SL2 ICS50/SL2 ICS51 I•CODE SLI-L/I•CODE SLI-L HC Rev. 3.0 — 14 March 2007 136430 Product data sheet PUBLIC 1. General description The I•CODE SLI-L/I•CODE SLI-L HC IC is a dedicated chip for smart label applications with the need for a leaner custom-specific command set, smaller memory and/or a product which takes care of the increasing demand for perfect customer privacy. This IC is another member of our product family of smart label ICs that fully comply to the ISO standard ISO/IEC 15693. The IC is also available in high capacitance version for small label designs. The I•CODE system offers the possibility of operating more than one label simultaneously in the field of the reader antenna (Anticollision). It is designed for long range applications with a special command for the use under the European regulations. 1.1 Anticollision An intelligent anticollision function allows to operate more than one tag in the field simultaneously. The anticollision algorithm selects each tag individually and ensures that the execution of a transaction with a selected tag is performed correctly without data corruption resulting from other tags in the field. 1.2 Contactless energy and data transfer Whenever connected to a very simple and cheap type of antenna (as a result of the 13.56 MHz carrier frequency) made out of a few windings printed, winded, etched or punched coil the I•CODE SLI-L/I•CODE SLI-L HC IC can be operated without line of sight up to a distance of 1.5 m (gate width). No battery is needed. When the smart label is positioned in the field of an interrogator antenna, the high speed RF communication interface allows to transmit data with up to 53 kbit/s. SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 1.3 Security and privacy aspects 1. Unique Identifier (UID) The UID can not be altered and guarantees the uniqueness of each label. 2. Password protected Label Destroy With the 32-bit destroy password an addressed label can be destroyed with the Destroy command. That status is irreversible and the label will never respond to any command again. 3. Password protected Privacy Mode With the 32-bit Privacy password a label can be set to the Privacy mode with the Set to Privacy Mode command. In that mode the label will not respond to any command except of the command Get Random Number till it receives again the right Privacy password. That mode is especially designed to meet the increasing demand to take care of the customers privacy. 4. Password protected EAS Functionality With the 32-bit EAS password the addressed label can be set in a mode that the commands Set EAS and Reset EAS are only executed by the label if the right EAS password is transmitted to the label within the mentioned commands. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 2 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 2. Features 2.1 I•CODE SLI-L RF interface Contactless transmission of data and supply energy (no battery needed) Operating distance: up to 1.5 m (depending on antenna geometry) Operating frequency: 13.56 MHz (ISM, world-wide licence free available) I•CODE SLI- L Functionality (ISO/IEC 15693) Fast data transfer: up to 53 kbit/s High data integrity: 16-bit CRC, framing True anti-collision Additional fast anti-collision read Password protected Electronic Article Surveillance (EAS) incl. application selection Application Family Identifier (AFI) supported Data Storage Format Identifier (DSFID) Privacy command with 32-bit Privacy password Destroy command with 32-bit Destroy password Long Range Command Write distance equal to read distance 2.2 EEPROM Data retention of 10 years Write endurance 100.000 cycles 2.3 Security features Unique identifier for each device Lock mechanism for each user memory block (write protection) Lock mechanism for DSFID, AFI, EAS Password (32-bit) protected Label Destroy Password (32-bit) protected Privacy Mode Password (32-bit) protected EAS Functionality 3. Applications Factory Automation Industrial and Laundry Asset Management Libraries and Rental 4. Quick reference data The data sheet describes the functionality of the smart label ICS I•CODE SLI- L and I•CODE SLI- L HC. These ICs distinguish between the built in resonance capacitance. The I•CODE SLI- L HC shows a higher capacitance value than the I•CODE SLI- L. Therefore within the I•CODE SLI- L HC smaller label designs can be realized. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 3 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Table 1: Quick reference data Description SL2 ICS50 I•CODE SLI- L 23.5 pF SL2 ICS51 I•CODE SLI- L HC 97.0 pf [1] Min Typ[1] Symbol Max Unit Typical values are not guaranteed. These values listed are at room temperature. 5. Ordering information Table 2: Ordering information Type number Package Name Description Version SL2 ICS5001EW/V1 FFC sawn wafer 150 µm on film frame carrier - SL2 FCS5001 EV/DH FCP Flip Chip Package - SL2 MOS5001EV MOA2 Module for contactless chip card ICs PLMCC-05 SOT500AA1 SL2 ICS5101EW/V1 FFC sawn wafer 150 µm on film frame carrier - SL2 FCS5101 EV/DH FCP Flip Chip Package - SL2 MOS5101EV MOA2 Module for contactless chip card ICs PLMCC-05 SOT500AA1 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 4 of 28 NXP Semiconductors SL2 ICS50/SL2 ICS51 I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 6. Block diagram The SL2 ICS50/SL2 ICS51 IC consists of three major blocks: Analog RF Interface Digital Controller EEPROM The analog part provides stable supply voltage and demodulates data received from the reader for being processed by the digital part. Further, the modulation transistor of the analog part transmits data back to the reader. The digital section includes the state machines, processes the protocol and handles communication with the EEPROM. Fig 1. Block diagram of TAG IC 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 5 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 7. Functional description 7.1 Block description The label requires no internal power supply. Its contactless interface generates the power supply and the system clock via the resonant circuitry by inductive coupling to the interrogator. The interface also demodulates data that are transmitted from the interrogator to the I•CODE Label, and modulates the electromagnetic field for data transmission from the I•CODE Label to the interrogator. Data are stored in a non-volatile memory (EEPROM). The EEPROM has a memory capacity of 512 bit and is organized in 16 blocks consisting of 4 bytes each (1 block = 32 bits). The higher 8 blocks contain user data and the lowest 8 blocks contain the unique identifier, the write access conditions and special data like AFI and DSFID. 7.2 Memory organization The 512 bit EEPROM memory is divided into 16 blocks. A block is the smallest access unit. Each block consists of 4 bytes (1 block = 32 bits). 4 blocks are summed up to 1 page. Bit 0 in each byte represents the least significant bit (LSB) and bit 7 the most significant bit (MSB), respectively. The Memory is divided into 2 parts: • Configuration Area – Within this part of the memory all required information are stored like UID, Write protection, Passwords and so on. Direct access to this memory area is not possible. • User Memory – Within this area the user data are stored. Direct Read/write access to this part of the memory is possible depending on the related write protection conditions. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 6 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Table 3. Memory Organization Page Block -2 -8 Byte 0 Byte 1 Byte 2 Byte 3 Description Configuration Area for internal use -7 -6 -5 -1 -4 -3 -2 -1 0 0 User Memory • • • • 1 2 3 1 4 2 pages 4 bocks each 4 bytes reach (total 32bytes) 5 6 7 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 7 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 7.2.1 Unique identifier The 64-bit unique identifier (UID) is programmed during the production process according to ISO/IEC 15693-3 and cannot be changed afterwards. The numbering of the 64 bits is done according to ISO/IEC 15693-3 starting with the LSB 1 and ending with the MSB 64. This is in contrast to the general used bit numbering within a byte (starting with LSB 0). The TAG type is a part of the UID (bit 41 to 48, after the manufacturer code which is “04h” for NXP Semiconductors). The TAG type of the SL2 ICS50/SL2 ICS51 is “03h” Table 4. Unique Identifier description Byte 7 6 5 4 Name UID 7 UID 6 UID 5 UID 4 Value E0 04 03 IC manufacturer serial number 64 to 57 56 to 49 48 to 41 40 to 1 Bit 3 2 1 0 UID 3 UID 2 UID 1 UID 0 MSB LSB 7.2.2 Configuration of delivered ICs I•CODE SLI-L/I•CODE SLI-L HC ICs are delivered with the following configuration by NXP Semiconductors: • Unique Identifier is unique and read only • Write Access Conditions allow to change user blocks, AFI, DSFID, EAS and Passwords • • • • • • • All password bytes are 00h ( Privacy Password, Destroy Password, EAS Password) Password protected Privacy Mode is disabled EAS password protection is disabled Status of EAS mode is not defined AFI is supported and not defined DSFID is supported and not defined User Data memory is not defined 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 8 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 7.3 Communication principle ISO 15693 command set For detailed description of the protocol and timing please refer to ISO/IEC 15693-2 (modulation, bit-coding, framing) and 15693-3 (anticollision, timing, protocol). Long Range command For detailed description of the protocol and timing please refer to EPC Specification “13.56 MHz ISM Band Class 1 Radio Frequency (RF) Identification Tag Interface Specification”. 8. Command set 8.1 ISO 15693 command set 8.1.1 Mandatory commands 8.1.1.1 Inventory As defined in ISO/IEC 15693-3. Exception: If the Privacy or Destroy mode is enabled the label will not respond. 8.1.1.2 Stay quiet As defined in ISO/IEC 15693-3. 8.1.2 Optional commands 8.1.2.1 Read single block As defined in ISO/IEC 15693-3. Option 0 (Option flag not set) is supported. Option 1 (Option flag set) is supported. If the Privacy or Destroy mode is enabled the label will not respond. 8.1.2.2 Write single block Only Option 0 (Option flag is not set) is supported. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 9 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.2.3 Lock block Only Option 0 (Option flag is not set) is supported. 8.1.2.4 Select As defined in ISO/IEC 15693-3. 8.1.2.5 Reset to ready As defined in ISO/IEC 15693-3. 8.1.2.6 Write AFI As defined in ISO/IEC 15693-3. Only Option 0 (Option flag is not set) is supported. 8.1.2.7 Lock AFI As defined in ISO/IEC 15693-3. Only Option 0 (Option flag is not set) is supported. 8.1.2.8 Write DSFID As defined in ISO/IEC 15693-3. Only Option 0 (Option flag is not set) is supported. 8.1.2.9 Lock DSFID As defined in ISO/IEC 15693-3. Only Option 0 (Option flag is not set) is supported. 8.1.2.10 Get system information As defined in ISO/IEC 15693-3. The IC returns number of blocks= 48 blocks, because it comprises the same digital part as I•CODE SLI-S. The TAG type of the SL2 ICS50/SL2 ICS51 is “03h”. 8.1.3 Custom commands The Manufacturer code of NXP Semiconductors is defined in ISO/IEC 7816-6A1. It has the value “04h”. For the structure of custom commands please refer to ISO/IEC 15693-3. 8.1.3.1 Get random number Command Code = B2h The Get Random Number command is required to receive a random number from the label IC. The passwords that will be transmitted with the Set Password command have to be calculated with the Password and the Random Number (see Section 8.1.3.2 “Set password”). The different passwords are addressed with the Password Identifier. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 10 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8 bits Table 5. SOF Table 6. Request format Flags Get Random Number IC Mfg code UID CRC16 8 bits 8 bits 8 bits 64 bits 16 bits Response format when Error_flag is set SOF Table 7. Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF 8.1.3.2 EOF Flags Random Number CRC16 8 bits 16 bits EOF 16 bits Set password Command Code = B3h With the Set Password command the different Passwords can be transmitted to the Label to get access to the different protected functionalities on the following commands. The Set Password command has to be executed just once for the related passwords if the label is powered. Remark: The Set Password command can only be executed in addressed or selected mode except of the Privacy Password. The XOR Password has to be calculated with the password and two times the received random number from the last Get Random Number command: XOR_Password[31:0] = Password[31:0] XOR {Random_Number[15:0], Random_Number[15:0]} The different passwords are addressed with the Password Identifier. 8 bits Table 8. SOF Table 9. Request format Flags Set IC Mfg Password code UID Identifier Password Identifier XOR CRC16 Passwo rd 8 bits 8 bits 64 bits 8 bits 32 bits 8 bits 16 bits Password Identifier Password Identifier Password 04h Privacy 08h Destroy SLI- L 10h EAS 136430 Product data sheet EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 11 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Table 10. Response format when Error_flag is set SOF Table 11. Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF Flags CRC16 8 bits 16 bits EOF Remark: If the IC receives an invalid password, it will not execute any following command until a Power-On Reset (RF Reset) is executed. 8.1.3.3 Write password Command Code = B4h With the Write Password command a new password will be written into the related memory, if the related old password has already been transmitted with a Set Password command before and the addressed password is not locked (see Section 8.1.3.4 “Lock password”). Remark: The Write Password command can only be executed in addressed or selected mode. The new password takes effect immediately which means that the new password has to be transmitted with the Set Password command to get access to protected blocks/pages. The different passwords are addressed with the Password Identifier. 8 bits Table 12. SOF Table 13. Request format Flags Write Passwor d IC Mfg code UID Password Identifier Password CRC16 8 bits 8 bits 8 bits 64 bits 8 bits 32 bits Password 04h Privacy 08h Destroy SLI- L 10h EAS SOF Table 15. SOF Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set Flags CRC16 8 bits 16 bits 136430 Product data sheet 16 bits Password Identifier Password Identifier Table 14. EOF EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 12 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.4 Lock password Command Code = B5h With the Lock Password command the addressed password will be locked, if the related password has already been transmitted with a Set Password command before. A locked password can not be changed any longer. The different passwords are addressed with the Password Identifier. 8 bits Table 16. SOF Table 17. Request format Flags Lock IC Mfg Password code UID Password CRC16 Identifier 8 bits 8 bits 64 bits 8 bits 8 bits Password 04h Privacy 08h Destroy SLI- L 10h EAS SOF Table 19. SOF Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set Flags CRC16 8 bits 16 bits 136430 Product data sheet 16 bits Password Identifier Password Identifier Table 18. EOF EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 13 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.5 Destroy SLI- L Command Code = B9h With the Destroy SLI- L command the I•CODE SLI-L/I•CODE SLI-L HC Label IC can be destroyed if the Destroy SLI- L password has been transmitted before. This command is irreversible and the I•CODE SLI-L/I•CODE SLI-L HC will never respond to any command again (ISO commands). Remark: The Destroy SLI- L can only be executed in addressed or selected mode. 8 bits Table 20. SOF Table 21. Request format Flags Destroy SLI- L IC Mfg code UID CRC16 8 bits 8 bits 8 bits 64 bits 16 bits Response format when Error_flag is set SOF Table 22. Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF 8.1.3.6 EOF Flags CRC16 8 bits 16 bits EOF Enable privacy Command Code = BAh With the Enable Privacy command the I•CODE SLI-L/I•CODE SLI-L HC Label IC can be set into the Privacy mode. The I•CODE SLI-L/I•CODE SLI-L HC will not respond to any command except Get Random Number and Set Password. To get out of the Privacy Status the valid Privacy password has to be transmitted to the IC with the Set Password command. 8 bits Table 23. SOF Table 24. SOF Table 25. SOF Request format Flags Enable Privacy IC Mfg code UID 8 bits 8 bits 8 bits 64 bits optional 16 bits EOF Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set Flags CRC16 8 bits 16 bits 136430 Product data sheet CRC16 EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 14 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.7 Inventory page read Command Code = B0h When receiving the Inventory Page Read request, the I•CODE SLI-L/I•CODE SLI-L HC IC performs the same as in the anti-collision sequence, with the difference that instead of the UID and the DSFID the requested memory content is re-transmitted from the I•CODE SLI-L/I•CODE SLI-L HC IC. If an error is detected the I•CODE SLI-L/I•CODE SLI-L HC IC remains silent. If the Option flag is set to 0 n pages of data including page protection status (password protection condition) are re-transmitted. If the option flag is set to 1 n pages (4 blocks = 16 byte) of data including page protection status (password protection condition) and the part of the UID which is not part of the mask are re-transmitted. The request contains: • • • • • • • • • Table 26. SOF Flags Inventory Page Read command code IC Manufacturer code AFI (if the AFI flag is set) Mask length Mask value (if mask length > 0) First page number to be read Number of pages to be read CRC 16 8 bits Request format Flags Inventory Read IC Mfg code Optional Mask AFI Length Mask Value 8 bits 8 bits 8 bits 8 bits 0 to 64 bits 8 bits 8 bits First Page Number Number of CRC16 Pages 8 bits EOF 16 bits The Inventory_flag must be set to 1. The meaning of flags 5 to 8 is according to table 5 in ISO/IEC 15693-3. The number of pages in the request is one less than the number of pages that the I•CODE SLI-L/I•CODE SLI-L HC IC returns in its response. If the Option flag in the request is set to 0 the response contains: Table 27. SOF Response format Flags Data CRC16 8 bits Page status & data 16 bits EOF Repeated as needed The I•CODE SLI-L/I•CODE SLI-L HC IC reads the requested block(s) including page protection status and sends back their value in the response. The mechanism and timing of the Inventory Page Read command performs the same as at the Inventory command which is described in Clause 8 of ISO/IEC 15693-3. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 15 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC The requested page(s) are transmitted in the following format and repeated as necessary (depending on number of pages): Table 28. Page Protection Status byte Page Protection Status byte Block data 00h: OK 16 byte page data content 0Fh: ERROR no data If the Option flag in the request is set to 1 the response contains: Table 29. SOF Response format Flags Rest of UID which is not part of the mask and slot number Data CRC16 8 bits 0 to 64 bit Page status & data 16 bits Multiple of 8 bits Repeated as needed EOF The I•CODE SLI-L/I•CODE SLI-L HC IC reads the requested page(s) including page protection status and sends back their value in the response. Additionally the bytes of the UID, which are not parts of the mask and the slot number in case of 16 slots, are returned. Instead of a padding with zeros up to the next byte boundary the corresponding bits of the UID are returned. The mechanism and timing of the Inventory Page Read command perform the same as at the Inventory command which is described in Clause 8 of ISO/IEC 15693-3. The requested page(s) are transmitted in the following format and repeated as necessary (depending on number of pages): Table 30. Page Protection Status byte Page Protection Status Byte Block Data 00h: OK 16 byte page data content 0Fh: ERROR no data Remark: The number of bits of the re-transmitted UID can be calculated as follows: • 16 slots: – 64 to 4 - mask length rounded up to the next byte boundary • 1 slot: – 64 - mask length rounded up to the next byte boundary 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 16 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Remark: If the sum of first page number and number of pages exceeds the total available number of user pages the number of transmitted pages is less than the requested number of pages, which means that the last returned page is the highest available user page, followed by the 16-bit CRC and the EOF. • Example: – mask length = 30 • Returned: – 64 to 4 – 30 = 30 gives 4 bytes Table 31. Byte 0 Example Byte 1 Byte 2 Byte 3 Byte 4 Byte 5 Byte 6 mask value incl. padding with zeros UID zeros transmitted by Interrogator returned value 8.1.3.8 Byte 7 transmitted by I•CODE SLI-L/I•CODE SLI-L HC IC Fast inventory page read Command Code = B1h When receiving the Fast Inventory Page Read command the I•CODE SLI-L/I•CODE SLI-L HC IC behaves the same as in the Inventory Page Read command with the following exceptions: The data rate in the direction I•CODE SLI-L/I•CODE SLI-L HC IC to the interrogator is twice as defined in ISO/IEC 15693-3 depending on the datarate_flag 53 kbit (high data rate) or 13 kbit (low data rate). The datarate from the interrogator to the I•CODE SLI-L/I•CODE SLI-L HC IC and the time between the rising edge of the EOF from the interrogator to the I•CODE SLI-L/I•CODE SLI-L HC IC remain unchanged (stay the same as defined in ISO/IEC 15693-3). In the direction I•CODE SLI-L/I•CODE SLI-L HC IC to the interrogator only the single subcarrier mode is supported. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 17 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.9 Set EAS Command Code = A2h This command enables the EAS mode if the EAS mode is not locked. If the EAS mode is password protected the EAS password has to be transmitted before with the Set Password command. 8 bits Table 32. Request format SOF Table 33. Flags Set EAS IC Mfg code UID CRC16 8 bits 8 bits 8 bits 64 bits optional 16 bits Response format when Error_flag is set SOF Table 34. Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF 8.1.3.10 EOF Flags CRC16 8 bits 16 bits EOF Reset EAS Command Code = A3h This command disables the EAS mode if the EAS mode is not locked. If the EAS mode is password protected the EAS password has to be transmitted before with the Set Password command. 8 bits Table 35. SOF Table 36. SOF Table 37. SOF Request format Flags Reset EAS IC Mfg code UID CRC16 8 bits 8 bits 64 bits optional 16 bits 8 bits Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set Flags CRC16 8 bits 16 bits 136430 Product data sheet EOF EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 18 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.11 Lock EAS Command Code = A4h This command locks the current state of the EAS mode and the EAS ID. If the EAS mode is password protected the EAS password has to be transmitted before with the Set Password command. 8 bits Table 38. Request format SOF Table 39. Lock EAS IC Mfg code UID CRC16 8 bits 8 bits 8 bits 64 bits optional 16 bits Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF 8.1.3.12 EOF Response format when Error_flag is set SOF Table 40. Flags Flags CRC16 8 bits 16 bits EOF EAS Alarm Command Code = A5h The EAS Alarm command can be used in the following three configurations: • Option flag is set to 0: EAS ID Mask length and EAS ID value shall not be transmitted If the EAS mode is set the EAS response is returned from the I•CODE SLI-L/I•CODE SLI-L HC IC. This configuration is compliant to the EAS command of the I•CODE SLI-L/I•CODE SLI-L HC IC. • Option flag is set to 1: Within the command the EAS ID Mask Length has to be transmitted to identify how many bits of the following EAS ID value are valid (multiple of 8-bit). Only that I•CODE SLI-L/I•CODE SLI-L HC ICs will respond with the EAS response which have stored the corresponding data in the EAS ID configuration (selective EAS) and if the EAS Mode is set. If the EAS ID Mask length is set to 0, the I•CODE SLI-L/I•CODE SLI-L HC IC will answer with its EAS ID. 8 bits Table 41. SOF Request format Flags EAS Alarm IC Mfg code UID EAS ID Mask EAS ID Value Length CRC16 EOF 8 bits 8 bits 8 bits 64 bits 8 bits optional 0 to 16 bits 16 bits optional multiple of 8 bits optional If an error is detected the I•CODE SLI-L/I•CODE SLI-L HC IC remains silent. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 19 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Option flag is set to 0 or option flag is set to 1 and the EAS ID Mask Length is not equal 0: Table 42. Response format SOF Flags EAS Sequence CRC16 8 bits 256 bits 16 bits EOF EAS sequence (starting with the LSB, which is transmitted first; read from left to right): 11110100 11001101 01000110 00001110 10101011 11100101 00001001 11111110 00010111 10001101 00000001 00011100 01001011 10000001 10010010 01101110 01000001 01011011 01011001 01100001 11110110 11110101 11010001 00001101 10001111 00111001 10001011 01001000 10100101 01001110 11101100 11110111 Option flag is set to 1 and the EAS ID Mask Length is equal 0: Table 43. Response format SOF Flags EAS ID Value CRC16 8 bits 16 bits 16 bits EOF If the EAS mode is disabled (see Reset EAS command in Section 8.1.3.10 “Reset EAS”) the I•CODE SLI-L/I•CODE SLI-L HC IC remains silent. 8.1.3.13 Password protect EAS Command Code = A6h This command enables the password protection for EAS if the EAS password has to be transmitted before with the Set Password command. 8 bits Table 44. SOF Table 45. SOF Table 46. SOF Request format Flags Password Protect EAS IC Mfg code UID CRC16 8 bits 8 bits 8 bits 64 bits optional 16 bits Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set Flags CRC16 8 bits 16 bits 136430 Product data sheet EOF EOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 20 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.3.14 Write EAS ID Command Code = A7h With the command Write EAS ID a new EAS Identifier is stored in the corresponding configuration memory. If EAS is password protected (for Set and Reset EAS) the EAS password has to be transmitted before with the Set Password command. 8 bits Table 47. Request format SOF Flags Write EAS IC Mfg code UID EAS ID value CRC16 8 bits 8 bits 8 bits 64 bits optional 16 bits 16 bits Table 48. SOF Table 49. EOF Response format when Error_flag is set Flags Error code CRC16 8 bits 8 bits 16 bits EOF Response format when Error_flag is NOT set SOF Flags CRC16 8 bits 16 bits EOF 8.2 Long range command 8.2.1 Long Range CMD Command Code = 40h The Long Range CMD command is designed to allow the use of the higher limits defined in the ISO/TR 7003:1990. The bit and byte coding is the same as it is defined in EPC Specification “13.56 MHz ISM Band Class 1 Radio Frequency (RF) Identification Tag Interface Specification”. To reduce the number of pulses the redundancy check is changed from an CRC8 calculation to a XOR of the transmitted parameters (Long Range CMD, Data Selector, Number of Slots) • Number of Slots: – If the Data Selector is transmitted for EAS the label will ignore the received Number of Slots parameter and will use always one Slot (like EAS Alarm command, see Section 8.1.3.12 “EAS Alarm”). with EAS. For EAS typically 00h is used as the value for Number of Slots to reduce the number of transmitted pulses. – If the Data Selector is transmitted for UID or EPC the label will respond within one of the transmitted Number of Slots on a pseudo random basis and will calculate a new slot for a following command. Labels, which have executed a Destroy EPC command before will not respond to this command, if the Data Selector for EPC is transmitted. 8 bits Table 50. SSOF Request format Long Range CMD Data Selector Number of Slots XOR 8 bits 8 bits 8 bits 8 bits 136430 Product data sheet CEOF © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 21 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC Table 51. Number of Slots Number of Slots Value 1 10h 4 20h 8 40h 16 80h 32 00h 64 01h 128 02h 256 04h 512 08h Table 52. Data Selector Data Selector Value Response EAS 00h LSB first UID 01h LSB of LS Byte first Depending on Data Selector the Label ICs will respond with the requested data. 8 bits Table 53. RSOF Table 54. VCD Response format Requested Data CRC16 Depending on Data Selector 16 bits REOF Long Range CMD Long Range CMD VICCs Response 1 Response 2 Response 3 Timing t1 t1 t1 Slot Slot 0 Slot1 Comment 8 bits Table 55. No VICC response Collision Timing Timing Min. Max. Unit t1 302.06 - 2.36 30206 + 2.36 µs 136430 Product data sheet Slot2 © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 22 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.3 Error handling 8.3.1 Transmission errors According to ISO/IEC 15693 the Label IC will not respond if a transmission error (CRC, bitcoding, bitcount, wrong framing) is detected and will silently wait for the next correct received command. 8.3.2 Not supported commands or options If the received command or option is not supported, the behaviour of the Label IC is depending on the addressing mechanism. 8.3.2.1 Non addressed mode The label IC remains silent. 8.3.2.2 Addressed or selected mode The addressed or selected label IC responds with the error code “0Fh” (error with no information given or error code is not supported). If the Inventory flag or the protocol extension flag is set the label IC will not respond if the command or option is not supported. 8.3.3 Parameter out of range 8.3.3.1 Read commands If the sum of the first block number and the number of blocks exceeds the total available number of user blocks, the number of transmitted blocks is less than the requested number of blocks, which means that the last returned block is the highest available user block, followed by the 16-bit CRC and the EOF. 8.3.3.2 Write and lock commands If the address of a block to be written does not exist or a block to be written is locked the behaviour of the Label IC is depending on the addressing mechanism. 8.3.3.3 Non addressed mode The Label IC remains silent and aborts the command without writing anything. 8.3.3.4 Addressed or selected mode The addressed or selected Label IC responds with the error code “0Fh” (error with no information given or error code is not supported). 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 23 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.4 Data integrity Following mechanisms are implemented in the contactless communication link between interrogator and label to ensure very reliable data transmission: • • • • 16-bit CRC per block Bit count checking Bit coding to distinguish between “1”, “0” and no information Channel monitoring (protocol sequence and bit stream analysis) 8.5 RF interface The definition of the RF interface is according to the standard ISO/IEC 15693-2 and ISO/IEC 15693-3. 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 24 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 9. Revision history Table 56. Revision history Document ID Release date Data sheet status 136430 14 March 2007 Product data sheet Modifications: • Supersedes new Inital version 136430 Product data sheet Change notice © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 25 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 10. Legal information 10.1 Data sheet status Document status[1][2] Product status[3] Definition Objective [short] data sheet Development This document contains data from the objective specification for product development. Preliminary [short] data sheet Qualification This document contains data from the preliminary specification. Product [short] data sheet Production This document contains the product specification. [1] Please consult the most recently issued document before initiating or completing a design. [2] The term ‘short data sheet’ is explained in section “Definitions”. [3] The product status of device(s) described in this document may have changed since this document was published and may differ in case of multiple devices. The latest product status information is available on the Internet at URL http://www.nxp.com. 10.2 Definitions Short data sheet — A short data sheet is an extract from a full data sheet with the same product type number(s) and title. A short data sheet is intended for quick reference only and should not be relied upon to contain detailed and full information. For detailed and full information see the relevant full data sheet, which is available on request via the local NXP Semiconductors sales office. In case of any inconsistency or conflict with the short data sheet, the full data sheet shall prevail. 10.3 Disclaimers General — Information in this document is believed to be accurate and reliable. However, NXP Semiconductors does not give any representations or warranties, expressed or implied, as to the accuracy or completeness of such information and shall have no liability for the consequences of use of such information. Right to make changes — NXP Semiconductors reserves the right to make changes to information published in this document, including without limitation specifications and product descriptions, at any time and without notice. This document supersedes and replaces all information supplied prior to the publication hereof. Suitability for use — NXP Semiconductors products are not designed, authorized or warranted to be suitable for use in medical, military, aircraft, space or life support equipment, nor in applications where failure or malfunction of a NXP Semiconductors product can reasonably be expected to result in personal injury, death or severe property or environmental damage. NXP Semiconductors accepts no liability for inclusion and/or use of NXP Semiconductors products in such equipment or applications and therefore such inclusion and/or use is at the customer’s own risk. Applications — Applications that are described herein for any of these products are for illustrative purposes only. NXP Semiconductors makes no representation or warranty that such applications will be suitable for the specified use without further testing or modification. Limiting values — Stress above one or more limiting values (as defined in the Absolute Maximum Ratings System of IEC 60134) may cause permanent damage to the device. Limiting values are stress ratings only and operation of the device at these or any other conditions above those given in the Characteristics sections of this document is not implied. Exposure to limiting values for extended periods may affect device reliability. Terms and conditions of sale — NXP Semiconductors products are sold subject to the general terms and conditions of commercial sale, as published at http://www.nxp.com/profile/terms, including those pertaining to warranty, intellectual property rights infringement and limitation of liability, unless explicitly otherwise agreed to in writing by NXP Semiconductors. In case of any inconsistency or conflict between information in this document and such terms and conditions, the latter will prevail. No offer to sell or license — Nothing in this document may be interpreted or construed as an offer to sell products that is open for acceptance or the grant, conveyance or implication of any license under any copyrights, patents or other industrial or intellectual property rights. 10.4 Trademarks Notice: All referenced brands, product names, service names and trademarks are the property of their respective owners. <Name> — is a trademark of NXP B.V. (replace by text inset t001tma<1nn>) 11. Contact information For additional information, please visit: http://www.nxp.com For sales office addresses, send an email to: [email protected] 136430 Product data sheet © NXP B.V. 2007. All rights reserved. Rev. 3.0 — 14 March 2007 26 of 28 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 12. Tables Table 1: Table 2: Table 3. Table 4. Table 5. Table 6. Table 7. Table 8. Table 9. Table 10. Table 11. Table 12. Table 13. Table 14. Table 15. Table 16. Table 17. Table 18. Table 19. Table 20. Table 21. Table 22. Table 23. Table 24. Table 25. Table 26. Table 27. Table 28. Quick reference data . . . . . . . . . . . . . . . . . . . . .4 Ordering information . . . . . . . . . . . . . . . . . . . . . .4 Memory Organization . . . . . . . . . . . . . . . . . . . . .7 Unique Identifier description . . . . . . . . . . . . . . . .8 Request format . . . . . . . . . . . . . . . . . . . . . . . . . 11 Response format when Error_flag is set. . . . . . 11 Response format when Error_flag is NOT set . 11 Request format . . . . . . . . . . . . . . . . . . . . . . . . . 11 Password Identifier . . . . . . . . . . . . . . . . . . . . . . 11 Response format when Error_flag is set. . . . . .12 Response format when Error_flag is NOT set .12 Request format . . . . . . . . . . . . . . . . . . . . . . . . .12 Password Identifier . . . . . . . . . . . . . . . . . . . . . .12 Response format when Error_flag is set. . . . . .12 Response format when Error_flag is NOT set .12 Request format . . . . . . . . . . . . . . . . . . . . . . . . .13 Password Identifier . . . . . . . . . . . . . . . . . . . . . .13 Response format when Error_flag is set. . . . . .13 Response format when Error_flag is NOT set .13 Request format . . . . . . . . . . . . . . . . . . . . . . . . .14 Response format when Error_flag is set. . . . . .14 Response format when Error_flag is NOT set .14 Request format . . . . . . . . . . . . . . . . . . . . . . . . .14 Response format when Error_flag is set. . . . . .14 Response format when Error_flag is NOT set .14 Request format . . . . . . . . . . . . . . . . . . . . . . . . .15 Response format . . . . . . . . . . . . . . . . . . . . . . .15 Page Protection Status byte . . . . . . . . . . . . . . .16 Table 29. Table 30. Table 31. Table 32. Table 33. Table 34. Table 35. Table 36. Table 37. Table 38. Table 39. Table 40. Table 41. Table 42. Table 43. Table 44. Table 45. Table 46. Table 47. Table 48. Table 49. Table 50. Table 51. Table 52. Table 53. Table 54. Table 55. Table 56. Response format . . . . . . . . . . . . . . . . . . . . . . . 16 Page Protection Status byte. . . . . . . . . . . . . . . 16 Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Request format . . . . . . . . . . . . . . . . . . . . . . . . 18 Response format when Error_flag is set . . . . . 18 Response format when Error_flag is NOT set . 18 Request format . . . . . . . . . . . . . . . . . . . . . . . . 18 Response format when Error_flag is set . . . . . 18 Response format when Error_flag is NOT set . 18 Request format . . . . . . . . . . . . . . . . . . . . . . . . 19 Response format when Error_flag is set . . . . . 19 Response format when Error_flag is NOT set . 19 Request format . . . . . . . . . . . . . . . . . . . . . . . . 19 Response format . . . . . . . . . . . . . . . . . . . . . . . 20 Response format . . . . . . . . . . . . . . . . . . . . . . . 20 Request format . . . . . . . . . . . . . . . . . . . . . . . . 20 Response format when Error_flag is set . . . . . 20 Response format when Error_flag is NOT set . 20 Request format . . . . . . . . . . . . . . . . . . . . . . . . 21 Response format when Error_flag is set . . . . . 21 Response format when Error_flag is NOT set . 21 Request format . . . . . . . . . . . . . . . . . . . . . . . . 21 Number of Slots . . . . . . . . . . . . . . . . . . . . . . . . 22 Data Selector . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Response format . . . . . . . . . . . . . . . . . . . . . . . 22 Long Range CMD . . . . . . . . . . . . . . . . . . . . . . 22 Timing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Revision history . . . . . . . . . . . . . . . . . . . . . . . . 25 13. Figures Fig 1. Block diagram of TAG IC . . . . . . . . . . . . . . . . . . . .5 14. Contents 1 1.1 1.2 1.3 2 2.1 2.2 2.3 3 4 General description . . . . . . . . . . . . . . . . . . . . . . Anticollision. . . . . . . . . . . . . . . . . . . . . . . . . . . . Contactless energy and data transfer. . . . . . . . Security and privacy aspects . . . . . . . . . . . . . . Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . I•CODE SLI-L RF interface. . . . . . . . . . . . . . . . EEPROM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Security features. . . . . . . . . . . . . . . . . . . . . . . . Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . Quick reference data . . . . . . . . . . . . . . . . . . . . . 1 1 1 2 3 3 3 3 3 3 5 6 7 7.1 7.2 7.2.1 7.2.2 7.3 8 8.1 Ordering information . . . . . . . . . . . . . . . . . . . . Block diagram . . . . . . . . . . . . . . . . . . . . . . . . . . Functional description . . . . . . . . . . . . . . . . . . . Block description . . . . . . . . . . . . . . . . . . . . . . . Memory organization . . . . . . . . . . . . . . . . . . . . Unique identifier . . . . . . . . . . . . . . . . . . . . . . . . Configuration of delivered ICs . . . . . . . . . . . . . Communication principle . . . . . . . . . . . . . . . . . Command set . . . . . . . . . . . . . . . . . . . . . . . . . . ISO 15693 command set . . . . . . . . . . . . . . . . . 4 5 6 6 6 8 8 9 9 9 Please be aware that important notices concerning this document and the product(s) described herein, have been included in section ‘Legal information’. © NXP B.V. 2007. All rights reserved. For more information, please visit: http://www.nxp.com For sales office addresses, please send an email to: [email protected] Date of release: 14 March 2007 Document identifier: 136430 SL2 ICS50/SL2 ICS51 NXP Semiconductors I•CODE SLI-L/I•CODE SLI-L HC PUBLIC 8.1.1 Mandatory commands . . . . . . . . . . . . . . . . . . . 9 8.1.1.1 Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 8.1.1.2 Stay quiet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 8.1.2 Optional commands . . . . . . . . . . . . . . . . . . . . . 9 8.1.2.1 Read single block . . . . . . . . . . . . . . . . . . . . . . . 9 8.1.2.2 Write single block . . . . . . . . . . . . . . . . . . . . . . . 9 8.1.2.3 Lock block. . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.4 Select . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.5 Reset to ready . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.6 Write AFI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.7 Lock AFI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.8 Write DSFID . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.9 Lock DSFID . . . . . . . . . . . . . . . . . . . . . . . . . . 10 8.1.2.10 Get system information. . . . . . . . . . . . . . . . . . 10 8.1.3 Custom commands. . . . . . . . . . . . . . . . . . . . . 10 8.1.3.1 Get random number . . . . . . . . . . . . . . . . . . . . 10 8.1.3.2 Set password . . . . . . . . . . . . . . . . . . . . . . . . . 11 8.1.3.3 Write password . . . . . . . . . . . . . . . . . . . . . . . . 12 8.1.3.4 Lock password . . . . . . . . . . . . . . . . . . . . . . . . 13 8.1.3.5 Destroy SLI- L. . . . . . . . . . . . . . . . . . . . . . . . . 14 8.1.3.6 Enable privacy . . . . . . . . . . . . . . . . . . . . . . . . 14 8.1.3.7 Inventory page read . . . . . . . . . . . . . . . . . . . . 15 8.1.3.8 . . . . . . . . . . . . . . . . Fast inventory page read 17 8.1.3.9 Set EAS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 8.1.3.10 Reset EAS . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 8.1.3.11 Lock EAS . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 8.1.3.12 EAS Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 8.1.3.13 Password protect EAS . . . . . . . . . . . . . . . . . . 20 8.1.3.14 Write EAS ID. . . . . . . . . . . . . . . . . . . . . . . . . . 21 8.2 Long range command. . . . . . . . . . . . . . . . . . . 21 8.2.1 Long Range CMD . . . . . . . . . . . . . . . . . . . . . . 21 8.3 Error handling . . . . . . . . . . . . . . . . . . . . . . . . . 23 8.3.1 Transmission errors . . . . . . . . . . . . . . . . . . . . 23 8.3.2 Not supported commands or options . . . . . . . 23 8.3.2.1 Non addressed mode . . . . . . . . . . . . . . . . . . . 23 8.3.2.2 Addressed or selected mode . . . . . . . . . . . . . 23 8.3.3 Parameter out of range. . . . . . . . . . . . . . . . . . 23 8.3.3.1 . . . . . . . . . . . . . . . . . . . . . . .Read commands 23 8.3.3.2 Write and lock commands . . . . . . . . . . . . . . . 23 8.3.3.3 Non addressed mode . . . . . . . . . . . . . . . . . . . 23 8.3.3.4 Addressed or selected mode . . . . . . . . . . . . . 23 8.4 . . . . . . . . . . . . . . . . . . . . . . . . . .Data integrity 24 8.5 . . . . . . . . . . . . . . . . . . . . . . . . . . RF interface 24 9 Revision history . . . . . . . . . . . . . . . . . . . . . . . . 25 10 Legal information. . . . . . . . . . . . . . . . . . . . . . . 26 10.1 Data sheet status . . . . . . . . . . . . . . . . . . . . . . 26 10.2 Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 10.3 Disclaimers . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 10.4 Trademarks. . . . . . . . . . . . . . . . . . . . . . . . . . . 26 11 Contact information. . . . . . . . . . . . . . . . . . . . . 26 12 13 14 Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Figures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Please be aware that important notices concerning this document and the product(s) described herein, have been included in section ‘Legal information’. © NXP B.V. 2007. All rights reserved. For more information, please visit: http://www.nxp.com For sales office addresses, please send an email to: [email protected] Date of release: 14 March 2007 Document identifier: 136430