Datasheet M24LR04E-R Datasheet (ST)

Download

Page 1

M24LR04E-R

SO8 (MN)

150 mils width

UFDFPN8 (MC)

2 x 3 mm

TSSOP8 (DW)

Unsawn wafer size: 8”

4-Kbit EEPROM with password protection, dual interface & energy

harvesting: 400 kHz I²C bus & ISO 15693 RF protocol at 13.56 MHz

Datasheet − production data

Features

I2C interface

■ Two-wire I

400 kHz protocol

■ Single supply voltage:

– 1.8 V to 5.5 V

■ Byte and Page Write (up to 4 bytes)

■ Random and Sequential read modes

■ Self-timed programming cycle

■ Automatic address incrementing

■ Enhanced ESD/latch-up protection

■ I²C timeout

Contactless interface

■ ISO 15693 and ISO 18000-3 mode 1

compatible

■ 13.56 MHz ±7k Hz carrier frequency

■ To tag: 10% or 100% ASK modulation using

1/4 (26 Kbit/s) or 1/256 (1.6 Kbit/s) pulse position coding

■ From tag: load modulation using Manchester

coding with 423 kHz and 484 kHz subcarriers in low (6.6 kbit/s) or high (26 kbit/s) data rate mode. Supports the 53 kbit/s data rate with Fast commands

■ Internal tuning capacitance: 27.5pF

■ 64-bit unique identifier (UID)

■ Read Block & Write (32-bit blocks)

Digital output pin

■ User configurable pin: RF write in progress or

RF busy mode

Energy harvesting

■ Analog pin for energy harvesting

■ 4 sink current configurable ranges

C serial interface supports

Memory

■ 4-Kbit EEPROM organized into:

– 512 bytes in I – 128 blocks of 32 bits in RF mode

■ Write time

–I

C: 5 ms (max.)

– RF: 5.75 ms including the internal Verify

time

■ More than 1 million write cycles

■ More than 40-year data retention

■ Multiple password protection in RF mode

■ Single password protection in I

■ Package

– ECOPACK2

Halogen-free)

C mode

(RoHS compliant and

June 2012 Doc ID 022208 Rev 5 1/142

This is information on a product in full production.

www.st.com

Page 2

Contents M24LR04E-R

Contents

1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2 Signal descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.1 Serial clock (SCL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.2 Serial data (SDA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.3 RF Write in progress / RF Busy (RF WIP/BUSY) . . . . . . . . . . . . . . . . . . . 15

2.4 Energy harvesting analog output (Vout) . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.5 Antenna coil (AC0, AC1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.5.1 Device reset in RF mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

2.6 VSS ground . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.7 Supply voltage (V

2.7.1 Operating supply voltage V

2.7.2 Power-up conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.7.3 Device reset in I²C mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.7.4 Power-down conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

CC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3 User memory organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4 System memory area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

4.1 M24LR04E-R block security in RF mode . . . . . . . . . . . . . . . . . . . . . . . . . 23

4.1.1 Example of the M24LR04E-R security protection in RF mode . . . . . . . 25

4.2 M24LR04E-R block security in I²C mode (I2C_Write_Lock bit area) . . . . 26

4.3 Configuration byte and Control register . . . . . . . . . . . . . . . . . . . . . . . . . . 26

4.3.1 RF WIP/BUSY pin configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

4.3.2 Energy harvesting configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

4.3.3 FIELD_ON indicator bit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4.3.4 Configuration byte access in I²C and RF modes . . . . . . . . . . . . . . . . . . 29

4.3.5 Control register access in I²C or RF mode . . . . . . . . . . . . . . . . . . . . . . 29

4.4 ISO 15693 system parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

C device operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

5.1 Start condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

5.2 Stop condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

2/142 Doc ID 022208 Rev 4

Page 3

M24LR04E-R Contents

5.3 Acknowledge bit (ACK) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

5.4 Data input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

5.5 I²C timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

5.5.1 I²C timeout on Start condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

5.5.2 I²C timeout on clock period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

5.6 Memory addressing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

5.7 Write operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

5.8 Byte write . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

5.9 Page write . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

5.10 Minimizing system delays by polling on ACK . . . . . . . . . . . . . . . . . . . . . . 36

5.11 Read operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.12 Random Address Read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.13 Current Address Read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.14 Sequential Read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.15 Acknowledge in Read mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.16 M24LR04E-R I

5.16.1 I2C present password command description . . . . . . . . . . . . . . . . . . . . . 39

5.16.2 I

C password security . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

C write password command description . . . . . . . . . . . . . . . . . . . . . . . 40

6 M24LR04E-R memory initial state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

7 RF device operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

7.1 RF communication and energy harvesting . . . . . . . . . . . . . . . . . . . . . . . . 42

7.2 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

7.3 Initial dialog for vicinity cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

7.3.1 Power transfer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

7.3.2 Frequency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

7.3.3 Operating field . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

8 Communication signal from VCD to M24LR04E-R . . . . . . . . . . . . . . . . 45

9 Data rate and data coding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

9.1 Data coding mode: 1 out of 256 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

9.2 Data coding mode: 1 out of 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

9.3 VCD to M24LR04E-R frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Doc ID 022208 Rev 4 3/142

Page 4

Contents M24LR04E-R

9.4 Start of frame (SOF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

10 Communication signal from M24LR04E-R to VCD . . . . . . . . . . . . . . . . 52

10.1 Load modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

10.2 Subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

10.3 Data rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

11 Bit representation and coding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

11.1 Bit coding using one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

11.1.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

11.1.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

11.2 Bit coding using two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

11.2.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

11.2.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

12 M24LR04E-R to VCD frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

12.1 SOF when using one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

12.1.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

12.1.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

12.2 SOF when using two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

12.2.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

12.2.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

12.3 EOF when using one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

12.3.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

12.3.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

12.4 EOF when using two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

12.4.1 High data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

12.4.2 Low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

13 Unique identifier (UID) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

14 Application family identifier (AFI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

15 Data storage format identifier (DSFID) . . . . . . . . . . . . . . . . . . . . . . . . . 62

15.1 CRC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

16 M24LR04E-R protocol description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

4/142 Doc ID 022208 Rev 4

Page 5

M24LR04E-R Contents

17 M24LR04E-R states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

17.1 Power-off state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

17.2 Ready state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

17.3 Quiet state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

17.4 Selected state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

18 Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

18.1 Addressed mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

18.2 Non-addressed mode (general request) . . . . . . . . . . . . . . . . . . . . . . . . . 67

18.3 Select mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

19 Request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

19.1 Request flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

20 Response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

20.1 Response flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

20.2 Response error code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

21 Anticollision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

21.1 Request parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

22 Request processing by the M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . 74

23 Explanation of the possible cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

24 Inventory Initiated command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

25 Timing definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

25.1 t1: M24LR04E-R response delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

25.2 t2: VCD new request delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

25.3 t

: VCD new request delay when no response is received

from the M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

26 Command codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

26.1 Inventory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

26.2 Stay Quiet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Doc ID 022208 Rev 4 5/142

Page 6

Contents M24LR04E-R

26.3 Read Single Block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

26.4 Write Single Block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

26.5 Read Multiple Block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

26.6 Select . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

26.7 Reset to Ready . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

26.8 Write AFI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

26.9 Lock AFI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

26.10 Write DSFID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

26.11 Lock DSFID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

26.12 Get System Info . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

26.13 Get Multiple Block Security Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

26.14 Write-sector Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

26.15 Lock-sector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

26.16 Present-sector Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

26.17 Fast Read Single Block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

26.18 Fast Inventory Initiated . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

26.19 Fast Initiate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

26.20 Fast Read Multiple Block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

26.21 Inventory Initiated . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

26.22 Initiate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

26.23 ReadCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

26.24 WriteEHCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

26.25 WriteDOCfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

26.26 SetRstEHEn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

26.27 CheckEHEn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

27 Maximum rating . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

28 I2C DC and AC parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

29 RF electrical parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

30 Package mechanical data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

31 Part numbering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136

6/142 Doc ID 022208 Rev 4

Page 7

M24LR04E-R Contents

Appendix A Anticollision algorithm (informative) . . . . . . . . . . . . . . . . . . . . . . . 137

A.1 Algorithm for pulsed slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

Appendix B CRC (informative) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

B.1 CRC error detection method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

B.2 CRC calculation example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Appendix C Application family identifier (AFI) (informative) . . . . . . . . . . . . . . 140

Revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Doc ID 022208 Rev 4 7/142

Page 8

List of tables M24LR04E-R

List of tables

Table 1. Signal names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Table 2. Device select code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Table 3. Address most significant byte . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Table 4. Address least significant byte . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Table 5. Sector details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Table 6. Sector security status byte area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Table 7. Sector security status byte organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Table 8. Read / Write protection bit setting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Table 9. Password control bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Table 10. Password system area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Table 11. M24LR04E-R sector security protection after power-up. . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Table 12. M24LR04E-R sector security protection after a valid presentation of password 1 . . . . . . . 25

Table 13. I2C_Write_Lock bit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Table 14. Configuration byte. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Table 15. Control register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Table 16. EH_enable bit value after power-up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Table 17. System parameter sector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Table 18. Operating modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Table 19. 10% modulation parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Table 20. Response data rates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Table 21. UID format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Table 22. CRC transmission rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

Table 23. VCD request frame format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Table 24. M24LR04E-R Response frame format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Table 25. M24LR04E-R response depending on Request_flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Table 26. General request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Table 27. Definition of request flags 1 to 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

Table 28. Request flags 5 to 8 when Bit 3 = 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Table 29. Request flags 5 to 8 when Bit 3 = 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Table 30. General response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Table 31. Definitions of response flags 1 to 8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Table 32. Response error code definition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Table 33. Inventory request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

Table 34. Example of the addition of 0-bits to an 11-bit mask value . . . . . . . . . . . . . . . . . . . . . . . . . 72

Table 35. Timing values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Table 36. Command codes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Table 37. Inventory request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Table 38. Inventory response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Table 39. Stay Quiet request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Table 40. Read Single Block request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Table 41. Read Single Block response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . 83

Table 42. Sector security status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Table 43. Read Single Block response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . 83

Table 44. Write Single Block request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

Table 45. Write Single Block response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . 84

Table 46. Write Single Block response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . 85

Table 47. Read Multiple Block request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Table 48. Read Multiple Block response format when Error_flag is NOT set. . . . . . . . . . . . . . . . . . . 88

8/142 Doc ID 022208 Rev 4

Page 9

M24LR04E-R List of tables

Table 49. Sector security status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

Table 50. Read Multiple Block response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . 88

Table 51. Select request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Table 52. Select Block response format when Error_flag is NOT set. . . . . . . . . . . . . . . . . . . . . . . . . 89

Table 53. Select response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

Table 54. Reset to Ready request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Table 55. Reset to Ready response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . 91

Table 56. Reset to ready response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Table 57. Write AFI request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Table 58. Write AFI response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Table 59. Write AFI response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Table 60. Lock AFI request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Table 61. Lock AFI response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Table 62. Lock AFI response format when Error_flag is set. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

Table 63. Write DSFID request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Table 64. Write DSFID response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . 95

Table 65. Write DSFID response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

Table 66. Lock DSFID request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

Table 67. Lock DSFID response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . . 96

Table 68. Lock DSFID response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Table 69. Get System Info request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Table 70. Get System Info response format when Protocol_extension_flag = 0 and

Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Table 71. Get System Info response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Table 72. Get Multiple Block Security Status request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Table 73. Get Multiple Block Security Status response format when Error_flag is NOT set . . . . . . 100

Table 74. Sector security status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Table 75. Get Multiple Block Security Status response format when Error_flag is set . . . . . . . . . . . 101

Table 76. Write-sector Password request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Table 77. Write-sector Password response format when Error_flag is NOT set . . . . . . . . . . . . . . . 102

Table 78. Write-sector Password response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . 102

Table 79. Lock-sector request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Table 80. Sector security status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Table 81. Lock-sector response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . 103

Table 82. Lock-sector response format when Error_flag is set. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Table 83. Present-sector Password request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

Table 84. Present-sector Password response format when Error_flag is NOT set . . . . . . . . . . . . . 105

Table 85. Present-sector Password response format when Error_flag is set . . . . . . . . . . . . . . . . . . 105

Table 86. Fast Read Single Block request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Table 87. Fast Read Single Block response format when Error_flag is NOT set . . . . . . . . . . . . . . . 107

Table 88. Sector security status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Table 89. Fast Read Single Block response format when Error_flag is set . . . . . . . . . . . . . . . . . . . 107

Table 90. Fast Inventory Initiated request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

Table 91. Fast Inventory Initiated response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109

Table 92. Fast Initiate request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

Table 93. Fast Initiate response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

Table 94. Fast Read Multiple Block request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Table 95. Fast Read Multiple Block response format when Error_flag is NOT set. . . . . . . . . . . . . . 111

Table 96. Sector security status if Option_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

Table 97. Fast Read Multiple Block response format when Error_flag is set . . . . . . . . . . . . . . . . . . 112

Table 98. Inventory Initiated request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Table 99. Inventory Initiated response format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

Doc ID 022208 Rev 4 9/142

Page 10

List of tables M24LR04E-R

Table 100. Initiate request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Table 101. Initiate Initiated response format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Table 102. ReadCfg request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Table 103. ReadCfg response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Table 104. ReadCfg response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

Table 105. WriteEHCfg request format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Table 106. WriteEHCfg response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . 116

Table 107. WriteEHCfg response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

Table 108. WriteDOCfg request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Table 109. WriteDOCfg response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . 118

Table 110. WriteDOCfg response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Table 111. SetRstEHEn request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Table 112. SetRstEHEn response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . 119

Table 113. SetRstEHEn response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Table 114. CheckEHEn request format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Table 115. CheckEHEn response format when Error_flag is NOT set . . . . . . . . . . . . . . . . . . . . . . . . 120

Table 116. CheckEHEn response format when Error_flag is set . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

Table 117. Absolute maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

Table 118. I

C operating conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Table 119. AC test measurement conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Table 120. Input parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Table 121. I Table 122. I

C DC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

C AC characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Table 123. RF characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

Table 124. Operating conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

Table 125. Energy harvesting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Table 126. SO8N – 8-lead plastic small outline, 150 mils body width, package data. . . . . . . . . . . . . 133

Table 127. UFDFPN8 (MLP8) 8-lead ultra thin fine pitch dual flat package no lead

2 x 3 mm, data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

Table 128. TSSOP8 – 8-lead thin shrink small outline, package mechanical data. . . . . . . . . . . . . . . 135

Table 129. Ordering information scheme for bare die devices or packaged devices . . . . . . . . . . . . . 136

Table 130. CRC definition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

Table 131. AFI coding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140

Table 132. Document revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

10/142 Doc ID 022208 Rev 4

Page 11

M24LR04E-R List of figures

List of figures

Figure 1. Logic diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Figure 2. 8-pin package connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Figure 3. I

Figure 4. I

Figure 5. Circuit diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Figure 6. Memory sector organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Figure 7. I²C timeout on Start condition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Figure 8. Write mode sequences with I2C_Write_Lock bit = 1 (data write inhibited). . . . . . . . . . . . . 33

Figure 9. Write mode sequences with I2C_Write_Lock bit = 0 (data write enabled) . . . . . . . . . . . . . 35

Figure 10. Write cycle polling flowchart using ACK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Figure 11. Read mode sequences . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Figure 12. I Figure 13. I

Figure 14. 100% modulation waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Figure 15. 10% modulation waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Figure 16. 1 out of 256 coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Figure 17. Detail of a time period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Figure 18. 1 out of 4 coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 19. 1 out of 4 coding example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 20. SOF to select 1 out of 256 data coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Figure 21. SOF to select 1 out of 4 data coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

Figure 22. EOF for either data coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Figure 23. Logic 0, high data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Figure 24. Logic 0, high data rate, fast commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Figure 25. Logic 1, high data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Figure 26. Logic 1, high data rate, fast commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Figure 27. Logic 0, low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Figure 28. Logic 0, low data rate, fast commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Figure 29. Logic 1, low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Figure 30. Logic 1, low data rate, fast commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Figure 31. Logic 0, high data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Figure 32. Logic 1, high data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Figure 33. Logic 0, low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Figure 34. Logic 1, low data rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

Figure 35. Start of frame, high data rate, one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Figure 36. Start of frame, high data rate, one subcarrier, fast commands. . . . . . . . . . . . . . . . . . . . . . 56

Figure 37. Start of frame, low data rate, one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Figure 38. Start of frame, low data rate, one subcarrier, fast commands . . . . . . . . . . . . . . . . . . . . . . 57

Figure 39. Start of frame, high data rate, two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Figure 40. Start of frame, low data rate, two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Figure 41. End of frame, high data rate, one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Figure 42. End of frame, high data rate, one subcarrier, fast commands . . . . . . . . . . . . . . . . . . . . . . 58

Figure 43. End of frame, low data rate, one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

Figure 44. End of frame, low data rate, one subcarrier, Fast commands . . . . . . . . . . . . . . . . . . . . . . 58

Figure 45. End of frame, high data rate, two subcarriers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Figure 46. End of frame, low data rate, two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Figure 47. M24LR04E-R decision tree for AFI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

C Fast mode (fC = 400 kHz): maximum R

capacitance (C

C bus protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

C present password command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

C write password command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

bus

value versus bus parasitic

bus

Doc ID 022208 Rev 4 11/142

Page 12

List of figures M24LR04E-R

Figure 48. M24LR04E-R protocol timing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Figure 49. M24LR04E-R state transition diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Figure 50. Principle of comparison between the mask, the slot number and the UID . . . . . . . . . . . . . 73

Figure 51. Description of a possible anticollision sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Figure 52. M24LR04E RF-Busy management following Inventory command . . . . . . . . . . . . . . . . . . . 81

Figure 53. Stay Quiet frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . 82

Figure 54. Read Single Block frame exchange between VCD and M24LR04E-R. . . . . . . . . . . . . . . . 84

Figure 55. Write Single Block frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . 85

Figure 56. M24LR04E RF-Busy management following Write command . . . . . . . . . . . . . . . . . . . . . . 86

Figure 57. M24LR04E RF-Wip management following Write command . . . . . . . . . . . . . . . . . . . . . . . 87

Figure 58. Read Multiple Block frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . 89

Figure 59. Select frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . . . 90

Figure 60. Reset to Ready frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . 91

Figure 61. Write AFI frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . 93

Figure 62. Lock AFI frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . 94

Figure 63. Write DSFID frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . 96

Figure 64. Lock DSFID frame exchange between VCD and M24LR04E-R. . . . . . . . . . . . . . . . . . . . . 97

Figure 65. Get System Info frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . 99

Figure 66. Get Multiple Block Security Status frame exchange between VCD and M24LR04E-R . . 101

Figure 67. Write-sector Password frame exchange between VCD and M24LR04E-R . . . . . . . . . . . 102

Figure 68. Lock-sector frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . 104

Figure 69. Present-sector Password frame exchange between VCD and M24LR04E-R . . . . . . . . . 106

Figure 70. Fast Read Single Block frame exchange between VCD and M24LR04E-R. . . . . . . . . . . 108

Figure 71. Fast Initiate frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . 110

Figure 72. Fast Read Multiple Block frame exchange between VCD and M24LR04E-R . . . . . . . . . 112

Figure 73. Initiate frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . . . 114

Figure 74. ReadCfg frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . . . . 115

Figure 75. WriteEHCfg frame exchange between VCD and M24LR04E-R. . . . . . . . . . . . . . . . . . . . 117

Figure 76. WriteDOCfg frame exchange between VCD and M24LR04E-R. . . . . . . . . . . . . . . . . . . . 118

Figure 77. SetRstEHEn frame exchange between VCD and M24LR04E-R . . . . . . . . . . . . . . . . . . . 120

Figure 78. CheckEHEn frame exchange between VCD and M24LR04E-R. . . . . . . . . . . . . . . . . . . . 121

Figure 79. AC test measurement I/O waveform. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

Figure 80. I

C AC waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

Figure 81. ASK modulated signal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

Figure 82. Vout vs. Isink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

Figure 83. Range 11 domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

Figure 84. Range 10 domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Figure 85. Range 01 domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

Figure 86. Range 00 domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132

Figure 87. SO8N – 8-lead plastic small outline, 150 mils body width, package outline. . . . . . . . . . . 133

Figure 88. UFDFPN8 (MLP8) – 8-lead ultra thin fine pitch dual flat package no lead

2 × 3mm, package outline. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

Figure 89. TSSOP8 – 8-lead thin shrink small outline, package outline . . . . . . . . . . . . . . . . . . . . . . 135

12/142 Doc ID 022208 Rev 4

Page 13

M24LR04E-R Description

M24LR04E-R

SCL

SDA

AC0

AC1

MS19765V1

Vout

RF WIP/

#64:

1 Description

The M24LR04E-R device is a dual-interface, electrically erasable programmable memory (EEPROM). It features an I also a contactless memory powered by the received carrier electromagnetic wave. The M24LR04E-R is organized as 512 × 8 bits in the I

The M24LR04E-R also features an energy harvesting analog output, as well as a userconfigurable digital output pin toggling during either RF write in progress or RF busy mode.

Figure 1. Logic diagram

C interface and can be operated from a VCC power supply. It is

C mode and as 128 × 32 bits in RF mode.

C uses a two-wire serial interface, comprising a bidirectional data line and a clock line. The

devices carry a built-in 4-bit device type identifier code (1010) in accordance with the I bus definition.

The device behaves as a slave in the I by the serial clock. Read and Write operations are initiated by a Start condition, generated by the bus master. The Start condition is followed by a device select code and Read/Write bit (RW

When writing data to the memory, the device inserts an acknowledge bit during the 9 time, following the bus master’s 8-bit transmission. When data is read by the bus master, the bus master acknowledges the receipt of the data byte in the same way. Data transfers are terminated by a Stop condition after an Ack for Write, and after a NoAck for Read.

In the ISO15693/ISO18000-3 mode 1 RF mode, the M24LR04E-R is accessed via the

13.56 MHz carrier electromagnetic wave on which incoming data are demodulated from the received signal amplitude modulation (ASK: amplitude shift keying). When connected to an antenna, the operating power is derived from the RF energy and no external power supply is required. The received ASK wave is 10% or 100% modulated with a data rate of 1.6 Kbit/s

C protocol, with all memory operations synchronized

) (as described in Ta bl e 2 ), terminated by an acknowledge bit.

Doc ID 022208 Rev 5 13/142

bit

Page 14

Description M24LR04E-R

SDAV

SCL

RF WIP/BUSYAC0

Vout V

MS19742V1

1 2 3 4

8 7 6 5

AC1

using the 1/256 pulse coding mode or a data rate of 26 Kbit/s using the 1/4 pulse coding mode.

Outgoing data are generated by the M24LR04E-R load variation using Manchester coding with one or two subcarrier frequencies at 423 kHz and 484 kHz. Data are transferred from the M24LR04E-R at 6.6 Kbit/s in low data rate mode and 26 Kbit/s high data rate mode. The M24LR04E-R supports the 53 Kbit/s fast mode in high data rate mode using one subcarrier frequency at 423 kHz.

The M24LR04E-R follows the ISO 15693 and ISO 18000-3 mode 1 recommendation for radio-frequency power and signal interface.

The M24LR04E-R provides an Energy harvesting mode on the analog output pin Vout. When the Energy harvesting mode is activated, the M24LR04E-R can output the excess energy coming from the RF field on the Vout analog pin. In case the RF field strength is insufficient or when Energy harvesting mode is disabled, the analog output pin Vout goes into high-Z state and Energy harvesting mode is automatically stopped.

The M24LR04E-R features a user configurable digital out pin RF WIP/BUSY that can be used to drive a micro controller interrupt input pin (available only when the M24LR04E-R is correctly powered on the Vcc pin).

When configured in the RF write in progress mode (RF WIP mode), the RF WIP/BUSY pin is driven low for the entire duration of the RF internal write operation. When configured in the RF busy mode (RF BUSY mode), the RF WIP/BUSY pin is driven low for the entire duration of the RF command progress.

The RF WIP/BUSY pin is an open drain output and must be connected to a pull-up resistor.

Table 1. Signal names

Signal name Function Direction

Vout Energy harvesting Output Analog output

SDA Serial Data I/O

SCL Serial Clock Input

AC0, AC1 Antenna coils I/O

RF WIP/BUSY Digital signal Digital output

Supply voltage

Ground

Figure 2. 8-pin package connections

1. See Section 30 for package dimensions, and how to identify pin-1.

14/142 Doc ID 022208 Rev 5

Page 15

M24LR04E-R Signal descriptions

2 Signal descriptions

2.1 Serial clock (SCL)

This input signal is used to strobe all data in and out of the device. In applications where this signal is used by slave devices to synchronize the bus to a slower clock, the bus master must have an open drain output, and a pull-up resistor must be connected from Serial Clock (SCL) to V most applications, though, this method of synchronization is not employed, and so the pullup resistor is not necessary, provided that the bus master has a push-pull (rather than open drain) output.

2.2 Serial data (SDA)

This bidirectional signal is used to transfer data in or out of the device. It is an open drain output that may be wire-OR’ed with other open drain or open collector signals on the bus. A pull up resistor must be connected from Serial Data (SDA) to V the value of the pull-up resistor can be calculated).

. (Figure 3 indicates how the value of the pull-up resistor can be calculated). In

. (Figure 3 indicates how

2.3 RF Write in progress / RF Busy (RF WIP/BUSY)

This configurable output signal is used either to indicate that the M24LR04E-R is executing an internal write cycle from the RF channel or that an RF command is in progress. RF WIP and signals are available only when the M24LR04E-R is powered by the Vcc pin. It is an open drain output and a pull up resistor must be connected from RF WIP/BUSY to V

2.4 Energy harvesting analog output (Vout)

This analog output pin is used to deliver the analog voltage Vout available when the Energy harvesting mode is enabled and the RF field strength is sufficient. When the Energy harvesting mode is disabled or the RF field strength is not sufficient, the energy harvesting analog voltage output Vout is in High-Z state.

2.5 Antenna coil (AC0, AC1)

These inputs are used to connect the device to an external coil exclusively. It is advised not to connect any other DC or AC path to AC0 or AC1.

When correctly tuned, the coil is used to power and access the device using the ISO 15693 and ISO 18000-3 mode 1 protocols.

2.5.1 Device reset in RF mode

To ensure a proper reset of the RF circuitry, the RF field must be turned off (100% modulation) for a minimum t

RF_OFF

period of time.

Doc ID 022208 Rev 5 15/142

Page 16

Signal descriptions M24LR04E-R

2.6 VSS ground

VSS is the reference for the VCC supply voltage and Vout analog output voltage.

2.7 Supply voltage (VCC)

This pin can be connected to an external DC supply voltage.

Note: An internal voltage regulator allows the external voltage applied on V

M24LR04E-R, while preventing the internal power supply (rectified RF waveforms) to output a DC voltage on the V

2.7.1 Operating supply voltage V

pin.

Prior to selecting the memory and issuing instructions to it, a valid and stable VCC voltage within the specified [V

(min), VCC(max)] range must be applied (see Tab l e 1 18 ). To

maintain a stable DC supply voltage, it is recommended to decouple the V suitable capacitor (usually of the order of 10 nF) close to the V

CC/VSS

This voltage must remain stable and valid until the end of the transmission of the instruction and, for a Write instruction, until the completion of the internal I²C write cycle (t

2.7.2 Power-up conditions

When the power supply is turned on, VCC rises from VSS to VCC. The VCC rise time must not vary faster than 1V/µs.

2.7.3 Device reset in I²C mode

In order to prevent inadvertent write operations during power-up, a power-on reset (POR) circuit is included. At power-up (continuous rise of V I²C instruction until V lower than the minimum V

has reached the power-on reset threshold voltage (this threshold is

operating voltage defined in Ta bl e 1 18 ). When VCC passes

over the POR threshold, the device is reset and enters the Standby power mode. However, the device must not be accessed until V within the specified [V

(min), VCC(max)] range.

has reached a valid and stable VCC voltage

In a similar way, during power-down (continuous decrease in V below the power-on reset threshold voltage, the device stops responding to any instruction sent to it.

), the device does not respond to any

), as soon as VCC drops

to supply the

line with a

package pins.

2.7.4 Power-down conditions

During power-down (continuous decay of VCC), the device must be in Standby power mode (mode reached after decoding a Stop condition, assuming that there is no internal write cycle in progress).

16/142 Doc ID 022208 Rev 5

Page 17

M24LR04E-R Signal descriptions

100

10 100 1000

Bus line capacitor (pF)

Bus line pull-up resistor

)

When t

LOW

= 1.3 µs (min value for

= 400 kHz), the R

bus

× C

bus

time constant must be below the 400 ns time constant line represented on the left.

I²C bus master

M24xxx

bus

SCL

SDA

ai14796b

bus

× C

bus

= 400 ns

Here R

bus

× C

bus

= 120 ns

4 kΩ

30 pF

SCL

SDA

SCL

SDA

Start

Condition

SDA

Input

SDA

Change

AI00792B

Stop

Condition

1 23 7 89

MSB

ACK

Start

Condition

SCL

1 23 7 89

MSB ACK

Stop

Condition

Figure 3. I2C Fast mode (fC = 400 kHz): maximum R

Figure 4. I

capacitance (C

C bus protocol

bus

)

value versus bus parasitic

bus

Doc ID 022208 Rev 5 17/142

Page 18

Signal descriptions M24LR04E-R

Table 2. Device select code

Device type identifier

b7 b6 b5 b4 b3 b2 b1 b0

Device select code1010E2

1. The most significant bit, b7, is sent first.

2. E2 is not connected to any external pin. It is however used to address the M24LR04E-R as described in

Section 3 and Section 4.

Table 3. Address most significant byte

b15 b14 b13 b12 b11 b10 b9 b8

Table 4. Address least significant byte

b7 b6 b5 b4 b3 b2 b1 b0

(1)

Chip Enable address RW

(2)

11RW

18/142 Doc ID 022208 Rev 5

Page 19

M24LR04E-R User memory organization

3 User memory organization

The M24LR04E-R is divided into 4 sectors of 32 blocks of 32 bits, as shown in Ta bl e 5 .

Figure 6 shows the memory sector organization. Each sector can be individually read-

and/or write-protected using a specific password command. Read and write operations are possible if the addressed data are not in a protected sector.

The M24LR04E-R also has a 64-bit block that is used to store the 64-bit unique identifier (UID). The UID is compliant with the ISO 15963 description, and its value is used during the anticollision sequence (Inventory). This block is not accessible by the user and its value is written by ST on the production line.

The M24LR04E-R includes an AFI register that stores the application family identifier, and a DSFID register that stores the data storage family identifier used in the anticollision algorithm.

The M24LR04E-R has four 32-bit blocks that store an I codes.

Figure 5. Circuit diagram

C password plus three RF password

Doc ID 022208 Rev 5 19/142

Page 20

User memory organization M24LR04E-R

MS19766V1

1 Kbit EEPROM sector 1 Kbit EEPROM sector 1 Kbit EEPROM sector

1 Kbit EEPROM sector

Sector

Area

Sector security

status

I²C password RF password 1 RF password 2 RF password 3

8-bit DSFID

8-bit AFI

8-bit configuration

16-bit I²C Write Lock_bit

64-bit UID

0 1

2 3

5 bits

5 bits 5 bits 5 bits

System

20-bit SSS

System

Figure 6. Memory sector organization

Sector details

The M24LR04E-R user memory is divided into 4 sectors. Each sector contains 1024 bits. The protection scheme is described in Section 4: System memory area.

In RF mode, a sector provides 32 blocks of 32 bits. Each read and write access is done by block. Read and write block accesses are controlled by a Sector Security Status byte that defines the access rights to the 32 blocks contained in the sector. If the sector is not protected, a Write command updates the complete 32 bits of the selected block.

In I

C mode, a sector provides 128 bytes that can be individually accessed in Read and Write modes. When protected by the corresponding I2C_Write_Lock bit, the entire sector is write-protected. To access the user memory, the device select code used for any I command must have the E2 Chip Enable address at 0.

20/142 Doc ID 022208 Rev 5

Page 21

M24LR04E-R User memory organization

Table 5. Sector details

Sector

number

RF block

address

I2C byte

address

Bits [31:24] Bits [23:16] Bits [15:8] Bits [7:0]

0 0 user user user user

1 4 user user user user

2 8 user user user user

3 12 user user user user

4 16 user user user user

5 20 user user user user

6 24 user user user user

7 28 user user user user

8 32 user user user user

9 36 user user user user

10 40 user user user user

11 44 user user user user

12 48 user user user user

13 52 user user user user

14 56 user user user user

15 60 user user user user

16 64 user user user user

17 68 user user user user

18 72 user user user user

19 76 user user user user

20 80 user user user user

21 84 user user user user

22 88 user user user user

23 92 user user user user

24 96 user user user user

25 100 user user user user

26 104 user user user user

27 108 user user user user

28 112 user user user user

29 116 user user user user

30 120 user user user user

31 124 user user user user

Doc ID 022208 Rev 5 21/142

Page 22

User memory organization M24LR04E-R

Table 5. Sector details (continued)

Sector

number

2 ... ... ... ... ... ...

RF block

address

32 128 user user user user

33 132 user user user user

34 136 user user user user

35 140 user user user user

36 144 user user user user

37 148 user user user user

38 152 user user user user

39 156 user user user user

... ... ... ... ... ...

127 508 user user user user

I2C byte address

Bits [31:24] Bits [23:16] Bits [15:8] Bits [7:0]

22/142 Doc ID 022208 Rev 5

Page 23

M24LR04E-R System memory area

4 System memory area

4.1 M24LR04E-R block security in RF mode

The M24LR04E-R provides a special protection mechanism based on passwords. In RF mode, each memory sector of the M24LR04E-R can be individually protected by one out of three available passwords, and each sector can also have Read/Write access conditions set.

Each memory sector of the M24LR04E-R is assigned with a Sector security status byte including a Sector Lock bit, two Password Control bits and two Read/Write protection bits, as shown in Ta bl e 7 .

Ta bl e 6 describes the organization of the Sector security status byte, which can be read

using the Read Single Block and Read Multiple Block commands with the Option_flag set to 1.

On delivery, the default value of the SSS bytes is set to 00h.

Table 6. Sector security status byte area

I2C byte address Bits [31:24] Bits [23:16] Bits [15:8] Bits [7:0]

E2 = 1 0 SSS 3 SSS 2 SSS 1 SSS 0

Table 7. Sector security status byte organization

0 0 0 Password control bits

Read / Write

protection bits

Sector

Lock

When the Sector Lock bit is set to 1, for instance by issuing a Lock-sector command, the two Read/Write protection bits (b

, b2) are used to set the Read/Write access of the sector as

described in Ta b le 8 .

Table 8. Read / Write protection bit setting

Sector

Lock

, b

Sector access

when password presented

when password not presented

0 xx Read Write Read Write

1 00 Read Write Read No Write

1 01 Read Write Read Write

1 10 Read Write No Read No Write

1 11 Read No Write No Read No Write

Sector access

The next two bits of the Sector security status byte (b3, b4) are the password control bits. The value of these two bits is used to link a password to the sector, as defined in Ta bl e 9 .

Doc ID 022208 Rev 5 23/142

Page 24

System memory area M24LR04E-R

Table 9. Password control bits

b4, b

Password

00 The sector is not protected by a password.

01 The sector is protected by password 1.

10 The sector is protected by password 2.

11 The sector is protected by password 3.

The M24LR04E-R password protection is organized around a dedicated set of commands, plus a system area of three password blocks where the password values are stored. This system area is described in Ta bl e 1 0.

Table 10. Password system area

Add

1 Password 1

2 Password 2

3 Password 3

The dedicated commands for protection in RF mode are:

● Write-sector password:

The Write-sector password command is used to write a 32-bit block into the password system area. This command must be used to update password values. After the write cycle, the new password value is automatically activated. It is possible to modify a password value after issuing a valid Present-sector password command. On delivery, the three default password values are set to 0000 0000h and are activated.

● Lock-sector:

The Lock-sector command is used to set the sector security status byte of the selected sector. Bits b command. The sector lock bit, b

to b1 of the sector security status byte are affected by the Lock-sector

, is set to 1 automatically. After issuing a Lock-sector

command, the protection settings of the selected sector are activated. The protection of a locked block cannot be changed in RF mode. A Lock-sector command sent to a locked sector returns an error code.

24/142 Doc ID 022208 Rev 5

Page 25

M24LR04E-R System memory area

● Present-sector password:

The Present-sector password command is used to present one of the three passwords to the M24LR04E-R in order to modify the access rights of all the memory sectors linked to that password (Ta b le 8 ) including the password itself. If the presented password is correct, the access rights remain activated until the tag is powered off or until a new Present-sector password command is issued. If the presented password value is not correct, all the access rights of all the memory sectors are deactivated.

● Sector security status byte area access conditions in I2C mode:

In I

C mode, read access to the sector security status byte area is always allowed.

Write access depends on the correct presentation of the I

C password (see

Section 5.16.1: I2C present password command description).

To access the Sector security status byte area, the device select code used for any I

command must have the E2 Chip Enable address at 1.

An I

C write access to a sector security status byte re-initializes the RF access

condition to the given memory sector.

4.1.1 Example of the M24LR04E-R security protection in RF mode

Ta bl e 1 1 and Ta bl e 1 2 show the sector security protections before and after a valid Present-

sector password command. Tab le 1 1 shows the sector access rights of an M24LR04E-R after power-up. After a valid Present-sector password command with password 1, the memory sector access is changed as shown in Ta bl e 1 2.

Table 11. M24LR04E-R sector security protection after power-up

Sector

address

0 Protection: standard Read No Write xxx 00001

1 Protection: pswd 1 Read No Write xxx 01001

2 Protection: pswd 1 Read Write xxx 01011

3 Protection: pswd 1 No Read No Write xxx 01101

4 Protection: pswd 1 No Read No Write xxx 01111

Table 12. M24LR04E-R sector security protection after a valid presentation of

Sector security status byte

7b6b5b4b3b2b1b0

password 1

Sector

address

0 Protection: standard Read No Write xxx 0 0 0 0 1

1 Protection: pswd 1 Read Write xxx 0 1 0 0 1

2 Protection: pswd 1 Read Write xxx 0 1 0 1 1

3 Protection: pswd 1 Read Write xxx 0 1 1 0 1

4 Protection: pswd 1 Read No Write xxx 0 1 1 1 1

Sector security status byte

b7b6b5b4b3b2b1b

Doc ID 022208 Rev 5 25/142

Page 26

System memory area M24LR04E-R

4.2 M24LR04E-R block security in I²C mode (I2C_Write_Lock bit area)

In the I2C mode only, it is possible to protect individual sectors against Write operations. This feature is controlled by the I2C_Write_Lock bits stored in the 2 bytes of the I2C_Write_Lock bit area. I2C_Write_Lock bit area starts from location 2048 (see Ta bl e 1 3 ). To access the I2C_Write_Lock bit area, the device select code used for any I must have the E2 Chip Enable address at 1.

C command

Using these 16 bits, it is possible to write-protect all the 4 sectors of the M24LR04E-R memory. Each bit controls the I is always possible to unprotect a sector in the I

C write access to a specific sector as shown in Ta bl e 1 3 . It

C mode. When an I2C_Write_Lock bit is reset to 0, the corresponding sector is unprotected. When the bit is set to 1, the corresponding sector is write-protected.

In I

C mode, read access to the I2C_Write_Lock bit area is always allowed. Write access

depends on the correct presentation of the I

C password.

On delivery, the default value of the two bytes of the I2C_Write_Lock bit area is reset to 00h.

Table 13. I2C_Write_Lock bit

I2C byte address Bits [4:15] Bits [3:0]

E2 = 1 2048 Don’t care sectors 0-3

4.3 Configuration byte and Control register

The M24LR04E-R offers an 8-bit non-volatile Configuration byte located at I²C location 2320 of the system area used to store the RF WIP/BUSY pin and the energy harvesting configuration (see Ta b le 1 4 ).

The M24LR04E-R also offers an 8-bit volatile Control register located at I²C location 2336 of the system area used to store the energy harvesting enable bit as well as a FIELD_ON bit indicator (see Tab le 1 5 ).

4.3.1 RF WIP/BUSY pin configuration

The M24LR04E-R features a configurable open drain output RF WIP/BUSY pin used to provide RF activity information to an external device.

The RF WIP/BUSY pin functionality depends on the value of bit 3 of the Configuration byte.

● RF busy mode

When bit 3 of the Configuration byte is set to 0, the RF WIP/BUSY pin is configured in RF busy mode.

The purpose of this mode is to indicate to the I²C bus master whether the M24LR04E-R is busy in RF mode or not.

In this mode, the RF WIP/BUSY pin is tied to 0 from the RF command Start Of Frame (SOF) until the end of the command execution.

If a bad RF command is received, the RF WIP/BUSY pin is tied to 0 from the RF command SOF until the reception of the RF command CRC. Otherwise, the RF WIP/BUSY pin is in high-Z state.

26/142 Doc ID 022208 Rev 5

Page 27

M24LR04E-R System memory area

When tied to 0, the RF WIP/BUSY signal returns to High-Z state if the RF field is cut-off. During execution of I²C commands, the RF WIP/BUSY pin remains in high-Z state.

● RF Write in progress

When bit 3 of the Configuration byte is set to 1, the RF WIP/BUSY pin is configured in RF Write in progress mode.

The purpose of this mode is to indicate to the I²C bus master that some data have been changed in RF mode.

In this mode, the RF WIP/BUSY pin is tied to 0 for the duration of an internal write operation (i.e. between the end of a valid RF write command and the beginning of the RF answer).

During execution of I²C write operations, the RF WIP/BUSY pin remains in high-Z state.

4.3.2 Energy harvesting configuration

The M24LR04E-R features an Energy harvesting mode on the Vout analog output. The general purpose of the Energy harvesting mode is to deliver a part of the non-

necessary RF power received by the M24LR04E-R on the AC0-AC1 RF input in order to supply an external device. The current consumption on the analog voltage output Vout is limited to ensure that the M24LR04E-R is correctly supplied during the powering of the external device.

When the Energy harvesting mode is enabled and the power delivered on the AC0-AC1 RF input exceeds the minimum required P

AC0-AC1_min

, the M24LR04E-R is able to deliver a limited and unregulated voltage on the Vout pin, assuming the current consumption on the Vout does not exceed the I

sink_max

maximum value.

If one of the condition above is not met, the analog voltage output pin Vout is set in High-Z state.

For robust applications using the Energy harvesting mode, four current fan-out levels can be chosen.

● Vout sink current configuration

The sink current level is chosen by programming EH_cfg1 and EH_cfg0 into the Configuration byte (see Ta bl e 1 4 ).

The minimum power level required on AC0-AC1 RF input P voltage Vout, as well as the maximum current consumption I

AC0-AC1_min

sink_max

, the delivered

on the Vout pin

corresponding to the <EH_cfg1,EH_cfg0> bit values are described in Ta bl e 1 25 .

Table 14. Configuration byte

I2C byte address Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 BIT 1 BIT 0

(1)

E2=1 2320 X

1. Bit 7 to Bit 4 are don’t care bits.

(1)X(1)X(1)

RF WIP/BUSY EH_mode EH_cfg1 EH_cfg0

Doc ID 022208 Rev 5 27/142

Page 28

System memory area M24LR04E-R

● Energy harvesting enable control

Delivery of Energy harvesting analog output voltage on the Vout pin depends on the value of the EH_enable bit of the volatile Control register (see Tab le 1 5 ).

Table 15. Control register

I2C byte address Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 BIT 1 BIT 0

E2=1 2336 0

1. Bit 7 to Bit 1 are read-only bits.

(1)

FIELD_ON

(1)

EH_enable

– When set to 1, the EH_enable bit enables the Energy harvesting mode, meaning

that the Vout analog output signal is delivered when the P

AC0-AC1_min

and I

sink_max

conditions corresponding to the chosen sink current configuration bit are met (see

Ta bl e 1 25 ).

– When set to 0, the EH_enable bit disable the Energy harvesting mode and the

analog output Vout remains in set in High-Z state.

● Energy harvesting default mode control

At power-up, in I²C or RF mode, the EH_enable bit is updated according to the value of the EH_mode bit stored in the non-volatile Configuration byte (see Ta bl e 1 6 ). In other words, the EH_mode bit is used to configure whether the Energy harvesting mode is enabled or not by default.

Table 16. EH_enable bit value after power-up

EH_mode value EH_enable after power-up

Energy harvesting

after power-up

0 1 enabled

1 0 disabled

4.3.3 FIELD_ON indicator bit

The FIELD_ON bit indicator located as Bit 1 of the Control register is a read-only bit used to indicate when the RF power level delivered to the M24LR04E-R is sufficient to execute RF commands.

● When FIELD_ON = 0, the M24LR04E-R is not able to execute any RF commands.

● When FIELD_ON =1, the M24LR04E-R is able to execute any RF commands.

Note: During read access to the Control register in RF mode, the FIELD_ON bit is always read

at 1.

28/142 Doc ID 022208 Rev 5

Page 29

M24LR04E-R System memory area

4.3.4 Configuration byte access in I²C and RF modes

In I²C mode, read and write accesses to the non-volatile Configuration byte are always allowed. To access the Configuration byte, the device select code used for any I²C command must have the E2 Chip enable address at 1.

The dedicated commands to access the Configuration byte in RF mode are:

● Read configuration byte command (ReadCfg):

The ReadCfg command is used to read the eight bits of the Configuration byte.

● Write energy harvesting configuration command (WriteEHCfg):

The WriteEHCfg command is used to write the EH_mode, EH_cfg1 and EH_cfg0 bits into the Configuration byte.

● Write RF WIP/BUSY pin configuration command (WriteDOCfg):

The WriteDOCfg command is used to write the RF WIP/BUSY bit into the Configuration byte.

After any write access to the Configuration byte, the new configuration is automatically applied.

4.3.5 Control register access in I²C or RF mode

In I²C mode, read and write accesses to the volatile Control register are always allowed. To access the Control register, the device select code used for any I²C command must have the E2 Chip enable address at 1.

The dedicated commands to access the Control register in RF mode are:

● Check energy harvesting enable bit command (CheckEHEn):

The CheckEHEn command is used to read the eight bits of the Control register. When it is run, the FIELD_ON bit is always read at 1.

● Set/reset energy harvesting enable bit command (SetRstEHEn):

The SetRstEHEn command is used to set or reset the value of the EH_enable bit into the Control register.

4.4 ISO 15693 system parameters

The M24LR04E-R provides the system area required by the ISO 15693 RF protocol, as shown in Ta bl e 1 7 .

The first 32-bit block starting from I is used to activate/deactivate the write protection of the protected sector in I power-on, all user memory sectors protected by the I2C_Write_Lock bits can be read but cannot be modified. To remove the write protection, it is necessary to use the I password described in Figure 12. When the password is correctly presented — that is, when all the presented bits correspond to the stored ones — it is also possible to modify the I password using the I2C write password command described in Figure 13.

C address 2304 stores the I2C password. This password

C mode. At

C present

The next three 32-bit blocks store the three RF passwords. These passwords are neither read- nor write- accessible in the I

C mode.

Doc ID 022208 Rev 5 29/142

Page 30

System memory area M24LR04E-R

The next byte stores the Configuration byte, at I²C location 2320. This Control register is used to store the three energy harvesting configuration bits and the RF WIP/BUSY configuration bit.

The next two bytes are used to store the AFI, at I location 2323. These two values are used during the RF inventory sequence. They are readonly in the I

C mode.

C location 2322, and the DSFID, at I2C

The next eight bytes, starting from location 2324, store the 64-bit UID programmed by ST on the production line. Bytes at I

C locations 2332 to 2335 store the IC Ref and the Mem_Size data used by the RF Get_System_Info command. The UID, Mem_Size and IC ref values are read-only data.

Table 17. System parameter sector

I2C byte address Bits [31:24] Bits [23:16] Bits [15:8] Bits [7:0]

E2 = 1 2304 I

C password

E2 = 1 2308 RF password 1

E2 = 1 2312 RF password 2

E2 = 1 2316 RF password 3

E2 = 1 2320 DSFID (FFh) AFI (00h) ST reserved

E2 = 1 2324 UID UID UID UID

E2 = 1 2328 UID (E0h) UID (02h) UID UID

E2 = 1 2332

1. Delivery state: I2C password= 0000 0000h, RF password = 0000 0000h, Configuration byte = F4h

RFU

(FFh)

Mem_Size

(03 7F)

(1)

Configuration

byte (F4h)

IC Ref (5A)

30/142 Doc ID 022208 Rev 5

Page 31

M24LR04E-R I2C device operation

5 I2C device operation

The device supports the I2C protocol. This is summarized in Figure 4. Any device that sends data to the bus is defined as a transmitter, and any device that reads data is defined as a receiver. The device that controls the data transfer is known as the bus master, and the other as the slave device. A data transfer can only be initiated by the bus master, which also provides the serial clock for synchronization. The M24LR04E-R device is a slave in all communications.

5.1 Start condition

Start is identified by a falling edge of serial data (SDA) while the serial clock (SCL) is stable in the high state. A Start condition must precede any data transfer command. The device continuously monitors (except during a write cycle) the SDA and the SCL for a Start condition, and does not respond unless one is given.

5.2 Stop condition

Stop is identified by a rising edge of serial data (SDA) while the serial clock (SCL) is stable and driven high. A Stop condition terminates communication between the device and the bus master. A Read command that is followed by NoAck can be followed by a Stop condition to force the device into the Standby mode. A Stop condition at the end of a Write command triggers the internal write cycle.

5.3 Acknowledge bit (ACK)

The acknowledge bit is used to indicate a successful byte transfer. The bus transmitter, whether it be bus master or slave device, releases the serial data (SDA) after sending eight bits of data. During the 9 the receipt of the eight data bits.

clock pulse period, the receiver pulls the SDA low to acknowledge

5.4 Data input

During data input, the device samples serial data (SDA) on the rising edge of the serial clock (SCL). For correct device operation, the SDA must be stable during the rising edge of the SCL, and the SDA signal must change only when the SCL is driven low.

5.5 I²C timeout

During the execution of an I²C operation, RF communications are not possible. To prevent RF communication freezing due to inadvertent unterminated instructions sent to

the I²C bus, the M24LR04E-R features a timeout mechanism that automatically resets the I²C logic block.

Doc ID 022208 Rev 5 31/142

Page 32

I2C device operation M24LR04E-R

5.5.1 I²C timeout on Start condition

I²C communication with the M24LR04E-R starts with a valid Start condition, followed by a device select code.

If the delay between the Start condition and the following rising edge of the Serial Clock (SCL) that samples the most significant of the Device Select exceeds the t

START_OUT

(see Ta bl e 1 22 ), the I²C logic block is reset and further incoming data transfer is ignored until the next valid Start Condition.

Figure 7. I²C timeout on Start condition

time

5.5.2 I²C timeout on clock period

During data transfer on the I²C bus, the serial clock high pulse width High (t clock pulse width Low (

) exceeds the maximum value specified in Ta bl e 1 2 2 , the I²C

CLCH

logic block is reset and any further incoming data transfer is ignored until the next valid Start condition.

5.6 Memory addressing

To start communication between the bus master and the slave device, the bus master must initiate a Start condition. Following this, the bus master sends the device select code, shown in Ta bl e 2 (on Serial Data (SDA), most significant bit first).

Only one memory device can be connected on a single I²C bus. In M24LR04E-R, E1 and E0 are internally set to 1.

The eighth bit is the Read/Write If a match occurs on the device select code, the corresponding device gives an

acknowledgment on serial data (SDA) during the ninth bit time. If the device does not match the device select code, it deselects itself from the bus, and goes into Standby mode.

Table 18. Operating modes

Mode RW bit Bytes Initial sequence

Current address read 1 1 Start, device select, RW

bit (RW). It is set to 1 for Read and to 0 for Write operations.

= 1

CHCL

) or serial

Random address read

Sequential read 1 ≥ 1 Similar to current or random address read

32/142 Doc ID 022208 Rev 5

1 reStart, device select, RW

Start, device select, RW

= 0, address

= 1

Page 33

M24LR04E-R I2C device operation

Stop

Start

Byte Write Dev select Byte address Byte address Data in

Start

Page Write Dev select Byte address Byte address Data in 1

Data in 2

AI15115

Page Write (cont'd)

Stop

Data in N

ACK ACK ACK NO ACK

R/W

ACK ACK ACK NO ACK

R/W

NO ACK NO ACK

Table 18. Operating modes

Mode RW bit Bytes Initial sequence

Byte write 0 1 Start, device select, RW = 0 Page write 0 ≤ 4 bytes Start, device select, RW

= 0

Figure 8. Write mode sequences with I2C_Write_Lock bit = 1 (data write inhibited)

Doc ID 022208 Rev 5 33/142

Page 34

I2C device operation M24LR04E-R

5.7 Write operations

Following a Start condition, the bus master sends a device select code with the Read/Write bit (RW address bytes. The device responds to each address byte with an acknowledge bit, and then waits for the data byte.

Writing to the memory may be inhibited if the I2C_Write_Lock bit = 1. A Write instruction issued with the I2C_Write_Lock bit = 1 and with no I2C_Password presented does not modify the memory contents, and the accompanying data bytes are not acknowledged, as shown in Figure 8.

Each data byte in the memory has a 16-bit (two byte wide) address. The most significant byte (Ta bl e 3 ) is sent first, followed by the least significant byte (Tab le 4 ). Bits b15 to b0 form the address of the byte in memory.

When the bus master generates a Stop condition immediately after the Ack bit (in the tenthbit time slot), either at the end of a byte write or a page write, the internal write cycle is triggered. A Stop condition at any other time slot does not trigger the internal write cycle.

) reset to 0. The device acknowledges this, as shown in Figure 8, and waits for two

After the Stop condition, the delay t the device’s internal address counter is incremented automatically, to point to the next byte address after the last one that was modified.

During the internal write cycle, the serial data (SDA) signal is disabled internally, and the device does not respond to any requests.

5.8 Byte write

After the device select code and the address bytes, the bus master sends one data byte. If the addressed location is write-protected by the I2C_Write_Lock bit (= 1), the device replies with NoAck, and the location is not modified. If the addressed location is not write-protected, the device replies with Ack. The bus master terminates the transfer by generating a Stop condition, as shown in Figure 9.

5.9 Page write

The Page write mode allows up to four bytes to be written in a single write cycle, provided that they are all located in the same “row” in the memory: that is, the most significant memory address bits (b12-b2) are the same. If more bytes are sent than fit up to the end of the row, a condition known as “roll-over” occurs. This should be avoided, as data starts to become overwritten in an implementation-dependent way.

The bus master sends from one to four bytes of data, each of which is acknowledged by the device if the I2C_Write_Lock bit = 0 or the I2C_Password was correctly presented. If the I2C_Write_Lock_bit = 1 and the I2C_password are not presented, the contents of the addressed memory location are not modified, and each data byte is followed by a NoAck. After each byte is transferred, the internal byte address counter (inside the page) is incremented. The transfer is terminated by the bus master generating a Stop condition.

, and the successful completion of a Write operation,

34/142 Doc ID 022208 Rev 5

Page 35

M24LR04E-R I2C device operation

Write cycle

in progress

AI01847d

operation is

addressing the

memory

Start condition

Device select

with RW = 0

ACK

Returned

YES

YESNO

ReStart

Stop

Data for the

Write operation

Device select

with RW = 1

Send address

and receive ACK

First byte of instruction with RW = 0 already decoded by the device

YESNO

Start

condition

Continue the

Write operation

Continue the

Random Read operation

Figure 9. Write mode sequences with I2C_Write_Lock bit = 0 (data write enabled)

ACK

Byte Write Dev Select Byte address Byte address Data in

Start

Page Write Dev Select Byte address Byte address Data in 1

Start

R/W

ACK ACK ACK ACK

R/W

ACK ACK ACK

Figure 10. Write cycle polling flowchart using ACK

Stop

Data in 2

ACKACK

Data in N

Stop

AI15116

Doc ID 022208 Rev 5 35/142

Page 36

I2C device operation M24LR04E-R

5.10 Minimizing system delays by polling on ACK

During the internal write cycle, the device disconnects itself from the bus, and writes a copy of the data from its internal latches to the memory cells. The maximum I²C write time (t shown in

Ta bl e 1 2 2, but the typical time is shorter. To make use of this, a polling sequence

can be used by the bus master. The sequence, as shown in Figure 10, is:

1. Initial condition: a write cycle is in progress.

2. Step 1: the bus master issues a Start condition followed by a device select code (the

first byte of the new instruction).

3. Step 2: if the device is busy with the internal write cycle, no Ack is returned and the bus

master goes back to Step 1. If the device has terminated the internal write cycle, it responds with an Ack, indicating that the device is ready to receive the second part of the instruction (the first byte of this instruction having been sent during Step 1).

) is

36/142 Doc ID 022208 Rev 5

Page 37

M24LR04E-R I2C device operation

Start

Dev select * Byte address Byte address

Start

Dev select Data out 1

AI01105d

Data out N

Stop

Start

Current Address Read

Dev select Data out

Random Address Read

Stop

Start

Dev select * Data out

Sequential Current Read

Stop

Data out N

Start

Dev select * Byte address Byte address

Sequential Random Read

Start

Dev select * Data out 1

Stop

ACK

R/W

NO ACK

ACK

R/W

ACK ACK ACK

R/W

ACK ACK ACK NO ACK

R/W

NO ACK

ACK ACK ACK

R/W

ACK ACK

R/W

ACK NO ACK

Figure 11. Read mode sequences

1. The seven most significant bits of the device select code of a random read (in the first and fourth bytes)

must be identical.

Doc ID 022208 Rev 5 37/142

Page 38

I2C device operation M24LR04E-R

5.11 Read operations

Read operations are performed independently of the state of the I2C_Write_Lock bit. After the successful completion of a read operation, the device’s internal address counter is

incremented by one, to point to the next byte address.

5.12 Random Address Read

A dummy write is first performed to load the address into this address counter (as shown in

Figure 11) but without sending a Stop condition. Then, the bus master sends another Start

condition, and repeats the device select code, with the Read/Write device acknowledges this, and outputs the contents of the addressed byte. The bus master must not acknowledge the byte, and terminates the transfer with a Stop condition.

bit (RW) set to 1. The

5.13 Current Address Read

For the Current Address Read operation, following a Start condition, the bus master only sends a device select code with the Read/Write this, and outputs the byte addressed by the internal address counter. The counter is then incremented. The bus master terminates the transfer with a Stop condition, as shown in

Figure 11, without acknowledging the byte.

bit (RW) set to 1. The device acknowledges

5.14 Sequential Read

This operation can be used after a Current Address Read or a Random Address Read. The bus master does acknowledge the data byte output, and sends additional clock pulses so that the device continues to output the next byte in sequence. To terminate the stream of bytes, the bus master must not acknowledge the last byte, and must generate a Stop condition, as shown in Figure 11.

The output data come from consecutive addresses, with the internal address counter automatically incremented after each byte output. After the last memory address, the address counter “rolls-over”, and the device continues to output data from memory address 00h.

5.15 Acknowledge in Read mode

For all Read commands, the device waits, after each byte read, for an acknowledgment during the ninth bit time. If the bus master does not drive Serial Data (SDA) low during this time, the device terminates the data transfer and switches to its Standby mode.

38/142 Doc ID 022208 Rev 5

Page 39

M24LR04E-R I2C device operation

ai15125c

Start

Device select

code

Password

address 09h

Password

address 00h

Password

[31:24]

Ack

R/W

Ack Ack Ack

Device select code = 1010 1 1 1

Password

[23:16]

Password

[15:8]

Password

[7:0]

Ack Ack Ack

Ack generated during

bit time slot.

Stop

Validation

code 09h

Ack

Password

[31:24]

Ack

Password

[23:16]

Password

[15:8]

Password

[7:0]

Ack Ack Ack

5.16 M24LR04E-R I2C password security

The M24LR04E-R controls I2C sector write access using the 32-bit-long I2C password and the 64-bit I2C_Write_Lock bit area. The I commands: I

C present password and I2C write password.

C password value is managed using two I2C

5.16.1 I2C present password command description

The I2C present password command is used in I2C mode to present the password to the M24LR04E-R in order to modify the write access rights of all the memory sectors protected by the I2C_Write_Lock bits, including the password itself. If the presented password is correct, the access rights remain activated until the M24LR04E-R is powered off or until a

new I

C present password command is issued.

Following a Start condition, the bus master sends a device select code with the Read/Write bit (RW in Figure 12, and waits for two I responds to each address byte with an acknowledge bit, and then waits for the four password data bytes, the validation code, 09h, and a resend of the four password data bytes. The most significant byte of the password is sent first, followed by the least significant bytes.

It is necessary to send the 32-bit password twice to prevent any data corruption during the sequence. If the two 32-bit passwords sent are not exactly the same, the M24LR04E-R does not start the internal comparison.

When the bus master generates a Stop condition immediately after the Ack bit (during the tenth bit time slot), an internal delay equivalent to the write cycle time is triggered. A Stop condition at any other time does not trigger the internal delay. During that delay, the M24LR04E-R compares the 32 received data bits with the 32 bits of the stored I password. If the values match, the write access rights to all protected sectors are modified after the internal delay. If the values do not match, the protected sectors remains protected.

) reset to 0 and the Chip Enable bit E2 at 1. The device acknowledges this, as shown

C password address bytes 09h and 00h. The device

Figure 12. I

During the internal delay, the serial data (SDA) signal is disabled internally, and the device does not respond to any requests.

C present password command

Doc ID 022208 Rev 5 39/142

Page 40

I2C device operation M24LR04E-R

ai15126b

Start

Device select

code

Password

address 09h

Password

address 00h

New password

[31:24]

Ack

R/W

Ack Ack Ack

Device select code = 1010 1 1 1

New password

[23:16]

New password

[15:8]

New password

[7:0]

Ack Ack Ack

Ack generated during

bit time slot.

Stop

Validation

code 07h

Ack

New password

[31:24]

Ack

New password

[23:16]

New password

[15:8]

New password

[7:0]

Ack Ack Ack

5.16.2 I2C write password command description

The I2C write password command is used to write a 32-bit block into the M24LR04E-R I2C password system area. This command is used in I

C mode to update the I2C password

value. It cannot be used to update any of the RF passwords. After the write cycle, the new

C password value is automatically activated. The I2C password value can only be modified

after issuing a valid I On delivery, the I

C present password command.

C default password value is set to 0000 0000h and is activated.

Following a Start condition, the bus master sends a device select code with the Read/Write bit (RW in Figure 13, and waits for the two I

) reset to 0 and the Chip Enable bit E2 at 1. The device acknowledges this, as shown

C password address bytes, 09h and 00h. The device responds to each address byte with an acknowledge bit, and then waits for the four password data bytes, the validation code, 07h, and a resend of the four password data bytes. The most significant byte of the password is sent first, followed by the least significant bytes.

It is necessary to send twice the 32-bit password to prevent any data corruption during the write sequence. If the two 32-bit passwords sent are not exactly the same, the M24LR04E-R does not modify the I

C password value.

When the bus master generates a Stop condition immediately after the Ack bit (during the tenth bit time slot), the internal write cycle is triggered. A Stop condition at any other time does not trigger the internal write cycle.

During the internal write cycle, the serial data (SDA) signal is disabled internally, and the device does not respond to any requests.

Figure 13. I

C write password command

40/142 Doc ID 022208 Rev 5

Page 41

M24LR04E-R M24LR04E-R memory initial state

6 M24LR04E-R memory initial state

The device is delivered with all bits set to 1 in the user memory array.

● User Memory content : FFh

● System bits delivery

● I2C write lock bits 00h

● Sector Security Status: 00h

● I2C Password: 0000 0000 h

● RF Password: 0000 0000 h

● IC ref: 5Ah

● UID: E0 02 xx xx xx xx h

● DSFID: FFh

● AFI: 00h

● Memory size: 03 7Fh

● Energy Harvesting Configuration byte: F4h

● Bit 7 to bit 4: all set to 1

● Bit 3: set to 0 (RF BUSY mode on RF WIP/BUSY pin)

● Bit 2: set to 1 (Energy harvesting not activated by default)

● Bit 1 and bit 0: set to 0 (fan-out setting)

Doc ID 022208 Rev 5 41/142

Page 42

RF device operation M24LR04E-R

7 RF device operation

The M24LR04E-R is divided into 4 sectors of 32 blocks of 32 bits, as shown in Tab l e 5 . Each sector can be individually read- and/or write-protected using a specific lock or password command.

Read and Write operations are possible if the addressed block is not protected. During a Write, the 32 bits of the block are replaced by the new 32-bit value.

The M24LR04E-R also includes an AFI register in which the application family identifier is stored, and a DSFID register in which the data storage family identifier used in the anticollision algorithm is stored.

The M24LR04E-R has three 32-bit blocks in which the password codes are stored and a 8bit Configuration byte in which the Energy harvesting mode and RF WIP/BUSY pin configuration is stored.

7.1 RF communication and energy harvesting

Because current consumption can affect the AC signal delivered by the antenna, RF communications with M24LR04E-R are not guaranteed during voltage delivery on the energy harvesting analog output Vout.

RF communication can disturb and possibly stop Energy Harvesting mode.

42/142 Doc ID 022208 Rev 5

Page 43

M24LR04E-R RF device operation

7.2 Commands

The M24LR04E-R supports the following commands:

● Inventory, used to perform the anticollision sequence.

● Stay quiet, used to put the M24LR04E-R in quiet mode, where it does not respond to

any inventory command.

● Select, used to select the M24LR04E-R. After this command, the M24LR04E-R

processes all Read/Write commands with Select_flag set.

● Reset to ready, used to put the M24LR04E-R in the ready state.

● Read block, used to output the 32 bits of the selected block and its locking status.

● Write block, used to write the 32-bit value in the selected block, provided that it is not

locked.

● Read multiple blocks, used to read the selected blocks and send back their value.

● Write AFI, used to write the 8-bit value in the AFI register.

● Lock AFI, used to lock the AFI register.

● Write DSFID, used to write the 8-bit value in the DSFID register.

● Lock DSFID, used to lock the DSFID register.

● Get system info, used to provide the system information value

● Get multiple block security status, used to send the security status of the selected

block.

● Initiate, used to trigger the tag response to the Inventory initiated sequence.

● Inventory initiated, used to perform the anticollision sequence triggered by the Initiate

command.

● Write-sector password, used to write the 32 bits of the selected password.

● Lock-sector, used to write the sector security status bits of the selected sector.

● Present-sector password, enables the user to present a password to unprotect the

user blocks linked to this password.

● Fast initiate, used to trigger the tag response to the Inventory initiated sequence.

● Fast inventory initiated, used to perform the anticollision sequence triggered by the

Initiate command.

● Fast read single block, used to output the 32 bits of the selected block and its locking

status.

● Fast read multiple blocks, used to read the selected blocks and send back their value.

● ReadCfg, used to read the 8-bit Configuration byte and send back its value.

● WriteEHCfg, used to write the energy harvesting configuration bits into the

Configuration byte.

● WriteDOCfg, used to write the RF WIP/BUSY pin configuration bit into the

Configuration byte.

● SetRstEHEn, used to set or reset the EH_enable bit into the volatile Control register.

● CheckEHEn, used to send back the value of the volatile Control register.

Doc ID 022208 Rev 5 43/142

Page 44

RF device operation M24LR04E-R

7.3 Initial dialog for vicinity cards

The dialog between the vicinity coupling device or VCD (commonly the “RF reader”) and the vicinity integrated circuit card or VICC (M24LR04E-R) takes place as follows:

● activation of the M24LR04E-R by the RF operating field of the VCD,

● transmission of a command by the VCD,

● transmission of a response by the M24LR04E-R.

These operations use the RF power transfer and communication signal interface described below (see Power transfer, Frequency and Operating field). This technique is called RTF (Reader talk first).

7.3.1 Power transfer

Power is transferred to the M24LR04E-R by radio frequency at 13.56 MHz via coupling antennas in the M24LR04E-R and the VCD. The RF operating field of the VCD is transformed on the M24LR04E-R antenna to an AC voltage which is rectified, filtered and internally regulated.

During communications, the amplitude modulation (ASK) on this received signal is demodulated by the ASK demodulator.

7.3.2 Frequency

The ISO 15693 standard defines the carrier frequency (fC) of the operating field as

13.56 MHz ±7 kHz.

7.3.3 Operating field

The M24LR04E-R operates continuously between the minimum and maximum values of the electromagnetic field H defined in Table 123. The VCD has to generate a field within these limits.

44/142 Doc ID 022208 Rev 5

Page 45

M24LR04E-R Communication signal from VCD to M24LR04E-R

105%

95%

60%

Carrier

Amplitude

Min (µs)

6,0

2,1

Max (µs)

9,44

4,5

0 0,8

The clock recovery shall be operational after t

max.

ai15793

8 Communication signal from VCD to M24LR04E-R

Communications between the VCD and the M24LR04E-R takes place using the modulation principle of ASK (Amplitude shift keying). Two modulation indexes are used, 10% and 100%. The M24LR04E-R decodes both. The VCD determines which index is used.

The modulation index is defined as [a – b]/[a + b], where a is the peak signal amplitude, and b the minimum signal amplitude of the carrier frequency.

Depending on the choice made by the VCD, a “pause” is created as described in Figure 14 and Figure 15.

The M24LR04E-R is operational for the 100% modulation index or for any degree of modulation index between 10% and 30% (see Ta bl e 1 2 3).

Figure 14. 100% modulation waveform

Doc ID 022208 Rev 5 45/142

Page 46

Communication signal from VCD to M24LR04E-R M24LR04E-R

Table 19. 10% modulation parameters

Symbol Parameter definition Value

hr 0.1 x (a – b) max

hf 0.1 x (a – b) max

Figure 15. 10% modulation waveform

Carrier

Amplitude

t1 t2 3,0 µs

t2 3,0 µs

t2 3,0 µs t3 0

t3 0

Modulation

Index

Min

6,0 µs

10%

Max

9,44 µs

4,5 µs

30%

y 0,05 (a-b)

hf, hr 0,1 (a-b) max

The VICC shall be operational for any value of modulation index between 10 % and 30 %.

ai15794

46/142 Doc ID 022208 Rev 5

Page 47

M24LR04E-R Data rate and data coding

AI06656

0 1 2 3 . . . . . . . . 2 . . . . . . . . . . . . . . . . . . . . . 2 2 2 2

. . . . . . . . . 2 . . . . . . . . . . . . . . . . . . . . . 5 5 5 5

. . . . . . . . . 5 . . . . . . . . . . . . . . . . . . . . . 2 3 4 5

4.833 ms

18.88 µs

9.44 µs

Pulse Modulated Carrier

9 Data rate and data coding

The data coding implemented in the M24LR04E-R uses pulse position modulation. Both data coding modes that are described in the ISO15693 are supported by the M24LR04E-R. The selection is made by the VCD and indicated to the M24LR04E-R within the start of frame (SOF).

9.1 Data coding mode: 1 out of 256

The value of one single byte is represented by the position of one pause. The position of the pause on 1 of 256 successive time periods of 18.88 µs (256/f byte. In this case, the transmission of one byte takes 4.833 ms and the resulting data rate is

1.65 Kbits/s (f

/8192).

Figure 16 illustrates this pulse position modulation technique. In this figure, data E1h (225

decimal) is sent by the VCD to the M24LR04E-R. The pause occurs during the second half of the position of the time period that determines

the value, as shown in Figure 17. A pause during the first period transmits the data value 00h. A pause during the last period

transmits the data value FFh (255 decimal).

) determines the value of the

Figure 16. 1 out of 256 coding mode

Doc ID 022208 Rev 5 47/142

Page 48

Data rate and data coding M24LR04E-R

AI06657

2 2 5

18.88 µs

9.44 µs

Pulse Modulated Carrier

2 2 6

2 2 4

. . . . . . .. . . . . . .

Time Period

one of 256

Figure 17. Detail of a time period

9.2 Data coding mode: 1 out of 4

The value of two bits is represented by the position of one pause. The position of the pause on 1 of 4 successive time periods of 18.88 µs (256/f Four successive pairs of bits form a byte, where the least significant pair of bits is transmitted first.

In this case, the transmission of one byte takes 302.08 µs and the resulting data rate is

26.48 Kbits/s (f coding. Figure 19 shows the transmission of E1h (225d - 1110 0001b) by the VCD.

/512). Figure 18 illustrates the 1 out of 4 pulse position technique and

) determines the value of the two bits.

48/142 Doc ID 022208 Rev 5

Page 49

M24LR04E-R Data rate and data coding

AI06658

9.44 µs 9.44 µs

75.52 µs

28.32 µs 9.44 µs

75.52 µs

47.20µs 9.44 µs

75.52 µs

66.08 µs 9.44 µs

75.52 µs

Pulse position for "00"

Pulse position for "11"

Pulse position for "10" (0=LSB)

Pulse position for "01" (1=LSB)

AI06659

75.52µs75.52µs 75.52µs 75.52µs

01 11

Figure 18. 1 out of 4 coding mode

Figure 19. 1 out of 4 coding example

Doc ID 022208 Rev 5 49/142

Page 50

Data rate and data coding M24LR04E-R

AI06661

37.76µs

9.44µs

37.76µs

AI06660

37.76µs

9.44µs

37.76µs

9.44µs

9.3 VCD to M24LR04E-R frames

Frames are delimited by a start of frame (SOF) and an end of frame (EOF). They are implemented using code violation. Unused options are reserved for future use.

The M24LR04E-R is ready to receive a new command frame from the VCD 311.5 µs (t after sending a response frame to the VCD.

The M24LR04E-R takes a power-up time of 0.1 ms after being activated by the powering field. After this delay, the M24LR04E-R is ready to receive a command frame from the VCD.

9.4 Start of frame (SOF)

The SOF defines the data coding mode the VCD is to use for the following command frame. The SOF sequence described in Figure 20 selects the 1 out of 256 data coding mode. The SOF sequence described in Figure 21 selects the 1 out of 4 data coding mode. The EOF sequence for either coding mode is described in Figure 22.

Figure 20. SOF to select 1 out of 256 data coding mode

)

Figure 21. SOF to select 1 out of 4 data coding mode

50/142 Doc ID 022208 Rev 5

Page 51

M24LR04E-R Data rate and data coding

AI06662

9.44µs

37.76µs

9.44µs

Figure 22. EOF for either data coding mode

Doc ID 022208 Rev 5 51/142

Page 52

Communication signal from M24LR04E-R to VCD M24LR04E-R

10 Communication signal from M24LR04E-R to VCD

The M24LR04E-R has several modes defined for some parameters, owing to which it can operate in various noise environments and meet various application requirements.

10.1 Load modulation

The M24LR04E-R is capable of communication to the VCD via an inductive coupling area whereby the carrier is loaded to generate a subcarrier with frequency f generated by switching a load in the M24LR04E-R.

The load-modulated amplitude received on the VCD antenna must be of at least 10 mV when measured as described in the test methods defined in International Standard ISO10373-7.

10.2 Subcarrier

The M24LR04E-R supports the one-subcarrier and two-subcarrier response formats. These formats are selected by the VCD using the first bit in the protocol header. When one subcarrier is used, the frequency f When two subcarriers are used, the frequency f is 484.28 kHz (f continuous phase relationship between f

of the subcarrier load modulation is 423.75 kHz (fC/32).

/28). When using the two-subcarrier mode, the M24LR04E-R generates a

and fS2.

is 423.75 kHz (fC/32), and frequency fS2

. The subcarrier is

10.3 Data rates

The M24LR04E-R can respond using the low or the high data rate format. The selection of the data rate is made by the VCD using the second bit in the protocol header. For fast commands, the selected data rate is multiplied by two. Ta b le 2 0 shows the different data rates produced by the M24LR04E-R using the different response format combinations.

Table 20. Response data rates

Data rate One subcarrier Two subcarriers

Standard commands 6.62 Kbit/s (f

Low

Fast commands 13.24 Kbit/s (f

High

Standard commands 26.48 Kbit/s (f

Fast commands 52.97 Kbit/s (f

/2048) 6.67 Kbit/s (fc/2032)

/1024) not applicable

/512) 26.69 Kbit/s (fc/508)

/256) not applicable

52/142 Doc ID 022208 Rev 5

Page 53

M24LR04E-R Bit representation and coding

37.76µs

ai12076

18.88µs

ai12066

37.76µs

ai12077

18.88µs

ai12067

11 Bit representation and coding

Data bits are encoded using Manchester coding, according to the following schemes. For the low data rate, same subcarrier frequency or frequencies is/are used. In this case, the number of pulses is multiplied by 4 and all times increase by this factor. For the Fast commands using one subcarrier, all pulse numbers and times are divided by 2.

11.1 Bit coding using one subcarrier

11.1.1 High data rate

A logic 0 starts with eight pulses at 423.75 kHz (fC/32) followed by an unmodulated time of

18.88 µs, as shown in Figure 23.

Figure 23. Logic 0, high data rate

For the fast commands, a logic 0 starts with four pulses at 423.75 kHz (f

/32) followed by an

unmodulated time of 9.44 µs, as shown in Figure 24.

Figure 24. Logic 0, high data rate, fast commands

A logic 1 starts with an unmodulated time of 18.88 µs followed by eight pulses at 423.75 kHz (f

/32), as shown in Figure 25.

Figure 25. Logic 1, high data rate

For the Fast commands, a logic 1 starts with an unmodulated time of 9.44 µs followed by four pulses of 423.75 kHz (f

/32), as shown in Figure 26.

Figure 26. Logic 1, high data rate, fast commands

Doc ID 022208 Rev 5 53/142

Page 54

Bit representation and coding M24LR04E-R

151.04µs

ai12068

75.52µs

ai12069

151.04µs

ai12070

75.52µs

ai12071

11.1.2 Low data rate

A logic 0 starts with 32 pulses at 423.75 kHz (fC/32) followed by an unmodulated time of

75.52 µs, as shown in Figure 27.

Figure 27. Logic 0, low data rate

For the Fast commands, a logic 0 starts with 16 pulses at 423.75 kHz (f

/32) followed by an

unmodulated time of 37.76 µs, as shown in Figure 28.

Figure 28. Logic 0, low data rate, fast commands

A logic 1 starts with an unmodulated time of 75.52 µs followed by 32 pulses at 423.75 kHz (f

/32), as shown in Figure 29.

Figure 29. Logic 1, low data rate

For the Fast commands, a logic 1 starts with an unmodulated time of 37.76 µs followed by 16 pulses at 423.75 kHz (f

/32), as shown in Figure 30.

Figure 30. Logic 1, low data rate, fast commands

54/142 Doc ID 022208 Rev 5

Page 55

M24LR04E-R Bit representation and coding

37.46µs

ai12074

37.46µs

ai12073

149.84µs

ai12072

149.84µs

ai12075

11.2 Bit coding using two subcarriers

11.2.1 High data rate

A logic 0 starts with eight pulses at 423.75 kHz (fC/32) followed by nine pulses at

484.28 kHz (f for the Fast commands.

Figure 31. Logic 0, high data rate

/28), as shown in Figure 31. Bit coding using two subcarriers is not supported

A logic 1 starts with nine pulses at 484.28 kHz (f

423.75 kHz (f

/32), as shown in Figure 32. Bit coding using two subcarriers is not supported

for the Fast commands.

Figure 32. Logic 1, high data rate

11.2.2 Low data rate

A logic 0 starts with 32 pulses at 423.75 kHz (fC/32) followed by 36 pulses at 484.28 kHz (f

/28), as shown in Figure 33. Bit coding using two subcarriers is not supported for the Fast

commands.

Figure 33. Logic 0, low data rate

A logic 1 starts with 36 pulses at 484.28 kHz (f (f

/32) as shown in Figure 34. Bit coding using two subcarriers is not supported for the Fast

commands.

/28) followed by eight pulses at

/28) followed by 32 pulses at 423.75 kHz

Figure 34. Logic 1, low data rate

Doc ID 022208 Rev 5 55/142

Page 56

M24LR04E-R to VCD frames M24LR04E-R

113.28µs

ai12078

37.76µs

56.64µs

ai12079

18.88µs

453.12µs

ai12080

151.04µs

12 M24LR04E-R to VCD frames

Frames are delimited by an SOF and an EOF. They are implemented using code violation. Unused options are reserved for future use. For the low data rate, the same subcarrier frequency or frequencies is/are used. In this case, the number of pulses is multiplied by 4. For the Fast commands using one subcarrier, all pulse numbers and times are divided by 2.

12.1 SOF when using one subcarrier

12.1.1 High data rate

The SOF includes an unmodulated time of 56.64 µs, followed by 24 pulses at 423.75 kHz (f

/32), and a logic 1 that consists of an unmodulated time of 18.88 µs followed by eight

pulses at 423.75 kHz, as shown in Figure 35.

Figure 35. Start of frame, high data rate, one subcarrier

For the Fast commands, the SOF comprises an unmodulated time of 28.32 µs, followed by 12 pulses at 423.75 kHz (f

9.44 µs followed by four pulses at 423.75 kHz, as shown in Figure 36.

Figure 36. Start of frame, high data rate, one subcarrier, fast commands

12.1.2 Low data rate

The SOF comprises an unmodulated time of 226.56 µs, followed by 96 pulses at 423.75 kHz (f

/32), and a logic 1 that consists of an unmodulated time of 75.52 µs followed by 32 pulses

at 423.75 kHz, as shown in Figure 37.

Figure 37. Start of frame, low data rate, one subcarrier

/32), and a logic 1 that consists of an unmodulated time of

56/142 Doc ID 022208 Rev 5

Page 57

M24LR04E-R M24LR04E-R to VCD frames

226.56µs

ai12081

75.52µs

112.39µs

ai12082

37.46µs

449.56µs

ai12083

149.84µs

For the Fast commands, the SOF comprises an unmodulated time of 113.28 µs, followed by 48 pulses at 423.75 kHz (f

/32), and a logic 1 that includes an unmodulated time of 37.76 µs

followed by 16 pulses at 423.75 kHz, as shown in Figure 38.

Figure 38. Start of frame, low data rate, one subcarrier, fast commands

12.2 SOF when using two subcarriers

12.2.1 High data rate

The SOF comprises 27 pulses at 484.28 kHz (fC/28), followed by 24 pulses at 423.75 kHz (f

/32), and a logic 1 that includes nine pulses at 484.28 kHz followed by eight pulses at

423.75 kHz, as shown in Figure 39. Bit coding using two subcarriers is not supported for the Fast commands.

Figure 39. Start of frame, high data rate, two subcarriers

12.2.2 Low data rate

The SOF comprises 108 pulses at 484.28 kHz (fC/28), followed by 96 pulses at 423.75 kHz (f

/32), and a logic 1 that includes 36 pulses at 484.28 kHz followed by 32 pulses at

423.75 kHz, as shown in Figure 40. Bit coding using two subcarriers is not supported for the Fast commands.

Figure 40. Start of frame, low data rate, two subcarriers

Doc ID 022208 Rev 5 57/142

Page 58

M24LR04E-R to VCD frames M24LR04E-R

113.28µs

ai12084

37.76µs

56.64µs

ai12085

18.88µs

453.12µs

ai12086

151.04µs

226.56µs

ai12087

75.52µs

12.3 EOF when using one subcarrier

12.3.1 High data rate

The EOF comprises a logic 0 that includes eight pulses at 423.75 kHz and an unmodulated time of 18.88 µs, followed by 24 pulses at 423.75 kHz (f of 56.64 µs, as shown in Figure 41.

Figure 41. End of frame, high data rate, one subcarrier

For the Fast commands, the EOF comprises a logic 0 that includes four pulses at

423.75 kHz and an unmodulated time of 9.44 µs, followed by 12 pulses at 423.75 kHz (f

/32) and an unmodulated time of 37.76 µs, as shown in Figure 42.

Figure 42. End of frame, high data rate, one subcarrier, fast commands

/32), and by an unmodulated time

12.3.2 Low data rate

The EOF comprises a logic 0 that includes 32 pulses at 423.75 kHz and an unmodulated time of 75.52 µs, followed by 96 pulses at 423.75 kHz (f

226.56 µs, as shown in Figure 43.

Figure 43. End of frame, low data rate, one subcarrier

For the Fast commands, the EOF comprises a logic 0 that includes 16 pulses at 423.75 kHz and an unmodulated time of 37.76 µs, followed by 48 pulses at 423.75 kHz (f unmodulated time of 113.28 µs, as shown in Figure 44.

Figure 44. End of frame, low data rate, one subcarrier, Fast commands

/32) and an unmodulated time of

/32) and an

58/142 Doc ID 022208 Rev 5

Page 59

M24LR04E-R M24LR04E-R to VCD frames

112.39µs

ai12088

37.46µs

449.56µs

ai12089

149.84µs

12.4 EOF when using two subcarriers

12.4.1 High data rate

The EOF comprises a logic 0 that includes eight pulses at 423.75 kHz and nine pulses at

484.28 kHz, followed by 24 pulses at 423.75 kHz (f (f

/28), as shown in Figure 45.

Bit coding using two subcarriers is not supported for the Fast commands.

Figure 45. End of frame, high data rate, two subcarriers

12.4.2 Low data rate

The EOF comprises a logic 0 that includes 32 pulses at 423.75 kHz and 36 pulses at

484.28 kHz, followed by 96 pulses at 423.75 kHz (f (f

/28), as shown in Figure 46.

Bit coding using two subcarriers is not supported for the Fast commands.

/32) and 27 pulses at 484.28 kHz

/32) and 108 pulses at 484.28 kHz

Figure 46. End of frame, low data rate, two subcarriers

Doc ID 022208 Rev 5 59/142

Page 60

Unique identifier (UID) M24LR04E-R

13 Unique identifier (UID)

The M24LR04E-R is uniquely identified by a 64-bit unique identifier (UID). This UID complies with ISO/IEC 15963 and ISO/IEC 7816-6. The UID is a read-only code and comprises:

● eight MSBs with a value of E0h,

● the IC manufacturer code “ST 02h” on 8 bits (ISO/IEC 7816-6/AM1),

● a unique serial number on 48 bits.

Table 21. UID format

MSB LSB

63 56 55 48 47 0

0xE0 0x02 Unique serial number

With the UID, each M24LR04E-R can be addressed uniquely and individually during the anticollision loop and for one-to-one exchanges between a VCD and an M24LR04E-R.

60/142 Doc ID 022208 Rev 5

Page 61

M24LR04E-R Application family identifier (AFI)

14 Application family identifier (AFI)

The AFI (application family identifier) represents the type of application targeted by the VCD and is used to identify, among all the M24LR04E-Rs present, only the M24LR04E-Rs that meet the required application criteria.

Figure 47. M24LR04E-R decision tree for AFI

Inventory request

received

Answer given by the M24RF64

AFI flag

set ?

Yes

AFI value

= 0 ?

Yes

to the Inventory request

AFI value = Internal

value ?

Yes

No answer

AI15130

The AFI is programmed by the M24LR04E-R issuer (or purchaser) in the AFI register. Once programmed and locked, it can no longer be modified.

The most significant nibble of the AFI is used to code one specific or all application families. The least significant nibble of the AFI is used to code one specific or all application

subfamilies. Subfamily codes different from 0 are proprietary. (See ISO 15693-3 documentation.)

Doc ID 022208 Rev 5 61/142

Page 62

Data storage format identifier (DSFID) M24LR04E-R

15 Data storage format identifier (DSFID)

The data storage format identifier indicates how the data is structured in the M24LR04E-R memory. The logical organization of data can be known instantly using the DSFID. It can be programmed and locked using the Write DSFID and Lock DSFID commands.

15.1 CRC

The CRC used in the M24LR04E-R is calculated as per the definition in ISO/IEC 13239. The initial register contents are all ones: “FFFF”.

The two-byte CRC is appended to each request and response, within each frame, before the EOF. The CRC is calculated on all the bytes after the SOF up to the CRC field.

Upon reception of a request from the VCD, the M24LR04E-R verifies that the CRC value is valid. If it is invalid, the M24LR04E-R discards the frame and does not answer to the VCD.

Upon reception of a response from the M24LR04E-R, it is recommended that the VCD verifies whether the CRC value is valid. If it is invalid, actions to be performed are left to the discretion of the VCD designer.

The CRC is transmitted least significant byte first. Each byte is transmitted least significant bit first.

Table 22. CRC transmission rules

LSBit MSBit

LSByte

LSBit MSBit

CRC 16 (8 bits) CRC 16 (8 bits)

MSByte

62/142 Doc ID 022208 Rev 5

Page 63

M24LR04E-R M24LR04E-R protocol description

16 M24LR04E-R protocol description

The transmission protocol (or simply “the protocol”) defines the mechanism used to exchange instructions and data between the VCD and the M24LR04E-R in both directions. It is based on the concept of “VCD talks first”.

This means that an M24LR04E-R does not start transmitting unless it has received and properly decoded an instruction sent by the VCD. The protocol is based on an exchange of:

● a request from the VCD to the M24LR04E-R,

● a response from the M24LR04E-R to the VCD.

Each request and each response are contained in a frame. The frame delimiters (SOF, EOF) are described in Section 12: M24LR04E-R to VCD frames.

Each request consists of:

● a request SOF (see Figure 20 and Figure 21),

● flags,

● a command code,

● parameters depending on the command,

● application data,

● a 2-byte CRC,

● a request EOF (see Figure 22).

Each response consists of:

● an answer SOF (see Figure 35 to Figure 40),

● flags,

● parameters depending on the command,

● application data,

● a 2-byte CRC,

● an answer EOF (see Figure 41 to Figure 46).

The protocol is bit-oriented. The number of bits transmitted in a frame is a multiple of eight (8), that is an integer number of bytes.

A single-byte field is transmitted least significant bit (LSBit) first. A multiple-byte field is transmitted least significant byte (LSByte) first and each byte is transmitted least significant bit (LSBit) first.

The setting of the flags indicates the presence of the optional fields. When the flag is set (to one), the field is present. When the flag is reset (to zero), the field is absent.

Table 23. VCD request frame format

Request SOF Request_flags

Table 24. M24LR04E-R Response frame format

Response

SOF

Response_flags Parameters Data 2-byte CRC

Command

code

Parameters Data 2-byte CRC

Request

EOF

Response

EOF

Doc ID 022208 Rev 5 63/142

Page 64

M24LR04E-R protocol description M24LR04E-R

Figure 48. M24LR04E-R protocol timing

Request

VCD

frame

(Ta bl e 2 3 )

M24LR04

E-R

Timing <-t

Request

frame

(Ta bl e 2 3 )

Response

frame

(Ta bl e 2 4 )

-> <-t2-> <-t1-> <-t2->

Response

frame

(Ta bl e 2 4 )

64/142 Doc ID 022208 Rev 5

Page 65

M24LR04E-R M24LR04E-R states

17 M24LR04E-R states

An M24LR04E-R can be in one of four states:

● Power-off

● Ready

● Quiet

● Selected

Transitions between these states are specified in Figure 49 and Ta bl e 2 5 .

17.1 Power-off state

The M24LR04E-R is in the Power-off state when it does not receive enough energy from the VCD.

17.2 Ready state

The M24LR04E-R is in the Ready state when it receives enough energy from the VCD. When in the Ready state, the M24LR04E-R answers any request where the Select_flag is not set.

17.3 Quiet state

When in the Quiet state, the M24LR04E-R answers any request except for Inventory requests with the Address_flag set.

17.4 Selected state

In the Selected state, the M24LR04E-R answers any request in all modes (see Section 18):

● Request in Select mode with the Select_flag set

● Request in Addressed mode if the UID matches

● Request in Non-Addressed mode as it is the mode for general requests

Doc ID 022208 Rev 5 65/142

Page 66

M24LR04E-R states M24LR04E-R

AI06681b

Power-off

In field

Out of field

Ready

Quiet

Selected

Any other Command

where Select_Flag

is not set

Stay quiet(UID)

Select (UID)

Any other command

Any other command where the

Address_Flag is set AND

where Inventory_Flag is not set

Stay quiet(UID)

Select

(UID)

Reset to ready where

Select_Flag is set or

Select(different

UID)

Reset to ready

Out of RF field after t

RF_OFF

Out of RF field after t

RF_OFF

after t

RF_OFF

Table 25. M24LR04E-R response depending on Request_flags

Address_flag Select_flag

Flags

Addressed0Non addressed

Selected0Non selected

M24LR04E-R in Ready or Selected state (Devices in Quiet

state do not answer)

M24LR04E-R in Selected state X X

M24LR04E-R in Ready, Quiet or Selected state (the device which

matches the UID)

Error (03h) X X

Figure 49. M24LR04E-R state transition diagram

1. The M24LR04E-R returns to the Power Off state if the tag is out of the RF field for at least t

refer to application note AN4125 for more information.

2. The intention of the state transition method is that only one M24LR04E-R should be in the Selected state at

a time.

66/142 Doc ID 022208 Rev 5

RF_OFF

. Please

Page 67

M24LR04E-R Modes

18 Modes

The term “mode” refers to the mechanism used in a request to specify the set of M24LR04E-Rs that answers the request.

18.1 Addressed mode

When the Address_flag is set to 1 (Addressed mode), the request contains the Unique ID (UID) of the addressed M24LR04E-R.

Any M24LR04E-R that receives a request with the Address_flag set to 1 compares the received Unique ID to its own. If it matches, then the M24LR04E-R executes the request (if possible) and returns a response to the VCD as specified in the command description.

If the UID does not match, then it remains silent.

18.2 Non-addressed mode (general request)

When the Address_flag is cleared to 0 (Non-Addressed mode), the request does not contain a Unique ID. Any M24LR04E-R receiving a request with the Address_flag cleared to 0 executes it and returns a response to the VCD as specified in the command description.

18.3 Select mode

When the Select_flag is set to 1 (Select mode), the request does not contain an M24LR04ER Unique ID. The M24LR04E-R in the Selected state that receives a request with the Select_flag set to 1 executes it and returns a response to the VCD as specified in the command description.

Only M24LR04E-Rs in the Selected state answer a request where the Select_flag set to 1. The system design ensures in theory that only one M24LR04E-R can be in the Select state

at a time.

Doc ID 022208 Rev 5 67/142

Page 68

Request format M24LR04E-R

19 Request format

The request consists of:

● an SOF,

● flags,

● a command code,

● parameters and data,

● a CRC,

● an EOF.

Table 26. General request format

S OFRequest_flags Command code Parameters Data CRCEO

19.1 Request flags

In a request, the “flags” field specifies the actions to be performed by the M24LR04E-R and whether corresponding fields are present or not.

The flags field consists of eight bits. Bit 3 (Inventory_flag) of the request flag defines the contents of the four MSBs (bits 5 to 8). When bit 3 is reset (0), bits 5 to 8 define the M24LR04E-R selection criteria. When bit 3 is set (1), bits 5 to 8 define the M24LR04E-R Inventory parameters.

Table 27. Definition of request flags 1 to 4

Bit No Flag Level Description

A single subcarrier frequency is used by the

Bit 1 Subcarrier_flag

Bit 2 Data_rate_flag

(1)

(2)

Bit 3 Inventory_flag

Bit 4 Protocol_extension_flag

1. Subcarrier_flag refers to the M24LR04E-R-to-VCD communication.

2. Data_rate_flag refers to the M24LR04E-R-to-VCD communication.

3. Protocol_extension_flag must always be set to 0.

(3)

M24LR04E-R

1 Two subcarrier are used by the M24LR04E-R

0 Low data rate is used

1 High data rate is used

0 The meaning of flags 5 to 8 is described in Ta bl e 2 8

1 The meaning of flags 5 to 8 is described in Ta bl e 2 9

0 No Protocol format extension

68/142 Doc ID 022208 Rev 5

Page 69

M24LR04E-R Request format

Table 28. Request flags 5 to 8 when Bit 3 = 0

Bit No Flag Level Description

Request is executed by any M24LR04E-R according to the setting

Bit 5 Select flag

(1)

Bit 6 Address flag

Bit 7 Option flag

Bit 8 RFU 0

1. If the Select_flag is set to 1, the Address_flag is set to 0 and the UID field is not present in the request.

Table 29. Request flags 5 to 8 when Bit 3 = 1

Bit No Flag Level Description

of Address_flag

1 Request is executed only by the M24LR04E-R in Selected state

Request is not addressed. UID field is not present. The request is

executed by all M24LR04E-Rs.

(1)

Request is addressed. UID field is present. The request is

executed only by the M24LR04E-R whose UID matches the UID specified in the request.

0 Option not activated.

1 Option activated.

Bit 5 AFI flag

Bit 6 Nb_slots flag

Bit 7 Option flag 0

Bit 8 RFU 0

0 AFI field is not present

1 AFI field is present

0 16 slots

11 slot

Doc ID 022208 Rev 5 69/142

Page 70

Response format M24LR04E-R

20 Response format

The response consists of:

● an SOF,

● flags,

● parameters and data,

● a CRC,

● an EOF.

Table 30. General response format

S O F

20.1 Response flags

In a response, the flags indicate how actions have been performed by the M24LR04E-R and whether corresponding fields are present or not. The response flags consist of eight bits.

Table 31. Definitions of response flags 1 to 8

Response_flags Parameters Data CRCEO

Bit No Flag Level Description

0 No error

Bit 1 Error_flag

1 Error detected. Error code is in the “Error” field.

Bit 2 RFU 0

Bit 3 RFU 0

Bit 4 Extension flag 0 No extension

Bit 5 RFU 0

Bit 6 RFU 0

Bit 7 RFU 0

Bit 8 RFU 0

70/142 Doc ID 022208 Rev 5

Page 71

M24LR04E-R Response format

20.2 Response error code

If the Error_flag is set by the M24LR04E-R in the response, the Error code field is present and provides information about the error that occurred.

Error codes not specified in Ta bl e 3 2 are reserved for future use.

Table 32. Response error code definition

Error code Meaning

03h The option is not supported.

0Fh Error with no information given.

10h The specified block is not available.

11h The specified block is already locked and thus cannot be locked again.

12h The specified block is locked and its contents cannot be changed.

13h The specified block was not successfully programmed.

14h The specified block was not successfully locked.

15h The specified block is read-protected.

Doc ID 022208 Rev 5 71/142

Page 72

Anticollision M24LR04E-R

21 Anticollision

The purpose of the anticollision sequence is to inventory the M24LR04E-Rs present in the VCD field using their unique ID (UID).

The VCD is the master of communications with one or several M24LR04E-Rs. It initiates M24LR04E-R communication by issuing the Inventory request.

The M24LR04E-R sends its response in the determined slot or does not respond.

21.1 Request parameters

When issuing the Inventory Command, the VCD:

● sets the Nb_slots_flag as desired,

● adds the mask length and the mask value after the command field.

● The mask length is the number of significant bits of the mask value.

● The mask value is contained in an integer number of bytes. The mask length indicates

the number of significant bits. LSB is transmitted first.

● If the mask length is not a multiple of 8 (bits), as many 0-bits as required are added to

the mask value MSB so that the mask value is contained in an integer number of bytes.

● The next field starts at the next byte boundary.

Table 33. Inventory request format

MSB LSB

SOF

Request_

flags

Command

Optional

AFI

Mask

length

Mask value CRC EOF

8 bits 8 bits 8 bits 8 bits 0 to 8 bytes 16 bits

In the example provided in Ta bl e 3 4 and Figure 50, the mask length is 11 bits. Five 0-bits are added to the mask value MSB. The 11-bit mask and the current slot number are compared to the UID.

Table 34. Example of the addition of 0-bits to an 11-bit mask value

(b15) MSB LSB (b0)

0000 0 100 1100 1111

0-bits added 11-bit mask value

72/142 Doc ID 022208 Rev 5

Page 73

M24LR04E-R Anticollision

AI06682

Mask value received in the Inventory command 0000 0100 1100 1111b16 bits

The Mask value less the padding 0s is loaded into the Tag comparator

100 1100 1111b11 bits

The Slot counter is calculated

xxxxNb_slots_flags = 0 (16 slots), Slot Counter is 4 bits

The Slot counter is concatened to the Mask value

xxxx 100 1100 1111

Nb_slots_flags = 0 15 bits

The concatenated result is compared with the least significant bits of the Tag UID.

xxxx xxxx ..... xxxx xxxx x xxx xxxx xxxx xxxx 64 bits

LSBMSB

b0b63

CompareBits ignored

UID

4 bits

Figure 50. Principle of comparison between the mask, the slot number and the UID

The AFI field is present if the AFI_flag is set. The pulse is generated according to the definition of the EOF in ISO/IEC 15693-2. The first slot starts immediately after the request EOF is received. To switch to the next slot,

the VCD sends an EOF. The following rules and restrictions apply:

● If no M24LR04E-R answer is detected, the VCD may switch to the next slot by sending

an EOF.

● If one or more M24LR04E-R answers are detected, the VCD waits until the complete

frame has been received before sending an EOF for switching to the next slot.

Doc ID 022208 Rev 5 73/142

Page 74

Request processing by the M24LR04E-R M24LR04E-R

22 Request processing by the M24LR04E-R

Upon reception of a valid request, the M24LR04E-R performs the following algorithm:

● NbS is the total number of slots (1 or 16)

● SN is the current slot number (0 to 15)

● LSB (value, n) function returns the n Less Significant Bits of value

● MSB (value, n) function returns the n Most Significant Bits of value

● “&” is the concatenation operator

● Slot_Frame is either an SOF or an EOF

SN = 0 if (Nb_slots_flag)

then NbS = 1

SN_length = 0 endif

else NbS = 16

SN_length = 4 endif

label1: if LSB(UID, SN_length + Mask_length) =

LSB(SN,SN_length)&LSB(Mask,Mask_length)

then answer to inventory request

endif

wait (Slot_Frame)

if Slot_Frame = SOF

then Stop Anticollision

decode/process request exit endif

if Slot_Frame = EOF

if SN < NbS-1

then SN = SN + 1

goto label1 exit endif

endif

74/142 Doc ID 022208 Rev 5

Page 75

M24LR04E-R Explanation of the possible cases

23 Explanation of the possible cases

Figure 51 summarizes the main possible cases that can occur during an anticollision

sequence when the number of slots is 16. The sequence of steps is as follows:

● The VCD sends an Inventory request, in a frame terminated by an EOF. The number of

slots is 16.

● M24LR04E-R_1 transmits its response in Slot 0. It is the only one to do so, therefore no

collision occurs and its UID is received and registered by the VCD.

● The VCD sends an EOF in order to switch to the next slot.

● In Slot 1, two M24LR04E-Rs, M24LR04E-R_2 and M24LR04E-R_3 transmit a

response, thus generating a collision. The VCD records the event and registers that a collision was detected in Slot 1.

● The VCD sends an EOF in order to switch to the next slot.

● In Slot 2, no M24LR04E-R transmits a response. Therefore the VCD does not detect

any M24LR04E-R SOF and switches to the next slot by sending an EOF.

● In Slot 3, another collision occurs due to responses from M24LR04E-R_4 and

M24LR04E-R_5.

● The VCD sends a request (for instance a Read Block) to M24LR04E-R_1 whose UID

has already been correctly received.

● All M24LR04E-Rs detect an SOF and exit the anticollision sequence. They process this

request and since the request is addressed to M24LR04E-R_1, only M24LR04E-R_1 transmits a response.

● All M24LR04E-Rs are ready to receive another request. If it is an Inventory command,

the slot numbering sequence restarts from 0.

Note: The decision to interrupt the anticollision sequence is made by the VCD. It could have

continued to send EOFs until Slot 16 and only then sent the request to M24LR04E-R_1.

Doc ID 022208 Rev 5 75/142

Page 76

76/142 Doc ID 022208 Rev 5

Explanation of the possible cases M24LR04E-R

Figure 51. Description of a possible anticollision sequence

Slot 0 Slot 1 Slot 2 Slot 3

VCD SOF

M24RF64s

Timing t1 t2 t1 t2 t3 t1 t2 t1

Comment

Time

Inventory

Request

EOF EOF EOF EOF SOF

Response

collision

Response

Collision

Response

Collision

Request to

M24RF64_1

EOF

Response

from

M24RF64_1

AI15117

Page 77

M24LR04E-R Inventory Initiated command

24 Inventory Initiated command

The M24LR04E-R provides a special feature to improve the inventory time response of moving tags using the Initiate_flag value. This flag, controlled by the Initiate command, allows tags to answer to Inventory Initiated commands.

For applications in which multiple tags are moving in front of a reader, it is possible to miss tags using the standard inventory command. The reason is that the inventory sequence has to be performed on a global tree search. For example, a tag with a particular UID value may have to wait the run of a long tree search before being inventoried. If the delay is too long, the tag may be out of the field before it has been detected.

Using the Initiate command, the inventory sequence is optimized. When multiple tags are moving in front of a reader, the ones which are within the reader field are initiated by the Initiate command. In this case, a small batch of tags answers to the Inventory Initiated command, which optimizes the time necessary to identify all the tags. When finished, the reader has to issue a new Initiate command in order to initiate a new small batch of tags which are new inside the reader field.

It is also possible to reduce the inventory sequence time using the Fast Initiate and Fast Inventory Initiated commands. These commands allow the M24LR04E-Rs to increase their response data rate by a factor of 2, up to 53 Kbit/s.

Doc ID 022208 Rev 5 77/142

Page 78

Timing definition M24LR04E-R

25 Timing definition

25.1 t1: M24LR04E-R response delay

Upon detection of the rising edge of the EOF received from the VCD, the M24LR04E-R waits for a time t next slot during an inventory process. Values of t in Figure 22.

25.2 t2: VCD new request delay

t2 is the time after which the VCD may send an EOF to switch to the next slot when one or more M24LR04E-R responses have been received during an Inventory command. It starts from the reception of the EOF from the M24LR04E-Rs.

The EOF sent by the VCD may be either 10% or 100% modulated regardless of the modulation index used for transmitting the VCD request to the M24LR04E-R.

is also the time after which the VCD may send a new request to the M24LR04E-R, as

described in Figure 48.

before transmitting its response to a VCD request or switching to the

1nom

are given in Tab l e 3 5. The EOF is defined

Values of t

are given in Ta bl e 3 5 .

25.3 t3: VCD new request delay when no response is received from the M24LR04E-R

t3 is the time after which the VCD may send an EOF to switch to the next slot when no M24LR04E-R response has been received.

The EOF sent by the VCD may be either 10% or 100% modulated regardless of the modulation index used for transmitting the VCD request to the M24LR04E-R.

From the time the VCD has generated the rising edge of an EOF:

● If this EOF is 100% modulated, the VCD waits for a time at least equal to t

sending a new EOF.

● If this EOF is 10% modulated, the VCD waits for a time at least equal to the sum of t

+ the M24LR04E-R nominal response time (which depends on the M24LR04E-R data rate and subcarrier modulation mode) before sending a new EOF.

Table 35. Timing values

Minimum (min) values Nominal (nom) values Maximum (max) values

1. The tolerance of specific timings is ± 32/fC.

2. t

does not apply for write-alike requests. Timing conditions for write-alike requests are defined in the

1max

command description.

is the time taken by the M24LR04E-R to transmit an SOF to the VCD. t

3. t

SOF

data rate: High data rate or Low data rate.

318.6 µs 320.9 µs 323.3 µs

309.2 µs No t

(2)

+ t

1max

SOF

(3)

(1)

No t

nom

No t

depends on the current

SOF

3min

max

before

3min

78/142 Doc ID 022208 Rev 5

Page 79

M24LR04E-R Command codes

26 Command codes

The M24LR04E-R supports the commands described in this section. Their codes are given in Ta bl e 3 6 .

Table 36. Command codes

Command code

standard

01h Inventory 2Ch

02h Stay Quiet B1h Write-sector Password

20h Read Single Block B2h Lock-sector

21h Write Single Block B3h Present-sector Password

23h Read Multiple Block C0h Fast Read Single Block

25h Select C1h Fast Inventory Initiated

26h Reset to Ready C2h Fast Initiate

27h Write AFI C3h Fast Read Multiple Block

28h Lock AFI D1h Inventory Initiated

29h Write DSFID D2h Initiate

2Ah Lock DSFID A0h ReadCfg

2Bh Get System Info A1h WriteEHCfg

Function

Command code

custom

Get Multiple Block Security Status

A2h SetRstEHEn

A3h CheckEHEn

A4h WriteDOCfg

Function

Doc ID 022208 Rev 5 79/142

Page 80

Command codes M24LR04E-R

26.1 Inventory

When receiving the Inventory request, the M24LR04E-R runs the anticollision sequence. The Inventory_flag is set to 1. The meaning of flags 5 to 8 is shown in Ta b le 2 9 .

The request contains:

● the flags,

● the Inventory command code (see Tab le 3 6 ),

● the AFI if the AFI flag is set,

● the mask length,

● the mask value,

● the CRC.

The M24LR04E-R does not generate any answer in case of error.

Table 37. Inventory request format

Request

SOF

Request_flags Inventory

Optional

AFI

Mask

length

Mask

value

CRC16

Request

EOF

8 bits 01h 8 bits 8 bits 0 - 64 bits 16 bits

The response contains:

● the flags,

● the Unique ID.

Table 38. Inventory response format

Response

SOF

Response_

flags

DSFID UID CRC16

Response

EOF

8 bits 8 bits 64 bits 16 bits

During an Inventory process, if the VCD does not receive an RF M24LR04E-R response, it waits for a time t

before sending an EOF to switch to the next slot. t3 starts from the rising

edge of the request EOF sent by the VCD.

● If the VCD sends a 100% modulated EOF, the minimum value of t

min = 4384/fC (323.3µs) + t

●

If the VCD sends a 10% modulated EOF, the minimum value of t3 is: t

min = 4384/fC (323.3µs) + t

SOF

NRT

is:

where:

● t

NRT

is the time required by the M24LR04E-R to transmit an SOF to the VCD,

SOF

is the nominal response time of the M24LR04E-R.

NRT

and t

are dependent on the M24LR04E-R-to-VCD data rate and subcarrier

SOF

modulation mode. When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF

starting the inventory command to the end of the M24LR04E-R response. If the M24LR04ER does not receive the corresponding slot marker, the RF WIP/BUSY pin remains at 0 until the next RF power-off.

80/142 Doc ID 022208 Rev 5

Page 81

M24LR04E-R Command codes

MS19767V2

Inventory

command

E O

Slot 1

S O

Ireply

M24LR04E

E O

Slot n

1) M24LR04E replies in slot n. RF_Busy is released after M24LR04E response.

RF_Busy

S O

Inventory

command

E O

Slot 1

Slot n

2) Slot n never occurs. RF_Busy is only released by Power-off.

Power-off

RF_Busy

S O

Inventory

command

E O

Slot 1

3) VCD sends a Valid command before slot n. RF_Busy is released after M24LR04E response.

RF_Busy

S O

Inventory

command

E O

Slot 1

4) VCD sends a Bad command (unknown command code, false CRC...) before slot n. RF_Busy is released after VCD command.

RF_Busy

S O

INew

command

E O

S O

Ireply

M24LR04E

E O

IBad

command

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

Figure 52. M24LR04E RF-Busy management following Inventory command

Doc ID 022208 Rev 5 81/142

Page 82

Command codes M24LR04E-R

26.2 Stay Quiet

Command code = 0x02 On receiving the Stay Quiet command, the M24LR04E-R enters the Quiet State if no error

occurs, and does NOT send back a response. There is NO response to the Stay Quiet command even if an error occurs.

When in the Quiet state:

● the M24LR04E-R does not process any request if the Inventory_flag is set,

● the M24LR04E-R processes any Addressed request.

The M24LR04E-R exits the Quiet State when:

● it is reset (power off),

● receiving a Select request. It then goes to the Selected state,

● receiving a Reset to Ready request. It then goes to the Ready state.

Table 39. Stay Quiet request format

Request

SOF

Request flags Stay Quiet UID CRC16

8 bits 02h 64 bits 16 bits

Request

EOF

The Stay Quiet command must always be executed in Addressed mode (Select_flag is reset to 0 and Address_flag is set to 1).

Figure 53. Stay Quiet frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R

Timing

Stay Quiet

request

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 during the Stay Quiet command.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

82/142 Doc ID 022208 Rev 5

Page 83

M24LR04E-R Command codes

26.3 Read Single Block

On receiving the Read Single Block command, the M24LR04E-R reads the requested block and sends back its 32-bit value in the response. The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.

Table 40. Read Single Block request format

Request

SOF

1. Gray means that the field is optional.

Request_

Read Single

flags

8 bits 20h

Block

UID

(1)

Block

number

CRC16

64 bits 8 bits 16 bits

Request parameters:

● Request flags

● UID (optional)

● Block number

Table 41. Read Single Block response format when Error_flag is NOT set

Response

SOF

Response_flags

8 bits

1. Gray means that the field is optional.

Sector

security

(1)

status

Data CRC16

8 bits 32 bits 16 bits

Response parameters:

● Sector security status if Option_flag is set (see Ta b l e 4 2 )

● Four bytes of block data

Table 42. Sector security status

Reserved for future

use. All at 0.

Password

control bits

Read / Write

protection bits

0: Current sector not locked 1: Current sector locked

Request

EOF

Response

EOF

Table 43. Read Single Block response format when Error_flag is set

Response

SOF

Response_

flags

Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set

– 10h: the specified block is not available – 15h: the specified block is read-protected

Doc ID 022208 Rev 5 83/142

Response

EOF

Page 84

Command codes M24LR04E-R

Figure 54. Read Single Block frame exchange between VCD and M24LR04E-R

VCD SOF

Read Single Block

M24LR04E-R <-t

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Read Single Block command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

26.4 Write Single Block

On receiving the Write Single Block command, the M24LR04E-R writes the data contained in the request to the requested block and reports whether the write operation was successful in the response. The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.

During the RF write cycle W otherwise, the M24LR04E-R may not program correctly the data into the memory. The W time is equal to t

Table 44. Write Single Block request format

+ 18 × 302 µs.

1nom

request

, there should be no modulation (neither 100% nor 10%),

EOF

-> SOF

Read Single Block

response

EOF

Request

SOF

Request_

flags

8 bits 21h

1. Gray means that the field is optional.

Write

Single

Block

UID

(1)

Block

number

Data CRC16

64 bits 8 bits 32 bits 16 bits

Request

Request parameters:

● Request flags

● UID (optional)

● Block number

● Data

Table 45. Write Single Block response format when Error_flag is NOT set

Response SOF Response_flags CRC16 Response EOF

8 bits 16 bits

Response parameter:

● No parameter. The response is send back after the writing cycle.

EOF

84/142 Doc ID 022208 Rev 5

Page 85

M24LR04E-R Command codes

Table 46. Write Single Block response format when Error_flag is set

Response

SOF

Response_

flags

Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set:

– 0Fh: error with no information given – 10h: the specified block is not available – 12h: the specified block is locked and its contents cannot be changed – 13h: the specified block was not successfully programmed

Figure 55. Write Single Block frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-

Write Single

Block request

EOF

<-t

<------------------- W

-> SOF

Write Single

Block response

---------------> SOF

EOF

Write sequence when

Write Single

Block response

Response

EOF

error

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Write Single Block command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the duration of the internal write cycle (from the end of a valid write single block command to the beginning of the M24LR04E-R response).

Doc ID 022208 Rev 5 85/142

Page 86

Command codes M24LR04E-R

MS19768V2

Write

command

S O

Ireply

M24LR04E

1) M24LR04E replies. RF_Busy is released after M24LR04E response.

RF_Busy

S O

Write

command

E O

2) M24LR04E replies when option flag is set. RF_Busy is released after M24LR04E response.

RF_Busy

Ireply

M24LR04E

E O

3) VCD sends a forbidden Write (sector lock, password-protected). RF_Busy is released after M24LR04E command.

S O

Write

command

E O

S O

Ireply

M24LR04E

RF_Busy

Figure 56. M24LR04E RF-Busy management following Write command

86/142 Doc ID 022208 Rev 5

Page 87

M24LR04E-R Command codes

MS19769V2

Write

command

S O

Ireply

M24LR04E

1) M24LR04E replies. RF_Wip is released after M24LR04E response.

RF_Wip

S O

Write

command

E O

2) M24LR04E replies when option flag is set. RF_Wip is released after M24LR04E response.

RF_Wip

Ireply

M24LR04E

E O

3) VCD sends a forbidden Write (sector lock, password-protected). RF_Wip remains at a high impedance.

S O

Write

command

E O

S O

Ireply

M24LR04E

RF_Wip

When configuring in the RF Write in progress mode, the RF WIP/BUSY pin is tied to 0 during the Write & verify sequence, as shown in Figure 57.

Figure 57. M24LR04E RF-Wip management following Write command

Doc ID 022208 Rev 5 87/142

Page 88

Command codes M24LR04E-R

26.5 Read Multiple Block

When receiving the Read Multiple Block command, the M24LR04E-R reads the selected blocks and sends back their value in multiples of 32 bits in the response. The blocks are numbered from 00h to 1FFh in the request and the value is minus one (–1) in the field. For example, if the “Number of blocks” field contains the value 06h, seven blocks are read. The maximum number of blocks is fixed at 32 assuming that they are all located in the same sector. If the number of blocks overlaps sectors, the M24LR04E-R returns an error code.

The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.

Table 47. Read Multiple Block request format

Request

SOF

Request_

flags

Read

Multiple

Block

8 bits 23h

1. Gray means that the field is optional.

(1)

UID

64 bits 8 bits 8 bits 16 bits

First

block

number

Number

of blocks

CRC16

Request parameters:

● Request flags

● UID (optional)

● First block number

● Number of blocks

Table 48. Read Multiple Block response format when Error_flag is NOT set

Response

SOF

Response_

flags

8 bits

1. Gray means that the field is optional.

2. Repeated as needed.

Sector

security

(1)

status

(2)

8 bits

Data CRC16

(2)

32 bits

16 bits

Response parameters:

● Sector security status if Option_flag is set (see Ta b l e 4 9 )

● N blocks of data

Table 49. Sector security status

Reserved for future

use. All at 0.

Password

control bits

Read / Write

protection bits

0: Current sector not locked 1: Current sector locked

Request

EOF

Response

EOF

Table 50. Read Multiple Block response format when Error_flag is set

Response SOF Response_flags Error code CRC16 Response EOF

8 bits 8 bits 16 bits

88/142 Doc ID 022208 Rev 5

Page 89

M24LR04E-R Command codes

Response parameter:

● Error code as Error_flag is set:

– 0Fh: error with no information given – 10h: the specified block is not available – 15h: the specified block is read-protected

Figure 58. Read Multiple Block frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Read Multiple Block command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

26.6 Select

When receiving the Select command:

● If the UID is equal to its own UID, the M24LR04E-R enters or stays in the Selected

state and sends a response.

● If the UID does not match its own, the selected M24LR04E-R returns to the Ready

state and does not send a response.

The M24LR04E-R answers an error code only if the UID is equal to its own UID. If not, no response is generated. If an error occurs, the M24LR04E-R remains in its current state.

Table 51. Select request format

Read Multiple Block request

EOF

-> SOF

Read Multiple

Block response

EOF

Request

SOF

Request_

flags

8 bits 25h 64 bits 16 bits

Select UID CRC16

Request parameter:

● UID

Table 52. Select Block response format when Error_flag is NOT set

Response

SOF

Response_flags CRC16

8 bits 16 bits

Doc ID 022208 Rev 5 89/142

Request

EOF

Response

EOF

Page 90

Command codes M24LR04E-R

Response parameter:

● No parameter

Table 53. Select response format when Error_flag is set

Response

SOF

Response_

flags

Error code CRC16

Response

EOF

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set:

– 03h: the option is not supported

Figure 59. Select frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

Select

request

EOF

-> SOF

Select

response

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Select command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

90/142 Doc ID 022208 Rev 5

Page 91

M24LR04E-R Command codes

26.7 Reset to Ready

On receiving a Reset to Ready command, the M24LR04E-R returns to the Ready state if no error occurs. In the Addressed mode, the M24LR04E-R answers an error code only if the UID is equal to its own UID. If not, no response is generated.

Table 54. Reset to Ready request format

Request

SOF

Request_

flags

Reset to

Ready

UID

(1)

CRC16

8 bits 26h 64 bits 16 bits

1. Gray means that the field is optional.

Request parameter:

● UID (optional)

Table 55. Reset to Ready response format when Error_flag is NOT set

Response

SOF

Response_flags CRC16

8 bits 16 bits

Response parameter:

● No parameter

Table 56. Reset to ready response format when Error_flag is set

Response

SOF

Response_flags Error code CRC16

8 bits 8 bits 16 bits

Request

EOF

Response

EOF

Response

EOF

Response parameter:

● Error code as Error_flag is set:

– 03h: the option is not supported

Figure 60. Reset to Ready frame exchange between VCD and M24LR04E-R

Reset to

VCD SOF

M24LR04E-R <-t

Ready

EOF

request

Reset to

-> SOF

Ready

EOF

response

Doc ID 022208 Rev 5 91/142

Page 92

Command codes M24LR04E-R

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Reset to ready command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

26.8 Write AFI

On receiving the Write AFI request, the M24LR04E-R programs the 8-bit AFI value to its memory. The Option_flag is supported.

During the RF write cycle W

, there should be no modulation (neither 100% nor 10%),

otherwise, the M24LR04E-R may not write correctly the AFI value into the memory. The W time is equal to t

Table 57. Write AFI request format

Request

SOF

1. Gray means that the field is optional.

Request

_flags

8 bits 27h 64 bits 8 bits 16 bits

+ 18 × 302 µs.

1nom

Write

AFI

UID

(1)

AFI CRC16

Request

EOF

Request parameter:

● Request flags

● UID (optional)

● AFI

Table 58. Write AFI response format when Error_flag is NOT set

Response

SOF

Response_flags CRC16

Response

EOF

8 bits 16 bits

Response parameter:

● No parameter

Table 59. Write AFI response format when Error_flag is set

Response

SOF

Response_

flags

Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set

– 12h: the specified block is locked and its contents cannot be changed – 13h: the specified block was not successfully programmed

92/142 Doc ID 022208 Rev 5

Response

EOF

Page 93

M24LR04E-R Command codes

Figure 61. Write AFI frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

M24LR04E-R <------------------ Wt --------------> SOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Write AFI command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the duration of the internal write cycle (from the end of a valid Write AFI command to the beginning of the M24LR04E-R response).

26.9 Lock AFI

On receiving the Lock AFI request, the M24LR04E-R locks the AFI value permanently. The Option_flag is supported.

During the RF write cycle W otherwise, the M24LR04E-R may not Lock correctly the AFI value in memory. The W equal to t

Table 60. Lock AFI request format

1nom

Write AFI

request

+ 18 × 302 µs.

EOF

-> SOF

Write AFI response

Write sequence

EOF

when error

Write AFI

response

, there should be no modulation (neither 100% nor 10%),

EOF

time is

Request

SOF

1. Gray means that the field is optional.

Request_

flags

8 bits 28h

Lock

AFI

(1)

UID

64 bits 16 bits

Request parameter:

● Request Flags

● UID (optional)

Table 61. Lock AFI response format when Error_flag is NOT set

Response

SOF

Response_flags CRC16

8 bits 16 bits

Response parameter:

● No parameter

Doc ID 022208 Rev 5 93/142

CRC16

Request

EOF

Response

EOF

Page 94

Command codes M24LR04E-R

Table 62. Lock AFI response format when Error_flag is set

Response

SOF

Response_flags Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set

– 11h: the specified block is already locked and thus cannot be locked again – 14h: the specified block was not successfully locked

Figure 62. Lock AFI frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

M24LR04E-R <----------------- W

Lock AFI

request

EOF

-> SOF

Lock AFI response

-----------> SOF

EOF

Response

EOF

Lock sequence

when error

Lock AFI

response

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Lock AFI command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the entire duration of the internal write cycle (from the end of valid Lock AFI command to the beginning of the M24LR04E-R response).

94/142 Doc ID 022208 Rev 5

Page 95

M24LR04E-R Command codes

26.10 Write DSFID

On receiving the Write DSFID request, the M24LR04E-R programs the 8-bit DSFID value to its memory. The Option_flag is supported.

During the RF write cycle W

, there should be no modulation (neither 100% nor 10%),

otherwise, the M24LR04E-R may not write correctly the DSFID value in memory. The W time is equal to t

Table 63. Write DSFID request format

Request

SOF

1. Gray means that the field is optional.

Request_

flags

8 bits 29h 64 bits 8 bits 16 bits

+ 18 × 302 µs.

1nom

Write

DSFID

UID

(1)

DSFID CRC16

Request

EOF

Request parameter:

● Request flags

● UID (optional)

● DSFID

Table 64. Write DSFID response format when Error_flag is NOT set

Response

SOF

Response_flags CRC16

Response

EOF

8 bits 16 bits

Response parameter:

● No parameter

Table 65. Write DSFID response format when Error_flag is set

Response

SOF

Response_flags Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set

– 12h: the specified block is locked and its contents cannot be changed – 13h: the specified block was not successfully programmed

Doc ID 022208 Rev 5 95/142

Response

EOF

Page 96

Command codes M24LR04E-R

Figure 63. Write DSFID frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

M24LR04E-R <---------------- W

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Write DSFID command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the duration of the internal write cycle (from the end of a valid Write DSFID command to beginning of the M24LR04E-R response).

26.11 Lock DSFID

On receiving the Lock DSFID request, the M24LR04E-R locks the DSFID value permanently. The Option_flag is supported.

During the RF write cycle W otherwise, the M24LR04E-R may not lock correctly the DSFID value in memory. The W is equal to t

Table 66. Lock DSFID request format

1nom

Write DSFID

request

, there should be no modulation (neither 100% nor 10%),

+ 18 × 302 µs.

SOFWrite DSFID

response

---------->

EOFWrite sequence

when error

SOFWrite DSFID

response

EOF

time

Request

SOF

1. Gray means that the field is optional.

Request_

flags

8 bits 2Ah

Lock

DSFID

UID

64 bits 16 bits

Request parameter:

● Request flags

● UID (optional)

Table 67. Lock DSFID response format when Error_flag is NOT set

Response

SOF

96/142 Doc ID 022208 Rev 5

Response_flags CRC16

8 bits 16 bits

(1)

CRC16

Request

EOF

Response

EOF

Page 97

M24LR04E-R Command codes

Response parameter:

● No parameter.

Table 68. Lock DSFID response format when Error_flag is set

Response

SOF

Response_flags Error code CRC16

8 bits 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set:

– 11h: the specified block is already locked and thus cannot be locked again – 14h: the specified block was not successfully locked

Figure 64. Lock DSFID frame exchange between VCD and M24LR04E-R

Lock

VCD SOF

M24LR04E-R <-t1-> SOF

M24LR04E-R <----------------- W

DSFID

request

EOF

Lock DSFID

response

------------> SOF

EOF

Lock sequence

DSFID

response

Response

EOF

when error

Lock

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Lock DSFID command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the duration of the internal write cycle (from the end of a valid Lock DSFID command to the beginning of the M24LR04E-R response).

Doc ID 022208 Rev 5 97/142

Page 98

Command codes M24LR04E-R

26.12 Get System Info

When receiving the Get System Info command, the M24LR04E-R sends back its information data in the response.The Option_flag is not supported. The Get System Info can be issued in both Addressed and Non Addressed modes.

The Protocol_extension_flag must be set to 0. Tab le 7 0 shows the M24LR04E-R response to the Get System Info command depending on the value of the Protocol_extension_flag.

Table 69. Get System Info request format

Request

SOF

Request

_flags

Get System

Info

UID

(1)

CRC16

Request

EOF

8 bits 2Bh 64 bits 16 bits

1. Gray means that the field is optional.

Request parameter:

● Request flags

● UID (optional)

Table 70. Get System Info response format when Protocol_extension_flag = 0 and

Error_flag is NOT set

Response

SOF

Response

_flags

00h 0Fh

Information

flags

UID DSFID AFI

8 bits 8 bits 037F 5A

bits

Memory

size

CRC16Response

ref.

bits

EOF

Response parameters:

● Information flags set to 0Fh. DSFID, AFI, Memory Size and IC reference fields are

present.

● UID code on 64 bits

● DSFID value

● AFI value

● Memory size. The M24LR04E-R provides 128 blocks (7Fh) of 4 bytes (03h)

● IC reference: the 8 bits are significant.

Table 71. Get System Info response format when Error_flag is set

Response

SOF

Response_flags Error code CRC16

01h 8 bits 16 bits

Response parameter:

● Error code as Error_flag is set:

– 03h: Option not supported

98/142 Doc ID 022208 Rev 5

Response

EOF

Page 99

M24LR04E-R Command codes

Figure 65. Get System Info frame exchange between VCD and M24LR04E-R

VCD SOF

M24LR04E-R <-t

Get System Info

request

EOF

-> SOF

Get System Info

response

EOF

When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that starts the Get System Info command to the end of the M24LR04E-R response.

When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z state.

Doc ID 022208 Rev 5 99/142

Page 100

Command codes M24LR04E-R

26.13 Get Multiple Block Security Status

When receiving the Get Multiple Block Security Status command, the M24LR04E-R sends back the sector security status. The blocks are numbered from 00h to 01FFh in the request and the value is minus one (–1) in the field. For example, a value of '06' in the “Number of blocks” field requests to return the security status of seven blocks.

The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly. During the M24LR04E-R response, if the internal block address counter reaches 01FFh, it

rolls over to 0000h and the Sector Security Status bytes for that location are sent back to the reader.

Table 72. Get Multiple Block Security Status request format

Get

Request

SOF

Request

_flags

Multiple

Block

Security

Status

UID

(1)

First

block

number

Number

of blocks

CRC16

Request

EOF

8 bits 2Ch

1. Gray means that the field is optional.

64 bits 8 bits 8 bits 16 bits

Request parameter:

● Request flags

● UID (optional)

● First block number

● Number of blocks

Table 73. Get Multiple Block Security Status response format when Error_flag is

NOT set

Response

SOF

1. Repeated as needed.

Response_

Sector security

flags

8 bits 8 bits

status

(1)

CRC16

16 bits

Response

EOF

Response parameters:

● Sector security status (see Ta b le 7 4 )

Table 74. Sector security status

Reserved for future use. All

at 0.

Password control

bits

Read / Write

protection bits

0: Current sector not locked 1: Current sector locked

100/142 Doc ID 022208 Rev 5