ATMEL AT88SC1608-09PT-00 8 x 256 x 8 secure memory with authentication Datasheet

Features
•
•
•
•
•
•
•
•
One 128 x 8 (1K bit) Configuration Zone
Eight 256 x 8 (16K bits) User Zones
Low Voltage Operation: 2.7V to 5.5V
Two-wire Serial Interface
16-byte Page Write Mode
Self-timed Write Cycle (10 ms max)
Answer-to-Reset Register
High Security Memory Including Anti-wiretapping
– 64-bit Authentication Protocol (under exclusive patent license from ELVA)
– Authentication Attempts Counter
– Eight Sets of Two 24-bit Passwords
– Specific Passwords for Read and Write
– Sixteen Password Attempts Counters
– Selectable Access Rights by Zone
• ISO Compliant Packaging
• High Reliability
– Endurance: 100,000 Cycles
– Data Retention: 100 Years
– ESD Protection: 4,000V (min)
• Low-power CMOS
Table 1. Pin Configuration
Name
Description
ISO Module Contact
Standard Package Pin
VCC
Supply Voltage
C1
8
GND
Ground
C5
1
SCL
Serial Clock Input
C3
6
SDA
Serial Data Input/Output
C7
3
RST
Reset Input
C2
7
Card Module Contact
VCC
NC
8 x 256 x 8
Secure Memory
with
Authentication
AT88SC1608
8-pin SOIC, PDIP, or LAP
GND
NC
SDA
NC
1
2
3
4
8
7
6
5
VCC
RST
SCL
NC
0971G–SMEM–04/04
1
Description
The AT88SC1608 provides 17,408 bits of serial EEPROM memory organized as one
configuration zone of 128 bytes and eight user zones of 256 bytes each. This device is
optimized as a “secure memory” for the smart card market, secure identification for electronic data transfer, or components in a system, without the requirement of an internal
microprocessor.
The embedded authentication protocol allows the memory and the host to authenticate
each other. When this device is used with a host which incorporates a microcontroller
(e.g., AT89C51, AT89C2051, AT90S1200), the system provides an “anti-wiretapping”
configuration. The device and the host exchange “challenges” issued from a random
generator and verify their values through a specific cryptographic function included in
each part. When both agree on the same result, the access to the memory is permitted.
Figure 1. Security Methodology
Device
Card Number
Verify A
COMPUTE Challenge B
Challenge B
2
Host (Reader)
COMPUTE Challenge A
Challenge A
VERIFY B
VERIFY (RPW)
DATA
Read Password (RPW)
VERIFY (WPW)
Write 0 or 1
Write Password (WPW)
DATA
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Memory Access
Depending on the device configuration, the host might carry out the authentication protocol and/or present different passwords for each operation, read or write. Each user
zone may be configured for free access for read and write or for password-restricted
access. To insure security between the different user zones (multiapplication card),
each zone can use a different set of passwords. A specific AAC for each password and
for the authentication provides protection against “systematic attacks.” When the memory is unlocked, the two-wire serial protocol is effective, using SDA and SCL. The
memory includes a specific register providing a 32-bit data stream conforming to the
ISO 7816-10 synchronous answer-to-reset.
Figure 2. Block Diagram
VCC
GND
Power
Mgt.
Authentication
Unit
Random
Generator
Data
Transfer
SCL
SDA
ISO
Interface
RST
Password
Verification
EEPROM
Answer
To Reset
Pin Descriptions
Supply Voltage (VCC)
The VCC input is a 2.7V-to-5.5V positive voltage, supplied by the host.
Serial Clock (SCL)
The SCL input is used to positive edge clock data into the device and negative edge
clock data out of the device.
Serial Data (SDA)
The SDA pin is bidirectional for serial data transfer. This pin is open-drain driven and
may be wire-ORed with any number of other open drain or open collector devices. An
external pull-up resistor should be connected between SDA and VCC. The value of this
resistor and the system capacitance loading the SDA bus will determine the rise time of
SDA. This rise time will determine the maximum frequency during read operations. Low
value pull-up resistors will allow higher frequency operations while drawing higher average power supply current.
Reset (RST)
When the RST input is pulsed high, the device will output the data programmed into the
32-bit answer-to-reset register. All password and authentication access will be reset.
Following a reset, device authentication and password verification sequences must be
presented to re-establish user access.
3
0971G–SMEM–04/04
Memory Mapping
The first 16K bits of the memory are divided into eight user zones of 256 bytes each.
Table 1. Memory Map
Zone
$0
$1
$2
$3
$4
$5
$6
$7
$000
256 bytes
-
User 0
$0F8
$000
User 1
User 6
$0F8
$000
256 bytes
-
User 7
$0F8
Note:
4
“$” = hexadecimal value
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
The last 1K bit of the memory is a configuration zone with specific system data, access
rights, and read/write commands; it is divided into six subzones.
Table 2. Configuration Zone
Configuration
$0
$1
$2
$3
$4
$5
Answer-to-Reset
$6
$7
Lot History Code
$00
Card Manufacturer Code
$08
Fabrication
Fab Code
AR0
Reserved
AR1
AR2
AR3
AR4
AR5
AR6
AR7
$10
Access
Reserved for Future Use
AAC
$18
Identification Number (Nc)
$20
Authentication
Cryptogram (Ci)
$28
Secret
Secret Seed (Gc)
$30
Test
Reserved for Memory Test
$38
Passwords
Note:
PAC
Write 0
PAC
Read 0
$40
PAC
Write 1
PAC
Read 1
$48
PAC
Write 2
PAC
Read 2
$50
PAC
Write 3
PAC
Read 3
$58
PAC
Write 4
PAC
Read 4
$60
PAC
Write 5
PAC
Read 5
$68
PAC
Write 6
PAC
Read 6
$70
PAC
Secure Code/Write 7
PAC
Read 7
$78
AAC: Authentication Attempts Counter
PAC: Password Attempts Counter
AR0−7: Access Register for User Zone 0 to 7
Fuses
FAB, CMA, and PER are nonvolatile fuses blown at the end of each card life step. Once
blown, these EEPROM fuses can not be reset.
•
The FAB fuse is blown by Atmel prior to shipping wafers to the card manufacturer.
•
The CMA fuse is blown by the card manufacturer prior to shipping cards to the
issuer.
•
The PER fuse is blown by the issuer prior to shipping cards to the end user.
The fuses are read and written in the configuration zone using the address $80.
Table 3. Fuse Byte
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
0
0
0
0
0
PER
CMA
FAB
$80
5
0971G–SMEM–04/04
When the fuses are all “1”s, read and write are allowed in the entire memory. Before
blowing the FAB fuse, Atmel writes the entire memory to “1”, except the fabrication subzone and the secure code.
Figure 3. Access Rights
Zone
Access
FAB = 0
CMA = 0
PER = 0
Fabrication
(Except CMC)
Read
Free
Free
Free
Write
Forbidden
Forbidden
Forbidden
Fabrication
(Only CMC)
Read
Free
Free
Free
Write
Secure Code
Forbidden
Forbidden
Read
Free
Free
Free
Write
Secure Code
Secure Code
Forbidden
Read
Free
Free
Free
Write
Secure Code
Secure Code
Forbidden
Read
Secure Code
Secure Code
Forbidden
Write
Secure Code
Secure Code
Forbidden
Read
Free
Free
Free
Write
Free
Free
Free
Read
Secure Code
Secure Code
Write PW
Write
Secure Code
Secure Code
Write PW
Read
Free
Free
Free
Write
Secure Code
Secure Code
Write PW
Read
AR
AR
AR
Write
AR
AR
AR
Access
Authentication
Secret
Test
Passwords
PAC
User Zones
Note:
6
CMC = Card Manufacturer Code
AR = Access Rights as defined by the access register
PW = Password
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Configuration Zone
•
Answer-to-reset: 32-bit register defined by Atmel
•
Lot History Code: 32-bit register defined by Atmel
•
Fab Code: 16-bit register defined by Atmel
•
Card Manufacturer Code: 32-bit register defined by the card manufacturer
•
Access Registers
Eight 8-bit access registers defined by the issuer (enable if “0”). The access register for
each user zone will specify the privileges and requirements for access to that zone.
Table 4. Access Registers
•
Bit 7
Bit 6
Bit 5
Bit 4
Bit 3
Bit 2
Bit 1
Bit 0
WPE
RPE
ATE
PW2
PW1
PW0
MDF
PGO
Write Password Enable (WPE)
If enabled (WPE = “0”), the user is required to verify the write password to allow write
operations in the user zone. If disabled (WPE = “1”), all write operations are allowed
within the zone. Verification of the write password also allows the read and write passwords to be changed. During personalization (PER = “1”) the WPE bit is forced active
even if set to “1”. This forces the issuer to verify the write password in order to write data
to the user zone. This allows the security code (Write 7 password) to lock write functions
during transportation.
•
Read Password Enable (RPE)
If enabled (RPE = “0”), the user is required to verify either the read password or write
password to allow read operations in the user zone. Read operations initiated without a
verified password will return the status of the fuse bits ($00). Verification of the write
password will always allow read access to the zone. RPE = “0” and WPE = “1” is
allowed but is not recommended.
•
Authentication Enable (ATE)
If enabled (ATE = “0”), a valid authentication sequence must be completed before
access is allowed to the user zone. If disabled (ATE = “1”), authentication is not required
for access.
•
Password Set Select (PW2, PW1, PW0)
These three bits define which of the eight password sets must be presented to allow
access to the user zone. Each access register may point to a unique password set, or
access registers for multiple zones may point to the same password set. In this case,
verification of a single password will open several zones, combining the zones into a
single larger zone.
•
Modify Forbidden (MDF)
If enabled (MDF = “0”), no write access is allowed in the zone at any time.
•
Program Only (PGO)
If enabled (PGO = “0”), data within the zone may be changed from “1” to “0” but never
from “0” to “1”.
Identification Number
(Nc)
An identification number with up to 56 bits is defined by the issuer and should be unique
for each card.
7
0971G–SMEM–04/04
Cryptogram (Ci)
The 64-bit cryptogram is generated by the internal random generator and modified after
each successful verification of the cryptogram by the chip, on host request. The initial
value, defined by the issuer, is diversified as a function of the identification number.
Secret Seed (Gc)
The 64-bit secret seed, defined by the issuer, is diversified as a function of the identification number.
Memory Test Zone
The memory test zone is a 64-bit free access zone for memory test.
Password Sets
The password sets are eight sets of two 24-bit passwords for read and write operations,
defined by the issuer. The write password allows the user to modify the read and write
passwords of the same set. By default, the eighth set of passwords (Write 7/Read 7) is
active for all user zones.
•
Secure Code
A 24-bit password, defined by Atmel, that is different for each card manufacturer. The
Write Password 7 is used as the secure code until the personalization is over (PER = 0).
•
Attempts Counters
There are 16 8-bit password attempts counters (PACs), one for each password, and one
other 8-bit attempts counter for the authentication protocol (AAC). The attempts
counters limit the number of consecutive incorrect code presentations allowed (currently
eight).
User Zones
These zones are dedicated to user data. The access rights of each zone are programmable separately via the access registers. If several zones share the same password
set, the set will be entered only once (after the part is powered up). Therefore, several
zones can be combined into one larger zone. The user zone address should be
changed each time a new zone is being reached.
Security Operations
Password Verification
Compare the operation password presented with the stored one and write a new bit in
the corresponding attempts counter for each wrong attempt. A valid attempt before the
limit erases the attempts counter, and allows the operation to be carried out as long as
the chip is powered.
Only one password is active at a time. When a new password is presented, access privileges defined by the previous password become invalid.
If the trials limit has been reached (i.e., the 8 bits of the attempts counter have been written), the password verification process will not be taken into account.
Authentication Protocol
The access to a user zone may be protected by an authentication protocol in addition to
password-dependent rights.
The authentication success is memorized and active as long as the chip is powered,
unless a new authentication is initialized or RST becomes active. If the new authentication request is not validated, the card has lost its previous authentication and it should
be presented again. Only the last request is memorized.
The authentication verification protocol requires the host to perform an Initialize Authentication command, followed by a Verify Authentication command.
8
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
The password and authentication may be presented at any time and in any order. If the
trials limit has been reached, i.e., the 8 bits of the attempts counter have been written,
the password verification or authentication process will not be taken into account.
Command Definitions and Protocols
The communications protocol is based on the popular two-wire serial interface. Note
that the most significant bit is transmitted first.
Table 5. Device Commands
Command
Description
Code HEX
Chip Select
Instruction
b7
b6
b5
b4
b3
b2
b1
b0
Write User Zone
$B0
1
0
1
1
0
0
0
0
Read User Zone
$B1
1
0
1
1
0
0
0
1
Write Configuration Zone
$B4
1
0
1
1
0
1
0
0
Read Configuration Zone
$B5
1
0
1
1
0
1
0
1
Set User Zone Address
$B2
1
0
1
1
0
0
1
0
Verify Password
$B3
1
0
1
1
0
0
1
1
Initialize Authentication
$B6
1
0
1
1
0
1
1
0
Verify Authentication
$B7
1
0
1
1
0
1
1
1
Set User Zone Address
Figure 4. Set User Zone Address
S
T
A
R
T
Command
Fuses Index
* * * * *
A
C
K
Note:
S
T
O
P
A10 A9 A8
A
C
K
* = Don’t care bit
At power-on, no access to the user zones is allowed until the Set User Zone Address
command occurs. This command sets the three most significant bits of the byte
address, corresponding to the user zone address. This address stays valid until the host
sends a new one and as long as the chip is powered.
9
0971G–SMEM–04/04
Read Zone
Figure 5. Read Zone
S
T
A
R
T
Command
Byte Add (n)
A7
0
Data (n)
A0
–
A
C
K
Note:
A
C
K
D7
Data (n+x)
D7
D0
–
N
A
C
K
S
T
O
P
D0
–
A
C
K
z = 0: Read user zone
z = 1: Read configuration zone
The data byte address is internally incremented following the transmission of each data
byte. As long as the AT88SC1608 receives an acknowledge from the host, it will continue to increment the data byte address and serially clock out sequential data bytes.
During a read operation, the address will “roll over” from the last byte of the current zone
to the first byte of the same zone. If the host is not allowed to read at the specified
address, the device will transmit the data byte with all bits equal to “0”.
Write Zone
Figure 6. Write Zone
S
T
A
R
T
Command
Byte Add (n)
A7
10110z00
–
A
C
K
Note:
Data (n+x)
Data (n)
A0
D7
D7
D0
–
A
C
K
S
T
O
P
D0
–
A
C
K
A
C
K
z = 0: Write user zone
z = 1: Write configuration zone
The lower four bits of the data byte address are internally incremented following the
receipt of each data byte. The higher data byte address bits are not incremented, retaining the 16-byte write-page address. Each data byte within a page must only be loaded
once. Once a stop condition is issued to indicate the end of the host’s write command,
the device initiates the internally timed nonvolatile write cycle. An ACK polling sequence
can be initiated immediately. After a write command, if the host is not allowed to write to
some address locations, a nonvolatile write cycle will still be initiated. However, the
device will only modify data at the allowed addresses.
Read Fuses
Figure 7. Read Fuses
S
T
A
R
T
Command
Fuses Add
10110101
10000000
A
C
K
Note:
10
N
A
C
K
S
T
O
P
0 0 0 0 0 F 2 F1 F0
A
C
K
Fx = 1: fuse is not blown
Fx = 0: fuse is blown
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
The read fuses operation is always allowed. The device only transmits one data byte
and waits for a new command.
Write Fuses
Figure 8. Write Fuses
S
T
A
R
T
Command
S
T
O
P
Fuses Add
1 0 0 0 0 0 0 0
1 0 1 1 0 1 0 0
A
C
K
A
C
K
The write fuses operation is only allowed under secure code control and no data byte is
transmitted by the host. The fuses are blown sequentially: CMA is blown if FAB is equal
to “0”, and PER is blown if CMA is equal to “0”. If the fuses are all “0”s, the operation is
canceled and the device waits for a new command.
Once a stop condition is issued to indicate the end of the host’s write operation, the
device initiates the internal nonvolatile write cycle. An ACK polling sequence can be initiated immediately. Once blown, these fuses cannot be reset.
11
0971G–SMEM–04/04
Answer-to-reset
If RST is high during SCL clock pulse, the reset operation occurs according to the ISO
7816-10 synchronous answer-to-reset. The four bytes of the answer-to-reset register
are transmitted least significant bit (LSB) first on the 32 clock pulses provided on SCL.
Following a RST assertion, all password and authentication access privileges are reset.
The values programmed by Atmel are shown in Figure 9 below.
Figure 9. Answer-to-reset
R
E
S
E
T
$AA
$2C
0 0 1 1 0 1 0 0 0 1 0 1 0 1 0 1
D0
–
D7 D8
$A0
$55
1 0 1 0 1 0 1 0 0 0 0 0 0 1 0 1
D15 D16
–
D23 D24
–
D31
–
Verify Password
Figure 10. Verify Password
S
T
A
R
T
Index
Command
Pw(0)
* * * * r p2 p1 p0
1 0 1 1 0 1 0 0
D7
–
A
C
K
A
C
K
Pw(1)
D0
D15
A
C
K
–
S
T
O
P
Pw(2)
D23
D8
A
C
K
–
D16
A
C
K
1. Pw: Password, 3 bytes
2. The four bits “rppp” indicate the password to compare:
r = 0: Write password
r = 1: Read password
ppp: Password set number
(rppp = 0111 for the secure code)
Once the sequence is completed and a stop condition is issued, there is a nonvolatile
write cycle to update the associated attempts counter. In order to know whether or not
the inserted password was correct, the device requires the host to perform an ACK polling sequence with the specific device address of $B5. When the write cycle has been
completed, the ACK polling command ($B5, Read Configuration Zone) will return a valid
ACK. This command should be followed by the byte address of the respective PAC. If
the password presented is valid, the PAC will be set to $FF. If the password was not
valid, the PAC will have one additional bit written to “0”.
12
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Initialize Authentication
Figure 11. Initialize Authentication
S
T
A
R
T
Q0(0)
Command
D7
1 0 1 1 0 1 1 0
–
Q0(1)
D0
–
Q0(7)
D8
A
C
K
A
C
K
Note:
D15
S
T
O
P
...
D63
–
D56
A
C
K
A
C
K
Q0: Host random number, 8 bytes
The initialize authentication command sets up the random generator with the cryptogram (Ci), the secret seed (Gc), and the host random number (Q0). Once the sequence
is completed and a stop condition is issued, there is a nonvolatile write cycle to write a
new bit of the 8-bit AAC to “0”. In order to complete the authentication protocol, the
device requires the host to perform an ACK polling sequence with the specific device
address of $B7, corresponding to the verify authentication command.
Verify Authentication
Figure 12. Verify Authentication
S
T
A
R
T
Q1(0)
Command
D7
1 0 1 1 0 1 1 0
A
C
K
Note:
–
Q1(1)
D0
D15
A
C
K
–
S
T
O
P
Q1(7)
D8
...
A
C
K
D63
–
D56
A
C
K
Q1: Host challenge, 8 bytes
If Q1 is equal to Ci + 1, then the device writes Ci + 2 in memory in place of Ci; this must
be preceded by the initialize authentication command. Once the sequence is completed
and a stop condition is issued, there is a nonvolatile write cycle to update the associated
attempts counter. In order to know whether or not the authentication was correct, the
device requires the host to perform an ACK polling sequence with the specific device
address of $B5 to read the AAC in the configuration zone. A valid authentication will
result in the AAC cleared to $FF. An invalid authentication attempt will initiate a nonvolatile write cycle, but no clear operation will be performed on the AAC.
Device Operation
Clock and Data
Transitions
The SDA pin is normally pulled high with an external device. Data on the SDA pin may
change only during SCL-low time periods (see Figure 14). Data changes during SCLhigh time periods will indicate a start or stop condition as defined below.
Start Condition
A high-to-low transition of SDA with SCL high is a start condition which must precede
any other command (see Figure 13).
13
0971G–SMEM–04/04
Stop Condition
A low-to-high transition of SDA with SCL high is a stop condition. After a read sequence,
the stop command will place the device in a standby power mode (see Figure 13).
Acknowledge
All addresses and data are serially transmitted to and from the device in 8-bit words.
The device sends a zero to acknowledge that it has received each byte. This happens
during the ninth clock cycle. During read operations, the host must pull the SDA line low
during the ninth clock cycle to acknowledge that it has received the data byte. Failure to
transmit this ACK bit will terminate the read operation.
Standby Mode
The AT88SC1608 features a low-power standby mode that is enabled upon power-up
and after the receipt of the stop bit and the completion of any internal operations.
Acknowledge Polling
Once the internally-timed write cycle has started and the device inputs are disabled,
acknowledge polling can be initiated. This involves sending a start condition followed by
the device address representative of the operation desired. Only if the internal write
cycle has completed will the device respond with a “0”, allowing the sequence to
continue.
Figure 13. Start and Stop Definition
Note:
The SCL input should be low when the device is idle. Therefore, SCL is low before a start
condition and after a stop condition.
Figure 14. Data Validity
SDA
SCL
DATA STABLE
DATA STABLE
DATA
CHANGE
14
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Figure 15. Output Acknowledge
1
SCL
8
9
DATA IN
DATA OUT
START
ACKNOWLEDGE
Absolute Maximum Ratings
Operating Temperature . . . . . . . . . . . . . −55°C to +125°C
Storage Temperature . . . . . . . . . . . . . . .−65°C to +150°C
Voltage on Any Pin with Respect
to Ground . . . . . . . . . . . . . . . . . . . . . −0.7V to VCC + 0.7V
Maximum Operating Voltage . . . . . . . . . . . . . . . . . .6.25V
Note:
Stresses beyond those listed under “Absolute Maximum Ratings” may cause permanent damage to the
device. This is a stress rating only; functional operation of the device at these or any other conditions
beyond those indicated in the operational sections of
this specification is not implied. Exposure to absolute
maximum rating conditions for extended periods may
affect device reliability.
DC Output Current . . . . . . . . . . . . . . . . . . . . . . . 5.0 mA
15
0971G–SMEM–04/04
DC Characteristics
Table 6. DC Characteristics
Applicable over recommended operating range from: VCC = +2.7V to 5.5V, T AC = 0°C to +70°C. (unless otherwise noted).
Symbol
Parameter
Max
Units
VCC(1)
Supply Voltage
5.5
V
ICC
Supply Current VCC = 5.0V
Read at 1 MHz
5.0
mA
Supply Current VCC = 5.0V
Write at 1 MHz
5.0
mA
Standby Current VCC = 2.7V
VIN = VCC or GND
1.0
µA
ISB2
Standby Current VCC = 5.0V
VIN = VCC or GND
20.0
µA
ILI
Input Leakage Current
VIN = VCC or GND
1.0
µA
ILI
RST Input Leakage Current
VIN = VCC or GND
20.0
µA
ILO
Output Leakage Current
VOUT = VCC or GND
1.0
µA
VIL
Input Low Level (2)
−0.3
VCC x 0.3
V
VCC x 0.7
VCC + 0.5
V
0.4
V
ICC
ISB1
(1)
Test Condition
(2)
Input High Level
VOL2
Output Low Level VCC = 2.7V
16
Typ
2.7
VIH
Notes:
Min
IOL = 2.1 mA
1. This parameter is preliminary; Atmel may change the specifications upon further characterization.
2. VIL min and VIH max are reference only and are not tested.
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Power Management
If VCC falls below 1.9V, the chip stops working until it rises above 2.7V.
AC Characteristics
Table 7. AC Characteristics(1)
5.0-volt
Symbol
Parameter
Min
Max
Units
fSCL
Clock Frequency, SCL
1.0
MHz
tLOW
Clock Pulse Width Low
400
ns
tHIGH
Clock Pulse Width High
400
ns
tAA
Clock Low to Data Out Valid
tHD.STA
Start Hold Time
200
ns
tSU.STA
Start Set-up Time
200
ns
tHD.DAT
Data In Hold Time
10
ns
tSU.DAT
Data In Set-up Time
100
ns
tR
Inputs Rise Time (2)
550
(2)
ns
100
ns
30
ns
tF
Inputs Fall Time
tSU.STO
Stop Set-up Time
200
ns
tDH
Data Out Hold Time
20
ns
tWR
Write Cycle Time
tRST
Reset Width High
600
ns
tSU.RST
Reset Set-up Time
50
ns
tHD.RST
Reset Hold Time
50
ns
tVCC-RST
Power-on Reset Time
Note:
10
2.0
ms
ms
1. Applicable over recommended operating range from TA = 0°C to +70°C, V CC = +2.7V to +5.5V, CL = 1 TTL Gate
and 100 pF (unless otherwise noted)
2. This parameter is characterized and is not 100% tested.
Pin Capacitance
Table 8. Pin Capacitance (1)
Symbol
Max
Units
Conditions
Input/Output Capacitance (SDA)
8
pF
VI/O = 0V
(2)
6
pF
VIN = 0V
(2)
CI/O
CIN
Notes:
Test Condition
Input Capacitance (RST, SCL)
1. Applicable over recommended operating conditions TA = 25°C, f = 1.0 MHz, VCC = +2.7V
2. This parameter is characterized and is not 100% tested.
17
0971G–SMEM–04/04
Timing Diagrams
Figure 16. Bus Timing
Note:
SCL: Serial Clock; SDA: Serial Data I/O
Figure 17. Synchronous Answer-to-reset Timing
tRST
RST
tAA
SDA
DO
tSU.RST
tHD.RST
D1
D2
tAA
SCL
tHIGH
tLOW
18
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Figure 18. Write Cycle Timing
SCL
8th BIT
SDA
ACK
WORDn
t WR
STOP
CONDITION
Note:
START
CONDITION
The write cycle Time tWR is the time from valid stop condition of a write sequence to the end of the internal clear/write cycle.
SCL: Serial Clock
SDA: Serial Data I/O
19
0971G–SMEM–04/04
Ordering Information
Ordering Code
Package
Voltage Range
Temperature Range
AT88SC1608-09ET-00
M2 – E Module
2.7V–5.5V
Commerical (0°C–70°C)
AT88SC1608-09PT-00
M2 – P Module
2.7V–5.5V
Commerical (0°C–70°C)
AT88SC1608-10PI-00
8P3
2.7V–5.5V
Industrial (−40°C–85°C)
AT88SC1608-10SI-00
8SI
2.7V–5.5V
Industrial (−40°C–85°C)
AT88SC1608-10CI-00
8C
2.7V–5.5V
Industrial (−40°C–85°C)
AT88SC1608-10WI-00
7 mil Wafer
2.7V–5.5V
Industrial (−40°C–85°C)
Package Type(1)
Description
M4 – E Module
M4 ISO 7816 Smart Card Module
M4 – P Module
M4 ISO 7816 Smart Card Module with Atmel Logo
8S1
8-lead, 0.150” Wide, Plastic Gull Wing Small Outline Package (JEDEC SOIC)
8P3
8-lead, 0.300” Wide, Plastic Dual Inline Package (PDIP)
8C
8-lead, 0.230” Wide, Leadless Array Package (LAP)
Note:
20
1. Formal drawings may be obtained from an Atmel sales office.
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Smart Card Modules
Ordering Code: 09ET-00
Ordering Code: 09PT-00
Module Size: M2
Dimension*: 12.6 x 11.4 [mm]
Glob Top: Round: 8.0 [mm] max
Thickness: 0.58 [mm] max
Pitch: 14.25 [mm]
Æ
Module Size: M2
Dimension*: 12.6 x 11.4 [mm]
Glob Top: Square: 8.8 x 8.8 [mm]
Thickness: 0.58 [mm]
Pitch: 14.25 [mm]
*Note: The module dimensions listed refer to the dimensions of the exposed metal contact area. The actual dimensions
of the module after excise or punching from the carrier tape are generally 0.4 mm greater in both directions
(i.e., a punched M2 module will yield 13.0 x 11.8 mm).
21
0971G–SMEM–04/04
Packaging Information
Ordering Code: 10SI-00
8-lead SOIC
3
2
1
H
N
Top View
e
B
A
D
COMMON DIMENSIONS
(Unit of Measure = mm)
Side View
A2
C
L
SYMBOL
MIN
NOM
MAX
A
–
–
1.75
B
–
–
0.51
C
–
–
0.25
D
–
–
5.00
E
–
–
4.00
e
E
End View
NOTE
1.27 BSC
H
–
–
6.20
L
–
–
1.27
Note: These drawings are for general information only. Refer to JEDEC Drawing MS-012 for proper dimensions, tolerances, datums, etc.
10/10/01
R
22
2325 Orchard Parkway
San Jose, CA 95131
TITLE
8S1, 8-lead (0.150" Wide Body), Plastic Gull Wing
Small Outline (JEDEC SOIC)
DRAWING NO.
REV.
8S1
A
AT88SC1608
0971G–SMEM–04/04
AT88SC1608
Ordering Code: 10PI-00
8-lead PDIP
E
1
E1
N
Top View
c
eA
End View
COMMON DIMENSIONS
(Unit of Measure = inches)
D
e
D1
A2 A
b2
b3
b
4 PLCS
Side View
L
MIN
NOM
MAX
NOTE
A
–
–
0.210
2
A2
0.115
0.130
0.195
b
0.014
0.018
0.022
5
b2
0.045
0.060
0.070
6
b3
0.030
0.039
0.045
6
c
0.008
0.010
0.014
D
0.355
0.365
0.400
SYMBOL
D1
0.005
–
–
3
E
0.300
0.310
0.325
4
E1
0.240
0.250
0.280
3
e
0.100 BSC
eA
0.300 BSC
L
Notes:
3
0.115
0.130
4
0.150
2
1. This drawing is for general information only; refer to JEDEC Drawing MS-001, Variation BA, for additional information.
2. Dimensions A and L are measured with the package seated in JEDEC seating plane Gauge GS-3.
3. D, D1 and E1 dimensions do not include mold Flash or protrusions. Mold Flash or protrusions shall not exceed 0.010 inch.
4. E and eA measured with the leads constrained to be perpendicular to datum.
5. Pointed or rounded lead tips are preferred to ease insertion.
6. b2 and b3 maximum dimensions do not include Dambar protrusions. Dambar protrusions shall not exceed 0.010 (0.25 mm).
01/09/02
R
2325 Orchard Parkway
San Jose, CA 95131
TITLE
8P3, 8-lead, 0.300" Wide Body, Plastic Dual
In-line Package (PDIP)
DRAWING NO.
REV.
8P3
B
23
0971G–SMEM–04/04
Ordering Code: 10CI-00
8-lead LAP
Marked Pin1 Indentifier
E
A
A1
D
Top View
Side View
Pin1 Corner
L1
0.10 mm
TYP
8
1
e
7
COMMON DIMENSIONS
(Unit of Measure = mm)
2
3
6
b
5
4
e1
L
Bottom View
Note:
SYMBOL
MIN
NOM
MAX
A
0.94
1.04
1.14
A1
0.30
0.34
0.38
b
0.36
0.41
0.46
D
7.90
8.00
8.10
E
4.90
5.00
5.10
e
1.27 BSC
e1
0.60 REF
NOTE
1
L
0.62
.0.67
0.72
1
L1
0.92
0.97
1.02
1
1. Metal Pad Dimensions.
11/13/01
R
24
2325 Orchard Parkway
San Jose, CA 95131
TITLE
8CN1, 8-lead (8 x 5 x 1.04 mm Body), Lead Pitch 1.27 mm,
Leadless Array Package (LAP)
DRAWING NO.
8CN1
REV.
A
AT88SC1608
0971G–SMEM–04/04
Atmel Corporation
2325 Orchard Parkway
San Jose, CA 95131
Tel: 1(408) 441-0311
Fax: 1(408) 487-2600
Regional Headquarters
Europe
Atmel Sarl
Route des Arsenaux 41
Case Postale 80
CH-1705 Fribourg
Switzerland
Tel: (41) 26-426-5555
Fax: (41) 26-426-5500
Asia
Room 1219
Chinachem Golden Plaza
77 Mody Road Tsimshatsui
East Kowloon
Hong Kong
Tel: (852) 2721-9778
Fax: (852) 2722-1369
Japan
9F, Tonetsu Shinkawa Bldg.
1-24-8 Shinkawa
Chuo-ku, Tokyo 104-0033
Japan
Tel: (81) 3-3523-3551
Fax: (81) 3-3523-7581
Atmel Operations
Memory
2325 Orchard Parkway
San Jose, CA 95131
Tel: 1(408) 441-0311
Fax: 1(408) 436-4314
RF/Automotive
Theresienstrasse 2
Postfach 3535
74025 Heilbronn, Germany
Tel: (49) 71-31-67-0
Fax: (49) 71-31-67-2340
Microcontrollers
2325 Orchard Parkway
San Jose, CA 95131
Tel: 1(408) 441-0311
Fax: 1(408) 436-4314
La Chantrerie
BP 70602
44306 Nantes Cedex 3, France
Tel: (33) 2-40-18-18-18
Fax: (33) 2-40-18-19-60
ASIC/ASSP/Smart Cards
1150 East Cheyenne Mtn. Blvd.
Colorado Springs, CO 80906
Tel: 1(719) 576-3300
Fax: 1(719) 540-1759
Biometrics/Imaging/Hi-Rel MPU/
High Speed Converters/RF Datacom
Avenue de Rochepleine
BP 123
38521 Saint-Egreve Cedex, France
Tel: (33) 4-76-58-30-00
Fax: (33) 4-76-58-34-80
Zone Industrielle
13106 Rousset Cedex, France
Tel: (33) 4-42-53-60-00
Fax: (33) 4-42-53-60-01
1150 East Cheyenne Mtn. Blvd.
Colorado Springs, CO 80906
Tel: 1(719) 576-3300
Fax: 1(719) 540-1759
Scottish Enterprise Technology Park
Maxwell Building
East Kilbride G75 0QR, Scotland
Tel: (44) 1355-803-000
Fax: (44) 1355-242-743
e-mail
[email protected]
Web Site
http://www.atmel.com
Disclaimer: Atmel Corporation makes no warranty for the use of its products, other than those expressly contained in the Company’s standard
warranty which is detailed in Atmel’s Terms and Conditions located on the Company’s web site. The Company assumes no responsibility for any
errors which may appear in this document, reserves the right to change devices or specifications detailed herein at any time without notice, and
does not make any commitment to update the information contained herein. No licenses to patents or other intellectual property of Atmel are
granted by the Company in connection with the sale of Atmel products, expressly or by implication. Atmel’s products are not auth orized for use
as critical components in life support devices or systems.
© Atmel Corporation 2004. All rights reserved. Atmel® and combinations thereof are registered trademarks
of Atmel Corporation or its subsidiaries. Other terms and product names may be the trademarks of others.
Printed on recycled paper.
0971G–SMEM–04/04