STM1403 3 V FIPS-140 security supervisor with battery switchover Features ■ STM1403 supports FIPS-140 security level 3+ – Four high-impedance physical tamper inputs – Over/under operating voltage detector – Security alarm (SAL) on tamper detection ■ Supervisory functions – Automatic battery switchover – RST output (open drain) – Manual (push-button) reset input (MR) – Power-fail comparator (PFI/PFO) ■ Vccsw (VCC switch output) – Low when switched to VCC – High when switched to VBAT (BATT ON indicator) ■ Battery low voltage detector (power-up) ■ Optional VREF (1.237 V) – (Available for STM1403A only) ■ Low battery supply current (2.8 µA, typ) ■ Secure low profile 16-pin, 3 x 3 mm, QFN package Table 1. QFN16, 3 mm x 3 mm (Q) Device summary Standard supervisory functions(1) Physical tamper inputs Over/under voltage alarms VREF (1.237 V) option VOUT status, during alarm Vccsw status, during alarm STM1403A ✔ ✔ ✔ ✔ ON Normal mode(2) STM1403B(3) ✔ ✔ ✔ Note(4) High-Z High STM1403C ✔ ✔ ✔ Note(4) Ground High Device 1. Reset output, power-fail comparator, battery low detection (SAL, RST, PFO, and BLD are open drain). 2. Normal mode: low when VOUT is internally switched to VCC and high when VOUT is internally switched to battery. 3. Contact local ST sales office for availability. 4. Pin 9 is the VREF pin for STM1403A. It is the VTPU pin for STM1403B/C. August 2008 Rev 5 1/35 www.st.com 1 Contents STM1403 Contents 1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.1 2 VOUT pin modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.1.1 STM1403A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.1.2 STM1403B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 1.1.3 STM1403C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Pin descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.1 SAL, security alarm output (open drain) . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.1.1 TP1, TP3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.1.2 TP2, TP4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.1.3 Vccsw, VCC switch output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.1.4 BLD, VBAT low voltage detect output (open drain) . . . . . . . . . . . . . . . . . 12 2.1.5 Active-low RST output (open drain) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 2.1.6 MR, manual reset input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 2.1.7 PFO, power-fail output (open drain) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 2.1.8 PFI, power-fail input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 2.1.9 VREF, reference voltage output (1.237, typ) . . . . . . . . . . . . . . . . . . . . . . 12 2.1.10 VOUT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 VTPU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.1.11 2.1.12 3 4 2.1.14 VSS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 3.1 Reset input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 3.2 Push-button reset input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 3.3 Backup battery switchover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 3.4 Power-fail input/output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 3.5 Applications information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 3.6 Negative-going VCC transients and undershoot . . . . . . . . . . . . . . . . . . . . 16 Tamper detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 4.1 2/35 2.1.13 VCC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 VBAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Physical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 STM1403 Contents 4.2 Supply voltage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 5 Typical operating characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 6 Maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 7 DC and AC parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 8 Package mechanical data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 9 Part numbering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 10 Revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 3/35 List of tables STM1403 List of tables Table 1. Table 2. Table 3. Table 4. Table 5. Table 6. Table 7. Table 8. Table 9. Table 10. 4/35 Device summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Signal names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 I/O status in battery backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Absolute maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Operating and AC measurement condition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 DC and AC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Physical and environmental tamper detection levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm body size, mechanical data . . . 31 Ordering information scheme (see Figure 30 on page 33 for marking information) . . . . . . 32 Document revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 STM1403 List of figures List of figures Figure 1. Figure 2. Figure 3. Figure 4. Figure 5. Figure 6. Figure 7. Figure 8. Figure 9. Figure 10. Figure 11. Figure 12. Figure 13. Figure 14. Figure 15. Figure 16. Figure 17. Figure 18. Figure 19. Figure 20. Figure 21. Figure 22. Figure 23. Figure 24. Figure 25. Figure 26. Figure 27. Figure 28. Figure 29. Figure 30. Logic diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 QFN16 connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Block diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Hardware hookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Tamper pin (TP1 or TP3) normally high (NH) external hookup (switch closed) . . . . . . . . . . 9 Tamper pin (TP1 or TP3) normally high (NH) external hookup (switch open). . . . . . . . . . . 10 Tamper pin (TP2 or TP4) normally low (NL) external hookup (switch closed) . . . . . . . . . . 10 Tamper pin (TP2 or TP4) normally low (NL) external hookup (switch open). . . . . . . . . . . . 10 Power-fail comparator waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Supply voltage protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 VBAT -to-VOUT on-resistance vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Supply current vs. temperature (no load) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 VPFI threshold vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Reset comparator propagation delay vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Power-up trec vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Normalized reset threshold vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 PFI to PFO propagation delay vs. temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 RST output voltage vs. supply voltage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 RST response time (assertion) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Power-fail comparator response time (assertion) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Power-fail comparator response time (de-assertion) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 VCC to reset propagation delay vs. temperature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Maximum transient duration vs. reset threshold overdrive . . . . . . . . . . . . . . . . . . . . . . . . . 22 AC testing input/output waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 MR timing waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 STM1403 switchover diagram, condition A (VBAT < VSW) . . . . . . . . . . . . . . . . . . . . . . . . . 24 STM1403 switchover diagram, condition B (VBAT > VSW) . . . . . . . . . . . . . . . . . . . . . . . . . 25 QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm body size, outline . . . . . . . . . . . 30 QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm, recommended footprint . . . . . . 31 Topside marking information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 5/35 Description 1 STM1403 Description The STM1403 family of security supervisors are a low power family of intrusion (tamper) detection chips targeted at manufacturers of POS terminals and other systems, to enable them to meet physical and/or environmental intrusion monitoring requirements as mandated by various standards, such as Federal Information Processing Standards (FIPS) Pub 140 entitled “Security Requirements for Cryptographic Modules,” published by the National Institute of Standards and Technology, U.S. Department of Commerce), EMVCo, ISO, ZKA, and VISA PED. STM1403 supports target levels 3 and lower. The STM1403 includes automatic battery switchover, RST output (open drain), manual (push-button) reset input (MR), power-fail comparator (PFI/PFO), physical and/or environmental tamper detect/security alarm, and battery low voltage detect features. The STM1403A also offers a VREF (1.237 V) as an option on pin 9. On the STM1403B/C, this pin is VTPU (internally switched VCC or VBAT). 1.1 VOUT pin modes The STM1403 is available in three versions, corresponding to three modes of the VOUT pin (supply voltage out), when the SAL (security alarm) is asserted (active-low) upon tamper detection: 1.1.1 STM1403A VOUT stays ON (at VCC or VBAT) when SAL is driven low (activated). 1.1.2 STM1403B VOUT is set to High-Z when SAL is driven low (activated). 1.1.3 STM1403C VOUT is driven to ground when SAL is activated (may be used when VOUT is connected directly to the VCC pin of the external SRAM that holds the cryptographic codes). All variants (see Table 1: Device summary) are pin-compatible and available in a securityfriendly, low profile, 16-pin QFN package. 6/35 STM1403 Description Figure 1. Logic diagram VREF BLD(3) or VBAT VCC VTPU(1) VCCSW(2) VOUT RST(3) MR STM1403 PFI PFO(3) TP1 (NH) SAL(3) TP2 TP3 (NL) (NH) TP4 VSS (NL) AI09682 1. VREF only for STM1403A; VTPU for STM1403B/C. 2. Normal mode: low when VOUT is internally switched to VCC and high when VOUT is internally switched to battery. 3. SAL, RST, PFO, and BLD are open drain. Table 2. Signal names Vccsw(1) VCC switch output MR Manual (push-button) reset input PFI Power-fail Input TP1 - TP4 Independent physical tamper detect pins 1 through 4 VOUT Supply voltage output RST (2) PFO(2) (2) SAL BLD(2) Active-low reset output Power-fail output Security alarm output Battery low voltage detect VREF (3) 1.237 V reference voltage VTPU (3) Tamper pull-up (VCC or VBAT) VBAT Backup supply voltage VCC Supply voltage VSS Ground 1. Normal mode: low when VOUT is internally switched to VCC and high when VOUT is internally switched to battery. 2. SAL, RST, PFO, and BLD are open drain. 3. VREF only for STM1403A; VTPU for STM1403B/C. Note: See Section 2: Pin descriptions on page 11 for details. 7/35 Description STM1403 Figure 2. QFN16 connections BLD(2) PFI VCCSW(1) VCC 15 14 RST(2) 1 13 12 VOUT MR 2 11 VBAT SAL(2) 3 10 PFO(2) VSS 4 16 5 6 TP1 TP2 TP3 (NH) (NL) (NH) Note: 8 7 9 TP4 (NL) VREF or VTPU(3) AI09683 See Section 2: Pin descriptions on page 11 for details. 1. Normal mode: low when VOUT is internally switched to VCC and high when VOUT is internally switched to battery. 2. SAL, RST, PFO, and BLD are open drain. 3. VREF only for STM1403A; VTPU for STM1403B/C Figure 3. Block diagram VCC VOUT BAT54J(1,2) COMPARE VSO VBAT(1) VCCSW VINT COMPARE VRST trec Generator MR PFI RST(3) VPFI COMPARE PFO(3) VDET COMPARE @ POWER-UP BLD(3) VTPU(4) 1.237V VREF Generator VHV COMPARE VLV COMPARE TP1 (NH) TP2 (NL) TP3 (NH) TP4 (NL) VREF(4) SAL(3) AI09684 1. BAT54J (from STMicroelectronics) recommended 2. Required for battery-reverse charging protection 3. Open drain 4. VREF only for STM1403; VTPU for STM1403B/C 8/35 STM1403 Description Figure 4. Hardware hookup VCCSW Regulator Unregulated Voltage VIN VCC VCC (1) VCC VOUT VCC C 0.1μF (2) STM1403 LPSRAM R1 PFI PFO(3) To Microprocessor NMI MR RST(3) To Microprocessor Reset VBAT BLD(3) To Microprocessor R2 Push-Button BAT54J(4) 1.0μF TP1 TP2 From Actuator Device (e.g., Switches, Wire Mesh) TP3 SAL(3) TP4 VREF(5) or VTPU To ADC To Physical Tamper Pins TPX AI09690 1. Normal mode: low when VOUT is internally switched to VCC and high when VOUT is internally switched to battery. 2. Capacitor (C) is typically ≥ 10 µF. 3. Open drain 4. Diode is required for battery reverse charge protection. 5. VREF only for STM1403; VTPU for STM1403B/C. Figure 5. Tamper pin (TP1 or TP3) normally high (NH) external hookup (switch closed) VOUT (STM1403A) or VTPU (STM1403B/C) Switch Normally Closed; Tamper Detection on Open TP1 or TP3 R(1) AI09698 1. R typical is 10 MΩ. Resistors must be protected against conductive materials. 9/35 Description STM1403 Figure 6. Tamper pin (TP1 or TP3) normally high (NH) external hookup (switch open) VOUT (STM1403A) or VTPU (STM1403B/C) (1) R TP1 or TP3 Switch Normally Open Tamper Detection when Closed AI10461 1. R typical is 10MΩ. Resistors must be protected against conductive materials. Figure 7. Tamper pin (TP2 or TP4) normally low (NL) external hookup (switch closed) VOUT (STM1403A) or VTPU (STM1403B/C) R(1) TP2 or TP4 Switch Normally Closed; Tamper Detection on Open AI09699 1. R typical is 10 MΩ. Resistors must be protected against conductive materials. Figure 8. Tamper pin (TP2 or TP4) normally low (NL) external hookup (switch open) VOUT (STM1403A) or VTPU (STM1403B/C) Switch Normally Open; Tamper Detection when Closed TP2 or TP4 R(1) AI10462 1. R typical is 10 MΩ. Resistors must be protected against conductive materials. 10/35 STM1403 2 Pin descriptions Pin descriptions See Figure 1: Logic diagram and Table 2: Signal names for a brief overview of the signals connected to this device. 2.1 SAL, security alarm output (open drain) This signal can be generated when ANY of the following conditions occur: Note: 2.1.1 ● VINT > VHV, where VHV = upper voltage trip limit (4.2 V typ); and where VINT = VCC or VBAT; ● VINT < VLV, where VLV = lower voltage trip limit (2.0 V typ); and where VINT = VCC or VBAT; or ● When any of the physical tamper inputs, TP1 to TP4, change from their normal states to the opposite (i.e., intrusion of a physical enclosure). 1 The default state of the SAL output during initial power-up is undetermined. 2 The alarm function will operate either with VCC on or when the part is internally switched from VCC to VBAT. TP1, TP3 Physical tamper detect pin set normally to high (NH). They are connected externally through a closed switch or a high-impedance resistor to VOUT (in the case of STM1403A) or VTPU (in the case of STM1403B/C. A tamper condition will be detected when the input pin is pulled low (see Figure 5 and Figure 6). If not used, tie the pin to VOUT (for STM1403A) or VTPU (for STM1403B/C). 2.1.2 TP2, TP4 Physical tamper detect pin set normally to low (NL). They are connected externally through a high-impedance resistor or a closed switch to VSS. A tamper condition will be detected when the input pin is pulled high (see Figure 7 and Figure 8). If not used, tie the pin to VSS. 2.1.3 Vccsw, VCC switch output This output is low when VOUT (see Section 2.1.10: VOUT on page 13) is internally switched to VCC; in this mode it may be used to turn on an external p-channel MOSFET switch which can source an external device directly from VCC for currents greater than 80 mA (bypassing the STM1403). This pin goes high when VOUT is internally switched to VBAT and may be used as a “BATT ON” indicator. If a security alarm (SAL) is issued on tamper, then the state of the Vccsw pin is as follows: 11/35 Pin descriptions 2.1.4 STM1403 1. STM1403A (VOUT remains ON when SAL is active-low): Vccsw pin will continue to operate in normal mode; 2. STM1403B (VOUT is taken to High-Z when SAL is active-low): Vccsw pin will be set to high when this occurs; and 3. STM1403C (VOUT is driven to ground when SAL is active-low): Vccsw pin will be set to high when this occurs. BLD, VBAT low voltage detect output (open drain) This is an internally loaded test of the battery, activated only during a power-up sequence to insure that the battery is good either prior to or after encapsulation of the module. There are three customer options for VDET: ● 2.3 V (2.5 V – external diode drop of about 0.2 V) for a 3 V lithium cell ● 2.5 V (2.7 V – 0.2 V) for a 3 V lithium cell or ● 3.2 V (3.4 V – 0.2 V) for a 3.68 V lithium “AA” battery This output pin will go active-low when it detects a voltage on the VBAT pin below VDET. BLD will be released when VCC drops below VRST. 2.1.5 Active-low RST output (open drain) Goes low and stays low when VCC drops below VRST (reset threshold selected by the customer), or when MR is logic low. It remains low for trec (200ms, typical) AFTER VCC rises above VRST and MR goes from low to high. 2.1.6 MR, manual reset input A logic low on MR asserts the RST output. The RST output remains asserted as long as MR is low and for trec after MR returns to high. This active low input has an internal 40 kΩ (typical) pull-up resistor. It can be driven from a TTL or CMOS logic line or shorted to ground with a switch. Leave it open if unused. 2.1.7 PFO, power-fail output (open drain) When PFI is less than VPFI (power-fail input threshold voltage) or VCC falls below VSW (battery switchover threshold ~ 2.4 V), PFO goes low, otherwise, PFO remains high. Leave this pin open if unused. 2.1.8 PFI, power-fail input When PFI is less than VPFI, or when VCC falls below VSW (see PFO, above), PFO goes active-low. If this function is unused, connect this pin to VSS. 2.1.9 VREF, reference voltage output (1.237, typ) This is valid only when VCC is between 2.4 V and 3.6 V. When VCC falls below 2.4 V (VSW), VREF is pulled to ground with an internal 100 kΩ resistor. This is an optional feature available on the STM1403A. On the STM1403B/C, this pin is VTPU (internally switched VCC or VBAT). If unused, this pin should float. 12/35 STM1403 2.1.10 Pin descriptions VOUT This is the supply voltage output. When VCC rises above VSO (battery backup switchover voltage), VOUT is supplied from VCC. In this condition, VOUT may be connected externally to VCC through a p-channel MOSFET switch. When VCC falls below the lower value of VSW (~2.4 V), or VBAT, VOUT is supplied from VBAT. It is recommended that the VOUT pin be connected externally to a capacitor that will retain a charge for a period of time, in case an intruder forces VCC or VBAT to ground. The rectifying diode connected from the positive terminal of the battery to the VBAT pin of the STM1403 will prevent discharge of the capacitor. Three variations of parts will be offered with the following options: 2.1.11 1. STM1403A: VOUT remains ON when SAL is active-low; Vccsw pin will continue to operate in normal mode (see Section 2.1.3: Vccsw, VCC switch output on page 11); 2. STM1403B: VOUT is taken to High-Z when SAL is active-low; Vccsw pin will be set to high when this occurs; and 3. STM1403C: VOUT is driven to ground when SAL is active-low; Vccsw pin will be set to high when this occurs. VTPU For STM1403B and STM1403C, this pin provides pull-up voltage for the physical tamper pins (TP1-4). This pin is not to be used as voltage supply source for any other purpose. Note: VTPU is the internally switched supply voltage from either the VCC pin or the VBAT pin. 2.1.12 VCC This is the supply voltage (2.2 V to 3.6 V). 2.1.13 VBAT This is the secondary (backup battery) supply voltage. The pin is connected to the positive terminal of the battery with a rectifying diode like the BAT54J from STMicroelectronics for reverse charge protection. Voltage at this pin, after diode rectification, will be approximately 0.2 V less than the battery voltage, and will depend on the type of battery used as well as the IBAT being drawn. (A capacitor of at least 1.0 µF connected between the VBAT pin and VSS is required.) If no battery is used, connect the VBAT pin to the VCC pin. 2.1.14 VSS Ground, VSS, is the reference for the power supply. It must be connected to system ground. 13/35 Operation STM1403 3 Operation 3.1 Reset input The STM1403 security supervisor asserts a reset signal to the MCU whenever VCC goes below the reset threshold (VRST), or when the push-button reset input (MR) is taken low. RST is guaranteed to be a logic low for 0V < VCC < VRST if VBAT is greater than 1V. Without a backup battery, RST is guaranteed valid down to VCC =1V. During power-up, once VCC exceeds the reset threshold an internal timer keeps RST low for the reset time-out period, trec. After this interval RST returns high. If VCC drops below the reset threshold, RST goes low. Each time RST is asserted, it stays low for at least the reset time-out period (trec). Any time VCC goes below the reset threshold the internal timer clears. The reset timer starts when VCC returns above the reset threshold. 3.2 Push-button reset input A logic low on MR asserts reset. Reset remains asserted while MR is low, and for trec (see Figure 25 on page 24) after it returns high. The MR input has an internal 40 kΩ pull-up resistor, allowing it to be left open if not used. This input can be driven with TTL/CMOS-logic levels or with open-drain/collector outputs. Connect a normally open momentary switch from MR to ground to create a manual reset function; external debounce circuitry is not required. If MR is driven from long cables or the device is used in a noisy environment, connect a 0.1 µF capacitor from MR to VSS to provide additional noise immunity. MR may float, or be tied to VCC when not used. 3.3 Backup battery switchover In the event of a power failure, it may be necessary to preserve the contents of external SRAM through VOUT. With a backup battery installed with voltage VBAT, the devices automatically switch the SRAM to the backup supply when VCC falls. Note: If backup battery is not used, connect both VBAT and VOUT to VCC. This family of security supervisors does not always connect VBAT to VOUT when VBAT is greater than VCC. VBAT connects to VOUT (through a 100 Ω switch) when VCC is below VSW (~2.4 V) or VBAT (whichever is lower). This is done to allow the backup battery (e.g., a 3.6 V battery) to have a higher voltage than VCC. Assuming that VBAT > 2.0 V, switchover at VSO ensures that battery backup mode is entered before VOUT gets too close to the 2.0 V minimum required to reliably retain data in most external SRAMs. When VCC recovers, hysteresis is used to avoid oscillation around the VSO point. VOUT is connected to VCC through a 3 Ω PMOS power switch. Note: 14/35 The backup battery may be removed while VCC is valid, assuming VBAT is adequately decoupled (0.1 µF typ), without danger of triggering a reset. STM1403 Operation Table 3. I/O status in battery backup Pin VOUT Connected to VBAT through internal switch VCC Disconnected from VOUT PFI Disabled PFO Logic low MR Disabled RST Logic low VBAT Connected to VOUT Vccsw 3.4 Status Logic high VREF Pulled to VSS below 2.4 V (VSW) BLD Logic high VTPU Connected to VBAT through an internal switch Power-fail input/output The power-fail input (PFI) is compared to an internal reference voltage (independent from the VRST comparator). If PFI is less than the power-fail threshold (VPFI), the power-fail output (PFO) will go low. This function is intended for use as an undervoltage detector to signal a failing power supply. Typically PFI is connected through an external voltage divider (see Figure 4 on page 9) to either the unregulated DC input (if it is available) or the regulated output of the VCC regulator. The voltage divider can be set up such that the voltage at PFI falls below VPFI several milliseconds before the regulated VCC input to the STM1403 or the microprocessor drops below the minimum operating voltage. During battery backup, the power-fail comparator is turned off and PFO goes (or remains) low (see Figure 9 on page 16). This occurs after VCC drops below VSW (~2.4V). When power returns, the power-fail comparator is enabled and PFO follows PFI. If the comparator is unused, PFI should be connected to VSS and PFO left unconnected. PFO may be connected to MR so that a low voltage on PFI will generate a reset output. 3.5 Applications information These supervisor circuits are not short-circuit protected. Shorting VOUT to ground excluding power-up transients such as charging a decoupling capacitor - destroys the device. Decouple both VCC and VBAT pins to ground by placing 0.1 µF capacitors as close to the device as possible. 15/35 Operation STM1403 Figure 9. Power-fail comparator waveform VCC VRST VSW (2.4V) trec PFO PFO follows PFI PFO follows PFI RST AI08861a 3.6 Negative-going VCC transients and undershoot The STM1403 devices are relatively immune to negative-going VCC transients (glitches). Figure 23 on page 22 was generated using a negative pulse applied to VCC, starting at VRST + 0.3 V and ending below the reset threshold by the magnitude indicated (comparator overdrive). The graph indicates the maximum pulse width a negative VCC transient can have without causing a reset pulse. As the magnitude of the transient increases (further below the threshold), the maximum allowable pulse width decreases. Any combination of duration and overdrive which lies under the curve will NOT generate a reset signal. Typically, a VCC transient that goes 100 mV below the reset threshold and lasts 40 µs or less will not cause a reset pulse. A 0.1 µF bypass capacitor mounted as close as possible to the VCC pin provides additional transient immunity (see Figure 10). In addition to transients that are caused by normal SRAM operation, power cycling can generate negative voltage spikes on VCC that drive it to values below VSS by as much as one volt. These negative spikes can cause data corruption in the SRAM while in battery backup mode. To protect from these voltage spikes, STMicroelectronics recommends connecting a schottky diode from VCC to VSS (cathode connected to VCC, anode to VSS). Schottky diode 1N5817 is recommended for through hole and MBRS120T3 is recommended for surface mount. Figure 10. Supply voltage protection VCC VCC 0.1μF DEVICE VSS AI02169 16/35 STM1403 Tamper detection 4 Tamper detection 4.1 Physical There are four (4) high-impedance physical tamper detect input pins, 2 normally set to high (NH) and 2 normally set to low (NL). Each input is designed with a glitch immunity (see Table 7 on page 28). These inputs can be connected externally to several types of actuator devices (e.g., switches, wire mesh). A tamper on any one of the four inputs that causes its state to change will trigger the security alarm (SAL) and drive it to active-low. Once the tamper condition no longer exists, the SAL will return to its normal high state. TP1 and TP3 are set normally to high (NH). They are connected externally through a closed switch or a high-impedance resistor to VOUT (in the case of STM1403A) or VTPU (in the case of STM1403B/C), A tamper condition will be detected when the input pin is pulled low (see Figure 5 and Figure 6). If not used, tie the pin to VOUT or VTPU. TP2 and TP4 are set normally to low (NL). They are connected externally through a highimpedance resistor or a closed switch to VSS. A tamper condition will be detected when the input pin is pulled high (see Figure 7 and Figure 8). If not used, tie the pin to VSS. 4.2 Supply voltage The internally switched supply voltage, VINT (either VCC input or VBAT input) is continuously monitored. If VINT should exceed the over voltage trip point, VHV (set at 4.2V, typical), or should go below the under voltage trip point, VLV (set at 2.0 V, typical). SAL will be driven active-low. Once the tamper condition no longer exists, the SAL pin will return to its normal high state. When no tamper condition exists, SAL is normally high (see Section 2: Pin descriptions on page 11). When a tamper is detected, the SAL is activated (driven low), independent of the part type. VOUT can be driven to one of three states, depending on which variant of STM1403 is being used (see Table 1: Device summary on page 1): Note: ● ON ● High-Z or ● Ground (VSS) The STM1403 must be initially powered above VRST to enable the tamper detection alarms. For example, if the battery is on while VCC = 0V, no alarm condition can be detected until VCC rises above VRST (and trec expires). From this point on, alarms can be detected either on battery or VCC. This is done to avoid false alarms when the device goes from no power to its operational state. 17/35 Typical operating characteristics STM1403 5 Typical operating characteristics Note: Typical values are at TA = 25°C. VBAT - to - VOUT ON-RESISTANCE [Ω] Figure 11. VBAT -to-VOUT on-resistance vs. temperature 220 VCC = 0V 200 VBAT = 2V 180 VBAT = 3V 160 VBAT = 3.3V 140 120 100 –60 –40 –20 0 20 40 60 80 100 120 TEMPERATURE [°C] 140 AI09691 Figure 12. Supply current vs. temperature (no load) 30 Supply Current [µA] 25 20 2.5V 3.3V 15 3.6V 10 5 0 –50 –40 –30 –20 –10 0 10 20 30 40 TEMPERATURE [°C] 18/35 50 60 70 80 90 100 AI09692 STM1403 Typical operating characteristics Figure 13. VPFI threshold vs. temperature VPFI THRESHOLD [V] 1.255 1.250 1.245 VCC = 3.3V 1.240 1.235 VCC = 2.5V 1.230 VBAT = 3.0V 1.225 –50 –30 –10 10 30 50 70 90 110 TEMPERATURE [°C] 130 AI09693 PROPAGATION DELAY [µs] Figure 14. Reset comparator propagation delay vs. temperature 24 22 VBAT = 3.0V 100mV OVERDRIVE 20 18 16 14 12 10 –60 –40 –20 0 20 40 60 80 100 TEMPERATURE [°C] AI09143 Figure 15. Power-up trec vs. temperature 215 trec [ms] 210 205 200 195 –50 –30 –10 10 30 50 TEMPERATURE [°C] 70 90 110 130 AI09144 19/35 Typical operating characteristics STM1403 NORMALIZED RESET THRESHOLD [V] Figure 16. Normalized reset threshold vs. temperature 1.002 1.000 0.998 0.996 VBAT = 3.0V 0.994 –60 –40 –20 0 20 40 60 80 100 TEMPERATURE [°C] 120 140 AI09145 Figure 17. PFI to PFO propagation delay vs. temperature 9 PROPAGATION DELAY [µs] 8 7 6 5 4 3 2 1 0 –60 –40 –20 0 20 40 60 TEMPERATURE [°C] 80 100 120 140 AI09148 Figure 18. RST output voltage vs. supply voltage 3.5 RST OUTPUT VOLTAGE [V] 3.0 2.5 VCC 2.0 VRST 1.5 1.0 0.5 0 500 ms/div 20/35 AI09149b STM1403 Typical operating characteristics Figure 19. RST response time (assertion) 4.0 VCC LEVEL [V] 3.0 VCC 2.0 VRST 1.0 0.0 2 µs/div AI09151b Figure 20. Power-fail comparator response time (assertion) 1.45 4.0 1.40 1.35 PFO 1.30 2.0 PFI 1.25 VPFI LEVEL [V] VPFO LEVEL [V] 3.0 1.0 1.20 0.0 1.15 2µs/div AI09153b Figure 21. Power-fail comparator response time (de-assertion) 1.45 4.0 3.5 1.40 1.35 2.5 PFO 1.30 2.0 1.5 PFI 1.25 VPFI LEVEL (V) VPFO LEVEL (V) 3.0 1.0 1.20 0.5 1.15 0.0 2 µs/div AI09154 21/35 Typical operating characteristics STM1403 Figure 22. VCC to reset propagation delay vs. temperature PROPAGATION DELAY [µs] 60 50 40 10V/ms 30 1V/ms 0.25V/ms 20 10 0 –60 –40 –20 0 20 40 60 80 100 TEMPERATURE [°C] AI09155 Figure 23. Maximum transient duration vs. reset threshold overdrive TRANSIENT DURATION [µs] 250 200 150 100 50 0 1 10 100 1000 RESET COMPARATOR OVERDRIVE, VRST – VCC [mV] 22/35 10000 AI09156 STM1403 6 Maximum ratings Maximum ratings Stressing the device above the rating listed in the absolute maximum ratings table may cause permanent damage to the device. These are stress ratings only and operation of the device at these or any other conditions above those indicated in the Operating sections of this specification is not implied. Exposure to absolute maximum rating conditions for extended periods may affect device reliability. Refer also to the STMicroelectronics SURE Program and other relevant quality documents. Table 4. Absolute maximum ratings Symbol Value Unit TSTG Storage temperature (VCC off, VBAT off) –55 to 150 °C TSLD(1) Lead solder temperature for 10 seconds 260 °C –0.3 to VCC +0.3 V VIO Note: Parameter Input or output voltage VCC/VBAT Supply voltage –0.3 to 4.5 V IO Output current 20 mA PD Power dissipation 320 mW Reflow at peak temperature of 255°C to 260°C for < 30 seconds (total thermal budget not to exceed 180°C for between 90 to 150 seconds). 23/35 DC and AC parameters 7 STM1403 DC and AC parameters This section summarizes the operating measurement conditions, and the DC and AC characteristics of the device. The parameters in the DC and AC characteristics Tables that follow, are derived from tests performed under the Measurement Conditions summarized in Table 5: Operating and AC measurement condition. Designers should check that the operating conditions in their circuit match the operating conditions when relying on the quoted parameters. Table 5. Operating and AC measurement condition Parameter STM1403 Unit VCC/VBAT supply voltage 2.2 to 3.6 V Ambient operating temperature (TA) –40 to 85 °C ≤5 ns Input pulse voltages 0.2 to 0.8VCC V Input and output timing ref. voltages 0.3 to 0.7VCC V Input rise and fall times Figure 24. AC testing input/output waveforms 0.8VCC 0.7VCC 0.3VCC 0.2VCC AI02568 Figure 25. MR timing waveform MR tMLRL RST tMLMH trec AI09694 Figure 26. STM1403 switchover diagram, condition A (VBAT < VSW) VCC = 3.3V VRST VSW = 2.4V VBAT VBAT – 75mV VOUT VBAT – 35mV AI10463 Figure 27. STM1403 switchover diagram, condition B (VBAT > VSW) VCC = 3.3V VOUT VBAT VSW = 2.4V VSW + 40mV AI10464 24/35 STM1403 Table 6. Sym VCC, VBAT(2) DC and AC parameters DC and AC characteristics Alternative Description Operating voltage Test condition(1) Min TA = –40 to +85°C 2.2 VCC supply current (STM1403A) Typ Max Unit 3.6 V 45 60 µA 30 45 µA Typ @ 3.3 V, 25°C ICC IBAT(3) VOUT1 VOUT2 VCC supply current (STM1403B,C) VCC supply current in battery backup mode Excluding IOUT (VBAT = 2.3 V, VCC = 2.0 V, MR = VCC) 25 35 µA VBAT supply current in battery backup mode Excluding IOUT (VBAT = 3.6 V) 2.8 4.0 µA VOUT voltage (active) VOUT voltage (battery backup) IOUT1 = 5 mA(4) (VCC > VSW) VCC – 0.03 VCC – 0.015 V IOUT1 = 80 mA (VCC > VSW) VCC – 0.3 VCC – 0.15 V IOUT1 = 250 µA, VCC > VSW(4) VCC – 0.0015 VCC – 0.0006 V IOUT2 = 250 µA, VBAT = 2.2 V VBAT – 0.1 VBAT – 0.04 V VBAT – 0.16 V IOUT2 = 1 mA, VBAT = 2.2 V VTPU1 Internal switched supply voltage (active) ISOURCE = 500 µA (VCC > VSW) VTPU2 Internal switched supply voltage (battery backup) ISOURCE = 100 µA (VBAT = 2.2 V) ILI V VBAT – 0.10 V Input leakage current (MR) MR = 0 V; VCC = 3 V 20 75 350 µA Input leakage current (PFI) 0 V = VIN = VCC –25 2 +25 nA Input leakage current (TP1-TP4) 0 V = VIN = VCC –1 +1 µA 0 V = VIN = VCC(5) –1 +1 µA ILO Output leakage current VIH Input high voltage (MR) VIL Input low voltage (MR) VOL Output low voltage (PFO, RST, Vccsw, SAL, BLD) Output low voltage (RST) VOL VCC – 0.3 VRST (max) < VCC < 3.6V 0.7VCC V 0.3VCC V VCC = VRST (max), ISINK = 3.2mA 0.3 V IOL = 40µA; VCC = 1.0V; VBAT = VCC; TA = 0°C to 85°C 0.3 V IOL = 200µA; VCC = 1.2V; VBAT = VCC 0.3 V 25/35 DC and AC parameters Table 6. Sym VOHB STM1403 DC and AC characteristics (continued) Alter- Description Test condition(1) Min VOH battery backup (Vccsw) ISOURCE = 100 µA, 0.8VBAT native Pull-up supply voltage (open drain) Typ Max Unit V RST, SAL, BLD, PFO 3.6 V 1.237 1.262 V 10 20 mV Power-fail comparator VPFI tPFD PFI input threshold PFI falling (VCC < 3.6 V) PFI hysteresis PFI Rising (VCC < 3.6 V) 1.212 PFI to PFO propagation delay 2 µs VBAT > VSW VSW V VBAT < VSW VBAT V VBAT > VSW VSW V VBAT < VSW VBAT V VSW 2.4 V Hysteresis 40 mV Battery switchover Battery backup switchover voltage (6)(7) Powerdown Power-up VSO Battery low voltage detect VDET Battery detect threshold M 2.25 2.30 2.34 V N 2.45 2.50 2.55 V O 3.14 3.20 3.26 V 0°C to 85°C 1.212 1.237 1.262 V –40° to 0°C 1.200 1.237 1.274 V 0°C to 85°C 15 25 µA –40° to 0°C 10 15 µA 10 13 µA 10-100 µVrms On power-up only Voltage reference (option for STM1403A)(8) VREF Voltage reference (see Section 2.1.9: VREF, reference voltage output (1.237, typ) on page 12) IREF+ Source current IREF– Sink current Vn 26/35 Output voltage noise f = 100 Hz to 100 kH STM1403 Table 6. Sym DC and AC parameters DC and AC characteristics (continued) Alter- Description native Test condition(1) Min Typ Max Unit VCC falling 3.00 3.075 3.15 V VCC rising 3.00 3.085 3.17 V VCC falling 2.85 2.925 3.00 V VCC rising 2.85 2.935 3.02 V VCC falling 2.55 2.625 2.70 V VCC rising 2.55 2.635 2.72 V 140 200 280 ms Reset thresholds T VRST(9) Reset threshold S R trec RST pulse width Push-button reset input tMLMH tMR MR pulse width tMLRL tMRD MR to RST output delay 100 ns 60 500 ns 1. Valid for ambient operating temperature: TA = –40 to 85°C; VCC = VRST (max) to 3.6 V; and VBAT = 2.8 V (except where noted); typical values are for 3.3 V and 25°C. 2. VCC supply current, logic input leakage, push-button reset functionality, PFI functionality, state of RST tested at VBAT = 3.6 V, and VCC = 3.6 V. The state of RST and PFO is tested at VCC = VCC (min). VBAT is voltage measured at the pin. 3. Tested at VBAT = 3.6 V, VCC = 3.5 V and 0 V. 4. Guaranteed by design. 5. The leakage current measured on the RST, SAL, PFO, and BLD pins are tested with the output not asserted (output high impedance). 6. When VBAT > VCC > VSW, VOUT remains connected to VCC until VCC drops below VSW. 7. When VSW > VCC > VBAT, VOUT remains connected to VCC until VCC drops below the battery voltage (VBAT) – 75 mV. 8. Maximum external capacitive load on VREF pin cannot exceed 1nF. 9. The reset threshold tolerance is wider for VCC rising than for VCC falling due to the 10 mV (typ) hysteresis, which prevents internal oscillation. 27/35 DC and AC parameters Table 7. STM1403 Physical and environmental tamper detection levels Sym Parameter VHV VLV Test conditions(1) Min Typ Max Unit Overvoltage trip level 4.0 4.2 4.4 V Undervoltage trip level 1.9 2.0 2.1 V 25 50 µs SAL propagation delay time (after over/under voltage detection) VHV + 200 mV or VLV – 200 mV VHTP Trip point for NH physical tamper input pins (TP1 or TP3) VOUT – 1.3 V(2) VOUT – 0.3 V(2) V VLTP Trip point for NL physical tamper input pins (TP2 or TP4) 0.3 1.0 V 50 µs SAL propagation delay time(3) (after physical tamper pin detection) Physical tamper input (TPX) glitch immunity VHTP = VOUT/VTPU; VLTP = VSS VDD = 3.6 30 15 µs 1. Valid for ambient operating temperature: TA = –40 to 85°C; VCC = VLV to VHV (except where noted). 2. In the case of STM1403A, physical tamper input pins (TPX) are referenced to VOUT (pin 12). In the case of STM1403B or C, TPX are referenced to VTPU pin (pin 9). 3. VCC = VRST (max) to 3.6 V 28/35 STM1403 8 Package mechanical data Package mechanical data In order to meet environmental requirements, ST offers these devices in ECOPACK® packages. These packages have a Lead-free second level interconnect. The category of second Level Interconnect is marked on the package and on the inner box label, in compliance with JEDEC Standard JESD97. The maximum ratings related to soldering conditions are also marked on the inner box label. ECOPACK is an ST trademark. ECOPACK specifications are available at: www.st.com. Figure 28. QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm body size, outline D E A3 A A1 ddd C e b L K 1 2 E2 Ch 3 K D2 QFN16-A Note: Drawing is not to scale. 29/35 Package mechanical data Table 8. STM1403 QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm body size, mechanical data mm inches Symb Typ Min Max Typ Min Max A 0.90 0.80 1.00 0.035 0.032 0.039 A1 0.02 0.00 0.05 0.001 0.000 0.002 A3 0.20 – – 0.008 – – b 0.25 0.18 0.30 0.010 0.007 0.012 D 3.00 2.90 3.10 0.118 0.114 0.122 D2 1.70 1.55 1.80 0.067 0.061 0.071 E 3.00 2.90 3.10 0.118 0.114 0.122 E2 1.70 1.55 1.80 0.067 0.061 0.071 e 0.50 – – 0.020 – – K 0.20 – – 0.008 – – L 0.40 0.30 0.50 0.016 0.012 0.020 ddd – 0.08 – – 0.003 – Ch – 0.33 – – 0.013 – N 16 16 Figure 29. QFN16 – 16-lead, quad, flat package, no lead, 3 x 3 mm, recommended footprint 1.60 3.55 AI09126 Note: 30/35 Substrate pad should be tied to VSS. 2.0 0.28 STM1403 Part numbering 9 Part numbering Table 9. Ordering information scheme (see Figure 30 on page 32 for marking information) Example: STM1403 A T M Q 6 F Device type STM1403: physical, voltage tamper detect VOUT status (SAL = active-low) A: VOUT = ON; Vccsw = normal mode B(1): VOUT = High-Z; Vccsw = high C: VOUT = ground; Vccsw = high Reset threshold voltage T: VRST = 3.00 V to 3.15 V S: VRST = 2.85 V to 3.00 V R: VRST = 2.55 V to 2.70 V Battery low voltage detect threshold (VDET) M: VDET = 2.3 V (typ) N: VDET = 2.5 V (typ) O: VDET = 3.2 V (typ) Package Q = QFN16 (3 mm x 3 mm) Temperature range 6 = –40 to 85°C Shipping method F = ECOPACK® package, tape & reel 1. Contact local ST sales office for availability. For other options, or for more information on any aspect of this device, please contact the ST sales office nearest you. 31/35 Part numbering STM1403 Figure 30. Topside marking information 03 XXX(1) YWW(2) AI11878 1. Options codes: X = A, B, or C (for VOUT) X = T, S, or R (for reset threshold) X = M, N, or O (for battery low voltage detect threshold) 2. Traceability codes Y = Year WW = Work Week 32/35 STM1403 10 Revision history Revision history Table 10. Document revision history Date Revision Changes 11-Oct-2004 1 26-Nov-2004 1.1 Corrected footprint dimensions; update characteristics (Figure 1, 2, 3, 4, 5, 6, 7, 8, 26, 27, 29; Table 1, 2, 3, 6, 7) 22-Dec-2004 1.2 Update characteristics ( Figure 4; Table 6, 7, 9) 03-Feb-2005 1.3 Update characteristics (Figure 4; Table 6, 7) 25-Feb-2005 1.4 Update temperature trip limits (Table 9) 06-May-2005 1.5 Update characteristics (Figure 3, 4, 28; Table 6, 7) 05-Aug-2005 2 Removed STM1404 references (Figure 1, 2, 3, 4, 5, 6, 7, 8, 26, 27; Table 1, 2, 5, 6, 7, 9) 18-Oct-2005 3 Update hardware hookup, characteristics, Lead-free text; add marking information (Figure 4, 30; Table 6, 7, 9) 07-Feb-2007 4 Update cover page, Table 7, and part numbering (Table 9). 20-Aug-2008 5 Minor formatting changes, updated Table 1 and 7. First edition 33/35 STM1403 Please Read Carefully: Information in this document is provided solely in connection with ST products. STMicroelectronics NV and its subsidiaries (“ST”) reserve the right to make changes, corrections, modifications or improvements, to this document, and the products and services described herein at any time, without notice. All ST products are sold pursuant to ST’s terms and conditions of sale. Purchasers are solely responsible for the choice, selection and use of the ST products and services described herein, and ST assumes no liability whatsoever relating to the choice, selection or use of the ST products and services described herein. No license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted under this document. If any part of this document refers to any third party products or services it shall not be deemed a license grant by ST for the use of such third party products or services, or any intellectual property contained therein or considered as a warranty covering the use in any manner whatsoever of such third party products or services or any intellectual property contained therein. UNLESS OTHERWISE SET FORTH IN ST’S TERMS AND CONDITIONS OF SALE ST DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY WITH RESPECT TO THE USE AND/OR SALE OF ST PRODUCTS INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE (AND THEIR EQUIVALENTS UNDER THE LAWS OF ANY JURISDICTION), OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. UNLESS EXPRESSLY APPROVED IN WRITING BY AN AUTHORIZED ST REPRESENTATIVE, ST PRODUCTS ARE NOT RECOMMENDED, AUTHORIZED OR WARRANTED FOR USE IN MILITARY, AIR CRAFT, SPACE, LIFE SAVING, OR LIFE SUSTAINING APPLICATIONS, NOR IN PRODUCTS OR SYSTEMS WHERE FAILURE OR MALFUNCTION MAY RESULT IN PERSONAL INJURY, DEATH, OR SEVERE PROPERTY OR ENVIRONMENTAL DAMAGE. ST PRODUCTS WHICH ARE NOT SPECIFIED AS "AUTOMOTIVE GRADE" MAY ONLY BE USED IN AUTOMOTIVE APPLICATIONS AT USER’S OWN RISK. Resale of ST products with provisions different from the statements and/or technical features set forth in this document shall immediately void any warranty granted by ST for the ST product or service described herein and shall not create or extend in any manner whatsoever, any liability of ST. ST and the ST logo are trademarks or registered trademarks of ST in various countries. Information in this document supersedes and replaces all information previously supplied. The ST logo is a registered trademark of STMicroelectronics. All other names are the property of their respective owners. © 2008 STMicroelectronics - All rights reserved STMicroelectronics group of companies Australia - Belgium - Brazil - Canada - China - Czech Republic - Finland - France - Germany - Hong Kong - India - Israel - Italy - Japan Malaysia - Malta - Morocco - Singapore - Spain - Sweden - Switzerland - United Kingdom - United States of America www.st.com 35/35