FUJITSU SEMICONDUCTOR DATA SHEET DS04–33105–2v1E ASSP ISO/IEC 15693 Compliant FRAM Embedded High-speed RFID LSI FerVID familyTM MB89R118B ■ DESCRIPTION The MB89R118B is an LSI device that has built-in high-speed, large-capacity FRAM and is used for vicinityRFID. FerVID family is a trademark of Fujitsu Semiconductor Limited, Japan. ■ FEATURES • • • • • • • • • • • • • Memory capacity of 2 Kbytes FRAM (including 2000 bytes of user area) 8-byte/block configuration, 256 blocks High-speed data transmission and reception at 26.48 kbps Fast command supported (data transmission at 52.97 kbps) (Transponder → Reader/Writer) Carrier frequency at 13.56 MHz Anti-collision function : 30 tags per second Endurance : 1010 writes to memory Data Retention : 10 years ( + 70 °C) 64-bit UID FRAM memory data protection Anti-theft (EAS) command Compliance with ISO/IEC 15693 (partly not supported*) Compliance with ISO/IEC 18000-3 (Mode 1) (partly not supported*) * : Refer to “ ■ NOTES ON USING”. Copyright 2008-2015 FUJITSU SEMICONDUCTOR LIMITED 2015.8 MB89R118B ■ BLOCK DIAGRAM Analog RF interface Antenna coil Digital control Rectifier Clock generator Power supply voltage control Modulator VDD Anti-collision function Clock Demodulator Data output I/O Commands Data input 2 Kbytes Data output FRAM access 2 FRAM R/W Data input DS04–33105–2v1E MB89R118B ■ MEMORY MAP This section describes the FRAM memory, which is the internal memory of the MB89R118B. • FRAM Configuration The FRAM has 2000 bytes for use as user area and 48 bytes for use as system area. The FRAM memory areas consist of a total of 256 blocks (250 blocks of user area and 6 blocks of system area). Each block can store 64 bits (8 bytes) of data. The block is the unit used for the writing and reading of FRAM data. The memory configuration of FRAM is shown below. • FRAM memory configuration Area Block No. Details Data read Data write User area (2000 bytes) System area (48 bytes) 00H to F9H User area Yes Yes FAH UID (64 bits) Yes No FBH AFI, DSFID, EAS, security status Yes Limited FCH to FFH Block security status Yes No Blocks “00H” to “F9H” are user area. The user area is defined as an area that can be accessed when the corresponding block address is specified. On the other hand, Blocks “FAH” to “FFH” are system area. The system area is defined as an area that can be accessed only with a specific command. The system area consists of 6 blocks and contains UID, AFI, DSFID, EAS bits, and security status (can write or cannot write) data for individual block. UID is fixed and cannot be updated. AFI, DSFID, and EAS bits are written at the factory, and can be updated and locked (disable to write) with commands (Only EAS bit cannot be locked) . As shown in above, “FAH” holds the UID, and “FCH” to “FFH” hold the security status information on individual user areas. The configuration of “FBH” to “FFH” blocks is shown below. “FBH” block is used for EAS status, AFI and DSFID data, the security status data of AFI and DSFID. “FCH” to “FFH” blocks contain block security status data. • Structure of “FBH” MSB 64 LSB 57 56 EAS Status 33 RFU* 32 25 24 17 DSFID Lock AFI Lock Status Status 16 DSFID 9 8 1 AFI * : Reserved for future use DS04–33105–2v1E 3 MB89R118B • Structure of “FCH” to “FFH” Block security status (BSS) of user block 3FH Block security status (BSS) of user block 00H MSB LSB FCH 3F 3E 3D 3C 3B 3A 39 03 02 01 00 FDH 7F 7E 7D 7C 7B 7A 79 43 42 41 40 FEH BF BE BD BC BB BA B9 83 C3 82 C2 81 C1 80 C0 FFH RFU* (6 bits) F9 * : Reserved for future use The security status of the user area is stored in the block security status bit in system area blocks of “FCH” to “FFH” per bit in each block. A user area is unlocked when the corresponding block security status bit is “0”; it is locked (disable to write state) when the corresponding block security status bit is “1”. EAS bit is a single bit, and it is used for setting EAS status. It is possible to read/write data of 2 blocks at one time in the user area (If Read Multiple Blocks Unlimited command is used, up to 256 blocks can be accessed at one time) . 4 DS04–33105–2v1E MB89R118B ■ DATA ELEMENT DEFINITION 1. Unique Identifier (UID) The MB89R118B has a 64-bit unique identifier (UID) that complies with ISO/IEC 15693-3. The UID is used to distinguish a transponder from another transponder in the Anti-collision algorithm described later. The UID consists of the 3 items shown in the following. • An 8-bit data whose value is always “E0H” (bit 57 to bit 64) • An 8-bit IC manufacturer code whose value is always “08H”, and is defined by ISO/IEC 7816-6/AMI (bit 49 to bit 56) • Unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR (bit 1 to bit 48) Among the unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR, the 1 byte from bit 41 to bit 48 defines MB89R118B code whose value is “01H”. And the 5 bytes from bit 1 to bit 40 define Chip Information. • Structure of UID MSB LSB 64 57 56 “E0H” DS04–33105–2v1E 49 48 IC manufacturer code “08H” 41 40 “01H” 1 Chip information Unique serial number assigned by FUJITSU SEMICONDUCTOR 5 MB89R118B 2. Application Family Identifier (AFI) The application family identifier (AFI) identifies the type of application set by the transponder. The AFI can be written with a command. The AFI is 8-bit data and is stored in the system area of FRAM. The factory default setting of the AFI is “00H”. • Types of AFI Application Application Sub-Family Application Use Field Example/Note Family (bit 8 to bit 5) (bit 4 to bit 1) “0” “0” All families and sub-families No application preselection X “0” All sub-families of family X X Y Only the Yth sub-families of family X ⎯ “0” Y All families of Yth sub-families ⎯ “1” “0”, Y Transport Mass transit, bus, airline “2” “0”, Y Financial IEP, banking, retail “3” “0”, Y Identification “4” “0”, Y Telecommunication “5” “0”, Y Medical “6” “0”, Y Multimedia “7” “0”, Y Gaming “8” “0”, Y Data storage “9” “0”, Y EAN-UCC system for application identifiers Managed by ISO/IEC JTC 1/SC 31 “A” “0”, Y ISO/IEC JTC 1/SC 31 Data identifiers as defined in ISO/IEC 15418 “B” “0”, Y UPU Managed by ISO/IEC JTC 1/SC31 “C” “0”, Y IATA Managed by ISO/IEC JTC 1 “D” “0”, Y “E” “0”, Y “F” “0”, Y Wide applicative preselection Access control Public telephone, GSM ⎯ Internet services ⎯ Portable files Managed by ISO/IEC JTC 1/SC 17 RFU* Managed by ISO/IEC JTC 1/SC 17 Managed by ISO/IEC JTC 1/SC 17 * : Reserved for future use Note : Both X value and Y value are “1” to “F”. In the status of the AFI_flag setting; • If the AFI is not supported by the transponder, no response to all requests is returned. • If the AFI is supported by the transponder, the response is returned only if the value is in accord with the AFIsent from a reader/writer. 3. Data Storage Format Identifier (DSFID) The data storage format identifier (DSFID) indicates how data is structured in the transponder (LSI memory device). The DSFID can be programmed with a command. The DSFID is 8-bit data and is stored in the system area of FRAM. The factory default setting of the DSFID is “01H”. 6 DS04–33105–2v1E MB89R118B 4. Cyclic Redundancy Check (CRC) When a frame is received, reception of correct data-that is, the characters making up the frame is assumed only when the value of the cyclic redundancy check (CRC) code is valid. For error-checking purposes, a 2byte CRC code value is inserted between data and the EOF signal. The value of CRC code is required from all the data contained between the SOF and CRC field in each frame. Method of calculation is provided in ISO/IEC 13239. The details are provided in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1) . The initial value of the CRC code provided in ISO/IEC 15693-3 is “FFFFH”. The CRC code is transferred, beginning with the lowest-order bit in the lowest-order byte. • CRC bit/byte transition order LSByte LSBit MSByte MSBit CRC 16 (8 Bits) LSBit MSBit CRC 16 (8 Bits) First transmitted bit of the CRC 5. Electronic Article Surveillance (EAS) status EAS status is 1 bit data (LSB side) , which is stored in the system area of FRAM. The initial value is “1”. EAS bit “1” means goods-monitoring status, and EAS bit “0” means that goods-monitoring status is cleared. EAS status can be written by Write EAS command and can be checked “FBH” block (refer to “■ MEMORY MAP”) by Read commands such as Read Single Block command. Together with Gate type reader/writer, EAS command can support anti-theft security functions. DS04–33105–2v1E 7 MB89R118B ■ FUNCTION DESCRIPTION 1. Communication from Reader/Writer to Transponder (1) Modulation method The MB89R118B supports both 10% ASK modulation and 100% ASK modulation. Modulation index m is defined as m = (a - b)/(a + b) with reference to the modulated waveform shown below. The values a and b indicate, respectively, the maximum and minimum amplitude of magnetic field transmitted from a reader/writer. • Modulation of the carrier for 10% ASK hr y y hf t2 t1 a t3 b 13.56 MHz • Modulation of the carrier for 100% ASK t3 t1 t4 105 % 95 % 60 % a 5% t2 b 13.56 MHz Maximum and minimum values of t1, t2, t3 and t4 are shown in the table of “ ■RECOMMENDED OPERATING CONDITIONS”. In this table, y is 0.05 (a-b) and the maximum value of hf and hr is 0.1(a-b). 8 DS04–33105–2v1E MB89R118B (2) Data rate and data coding The MB89R118B supports only 1 out of 4 mode for bit coding (Not supports 1 out of 256 mode). In 1 out of 4 mode, 2-bit signals are coded in a period of 75.52 μs as shown in the following. When coding takes place, the data rate is 26.48 kbps (fc/512). Each signal is transmitted beginning with the lowest bit. • Coding Method in 1 out of 4 Mode • “00B” pulse position 9.44 μs 9.44 μs 75.52 μs • “01B” pulse position (1 = LSB) 28.32 μs 9.44 μs 75.52 μs • “10B” pulse position (0 = LSB) 47.20 μs 9.44 μs 75.52 μs • “11B” pulse position 66.08 μs 9.44 μs 75.52 μs (3) Data frame A data frame begins with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The MB89R118B is enabled to receive a frame from a reader/writer within 300 μs after the MB89R118B has sent a frame to the reader/writer. The MB89R118B is also enabled to receive a frame from a reader/writer within 3 ms after power has been supplied to the MB89R118B. • Waveforms of SOF and EOF signals of a frame sent from a reader/writer SOF 9.44 μs 9.44 μs 37.76 μs 9.44 μs 37.76 μs EOF 37.76 μs DS04–33105–2v1E 9.44 μs 9.44 μs 9 MB89R118B 2. Communication from Transponder to Reader/Writer • Minimum load modulation amplitude (Vlm) : 10 mV (based on ISO/IEC 10373-7) • Load modulation subcarrier frequency (fs) : 423.75 kHz(fc/32) The MB89R118B supports only a 1-subcarrier system. (Not supports 2-subcarrier system.) • Data rate : The MB89R118B supports the following 2 data rate modes : • Low data rate • High data rate One of the 2 data rate modes is specified by the Data_rate_flag (described later) sent from the reader/writer. In low data rate mode, the data rate is 6.62 kbps (fc/2048); in high data rate mode, it is 26.48 kbps (fc/512). When receiving the Fast commands (Custom commands) , the communication starts from the transponder in the data rate that is twice as fast as normal data rate. In this case, the 2 data rate modes of low data rate and high data rate specified by the Data_rate_flag is supported. In Low data rate mode, the data rate is 13.24 kbps (fc/1024) ; in high data rate mode, it is 52.97 kbps (fc/256) . (1) Bit coding The Manchester coding is used for the bit coding. The following figures show the signals modulated in high data rate mode when ISO command is received and the same signals when fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses for subcarrier and data transfer time are 4 times as large as the number in high data rate mode. • Signal waveforms by load modulation in high data rate mode (ISO commands) • Logic 0 423.75 kHz subcarrier 18.88 μs (modulated) 18.88 μs (not modulated) 37.76 μs • Logic 1 423.75 kHz subcarrier 18.88 μs (not modulated) 18.88 μs (modulated) 37.76 μs • Signal waveforms by load modulation in high data rate response mode (fast commands) • Logic 0 9.44 μs 9.44 μs 18.88 μs • Logic 1 9.44 μs 9.44 μs 18.88 μs 10 DS04–33105–2v1E MB89R118B (2) Data frame A data frame sent from a transponder starts with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The following figures show the SOF and EOF signals sent in high data rate mode when ISO command is received and the same signals when fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses in subcarrier and data transfer time are 4 times as large as the number in high data rate mode. The reader/writer shall be ready to receive a frame from the transponder within 300 μs after having sent a frame to the transponder. • Waveforms of SOF and EOF signals of a frame sent from a transponder (ISO commands) • SOF 423.75 kHz subcarrier 56.64 μs 56.64 μs 37.76 μs • EOF 37.76 μs 56.64 μs 56.64 μs • Waveforms of SOF and EOF signals of a frame sent from a transponder (fast commands) • SOF 423.75 kHz Subcarrier 28.32 μs 28.32 μs 18.88 μs • EOF 423.75 kHz Subcarrier 18.88 μs 28.32 μs 28.32 μs 3. FRAM Data Protection if Power Lost During Data Writing MB89R118B accesses to FRAM with the unit of 1 byte. When RF power is shut down during accessing FRAM, writing in FRAM is completed by the charges stored in a smoothing capacitor on the LSI and FRAM data writing error is prevented. Therefore, the commands of 1 byte access such as Write AFI, Write DSFID, Write EAS, and Lock command can protect the data from the power down. On the other hand, the commands of more than 2 bytes access such as Write Single Block command may not protect all the data from the power down during the access. In this case, it is recommended to confirm the data by read command if it’s written correctly. DS04–33105–2v1E 11 MB89R118B 4. Requests/Responses A request is sent from the reader/writer to the transponder. In reply to the request, the transponder sends a response to the reader/writer. Each request, and response, is transmitted in each single frame. • Structure of requests and responses A request consists of the following 5 fields : • Flag • Command code • Parameter (required or optional depending on the command) • Application data • CRC A response consists of the following 4 fields : • Flag • Parameter (required or option depending on the command) • Application data • CRC Each byte is transferred, beginning with the lowest bit. When two or more bytes are transferred, transfer begins with the lowest one. 12 DS04–33105–2v1E MB89R118B 5. Operating Modes The MB89R118B has the following 3 operating modes : Each mode specifies a different mechanism for how the transponder returns a response in reply to a request from the reader/writer : • Addressed mode The MB89R118B enters Addressed mode when the Address_flag is set to “1”. In Addressed mode, a request includes a UID (the Address_flag is set to “1” simultaneously), and only the transponder that matches the UID in the request returns a response. If no transponder that matches the UID exists, a response is not returned. • Non-Addressed mode The MB89R118B enters Non-Addressed mode when the Address_flag is set to “0”. In Non-Addressed mode, a request does not include a UID. The transponders that receive the request execute processing and return response in accordance with the command in the request. • Select mode The MB89R118B enters select mode when the Select_flag is set to “1”, and the Address_flag is set to “0”. In select mode, do not include a UID as a request. Of the transponders that receive the command, only the transponder in the select state executes processing and returns a response in accordance with the command in the request. 6. Request Format The following figure shows a typical example of the request data format, and the following table shows the definition of request flag bits. • Structure of the request frame Flag SOF Command code • Setting of Bit 1 to Bit 4 Bit Flag name 1 Sub-carrier_flag 2 Data_rate_flag 3 Inventory_flag 4 Protocol_Extension_flag Parameter 1/0 Data CRC EOF State/Description 0 1-subcarrier selected 1 2-subcarrier selected (not supported) 0 Low data rate (6.62 kbps) selected 1 High data rate (26.48 kbps) selected 0 Command other than Inventory command selected 1 Inventory command selected 0 Protocol not extended 1 Protocol extended (RFU*) * : Reserved for future use Note : “Inventory_flag” of bit 3 is determined whether “Inventory command” (select “1”) or other command (select “0”) is used. DS04–33105–2v1E 13 MB89R118B • Setting of Bit 5 to Bit 8 (When Inventory command is selected [Inventory_flag = “1”]) Bit Flag name 1/0 State/Description 5 AFI_flag 6 Nb_slots_flag 7 Option_flag 8 RFU* 0 AFI not set 1 AFI set (response when it is in accord with AFI of the transponder) 0 16 slots 1 1 slot 0 Command option not supported 1 Command option supported (not supported) 0 Set to “0” ⎯ 1 * : Reserved for future use • Setting of Bit 5 to Bit 8 (When the command other than Inventory command is selected [Inventory_flag = “0”]) Bit Flag name 1/0 State/Description 5 6 7 0 Request shall be executed according to the setting of Address_flag. 1 Select mode (Request shall be executed only by the transponder in select state.) The Address_flag shall be set to “0”. 0 Non-Addressed mode (UID not included in the command) 1 Addressed mode (UID included in the command) 0 Command option not supported (for the command not supporting the Option_flag) 1 Command option supported 0 Set to “0” Select_flag Address_flag Option_flag 8 RFU* ⎯ 1 * : Reserved for future use 7. Response Format The following figure shows a typical example of the response data format, and the following table shows the definition of the response flag bits. If the Error_flag is set to “1”, an error code field is generated in the response. If the Error_flag is set to “0”, this means no error, and If the Error_flag is set to “1”, this means any error generation. • Structure of the response frame SOF 14 Flag Parameter Data CRC EOF DS04–33105–2v1E MB89R118B • Response flag definitions Bit Flag name 1/0 Description 0 Error not found 1 Error found RFU* 0 Set to “0” 3 RFU* 0 Set to “0” 4 Extension_flag 0 Set to “0” 5 RFU* 0 Set to “0” 6 RFU* 0 Set to “0” 7 RFU* 0 Set to “0” 8 RFU* 0 Set to “0” 1 Error_flag 2 * : Reserved for future use • Error code definitions Error code Meaning “01” The specific command is not supported. Example: Command code error “02” Cannot recognize the command. The number of blocks is over the limit. Example: Format error “03” Specific options are not supported. “0F” Other errors “10” The specified block cannot be used (or was not found). “11” The specified block has already been locked and cannot be locked again. “12” The specified block has already been locked, and its contents cannot be updated. “13” The specified block could not be programmed normally (a write verify error occurred). “14” The specified block could not be locked normally (a lock verify error occurred) . Others Unused. 8. Anti-Collision Algorithm The MB89R118B executes an Anti-collision sequence loop based on an algorithm that complies with ISO/ IEC 15693-3. The Anti-collision algorithm is designed to examine the transponders located within reader/writer communication areas on the basis of UID. The reader/writer issues an Inventory command to transponders, and some transponders return responses while other transponders do not according to the algorithm explained in “10. Execution of Inventory Command by a Transponder”. DS04–33105–2v1E 15 MB89R118B 9. Request Parameter • Request Parameter Settings Set the reader/writer as follows before issuing the Inventory command. • The Nb_slots_flag (bit 6), which is a request flag, is set to the desired value : “0” : 16 slots (for plural transponders) “1” : 1 slot (for single transponder) • A mask length and a mask value are added after the command code. • The mask length represents the data length of the mask value in bits. • The mask value is integer bytes of data, transmitted beginning with the lowest bit. If the mask data is not a multiple of 8 (bits) in length, 0 is padded on the MSB side of the mask value so that the data is in units of bytes. The following figure shows an example of the mask value with padding. Since the mask length is 12 bits, the mask value is padded with 4 bits on the MSB side so that the mask data is in units of bytes (2 bytes = 16 bits in this case). If the AFI flag in the request flags is set in the format explained in “• Structure of the request frame of 6. Request Format”, an AFI field is added to the format. The command ends with transmission of an EOF signal as described in “1. Communication from Reader/Writer to Transponder”. Thereafter, processing in the first slot starts immediately. To proceed to the next slot, the reader/writer sends an EOF signal. • Format of the Command SOF Flag Command code Optional AFI Mask length 8 bits 8 bits 8 bits Mask value CRC 0 to 64 bits 16 bits 8 bits EOF • Example of the Mask Value with Padding LSB MSB 16 0000 0100 1100 1111 Pad Mask value DS04–33105–2v1E MB89R118B 10. Execution of Inventory Command by a Transponder A transponder returns a response to the reader/writer when its UID is equal to the value that consists of the mask value and the number of slots. The mask value is sent in the Inventory command, and the number of slots is determined by the number of times the EOF signal is transmitted. • Algorithm for execution of processing by a transponder The following figure shows the algorithm for the execution of processing by a transponder when an Inventory command is received. The next figure shows the relationship between the UID and the mask value. • Algorithm for Execution of Processing by a Transponder when Inventory Command NbS SN LSB (value, n) & Slot_Frame : Total number of slots (1 or 16) : Current slot number : The “n” least significant bits of value : Concatenation operator : SOF or EOF SN = 0 Nb_slots_flag=1? YES NO NbS = 1 SN_length=0 NbS = 16 SN_length=4 LSB (UID, SN_length + mask length) = LSB (SN, SN_length) & LSB (mask, mask length) ? YES Response transmission NO Wait (Slot_Frame) Slot_Frame=SOF? YES NO Slot_Frame=EOF? NO YES End of processing End of processing SN < NbS-1 NO YES SN = SN + 1 DS04–33105–2v1E End of processing 17 MB89R118B • Comparison of the mask value and the number of slots with the UID [Inventory command (the side of a reader/writer)] Padding Inventory command includes the mask value and mask length. The mask value is padded with “0” into the higher bit side so to make the byte-unit length (a multiple of 8 bits). 000••• Mask value (specified by the Inventory command) Mask length If Inventory command is received, the slot counter is reset to “0”. Slot counter If EOF is received, the increment of the slot counter is started by the transponder. Number of Mask value (no padding) slots The value is compared with the lowest bit in UID of the transponder. If the value is in accord with the mask value, the response is returned by the transponder. Ignored Compared Unique Identifier (UID) MSB 18 [Unique Identifier (the side of a transponder) ] LSB DS04–33105–2v1E MB89R118B 11. Anti-Collision Sequence • Execution of Anti-collision sequence A typical Anti-collision sequence that is applied when the number of slots is 16 is executed as follows : 1) The reader/writer sends an Inventory command. The Nb_slots_flag bit of the request flags is set to “0” to specify the number of slots. 2) In slot 0, transponder 1 transmits its response in the time t1_a from the detection of the rising edge of the EOF. In this case no collision occurs and the UID of transponder is received and registered by the reader/ writer. 3) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the response 1. 4) In slot 1, transponder 2 and transponder 3 transmit their response in the time t1_a from the detection of the rising edge of the EOF. In this case, the reader/writer cannot recognize the UIDs of the two transponders because the collision occurs, and the reader/writer remembers that a collision was detected in slot 1. 5) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the responses. 6) In slot 2, no transponder transmits a response. The reader/writer does not detect any response, and sends an EOF signal to switch to the next slot in the time t3_a from the detection of the rising edge of the EOF. 7) In slot 3, transponder 4 and transponder 5 transmit their response in the time t1_a from the detection of the rising edge of the EOF, and another collision occurs. 8) The reader/writer sends a request (for example, a Read Single Block command, described later) to the transponder 1, which UID was already correctly received. 9) All transponders detect an SOF signal and exit the Anti-collision sequence. In this case, since the request is addressed to transponder 1 (Addressed mode), only transponder 1 transmits its response. 10) All transponders are ready to receive another request from the reader/writer. If the Inventory command is sent again, the Anti-collision sequence starts from slot 0. Note : t1_a, t2_a, t3_a are specified in “12. Timing definitions”. DS04–33105–2v1E 19 MB89R118B • Example of Anti-Collision Sequence Slot_Counter Reader/writer Slot 0 (1) SOF Inventory command (2) EOF t1_a Status t2_a t1_a No collision Slot 2 (5) EOF t2_a Collision Slot 3 (6) (7) EOF EOF Response 4 MB89R118B Response 5 Timing t3_a Status No response Slot_Counter t1_a t2_a Collision (8) Reader/writer SOF Command (to Transponder1) (9) EOF Response (Transponder1) MB89R118B Timing Response 2 Response 3 Timing Reader/writer (4) EOF Response 1 MB89R118B Slot_Counter Slot 1 (3) t3_a t1_a Status 20 DS04–33105–2v1E MB89R118B 12. Timing definitions (1) Period during which the MB89R118B waits for the start of response transmission after an EOF signal transmitted from the reader/writer : t1_a After detection of an EOF signal sent from the reader/writer, MB89R118B must wait for a certain time (t1_a) before sending a response to the reader/writer. t1_a begins at the rising edge of the EOF pulse, and it is defined as following. The minimum value is 4320/fc (= 318.6 μs), the nominal value is 4352/fc (= 320.9 μs), and the maximum value is 4384/fc (=323.3 μs). Even if the 10% ASK modulated signal from the reader/writer is detected within the time t1_a, the transponder ignore the signal and wait for further time t1_a before starting to transmit. (2) Period during which the MB89R118B ignores modulated signals after an EOF signal transmitted from the reader/writer : tmit After detection of an EOF signal sent from the reader/writer, MB89R118B must ignore the 10% ASK modulated signals from the reader/writer for a time (tmit). tmit begins at the rising edge of the EOF pulse. The minimum value of tmit is defined as 4384/fc (323.3 μs) + tnrt. In the above expression, tnrt stands for the response time of MB89R118B. (3) Period during which the reader/writer waits before sending a request : t2_a When the reader/writer has received a response from the transponder to a previous request other than Inventory and Stay Quiet command, it shall wait a time t2_a before sending a subsequent request. The minimum value of t2_a is 309.2 μs. It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) . (4) Period during which the reader/writer waits before sending a request during execution of the Inventory command : t2inv While an Inventory command is being executed, the reader/writer sends an EOF signal when it shifts to the next slot. In this case, the wait time is defined as follows depending on whether transponders return responses : - Wait time applied when the reader/writer has received one or more responses : t2invwr It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) that when the reader/writer has received one or more responses, the reader/writer must wait until responses from the transponders have been completed (that is, the reader/writer receives an EOF signal or tnrt passes). After that, the reader/writer must wait until t2_a passes before sending an EOF signal to switch to the next slot. - Wait time applied when the reader/writer has not received any responses : t3_a When the reader/writer has not received any responses from the MB89R118B, the reader/writer must wait until t3_a passes before sending an EOF signal. In this case, t3_a begins at the rising edge of the EOF pulse that was sent previously. The minimum value of t3_a is defined as 4384/fc (= 323.3 μs) + tnrt. MB89R118B does not support the minimum value of t3_a as “4384/fc (323.3 μs) + tsof” when the reader/ writer sends a 100% modulated EOF, which is defined in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1). • Timing specification Min Typ Max t1_a 4320/fc = 318.6 μs 4352/fc = 320.9 μs 4384/fc = 323.3 μs tmit 4384/fc(323.3 μs)+ tnrt ⎯ ⎯ t2_a 4192/fc = 309.2 μs ⎯ ⎯ t2invwr t2_a + tnrt ⎯ ⎯ t3_a 4384/fc(323.3 μs)+ tnrt ⎯ ⎯ ⎯ Low data rate : 15708.16 μs High data rate : 3927.04 μs Fast Low data rate : 7854.08 μs Fast High data rate : 1963.52 μs ⎯ tnrt DS04–33105–2v1E 21 MB89R118B ■ COMMAND LIST All Mandatory and Optional commands defined by ISO/IEC 15693-3 are supported. The following Custom commands are supported : • EAS command : Using for preventing the theft of goods and goods-monitoring • Write EAS command : Writing data to the EAS bit • Read Multiple Blocks Unlimited command : Enable to read FRAM area of up to 2048 bytes in a lump • Fast command : Respond at double speed compared to ISO commands • Command list Command code 22 Command name Command Type Details “01H” Inventory Mandatory Execute the Anti-collision sequence and get UID. “02H” Stay Quiet Mandatory Enter the Quiet state “20H” Read Single Block Optional Read the requested 1 block data in the user area/system area “21H” Write Single Block Optional Write the requested 1 block data in the user area “22H” Lock Block Optional Lock (disable to write) the requested 1 block in the user area “23H” Read Multiple Blocks Optional Read the requested 1 or 2 blocks data in the user area/ system area “24H” Write Multiple Blocks Optional Write the requested 1 or 2 blocks data in the user area “25H” Select Optional Enter the select (communication selected) state “26H” Reset to Ready Optional Enter the ready (communication enabled) state “27H” Write AFI Optional Write AFI (Application Family Identifier) data into FRAM. “28H” Lock AFI Optional Lock AFI data (disable to write) “29H” Write DSFID Optional Write DSFID (Data Storage Format Identifier) data into FRAM “2AH” Lock DSFID Optional Lock DSFID (Data Storage Format Identifier) data (disable to write) “2BH” Get System Information Optional Read the system information value (UID, DSFID, AFI, number of bytes per block, number of blocks in user area, and IC information) “2CH” Get Multiple Block Security Status Optional Read the block security status stored in system area. “A0H” EAS Custom When EAS bit is “1”, reply response code 6 times. “A1H” Write EAS Custom Write EAS data (1 bit). Data “1” validates anti-theft/goodsmonitoring, and data “0” invalidates them. “A5H” Read Multiple Blocks Unlimited Custom Read the specified data of up to 256 blocks in the user area/system area. “B1H” Fast Inventory Custom Fast response Inventory command “C0H” Fast Read Single Block Custom Fast response Read Single Block command “C1H” Fast Write Single Block Custom Fast response Write Single Block command “C3H” Fast Read Multiple Blocks Custom Fast response Read Multiple Blocks command “C4H” Fast Write Multiple Blocks Custom Fast response Write Multiple Blocks command “D1H” Fast Write EAS Custom Fast response Write EAS command “D5H” Fast Read Multiple Blocks Unlimited Custom Fast response Read Multiple Blocks Unlimited command DS04–33105–2v1E MB89R118B ■ COMMAND DESCRIPTION 1. Description of Mandatory Command 1-1. Inventory command The Inventory command executes the Anti-collision sequence. Even though an error is detected during execution of this command, a response indicating the error is not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response is returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. • Request [Request from the reader/writer to the transponder] Command SOF Flag Optional AFI (Inventory) 8 bits 8 bits (“01H”) 8 bits Mask length Mask value CRC 8 bits 0 to 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID CRC 64 bits 16 bits EOF 1-2. Stay Quiet command On receiving the Stay Quiet command, the transponder enters the quiet state. The transponder does not return any responses, including an error indication. In the quiet state, the transponder does not execute any request for which the Inventory_flag (bit 3) is set to “1” and executes only a command for which the Address_flag (bit 6) is set to “1”. The transponder exits the quiet state only in the following cases: • The transponder enters the power-off state. • The transponder receives the Select command and enters the select state. • The transponder receives the Reset to Ready command and enters the ready state. • Request [Request from the reader/writer to the transponder] Command SOF Flag (Stay Quiet) 8 bits 8 bits (“02H”) UID (necessary) CRC 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] No response DS04–33105–2v1E 23 MB89R118B 2. Description of Optional Command 2-1. Read Single Block command On receiving the Read Single Block command, the transponder reads the data stored in the specified singleblock to the reader/writer. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Single Block) (Addressed mode) 8 bits (“20H”) 8 bits Number of blocks CRC 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag EOF Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF 2-2. Write Single Block command On receiving the Write Single Block command, the transponder writes the single-block data included in the request to the specified block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response <t1nom : typical 320.9 μs> (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command). • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Write Single Block) (Addressed mode) 8 bits 24 8 bits (“21H”) 64 bits Number of blocks Data CRC 8 bits 64 bits 16 bits EOF DS04–33105–2v1E MB89R118B • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-3. Lock Block command On receiving the Lock Block command, the transponder locks (write disable) permanently the data stored in one specified single-block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response. (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command.) Once the Lock Block command has been received, data in the locked block cannot be changed by the Write Single (Multiple) Block (s) command. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Lock Block) (Addressed mode) 8 bits 8 bits (“22H”) 64 bits Number of blocks CRC 8 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS04–33105–2v1E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 25 MB89R118B 2-4. Read Multiple Blocks Command On receiving the Read Multiple Blocks command, the transponder reads the data stored in the specified successive blocks to the reader/writer. Up to 2 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Read Single Block command). Note : For execution in the Addressed mode, the Read Multiple Blocks command must be run without shutting off the RF power supply after obtaining the UID, for example, using the Inventory command. No response may be expected when RF power supply is not stable. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Multiple Blocks) (Addressed mode) 8 bits 8 bits (“23H”) First block number Number of blocks CRC 8 bits 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF EOF Repeated as required 2-5. Write Multiple Blocks Command On receiving the Write Multiple Blocks command, the transponder writes the successive multiple-block data included in the request to the specified blocks. Up to 2 blocks of data can be written for one request. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such 26 DS04–33105–2v1E MB89R118B reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write UID Multiple Blocks) (Addressed mode) 8 bits 8 bits (“24H”) First block number Number of blocks Data CRC 8 bits 8 bits 64 bits or 128 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-6. Select command Of the transponders that received the Select command, only the transponder whose UID matches the UID included in the request enters the select state and returns a response. The other transponders, whose UIDs do not match the UID in the request, enter the ready states without returning any response. The Select command is used only in Addressed mode. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Select) UID (necessary) 8 bits (“25H”) 8 bits 64 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS04–33105–2v1E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 27 MB89R118B 2-7. Reset to Ready command On receiving the Reset to Ready command, the transponder enters the ready state. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Reset to Ready) UID (Addressed mode) CRC 64 bits 16 bits 8 bits (“26H”) 8 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-8. Write AFI command On receiving the Write AFI command, the transponder writes the data of AFI to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write AFI) UID (Addressed mode) 8 bits 8 bits (“27H”) 64 bits AFI CRC EOF 8 bits 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF 28 Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF DS04–33105–2v1E MB89R118B 2-9. Lock AFI command On receiving the Lock AFI command, the transponder locks (write disable) permanently the data of AFI. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock AFI command has been received, the data of AFI cannot be changed by the Write AFI command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock AFI) UID (Addressed mode) 8 bits (“28H”) 8 bits CRC 64 bits EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-10. Write DSFID command On receiving the Write DSFID command, the transponder writes the data of DSFID to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write DSFID) UID (Addressed mode) 8 bits DS04–33105–2v1E 8 bits (“29H”) 64 bits DSFID CRC 8 bits 16 bits EOF 29 MB89R118B • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-11. Lock DSFID command On receiving the Lock DSFID command, the transponder locks (write disable) permanently the data of DSFID. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock DSFID command has been received, the data of DSFID cannot be changed by the Write DSFID command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock DSFID) 8 bits UID (Addressed mode) CRC 64 bits 16 bits 8 bits (“2AH”) EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF 30 Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF DS04–33105–2v1E MB89R118B 2-12. Get System Information command On receiving the Get System Information command, the transponder reads the chip information of UID, AFI, DSFID, and so on to the reader/writer as a response. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Get System Information) UID (Addressed mode) 8 bits 8 bits (“2BH”) 64 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag Information flag 8 bits (“00H”) 8 bits UID DSFID AFI 64 bits 8 bits 8 bits Memory size IC reference 16 bits 8 bits EOF CRC EOF 16 bits The followings show the definitions of the Information flag and the memory size information (transponder memory size information) included in the response of the Get System Information command. However, the size of blocks and number of blocks in the user area shown in the memory size information about a transponder indicate one less than the actual value. • Definition of information flag Bit Flag name State Description 0 DSFID is not supported or does not exist. 1 DSFID is supported or exists. 0 AFI is not supported or does not exist. 1 AFI is supported or exists. 0 Memory size information is not supported or does not exist. 1 Memory size information is supported or exists. 0 IC reference information is not supported or does not exist. 1 IC reference information is supported or exists. 1 DSFID 2 AFI 3 Memory size 4 IC reference 5 RFU* ⎯ 6 RFU* ⎯ 7 RFU* ⎯ 8 RFU* ⎯ Set to “0” * : Reserved for future use Note : For MB89R118B, set “0FH” (set “1” for bit 1 to bit 4 and set “0” for bit 5 to bit 8) . DS04–33105–2v1E 31 MB89R118B • Memory size information about a transponder MSB LSB 16 14 13 RFU* 9 8 Size of blocks (Number of bytes in 1 block) 1 Number of blocks in the user area * : Reserved for future use Note : The memory size of the MB89R118B which is consisted of 250 blocks (8 bytes per block) in the user area, the memory size information is hexadecimal “07F9H”. 2-13. Get Multiple Block Security Status Command On receiving the Get Multiple Block Security Status command, the transponder reads the block security status stored in a system area to the reader/writer as a response. Up to 64 blocks of data can be read for one request. The number of blocks specified in this request must be the value that is 1 block less than the actual number of the blocks whose security status is to be obtained. The first block number specified in this request must be a multiple of 8. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Get Multiple Block (Addressed mode) Security Status) 8 bits 8 bits (“2CH”) First block number Number of blocks CRC 8 bits 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag 8 bits (“00H”) 32 Block security status CRC 8 bits (repeated as required) 16 bits EOF EOF DS04–33105–2v1E MB89R118B 3. Custom Command The IC manufacturing code is required to use a Custom command. The IC manufacturing code for the MB89R118B is “08H”. 3-1. EAS command On EAS command reception, the transponder returns the response code “5AH” repeated 6 times after the specified flag (“00H”) if the EAS bit is “1” or returns no response if the EAS bit is “0”. The EAS command can be executed only when the transponder is in the ready or select state. • Request [Request from the reader/writer to the transponder] Flag Command (EAS) IC manufacturer code (necessary) CRC 8 bits 8 bits (“A0H”) 8 bits (“08H”) 16 bits SOF EOF • Response [Response from the transponder to the reader/writer] SOF Flag Response code 8 bits (“00H”) CRC 48 bits (6 times repeat of “5AH”) EOF 16 bits 3-2. Write EAS command On Write EAS command reception, the transponder writes the EAS bit to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode as the EAS data. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out error occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID SOF Flag (Write EAS) code (necessary) (Addressed mode) 8 bits 8 bits (“A1H”) 8 bits (“08H”) 64 bits Data CRC 8 bits (“00H” or “01H”) 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS04–33105–2v1E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 33 MB89R118B 3-3. Read Multiple Blocks Unlimited Command On receiving the Read Multiple Blocks Unlimited command, the transponder reads the data stored in the specified successive blocks to the reader/writer as a response. Up to 256 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] UID Command First block Number IC manufacturer (Addressed SOF Flag (Read Multiple number of blocks code (necessary) mode) Blocks Unlimited) 8 bits 8 bits (“A5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF Repeated as required 3-4. Fast Inventory Command The Fast Inventory command is the same as the Inventory Command that executes the Anti-collision sequence. The data rate in the response is twice as defined in ISO/IEC 15693. Even though an error is detected during execution of this command, a response indicating the error is not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response is returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. 34 DS04–33105–2v1E MB89R118B • Request [Request from the reader/writer to the transponder] Command IC manufacturer SOF Flag (Fast Inventory) code (necessary) 8 bits 8 bits (“B1H”) Optional AFI Mask length Mask value CRC 8 bits 8 bits 0 to 64 bits 16 bits 8 bits (“08H”) EOF • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID CRC 64 bits 16 bits EOF 3-5. Fast Read Single Block Command The Fast Read Single Block command is the same as the Read Single Block command that reads the data stored in the specific single-block. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID Number SOF Flag (Fast Read Single Block) code (necessary) (Addressed mode) of blocks 8 bits 8 bits (“C0H”) 8 bits (“08H”) 64 bits 8 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF 3-6. Fast Write Single Block Command The Fast Write Single Block command is the same as the Write Single Block command that writes the singleblock data included in the request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response <t1nom : typical 320.9 μs> (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . DS04–33105–2v1E 35 MB89R118B • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits UID Number Command (Fast IC manufacturer (Addressed of blocks Write Single Block) code (necessary) mode) 8 bits (“C1H”) 8 bits (“08H”) 64 bits 8 bits Data CRC 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 3-7. Fast Read Multiple Blocks Command The Fast Read Multiple Blocks command is the same as the Read Multiple Blocks command that reads the data of the specified successive blocks. Up to 2 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/ IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Fast Read Single Block command). Note : For execution in the Addressed mode, the Fast Read Multiple Blocks command must be run without shutting off the RF power supply after obtaining the UID, for example, using the Inventory command. No response may be expected when RF power supply is not stable. • Request [Request from the reader/writer to the transponder] UID Command IC manufacturer (Addressed SOF Flag (Fast Read code (necessary) mode) Multiple Blocks) 8 bits 8 bits (“C3H”) 8 bits (“08H”) 64 bits First block number Number of blocks CRC 8 bits 8 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag 8 bits (“00H”) Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits EOF Repeated as required 36 DS04–33105–2v1E MB89R118B 3-8. Fast Write Multiple Blocks Command The Fast Write Multiple Blocks command is the same as the Write Multiple Blocks command that writes the successive multiple-block data included in the request. Up to 2 blocks of data can be written for one request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Fast Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Fast Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Fast Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still returns its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] First UID Command Number IC manufacturer (Addressed block SOF Flag (Fast Write of blocks code number mode) Multiple Blocks) 8 bits 8 bits (“C4H”) 8 bits (“08H”) 64 bits 8 bits 8 bits Data CRC EOF 64 bits or 16 bits 128 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS04–33105–2v1E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 37 MB89R118B 3-9. Fast Write EAS Command The Fast Write EAS command is the same as Write EAS command that writes the EAS bit to FRAM. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after <t1nom + a multiple of 4096/fc (302.1 μs)> with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out error occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] IC manufacturer UID Command code SOF Flag (Addressed mode) (Fast Write EAS) (necessary) 8 bits 8 bits (“D1H”) 8 bits (“08H”) 64 bits Data CRC EOF 8 bits (“00H” or “01H”) 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 3-10. Fast Read Multiple Blocks Unlimited Command The Fast Read Multiple Blocks Unlimited command is the same as the Read Multiple Blocks Unlimited command that reads the data of the specified successive blocks. Up to 256 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] Number UID IC manufacturer Command First block of (Addressed code SOF Flag (Fast Read Multiple number blocks mode) (necessary) Blocks Unlimited) 8 bits 8 bits (“D5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] 38 DS04–33105–2v1E MB89R118B (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF Repeated as required 4. Command Execution Time 4-1. Write Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data writing to all user areas (2000 bytes) of the FRAM and verification with the Write Multiple Blocks command is estimated to be 1.4 seconds. 4-2. Read Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data reading for all user areas (2000 bytes) of the FRAM with the Read Multiple Blocks command is estimated to be 1.5 seconds. In addition, with the Fast Read Multiple Blocks command is estimated to be 1.1 seconds, and with the Fast Read Multiple Blocks Unlimited command is estimated to be 0.35 seconds. DS04–33105–2v1E 39 MB89R118B ■ STATE TRANSITION DIAGRAM • Definition of states Each state of MB89R118B is defined as follows. • Power-off state : In the power-off state, a transponder cannot fulfill the function so that the voltage from a reader/writer is underpowered. • Ready state : In the ready state, the MB89R118B can execute all commands if the Select_flag is not set. • Quiet state : In the quiet state, the MB89R118B can execute the command for which the Inventory_flag is not set and the Address_flag is set. • Select state : In the select state, the MB89R118B can execute the command for which the Select_flag is set. As shown in figure below, the MB89R118B moves from one state to another according to the status of power and by a command. • State transition diagram Out of field Power-off state Out of field Out of field In field Any other command where Select_flag is not set. Ready state Reset to Ready command Reset to Ready command where Select_flag is set or Select (different UID) . Select command (UID) Stay Quiet (UID) command Select command (UID) Select state Quiet state Stay Quiet (UID) command Any other command where Address_flag is set and where Inventory_flag is not set. 40 Any other command where Select_flag is set. DS04–33105–2v1E MB89R118B ■ ABSOLUTE MAXIMUM RATINGS Parameter Symbol Ratings Min Max Unit Remarks Maximum antenna input current Imax ⎯ 90 mAp−p ESD voltage immunity VESD ±2 ⎯ kV Storage temperature Tstg − 40 + 85 °C Human body model WARNING: Semiconductor devices may be permanently damaged by application of stress (including, without limitation, voltage, current or temperature) in excess of absolute maximum ratings. Do not exceed any of these ratings. ■ RECOMMENDED OPERATING CONDITIONS Parameter Symbol Value Min Typ Max Unit Minimum antenna input voltage VRF ⎯ 8.7 11.2 Vp−p Antenna input current IRF ⎯ ⎯ 30 mArms ASK modulation index (10%) m 10 ⎯ 30 % ASK modulation index (100%) m 95 ⎯ 100 % t1 6.0 ⎯ 9.44 μs t2 3.0 ⎯ t1 μs t3 0 ⎯ 4.5 μs t1 6.0 ⎯ 9.44 μs t2 2.1 ⎯ t1 μs t3 0 ⎯ 4.5 μs t4 0 ⎯ 0.8 μs Input frequency Fin 13.553 13.560 13.567 MHz Operating temperature Ta − 20 ⎯ + 85 °C ASK pulse width (10%) ASK pulse width (100%) Remarks WARNING: The recommended operating conditions are required in order to ensure the normal operation of the semiconductor device. All of the device's electrical characteristics are warranted when the device is operated under these conditions. Any use of semiconductor devices will be under their recommended operating condition. Operation under any conditions other than these conditions may adversely affect reliability of device and could result in device failure. No warranty is made with respect to any use, operating conditions or combinations not represented on this data sheet. If you are considering application under any conditions other than listed herein, please contact sales representatives beforehand. DS04–33105–2v1E 41 MB89R118B ■ ELECTRICAL CHARACTERISTICS DC characteristics Parameter Symbol Value Unit Min Typ Max VDP3 2.7 3.1 3.6 V Load modulation resistance RlSW ⎯ 1.1 ⎯ kΩ Input capacitance* Cant 22.8 24.0 25.2 pF Internal power supply voltage Remarks Voltage between antennas = 2 Vrms * : Values are controlled by process monitoring in the wafer. 42 DS04–33105–2v1E MB89R118B ■ NOTES ON USING • Notes on the radio interface - It is the user’s responsibility to reduce the effects of the electromagnetic waves produced by the reader/ writer. - The user must optimize the shapes of the antenna coils for transponder and reader/writer so that they match the transmission distance and installation space required for the user’s application. - If the user intends to access multiple transponders from a reader/writer, the interference between transponders or between the reader/writer and a transponder may degrade communication performance (transmission distance and communication time) . Therefore, a user who intends to design a system using multiple transponders should consider this point. • FRAM reliability Up to 1010 writes to the FRAM memory and 10 years of data retention at Ta = 0 °C to + 55 °C are guaranteed. For the data retention characteristics of the mounting temperature at + 150 °C or higher, refer to “■ SHIPPING METHOD AND RECOMMENDED ASSEMBLY CONDITIONS”. • Difference between rating of ISO/IEC 15693 and MB89R118B implementation. The table comparing rating of ISO/IEC 15693 to method of MB89R118B is shown in following. Note that the MB89R118B implementation does not support following ratings. • 1 out of 256 mode data coding • 2-subcarrier • Supports more than 3 blocks for Read/Write Multiple Blocks command (If “Read/Write Multiple Blocks Unlimited command” of Custom commands is used, enables to support more than 3 blocks.) DS04–33105–2v1E 43 MB89R118B • Comparison between ratings of ISO/IEC15693 and specification of MB89R118B ISO/IEC15693 methParameter Details od Communication method Range of modulation rate Data coding Subcarrier Mandatory command Optional command 44 MB89R118B method 10% ASK modulation method Correspondence Correspondence 100% ASK modulation method Correspondence Correspondence (At using of 10% ASK) 10% to 30% 10% to 30% 1 out of 256 Correspondence Not correspondence 1 out of 4 Correspondence Correspondence 1-subcarrier Correspondence Correspondence 2-subcarrier Correspondence Not correspondence Inventory command Correspondence Correspondence Stay Quiet command Correspondence Correspondence Read Single Block command Correspondence Correspondence Write Single Block command Correspondence Correspondence Lock Block command Correspondence Correspondence Read Multiple Blocks command Correspondence Correspondence uppermost 2 blocks Write Multiple Blocks command Correspondence Correspondence uppermost 2 blocks Select command Correspondence Correspondence Reset to Ready command Correspondence Correspondence Write AFI command Correspondence Correspondence Lock AFI command Correspondence Correspondence Write DSFID command Correspondence Correspondence Lock DSFID command Correspondence Correspondence Get System Information command Correspondence Correspondence Get Multiple Block Security Status command Correspondence Correspondence DS04–33105–2v1E MB89R118B ■ SHIPPING METHOD AND RECOMMENDED ASSEMBLY CONDITIONS • Shipping method The following shows shipping method and ordering information for the MB89R118B. Please inquire separately for the details. Part no. Wafer thickness Tip dicing Shipping method MB89R118B-DI15 150 μm ± 25.4 μm Completed Wafer shipping (Mount gold-plated bump in antenna terminal etc.) • Recommended assembly conditions The MB89R118B is recommended to be mounted in the following condition to maintain the data retention characteristics of the FRAM memory when the chip is mounted. - Mounting temperature of + 175 °C or lower, and 120 minutes or shorter when applied at high temperature, or - Mounting temperature of + 200 °C or lower, and 60 seconds or shorter when applied at high temperature +175 Temperature [ °C] Temperature [ °C] +200 +25 +25 DS04–33105–2v1E 120 60 Time [min] Time [s] 45 MB89R118B ■ MAJOR CHANGES IN THIS EDITION A change on a page is indicated by a vertical line drawn on the left side of that page. Page Section Change Results 6 • Types of AFI Revised and corrected the table. • Setting of Bit 5 to Bit 8 (When Inven- Revised the Nb_slots_flag. tory command is selected [Inventory_flag = “1”]) 14 40 46 • Setting of Bit 5 to Bit 8 (When the command other than Inventory command is selected [Inventory_flag = “0”]) Revised Select_flag. 0: Request shall be executed according to the setting of Address_flag. 1: Select mode (Request shall be executed only by the transponder in select state.) The Address_flag shall be set to “0”. ■ STATE TRANSITION DIAGRAM Revised Select state. Any other command where Select_flag is set. DS04–33105–2v1E MB89R118B MEMO DS04–33105–2v1E 47 MB89R118B FUJITSU SEMICONDUCTOR LIMITED Shin-Yokohama Chuo Building, 2-100-45 Shin-Yokohama, Kohoku-ku, Yokohama, Kanagawa 222-0033, Japan http://jp.fujitsu.com/fsl/en/ All Rights Reserved. FUJITSU SEMICONDUCTOR LIMITED, its subsidiaries and affiliates (collectively, "FUJITSU SEMICONDUCTOR") reserves the right to make changes to the information contained in this document without notice. Please contact your FUJITSU SEMICONDUCTOR sales representatives before order of FUJITSU SEMICONDUCTOR device. Information contained in this document, such as descriptions of function and application circuit examples is presented solely for reference to examples of operations and uses of FUJITSU SEMICONDUCTOR device. FUJITSU SEMICONDUCTOR disclaims any and all warranties of any kind, whether express or implied, related to such information, including, without limitation, quality, accuracy, performance, proper operation of the device or non-infringement. If you develop equipment or product incorporating the FUJITSU SEMICONDUCTOR device based on such information, you must assume any responsibility or liability arising out of or in connection with such information or any use thereof. FUJITSU SEMICONDUCTOR assumes no responsibility or liability for any damages whatsoever arising out of or in connection with such information or any use thereof. Nothing contained in this document shall be construed as granting or conferring any right under any patents, copyrights, or any other intellectual property rights of FUJITSU SEMICONDUCTOR or any third party by license or otherwise, express or implied. FUJITSU SEMICONDUCTOR assumes no responsibility or liability for any infringement of any intellectual property rights or other rights of third parties resulting from or in connection with the information contained herein or use thereof. The products described in this document are designed, developed and manufactured as contemplated for general use including without limitation, ordinary industrial use, general office use, personal use, and household use, but are not designed, developed and manufactured as contemplated (1) for use accompanying fatal risks or dangers that, unless extremely high levels of safety is secured, could lead directly to death, personal injury, severe physical damage or other loss (including, without limitation, use in nuclear facility, aircraft flight control system, air traffic control system, mass transport control system, medical life support system and military application), or (2) for use requiring extremely high level of reliability (including, without limitation, submersible repeater and artificial satellite). FUJITSU SEMICONDUCTOR shall not be liable for you and/or any third party for any claims or damages arising out of or in connection with above-mentioned uses of the products. Any semiconductor devices fail or malfunction with some probability. You are responsible for providing adequate designs and safeguards against injury, damage or loss from such failures or malfunctions, by incorporating safety design measures into your facility, equipments and products such as redundancy, fire protection, and prevention of overcurrent levels and other abnormal operating conditions. The products and technical information described in this document are subject to the Foreign Exchange and Foreign Trade Control Law of Japan, and may be subject to export or import laws or regulations in U.S. or other countries. You are responsible for ensuring compliance with such laws and regulations relating to export or re-export of the products and technical information described herein. All company names, brand names and trademarks herein are property of their respective owners. Edited: System Memory Business Division