INTEGRATED CIRCUITS DATA SHEET HT2DC20S20 HITAG 2 stick transponder Product specification Supersedes data of 1998 Mar 01 File under Integrated Circuits, IC11 2001 Oct 01 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 FEATURES • Identification transponder for use in contactless applications • Operating frequency 125 kHz • Data transmission and supply energy via RF link, no internal battery The transponder requires no internal power supply; it derives its power from the magnetic component of the RF carrier frequency generated by the reader. Data is transmitted by modulating this carrier. • Reading distance same as writing distance • Non-volatile memory of 256 bits (128 bits user data, 128 bits control data and secret memory) organized in 8 pages, 4 bytes each The HT2DC20S20 is dedicated for use in secure access systems where the transponder and the reader have to identify each other. The choosable use of cryptography enables highest data security. Providing several operating modes (password, crypto and standard read-only modes) the versatile transponder can be used in various applications. • Ten years non-volatile data retention • More than 100000 erase/write cycles • Selective read/write protection of memory content • Two coding schemes for read operation: biphase and Manchester coding The HALT command can be used after finishing data exchange to reach the halt state. In this state the transponder is muted. This feature can be used to have steady RF field where single transponders are collected one by one. Each transponder is operated and then disabled, so it does not interfere with the next transponder. The HALT state can only be exited by switching off and removing the magnetic field. • Effective communication protocol with outstanding data integrity check • Mutual authentication function • Read/write mode allows: – Plain data transmission (password check) – Encrypted data transmission (crypto mode). The EEPROM has a capacity of 256 bits and is organized in 8 pages of 4 bytes. The 8 pages are split up into 4 pages containing user data and into 4 pages for control of the memory access and for authentication purposes. The pages of the transponder memory can be protected against read and write access by setting corresponding memory flags. • In read/write mode multi-tag operation possible because of special HALT function • Emulation of standard industrial read-only transponders: – Public mode A (64 bits read-only) – Public mode B (according to ISO 11785 for animal identification) Data transmission from the HT2DC20S20 to the reader uses Manchester or biphase coding and Amplitude Shift Keying (ASK) modulation. Absorption modulation is used to transmit data from the transponder to the reader. The transponder absorbs the magnetic field which hence modulates the current in the reader antenna. – Public mode C (PIT compatible mode). • Special features: – User defined write protection – Unique 32-bit serial number for each transponder – Read-only emulation function Data transmission from the reader to the HT2DC20S20 uses Binary Pulse Length Modulation (BPLM). – Encrypted data transmission possible. GENERAL DESCRIPTION The HITAG(1) stick transponder HT2DC20S20 is a high performance transponder for bi-directional transmission in full-duplex between the read and write device and the transponder. Data is stored in the transponder in a non-volatile memory (EEPROM). (1) HITAG - is a trademark of Philips Semiconductors Gratkorn GmbH. 2001 Oct 01 2 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 QUICK REFERENCE DATA SYMBOL PARAMETER f0 resonant frequency ftrans data transfer rate M MIN. TYP. MAX. UNIT 121 125 129 kHz transponder to reader − 4.0 − kbits/s reader to transponder − 5.2 − kbits/s size − 256 − bits organization − 8 − pages serial number − 32 − bits secret key − 48 − bits − 36 − ms memory N encrypted mutual authentication bits taut authentication time ORDERING INFORMATION PACKAGE TYPE NUMBER NAME HT2DC20S20 PLLMC 2001 Oct 01 DESCRIPTION plastic leadless module carrier 3 VERSION SOT385-1 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 BLOCK DIAGRAM handbook, full pagewidth HT2DC20S20 L C CONTACTLESS INTERFACE CONTROL LOGIC RECTIFIER VOLTAGE LIMITER DATA ACQUISITION POWER-ON RESET EEPROM ACCESS CONTROL CLOCK RECOVERY CALCULATION UNIT MODULATOR DEMODULATOR EEPROM TRANSPONDER IC MGW186 Fig.1 Block diagram. 2001 Oct 01 4 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 FUNCTIONAL DESCRIPTION Operating modes Memory organization With the configuration byte, the operating mode and the access rights to the memory can be selected. The memory of the transponder consists of 256 bits EEPROM memory and is organized in 8 pages with 32 bits each. During power-up of the transponder the configuration byte is read from the EEPROM of the transponder. The HT2DC20S20 can operate in several modes: Depending on the operating mode the EEPROM is organized as described in Table 1. Table 1 • Crypto mode Mode for writing or reading the transponder with encrypted data transmission. Memory organization PAGE CONTENT • Password mode Crypto mode 0 serial number 1 32 LSBs of 48-bit key 2 16 MSBs of 48-bit key; 16 bits reserved 3 8-bit configuration; 24-bit password TAG 4 read/write page 5 read/write page 6 read/write page 7 read/write page Mode for writing or reading the transponder with plain data transmission. • Public mode A (Manchester) Read-only mode. The 64 bits of the user pages 4 and 5 are cyclically transmitted to the read and write device. • Public mode B (biphase) Read-only mode according to ISO standards 11784 and 11785 for animal identification. The 128 bits of the user pages 4 to 7 are cyclically transmitted to the read and write device. • Public mode C (biphase) Password mode 0 serial number 1 password RWD 2 reserved 3 8-bit configuration; 24-bit password TAG 4 read/write page 5 read/write page 6 read/write page 7 read/write page 2001 Oct 01 Read-only mode emulating the read operation of the PCF793X (with a slightly different program mode check). In the public mode C the 128 bits of the user pages 4 to 7 are cyclically transmitted to the read and write device. 5 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 RF field applied handbook, full pagewidth start authentication WAIT entering public modes (if configured) AUTHORIZED read, write commands READ-ONLY HALT MGW187 Fig.2 Status flow. Status flow Configuration After entering the RF field the transponder waits for a command to start the authentication (see Fig.2). After issuing this command the mutual authentication takes place, followed by read and write commands. If you change the configuration (keys or passwords) you have to place the transponder directly on the antenna (0-distance)! In order to avoid any errors, do not move the transponder during this write process and be sure that you are in a safe environment without electrical noise. In the password mode the data transfer occurs plain and in the crypto mode data are encrypted. The configuration byte is represented by the first 8 bits of page 3 of the transponder memory (see Table 2). The halt state can be entered for muting a transponder. If the transponder is configured in one of the public modes, these modes are entered automatically after a certain waiting time and data pages are sent cyclically to the read and write device. By issuing the command to start the authentication during the waiting time also public mode transponders can be brought into the authorized state. 2001 Oct 01 6 Philips Semiconductors Product specification HITAG 2 stick transponder Table 2 HT2DC20S20 Format of page 3 PAGE 3 bit 31 bit 24 bit 23 configuration byte (8 bits) 7 Table 3 6 5 4 3 2 bit 0 password TAG (24 bits) 1 0 Bits of the configuration byte BIT VALUE 0 0 Manchester code does effect HITAG 2 operation only 1 biphase code does effect HITAG 2 operation only 00 public mode B coding biphase; note 1 01 public mode A coding Manchester; note 1 10 public mode C coding biphase; note 1 11 HITAG 2 coding depending on bit 0; note 1 2, 1 3 4 5 6 7 DESCRIPTION 0 password mode 1 crypto mode 0 pages 6 and 7 read/write 1 pages 6 and 7 read-only REMARK 0 pages 4 and 5 read/write 1 pages 4 and 5 read/write 0 page 3 read/write 1 page 3 read-only 0 pages 1 and 2 read/write 1 pages 1 no read and write note 3 page 2 read-only when transponder is in password mode page 3 no read and write when transponder is in crypto mode configuration byte and password TAG fixed; note 2 Notes 1. The coding in HITAG 2 operation is depending on bit 0. 2. The setting of this bit is One Time Programmable (OTP). Do not set bit 6 of the configuration byte to logic 1 before having written the final data into page 3 (including the configuration byte and password TAG) of the transponder. 3. The setting of this bit is One Time Programmable (OTP). Do not set bit 7 of the configuration byte to logic 1 before having written the final data into pages 1 and 2 of the transponder. Table 4 Standard values of the configuration byte MODE SELECTION VALUE Password mode 0x06 Crypto mode 0x0E Public mode A 0x02 Public mode B 0x00 Public mode C 0x04 2001 Oct 01 7 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 • Password RWD Definition of keys and passwords Password that the read and write device sends to the transponder and which is checked for identity by the latter. Keys are cryptographic codes, which determine data encryption during data transfer between the read and write device and the transponder. They are used to select a HT2DC20S20 transponder in the crypto mode. The 16-bit key HIGH and 32-bit key LOW form one 48-bit key which has to be identical on both the transponder and the read and write device. It is important that the following values are in accordance with each other, i.e. the respective data on the read and write device and on the transponder have to be identical pairs. Passwords are needed to select a HT2DC20S20 transponder in the password mode. There is one pair of passwords (password TAG and password RWD) which has to be identical both on the transponder and the read and write device: The keys and passwords are predefined by Philips by means of defined transport passwords and a transport key. They can be written to memory, which means that they can be changed (see also Section “Configuration of delivered transponders”). • Password TAG Remark: keys and passwords only can be changed if their current values are known! Password that the transponder sends to the read and write device and which may be verified by the latter (depending on the configuration of the read and write device). Table 5 Keys and passwords for the read and write device and the transponder MODE ON THE READ AND WRITE DEVICE ON THE TRANSPONDER Password mode password RWD ⇔ password RWD Crypto mode key LOW ⇔ key LOW key HIGH ⇔ key HIGH password TAG; note 1 ⇔ password TAG − Note 1. Optional for both password and crypto mode; depending on the configuration of the read and write device. Configuration of delivered transponders HT2DC20S20 transponders are delivered with the following configuration. Table 6 Configuration of delivered transponders ITEM NAME VALUE DESCRIPTION REMARK Unique serial number serial number 0xXXXX read-only fixed Configuration configuration byte 0x06 password mode; Manchester code; pages 1 to 7 read/write can be changed; note 1 Transport passwords and transport keys password RWD 0x4D494B52 MIKR password TAG 0xAA4854 key LOW 0x4D494B52 MIKR key HIGH 0x4F4E ON Note 1. Before delivering transponders to end users, pages 1 to 3 should be locked by setting configuration byte: set bit 6 to logic 1 for page 3 and set bit 7 to logic 1 for pages 1 and 2. 2001 Oct 01 8 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 LIMITING VALUES All values are in accordance with the Absolute Maximum Rating System (IEC 60134). SYMBOL PARAMETER N number of erase/write cycles of EEPROM tD(ret) data retention time of EEPROM CONDITIONS Tamb = 55 °C MIN. MAX. UNIT 100000 − 10 − years Toper operating temperature −40 +85 °C Tstg storage temperature −55 +125 °C B magnetic flux density note 1 − 0.2 T av vibration acceleration 10 to 2000 Hz; 3 axis; IEC 68-2-6; Test Fc − 10 g as shock acceleration 3 axis; IEC 68-2-27; Test Ea − 1500 g Note 1. Resistivity against magnetic pulses. ELECTRICAL CHARACTERISTICS Period time T0 = 8 µs (f0 = 125 kHz); note 1. SYMBOL PARAMETER CONDITIONS MIN. TYP. MAX. UNIT f0 resonant frequency 121 125 129 kHz B bandwidth 2.3 − − kHz BTHR(p-p) magnetic flux density for data transmission from transponder (peak-to-peak value) f0 = 125 kHz 35 − 400(2) µT BPRG(p-p) magnetic flux density for programming the EEPROM (peak-to-peak value) f0 = 125 kHz; m = 0.95; tLOW = 8T0 35 − 400(2) µT BAUTH(p-p) magnetic flux density for mutual authentication (peak-to-peak value) f0 = 125 kHz; m = 0.95; tLOW = 8T0 35 − 400(2) µT BREAD(p-p) field absorption due to the modulation of the f0 = 125 kHz; transponder (peak-to-peak value) Bfield = 35 µT (p-p) 8 − − µT MIPRG modulation index (m) of the base station for programming and authentication 95 − 100 % f0 = 125 kHz; Bfield = 35 µT (p-p); tLOW = 8T0; see Fig.3 Notes 1. All parameters are characterized with the SCEMTEC test equipment (STM-1) available from SCEMTEC, Reichshof-Wenrath, Germany. All parameters are guaranteed within the temperature range of Tamb = −40 to +85 °C. 2. Maximum available field strength of the test equipment. Transponder limit has not been characterized. 2001 Oct 01 9 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 Definitions: B max – B min m = ----------------------------------B max + B min Bmax Bmin m read = B max – B min MGW174 Fig.3 Definition of modulation index. MECHANICAL CHARACTERISTICS The transponder is sealed in epoxy resin moulding compound. The designation of the package is SOT385-1 (see Chapter “Package outline”). PARAMETER VALUE Mechanical dimensions 12 × 6 × 3 mm Protection class IP67 Casting material epoxy resin Transponder IC type HT2ICS20 2001 Oct 01 10 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 PACKAGE OUTLINE PLLMC: plastic leadless module carrier SOT385-1 A1 D A2 A E1 α E A D1 A3 A Cross section A-A (not to scale) 0 2.5 5 mm scale DIMENSIONS (mm are the original dimensions) UNIT A A1 A2 A3 D (1) D1(1) E (1) E1(1) α mm 3.05 2.90 1.2 1.1 0.165 2.1 1.9 12.1 11.9 5.1 4.9 6.1 5.9 4.6 4.4 46 44o o Note 1. Plastic protrusions of 0.2 mm per side are not included. OUTLINE VERSION REFERENCES IEC JEDEC EIAJ ISSUE DATE 01-06-27 SOT385-1 2001 Oct 01 EUROPEAN PROJECTION 11 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 DATA SHEET STATUS DATA SHEET STATUS(1) PRODUCT STATUS(2) DEFINITIONS Objective data Development This data sheet contains data from the objective specification for product development. Philips Semiconductors reserves the right to change the specification in any manner without notice. Preliminary data Qualification This data sheet contains data from the preliminary specification. Supplementary data will be published at a later date. Philips Semiconductors reserves the right to change the specification without notice, in order to improve the design and supply the best possible product. Product data Production This data sheet contains data from the product specification. Philips Semiconductors reserves the right to make changes at any time in order to improve the design, manufacturing and supply. Changes will be communicated according to the Customer Product/Process Change Notification (CPCN) procedure SNW-SQ-650A. Notes 1. Please consult the most recently issued data sheet before initiating or completing a design. 2. The product status of the device(s) described in this data sheet may have changed since this data sheet was published. The latest information is available on the Internet at URL http://www.semiconductors.philips.com. DEFINITIONS DISCLAIMERS Short-form specification The data in a short-form specification is extracted from a full data sheet with the same type number and title. For detailed information see the relevant data sheet or data handbook. Life support applications These products are not designed for use in life support appliances, devices, or systems where malfunction of these products can reasonably be expected to result in personal injury. Philips Semiconductors customers using or selling these products for use in such applications do so at their own risk and agree to fully indemnify Philips Semiconductors for any damages resulting from such application. Limiting values definition Limiting values given are in accordance with the Absolute Maximum Rating System (IEC 60134). Stress above one or more of the limiting values may cause permanent damage to the device. These are stress ratings only and operation of the device at these or at any other conditions above those given in the Characteristics sections of the specification is not implied. Exposure to limiting values for extended periods may affect device reliability. Right to make changes Philips Semiconductors reserves the right to make changes, without notice, in the products, including circuits, standard cells, and/or software, described or contained herein in order to improve design and/or performance. Philips Semiconductors assumes no responsibility or liability for the use of any of these products, conveys no licence or title under any patent, copyright, or mask work right to these products, and makes no representations or warranties that these products are free from patent, copyright, or mask work right infringement, unless otherwise specified. Application information Applications that are described herein for any of these products are for illustrative purposes only. Philips Semiconductors make no representation or warranty that such applications will be suitable for the specified use without further testing or modification. 2001 Oct 01 12 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 NOTES 2001 Oct 01 13 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 NOTES 2001 Oct 01 14 Philips Semiconductors Product specification HITAG 2 stick transponder HT2DC20S20 NOTES 2001 Oct 01 15 Philips Semiconductors – a worldwide company Contact information For additional information please visit http://www.semiconductors.philips.com. Fax: +31 40 27 24825 For sales offices addresses send e-mail to: [email protected]. © Koninklijke Philips Electronics N.V. 2001 SCA73 All rights are reserved. Reproduction in whole or in part is prohibited without the prior written consent of the copyright owner. The information presented in this document does not form part of any quotation or contract, is believed to be accurate and reliable and may be changed without notice. No liability will be accepted by the publisher for any consequence of its use. Publication thereof does not convey nor imply any license under patent- or other industrial or intellectual property rights. Printed in The Netherlands 613502/02/pp16 Date of release: 2001 Oct 01 Document order number: 9397 750 08328