ATMEL AT88SC101, AT88SC102 Datasheet

Features
1K x 1 Serial E2PROM With Security Logic
Available in Two Memory Organizations:
AT88SC10111K x 1Memory Zone AT88SC1022512 x 1Memory Zone
Supports ISO/IEC 7816-3 Synchronous Protocol
Stores and Validates Security Codes
Counts Incorrect Security Code Attempts
Provides Transport Code Security
Manufactured Using Low Power CMOS Technology
VPP Internally Generated
2 µs Read Access Time; 5 ms Write Cycle Time
Temperature Range From -25°C to 70°C
ESD Immunity > 4K Volts
High Reliability:
100,000 Write/Erase Cycles 100 Years Data Retention
Smart Card ICs
2
1K E
PROM
with Security
Block D i agr a m
Description
The AT88SC101/102 family provides 1024 bits of serial E2PRO M (Elec tri cally Er as­able and P rogrammab le Read Only Memory) with additional secur ity logi c f or use i n secure smart card applications. The AT88S C101 is available in one 1024 x 1 bit mem­ory zones, and the AT88SC102 is available in two 512 x 1 bit memory zones.
ISO Card Configuration
ISO
Contact
C1 8 V C2 7 RST Reset C3 6 CLK Clock and Address Control C4 5 FUS Identification Fuses C5 1 V C6 2 NC No Connect C7 3 I/O Bi-directional Data Port C8 4 PGM Programming Control
Pad#Pad
Name
CC
SS
Description
Operating Voltage
Ground
Card Module Contacts
V
RST
CLK
FUS
C1
cc
C2
C3
C4
C5
C6
C7
C8
V
ss
N/C
I/O
PGM
Logic
AT88SC101 AT88SC102
The security features of Atmel’s AT88SC101/102 include: data ac cess only after validation of the security code permane nt invalidation of device upon four consecutive
false security code presentations read/write protection of certain memory zones device reset if power drops
secure transport of devices using tr ansport code compare sequence
The AT88SC101/102 is manufactured using low-power CMOS technology and features its own internal high-volt­age pump for single voltage supply operation. The de­vices are guaranteed to 100,000 erase/w rite cycles and 100 year d ata ret ention. Enduran ce up to one-m illion
AT88SC101 and AT88SC102 Memory Map
AT88SC101 AT88SC102
Memory Partitions
Fabrication Zone (FZ) 0 - 15 16 0 - 15 16 Issuer Zone (IZ) 16 - 79 64 16 - 79 64 Security Code (SC) 80 - 95 16 80 - 95 16 Security Code Attempts Counter (SCAC) 96 - 111 16 96 - 111 16 Code Protected Zone (CPZ) 112 - 175 64 112 - 175 64 Application Zone 1 (AZ1) 176 - 1199 1024 176 - 687 512 Application Zone 1 Erase Key (EZ1) 1200 - 1231 32 688 - 735 48 Application Zone 2 (AZ2) 736 - 1247 512 Application Zone 2 Erase Key (EZ2) 1248 - 1279 32 Erase Counter (EC) 1232 - 1359 128 1280 - 1407 128 Memory Test Zone (MTZ) 1360 - 1375 16 1408 - 1423 16
TOTAL BITS 1376 1424
Address Bits Address Bits
Definition of AT88SC101/102 Memory Partitions
FABRICA TION ZONE ( 16 bits): Programmed b y the manufacturer with a specific identifier for each customer. FUSE1 is blown by the manufacturer after programming the fabrication code, which makes the fabrication zone unalterable.
ISSUER ZONE (64 bits) : Programmed by the issuer be­fore finalizing perso nalization. The data stor ed in the is­suer zone is unalterable after FUSE2 is blown.
SECURITY CODE (16 bits): Must be presented by the issuer to access circuit m emory and personalize device before blowing FUSE2. This secures transportation be­tween the manufacturer and the issuer. After th e device is personalized and FUSE2 is blown, this code protects the access to the application zone(s) of the card.
SECURI TY CODE ATTEMPTS CO UNTER (1 6 bits): Counts t he number of incorrect secu rity co de attempts. The device is locked after 4 false presentations.
2
AT88SC101/102
USER PROTECTED ZONE (64 bits): Writing and eras­ing this zone i s pr otected. The num ber of program/erase cycles is guaranteed up to 100,000.
AP PLICAT ION ZO NE(S) ( 1024 or 512 bit s): Rea ding and progr amming the application zone(s) are controlled by the first 2 bits of the zone (PR, RD) and by the security code (Tables 1 and 2). The erasure of each zone is pro­tected by an erase key specific to each zone.
APPLICATION ZONE ERASE KEY (32 or 48 bits): Must be presented to au thorize the era sure of the applicat ion zone(s). The key(s) must be programmed during the per­sonalization of the circuit.
ERASE COUNTER (128 bits): Limits the number of era­sures of the last zone to 128 or less.
MEMORY TEST ZONE (16 bits): Allows pattern testing at this memory location.
AT88SC101/102
Memory Access to AT88SC101 and AT88SC102
The access to th e me m or y i s control l ed by the stat e of the i nt er nal fu s es and by the voltag e supply a ppl i ed on the FUS pad:
FUS Pad
Voltage
0V Either Either Table 2 5V Blown Not Blown Table 1 5V Blown B lown Table 2
Table 1. AT88SC101/102 Access Conditions During Personalization (FUSE 2 Not Blown)
SC1
Zones
FZ XXXXXXXX YES NO NO NO IZ 01XXXXXXXXXXXXX
SC 01XXXXXXXXXXXXX
SCAC 01XXXXXXXXXXXXX
CPZ 01XXXXXXXXXXXXX
AZ1 0
0 1
EZ1 01XXXXXXXXXXXXX
AZ2 0
0 1
EZ2 01XXXXXXXXXXXXX
EC 01XXXXXXXXXXXXX
MTZ XXXXXXXX YES YES YES NO
Notes: SC:SC = 1 after validation of security code
1PR:1st bit of AZ1 (Bit 176) 1RD:2nd bit of AZ1(Bit 177) 2PR:1st bit of AZ2 (Bit 736) - AT88SC102 only
1
P
R
R
D
X
0
X
1
X
X
X
X
X
X
X
X
State of the FUSES
FUS E 1 FUS E 2
2
2
E
E
P
R
Z
Z
R
D
1
2
X
X
X
X
X
X
X
X
X
X
X
X
X
0
X
X
X
1
X
X
X
X
X
X
Access Conditions See:
E C
X
X
X
X X
X X
X X
X X
X
X
2RD: 2nd bit of AZ2 (Bit 737) - AT88SC102 only
EZ1: EZ1 = 1 after a valid presentation of erase key 1 EZ2: EZ2 = 1 after a valid presentation of erase key 2 EC: EC = 1 when the counter is not empty.
READ WRITE 1
(Erase)
YES YES
NO
YES YES
YES YES
YES
NO YES YES
NO YES
NO YES YES
NO YES
YES YES
NO
YES
NO
YES
NO
YES
NO
YES
NO NO
YES
NO
YES
NO NO
YES
NO
YES
NO
YES
WRITE 0 (PROG)
NO
YES
NO
YES YES
YES
NO
YES
NO NO
YES
NO
YES
NO NO
YES
NO
YES YES
YES
Compare
NO NO
YES
NO NO
NO NO
NO NO
NO NO
NO NO
NO NO NO
NO NO
NO NO
3
Table 2. AT88SC101/102 Access Conditions After Personalization (FUSE 2 Blown)
SC1
Zones
FZ XXXXXXXX YES NO NO NO IZ XXXXXXXX YES NO NO NO SC 01XXXXXXXXXXXXX
1
2
2
E
E
E
P
R
P
R
Z
Z
C
R
D
R
D
1
2
X
READ WRI TE 1
(Erase)
NO
NO
NO
YES
WRITE 0 (PROG)
NO
YES
Compare
YES
NO
SCAC 01XXXXXXXXXXXXX
X
CPZ 01XXXXXXXXXXXXX
X
AZ1 0
EZ1 XXXXXXXX NO NO NO YES AZ2 0
EZ2 XXXXXXXX NO NO NO YES EC XXXXXXXX YES NO YES NO MTZ XXXXXXXX YES YES YES NO
Notes: SC:SC = 1 after validation of security code
1PR:1st bit of AZ1 (Bit 176) 1RD:2nd bit of AZ1(Bit 177) 2PR:1st bit of AZ2 (Bit 736) - AT88SC102 only
X
0
X
X
X
X
X
0
X
1
X
X
X
X
X
1
0
X
X
X
0
X
X
1
0
X
X
X
1
X
X
1
1
X
X
X
0
X
X
1
1
X
X
X
1
X
X
X
X
X
0
X
X
X
0
X
X
X
1
X
X
X
1
X
X
0
X
X
0
X
1
X
X
0
X
X
X
0
1
X
X
0
X
X
1
1
1
X
X
1
X
X
0
X
1
X
X
1
X
X
X
0
1
X
X
1
X
X
1
1
2RD: 2nd bit of AZ2 (Bit 737) - AT88SC102 only
EZ1: EZ1 = 1 after a valid presentation of erase key 1 EZ2: EZ2 = 1 after a valid presentation of erase key 2 EC: EC = 1 when the counter is not empty.
YES YES
YES YES
NO YES YES YES YES YES
NO YES YES YES YES YES YES YES
NO
YES
NO
YES
NO NO NO
YES
NO
YES
NO NO NO NO
YES
NO NO
YES
YES YES
NO
YES
NO NO NO
NO YES YES
NO
NO
NO
NO
NO YES YES YES
NO NO
NO NO
NO NO NO NO NO NO
NO NO NO NO NO NO NO NO
4
AT88SC101/102
Loading...
+ 7 hidden pages