AT88SC25616C-DK Atmel, AT88SC25616C-DK Datasheet
AT88SC25616C-DK
Specifications of AT88SC25616C-DK
AT88SC25616CDK
Related parts for AT88SC25616C-DK
AT88SC25616C-DK Summary of contents
Page 1
... Programmable 8-byte Answer-To-Reset Register – ISO 7816-2 Compliant Modules • High Reliability – Endurance: 100,000 Cycles – Data Retention: 10 years – ESD Protection: 4,000V CryptoMemory Specification For Standard Mode of Operation AT88SC0104C AT88SC0204C AT88SC0404C AT88SC0808C AT88SC1616C AT88SC3216C AT88SC6416C AT88SC12816C AT88SC25616C 5210B–SMIC–11/08 ...
Page 2
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Table of Contents Features ...................................................................................................... i Table of Contents...................................................................................... 1 1 Pin Configuration and Package Information ......................................... 1 2 Description ............................................................................................... 1 3 Pin Description ......................................................................................... 3 4 Detailed Description ................................................................................ 3 5 Communication Security Modes .......................................................... 13 6 ...
Page 3
Asynchronous T=0 Protocol ................................................................. 34 8.1 8.2 8.3 8.4 8.5 9 Initialization Example ............................................................................ 46 9.1 9.2 9.3 9.4 10 Absolute Maximum Ratings .................................................................. 49 10.1 10.2 11 Tamper Detection ................................................................................... 54 AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 2 Character format ..............................................................................................34 Command format ...
Page 4
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 1. Pin Configuration and Package Information 1.1 Pin Configuration Table 1-1. Pad VCC GND SCL/CLK SDA/IO RST 1.2 Package Information 2. Description The AT88SCxxxxC is a family of 9 high-performance secure memory devices providing 1K to 256K bits of ...
Page 5
... Authentication and Encryption Modes of CryptoMemory are secure and so only available under Non-Disclosure and Limited Licensing Agreements (NDA and LLA). Contact your regional Atmel sales office to obtain these secure documents. AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 2 Block Diagram ...
Page 6
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 3. Pin Description 3.1 Supply Voltage (V CC The V CC 3.2 Clock (SCL/CLK) In the asynchronous T=0 protocol, the SCL/CLK input is used to provide the device with a carrier frequency f. The nominal length of one bit ...
Page 7
Figure 4-1. AT88SC0104C User Memory ZONE $0 $00 - User 0 - $18 $00 - User 1 - $00 - User 2 - $18 $00 - User 3 - $18 Note: Page size=16 bytes Figure 4-2. AT88SC0204C User Memory ZONE ...
Page 8
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Figure 4-2. AT88SC0204C User Memory ZONE $00 - User 3 - $38 Note: Page size=16 bytes Figure 4-3. AT88SC0404C User Memory ZONE $00 - User 0 - $78 $00 - User 1 - $78 $00 - User 2 - ...
Page 9
Figure 4-4. AT88SC0808C User Memory ZONE $00 - User 0 - $78 User 1 $ User 6 $78 $00 - User 7 - $78 Note: Page size=16 bytes Figure 4-5. AT88SC1616C User Memory ZONE ...
Page 10
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Figure 4-6. AT88SC3216C User Memory ZONE $00 - User 0 - $F8 User 1 $ User 14 $F8 $00 - User 15 - $F8 Note: Page size= 64 bytes Figure 4-7. AT88SC6416C User ...
Page 11
... AT88SC12816C User Memory ZONE $000 - User 0 - $3F8 User 1 $000 - - - - - - User 14 $3F8 $000 - User 15 - $3F8 Note: Page size= 128 bytes Figure 4-9. AT88SC25616C User Memory ZONE $0 $000 - User 0 - $7F8 User 1 $000 - - - - - - User 14 $7F8 $000 - User 15 - $7F8 Note: Page size= 128 bytes 4.1.1 Control Logic Access to the user zones occurs only through the device’ ...
Page 12
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C memory during device personalization. This logic also implements the cryptographic engine for performing the various higher-level security functions of the device. 4.2 Configuration Memory The configuration memory consists of 2048 bits of EEPROM memory used for storing pass- words, ...
Page 13
Figure 4-10. AT88SC0104C, 0204C, 0404C Configuration Memory $0 $1 $00 $08 Fab Code $10 $18 DCR $20 AR0 PR0 $28 $30 $38 $40 $48 $50 $58 $60 $68 $70 $78 $80 $88 $90 $98 $A0 $A8 $B0 PAC $B8 PAC ...
Page 14
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Figure 4-11. AT88SC0808C Configuration Memory $0 $1 $00 $08 Fab Code $10 $18 DCR $20 AR0 PR0 $28 AR4 PR4 $30 $38 $40 $48 $50 $58 $60 $68 $70 $78 $80 $88 $90 $98 $A0 $A8 $B0 PAC $B8 ...
Page 15
Figure 4-12. AT88SC1616C, 3216C, 6416C, 12816C, 25616C Configuration Memory $0 $1 $00 $08 Fab Code $10 $18 DCR $20 AR0 PR0 $28 AR4 PR4 $30 AR8 PR8 $38 AR12 PR12 $40 $48 $50 $58 $60 $68 $70 $78 $80 $88 ...
Page 16
... The mutual authentication mode employs cryptographic technology that allows the device to authenticate the host, and the host to authenticate the device prior to any data communication between the two. Additional information on using mutual authentication is available from Atmel under NDA and/or LLA. 5210B–SMIC–11/08 ...
Page 17
... The encryption mode builds upon the mutual authentication mode such that the host and device first authenticate each other and go further to encrypt all data communications between them. Additional information on using the encryption mode is available from Atmel under NDA and/or LLA. 5.1.4 ...
Page 18
... Default Values Atmel programs certain fields of the configuration memory at the factory. The customer may elect to change the content of all of these fields except for the Lot History Code field, which is permanently locked. Atmel programs the remainder of the fields, including all of the configura- tion memory and user zones to ones prior to releasing the device from the factory ...
Page 19
... AT88SC1616C AT88SC3216C AT88SC6416C AT88SC12816C AT88SC25616C 5.3.2 Answer To Reset (ATR) This byte wide register with content that Atmel defines. This register is read/write acces- sible prior to blowing the FAB fuse, but becomes read-only after blowing the fuse. 5.3.3 Fab Code This field is a 16-bit wide register with content that Atmel defines. This field is read/write accessi- ble prior to blowing the FAB fuse, but becomes read-only after blowing the fuse ...
Page 20
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 5.3.8.1 SME – Supervisor Mode Enable Asserting this bit (SME = “0”) enables supervisor mode for Write 7 password such that verifying Write 7 password grants read and write accesses to all password sets and PACs. Verifying Write 7 ...
Page 21
When PM = “11”, the user zone under protection requires no password. When PM = “10”, the zone requires Write Password verification for writing and reading is free. When PM = “01” or “00”, reading requires the read password verification ...
Page 22
... Write 7 pass- word. Table 5-2 on page 16 Atmel factory. After blowing the PER fuse, verifying Write 7 password no longer grant write access to the configuration memory, and the configuration memory becomes read-only thereafter. ...
Page 23
... The bits SEC, PER, CMA and FAB are non-volatile fuses blown at the end of various steps in the manufacturing and personalization process. Once blown, these fuses can never be reset. Atmel blows the SEC fuse to lock the lot history code before the device leaves the factory. Blow- ing the remainder of the fuses must follow the sequence: 1. FAB – ...
Page 24
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Table 5-8. Fuse Access Rights Summary Zone Identification (Except MTZ and CMC) Memory Test Zone (MTZ) Card Manufacturer Code (CMC) Read Only (Lot History Code) Access Control Crytography (Except Encryption Keys S) Encryption Keys (S) Secret Passwords Password Attempts ...
Page 25
Protocol Selection CryptoMemory supports two application areas with different communication protocols: a 2-wire serial communication for embedded applications and an ISO 7816 asynchronous T=0 smart card interface. The power-up sequence of CryptoMemory determines what mode it shall oper- ate ...
Page 26
... Device TS AT88SC3216C $3B AT88SC6416C $3B AT88SC12816C $3B AT88SC25616C $3B Once the asynchronous mode has been selected not possible to switch to the synchronous mode without powering off the device. Figure 6-2. I/O-SDA CLK-SCL After a successful ATR, the Protocol and Parameter Selection (PPS) protocol defined by ISO 7816-3 may be used to negotiate the communications speed with CryptoMemory devices 32- Kbits and larger in user memory ...
Page 27
Synchronous Protocol Communication with the CryptoMemory using the synchronous protocol is very similar to com- munication with AT24Cxxx Serial EEPROM devices using a two-wire protocol (TWI). Basic command structure and timing are the same however a significant difference exists ...
Page 28
... Read User Zone Write Config Zone System Write (AT88SC0104C-AT88SC1616C) Write Config Zone (AT88SC3216C, AT88SC6416C) Write Config Zone (AT88SC12816C, AT88SC25616C) Write Fuses Set User Zone Write Config Zone with Anti-Tearing Set User Zone with Anti-Tearing Read Config Zone System Read Read Fuse Byte ...
Page 29
Figure 7- Device R Address T xxxx xxx0 All CryptoMemory commands will have a zero for the LSB of the first byte. All CryptoMemory commands will have 4 bytes used for defining the command and addressing the ...
Page 30
... A specific device may be set to respond to another value ($0 to $F) in addition setting this value in the second nibble of the Device Configuration Register (DCR) in the configuration memory. The DCR is set to $FF at the Atmel factory and thus will respond to device address $B and $F unless the DCR is modified. For a device to respond only to $B the DCR should be set to $B also ...
Page 31
... AT88SC0104C through AT88SC1616C (EEPROM page size of 16 bytes) • $40 for AT88SC3216C and AT88SC6416C (EEPROM page size of 64 bytes) • $80 for AT88SC12816C and AT88SC25616C (EEPROM page size of 128 bytes) In anti-tearing mode the maximum value for N is $08 for all devices. A write in anti-tearing mode is activated with the Set User Zone with Anti-Tearing command, all subsequent writes to the user zone will be in anti-tearing mode ...
Page 32
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Figure 7-4. 7.6.2 Read User Zone: $B2 7.6.2.1 Functional Host Read Command Address 1 Address 2 Number of Bytes N Figure 7-5. Read User Zone Command Functional Description The Read User Zone command $B2 allows reading of data from ...
Page 33
... AT88SC0104C through AT88SC1616C (EEPROM page size of 16 bytes) • $40 for AT88SC3216C and AT88SC6416C (EEPROM page size of 64 bytes) • $80 for AT88SC12816C and AT88SC25616C (EEPROM page size of 128 bytes) In anti-tearing mode the maximum value for N is $08 for all devices. A write may be started in the middle of an EEPROM page but should not extend past the end of the page ...
Page 34
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 7.6.3.3 Write Fuses The fuses may only be "programmed", that is written from '1' to '0'. The write fuses operation is allowed only after successfully presenting the secure code (write 7 password). The fuses must be blown sequentially: FAB ...
Page 35
... Read Fuse Byte Fuse data is returned in the form of a single byte. Bits represent the fuse states, a value of ‘0’ indicates the fuse has been blown. Bits are not used as security fuses and are reserved by Atmel. Table 7- resv ...
Page 36
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 7.6.5 Verify Password : $BA 7.6.5.1 Functional 3 password bytes Figure 7-10. Verify Password Command Functional Description Read password indices : $10 to $17 for passwords Write password indices : $00 to $07 for passwords 0 ...
Page 37
Asynchronous T=0 Protocol 8.1 Character format CryptoMemory complies with the asynchronous T=0 protocol defined in ISO 7816-3. The char- acter format is shown in the following figure: note that the byte is transmitted with the least significant bit first. ...
Page 38
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 8.3 PPS Support All CryptoMemory devices with user memory sizes 32Kbits and larger support the Protocol and Parameter Selection (PPS) protocol, section 7 of ISO 7816-3. This section only applies to these larger devices; PPS is not supported by ...
Page 39
After the ATR, the reader will have the choice of proceeding with commands using default val- ues of F=372 and D=1 (9600 baud at 3.5712 MHz), or negotiating values Fn and Dn through a PPS exchange. Following are four examples ...
Page 40
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C CryptoMemory will only operate at baud rates above the default 9600 baud through a successful PPS exchange. CryptoMemory cannot be set to higher baud rates through use of a TA(2) byte in the ATR. 8.4 Command Set Table 8-2. ...
Page 41
Status Words Table 8-3. SW1 SW2 $67 $00 $69 $00 $6B $00 $6D $00 $90 $00 These status words indicate the state of the device at the end of the command. In normal condi- tions, the device sends the ...
Page 42
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 8.4.2 Example : Write EEPROM command The following illustrates the data exchanges that occur during a write operation of 4 bytes : $04, $09, $19, $97 to addresses $02, $03, $04, $05 in the current user zone. Table 8-4. ...
Page 43
... AT88SC0104C through AT88SC1616C (EEPROM page size of 16 bytes) • $40 for AT88SC3216C and AT88SC6416C (EEPROM page size of 64 bytes) • $80 for AT88SC12816C and AT88SC25616C (EEPROM page size of 128 bytes) Each data byte within a page must only be loaded once. In anti-tearing mode the maximum value for N is $08 for all devices ...
Page 44
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 8.5.2 Read User Zone: $B2 8.5.2.1 Functional Host Read Command Address A1 Address A2 Number of Bytes N Figure 8-2. Read User Zone Command Functional Description The Read User Zone command $B2 allows reading of data from the device's ...
Page 45
System WRITE: $B4 8.5.3.1 Functional N data bytes Figure 8-3. System WRITE Command Functional Description The System Write command allows writing of system data to the device. Depending on the value of the P1 parameter, the host may write ...
Page 46
... AT88SC0104C through AT88SC1616C (EEPROM page size of 16 bytes) • $40 for AT88SC3216C and AT88SC6416C (EEPROM page size of 64 bytes) • $80 for AT88SC12816C and AT88SC25616C (EEPROM page size of 128 bytes) Each data byte within a page must only be loaded once. In anti-tearing mode the maximum value for N is $08 for all devices. If the address provided unauthorized address, the device will return the " ...
Page 47
System READ: $B6 8.5.4.1 Functional Host Command Parameter P1 Parameter P2 Number of Bytes N Figure 8-4. System READ Command Functional Description The System Read command allows reading of the system data from the device. Depending on the value ...
Page 48
... AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 8.5.4.3 Read Fuse Byte Fuse data is returned in the form of a single byte. Bits represent the fuse states; a value of ‘0’ indicates the fuse has been blown. Bits are not used as Security Fuses and are reserved by Atmel. Table 8-13 resv 8.5.5 Verify Password: $BA 8 ...
Page 49
... Before any data can be written to the configuration memory, it must be unlocked by presenting the correct security code (Write 7 Password). Use the Verify Password command with the proper secure code supplied by Atmel to unlock the configuration memory. Use the Read Con- fig Zone command to read back the security code at address $E9 for verification that the configuration memory has been unlocked ...
Page 50
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C The following shows the TPDU commands sent to the CryptoMemory device for the purpose of initializing the device. The flow is consistent with the steps described above; comments have been added as indicated with an asterisk (*). *AT88SC0104C Initialization ...
Page 51
...
Page 52
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 10. Absolute Maximum Ratings Stresses beyond those listed under ‘Absolute Maximum Ratings’ may cause permanent damage to the device. This is a stress rating only and functional operation of the device at these or any other conditions beyond those ...
Page 53
... SDA/IO Output High Voltage OH V SDA/IO Output Low Voltage OL I SDA/IO Output High Current OH Notes: 1. AT88SC0104C, AT88SC0204C, AT88SC0404C, AT88SC0808C, AT88SC1616C 2. AT88SC3264C, AT88SC6416C, AT88SC12816C, AT88SC25616C 3. V min and V max are reference only and are not tested IL IH AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 50 = +2.7 to 5.5V CC Test Condition Async READ at 3 ...
Page 54
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C AC Characteristics Applicable over recommended operating range fromV T = -40⋅ to +85⋅ C (unless otherwise noted) AC Symbol Parameter f Async Clock Frequency (V CLK f Async Clock Frequency (V CLK f Synchronous Clock Frequency CLK Clock Duty ...
Page 55
Timing Diagrams for Synchronous Communications Figure 10-1. Bus Timing: Figure 10-2. Write Cycle Timing: SCL SDA Note: The write cycle time t the internal clear/write cycle. AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C 52 SCL: Serial Clock, SDA: Serial Data I/O SCL: Serial Clock, SDA: ...
Page 56
AT88SC0104/0204/0404/0808/1616/3216/6416/12816/25616C Figure 10-3. Data Validity Figure 10-4. Start and Stop Definition 5210B–SMIC–11/08 DATA CHANGE ALLOWED 53 ...
Page 57
Figure 10-5. Output Acknowledge 11. Tamper Detection CryptoMemory contains tamper detection sensors to detect operation outside of specified limits. These sensors monitor the internal supply voltage and clock frequency. An additional sensor detects high intensity light attacks. The die is ...
Page 58
... Disclaimer: The information in this document is provided in connection with Atmel products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Atmel products. EXCEPT AS SET FORTH IN ATMEL’S TERMS AND CONDI- TIONS OF SALE LOCATED ON ATMEL’S WEB SITE, ATMEL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT ...