FUJITSU SEMICONDUCTOR DATA SHEET DS411-00001-4v1-E ASSP ISO/IEC 15693 Compliant FRAM Embedded TM High-speed RFID LSI MB89R118C ■ DESCRIPTION The MB89R118C is a vicinity type of RFID LSI device embedded with 2 Kbytes FRAM, which enables fast and frequent write operation. ■ FEATURES • • • • • • • • • • • • • Memory capacity of 2 Kbytes FRAM (including 2000 bytes of user area) 8-byte/block configuration, 256 blocks High-speed data transmission at 26.48 kbps Fast command supported (data transmission at 52.97 kbps) (Transponder → Reader/Writer) Carrier frequency at 13.56 MHz Anti-collision function : 30 tags per second Read/Write endurance : 1012 times Data retention : 10 years ( + 85 °C) , 30 years (+70 °C) 64-bit UID FRAM memory data protection Electronic article surveillance (EAS) command Compliance with ISO/IEC 15693 (partly not supported*) Compliance with ISO/IEC 18000-3 (Mode 1) (partly not supported*) * : Refer to “ ■ USAGE NOTES”. Note : FerVID family is a trademark of Fujitsu Semiconductor Limited, Japan. Copyright 2010-2015 FUJITSU SEMICONDUCTOR LIMITED 2015.8 MB89R118C ■ BLOCK DIAGRAM Analog RF interface Antenna coil Digital control FRAM Rectifier Clock generator VDD I/O R/W Power supply voltage control Modulator Demodulator 2 Clock Commands FRAM access Data output 2 Kbytes Data output Data input Anti-collision function Data input DS411-00001-4v1-E MB89R118C ■ MEMORY MAP This section describes the FRAM memory, which is the internal memory of the MB89R118C. • FRAM Configuration The FRAM has 2000 bytes for use as user area and 48 bytes for use as system area. The FRAM memory areas consist of a total of 256 blocks (250 blocks of user area and 6 blocks of system area). Each block can store 64 bits (8 bytes) of data. The block is the unit used for the writing and reading of FRAM data. The memory configuration of FRAM is shown below. • FRAM memory configuration Area Block No. User area (2000 bytes) System area (48 bytes) Details Data read Data write 00H to F9H User area Yes Yes FAH UID (64 bits) Yes No FBH AFI, DSFID, EAS, security status Yes Limited FCH to FFH Block security status Yes No Blocks “00H” to “F9H” are user area. The user area is defined as an area that can be accessed when the corresponding block address is specified. On the other hand, Blocks “FAH” to “FFH” are system area. The system area is defined as an area that can be accessed only with a specific command. The system area consists of 6 blocks and contains UID, AFI, DSFID, EAS bits, and security status (can write or cannot write) data for individual block. UID is fixed and cannot be updated. AFI, DSFID, and EAS bits are written at the factory, and can be updated and locked (disable to write) with commands (Only EAS bit cannot be locked) . As shown in above, “FAH” holds the UID, and “FCH” to “FFH” hold the security status information on individual user areas. The configuration of “FBH” to “FFH” blocks is shown below. “FBH” block is used for EAS status, AFI and DSFID data, the security status data of AFI and DSFID. “FCH” to “FFH” blocks contain block security status data. • Structure of “FBH” MSB 64 LSB 57 56 EAS Status 33 RFU* 32 25 24 17 DSFID Lock AFI Lock Status Status 16 DSFID 9 8 1 AFI * : Reserved for future use DS411-00001-4v1-E 3 MB89R118C • Structure of “FCH” to “FFH” Block security status (BSS) of user block 3FH Block security status (BSS) of user block 00H MSB LSB FCH 3F 3E 3D 3C 3B 3A 39 03 02 01 00 FDH 7F 7E 7D 7C 7B 7A 79 43 42 41 40 FEH BF BE BD BC BB BA B9 83 C3 82 C2 81 C1 80 C0 FFH RFU* (6 bits) F9 * : Reserved for future use The security status of the user area is stored in the block security status bit in system area blocks of “FCH” to “FFH” per bit in each block. A user area is unlocked when the corresponding block security status bit is “0”; it is locked (disable to write state) when the corresponding block security status bit is “1”. EAS bit is a 1 bit, and it is used for setting EAS status. It is possible to read/write data of 2 blocks at one time in the user area (If Read Multiple Blocks Unlimited command is used, up to 256 blocks can be accessed at one time) . 4 DS411-00001-4v1-E MB89R118C ■ DATA ELEMENT DEFINITION 1. Unique Identifier (UID) The MB89R118C has a 64-bit unique identifier (UID) that complies with ISO/IEC 15693-3. The UID is used to distinguish a transponder from another transponder in the anti-collision algorithm described later. The UID consists of the 3 items shown in the following. • An 8-bit data whose value is always “E0H” (bit 57 to bit 64) • An 8-bit IC manufacturer code whose value is always “08H”, and is defined by ISO/IEC 7816-6/AMI (bit 49 to bit 56) • Unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR (bit 1 to bit 48) Among the unique 48-bit serial number assigned by FUJITSU SEMICONDUCTOR, the 1 byte from bit 41 to bit 48 defines MB89R118C code whose value is “01H”. And the 5 bytes from bit 1 to bit 40 define other serial number. • Structure of UID MSB LSB 64 57 56 “E0H” DS411-00001-4v1-E 49 48 IC manufacturer code “08H” 41 40 “01H” 1 Other serial number Unique serial number assigned by FUJITSU SEMICONDUCTOR 5 MB89R118C 2. Application Family Identifier (AFI) The application family identifier (AFI) identifies the type of application set by the transponder. The AFI can be written with a command. The AFI is 8-bit data and is stored in the system area of FRAM. The factory default setting of the AFI is “00H”. • Types of AFI Application Application Sub-Family Family (bit 8 to bit 5) (bit 4 to bit 1) Application Use Field Example/Note “0” “0” All families and sub-families No applicative preselection X “0” All sub-families of family X Wide applicative preselection X Y Only the Yth sub-families of family X ⎯ “0” Y All families of Yth sub-families ⎯ “1” “0”, Y Transport Mass transit, bus, airline “2” “0”, Y Financial IEP, banking, retail “3” “0”, Y Identification Access control “4” “0”, Y Telecommunication Public telephone, GSM “5” “0”, Y Medical ⎯ “6” “0”, Y Multimedia Internet services “7” “0”, Y Gaming ⎯ “8” “0”, Y Data storage Portable files “9” “0”, Y EAN-UCC system for application identifiers Managed by ISO/IEC JTC 1/SC 31 “A” “0”, Y ISO/IEC JTC 1/SC 31 Data identifiers as defined in ISO/IEC 15418 “B” “0”, Y UPU Managed by ISO/IEC JTC 1/SC31 “C” “0”, Y IATA Managed by ISO/IEC JTC 1 “D” “0”, Y “E” “0”, Y “F” “0”, Y Managed by ISO/IEC JTC 1/SC 17 RFU* Managed by ISO/IEC JTC 1/SC 17 Managed by ISO/IEC JTC 1/SC 17 * : Reserved for future use Note : Both X value and Y value are “1” to “F”. In the status of the AFI_flag setting; • If the AFI is not supported by the transponder, no response to all requests is returned. • If the AFI is supported by the transponder, the response is returned only if the value is in accord with the AFI sent from a reader/writer. 3. Data Storage Format Identifier (DSFID) The data storage format identifier (DSFID) indicates how data is structured in the transponder (LSI memory device). The DSFID can be programmed with a command. The DSFID is 8-bit data and is stored in the system area of FRAM. The factory default setting of the DSFID is “01H”. 6 DS411-00001-4v1-E MB89R118C 4. Cyclic Redundancy Check (CRC) When a frame is received, reception of correct data making up the frame is assumed only when the value of the cyclic redundancy check (CRC) code is valid. For error-checking purposes, a 2-byte CRC code value is inserted between data and the EOF signal. The value of CRC code is required from all the data contained between the SOF and CRC field in each frame. Method of calculation is provided in ISO/IEC 13239. The details are provided in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1) . The initial value of the CRC code provided in ISO/IEC 15693-3 is “FFFFH”. The CRC code is transferred, beginning with the lowest-order bit in the lowest-order byte. • CRC bit/byte transition order LSByte LSBit MSByte MSBit CRC 16 (8 Bits) LSBit MSBit CRC 16 (8 Bits) First transmitted bit of the CRC 5. Electronic Article Surveillance (EAS) status EAS status is 1 bit data (LSB side) , which is stored in the system area of FRAM. The initial value is “1”. EAS bit “1” means goods-monitoring status, and EAS bit “0” means that goods-monitoring status is cleared. EAS status can be written by Write EAS command and can be checked “FBH” block (refer to “■ MEMORY MAP”) by Read commands such as Read Single Block command. Together with Gate type reader/writer, EAS command can support anti-theft security functions. DS411-00001-4v1-E 7 MB89R118C ■ FUNCTION DESCRIPTION 1. Communication from Reader/Writer to Transponder (1) Modulation method The MB89R118C supports both 10% ASK modulation and 100% ASK modulation. Modulation index m is defined as m = (a - b)/(a + b) with reference to the modulated waveform shown below. The values a and b indicate, respectively, the maximum and minimum amplitude of magnetic field transmitted from a reader/writer. • Modulation of the carrier for 10% ASK hr y y hf t2 t1 a t3 b 0V 13.56 MHz • Modulation of the carrier for 100% ASK t3 t1 t4 105 % 95 % 60 % a 5% 0V t2 b 13.56 MHz Maximum and minimum values of t1, t2, t3 and t4 are shown in the table of “ ■RECOMMENDED OPERATING CONDITIONS”. In this table, y is 0.05 (a-b) and the maximum value of hf and hr is 0.1(a-b). 8 DS411-00001-4v1-E MB89R118C (2) Data rate and data coding The MB89R118C supports only 1 out of 4 mode for bit coding, not 1 out of 256 mode. In 1 out of 4 mode, 2-bit signals are coded in a period of 75.52 μs as shown in the following. When coding takes place, the data rate is 26.48 kbps (fc/512). Each signal is transmitted beginning with the lowest bit. • Coding Method in 1 out of 4 Mode • “00B” pulse position 9.44 μs 9.44 μs 75.52 μs • “01B” pulse position (1 = LSB) 28.32 μs 9.44 μs 75.52 μs • “10B” pulse position (0 = LSB) 47.20 μs 9.44 μs 75.52 μs • “11B” pulse position 66.08 μs 9.44 μs 75.52 μs (3) Data frame A data frame begins with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The MB89R118C is enabled to receive a frame from a reader/writer within 300 μs after the MB89R118C has sent a frame to the reader/writer. The MB89R118C is also enabled to receive a frame from a reader/ writer within 1 ms after power has been supplied to the MB89R118C. • Waveforms of SOF and EOF signals of a frame sent from a reader/writer SOF 9.44 μs 9.44 μs 37.76 μs 9.44 μs 37.76 μs EOF 37.76 μs DS411-00001-4v1-E 9.44 μs 9.44 μs 9 MB89R118C 2. Communication from Transponder to Reader/Writer • Minimum load modulation amplitude (Vlm) : 10 mV (based on ISO/IEC 10373-7) • Load modulation subcarrier frequency (fs) : 423.75 kHz(fc/32) The MB89R118C supports only a 1-subcarrier system. (Not supports 2-subcarrier system.) • Data rate : The MB89R118C supports the following 2 data rate modes : • Low data rate • High data rate One of the 2 data rate modes is specified by the Data_rate_flag (described later) sent from the reader/writer. In low data rate mode, the data rate is 6.62 kbps (fc/2048); in high data rate mode, it is 26.48 kbps (fc/512). When receiving the Fast commands (Custom commands) , the communication starts from the transponder in the data rate that is twice as fast as normal data rate. In this case, the 2 data rate modes of low data rate and high data rate specified by the Data_rate_flag is supported. In Low data rate mode, the data rate is 13.24 kbps (fc/1024) ; in high data rate mode, it is 52.97 kbps (fc/256) . (1) Bit coding The Manchester coding is used for the bit coding. The following figures show the signals modulated in high data rate mode when ISO command is received and the same signals when fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses for subcarrier and data transfer time are 4 times as large as the number in high data rate mode. • Signal waveforms by load modulation in high data rate mode (ISO commands) • Logic 0 423.75 kHz subcarrier 18.88 μs (modulated) 18.88 μs (not modulated) 37.76 μs • Logic 1 423.75 kHz subcarrier 18.88 μs (not modulated) 18.88 μs (modulated) 37.76 μs • Signal waveforms by load modulation in high data rate response mode (fast commands) • Logic 0 9.44 μs 9.44 μs 18.88 μs • Logic 1 9.44 μs 9.44 μs 18.88 μs 10 DS411-00001-4v1-E MB89R118C (2) Data frame A data frame sent from a transponder starts with a start of frame (SOF) signal and ends with an end of frame (EOF) signal. The following figures show the SOF and EOF signals sent in high data rate mode when an ISO command is received and the same signals when a fast command is received. In low data rate mode of both ISO commands and fast commands, the number of pulses in subcarrier and data transfer time are 4 times as large as the number in high data rate mode. The reader/writer shall be ready to receive a frame from the transponder within 300 μs after having sent a frame to the transponder. • Waveforms of SOF and EOF signals of a frame sent from a transponder (ISO commands) • SOF 423.75 kHz subcarrier 56.64 μs 56.64 μs 37.76 μs • EOF 37.76 μs 56.64 μs 56.64 μs • Waveforms of SOF and EOF signals of a frame sent from a transponder (fast commands) • SOF 423.75 kHz Subcarrier 28.32 μs 28.32 μs 18.88 μs • EOF 423.75 kHz Subcarrier 18.88 μs 28.32 μs 28.32 μs 3. FRAM Data Protection if Power Lost During Data Writing MB89R118C accesses to FRAM with the unit of 1 byte. When RF power is shut down during accessing FRAM, writing in FRAM is completed by the charges stored in a smoothing capacitor on the LSI and FRAM data writing error is prevented. Therefore, the commands of 1 byte access such as Write AFI, Write DSFID, Write EAS, and Lock command can protect the data from the power down. On the other hand, the commands of more than 2 bytes access such as Write Single Block command may not protect all the data from the power down during the access. In this case, it is recommended to confirm the data correctness by a read command. DS411-00001-4v1-E 11 MB89R118C 4. Requests/Responses A request is sent from the reader/writer to the transponder. In replying to the request, the transponder sends a response to the reader/writer. Each request, and response, is transmitted in each single frame. • Structure of requests and responses A request consists of the following 5 fields : • Flag • Command code • Parameter (required or optional depending on the command) • Application data • CRC A response consists of the following 4 fields : • Flag • Parameter (required or optional depending on the command) • Application data • CRC Each byte is transferred, beginning with the lowest bit. When two or more bytes are transferred, transfer begins with the lowest one. 5. Operating Modes The MB89R118C has the following 3 operating modes : Each mode specifies a different mechanism for how the transponder returns a response in replying to a request from the reader/writer : • Addressed mode The MB89R118C enters Addressed mode when the Address_flag is set to “1”. In Addressed mode, a request includes a UID (the Address_flag is set to “1” simultaneously), and only the transponder that matches the UID in the request returns a response. If no transponder that matches the UID exists, a response is not returned. • Non-Addressed mode The MB89R118C enters Non-Addressed mode when the Address_flag is set to “0”. In Non-Addressed mode, a request does not include a UID. The transponders that receive the request execute processing and return its response in accordance with the requested command. • Select mode The MB89R118C enters Select mode when the Select_flag is set to “1”, and the Address_flag is set to “0”. In Select mode, the request shall not contain a UID. When the transponders receive the command, only the transponder in the select state executes processing and returns its response in accordance with the requested command. 12 DS411-00001-4v1-E MB89R118C 6. Request Format The following figure shows a typical example of the request data format, and the following table shows the definition of request flag bits. • Structure of the request frame SOF Flag Command code • Setting of Bit 1 to Bit 4 Bit Flag name 1 Data_rate_flag 3 Inventory_flag 4 1/0 0 Sub-carrier_flag 2 Parameter Protocol_Extension_flag CRC Data EOF State/Description 1-subcarrier selected 1 2-subcarrier selected (not supported) 0 Low data rate (6.62 kbps) selected 1 High data rate (26.48 kbps) selected 0 Command other than Inventory command selected 1 Inventory command selected 0 Protocol not extended 1 Protocol extended (RFU*) * : Reserved for future use Note : “Inventory_flag” of bit 3 is determined whether “Inventory command” (select “1”) or other command (select “0”) is used. • Setting of Bit 5 to Bit 8 (When Inventory command is selected [Inventory_flag = “1”]) Bit Flag name 1/0 State/Description 5 AFI_flag 6 Nb_slots_flag 7 Option_flag 8 RFU* 0 AFI not set 1 AFI set (response when it is in accord with AFI of the transponder) 0 16 slots 1 1 slot 0 Command option not supported 1 Command option supported (not supported) 0 Set to “0” ⎯ 1 * : Reserved for future use • Setting of Bit 5 to Bit 8 (When the command other than Inventory command is selected [Inventory_flag = “0”]) Bit Flag name 1/0 State/Description 5 0 Request shall be executed according to the setting of Address_flag. 1 Select mode (Request shall be executed only by the transponder in select state.) The Address_flag shall be set to “0”. 0 Non-Addressed mode (UID not included in the command) 1 Addressed mode (UID included in the command) 0 Command option not supported (for the command not supporting the Option_flag) 1 Command option supported 0 Set to “0” Select_flag 6 Address_flag 7 Option_flag 8 RFU* 1 ⎯ * : Reserved for future use DS411-00001-4v1-E 13 MB89R118C 7. Response Format The following figure shows a typical example of the response data format, and the following table shows the definition of the response flag and error codes. If the Error_flag is set to “1”, an error code field is generated in the response. If the Error_flag is set to “0”, this means no error, and If the Error_flag is set to “1”, this means any error generation. • Structure of the response frame Flag SOF • Response flag definitions Bit Flag name Parameter Data 1/0 Error not found 1 Error found RFU* 0 Set to “0” 3 RFU* 0 Set to “0” 4 Extension_flag 0 Set to “0” 5 RFU* 0 Set to “0” 6 RFU* 0 Set to “0” 7 RFU* 0 Set to “0” 8 RFU* 0 Set to “0” Error_flag 2 EOF Description 0 1 CRC * : Reserved for future use • Error code definitions Error code “01” The specific command is not supported. Example: Command code error “02” Cannot recognize the command. The number of blocks is over the limit. Example: Format error “03” Specific options are not supported. “0F” Other errors “10” The specified block cannot be used (or was not found). “11” The specified block has already been locked and cannot be locked again. “12” The specified block has already been locked, and its contents cannot be updated. “13” The specified block could not be programmed normally (a write verify error occurred). “14” The specified block could not be locked normally (a lock verify error occurred) . Others 14 Meaning Unused. DS411-00001-4v1-E MB89R118C 8. Anti-Collision Algorithm The MB89R118C executes an anti-collision sequence loop based on an algorithm that complies with ISO/ IEC 15693-3. The anti-collision algorithm is designed to examine the transponders located within reader/writer communication areas on the basis of UID. The reader/writer issues an Inventory command to transponders, and some transponders return responses while other transponders do not respond, according to the algorithm described in “10. Execution of Inventory Command by a Transponder”. 9. Request Parameter • Request Parameter Settings Set the reader/writer as follows before issuing the Inventory command. • The Nb_slots_flag (bit 6), which is a request flag, is set to the desired value : “0” : 16 slots (for plural transponders) “1” : 1 slot (for single transponder) • A mask length and a mask value are added after the command code. • The mask length represents the data length of the mask value in bits. • The mask value is integer bytes of data, transmitted beginning with the lowest bit. If the mask data is not a multiple of 8 (bits) in length, 0 is padded on the MSB side of the mask value so that the data is in units of bytes. The following figure shows an example of the mask value with padding. Since the mask length is 12 bits, the mask value is padded with 4 bits on the MSB side so that the mask data is in units of bytes (2 bytes = 16 bits in this case). If the AFI flag in the request flags is set in the format explained in “• Structure of the request frame of 6. Request Format”, an AFI field is added to the format. The command ends with transmission of an EOF signal as described in “1. Communication from Reader/Writer to Transponder”. Thereafter, processing in the first slot starts immediately. To proceed to the next slot, the reader/writer sends an EOF signal. • Format of the Command SOF Flag Command code Optional AFI Mask length 8 bits 8 bits 8 bits Mask value CRC 0 to 64 bits 16 bits 8 bits EOF • Example of the Mask Value with Padding LSB MSB DS411-00001-4v1-E 0000 0100 1100 1111 Pad Mask value 15 MB89R118C 10. Execution of Inventory Command by a Transponder A transponder returns a response to the reader/writer when its UID is equal to the value that consists of the mask value and the number of slots. The mask value is sent in the Inventory command, and the number of slots is determined by the number of times the EOF signal is transmitted. • Algorithm for execution of processing by a transponder The following figure shows the algorithm for the execution of processing by a transponder when an Inventory command is received. The next figure shows the relationship between the UID and the mask value. • Algorithm for Execution of Processing by a Transponder when Inventory Command NbS SN LSB (value, n) & Slot_Frame : Total number of slots (1 or 16) : Current slot number : The “n” least significant bits of value : Concatenation operator : SOF or EOF SN = 0 Nb_slots_flag=1? YES NO NbS = 1 SN_length=0 NbS = 16 SN_length=4 LSB (UID, SN_length + mask length) = LSB (SN, SN_length) & LSB (mask, mask length) ? YES Response transmission NO Wait (Slot_Frame) Slot_Frame=SOF? YES NO Slot_Frame=EOF? NO YES End of processing End of processing SN < NbS-1 NO YES SN = SN + 1 16 End of processing DS411-00001-4v1-E MB89R118C • Comparison of the mask value and the number of slots with the UID [Inventory command (the side of a reader/writer)] Padding Inventory command includes the mask value and mask length. The mask value is padded with “0” into the higher bit side so to make the byte-unit length (a multiple of 8 bits). 000••• Mask value (specified by the Inventory command) Mask length If Inventory command is received, the slot counter is reset to “0”. Slot counter If EOF is received, the increment of the slot counter is started by the transponder. Number of Mask value (no padding) slots The value is compared with the lowest bit in UID of the transponder. If the value is in accord with the mask value, the response is returned by the transponder. Ignored Compared Unique Identifier (UID) MSB DS411-00001-4v1-E [Unique Identifier (the side of a transponder) ] LSB 17 MB89R118C 11. Anti-Collision Sequence • Execution of anti-collision sequence The following steps summarize the main cases that can occur during a typical anti-collision sequence where the number of slots is 16. 1) The reader/writer sends an Inventory command. The Nb_slots_flag bit of the request flags is set to “0” to specify the number of slots. 2) In slot 0, transponder 1 transmits its response in the time t1_a from the detection of the rising edge of the EOF. In this case no collision occurs and the UID of transponder is received and registered by the reader/ writer. 3) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the response 1. 4) In slot 1, transponder 2 and transponder 3 transmit their response in the time t1_a from the detection of the rising edge of the EOF. In this case, the reader/writer cannot recognize the UIDs of the two transponders because the collision occurs, and the reader/writer remembers that a collision was detected in slot 1. 5) The reader/writer sends an EOF signal to switch to the next slot in the time t2_a after the responses. 6) In slot 2, no transponder transmits a response. The reader/writer does not detect any response, and sends an EOF signal to switch to the next slot in the time t3_a from the detection of the rising edge of the EOF. 7) In slot 3, transponder 4 and transponder 5 transmit their response in the time t1_a from the detection of the rising edge of the EOF, and another collision occurs. 8) The reader/writer sends a request (for example, a Read Single Block command, described later) to the transponder 1, which UID was already correctly received. 9) All transponders detect an SOF signal and exit the anti-collision sequence. In this case, since the request is addressed to transponder 1 (Addressed mode), only transponder 1 transmits its response. 10) All transponders are ready to receive another request from the reader/writer. If the Inventory command is sent again, the anti-collision sequence starts from slot 0. Note : t1_a, t2_a, t3_a are specified in “12. Timing definitions”. 18 DS411-00001-4v1-E MB89R118C • Example of Anti-Collision Sequence Slot 0 Slot_Counter (1) Reader/writer SOF Inventory command EOF Slot 1 (3) EOF (2) (4) Response 1 Response 2 MB89R118C Response 3 Timing t1_a Status t1_a No collision Slot 2 Slot_Counter (5) Reader/writer t2_a EOF t2_a Collision Slot 3 (6) (7) EOF EOF Response 4 MB89R118C Response 5 Timing t3_a Status t1_a No response Slot_Counter t2_a Collision (8) Reader/writer SOF Command (to Transponder1) (9) EOF Response (Transponder1) MB89R118C Timing t3_a t1_a Status DS411-00001-4v1-E 19 MB89R118C 12. Timing definitions (1) Period during which the MB89R118C waits for the start of response transmission after an EOF signal transmitted from the reader/writer : t1_a After detection of an EOF signal sent from the reader/writer, MB89R118C must wait for a certain time (t1_a) before sending a response to the reader/writer. t1_a begins at the rising edge of the EOF pulse, and it is defined as follows. The minimum value is 4320/fc (318.6 μs), the nominal value is 4352/fc (320.9 μs), and the maximum value is 4384/fc (323.3 μs). Even if the 10% ASK modulated signal from the reader/writer is detected within the time t1_a, the transponder ignore the signal and wait for further time t1_a before starting to transmit. (2) Period during which the MB89R118C ignores modulated signals after an EOF signal transmitted from the reader/writer : tmit After detection of an EOF signal sent from the reader/writer, MB89R118C must ignore the 10% ASK modulated signals from the reader/writer for a time (tmit). tmit begins at the rising edge of the EOF pulse. The minimum value of tmit is defined as 4384/fc (323.3 μs) + tnrt. In the above expression, tnrt stands for the response time of MB89R118C. (3) Period during which the reader/writer waits before sending a request : t2_a When the reader/writer has received a response from the transponder to a previous request other than Inventory and Stay Quiet command, it shall wait a time t2_a before sending a subsequent request. The minimum value of t2_a is 309.2 μs. It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) . (4) Period during which the reader/writer waits before sending a request during execution of the Inventory command : t2inv While an Inventory command is being executed, the reader/writer sends an EOF signal when it shifts to the next slot. In this case, the wait time is defined as follows depending on whether transponders return responses : - Wait time applied when the reader/writer has received one or more responses : t2invwr It is defined in ISO/IEC 15693-3. And ISO/IEC 18000-3 (Mode 1) that when the reader/writer has received one or more responses, the reader/writer must wait until responses from the transponders have been completed (that is, the reader/writer receives an EOF signal or tnrt passes). After that, the reader/writer must wait until t2_a passes before sending an EOF signal to switch to the next slot. - Wait time applied when the reader/writer has not received any responses : t3_a When the reader/writer has not received any responses from the MB89R118C, the reader/writer must wait until t3_a passes before sending an EOF signal. In this case, t3_a begins at the rising edge of the EOF pulse that was sent previously. The minimum value of t3_a is defined as shown in the following table. MB89R118C does not support the minimum value of t3_a as “4384/fc (323.3 μs) + tsof” when the reader/ writer sends a 100% modulated EOF, which is defined in ISO/IEC 15693-3 and ISO/IEC 18000-3 (Mode 1). (a) If the reader/writer sends a ASK10% modulated EOF, the minimum value of t3_a (ASK10%) is “4384/ fc (323.3 μs + tnrt') (b) If the reader/writer sends a ASK100% modulated EOF, the minimum value of t3_a (ASK100%) is “4384/fc (323.3 μs + tsof') tnrt: The nominal response time of transponder tsof: The time for transponder to transmit a SOF to the reader/writer 20 DS411-00001-4v1-E MB89R118C • t3_a for ASK10% and ASK100% signal Reader/Writer SOF Inventory command New command (or EOF signal) EOF No response MB89R118C t1_a t3_a (ASK100 %) t3_a (ASK10 %) Timing tsof tnrt Possible to receive ASK 10 % signal Ignore ASK 10 % signal MB89R118C ASK signal handling Reset t1_a after receiving ASK 100 % signal Ignore ASK 100 % signal Possible to receive ASK 100 % signal • Timing specification Min Typ Max t1_a 4320/fc (318.6 μs) 4352/fc (320.9 μs) 4384/fc (323.3 μs) tmit 4384/fc (323.3 μs) + tnrt ⎯ ⎯ t2_a 4192/fc (309.2 μs) ⎯ ⎯ t2invwr t2_a + tnrt ⎯ ⎯ t3_a (ASK10%) 4384/fc (323.3 μs) + tnrt ⎯ ⎯ t3_a (ASK100%) 4384/fc (323.3 μs) + tsof ⎯ ⎯ tnrt tsof DS411-00001-4v1-E ⎯ Low data rate High data rate Fast Low data rate Fast High data rate : 15708.16 ms : 3927.04 ms : 7854.08 ms : 1963.52 ms ⎯ ⎯ Low data rate High data rate Fast Low data rate Fast High data rate : : : : ⎯ 604.16 151.04 302.08 75.52 ms ms ms ms 21 MB89R118C ■ COMMAND LIST All Mandatory and Optional commands defined by ISO/IEC 15693-3 are supported. The following Custom commands are supported : • EAS command : Using for preventing the theft of goods and goods-monitoring • Write EAS command : Writing data to the EAS bit • Read Multiple Blocks Unlimited command : Enable to read FRAM area of up to 2048 bytes in a lump • Fast command : Respond at double speed compared to ISO commands • Command list Command code 22 Command name Command Type Details “01H” Inventory Mandatory Execute the anti-collision sequence and get UID. “02H” Stay Quiet Mandatory Enter the Quiet state “20H” Read Single Block Optional Read the requested 1 block data in the user area/system area “21H” Write Single Block Optional Write the requested 1 block data in the user area “22H” Lock Block Optional Lock (disable to write) the requested 1 block in the user area “23H” Read Multiple Blocks Optional Read the requested 1 or 2 blocks data in the user area/ system area “24H” Write Multiple Blocks Optional Write the requested 1 or 2 blocks data in the user area “25H” Select Optional Enter the select (communication selected) state “26H” Reset to Ready Optional Enter the ready (communication enabled) state “27H” Write AFI Optional Write AFI (Application Family Identifier) data into FRAM. “28H” Lock AFI Optional Lock AFI data (disable to write) “29H” Write DSFID Optional Write DSFID (Data Storage Format Identifier) data into FRAM “2AH” Lock DSFID Optional Lock DSFID (Data Storage Format Identifier) data (disable to write) “2BH” Get System Information Optional Read the system information value (UID, DSFID, AFI, number of bytes per block, number of blocks in user area, and IC information) “2CH” Get Multiple Block Security Status Optional Read the block security status stored in system area. “A0H” EAS Custom When EAS bit is “1”, reply response code 6 times. “A1H” Write EAS Custom Write EAS data (1 bit). Data “1” validates anti-theft/goodsmonitoring, and data “0” invalidates them. “A5H” Read Multiple Blocks Unlimited Custom Read the specified data of up to 256 blocks in the user area/system area. “B1H” Fast Inventory Custom Fast response Inventory command “C0H” Fast Read Single Block Custom Fast response Read Single Block command “C1H” Fast Write Single Block Custom Fast response Write Single Block command “C3H” Fast Read Multiple Blocks Custom Fast response Read Multiple Blocks command “C4H” Fast Write Multiple Blocks Custom Fast response Write Multiple Blocks command “D1H” Fast Write EAS Custom Fast response Write EAS command “D5H” Fast Read Multiple Blocks Unlimited Custom Fast response Read Multiple Blocks Unlimited command DS411-00001-4v1-E MB89R118C ■ COMMAND DESCRIPTION 1. Description of Mandatory Commands 1-1. Inventory command The Inventory command executes the anti-collision sequence. If an error is detected during execution of this command, a response indicating the error shall be not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response shall be returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. • Request [Request from the reader/writer to the transponder] Command SOF Flag Optional AFI (Inventory) 8 bits 8 bits (“01H”) 8 bits Mask length Mask value CRC 8 bits 0 to 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID CRC 64 bits 16 bits EOF 1-2. Stay Quiet command On receiving the Stay Quiet command, the transponder enters the quiet state. The transponder does not return any responses, including an error indication. In the quiet state, the transponder does not execute any request for which the Inventory_flag (bit 3) is set to “1” and executes only a command for which the Address_flag (bit 6) is set to “1”. The transponder exits the quiet state only in the following cases: • The transponder enters the power-off state. • The transponder receives the Select command and enters the select state. • The transponder receives the Reset to Ready command and enters the ready state. • Request [Request from the reader/writer to the transponder] Command SOF Flag (Stay Quiet) 8 bits 8 bits (“02H”) UID (necessary) CRC 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] No response DS411-00001-4v1-E 23 MB89R118C 2. Description of Optional Commands 2-1. Read Single Block command On receiving the Read Single Block command, the transponder reads the data stored in the specified singleblock to the reader/writer. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Single Block) (Addressed mode) 8 bits (“20H”) 8 bits Block number CRC 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag EOF Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF 2-2. Write Single Block command On receiving the Write Single Block command, the transponder writes the single block data included in the request to the specified block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command). • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Write Single Block) (Addressed mode) 8 bits 24 8 bits (“21H”) 64 bits Block number Data CRC 8 bits 64 bits 16 bits EOF DS411-00001-4v1-E MB89R118C • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-3. Lock Block command On receiving the Lock Block command, the transponder locks (write disable) permanently the data stored in one specified single block. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response. (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command.) Once the Lock Block command has been received, data in the locked block cannot be changed by any command. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Lock Block) (Addressed mode) 8 bits 8 bits (“22H”) 64 bits Block number CRC 8 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS411-00001-4v1-E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 25 MB89R118C 2-4. Read Multiple Blocks Command On receiving the Read Multiple Blocks command, the transponder reads the data stored in the specified successive blocks to the reader/writer. Up to 2 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Read Single Block command). • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Read Multiple Blocks) (Addressed mode) 8 bits 8 bits (“23H”) First block number Number of blocks CRC 8 bits 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF EOF Repeated as required 2-5. Write Multiple Blocks Command On receiving the Write Multiple Blocks command, the transponder writes the successive multiple-block data included in the request to the specified blocks. Up to 2 blocks of data can be written for one request. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . 26 DS411-00001-4v1-E MB89R118C • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits Command (Write UID Multiple Blocks) (Addressed mode) 8 bits (“24H”) First block number Number of blocks Data CRC 8 bits 8 bits 64 bits or 128 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-6. Select command Of the transponders that received the Select command, only the transponder whose UID matches the UID included in the request enters the select state and returns a response. The other transponders, whose UIDs do not match the UID in the request, enter the ready state without returning any response. The Select command is used only in Addressed mode. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Select) UID (necessary) 8 bits 8 bits (“25H”) 64 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS411-00001-4v1-E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 27 MB89R118C 2-7. Reset to Ready command On receiving the Reset to Ready command, the transponder enters the ready state. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Reset to Ready) UID (Addressed mode) CRC 64 bits 16 bits 8 bits (“26H”) 8 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-8. Write AFI command On receiving the Write AFI command, the transponder writes the data of AFI to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write AFI) UID (Addressed mode) 8 bits 8 bits (“27H”) 64 bits AFI CRC EOF 8 bits 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF 28 Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF DS411-00001-4v1-E MB89R118C 2-9. Lock AFI command On receiving the Lock AFI command, the transponder locks (write disable) permanently the data of AFI. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock AFI command has been received, the data of AFI cannot be changed by the Write AFI command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock AFI) UID (Addressed mode) 8 bits (“28H”) 8 bits CRC 64 bits EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-10. Write DSFID command On receiving the Write DSFID command, the transponder writes the data of DSFID to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] SOF Flag Command (Write DSFID) UID (Addressed mode) 8 bits DS411-00001-4v1-E 8 bits (“29H”) 64 bits DSFID CRC 8 bits 16 bits EOF 29 MB89R118C • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 2-11. Lock DSFID command On receiving the Lock DSFID command, the transponder locks (write disable) permanently the data of DSFID. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the lock operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ± 32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . Once the Lock DSFID command has been received, the data of DSFID cannot be changed by the any command. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Lock DSFID) 8 bits UID (Addressed mode) CRC 64 bits 16 bits 8 bits (“2AH”) EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF 30 Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF DS411-00001-4v1-E MB89R118C 2-12. Get System Information command On receiving the Get System Information command, the transponder reads the chip information of UID, AFI, DSFID, and so on to the reader/writer as a response. • Request [Request from the reader/writer to the transponder] SOF Flag Command (Get System Information) UID (Addressed mode) 8 bits 8 bits (“2BH”) 64 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag Information flag 8 bits (“00H”) 8 bits UID DSFID AFI 64 bits 8 bits 8 bits Memory size IC reference 16 bits 8 bits EOF CRC EOF 16 bits The followings show the definitions of the Information flag and the memory size information (transponder memory size information) included in the response of the Get System Information command. However, the size of blocks and number of blocks in the user area shown in the memory size information about a transponder indicate one less than the actual value. • Definition of information flag Bit Flag name State Description 0 DSFID is not supported or does not exist. 1 DSFID is supported or exists. 0 AFI is not supported or does not exist. 1 AFI is supported or exists. 0 Memory size information is not supported or does not exist. 1 Memory size information is supported or exists. 0 IC reference information is not supported or does not exist. 1 IC reference information is supported or exists. 1 DSFID 2 AFI 3 Memory size 4 IC reference 5 RFU* ⎯ 6 RFU* ⎯ 7 RFU* ⎯ 8 RFU* ⎯ Set to “0” * : Reserved for future use Note : For MB89R118C, set “0FH” (set “1” for bit 1 to bit 4 and set “0” for bit 5 to bit 8) . DS411-00001-4v1-E 31 MB89R118C • Memory size information about a transponder MSB LSB 16 14 13 RFU* 9 8 Size of blocks (Number of bytes in 1 block) 1 Number of blocks in the user area * : Reserved for future use Note : The memory size of the MB89R118C which consists of 250 blocks (8 bytes per block) in the user area, the memory size information is hexadecimal “07F9H”. 2-13. Get Multiple Block Security Status Command On receiving the Get Multiple Block Security Status command, the transponder reads the block security status stored in a system area to the reader/writer as a response. Up to 64 blocks of data can be read for one request. The number of blocks specified in this request must be the value that is 1 block less than the actual number of the blocks whose security status is to be obtained. The first block number specified in this request must be a multiple of 8. • Request [Request from the reader/writer to the transponder] Command UID SOF Flag (Get Multiple Block (Addressed mode) Security Status) 8 bits 8 bits (“2CH”) First block number Number of blocks CRC 8 bits 8 bits 16 bits 64 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag 8 bits (“00H”) 32 Block security status CRC 8 bits (repeated as required) 16 bits EOF EOF DS411-00001-4v1-E MB89R118C 3. Custom Command The IC manufacturing code is required to use a Custom command. The IC manufacturing code for the MB89R118C is “08H”. 3-1. EAS command On EAS command reception, the transponder returns the response code “5AH” repeated 6 times after the specified flag (“00H”) if the EAS bit is “1” or returns no response if the EAS bit is “0”. The EAS command can be executed only when the transponder is in the ready or select state. • Request [Request from the reader/writer to the transponder] SOF Flag Command (EAS) IC manufacturer code (necessary) CRC 8 bits 8 bits (“A0H”) 8 bits (“08H”) 16 bits EOF • Response [Response from the transponder to the reader/writer] SOF Flag Response code 8 bits (“00H”) CRC 48 bits (6 times repeat of “5AH”) EOF 16 bits 3-2. Write EAS command On Write EAS command reception, the transponder writes the EAS bit to FRAM. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode as the EAS data. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID SOF Flag (Write EAS) code (necessary) (Addressed mode) 8 bits 8 bits (“A1H”) 8 bits (“08H”) 64 bits Data CRC 8 bits (“00H” or “01H”) 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS411-00001-4v1-E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 33 MB89R118C 3-3. Read Multiple Blocks Unlimited Command On receiving the Read Multiple Blocks Unlimited command, the transponder reads the data stored in the specified successive blocks to the reader/writer as a response. Up to 256 blocks of data can be read for one request. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] UID Command First block Number IC manufacturer (Addressed SOF Flag (Read Multiple number of blocks code (necessary) mode) Blocks Unlimited) 8 bits 8 bits (“A5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF Repeated as required 3-4. Fast Inventory Command The Fast Inventory command is the same as the Inventory Command that executes the anti-collision sequence. The data rate in the response is twice as defined in ISO/IEC 15693. Even though an error is detected during execution of this command, a response indicating the error is not returned. The Inventory_flag (bit 3) must be set to “1”. When the AFI_flag (bit 5) in the Inventory command frame is set as “1”, the response is returned in the following cases. • The AFI value of the transponder is in accord with the optional AFI value. • The 4 bits value MSB of the Optional AFI is “0H”, and the 4 bits value LSB of the Optional AFI is in accord with the 4 bits value LSB of the transponder. • The 4 bits value LSB of the Optional AFI is “0H”, and the 4 bits value MSB of the Optional AFI is in accord with the 4 bits value MSB of the transponder. • The optional AFI value is “00H”. 34 DS411-00001-4v1-E MB89R118C • Request [Request from the reader/writer to the transponder] Command IC manufacturer SOF Flag (Fast Inventory) code (necessary) 8 bits 8 bits (“B1H”) Optional AFI Mask length Mask value CRC 8 bits 8 bits 0 to 64 bits 16 bits 8 bits (“08H”) EOF • Response [Response from the transponder to the reader/writer] SOF Flag DSFID 8 bits (“00H”) 8 bits UID CRC 64 bits 16 bits EOF 3-5. Fast Read Single Block Command The Fast Read Single Block command is the same as the Read Single Block command that reads the data stored in the specific single-block. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified block to the reader/writer. • Request [Request from the reader/writer to the transponder] Command IC manufacturer UID Block SOF Flag (Fast Read Single Block) code (necessary) (Addressed mode) number 8 bits 8 bits (“C0H”) 8 bits (“08H”) 64 bits 8 bits CRC EOF 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF 3-6. Fast Write Single Block Command The Fast Write Single Block command is the same as the Write Single Block command that writes the singleblock data included in the request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . DS411-00001-4v1-E 35 MB89R118C • Request [Request from the reader/writer to the transponder] SOF Flag 8 bits UID Command (Fast IC manufacturer (Addressed Write Single Block) code (necessary) mode) 8 bits (“C1H”) 8 bits (“08H”) 64 bits Block number Data CRC 8 bits 64 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 3-7. Fast Read Multiple Blocks Command The Fast Read Multiple Blocks command is the same as the Read Multiple Blocks command that reads the data of the specified successive blocks. Up to 2 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/ IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “01H” makes a request to read 2 blocks. Setting the number of blocks to “00H” makes a request to read 1 block (the request having the same effect as the Fast Read Single Block command). • Request [Request from the reader/writer to the transponder] UID Command IC manufacturer (Addressed SOF Flag (Fast Read code (necessary) mode) Multiple Blocks) 8 bits 8 bits (“C3H”) 8 bits (“08H”) 64 bits First block number Number of blocks CRC 8 bits 8 bits 16 bits EOF • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag 8 bits (“00H”) Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status(option) Data CRC 8 bits 64 bits 16 bits EOF Repeated as required 36 DS411-00001-4v1-E MB89R118C 3-8. Fast Write Multiple Blocks Command The Fast Write Multiple Blocks command is the same as the Write Multiple Blocks command that writes the successive multiple-block data included in the request. Up to 2 blocks of data can be written for one request. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The number of blocks specified in the Fast Write Multiple Blocks command is similar to the number of blocks specified in the Read Multiple Blocks command. The value of the number of blocks field specified in the Fast Write Multiple Blocks command is obtained by subtracting 1 from the number of the expected blocks to be written. Setting the number of blocks to “01H” makes a request to write 2 blocks. Setting the number of blocks to “00H” makes a request to write 1 block (the request having the same effect as the Fast Write Single Block command). If at least one of the blocks specified by the request is locked, the transponder does not write any data and, instead, returns an error code. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still returns its response (However, if an EOF is not sent within 38 ms, the time-out occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] First UID Command Number IC manufacturer (Addressed block SOF Flag (Fast Write of blocks code number mode) Multiple Blocks) 8 bits 8 bits (“C4H”) 8 bits (“08H”) 64 bits 8 bits 8 bits Data CRC EOF 64 bits or 16 bits 128 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF DS411-00001-4v1-E Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits Flag CRC 8 bits (“00H”) 16 bits EOF EOF 37 MB89R118C 3-9. Fast Write EAS Command The Fast Write EAS command is the same as Write EAS command that writes the EAS bit to FRAM. The data rate in the response is twice as defined in ISO/IEC 15693. The transponder performs verification after writing and returns an error code if the writing has failed. The EAS bit must be set to “00H” to cancel anti-theft or goods-monitoring mode. The bit must be set to “01H” to set up the goods-monitoring mode. If the Option_flag (bit 7) is “0”, the transponder shall return its response when it has completed the write operation starting after “t1nom (320.9 μs) + a multiple of 4096/fc (302.1 μs)” with total tolerance of ±32/fc (2.4 μs) and latest within 20 ms. If it is “1”, transponder shall wait for the reception of an EOF from the reader/ writer and upon such reception still return its response (However, if an EOF is not sent within 38 ms, the time-out error occurs and the transponder can receive another command) . • Request [Request from the reader/writer to the transponder] IC manufacturer UID Command code SOF Flag (Addressed mode) (Fast Write EAS) (necessary) 8 bits 8 bits (“D1H”) 8 bits (“08H”) 64 bits Data CRC EOF 8 bits (“00H” or “01H”) 16 bits • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits (2) When Error_flag not set SOF Flag CRC 8 bits (“00H”) 16 bits EOF EOF 3-10. Fast Read Multiple Blocks Unlimited Command The Fast Read Multiple Blocks Unlimited command is the same as the Read Multiple Blocks Unlimited command that reads the data of the specified successive blocks. Up to 256 blocks of data can be read for one request. The data rate in the response is twice as defined in ISO/IEC 15693. If the Option_flag (bit 7) is “1”, the transponder adds block security status information in the response. If the Option_flag (bit 7) is “0”, the transponder returns only the data in the specified blocks to the reader/writer. The value of the “number of blocks” field specified in the request is the expected number of blocks minus 1. Setting the number of blocks to “06H” makes a request to read 7 blocks. Up to “FFH” blocks can be set. (Note that the maximum number of blocks is changed by setting the leading block number.) • Request [Request from the reader/writer to the transponder] Number UID IC manufacturer Command First block of (Addressed code SOF Flag (Fast Read Multiple number blocks mode) (necessary) Blocks Unlimited) 8 bits 38 8 bits (“D5H”) 8 bits (“08H”) 64 bits 8 bits 8 bits CRC EOF 16 bits DS411-00001-4v1-E MB89R118C • Response [Response from the transponder to the reader/writer] (1) When Error_flag set SOF (2) When Error_flag not set SOF Flag Flag Error code CRC 8 bits (“01H”) 8 bits 16 bits EOF Block security status (option) Data CRC 8 bits 64 bits 16 bits 8 bits (“00H”) EOF Repeated as required 4. Command Execution Time 4-1. Write Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data writing to all user areas (2000 bytes) of the FRAM and verification with the Write Multiple Blocks command is estimated to be 1.4 seconds. 4-2. Read Multiple Blocks Command Execution Time The minimum time (processing in the Addressed mode) required to complete data reading for all user areas (2000 bytes) of the FRAM with the Read Multiple Blocks command is estimated to be 1.5 seconds. In addition, with the Fast Read Multiple Blocks command is estimated to be 1.1 seconds, and with the Fast Read Multiple Blocks Unlimited command is estimated to be 0.35 seconds. DS411-00001-4v1-E 39 MB89R118C ■ STATE TRANSITION DIAGRAM • Definition of states Each state of MB89R118C is defined as follows. • Power-off state : In the power-off state, a transponder cannot fulfill the function so that the voltage from a reader/writer is underpowered. • Ready state : In the ready state, the MB89R118C can execute all commands if the Select_flag is not set. • Quiet state : In the quiet state, the MB89R118C can execute the command for which the Inventory_flag is not set and the Address_flag is set. • Select state : In the select state, the MB89R118C can execute the command for which the Select_flag is set. As shown in figure below, the MB89R118C moves from one state to another according to the status of power and by a command. • State transition diagram Out of field Power-off state Out of field Out of field In field Any other command where Select_flag is not set. Ready state Reset to Ready command Reset to Ready command where Select_flag is set or Select (different UID). Select command (UID) Stay Quiet command (UID) Select command (UID) Select state Quiet state Stay Quiet command (UID) Any other command where Address_flag is set and where Inventory_flag is not set. 40 Any other command where Select_flag is set. DS411-00001-4v1-E MB89R118C ■ ABSOLUTE MAXIMUM RATINGS Parameter Ratings Symbol Unit Remarks Min Max Imax ⎯ 90 mAp−p IRF ⎯ 30 mArms Antenna connected. ESD voltage immunity |VESD| ⎯ 2 kV Human body model Storage temperature Tstg − 55 + 125 °C Maximum antenna input current Input current WARNING: Semiconductor devices may be permanently damaged by application of stress (including, without limitation, voltage, current or temperature) in excess of absolute maximum ratings. Do not exceed any of these ratings. ■ RECOMMENDED OPERATING CONDITIONS Parameter Symbol Minimum antenna input voltage Value Unit Remarks 10.2 Vp-p Antenna connected. ⎯ 30 % Antenna connected. 95 ⎯ 100 % Antenna connected. t1 6.0 ⎯ 9.44 μs Antenna connected. t2 3.0 ⎯ t1 μs Antenna connected. t3 0 ⎯ 4.5 μs Antenna connected. t1 6.0 ⎯ 9.44 μs Antenna connected. t2 2.1 ⎯ t1 μs Antenna connected. t3 1.0 ⎯ 4.5 μs Antenna connected. t4 0 ⎯ 0.8 μs Antenna connected. Input frequency Fin 13.553 13.560 13.567 MHz Antenna connected. Operating temperature Ta − 20 ⎯ + 85 °C Min Typ Max VRF ⎯ 7.5 ASK modulation index (10%) m 10 ASK modulation index (100%) m ASK pulse width (10%) ASK pulse width (100%) WARNING: The recommended operating conditions are required in order to ensure the normal operation of the semiconductor device. All of the device's electrical characteristics are warranted when the device is operated under these conditions. Any use of semiconductor devices will be under their recommended operating condition. Operation under any conditions other than these conditions may adversely affect reliability of device and could result in device failure. No warranty is made with respect to any use, operating conditions or combinations not represented on this data sheet. If you are considering application under any conditions other than listed herein, please contact sales representatives beforehand. However, because the communication characteristics is deeply related with the combination of antenna, reader/writer, and operating environment, this condition does not ensure the complete operation of transponders. Therefore it is recommended to confirm the communication characteristics with the actual antenna and reader/writer beforehand. The values are confirmed with a reference antenna in the input capacitance 24 pF products and its parameters are as follows. External size : 75 mm × 46 mm Number of turns :6 Width of conductor : 1 mm Space between 2 conductors : 0.4 mm DS411-00001-4v1-E 41 MB89R118C ■ ELECTRICAL CHARACTERISTICS DC characteristics Parameter Symbol Load modulation resistance Input capacitance* 24pF 96pF RlSW Cant Value Min Typ Max ⎯ 1.1 ⎯ 22.8 24.0 25.2 86.4 96.0 105.6 Unit Remarks kΩ pF Voltage between antennas = 2 Vrms * : The capacitance value is an alternative value, which is distinguished with the part number. The values are controlled by PCM (Process Control Monitor) in the wafer. 42 DS411-00001-4v1-E MB89R118C ■ USAGE NOTES • Notes on the radio interface - The performance of transponder is determined by not only LSI specification but also antenna design and reader/writer characteristics. Therefor it is recommended for the customers to optimize the antenna and reader/writer according to the required communication distance and usage environment. - If the user intends to access multiple transponders from a reader/writer, the interference between transponders or between the reader/writer and a transponder may degrade communication performance (transmission distance and communication time) . Therefore, a user who intends to design a system using multiple transponders should consider this point. • FRAM Characteristics Item Read/Write Endurance*1 Data Retention*2 Value Min Max 1012 ⎯ 10 ⎯ 30 ⎯ Unit Parameter Times/byte Operation Ambient Temperature TA = + 85 °C Years Operation Ambient Temperature TA = + 85 °C Operation Ambient Temperature TA = + 70 °C*3 *1 : Total number of reading and writing defines the minimum value of endurance, as an FRAM memory operates with destructive readout mechanism. *2 : Minimum values define retention time of the first reading/writing data right after shipment. *3 : This value is calculated by reliability test results for reference as well. • Differences of the function between ISO/IEC15693 and MB89R118C. The comparison of the function between ISO/IEC 15693 and MB89R118C is shown in the table below. MB89R118C does not support the following functions. • 1 out of 256 data coding • 2-subcarrier The Read/Write Multiple Blocks command supports up to 2 blocks read/write. It does not support 3 or more blocks read/write. (A custom command “Read Multiple Blocks Unlimited command” enables to read 3 or more blocks.) DS411-00001-4v1-E 43 MB89R118C • MB89R118C functions compared with ISO/IEC15693 Parameter ISO/IEC15693 specification 10% ASK Support 100% ASK Support 1 out of 256 Not support 1 out of 4 Support 1-subcarrier Support 2-subcarrier Not support Inventory command Support Stay Quiet command Support Read Single Block command Support Write Single Block command Support Lock Block command Support Read Multiple Blocks command Support up to 2 blocks Write Multiple Blocks command Support up to 2 blocks Select command Support Reset to Ready command Support Write AFI command Support Lock AFI command Support Write DSFID command Support Lock DSFID command Support Get System Information command Support Get Multiple Block Security Status command Support Modulation Data coding Subcarrier Mandatory command Optional command MB89R118C ■ RECOMMENDED ASSEMBLY CONDITIONS (WAFER) The MB89R118C is recommended to be mounted in the following condition to maintain the data retention characteristics of the FRAM memory when the chip is mounted. - Mounting temperature of + 175 °C or lower, and 120 minutes or shorter when applied at high temperature, or - Mounting temperature of + 200 °C or lower, and 60 seconds or shorter when applied at high temperature Temperature [ °C] Temperature [ °C] +200 +175 +25 +25 44 120 60 Time [min] Time [s] DS411-00001-4v1-E MB89R118C ■ ORDERING INFORMATION Part number MB89R118C1-DIAP15 MB89R118C1-DIAP15-P1 MB89R118C2-DIAP15 MB89R118C2-DIAP15-P1 DS411-00001-4v1-E Input capacitance 24pF 96pF Shipping method Marking of Failed Chips Wafer map Wafer (After dicing) with Frame Au Plating Bump Wafer thickness: 150 μm ± 25.4 μm Bad mark Wafer map Bad mark 45 MB89R118C ■ MAJOR CHANGES IN THIS EDITION A change on a page is indicated by a vertical line drawn on the left side of that page. Page Section Change Results ■ FEATURES Revised the Data retention. 10 years ( + 85 °C) → 10 years ( + 85 °C) , 30 years ( + 70 °C) • Types of AFI Revised and corrected the table. 1 6 • Setting of Bit 5 to Bit 8 (When Inven- Revised the Nb_slots_flag. tory command is selected [Inventory_flag = “1”]) 13 40 • Setting of Bit 5 to Bit 8 (When the command other than Inventory command is selected [Inventory_flag = “0”]) Revised Select_flag. 0: Request shall be executed according to the setting of Address_flag. 1: Select mode (Request shall be executed only by the transponder in select state.) The Address_flag shall be set to “0”. ■ STATE TRANSITION DIAGRAM Revised Select state. Any other command where Select_flag is set. ■ ABSOLUTE MAXIMUM RATINGS Revised the Symbol to absolute figure and value for VESD. VESD : (Min) ± 2,(Max) “⎯” → |VESD| : (Min) “⎯” , (Max) 2 Revised the “Tstg”. − 40 °C → − 55 °C 41 46 ■ RECOMMENDED OPERATING CONDITIONS Revised the “Minimum antenna input voltage”. (Typ) 6.2, (Max) 6.5 → (Typ) 7.5, (Max) 10.2 43 ■ USAGE NOTES • FRAM Characteristics Revised the description. 45 ■ ORDERING INFORMATION Revised the table. DS411-00001-4v1-E MB89R118C MEMO DS411-00001-4v1-E 47 MB89R118C FUJITSU SEMICONDUCTOR LIMITED Shin-Yokohama Chuo Building, 2-100-45 Shin-Yokohama, Kohoku-ku, Yokohama, Kanagawa 222-0033, Japan http://jp.fujitsu.com/fsl/en/ All Rights Reserved. FUJITSU SEMICONDUCTOR LIMITED, its subsidiaries and affiliates (collectively, "FUJITSU SEMICONDUCTOR") reserves the right to make changes to the information contained in this document without notice. Please contact your FUJITSU SEMICONDUCTOR sales representatives before order of FUJITSU SEMICONDUCTOR device. Information contained in this document, such as descriptions of function and application circuit examples is presented solely for reference to examples of operations and uses of FUJITSU SEMICONDUCTOR device. FUJITSU SEMICONDUCTOR disclaims any and all warranties of any kind, whether express or implied, related to such information, including, without limitation, quality, accuracy, performance, proper operation of the device or non-infringement. If you develop equipment or product incorporating the FUJITSU SEMICONDUCTOR device based on such information, you must assume any responsibility or liability arising out of or in connection with such information or any use thereof. FUJITSU SEMICONDUCTOR assumes no responsibility or liability for any damages whatsoever arising out of or in connection with such information or any use thereof. Nothing contained in this document shall be construed as granting or conferring any right under any patents, copyrights, or any other intellectual property rights of FUJITSU SEMICONDUCTOR or any third party by license or otherwise, express or implied. FUJITSU SEMICONDUCTOR assumes no responsibility or liability for any infringement of any intellectual property rights or other rights of third parties resulting from or in connection with the information contained herein or use thereof. The products described in this document are designed, developed and manufactured as contemplated for general use including without limitation, ordinary industrial use, general office use, personal use, and household use, but are not designed, developed and manufactured as contemplated (1) for use accompanying fatal risks or dangers that, unless extremely high levels of safety is secured, could lead directly to death, personal injury, severe physical damage or other loss (including, without limitation, use in nuclear facility, aircraft flight control system, air traffic control system, mass transport control system, medical life support system and military application), or (2) for use requiring extremely high level of reliability (including, without limitation, submersible repeater and artificial satellite). FUJITSU SEMICONDUCTOR shall not be liable for you and/or any third party for any claims or damages arising out of or in connection with above-mentioned uses of the products. Any semiconductor devices fail or malfunction with some probability. You are responsible for providing adequate designs and safeguards against injury, damage or loss from such failures or malfunctions, by incorporating safety design measures into your facility, equipments and products such as redundancy, fire protection, and prevention of overcurrent levels and other abnormal operating conditions. The products and technical information described in this document are subject to the Foreign Exchange and Foreign Trade Control Law of Japan, and may be subject to export or import laws or regulations in U.S. or other countries. You are responsible for ensuring compliance with such laws and regulations relating to export or re-export of the products and technical information described herein. All company names, brand names and trademarks herein are property of their respective owners. Edited: System Memory Business Division