 ns tWLAX tGHWL tELWL tCS CE# Setup Time Min 0 ns tWHEH tCH CE# Hold Time Min 0 ns tWLWH tWP WE# Pulse Width Min 25 ns tWHWL tWPH WE# Pulse Width High Min 20 ns Note: 1. Not 100% tested. Figure 10.8 Back to Back Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCS tCH CE# OE# tWP tWPH WE# tDS tDH DQ15-DQ0 December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 83 D at a S hee t Figure 10.9 Back to Back (CE#VIL) Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCS CE# OE# tWP tWPH WE# tDS tDH DQ15-DQ0 Figure 10.10 Write to Read (tACC) Operation Timing Diagram tAH tAS tSR_W tACC tOH Amax-A0 tOH tCS tDF CE# tOH tOEH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 84 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Figure 10.11 Write to Read (tCE) Operation Timing Diagram tAH tAS tSR_W tACC tOH Amax-A0 tOH tCS tCH tCE tDF CE# tOH tOEH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 Figure 10.12 Read to Write (CE# VIL) Operation Timing Diagram tAS tACC tOH tAH Amax-A0 tCE tCH CE# tGHWL tOH tOE tDF OE# tWP WE# tDS tDH DQ15-DQ0 December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 85 D at a S hee t Figure 10.13 Read to Write (CE# Toggle) Operation Timing Diagram tAS tACC tOH tAH Amax-A0 tOH tCE tDF tCS tCH CE# tGHWL tOH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 Table 10.8 Erase/Program Operations Parameter VIO = 2.7V to VCC Description JEDEC Std tWHWH1 tWHWH1 tWHWH2 tWHWH2 VIO = 1.65V to VCC Unit Write Buffer Program Operation Typ (Note 3) µs Effective Write Buffer Program Operation per Word Typ (Note 3) µs Program Operation per Word or Page Typ (Note 3) µs Sector Erase Operation (Note 1) Typ (Note 3) ms tBUSY Erase/Program Valid to RY/BY# Delay Max 80 ns tSR/W Latency between Read and Write operations (Note 2) Min 10 ns tESL Erase Suspend Latency Max (Note 3) µs tPSL Program Suspend Latency Max (Note 3) µs tRB RY/BY# Recovery Time Min 0 µs Notes: 1. Not 100% tested. 2. Upon the rising edge of WE#, must wait tSR/W before switching to another address. 3. See Table 5.4 on page 46 and Table 5.5 on page 47 for specific values. 86 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Figure 10.14 Program Operation Timing Diagram Program Command Sequence (last two cycles) tAS tWC Addresses Read Status Data (last two cycles) 555h PA PA PA tAH CE# tCH OE# tWHWH1 tWP WE# tWPH tCS tDS tDH PD A0h Data Status DOUT tBUSY tRB RY/BY# Note: 1. PA = program address, PD = program data, DOUT is the true data at the program address. Figure 10.15 Chip/Sector Erase Operation Timing Diagram Erase Command Sequence (last two cycles) tAS tWC Addresses Read Status Data (last two cycles) 2AAh VA SA VA 555h for chip erase tAH CE# tCH OE# tWP WE# tWPH tCS tWHWH2 tDS tDH Data 55h In Progress 30h Complete 10 for Chip Erase tBUSY tRB RY/BY# Note: 1. SA = sector address (for sector erase), VA = valid address for reading status data. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 87 D at a S hee t Figure 10.16 Data# Polling Timing Diagram (During Embedded Algorithms) tRC Addresses VA VA VA tACC tCE CE# tCH tOE OE# tOEH tDF WE# tOH High Z DQ7 Complement Complement True Valid Data Status Data Status Data True Valid Data High Z DQ6–DQ0 tBUSY RY/BY# Note: 1. VA = Valid address. Illustration shows first status cycle after command sequence, last status read cycle, and array data read cycle. Figure 10.17 Toggle Bit Timing Diagram (During Embedded Algorithms) tAHT tAS Addresses tAHT tASO CE# tCEPH tOEH WE# tOEPH OE# tDH DQ2 and DQ6 tOE Valid Data Valid Status Valid Status Valid Status (first read) (second read) (stops toggling) Valid Data RY/BY# Note: 1. DQ6 will toggle at any read address while the device is busy. DQ2 will toggle if the address is within the actively erasing sector. Figure 10.18 DQ2 vs. DQ6 Relationship Diagram Enter Embedded Erasing WE# Erase Suspend Erase Enter Erase Suspend Program Erase Suspend Read Erase Suspend Program Erase Resume Erase Suspend Read Erase Erase Complete DQ6 DQ2 Note: 1. The system may use OE# or CE# to toggle DQ2 and DQ6. DQ2 toggles only when read at an address within the erase-suspended sector. 88 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 10.4.3 She et Alternate CE# Controlled Write Operations Table 10.9 Alternate CE# Controlled Write Operations Parameter VIO = 2.7V to VCC Description VIO = 1.65V to VCC Unit JEDEC Std tAVAV tWC Write Cycle Time (Note 1) Min 60 tAVWL tAS Address Setup Time Min 0 ns tASO Address Setup Time to OE# Low during toggle bit polling Min 15 ns tAH Address Hold Time Min 45 ns tAHT Address Hold Time From CE# or OE# High during toggle bit polling Min 0 ns tDS Data Setup Time Min 30 ns tDH ns tWLAX tDVWH tWHDX tGHEK ns Data Hold Time Min 0 tCEPH CE# High during toggle bit polling Min 20 ns t0EPH OE# High during toggle bit polling Min 20 ns tGHEL Read Recovery Time Before Write (OE# High to WE# Low) Min 0 ns tWLEL tWS WE# Setup Time Min 0 ns tELWH tWH WE# Hold Time Min 0 ns tELEH tCP CE# Pulse Width Min 25 ns tEHEL tCPH CE# Pulse Width High Min 20 ns Note: 1. Not 100% tested. Figure 10.19 Back to Back (CE#) Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCP tCPH CE# OE# tWS tWH WE# tDS tDH DQ15-DQ0 December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 89 D at a S hee t Figure 10.20 (CE#) Write to Read Operation Timing Diagram tWC tAS tACC Amax-A0 tAH tCE tDF CE# tOEH tOE OE# tWS tWH WE# tDH tDS tOH DQ15-DQ0 90 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et 11. Physical Interface 11.1 56-Pin TSOP 11.1.1 Connection Diagram Figure 11.1 56-Pin Standard TSOP NC for GL128S A23 A22 A15 A14 A13 A12 A11 A10 A9 A8 A19 A20 WE# RESET# A21 WP# RY/BY# A18 A17 A7 A6 A5 A4 A3 A2 A1 RFU DNU 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 56-Pin TSOP 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 A24 A25 A16 RFU VSS DQ15 DQ7 DQ14 DQ6 DQ13 DQ5 DQ12 DQ4 VCC DQ11 DQ3 DQ10 DQ2 DQ9 DQ1 DQ8 DQ0 OE# VSS CE# A0 RFU VIO NC for GL256S, GL128S NC for GL512S, GL256S, GL128S Notes: 1. Pin 28, Do Not Use (DNU), a device internal signal is connected to the package connector. The connector may be used by Spansion for test or other purposes and is not intended for connection to any host system signal. Do not use these connections for PCB Signal routing channels. Though not recommended, the ball can be connected to VCC or VSS through a series resistor. 2. Pin 27, 30, and 53 Reserved for Future Use (RFU). December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 91 D at a 11.1.2 S hee t Physical Diagram Figure 11.2 56-Pin Thin Small Outline Package (TSOP), 14 x 20 mm PACKAGE SYMBOL MO-142 (B) EC MIN. NOM. MAX. 1 CONTROLLING DIMENSIONS ARE IN MILLIMETERS (mm). (DIMENSIONING AND TOLERANCING CONFORMS TO ANSI Y14.5M-1982.) A --- --- 1.20 2 PIN 1 IDENTIFIER FOR STANDARD PIN OUT (DIE UP). A1 0.05 --- 0.15 3 A2 0.95 1.00 1.05 b1 0.17 0.20 0.23 TO BE DETERMINED AT THE SEATING PLANE -C- . THE SEATING PLANE IS DEFINED AS THE PLANE OF CONTACT THAT IS MADE WHEN THE PACKAGE LEADS ARE ALLOWED TO REST FREELY ON A FLAT HORIZONTAL SURFACE. b c1 0.17 0.10 0.22 --- 0.27 0.16 4 DIMENSIONS D1 AND E DO NOT INCLUDE MOLD PROTRUSION. ALLOWABLE MOLD PROTUSION IS 0.15 mm PER SIDE. 5 c 0.10 --- 0.21 DIMENSION b DOES NOT INCLUDE DAMBAR PROTUSION. ALLOWABLE DAMBAR PROTUSION SHALL BE 0.08 mm TOTAL IN EXCESS OF b DIMENSION AT MAX MATERIAL CONDITION. MINIMUM SPACE BETWEEN PROTRUSION AND AN ADJACENT LEAD TO BE 0.07 mm. 6 THESE DIMESIONS APPLY TO THE FLAT SECTION OF THE LEAD BETWEEN 0.10 mm AND 0.25 mm FROM THE LEAD TIP. 7 LEAD COPLANARITY SHALL BE WITHIN 0.10 mm AS MEASURED FROM THE SEATING PLANE. 8 DIMENSION "e" IS MEASURED AT THE CENTERLINE OF THE LEADS. D 19.80 20.00 20.20 D1 18.30 18.40 18.50 E 13.90 14.00 14.10 e L 0.50 BASIC 0.50 0.60 0.70 O 0˚ - 8˚ R 0.08 --- 0.20 N 92 NOTES: TS 56 JEDEC 56 3160\38.10A GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 11.2 She et 64-Ball FBGA 11.2.1 Connection Diagram Figure 11.3 64-ball Fortified Ball Grid Array TOP VIEW PRODUCT Pinout A B C D E F G H NC for GL256S, GL128S - NC for GL128S NC for GL512S, GL256S, GL128S 8 NC A22 A23 Vio VSS A24 A25 NC 7 A13 A12 A14 A15 A16 RFU DQ15 VSS 6 A9 A8 A10 A11 DQ7 DQ14 DQ13 DQ6 5 WE# RESET# A21 A19 DQ5 DQ12 VCC DQ4 4 RY/BY# WP# A18 A20 DQ2 DQ10 DQ11 DQ3 3 A7 A17 A6 A5 DQ0 DQ8 DQ9 DQ1 2 A3 A4 A2 A1 A0 CE# OE# VSS 1 NC NC NC NC DNU Vio RFU NC Notes: 1. Ball E1, Do Not Use (DNU), a device internal signal is connected to the package connector. The connector may be used by Spansion for test or other purposes and is not intended for connection to any host system signal. Do not use these connections for PCB Signal routing channels. Though not recommended, the ball can be connected to VCC or VSS through a series resistor. 2. Balls F7 and G1, Reserved for Future Use (RFU). 3. Balls A1, A8, C1, D1, H1, and H8, No Connect (NC). December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 93 D at a 11.2.2 S hee t Physical Diagram – LAE064 Figure 11.4 LAE064—64-ball Fortified Ball Grid Array (FBGA), 9 x 9 mm NOTES: PACKAGE LAE 064 JEDEC 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 9.00 mm x 9.00 mm PACKAGE 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010? EXCEPT AS NOTED). SYMBOL MIN NOM MAX NOTE A --- --- 1.40 A1 0.40 --- --- STANDOFF A2 0.60 --- --- BODY THICKNESS PROFILE HEIGHT D 9.00 BSC. BODY SIZE E 9.00 BSC. BODY SIZE D1 7.00 BSC. MATRIX FOOTPRINT E1 7.00 BSC. MATRIX FOOTPRINT MD 8 MATRIX SIZE D DIRECTION ME 8 MATRIX SIZE E DIRECTION N 64 BALL COUNT b 0.50 0.60 0.70 BALL DIAMETER eD 1.00 BSC. BALL PITCH - D DIRECTION eE 1.00 BSC. BALL PITCH - E DIRECTION SD / SE 0.50 BSC. ? NONE SOLDER BALL PLACEMENT DEPOPULATED SOLDER BALLS 4. e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF SOLDER BALLS. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN ? THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 3623 \ 16-038.12 \ 1.16.07 94 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 11.2.3 She et Physical Diagram – LAA064 NOTES: PACKAGE LAA 064 JEDEC 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 13.00 mm x 11.00 mm PACKAGE 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010 (EXCEPT AS NOTED). SYMBOL MIN NOM MAX NOTE A --- --- 1.40 A1 0.40 --- --- STANDOFF A2 0.60 --- --- BODY THICKNESS PROFILE HEIGHT D 13.00 BSC. BODY SIZE E 11.00 BSC. BODY SIZE D1 7.00 BSC. MATRIX FOOTPRINT E1 7.00 BSC. MD 8 MATRIX SIZE D DIRECTION ME 8 MATRIX SIZE E DIRECTION N 64 φb 0.50 0.60 MATRIX FOOTPRINT BALL COUNT 0.70 BALL DIAMETER eD 1.00 BSC. BALL PITCH - D DIRECTION eE 1.00 BSC. BALL PITCH - E DIRECTION SD / SE 0.50 BSC. SOLDER BALL PLACEMENT NONE DEPOPULATED SOLDER BALLS 4. e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF SOLDER BALLS. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 3354 \ 16-038.12d December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 95 D at a 11.3 S hee t 56-Ball FBGA 11.3.1 Connection Diagram Figure 11.5 56-ball Fortified Ball Grid Array TOP VIEW Product Pinout A B C D 512 Mb & 256 Mb Only 8 E F G H 512 Mb Only Supports WP# only, not WP#/ACC A15 A21 A22 A16 RFU/A24 VSS A11 A12 A13 A14 RFU DQ15 DQ7 DQ14 A8 A19 A9 A10 DQ6 DQ13 DQ12 DQ5 WE# RFU/A23 A20 DQ4 VIO RFU WP# RESET# RY/BY# DQ3 VCC DQ11 7 6 5 4 3 NC NC A18 A17 DQ1 DQ9 DQ10 DQ2 A7 A6 A5 A4 VSS OE# DQ0 DQ8 A3 A2 A1 A0 CE# DNU 2 1 Notes: 1. Ball G1, Do Not Use (DNU), a device internal signal is connected to the package connector. The connector may be used by Spansion® for test or other purposes and is not intended for connection to any host system signal. Do not use these connections for PCB Signal routing channels. Though not recommended, the ball can be connected to VCC or VSS through a series resistor. 2. Balls E7, F8, and H5, Reserved for Future Use (RFU). 3. Balls A3 and B3, No Connect (NC). 96 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 11.3.2 She et Physical Diagram - VBU 056 A D D1 e 0.10 C (2X) 8 7 SE 7 6 5 E E1 4 3 e 2 1 9 H A1 CORNER INDEX MARK B TOP VIEW G F E D C B A A1 CORNER 6 SD 56 b 0.10 C 7 0.08 M C 0.15 M C A B (2X) BOTTOM VIEW 0.10 C A A1 SEATING PLANE C 0.08 C SIDE VIEW NOTES: PACKAGE VBU 056 JEDEC 1. DIMENSIONING AND TOLERANCING METHODS PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 9.00 mm x 7.00 mm NOM PACKAGE SYMBOL MIN NOM MAX A --- --- 1.00 A1 0.17 --- --- NOTE 4. BALL HEIGHT 5. SYMBOL "MD" IS THE BALL MATRIX SIZE IN THE "D" DIRECTION. D 9.00 BSC. BODY SIZE E 7.00 BSC. BODY SIZE D1 5.60 BSC. BALL FOOTPRINT BALL FOOTPRINT E1 5.60 BSC. MD 8 ROW MATRIX SIZE D DIRECTION ME 8 ROW MATRIX SIZE E DIRECTION N b 56 0.35 0.40 TOTAL BALL COUNT 0.45 e 0.80 BSC. BALL PITCH 0.40 BSC. SOLDER BALL PLACEMENT e REPRESENTS THE SOLDER BALL GRID PITCH. SYMBOL "ME" IS THE BALL MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF POPULATED SOLDER BALL POSITIONS FOR MATRIX SIZE MD X ME. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. BALL DIAMETER SD / SE A1,A8,D4,D5,E4,E5,H1,H8 3. BALL POSITION DESIGNATION PER JEP95, SECTION 4.3, SPP-010. OVERALL THICKNESS WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 DEPOPULATED SOLDER BALLS 8. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 9 A1 CORNER TO BE IDENTIFIED BY CHAMFER, LASER OR INK MARK, METALLIZED MARK INDENTATION OR OTHER MEANS. 10. OUTLINE AND DIMENSIONS PER CUSTOMER REQUIREMENT. g1055\ 16-038.25 \ 01.26.12 12. Special Handling Instructions for FBGA Package Special handling is required for Flash Memory products in FBGA packages. Flash memory devices in FBGA packages may be damaged if exposed to ultrasonic cleaning methods. The package and/or data integrity may be compromised if the package body is exposed to temperatures above 150°C for prolonged periods of time. December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 97 D at a S hee t 13. Ordering Information Valid Combinations The Recommended Combinations table lists configurations planned to be available in volume. The table below will be updated as new combinations are released. Consult your local sales representative to confirm availability of specific combinations and to check on newly released combinations. Table 13.1 S29GL-S Valid Combinations S29GL-S Valid Combinations Base OPN Speed (ns) 100 Package and Temperature DHI, FHI, TFI (Note 1) DHV, TFV S29GL01GS (Note 1) Model Number Packing Type S29GL01GS10DHIyyx 01, 02 S29GL01GS10FHIyyx S29GL01GS10TFIyyx 01, 02 0, 3 S29GL01GS11DHVyyx (Note 2) S29GL01GS11TFVyyx 110 DHI, FHI, TFI (Note 1) Ordering Part Number (yy = Model Number, x = Packing Type) S29GL01GS11DHIyyx V1, V2 S29GL01GS11FHIyyx S29GL01GS11TFIyyx S29GL512S10DHIyyx 100 DHI, FHI, GHI, TFI S29GL512S10FHIyyx 01, 02 S29GL512S10GHIyyx (Note 1) S29GL512S10TFIyyx DHV, TFV S29GL512S (Note 1) 0, 3 01, 02 (Note 2) 110 S29GL512S11DHVyyx S29GL512S11TFVyyx S29GL512S11DHIyyx DHI, FHI, TFI (Note 1) V1, V2 S29GL512S11FHIyyx S29GL512S11TFIyyx S29GL256S90DHIyyx 90 DHI, FHI, GHI, TFI S29GL256S90FHIyyx 01, 02 S29GL256S90GHIyyx (Note 1) S29GL256S90TFIyyx S29GL256S DHV, TFV (Note 1) 0, 3 01, 02 (Note 2) 100 DHI, FHI, TFI (Note 1) (Note 1) S29GL256S10TFVyyx S29GL256S10DHIyyx V1, V2 S29GL256S10FHIyyx S29GL256S10TFIyyx S29GL128S90DHIyyx DHI, FHI, GHI, TFI 90 S29GL256S10DHVyyx S29GL128S90FHIyyx 01, 02 S29GL128S90GHIyyx S29GL128S90TFIyyx S29GL128S DHV, TFV (Note 1) 0, 3 01, 02 100 DHI, FHI, TFI (Note 1) (Note 2) S29GL128S10DHVyyx S29GL128S10TFVyyx S29GL128S10DHIyyx V1, V2 S29GL128S10FHIyyx S29GL128S10TFIyyx Notes: 1. Additional speed, package, and temperature options maybe offered in the future. Check with your local sales representative for availability. 2. Package Type 0 is standard option. 98 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et The ordering part number for the General Market device is formed by a valid combination of the following: S29GL01GS 10 D H I 01 0 Packing Type 0 = Tray 3 = 13” Tape and Reel Model Number (VIO and VCC Range) 01 = VIO = VCC = 2.7 to 3.6V, highest address sector protected 02 = VIO = VCC = 2.7 to 3.6V, lowest address sector protected V1 = VIO = 1.65 to VCC, VCC = 2.7 to 3.6V, highest address sector protected V2 = VIO = 1.65 to VCC, VCC = 2.7 to 3.6V, lowest address sector protected Temperature Range I = Industrial (-40°C to +85°C) V = In Cabin (-40°C to +105°C) Package Materials Set F = Lead Free (Pb-Free) H = Low Halogen, Pb-Free Package Type D = Fortified Ball-Grid Array Package (LAE064) 9 mm x 9 mm F = Fortified Ball-Grid Array Package (LAA064) 13 mm x 11 mm G = Fortified Ball-Grid Array Package (VBU056) 9 mm x 7 mm T = Thin Small Outline Package (TSOP) Standard Pinout Speed Option 90 = 90 ns random access time 10 = 100 ns random access time 11 = 110 ns random access time 12 = 120 ns random access time Device Number/Description S29GL01GS, S29GL512S, S29GL256S, S29GL128S 3.0 Volt Core, with VIO Option, 1024, 512, 256, 128 Megabit Page-Mode Flash Memory, Manufactured on 65 nm MirrorBit Eclipse Process Technology December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 99 D at a S hee t 14. Other Resources Visit www.spansion.com to obtain the following related documents: 14.1 Links to Software Downloads and related information on flash device support is available at http://www.spansion.com/Support/Pages/DriversSoftware.aspx Spansion low-level drivers Enhanced flash drivers Flash file system Downloads and related information on simulation modeling and CAD modeling support is available at http://www.spansion.com/Support/Pages/SimulationModels.aspx VHDL and Verilog IBIS ORCAD 14.2 Links to Application Notes The following is a sample list of application notes related to this product. All Spansion application notes are available at http://www.spansion.com/Support/TechnicalDocuments/Pages/ApplicationNotes.aspx Common Flash Interface Version 1.5 Vendor Specific Extensions Common Flash Memory Interface Specification Connecting Unused Data Lines of MirrorBit Flash Developing System-Level Validation Routines Flash Memory: An Overview Interfacing i.MX3x to S29GL MirrorBit NOR Flash Interfacing the S29GL-S to Freescale Coldfire Processor Interfacing Spansion GL MirrorBit Family to Freescale i.MX31 Processors MirrorBit Flash Memory Write Buffer Programming and Page Buffer Read Optimizing Program/Erase Times Practical Guide to Endurance and Data Retention Programmer’s Guide for the Spansion 65 nm GL-S Eclipse Family Architecture Reset Voltage and Timing Requirements for MirrorBit Flash Signal Integrity and Reliable Flash Operations Understanding AC Characteristics Understanding Load Capacitance and Access Time Understanding Page Mode Flash Memory Devices Using CFI to Read and Debug Systems Versatile IO: DQ and Enhanced Wear Leveling 100 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data 14.3 She et Specification Bulletins Contact your local sales office for details. 14.4 Contacting Spansion Obtain the latest list of company locations and contact information on our web site at http://www.spansion.com/About/Pages/Locations.aspx December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 101 D at a S hee t 15. Revision History Section Description Revision 01 (February 11, 2011) Initial release Revision 02 (March 21, 2011) Global OPN Command Definitions Table Physical Interface Modified document from “Advance Information” to “Preliminary” Added FBGA package offering for V1 & V2 Model Number Removed KGD information, which is documented in a separate Supplement Removed duplicated commands Changed the number of command cycles for a CFI Enter from 3 to 1 Updated 56-pin TSOP pinout figure Updated 64-ball FBGA pinout figure Other Resources Added additional application notes in “Links to Application Notes” Lock Register Table Changed the default value of bit 7 in the Lock register Revision 03 (July 8, 2011) Performance Summary Updated table: Typical Program and Erase Rates Secure Silicon Region ASO Corrected table: Secure Silicon Region DQ1: Write-to-Buffer Abort Corrected table: Data Polling Staus Embedded Algorithm Performance Table Updated table: Embedded Algorithm Characteristics Corrected tables: changed Software Reset/ASO Exit Data value to from 00F0h to xF0h Corrected table: Erase Suspend Unlock State Command Transition Corrected table: Erase Suspend - DYB State Command Transition Corrected table: Program Unlock State Command Transition Command State Transitions Corrected table: Lock Register State Command Transition Corrected table: Secure Silicon Sector Program State Command Transition Corrected table: Password Protection Command State Transition Corrected table: Non-Volatile Protection Command State Transition Corrected table: PPB Lock Bit Command State Transition Corrected table: Volatile Sector Protection Command State Transition Device ID and Common Flash Interface (ID-CFI) ASO Map DC Characteristics Power-On Reset (POR) and Warm Reset Power-On (Cold) Reset (POR) Hardware (Warm) Reset Asynchronous Write Operations Physical Diagram - LAA064 102 Corrected table: Corrected CFI Primary Vendor-Specific Extended Query description for Word Address (SA) + 0045h Updated VIL Max Updated Note Updated table: added row to bottom of table Updated text Updated figure: Power-Up Diagram Updated figure: Hardware Reset Added figure: Back to Back (CE#VIL) Write Operation Timing Diagram Updated table: Erase/Program Operations Added figure GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012 Data She et Section Description Revision 04 (October 3, 2011) Power-Up Write Inhibit Minor correction PPB Password Protection Mode Minor correction Embedded Algorithm Characteristics table Updated Buffer Programming Time maximum limits Absolute Maximum Ratings table Added clarification DC Characteristics table Output High Voltage clarification Power-Up/Power-Down Voltage and Timing table Added clarification Power-Up figure Added clarification Power-On (Cold) Reset (POR) Added clarification Valid Combinations table Updated table Revision 05 (December 14, 2011) Global Data sheet designation changed from Preliminary to Full Production Sector Erase: Updated Typical Erase Time Capacitance Characteristics Updated section Ordering Information Corrected note designation in valid combination table Revision 06 (March 16, 2012) Global Ordering Information Added 9 mm x 7 mm package Added 105°C offering Updated Valid Combinations Revision 07 (December 21, 2012) Distinctive Characteristics Added In-Cabin temperature range Status Register ASO Added clarification Advanced Sector Protection Overview Updated figure PPB Lock Added clarification Persistent Protection Bits (PPB) Added clarification Dynamic Protection Bits (DYB) Added clarification PPB Password Protection Mode Added clarification Chip Erase Added clarification Sector Erase Added clarification Erase Suspend / Erase Resume Added clarification Status Register ASO Added clarification Status Register Added clarification DQ7: Data# Polling Added clarification DQ1: Write-to-Buffer Abort Embedded Operation Error Added clarification Data Polling Status: Updated table Added clarification Protection Error Added clarification Write Buffer Abort Added clarification Performance Table Updated Embedded Algorithm Characteristics (-40°C to +105°C) table Device ID and Common Flash Interface (ID-CFI) ASO Map Updated CFI Device Geometry Definition table Asynchronous Read Operations Added Read Operation VIO = 1.65 (-40°C to +105°C) table Asynchronous Write Operations Updated CFI Primary Vendor-Specific Extended Query table Updated Read to Write (CE# VIL) figure Updated Read to Write (CE# Toggle) figure December 21, 2012 S29GL_128S_01GS_00_07 GL-S MirrorBit® Family 103 D at a S hee t Colophon The products described in this document are designed, developed and manufactured as contemplated for general use, including without limitation, ordinary industrial use, general office use, personal use, and household use, but are not designed, developed and manufactured as contemplated (1) for any use that includes fatal risks or dangers that, unless extremely high safety is secured, could have a serious effect to the public, and could lead directly to death, personal injury, severe physical damage or other loss (i.e., nuclear reaction control in nuclear facility, aircraft flight control, air traffic control, mass transport control, medical life support system, missile launch control in weapon system), or (2) for any use where chance of failure is intolerable (i.e., submersible repeater and artificial satellite). Please note that Spansion will not be liable to you and/or any third party for any claims or damages arising in connection with above-mentioned uses of the products. Any semiconductor devices have an inherent chance of failure. You must protect against injury, damage or loss from such failures by incorporating safety design measures into your facility and equipment such as redundancy, fire protection, and prevention of over-current levels and other abnormal operating conditions. If any products described in this document represent goods or technologies subject to certain restrictions on export under the Foreign Exchange and Foreign Trade Law of Japan, the US Export Administration Regulations or the applicable laws of any other country, the prior authorization by the respective government entity will be required for export of those products. Trademarks and Notice The contents of this document are subject to change without notice. This document may contain information on a Spansion product under development by Spansion. Spansion reserves the right to change or discontinue work on any product without notice. The information in this document is provided as is without warranty or guarantee of any kind as to its accuracy, completeness, operability, fitness for particular purpose, merchantability, non-infringement of third-party rights, or any other warranty, express, implied, or statutory. Spansion assumes no liability for any damages of any kind arising out of the use of the information in this document. Copyright © 2011-2012 Spansion Inc. All rights reserved. Spansion®, the Spansion logo, MirrorBit®, MirrorBit® Eclipse™, ORNAND™ and combinations thereof, are trademarks and registered trademarks of Spansion LLC in the United States and other countries. Other names used are for informational purposes only and may be trademarks of their respective owners. 104 GL-S MirrorBit® Family S29GL_128S_01GS_00_07 December 21, 2012