AT88SC3216CRF-MVB1G Atmel, AT88SC3216CRF-MVB1G Datasheet - Page 91

• Manufacturer Part Number: AT88SC3216CRF-MVB1G
• Description: CRYPTOMEMORY 32KBIT 16ZONE MVB
• Manufacturer: Atmel
• Series: CryptoMemory®, CryptoRF®r

Specifications of AT88SC3216CRF-MVB1G

• Rf Type: Read / Write
• Frequency: 13.56MHz
• Features: ISO1444-2, 1444-3, 32-kbits
• Package / Case: MVB Module
• Lead Free Status / RoHS Status: Lead free / RoHS Compliant

Appendix G. Security Fuses
G.1.
G.2.
G.3.
5276C–RFID–3/09
There are four fuses which control access to the Configuration Memory. One fuse (SEC) is programmed by Atmel
before CryptoRF leaves the factory; the remaining three fuses are programmed during the personalization process.
Once a fuse is programmed, it can never be changed.
These fuses do not control access to the user memory; user memory access rights are defined in the Access
Registers. The security fuses are used to lock the state of the Access Registers, Passwords, Keys, and other
configuration data during the personalization process so that they cannot be changed after a card is issued.
To read the fuses send the Read System Zone command with PARAM = $01, ADDR = $FF, L = $00. The CryptoRF
response will contain one data byte, the Fuse Byte. A value of 0b indicates the fuse has been programmed. Bits 4 to 7
of this byte are not used as security fuses and are reserved by Atmel.
Figure 20.
Figure 21.
Programming the Fuse Bits
Three security fuses are programmed at the end of the personalization process to lock the PICC configuration. The
Write Fuse Byte option of the Write System Zone command is used to program the fuses. A fourth fuse, SEC, is
already programmed by Atmel before CryptoRF leaves the factory. The fuses can only be programmed in the specified
order.
The security fuse programming sequence is as follows:
1.
2.
3.
The response to each Write System Zone command should be ACK, and the fuse byte contents will be returned in the
STATUS byte. After all three fuses are programmed, the device configuration is locked.
Configuration Memory Access Control
Table 62 shows the Configuration Memory access conditions for each of the 88SC PICC security fuse settings. Table
63 shows the Configuration Memory access conditions for each of the 88RF PICC security fuse settings. The left
column contains the name of the register area in the Configuration Memory map. The next column indicates if that row
applies to Read System Zone commands or Write System Zone commands. The four columns to the right show the
security fuse states.
Reading the Security Fuses
RFU
RFU
F7
F7
X
X
Send Write System Zone command with:
PARAM = $01, ADDR = $06, L = $00, DATA = $00 to program the FAB or ENC fuse.
Send Write System Zone command with:
PARAM = $01, ADDR = $04, L = $00, DATA = $00 to program the CMA or SKY fuse.
Send Write System Zone command with:
PARAM = $01, ADDR = $00, L = $00, DATA = $00 to program the PER fuse.
RFU
RFU
F6
F6
Definition of the DATA Byte received when reading the Fuse Byte of 88SC PICCs.
Definition of the DATA Byte received when reading the Fuse Byte of 88RF PICCs.
X
X
RFU
RFU
F5
F5
X
X
AT88SC0808/1616/3216/6416CRF, AT88RF04C
RFU
RFU
F4
F4
X
X
SEC
SEC
F3
F3
0
0
PER
ENC
F2
F2
1
1
CMA
F1
1
SKY
F1
1
FAB
F0
1
PER
F0
1
Default Value
Default Value
91