AT88SC3216CRF-MVB1G Atmel, AT88SC3216CRF-MVB1G Datasheet - Page 115

• Manufacturer Part Number: AT88SC3216CRF-MVB1G
• Description: CRYPTOMEMORY 32KBIT 16ZONE MVB
• Manufacturer: Atmel
• Series: CryptoMemory®, CryptoRF®r

Specifications of AT88SC3216CRF-MVB1G

• Rf Type: Read / Write
• Frequency: 13.56MHz
• Features: ISO1444-2, 1444-3, 32-kbits
• Package / Case: MVB Module
• Lead Free Status / RoHS Status: Lead free / RoHS Compliant

Appendix K. Using Encryption Communication Security
K.1.
K.2.
K.2.1. M = 110b Security – Encryption for Read / Write
5276C–RFID–3/09
CryptoRF contains security options that can be enabled by the customer at personalization. By default no security is
enabled, allowing CryptoRF to operate as a simple RFID EEPROM memory. Enabling Encryption Communication
Security on a User Zone restricts access to the data to users with knowledge of the Authentication key.
Communication Security
Communication between the PICC and reader operates in three security modes. The Normal mode allows
communication of all types of data in the clear. Authentication Communication Security mode encrypts only passwords.
Encryption Communication Security mode encrypts both user data and passwords. The default communication mode is
Normal mode.
Table 92.
Note:
Encryption Communication Security is activated by performing Mutual Authentication between the Host system and the
PICC using the Verify Crypto command, followed by the Encryption Activation procedure. Once activated, the PICC
will remain in Encryption mode until a security error occurs, a new Verify Crypto command is received, RF power is
removed, or a DESELECT command or IDLE command is received.
Encryption Security Options [88SC]
Encryption Communication Security for a User Zone is enabled by programming the Access Register (AR) and
Password Register (PR) for the zone. The Communication Security Mode (M) bits [AM1, AM0, ER] of the Access
Register determine the Communication Security requirements for the User Zone. The Password Register determines
which Key Set is used to access the User Zone. Configuration of the AR and PR registers is described in Appendix H.
Table 93.
Table 93 shows the one CryptoRF Encryption Communication Security option for 88SC PICCs, plus the default setting.
By default M = 111b and no Authentication or Encryption Activation is required to access the user memory.
When M = 110b Encryption is required for Read or Write access to the User Zone. If Encryption Activation is performed
with the key identified in the AK bits of the Password Register, then Read/Write access is granted to the User Zone. A
checksum is required for write operations.
Normal
Authentication
Encryption
AM1
Communication Mode
1
1
1. 88RF PICCs support an encryption option for programming secrets. See Appendix F.
AM0
1
1
CryptoRF Communication Security Options.
Selecting Encryption using the Communication Security Mode bits of the Access Register.
ER
0
1
Encryption for Read / Write
No Authentication or Encryption Required
AT88SC0808/1616/3216/6416CRF, AT88RF04C
Communication Security Mode
Encryption
User Data
Clear
Clear
System Data
Clear
Clear
Clear
Read / Write Access
Auth. Key (AK)
(1)
N/A
Pgm-Only Key (POK)
Passwords
Encryption
Encryption
Clear
N/A
N/A
115