Stacked Multi-Chip Product (MCP) Flash Memory and
pSRAM 128 Megabit (8M x 16-bit) CMOS 3.0 Volt-only
Simultaneous Operation, Page Mode Flash Memory with
64/32/16 Megabit (4M/2M/1M x 16-bit) Pseudo-Static RAM
Distinctive Characteristics
MCP Features
Power supply voltage of 2.7 to 3.1 volt
High performance
— 65ns (65ns Flash, 70ns pSRAM)
General Description
The S71PL129J series is a product line of stacked Multi-Chip Product (MCP) packages and consists of:
One S29PL129J Flash memory die
One 16M, 32M, or 64M pSRAM
The products covered by this document are listed in the table below. For details
about their specifications, please refer to the individual constituent datasheets for
further details.
Package
— 8 x 11.6 x 1.2 mm 64 ball FBGA
Operating Temperature
— –25°C to +85°C (Wireless)
— –40°C to +85°C (Industrial)
Dual CE# Flash memory
ADVANCE
INFORMATION
pSRAM
Density
Flash Memory Density
128Mb
64MbS71PL129JC0
32MbS71PL129JB0
16MbS71PL129JA0
Publication Number S71PL129Jxx_00 Revision A Amendment 5 Issue Date December 23, 2004
This document contains information on a product under development at Spansion, LLC. The information is intended to help you evaluate this product. Do not design in
this product without contacting the factory. Spansion reserves the right to change or discontinue work on this proposed product without notice.
Page 2
Product Selector Guide
128 Mb Flash Memory
Device-Model#pSRAM densityFlash Access time (ns) (p)SRAM Access time (ns) pSRAM typePackage
1. Type 0 is standard. Specify other options as required.
2. BGA package marking omits leading “S” and packing type
designator from ordering part number.
3. Contact factory for availability of any of the above OPNs. RAM
type availability may vary over time.
Valid Combinations
Valid Combinations list configurations planned to be supported in volume for this device. Consult your local sales office to confirm availability of specific valid combinations and to check on newly released
combinations.
10S71PL129Jxx_00_A5 December 23, 2004
Page 11
Advance Information
Physical Dimensions
TLA064—64-ball Fine-Pitch Ball Grid Array (FBGA)
8 x 11.6 mm Package
1. DIMENSIONING AND TOLERANCING METHODS PER
ASME Y14.5M-1994.
2. ALL DIMENSIONS ARE IN MILLIMETERS.
3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010.
4. e REPRESENTS THE SOLDER BALL GRID PITCH.
5. SYMBOL "MD" IS THE BALL MATRIX SIZE IN THE "D"
DIRECTION.
SYMBOL "ME" IS THE BALL MATRIX SIZE IN THE
"E" DIRECTION.
n IS THE NUMBER OF POPULTED SOLDER BALL POSITIONS
FOR MATRIX SIZE MD X ME.
6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL
DIAMETER IN A PLANE PARALLEL TO DATUM C.
7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A
AND B AND DEFINE THE POSITION OF THE CENTER SOLDER
BALL IN THE OUTER ROW.
WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE
OUTER ROW SD OR SE = 0.000.
WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE
OUTER ROW, SD OR SE = e/2
8. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED
BALLS.
9. N/A
10 A1 CORNER TO BE IDENTIFIED BY CHAMFER, LASER OR INK
MARK, METALLIZED MARK INDENTATION OR OTHER MEANS.
3352 \ 16-038.22a
December 23, 2004 S71PL129Jxx_00_A511
Page 12
S29PL129J for MCP
128 Megabit (8 M x 16-Bit)
CMOS 3.0 Volt-only, Simultaneous Read/Write
Flash Memory with Enhanced VersatileIO
TM
Control
Datasheet
Distinctive Characteristics
Architectural Advantages
128 Mbit Page Mode devices
— Page size of 8 words: Fast page read access from
random locations within the page
Single power supply operation
— Full Voltage range: 2.7 to 3.6 volt read, erase, and
program operatio ns for battery- powered application s
Dual Chip Enable inputs (only in PL129J)
— Two CE# inputs control selection of each half of the
memory space
Simultaneous Read/Write Operation
— Data can be continuously read from one bank while
executing erase/program functions in another bank
— Zero latency switching from write to read operations
FlexBank Architecture
— 4 separate banks, with up to two simultaneous
operations per device
— CE#1 controlled banks:
Bank 1A:
- 16Mbit (4Kw x 8 and 32Kw x 31)
Bank 1B:
- 48Mbit (32Kw x 96)
— CE#2 controlled banks:
Bank 2A:
- 48 Mbit (32Kw x 96)
Bank 2B:
- 16Mbit (4Kw x 8 and 32Kw x 31)
Enhanced VersatileI/OTM (VIO) Control
— Output voltage generated and input voltages
tolerated on all control inputs and I/Os is determined
by the voltage on the V
Secured Silicon Sector region
— Up to 128 words accessible through a command
sequence
— Up to 64 factory-locked words
— Up to 64 customer-lockable words
Both top and bottom boot blocks in one device
Manufactured on 110 nm process technology
Data Retention: 20 years typical
Cycling Endurance: 1 million cycles per sector
typical
IO
pin
ADVANCE
INFORMATION
Performance Characteristics
High Performance
— Page access times as fast as 20 ns
— Random access times as fast as 55 ns
Power consumption (typical values at 10 MHz)
— 45 mA active read current
— 17 mA program/erase current
— 0.2 µA typical standby mode current
Software Features
Software command-set compatible with JEDEC
42.4 standard
— Backward compatible with Am29F, Am29LV,
Am29DL, and AM29PDL families and MBM29QM/RM,
MBM29LV, MBM29DL, MBM29PDL families
CFI (Common Flash Interface) compliant
— Provides device-specific information to the system,
allowing host software to easily reconfigure for
different Flash devices
Erase Suspend / Erase Resume
— Suspends an erase operation to allow read or
program operations in other sectors of same bank
Unlock Bypass Program command
— Reduces overall programming time when issuing
multiple program command sequences
Hardware Features
Ready/Busy# pin (RY/BY#)
— Provides a hardware method of detecting program or
erase cycle completion
Hardware reset pin (RESET#)
— Hardware method to reset the device to reading
array data
WP#/ ACC (Write Protect/Acceleration) input
—At VIL, hardware level protection for the first and
last two 4K word sectors.
—At VIH, allows removal of sector protection
—At VHH, provides accelerated programming in a
factory setting
Persiste nt S ec t or Protection
— A command sector protection method to lock
combinations of individual sectors and sector groups
Publication Number S29PL129J_MCP_00 Revision A Amendment 0 Issue Date June 4, 2004
Page 13
Advance Information
to prevent program or erase operations within that
sector
— Sectors can be locked and unlocked in-system at VCC
level
Passwo rd S ec t or Protection
— A sophisticated sector protection method to lock
combinations of individual sectors and sector groups
to prevent program or erase operations within that
sector using a user-defined 64-bit password
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP13
Page 14
General Description
The PL129J is a 128 Mbit, 3.0 volt -only Pa ge Mode and Simultaneous Rea d/W rite
Flash memory device organized as 8 Mwords.
The word-wide data (x16) appears on DQ15-DQ0. This device can be p rogrammed in-system or in standard EPROM programmers. A 12.0 V VPP is not
required for write or erase operations.
The device offers fast page access times of 20 to 30 ns, with corresponding random access times of 55 to 70 ns, respectively, allowing high speed
microprocessors to operate without wait states. To eliminate bus contention the
device has separate chip enable (CE#), write enable (WE#) and output enable
(OE#) controls. Note: Device PL129J has 2 chip enable inputs (CE1#, CE2#).
Simultaneous Read/Write Operation with Zero Latency
The Simultaneous Read/Write architecture provides simultaneous operation
by dividing the memory space into 4 banks, which can be considered to be four
separate memory arrays as far as certain operations are concerned. The device
can improve overall system performance by allowing a host system to program
or erase in one bank, then immediately and simultaneously read from another
bank with zero latency (with two simultaneous operations operating at any one
time). This releases the system from waiting for the completion of a program or
erase operation, greatly im pr ovi ng system pe rformanc e.
Advance Information
The device can be organized in both top and bottom sector configurations. The
banks are organized as follows:
BankPL129J SectorsCE# Control
1A16 Mbit (4 Kw x 8 and 32 Kw x 31)CE1#
1B48 Mbit (32 Kw x 96)CE1#
2A48 Mbit (32 Kw x 96)CE2#
2B16 Mbit (4 Kw x 8 and 32 Kw x 31)CE2#
Page Mode Features
The page size is 8 words. After initial page access is accomplished, the page mode
operation provides fast read access speed of random locations within that page.
Standard Flash Memory Features
The device requires a single 3.0 volt power supply (2.7 V to 3.6 V) for both
read and write functions. Internally generated and regulated voltages are pro
vided for the program and erase operations.
The device is entirely command set compatible with the JEDEC 42.4 single-power-supply Flash standard. Commands are written to the command regis
ter using standard microprocessor write timing. Register contents serve as inputs
to an internal state-machine that controls the erase and programming circuitry.
Write cycles also internally latch addresses and data needed for the programming
and erase operations. Reading data out of the device is similar to reading f rom
other Flash or EPROM devices.
-
-
Device programming occurs by executing the program command sequence. The
Unlock Bypass mode facilitates faster programming times by requiring only two
14S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 15
Advance Information
write cycles to program data instead of four. Device erasure occurs by executing
the erase command sequence.
The host system can detect whether a program or erase oper ation is complete by
reading the DQ7 (Data# Polling) and DQ6 (toggl e) status bits. After a program
or erase cycle has been completed, the device is ready to read array data or ac
cept another command.
The sector erase architecture allows memory sectors to be erased and reprogrammed without affecting the data contents of other sectors. The device is fully
erased when shipped from the factory.
Hardware data protection measures include a low VCC detector that automat-
ically inhibits write operations during power transitions. The hardware sector
protection feature disables both program and erase operations in any combina
tion of sectors of memory. This can be achieved in-system or via programming
equipment.
The Erase Suspend/Erase Resume feature enables the user to put erase on
hold for any period of time to read data from, or program data to, an y sector that
is not selected for erasure. T rue background erase can thus be achieved. If a re ad
is needed from the Secured Silicon Sector area (One Time Program area) after
an erase suspend, then the user must use the proper command sequence to
enter and exit this region.
-
-
The device offers two power-saving features. When addresses have been stable
for a specified amount of time, the device enters the automatic sleep mode.
The system can also place the device into the standby mode. Power cons umption
is greatly reduced in both these modes.
The device electrically erases all bits within a sector simultaneously via FowlerNordheim tunneling. The data is programmed using hot electron injection.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP15
Page 16
Block Diagram
Advance Information
DQ15–DQ0
V
CC
V
SS
RESET#
WE#
CE#
OE#
Amax–A3
RY/BY# (See Note)
State
Control
Command
Register
VCC DetectorTimer
PGM Voltage
Generator
Sector
Switches
Erase Voltage
Generator
V
Chip Enable
Output Enable
Logic
Y-Decoder
X-Decoder
Address Latch
IO
Input/Output
Buffers
Data Latch
Y-Gating
Cell Matrix
A2–A0
Notes:
1. RY/BY# is an open drain output.
2. For PL129J there are two CE# (CE1# and CE2#)
16S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 17
Advance Information
Simultaneous Read/Write Block Diagram (PL129J)
V
CC
V
SS
Mux
A21–A0
CE1#=L
CE2#=H
Bank 1A
Bank 1A Address
X-Decoder
OE#
Y-gate
A21–A0
RESET#
WE#
CE1#
CE2#
WP#/ACC
DQ0–DQ15
A21–A0
CONTROL
COMMAND
REGISTER
Notes:
1. Amax = A21 (PL129J)
A21–A0A21–A0
STATE
&
RY/BY#
Mux
Bank 1B Address
CE1#=H
CE2#=L
Bank 2A Address
Bank 2B Address
Status
Control
Bank 1B
X-Decoder
X-Decoder
Bank 2A
X-Decoder
Bank 2B
Y-gate
DQ15–DQ0
DQ15–DQ0
DQ15–DQ0
Mux
DQ15–DQ0
DQ15–DQ0
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP17
Page 18
Pin Description
Amax–A0=Address bus
DQ15–DQ0=16-bit data inputs/outputs/float
CE#=Chip Enable Inputs
OE#=Output Enable Input
WE#=Write Enable
V
SS
NC=Pin Not Connected Internally
RY/BY#=Ready/Busy output and open drain.
When RY/BY#= VIH, the device is ready to accept
read operations and commands. When RY/BY#=
, the device is either executing an embedded
V
OL
algorithm or the device is executing a hardware
reset operation.
When WP#/ACC= VIL, the highest and lowest two
4K-word sectors are write protected regardless of
other sector protection configurations. When WP#/
ACC= V
DYB or PPB is programmed. When WP#/ACC= 12V ,
program and erase operations are ac cel erated.
=Input/Output Buffer Power Supply 2.7 V to 3.6 V
(2.7 V to 3.6 V or 2.7 to 3.3 V)
CE1# controls the 64Mb in Banks 1A and 1B . CE2#
controls the 64 Mb in Banks 2A and 2B.
, these sector are unprotected unless the
IH
Logic Symbol
max+1
Amax–A0
CE#
OE#
WE#
WP#/ACC
RESET#
VIO (V
CCQ
16
DQ15–DQ0
RY/BY#
)
18S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 19
Advance Information
Device Bus Operations
This section describes the requirements and use of the device bus operations,
which are initiated through the internal command register . The command register
itself does not occupy any addressable memory location. The register is a latch
used to store the commands, along with the address and data information
needed to execute the command. The contents of the register serve as inputs to
the internal state machine. The state machine outputs dictate the function of the
device.
quired, and the resulting output. The following subsections describe each of these
operations in further detail.
Table 1 lists the device bus operations, the inputs and control levels re-
Legend: L = Logic Low = VIL, H = Logic High = VIH, VID = 11.5–12.5V, VHH = 8.5–9.5V, X = Don’t Care, SA = Sector
Address, A
Notes:
1. The sector protect and sector unprotect functions may also be implemented via programming equipment. See
“High Voltage Sector Protection” on page 37.”
“
2. WP#/ACC must be high when writing to upper two and lower two sector s.
= Address In, DIN = Data In, D
IN
XXXXV
= Data Out
OUT
ID
XA
IN
D
IN
Requirements for Reading Array Data
To read array data from the outputs, the system must drive the OE# and appropriate CE# pins to VIL. In PL129J, CE1# and CE2# are the power control and
select the lower (CE1#) or upper (CE2#) halves of the device. CE# is the power
control. OE# is the output control and gates array data to the output pins. WE#
should remain at V
The internal state machine is set for reading array data upon device power-up,
or after a hardware reset. This ensures that no spurious alteration of the memory
content occurs during the power transition. No command is necessary in this
mode to obtain array data. Standard microprocessor read cycles that assert valid
addresses on the device address inputs produce valid data on the device data
outputs. Each bank remains enabled for read access until the command register
contents are altered.
IH
.
See Table 24 for timing specifications and Figure 11 for the timing diagram. I
CC1
in the DC Characteristics table represents the active current specification for
reading array data.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP19
Page 20
Advance Information
Random Read (Non-Page Read)
Address access time (t
output data. The chip enable access time (t
dresses and stable CE# to valid data at the output inputs. The output enable
access time is the delay from the falling edge of the OE# to valid data at the out
put inputs (assuming the addresses have been stable for at leas t t
) is equal to the delay from stable addre sses to valid
ACC
) is the delay from the stable ad-
CE
ACC–tOE
time).
Page Mode Read
The device is capable of fast page mode read and is compatible with the page
mode Mask ROM read operation. This mode provides faster r ead access speed for
random locations within a page. Address bits Amax–A3 select an 8 word page,
and address bits A2–A0 select a specific word within that page. This is an asyn
chronous operation with the microprocessor supplying the specifi c word location.
-
-
The random or initial page access is t
or tCE and subsequent page read ac-
ACC
cesses (as long as the locations specified by the microprocessor falls within that
page) is equivalent to t
reassertion of CE1# or CE#2 for subsequent access has access time of t
. Here again, CE1#/CE#2 selects the device and OE# is the output control and
t
CE
. When CE1# and CE#2 are deasse rted (=VIH), the
PACC
ACC
or
should be used to gate data to the output inputs if the device is selected. Fast
page mode accesses are obtained by keeping Amax–A 3 constant and changing
A2–A0 to select the specific word within that page.
Ta b l e 2 . Page Select
Wo rdA2A1A0
Word 0000
Word 1001
Word 2010
Word 3011
Word 4100
Word 5101
Word 6110
Word 7111
Simultaneous Read/Write Operation
In addition to the conventional features (read, program, erase-suspend read, and
erase-suspend program), the devi ce is capa ble of reading data f rom one bank of
memory while a program or erase operation is in progress in another bank of
memory (simultaneous operation). The bank can be sel ected by bank addresses
(A21–A19) with zero latency.
The simultaneous operation can execute multi-function mode in the same bank.
BankCE1#CE2#PL129J: A21–A20
Bank 1A0100
Bank 1B0101, 10, 11
20S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 21
Advance Information
Bank 2A1000, 01, 10
Bank 2B1011
Writing Commands/Command Sequences
To write a command or command sequence (which includes programming data
to the device and erasing sectors of memory), the system must drive WE# and
CE1# or CE#2 to V
The device features an Unlock Bypass mode to facilitate faster programming.
Once a bank enters the Unlock Bypass mode, only two write cycles are required
to program a word, instead of four.
46 has details on programming data to the de vice using both standard and Unlock
Bypass command sequences.
An erase operation can erase one sector, multiple sectors, or the entire device.
Table 4 indicates the set of address space that each sector occup ies. A “bank ad -
dress” is the set of address bits required to uniquely select a bank. Similarly, a
“sector address” refers to the address bits required to uniquely select a sector.
“Command Definitions” on page 45 has details on erasing a sector or the entire
chip, or suspending/resuming the erase operation.
I
in the DC Characteristics table represents the active current specification for
CC2
the write mode. See the timing specification tables and timing diagrams in
set” for write operations.
, and OE# to VIH.
IL
“Word Progr am Command Sequence” on page
“Re-
Accelerated Program Operation
The device offers accelerated program oper ations through the ACC function. This
function is primarily intended to allow faster manufacturing throughput at the
factory.
If the system asserts VHH on this pin, the device automatically enters the aforementioned Unlock Bypass mode, temporarily unprotects any protected sectors,
and uses the higher voltage on the pin to reduce the time required for program
operations. The system would use a two-cycle program command sequence as
required by the Unlock Bypass mode. Removing V
turns the device to normal operation. Note that VHH must not be asserted on
WP#/ACC for operations other than accelerated programming, or device damage
may result. In addition, the WP#/ACC pin should be raised to V
use. That is, the WP#/ACC pin should not be left floating or unconnected; incon
sistent behavior of the device may result.
Autoselect Functions
If the system writes the autoselect command sequence, the device enters the au toselect mode. The system can then read autoselect codes from the internal
register (which is separate from the memory array) on DQ15–DQ0. Standard
read cycle timings apply in this mode. See
page 29 and “Autoselect Command Sequence” on p age 46 for more inf ormation.
Standby Mode
When the system is not reading or writing to the device, it can place the device
in the standby mode. In this mode, current consumption is greatly reduced, and
the outputs are placed in the high impedance state, independent of the OE#
input.
from the WP#/ACC pin re-
HH
when not in
CC
“Secured Silicon Sector Addresses” on
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP21
Page 22
The device enters the CMOS standby mode when the CE1# or CE#2 and RESET#
pins are both held at V
range than V
.) If CE1# or CE#2 and RESET# are held at VIH, but not within V
IH
± 0.3 V, the device is in standby mode, but the standby current is greater. The
device requires standard access time (t
either of these standby modes, before it is ready to read data.
If the device is deselected during erasure or programming, the device dr aws active current until the operation is completed.
I
in “DC Characteristics” represents the CMOS s tandby current specification.
CC3
Automatic Sleep Mode
The automatic sleep mode minimizes Flash device energy consumption. The device automatically enables this mode when addresses remain stable for t
ns. The automatic sleep mode is independent of the CE#, WE#, and OE# con-
30
trol signals. Standard address access timings provide new data when addresses
are changed. While in sleep mode, output data is latched and alw ays a vailable to
the system. Note that during automatic sleep mode, OE# must be at V
the device reduces current to the stated sleep mode specification.
Characteristics” represents the automatic sleep mode current specification.
Advance Information
± 0.3 V. (Note that this is a more restricted voltage
IO
) for read access when the device is in
CE
ACC
before
IH
I
in “DC
CC5
IO
+
RESET#: Hardware Reset Pin
The RESET# pin provides a hardware method of resetting the device to reading
array data. When the RESET# pin is driven low for at least a period of t
device immediately terminates any operation in progress, tristates all output
pins, and ignores all read/write commands for the duration of the RESET# pulse.
The device also resets the internal state machine to reading array data. The op
eration that was interrupted should be reinitiated once the device is ready to
accept another command sequence, to ensure data integrity.
Current is reduced for the duration of the RESET# pulse. When RESET# is held
±0.3 V, the device draws CM OS st andby cu rrent (I
at V
SS
at VIL but not within VSS±0.3 V, the standby current is greater.
The RESET# pin may be tied to the system reset circuitry. A system reset would
thus also reset the Flash memory , enabling the system to read the boot-up firm
ware from the Flash memory.
If RESET# is asserted during a program or erase operation, the RY/BY# pin remains a “0” (busy) until the internal reset operation is complete, which re qu ires
a time of t
BY# to determine whether the reset operation is comple te. If RESET# is asserted
when a program or erase oper ation is not executing (RY/BY# pin is “1”), the reset
operation is completed within a time of t
The system can read data t
Refer to the AC Characteristics tables for RESET# parameters and to Figure 13
for the timing diagram.
(during Embedded Algorithms). The system can thus monitor RY/
READY
). If RESET# is held
CC4
(not during Embedded Algorithms).
READY
after the RESET# pin returns to VIH.
RH
, the
RP
-
-
Output Disable Mode
When the OE# input is at VIH, output from the device is disabled. The output pins
(except for RY/BY#) are placed in the highest Impedance state
22S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 23
Advance Information
Ta b l e 3 . S29PL129J Sector Architecture (Sheet 1 of 7)
The autoselect mode provides manufacturer and device identification, and sector
protection verification, through identifier codes output on DQ7–DQ0. This mode
is primarily intended for programming equipment to automatically match a device
to be programmed with its corresponding programming algorithm. However, the
autoselect codes can also be accessed in-system through the command register.
Sector Address (A21-
A12)
Sector SizeAddress Range
Sector Size
(Kwords)Address Range (x16)
When using programming equipment, the autoselect mode requires VID on address pin A9. Address pins must be as shown in Table 5. In addition, when
verifying sector protection, the sector address must appear on the appropriate
highest order address bits.
Table 5 shows the remaining address bits that are
don’t care. When all necessary bits have been set as required, the programming
equipment may then read the corresponding identifier code on DQ7–DQ0. How
ever, the autoselect codes can also be accessed in-system through the command
register , for ins tances when the device is erased or p rogrammed in a system with
out access to high voltage on the A9 pin. The command sequence is illustr ated in
Table 12. Note: If a Bank Address (BA) (on a ddress bits A21–A19) is asserted
during the third write cycle of the autoselect command, the host system can read
autoselect data that bank and then immediately read array data from the other
bank, without exiting the autoselect mode.
To access the autoselect codes in-system, the host system can issue the autoselect command via the command register, as shown in Table 12. This method does
not require VID. See “Autoselect Command Sequence” on page 46 for more
information.
-
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP29
Page 30
Advance Information
Ta b l e 5 . Autoselect Codes for PL129J
DescriptionCE1# CE2#OE#WE#
Manufacturer
:
Spansion
ID
products
Read
Cycle 1
Read
Cycle 2
LH
LHXX
HL
LH
HL
LH
LHXX
HL
A21
to
A10A9 A8A7A6
A12
V
I
D
V
I
D
XLLXLLLL0001h
XLLL
A5
to
A3 A2 A1A0
A4
LLLH227Eh
HHHL2221h
DQ15
to DQ0
Device ID
LH
HL
LH
HL
LH
HL
LHSAX
LHXX
HHHH2200h
V
I
XLLLLLHL
D
V
I
XXLXLLHH
D
0001h (protected),
0000h (unprotected)
DQ7=1 (factory
locked),
DQ6=1 (factory and
customer locked)
Read
Cycle 3
Sector
Protection
Verification
Secured
Silicon
Indicator Bit
(DQ7, DQ6)
Legend: L = Logic Low = VIL, H = Logic High = VIH, BA = Bank Address, SA = Sect or Ad dress, X = Don’t care.
Note: The autoselect codes may also be accessed in-system via command sequences
30S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 31
Advance Information
Ta b l e 6 . PL129J Boot Sector/Sector Block Addresses for Protection/Unprotection
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP31
Page 32
Advance Information
Selecting a Sector Protection Mode
The device is shipped with all sectors unprotected. Optional Spansion programming services enable programming and protecting sectors at the factory prior to
shipping the device. Contact your local sales office for details.
It is possible to determine whether a sector is protected or unprotected. See “Se-
cured Silicon Sector Addresses” on page 29 for details.
Ta b l e 7 . Sector Protection Schemes
DYBPPBPPB LockSector State
000Unprotected—PPB and DYB are changeable
001Unprotected—PPB not changeable, D Y B is chan ge ab le
010
Protected—PPB and DYB are chan ge ab le100
110
011
Protected—PPB not changeable, DYB is changeable101
111
Sector Protection
The PL129J features several levels of sector protection, which can disable both
the program and erase operations in certain se ctors or s ector groups:
Persistent Sector Protection
A command sector protection method that replaces the old 12 V controlled protection method.
Password Sector Protection
A highly sophisticated protection method that requires a password before
changes to certain sectors or sector groups are permitted
WP# Hardware Protection
A write protect pin that can prevent program or erase oper ations in sectors S A1133, SA1-134, SA2-0 and SA2 - 1.
The WP# Hardware Protection feature is always available, independent of the
software managed protection method chosen.
Selecting a Sector Protection Mode
All parts default to operate in the Persistent Sector Protection mode. The customer must then choose if the Persistent or Password Protection method is most
desirable. There are two one-time programmable non-volatile bits that define
which sector protection method is used. If the Persistent Sector Protection
method is desired, programming the Persistent Sector Protection Mode Locking
Bit permanently sets the device to the Persistent Sector Protection mode. If the
Password Sector Protection method is desired, programming the Password Mode
Locking Bit permanently sets the device to the Password Sector Protection mode.
It is not possible to switch betw een t h e two protection modes once a locking bit
has been set. One of the two modes must be selected when the device is first
32S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 33
Advance Information
programmed. This prevents a program or virus from later setting the Password
Mode Locking Bit, which would cause an unexpected shift from the default Per
sistent Sector Protection Mode into the P a sswor d Protection Mode.
The device is shipped with all sectors unprotected. Optional Spansion programming services enable programming and protecting sectors at the factory prior to
shipping the device. Contact your local sales office for details.
It is possible to determine whether a sector is protected or unprotected. See Autoselect Mode for details.
Persistent Sector Protection
The Persistent Sector Protection method replaces the 12 V controlled protection
method in previous flash devices. This new method provides three different sec
tor protection states:
Persistently Locked—The sector is protected and cannot be changed.
Dynamically Locked—The sector is protected and can be changed by a simple
command.
Unlocked—The sector is unprotected and can be changed by a simple com-
mand.
To achieve these states, three types of “bits” are used:
-
-
Persistent Protection Bit
Persistent Protection Bit Lock
Persistent Sector Protection Mode Locking Bit
Persistent Protection Bit (PPB)
A single Persistent (non-volatile) Protection Bit is assigned to a maximum four
sectors (see the sector address tables for specific sector protection groupings).
All 4 Kword boot-block sectors have individual sector Persistent Protection Bits
(PPBs) for greater flexibility. Each PPB is individually modifiable through the PPB
Write Command.
The device erases all PPBs in parallel. If any PPB requires erasure, the devic e
must be instructed to preprogram all of the sector PPBs prior to PPB erasure. Oth
erwise, a previously erased sector PPBs can potentially be over-er ased. The flash
device does not have a built-in means of preventing sector PPBs over-erasure.
Persistent Protection Bit Lock (PPB Lock)
The Persistent Protection Bit Lock (PPB Lock) is a global volatile bit. When set to
“1”, the PPBs cannot be changed. When cleared (“0”), the PPBs are changeable.
There is only one PPB Lock bit per device. The PPB Lock is cleared after powerup or hardware reset. There is no command sequence to unlock the PPB Lock.
Dynamic Protection Bit (DYB)
A volatile protection bit is assigned for each sector. After power-up or hardware
reset, the contents of all DYBs is “0”. Each DYB is individually modifiable through
the DYB Write Command.
-
When the parts are first shipped, the PPBs are cleared, the DYBs are cleared, and
PPB Lock is defaulted to power up in the cleared state – meaning the PPBs are
changeable.
When the device is first powered on the DYBs power up cleared (sectors not protected). The Protection State for each sector is determined by the logical OR of
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP33
Page 34
Advance Information
the PPB and the DYB related to that sector. For the sectors that have the PPBs
cleared, the DYBs control whether or not the sector is protected or unprotected.
By issuing the DYB Write command sequences, the DYBs are set or cleared, thus
placing each sector in the protected or unprotected state. These are the so-called
Dynamic Locked or Unlocked states. These states are called dynamic states be
cause it is very easy to switch back and forth between the protected and
unprotected conditions. This allows software to easily protect sectors against in
advertent changes yet does not prevent the easy removal of protection when
changes are needed. The DYBs maybe set or cleared as often as needed.
The PPBs allow for a more static, and difficult to change, level of protection. The
PPBs retain their state across power cycles because the PPBs are non- volatile. In
dividual PPBs are set with a command but must all be cleared as a group through
a complex sequence of program and erasing commands. The PPBs are also lim
ited to 100 erase cycles.
The PPB Lock bit adds an additional level of protection. Once all PPBs are programmed to the desired settings, the PPB Lock may be set to “1” . Setting the PPB
Lock disables all program and erase commands to the non-volatile PPBs. In ef
fect, the PPB Lock Bit locks the PPBs into their current state. The only way to clear
the PPB Lock is to go through a power cycle. System boot code can determine if
any changes to the PPB are needed; for example, to allow new system code to
be downloaded. If no changes are needed then the boot code can set the PPB
Lock to disable any further changes to the PPBs during system oper ati on.
-
-
-
-
-
The WP#/ACC write protect pin adds a final level of hardware protection to sectors SA1-133, SA1-134, SA2-0 and S A2- 1. When thi s pin is l ow it is not possib le
to change the contents of these sectors. These sectors generally hold system
boot code. The WP#/ACC pin can prevent any changes to the boot code that could
override the choices made while setting up sector protection during system
initialization.
For customers who are concerned about malicious viruses there is another level
of security - the persistently locked state. To persistently protect a given sector
or sector group, the PPBs associated with that sector need to be set to “1”. Once
all PPBs are programmed to the desired settings, the PPB Lock should be set to
“1” . Setting the PPB Lock automatically disables all progr am and erase commands
to the Non-Volatile PPBs. In effect, the PPB Lock “freezes” the PPBs into their c ur
rent state. The only way to clear the PPB Lock is to go through a power cycle.
It is possible to have sectors that have been persistently locked, and sectors that
are left in the dynamic state. The sectors in the dynamic state are all unprote cted.
If there is a need to protect some of them, a simp le DYB Write command se
quence is all that is necessary. The DYB write command for the dynamic sectors
switch the DYBs to signify protected and unprotected, respectively. If there is a
need to change the status of the persistently locked sectors, a few more steps
are required. First, the PPB Lock bit must be disabled by either putting the device
through a power-cycle, or hardware reset. The PPBs can then be changed to re
flect the desired settings. Setting the PPB lock bit once again lock the PPBs, and
the device operates normally agai n.
-
-
-
The best protection is achieved by executing the PPB lock bit set command e arly
in the boot code, and protect the boot code by holding WP#/ACC = VIL.
T able 17 contains all possi ble combinations of the DYB, PPB, and PPB lock relating
to the status of the sector.
34S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 35
Advance Information
In summary , if the PPB is set, and the PPB lock is set, the sector is protected and
the protection can not be removed until the next power cycle clears the PPB lock.
If the PPB is cleared, the sector can be dynamically locked or unlocked. The DYB
then controls whether or not the sector is protected or unprotected.
If the user attempts to program or erase a protected sector, the device ignores
the command and returns to read mode. A program command to a protected sec
tor enables status polling for approximately 1 µs before the device returns to read
mode without having modified the contents of the protected sector. An erase
command to a protected sector enables status polling for approximately 50 µs
after which the device returns to read mode without having erased the protected
sector.
The programming of the DYB, PPB, and PPB lock for a given sector can be verified
by writing a DYB/PPB/PPB lock verify command to the device. There is an alter
native means of reading the protection status. Take RESET# to VIL and hold WE#
at VIH.(The high voltage A9 Autoselect Mode also works for reading the status of
the PPBs). Scanning the addresses (A18–A 11) while (A6, A1, A0) = (0, 1, 0) pro
duces a logical ‘1” code at device output DQ0 for a protected sector or a “0” for
an unprotected sector . In this mode, the other addresses are don’t cares. Address
location with A1 = VIL are reserved for a utoselect manufacturer and device
codes.
-
-
-
Persistent Sector Protection Mode Locking Bit
Like the password mode locking bit, a Persistent Sector Protection mode locking
bit exists to guarantee that the device remain in software sector protection. Once
set, the Persistent Sector Protection locking bit prevents programming of the
password protection mode locking bit. This guarantees that a hacker could not
place the device in password protection mode.
Password Protection Mode
The Password Sector Protection Mode method allows an even higher level of security than the Persistent Sector Protection Mode. There are two main differences
between the Persistent Sector Protection and the Password Sector Protection
Mode:
When the device is first powered on, or comes out of a reset cycle, the PPB Lock
bit set to the locked state, rather than cleared to the unlocked state.
The only means to clear the PPB Lock bit is by writing a unique 64-bit Password
to the device.
The Password Sector Protection method is otherwise identical to the Persistent
Sector Protection method.
A 64-bit password is the only additional tool utilized in this method.
Once the Password Mode Locking Bit is se t, the password is permanently set with
no means to read, program, or erase it. The password is used to clear the PPB
Lock bit. The Password Unlock command must be written to the flash, along with
a password. The flash device internally compares the given password with the
pre-programmed password. If they match, the PPB Lock bit is cleared, and the
PPBs can be altered. If they do not match, the flash device does nothing. There
is a built-in 2 µs delay for each “password check.” This delay is intended to thwart
any efforts to run a program that tries all possible combinations in order to cr ack
the password.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP35
Page 36
Advance Information
Password and Password Mode Locking Bit
In order to select the Password sector protection scheme, the customer must first
program the password. The password may be correlated to the unique Electronic
Serial Number (ESN) of the particular flash device. Each ESN is different for every
flash device; therefore each password should be different for every flash device.
While programming in the password region, the customer may perform P assword
Verify operations.
Once the desired password is programmed in, the customer must then set the
Password Mode Locking Bit. This operation achi eves two objectives:
Permanently sets the device to operate using the P assword Protection Mode. It is
not possible to reverse this function.
Disables all further commands to the password region. All program, and read operations are ignored.
Both of these objectives are important, and if not carefully considered , may le ad
to unrecoverable errors. The user must be sure that the Password Protection
method is desired when setting the Password Mode Locking Bit. More importantly ,
the user must be sure that the password is correct when the Password Mode
Locking Bit is set. Due to the fact that read operations are disabled, there is no
means to verify what the password is afterwards. If the password is lost afte r set
ting the Password Mode Locking Bit, there is not any way to clear the PPB Lock bit.
-
The Password Mode Locking Bit, once set, prevents reading the 64-bit password
on the DQ bus and further password programming. The Password Mode Locking
Bit is not erasable. Once Password Mode Locking Bit is programmed, the Persis
tent Sector Protection Locking Bit is disabled from programming, guaranteeing
that no changes to the protection scheme are allowed.
64-bit Password
The 64-bit Password is located in its own memory space and is accessi ble through
the use of the Password Program and Verify commands (see “Password Verify
Command”). The password functio n works in conjunction with the Password
Mode Locking Bit, which when set, prevents the Password Verify command from
reading the contents of the password on the pins of the device.
Write Protect (WP#)
The Write Protect feature provides a hardware method of protecting the upper
two and lower two sectors(PL127J: 0, 1, 268, and 269, PL064J: 0, 1, 140, and
141, PL032J: 0, 1, 76, and 77, PL129J: SA1-133, SA1-134,SA2-0 and SA2-1)
without using V
viously discussed method, “High Voltage Sector Protection” on page 37.
If the system asserts VIL on the WP#/ACC pin, the device disables program and
erase functions in the two outermost 4 Kword sectors on both ends of the flash
array independent of whether it was previously protected or unprotected.
If the system asserts VIH on the WP#/ACC pin, the device reverts the upper two
and lower two sectors to whether they were last set to be protected or unpro
tected. That is, sector protection or unprotection for these sectors depends on
whether they were last protected or unprotected using the method described in
“High Voltage Sector Prote ction ” on page 37.
. This function is provided by the WP# pin and overrides the pre-
ID
-
-
Note that the WP#/ACC pin must not be left floating or unconnected; inconsistent
behavior of the device may result.
36S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 37
Advance Information
Persistent Protection Bit Lock
The Persistent Protection Bit (PPB) Lock is a volatile bit that reflects the state of
the Password Mode Locking Bit after power- up reset. If the Password Mode Lock
Bit is also set after a hardware reset (RESET# asserted) or a power-up reset, the
ONLY means for clearing the PPB Lock Bit in Password Protection Mode is to issue
the Password Unlock command. Successful execution of the Password Unlock
command clears the PPB Lock Bit, allowing for sector PPBs modifications. Assert
ing RESET#, taking the device through a power-on reset, or issuing the PPB Lock
Bit Set command sets the PPB Lock Bit to a “1” when the Password Mode Lock Bit
is not set.
If the Password Mode Locking Bit is not set, including Persistent Protection Mode,
the PPB Lock Bit is cleared after power-up or hardware reset. The PPB Lock Bit is
set by issuing the PPB Lock Bit Set command. Once set the only means for clear
ing the PPB Lock Bit is by issuing a hardware or power-up reset. The Password
Unlock command is ignored in Persistent Protection Mode.
High Voltage Sector Protection
Sector protection and unprotection may also be implemented using programming
equipment. The procedure requires high voltage (V
SET# pin. Refer to Figure 1 for details on this procedure. Note that for sector
unprotect, all unprotected sectors must first be protected prior to the first sector
write cycle.
) to be placed on the RE-
ID
-
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP37
38S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 39
Advance Information
Temporary Sector Unprotect
This feature allows temporary unprotection of previously protected sectors to
change data in-system. The Sector Unprotect mode is activated by setting the
RESET# pin to
grammed or erased by selecting the sector addresses. Once VID is removed from
the RESET# pin, all the previously protected sectors are protected
Figure 2 shows the algorithm, and Figure 21 shows the timing diagrams, for this
feature. While PPB lock is set, the device cannot enter the Temporary Sector Unprotection Mode.
VID. During this mode, formerly protected sectors can be pro-
again.
START
RESET# = V
(Note 1)
Perform Erase or
Program Operations
RESET# = V
Temporary Sector
Unprotect Completed
(Note 2)
Notes:
1. All protected sectors are unprotected (If WP#/ACC = VIL, upper two and lower
two sectors remain protected).
2. All previously protected sectors are protected once again
ID
IH
Figure 2. Temporary Sector Unprotect Operation
Secured Silicon Sector Flash Memory Region
The Secured Silicon Sector feature provides a Flash memory regio n that enables
permanent part identification through an Electronic Serial Number (ESN) The
128-word Secured Silicon sector is divided into 64 factory-lockable words that
can be programmed and locked by the customer. The Secured Silicon sector is
located at addresses 000000h-00007Fh in both Persistent Protection mode and
Password Protection mode. Indicator bits DQ6 and DQ7 are used to indicate the
factory-locked and customer locked status of the part.
The system accesses the Secured Silicon Sector through a command sequence
quence” on page 46). After the system has written the Enter Secured Silicon
Sector command sequence, it may read the Secured Silicon Sector by using the
addresses normally occupied by the boot sectors. This mode of oper ation contin
ues until the system issues the Exit Secured Silicon Sector command sequence,
or until power is removed from the device. On power-up, or following a hardware
reset, the device reverts to sending commands to the normal address space. Note
that the ACC function and unlock bypass modes are not available when the Se
cured Silicon Sector is enabled.
-
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP39
Page 40
Advance Information
Factory-Locked Area (64 words)
The factory-locked area of the Secured Silicon Sector (000000h-00003Fh) is
locked when the part is shipped, whether or not the area was programmed at the
factory. The Secured Silicon Sector Factory-locked Indicator Bit (DQ7) is perma
nently set to a “1”. Optional Spansion programming services can program the
factory-locked area with a random ESN, a customer-defined code, or any combi
nation of the two. Because only F ASL can program and protect the factory-l ocked
area, this method ensures the security of the ESN once the product is shipped to
the field. Contact your local sales office for details on using Spansion’s program
ming services. Note that the ACC function and unlock bypass modes are not
available when the Secured Silicon sector is enabled.
-
-
-
Customer-Lockable Area (64 words)
The customer-lockable area of the Secured Silicon Sector (000040h-00007Fh) is
shipped unprotected, which allows the customer to program and optionally lock
the area as appropriate for the application. The Secured Silicon Sector Customer locked Indicator Bit (DQ6) is shipped as “0” and can be permanently locked to “1”
by issuing the Secured Silicon Protection Bit Progr am Command. The Secured Sil
icon Sector can be read any number of times, but c an be programmed and locked
only once. Note that the accelerated programming (A CC) and unlock bypass func
tions are not available when programming the Secured Silicon Sector.
-
-
The Customer-lockable Secured Silicon Sector area can be protected using one
of the following procedures:
Write the three-cycle Enter Secured Silicon Sector Region command se-
quence, and then follow the in-system sector protect algorithm as shown in
Figure 1, except that RESET# may be at either VIH or VID. This allows in-sys-
tem protection of the Secured Silicon Sector Region without raising any device pin to a high voltage. Note that this method is only applicable to the
Secured Silicon Sector.
T o verify the protect/unprotect status of the Secured Silicon Sector , follow the
algorithm shown in
Once the Secured Silicon Sector is locked and verified, the system must write the
Exit Secured Silicon Sector Region co mmand se quence to return to readin g and
writing the remainder of the array.
The Secured Silicon Sector lock must be used with caution since, once locked,
there is no procedure available for unlocking the Secured S ilicon Sector area and
none of the bits in the Secur ed Sili con S ector memory space can be modif ied in
any way.
Figure 3.
Secured Silicon Sector Protection Bits
The Secured Silicon Sector Protection Bits prevent programming of the Secured
Silicon Sector memory area. Once set, the Secured Silicon Sector memory area
contents are non-modifiable.
40S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 41
Advance Information
START
Write 40h to SecSi
Figure 3. Secured Silicon Sector Protect Verify
Hardware Data Protection
The command sequence requirement of unlock cycles for progr amming or erasing
provides data protection against inadvertent writes. In addition, the following
hardware data protection measures prevent accidental erasure or programming,
which might otherwise be caused by spurious system level signals during V
power-up and power-down transitions, or from system noise.
RESET# =
or V
V
IH
ID
Wait 1 µs
Write 60h to
any address
Sector address
with A6 = 0,
A1 = 1, A0 = 0
Read from SecSi
Sector address
with A6 = 0,
A1 = 1, A0 = 0
If data = 00h,
SecSi Sector is
unprotected.
If data = 01h,
SecSi Sector is
protected.
Remove VIH or VID
from RESET#
Write reset
command
SecSi Sector
Protect Verify
complete
CC
Low VCC Write Inhibit
When VCC is less than V
tects data during VCC power-up and power-down. The command register and all
internal program/erase circuits are disabled, and the device resets to the read
mode. Subsequent writes are ignored until V
must provide the proper signals to the control pins to prevent unintentional writes
when V
is greater than V
CC
, the device does not accept any write cycl es. This pro-
LKO
LKO
is greater than V
CC
.
. The system
LKO
Write Pulse “Glitch” Protection
Noise pulses of less than 3 ns (typical) on OE#, CE1#, CE2# or WE# do not initiate a write cycle.
Logical Inhibit
Write cycles are inhibited by holdi ng any one of OE# = VIL, CE1# = CE2# = V
or WE# = VIH. To initiate a write cycle, CE1# / CE2# and WE# must be a logical
zero while OE# is a logical one.
IH
Power-Up Write Inhibit
If WE# = CE# (CE1#, CE2# in PL129J) = VIL and OE# = VIH during power up,
the device does not accept commands on the rising edge of WE#. The internal
state machine is automatically reset to the read mode on power-up.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP41
Page 42
Advance Information
Common Flash Memory Interface (CFI)
The Common Flash Interface (CFI) specification outlines device and host system
software interrogation handshake, which allows specific vendor-specified soft
ware algorithms to be used for entire families of devices. Software support can
then be device-independent, JEDEC ID-independent, and forward- and back
ward-compatible for the specified flash device families. Flash vendors can
standardize their existing interfaces for long-term compatibility.
This device enters the CFI Query mode when the system writes the CFI Query
command, 98h, to address 55h, any time the device is ready to read array data.
The system can read CFI information at the addresses given in
Table 10, and Table 11. T o terminate reading CFI data, the system must write the
reset command. The CFI Query mode is not accessible when the device is executing an Embedded Program or embedded Er as e al gorithm.
The system can also write the CFI query command when the device is in the autoselect mode. The device enters the CFI query mode, and the system can read
CFI data at the addresses given in
system must write the reset command to return the device to reading array data.
For further information, please refer to the CFI Specification and CFI Publication
100. Contact your local sales office for copies of these documents .
Table 8, Table 9, Table 10, and Table 11. The
-
-
Table 8, Table 9,
Ta bl e 8 . CFI Query Identification String
AddressesDataDescription
10h
11h
12h
13h
14h
15h
16h
17h
18h
19h
1Ah
0051h
0052h
0059h
0002h
0000h
0040h
0000h
0000h
0000h
0000h
0000h
Query Unique ASCII string “QRY”
Primary OEM Command Set
Address for Primary Extended Table
Alternate OEM Command Set (00h = none exists)
Address for Alternate OEM Extended Table (00h = none exists)
42S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 43
Advance Information
Ta b l e 9 . System Interface String
AddressesDataDescription
1Bh0027h
1Ch0036h
VCC Min. (write/erase)
D7–D4: volt, D3–D0: 100 millivolt
VCC Max. (write/erase)
D7–D4: volt, D3–D0: 100 millivolt
1Dh0000hVPP Min. voltage (00h = no VPP pin present)
1Eh0000hVPP Max. voltage (00h = no VPP pin present)
1Fh0003hTy pical timeout per single byte/w ord write 2N µs
20h0000hTypical timeout for Min. size buffer write 2N µs (00h = not supported)
21h0009hTypical timeout per individual block erase 2N ms
22h0000hTypical timeout for full chip erase 2N ms (00h = not supported)
23h0004hMax. timeout for byte/word write 2N times typical
24h0000hMax. timeout for buffer write 2N times typical
25h0004hMax. timeout per individual block erase 2N times typical
26h0000hMax. timeout for full chip erase 2N times typical (00h = not supported)
Ta b l e 1 0 . Device Geometry Definition
AddressesDataDescription
27h0018h (PL129J)Device Size = 2N byte
28h
29h
2Ah
2Bh
2Ch0003hNumber of Erase Block Regions within device
2Dh
2Eh
2Fh
30h
31h00FDh (PL129J)
32h
33h
34h
35h
36h
37h
38h
39h
3Ah
3Bh
3Ch
0001h
0000h
0000h
0000h
0007h
0000h
0020h
0000h
0000h
0000h
0001h
0007h
0000h
0020h
0000h
0000h
0000h
0000h
0000h
Flash Device Interface description (refer to CFI publication 100)
Max. number of byte in multi-byte write = 2N
(00h = not supported)
Erase Block Region 1 Information
(refer to the CFI specification or CFI publication 100)
Erase Block Region 2 Information
(refer to the CFI specification or CFI publication 100)
Erase Block Region 3 Information
(refer to the CFI specification or CFI publication 100)
Erase Block Region 4 Information
(refer to the CFI specification or CFI publication 100)
Ta b l e 1 1 . Primary Vendor-Specific Extended Query
AddressesDataDescription
40h
41h
42h
0050h
0052h
0049h
Query-unique ASCII string “PRI”
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP43
43h0031hMajor version number, ASCII (reflects modifications to the silicon)
44h0033hMinor version number, ASCII (reflects modifications to the CFI table)
45h
46h0002h
47h0001h
48h0001h
49h0007h (PLxxxJ)
4Ah00E7h (PL129J)
4Bh0000h
4Ch0002h (PLxxxJ)
4Dh0085h
4Eh0095h
TBD
Address Sensitive Unlock (Bits 1-0)
0 = Required, 1 = Not Required
Silicon Revision Number (Bits 7-2)
Erase Suspend
0 = Not Supported, 1 = To Read Only, 2 = To Read & Write
Sector Protect
0 = Not Supported, X = Number of sectors in per group
Sector Temporary Unprotect
00 = Not Supported, 01 = Supported
Sector Protect/Unprotect scheme
07 = Advanced Sector Protection
Simultaneous Operation
00 = Not Supported, X = Number of Sectors excluding Bank 1
Burst Mode Type
00 = Not Supported, 01 = Supported
Page Mode Type
00 = Not Supported, 01 = 4 Word Page, 02 = 8 Word Page
ACC (Acceleration) Supply Minimum
00h = Not Supported, D7-D4: Volt, D3-D0: 100 mV
ACC (Acceleration) Supply Maximum
00h = Not Supported, D7-D4: Volt, D3-D0: 100 mV
4Fh0001h
50h0001h
57h0004h
58h0027h (PL129J)
59h0060h (PL129J)
5Ah0060h (PL129J)
5Bh0027h (PL129J)
Top/Bottom Boot Sector Flag
00h = Uniform device, 01h = Both top and bottom boot with write protect,
02h = Bottom Boot Device, 03h = Top Boot Device,
04h = Both Top and Bottom
Program Suspend
0 = Not supported, 1 = Supported
Bank Organization
00 = Data at 4Ah is zero, X = Number of Banks
Bank 1 Region Information
X = Number of Sectors in Bank 1
Bank 2 Region Information
X = Number of Sectors in Bank 2
Bank 3 Region Information
X = Number of Sectors in Bank 3
Bank 4 Region Information
X = Number of Sectors in Bank 4
44S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 45
Advance Information
Command Definitions
Writing specific address and data commands or sequences into the command
register initiates device operations.
sequences. Writing incorrect address and data values or writing them in the
improper sequence may place the device in an unknown state. A reset com
mand is then required to return the device to reading array data.
All addresses are latched on the falling edge of WE# or CE# (CE1# / CE2# in
PL129J), whichever happens later. All data is latched on the rising edge of WE#
or CE# (CE1# / CE2# in PL129J), whichever happens first. See
for timing diagrams.
Reading Array Data
The device is automatically set to reading array data after device power-up. No
commands are required to retrieve data. Each bank is ready to read array data
after completing an Embedded Program or Embedded Erase algorithm.
After the device accepts an Erase Suspend command, the corresponding bank
enters the erase-suspend-read mode, after which the system can read data from
any non-erase-suspended sector within the same bank. The system can read
array data using the standard read timing, except that if it reads at an address
within erase-suspended sectors, the device outputs status data. After completing
a programming operation in the Erase Suspend mode, the system may once
again read array data with the same exception. See
sume Commands” on page 50 for more information.
Table 12 defines the valid register command
-
AC Characteristics
“Erase Suspend/Erase Re-
The system must issue the reset command to return a bank to the read (or erase-
suspend-read) mode if DQ5 goes high during an active program or erase opera
tion, or if the bank is in the autoselect mode. See “Reset Co mm and ,” for more
information.
See “Requirements for Reading Array Data” on page 19 in “Device Bus Opera-
tions” for more information. The AC Characteristics table provides the read
parameters, and Figure 12 shows the timing diag ram.
Reset Command
Writing the reset command resets the banks to the read or erase-suspend-read
mode. Address bits are don’t cares for this command.
The reset command may be written between the sequence cycles in an erase
command sequence before erasing begins. This resets the bank to which the sys
tem was writing to the read mode. Once erasure begins, however, the device
ignores reset commands until the operation is complete.
The reset command may be written between the sequence cycles in a program
command sequence before programming begins. This resets the bank to which
the system was writing to the read mode. If the program command sequence is
written to a bank that is in the Erase Suspend mode, writing the reset command
returns that bank to the erase-suspend-read mode. Once programming begins,
however, the device ignores reset commands until the operation is complete.
The reset command may be written between the sequence cycles in an autoselect
command sequence. Once in the autoselect mode, the reset command must be
written to return to the read mode. If a bank entered the autoselect mode while
in the Erase Suspend mode, writing the reset command returns that bank to the
erase-suspend-read mode.
-
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP45
Page 46
Advance Information
If DQ5 goes high during a program or er ase operation, writing the reset command
returns the banks to the read mode (or erase-suspend-read mode if that bank
was in Erase Suspend).
Autoselect Command Sequence
The autoselect command sequence allows the host system to access the manufacturer and device codes, and determine whether or not a sector is protected.
The autoselect command sequence may be written to an address within a bank
that is either in the read or erase-suspend-read mode. The autosel ect command
may not be written while the device is actively programming or erasing in the
other bank.
The autoselect command sequence is initiated by first writing two unlock cycl es.
This is followed by a third write cycle that contains the bank address and the au
toselect command. The bank then enters the autoselect mode. The system may
read any number of autoselect codes without reinitiating the command sequence.
Table 12 shows the address and data requirements. To determine sector protec-
tion information, the system must write to the appropriate bank address (BA) and
sector address (SA).
The system must write the reset command to return to the read mode (or erasesuspend-read mode if the bank was previously in Erase Suspend).
-
Enter Secured Silicon Sector/Exit Secured Silicon Sector Command
Sequence
The Secured Silicon Sector region provides a secured data area containing a ran dom, eight word electronic serial number (ESN). The system can access the
Secured Silicon Sector region by issuing the three-cycle Enter Secured Silicon
Sector command sequence. The device continues to access the Secured Silicon
Sector region until the system issues the four-cycle Exit Secured Silicon Sector
command sequence. The Exit Secured Silicon Sector command sequence returns
the device to normal operation. The Secured Silicon Sector is not ac cessible when
the device is executing an Embedded Program or embedded Erase algorithm.
Table 12 shows the address and data requirements for both command sequences.
Also see, “Secured Silicon Sector Flash Memory Region” on page 39 for further information. Note: The ACC function and unlock byp ass modes are not availabl e
when the Secured Silicon Sector is enabled.
Word Program Command Sequence
Programming is a four-bus-cycle operation. The program command sequence is
initiated by writing two unlock write cycles, followed by the program set-up com
mand. The program address and data are written next, which in turn initi ate the
Embedded Program algorithm. The system is not re quired to provide further con
trols or timings. The device automatically provides internally generated program
pulses and verifies the programmed cell margin.
data requirements for the program command sequence. Note that the Secured
Silicon Sector, autoselect, and CFI functions are unavailable when a [program/
erase] operation is in progress.
Table 12 shows the address and
-
-
When the Embedded Program algorithm is complete, that bank then returns to
the read mode and addresses are no longer latched. The system can determine
the status of the program operation by using DQ7, DQ6, or RY/BY#. See
Operation Status” on page 56 for information on these status bits.
“Write
46S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 47
Advance Information
Any commands written to the device during the Embedded Program Algorithm
are ignored. Note that a hardware reset immediately terminates the program
operation. The program command sequence should be reinitiated once that bank
has returned to the read mode, to ensure data integrity. Note that the Secured
Silicon Sector, autoselect and CFI functions are unavailable when the Secured Sil
icon Sector is enabled.
Programming is allowed in any sequence and across sector boundaries. A bit cannot be programmed from “0” back to a “1.” Attempting to do so may
cause that bank to set DQ5 = 1, or cause the DQ7 and DQ6 status bits to indicate
the operation was successful. However, a succeed ing read shows that the data is
still “0.” Only erase operations can convert a “0” to a “1.”
Unlock Bypass Command Sequence
The unlock bypass feature allows the sy stem to program data to a bank faster
than using the standard program command sequence. The unlock bypass com
mand sequence is initiated by first writing two unlock cycles. This is followed by
a third write cycle containing the unlock bypass command, 20h. That bank then
enters the unlock bypass mode. A two-cycle unlock bypass program command
sequence is all that is required to program in this mode. The first cy cle in this se
quence contains the unlock bypass program command, A0h; the second cycle
contains the program address and data. Additional data is programmed in the
same manner. This mode dispenses with the initial two unlock cycles required in
the standard program command sequence, resulting in faster tota l progr amming
Table 12 shows the requirements for the command sequence.
time.
-
-
-
During the unlock bypass mode, only the Unlock Bypass Program and Unlock Bypass Reset commands are valid. To exit the unlock bypass mode, the system
must issue the two-cycle unlock bypass reset command sequence. (
Table 13)
The device offers accelerated program operations through the WP#/ACC pin.
When the system asserts V
on the WP#/ACC pin, the device automatically en-
HH
ters the Unlock Bypass mode. The system may then write the two-cycle Unlock
Bypass program command sequence. The device uses the higher voltage on the
WP#/ACC pin to accelerate the operation. Note that the WP#/ACC pin must not
be at V
may result. In addition, the WP#/ACC pin must not be left floating or uncon
any operation other than accelerated programming, or device damage
HH
-
nected; inconsistent behavior of the device may result.
Figure 4 illustrates the algorithm for the program operation. See the Erase/Pro-
gram Operations table in AC Characteristics for parameters, and Figure 14 for
timing diagrams.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP47
Page 48
Advance Information
START
Write Program
Command Sequence
Data Poll
Embedded
Program
algorithm
in progress
from System
Verify Data?
Yes
No
Increment Address
Note: See Table 12 for program command sequence.
Figure 4. Program Operation
Chip Erase Command Sequence
Chip erase is a six bus cycle oper ation. The chip er ase command sequence is ini tiated by writing two unlock cycles, followed by a set-up command. Two
additional unlock write cycles are then followed by the chip erase command,
which in turn invokes the Embedded Erase algorithm. The devi ce does not require
the system to preprogram prior to erase. The Embedded Erase algorithm auto
matically preprograms and verifies the entire memory for an all z ero data pattern
prior to electrical erase. The system is not required to provide any controls or tim
ings during these operations. Table 12 shows the address and data requirements
for the chip erase command sequence.
When the Embedded Erase algorithm is complete, that bank returns to the read
mode and addresses are no longer latched. The system can determine the status
of the erase operation by using DQ7, DQ6, DQ2, or RY/BY#. Refer to
eration Status” on page 56 for information on these status bits.
No
Last Address?
Yes
Programming
Completed
-
-
“Write Op-
Any commands written during the chip erase operation are ignored. Note that Se-
cured Silicon Sector, autoselect, and CFI functions are unavailable when a
[program/erase] operation is in progress. However, note that a hardware reset
immediately terminates the erase operation. If that occurs, the chip erase com
mand sequence should be reinitiated once that bank has returned to reading
array data, to ensure data integrity.
Figure 5 illustrates the algorithm for the er ase operation. Se e the Erase/ Pr ogram
Operations tables in AC Characteristics for parameters, and Figure 16 for timing
diagrams.
48S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 49
Advance Information
Sector Erase Command Sequence
Sector erase is a six bus cycle operation. The sector erase command seq uence is
initiated by writing two unlock cycles, followed by a set-up command. Two addi
tional unlock cycles are written, and are then followed by the address of the
sector to be erased, and the sector erase command.
and data requirements for the sector erase command sequence.
The device does not require the system to preprogram prior to erase. The Embedded Erase algorithm automatically programs and verifies the entire memory
for an all zero data pattern prior to electrical er ase. The system is not required to
provide any controls or timings during these operations.
After the command sequence is written, a sector erase time-out of 50 µs occurs.
During the time-out period, additional sector addresses and sector erase com
mands may be written. Loading the sector erase buffer may be done in any
sequence, and the number of sectors may be from one sector to all sectors. The
time between these additional cycles must be less than 50 µs, otherwise erasure
may begin. Any sector eras e address and command following the ex ceeded timeout may or may not be accepted. It is recommended that processor interrupts be
disabled during this time to ensure all commands are accepted. The interrupts
can be re-enabled after the last Sector Erase command is written. If any com
mand other than 30h, B0h, F0h is input during the time-out period, the
normal operation cannot be guaranteed. The system must rewrite the com
mand sequence and any additional addresses and commands. Note that Secured
Silicon Sector, autoselect, and CFI functions are unavailable when a [program/
erase] operation is in progress.
-
Table 12 shows the address
-
-
-
The system can monitor DQ3 to determine if the sector erase timer has timed out
“DQ3: Sector Erase Timer” on page 61). The time-out begins from the rising
(See
edge of the final WE# pulse in the command sequence.
When the Embedded Erase algorithm is complete, the bank returns to reading
array data and addresses are no longer latched. Note that while the Embedded
Erase operation is in progress, the system can read data from the non-erasing
bank. The system can determine the status of the erase operation by reading
DQ7, DQ6, DQ2, or RY/BY# in the erasing bank. See
page 56 for information on these status bits.
Once the sector erase operation has begun, only the E rase Suspend command is
valid. All other commands are ignored. Howev er , note that a hardware reset im
mediately terminates the erase operation. If that occurs, the sector erase
command sequence should be reinitiated once that bank has returned to reading
array data, to ensure data integrity.
Figure 5 illustrates the algorithm for the er ase operation. Se e the Erase/ Pr ogram
Operations tables in AC Characteristics for parameters, and Figure 16 for timing
diagrams.
“Write Operation Status” on
-
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP49
Page 50
Advance Information
START
Write Erase
Command Sequence
(Notes 1, 2)
Data Poll to Erasing
Bank from System
No
Data = FFh?
Yes
Embedded
Erase
algorithm
in progress
Erasure Completed
Notes:
1. See Table 12 for erase command sequence.
2. See “DQ3: Sector Erase Timer” on page 61 for information on the sector erase
timer.
Figure 5. Erase Operation
Erase Suspend/Erase Resume Commands
The Erase Suspend command, B0h, allows the system to interrupt a sector erase
operation and then read data from, or program data to, any sector not selected
for erasure. The bank address is required when writ ing this command. This com
mand is valid only during the sector erase operation, including the 80 µs time-out
period during the sector erase command sequence. The Erase Suspend command
is ignored if written during the chip erase operation or Embedded Program
algorithm.
When the Erase Suspend command is written during the sector erase operation,
the device requires a maximum of 35 µs to suspend the erase operation. How
ever, when the Erase Suspend command is written during the sector erase
time-out, the device immediately terminates the time-out period and suspends
the erase operation. Addresses are “don’t-cares” when writing the Erase suspend
command.
After the erase operation has been suspended, the bank enters the erase-suspend-read mode. The system can read data from or program data to any sector
not selected for erasure. (The device “erase suspends” all sectors selected for
erasure.) Reading at any address within erase-suspended sectors produces sta
tus information on DQ7–DQ0. The system can use DQ7, or DQ6 and DQ2
together, to determine if a sector is actively erasing or is erase-susp ended. Se e
“Write Operation Status” on page 56 for information on these status bits.
-
-
-
After an erase-suspended program operatio n is complete, the bank returns to the
erase-suspend-read mode. The system can determine the status of the progr am
50S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 51
Advance Information
operation using the DQ7 or DQ6 status bits, just as in the standard W ord Program
operation. See
In the erase-suspend-read mode, the system can also issue the autosele ct command sequence. The device allows reading autoselect codes even at addresses
within erasing sectors, since the codes are not stored in the memory array . When
the device exits the autoselect mode, the device reverts to the Erase Suspend
mode, and is ready for another valid operation. See
dresses” on page 29 and “Autoselect Command Sequence” on page 46 for details.
To resume the sector erase operation, the system must write the Erase Resume
command (address bits are don’t care). The bank a ddress of the erase-sus
pended bank is required when writing this command. Further writes of the
Resume command are ignored. Another Erase Suspend command can be written
after the chip has resumed erasing.
“Write Operation Status ” on page 56 for more information.
Password Program Command
The Password Program Command permits programming the password that is
used as part of the hardware protection scheme. The actual password is 64-bits
long. Four Password Program commands ar e requi red to program the password.
The system must enter the unlock cycle, password program command (38h) and
the program address/data for each portion of the password when programming.
There are no provisions for entering the 2-cycle unlock cycle, the password pro
gram command, and all the password data. There is no special ad dressing order
required for programming the password. Also, when the password is undergoing
programming, Simultaneous Operation is disabled. Read oper ations to any mem
ory location will return the programming status. Once programming is complete,
the user must issue a Read/Reset command to return the device to normal oper
ation. Once the Password is written and verified, the Password Mode Locking Bit
must be set in order to prevent verification. The Passwor d Progr a m Command is
only capable of programming “0”s. Programming a “1” after a cell is programmed
as a “0” results in a time-out by the Embedded Program Algorithm™ with the cell
remaining as a “0”. The password is all ones when shipped from the factory. All
64-bit password combinations are valid as a password.
“Secured Silicon Sector Ad-
-
-
-
-
Password Verify Command
The Password Verify Command is used to verify the Password. The Password is
verifiable only when the Password Mode Locking Bit is not programmed. If the
Password Mode Locking Bit is programmed and the user attempts to verify the
Password, the device will always dr ive all F’s onto the DQ data bus.
The Password Verify command is permitted if the Secured Silicon sector is enabled. Also, the device will not operate in Simultaneous Operation when the
Password V erify command is executed. O nly the password is returned regardless
of the bank address. The lower two address bits (A1-A0) are valid during the
Password Verify. Writing the Read/Reset command returns the device back to
normal operation.
Password Protection Mode Locking Bit Program Command
The Password Protection Mode Locking Bit Program Command programs the
Password Protection Mode Locking Bit, which prevents further verifies or updates
to the Password. Once programmed, the Password Protection Mode Locking Bit
cannot be erased! If the Password Pr otecti on Mode Locking Bit is v erified as p ro
gram without margin, the Password Protection Mode Locking Bit Program
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP51
-
Page 52
Advance Information
command can be executed to improve the program margin. Once the Password
Protection Mode Locking Bit is programmed, the Persistent Sector Protection
Locking Bit program circuitry is disabled, thereby forcing the device to remain in
the Password Protection mode. Exiting the Mode Locking Bit Program command
is accomplished by writing the Read/Reset command.
Persistent Sector Protection Mode Locking Bit Program Command
The Persistent Sector Protection Mode Locking Bit Program Command programs
the Persistent Sector Protection Mode Locking Bit, which prevents the Password
Mode Locking Bit from ever being programmed. If the Persistent Sector Protec
tion Mode Locking Bit is verified as programmed without margin, the Persistent
Sector Protection Mode Locking Bit Program Command should be reissued to im
prove program margin. By disabling the program circuitry of the Password Mode
Locking Bit, the device is forced to remain in the Persistent Sector Protection
mode of operation, once this bit is set. Exiting the Persistent Protection Mode
Locking Bit Program command is accomplished by writing the Read/Reset
command.
Secured Silicon Sector Protection Bit Program Command
The Secured Silicon Sector Protection Bit Program Command programs the Secured Silicon Sector Protection Bit, which prevents the Secured Silicon sector
memory from being cleared. If the Secured Silicon Sector Protection Bit is verified
as programmed without margin, the Secured Silicon Sector Protection Bit Pro
gram Command should be reissued to improve program margin. Exiting the VCC-
level Secured Silicon Sector Protection Bit Program Command is accompli shed by
writing the Read/Reset command.
-
-
-
PPB Lock Bit Set Command
The PPB Lock Bit Set command is used to set the PPB Lock bit if it is cleared either
at reset or if the Password Unlock command was successfully executed. There is
no PPB Lock Bit Clear command. Once the PPB Lock Bit is set, it cannot be cleared
unless the device is taken through a power-on clear or the Password Unlock com
mand is executed. Upon setting the PPB Lock Bit, the PPBs are latched into the
DYBs. If the Password Mode Locking Bit is set, the PPB Lock Bit status is reflected
as set, even after a power-on reset cycle. Exiting the PPB Lock Bit Set command
is accomplished by writing the Read/Re set command (only in the Persistent Pro
tection Mode).
DYB Write Command
The DYB Write command is used to set or clear a DYB for a given sector. The high
order address bits (Amax–A12) are issued at the same time as the code 01h or
00h on DQ7-DQ0. All other DQ data bus pins are ignored during the data write
cycle. The DYBs are modifiable at any time, regardless of the state of the PPB or
PPB Lock Bit. The DYBs are cleared at power-up or hardware reset.Exiting the
DYB Write command is accomplished by writing the Read/Reset command.
Password Unlock Command
The Password Unlock command is used to clear the PPB Lock Bit so that the PPBs
can be unlocked for modification, thereby allowing the PPBs to become accessible
for modification. The exact password must be entered in order for the unlocking
function to occur. This command cannot be issued any faster than 2
to prevent a hacker from running through all 64-bit combinations in an attempt
-
-
µs at a time
52S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 53
Advance Information
to correctly match a password. If the command is issued before the 2 µs execution window for each portion of the unlock, the command will be ignored.
Once the Password Unlock command is entered, the RY/BY# indicates that the
device is busy . Approximately 1 µs is required for each portion of the unlock. Once
the first portion of the password unlock completes (RY/BY# is not low or DQ6
does not toggle when read), the next part of the password is written. The system
must thus monitor RY/BY# or the status bits to confirm when to write the next
portion of the password. Seven cycles are required to successfully clear the PPB
Lock Bit.
PPB Program Command
The PPB Program command is used to program, or set, a given PPB. Each PPB is
individually programmed (but is bulk erased with the other PPBs). The specific
sector address (A22–A12) are written at the same time as the program command
60h with A6 = 0. If the PPB Lock Bit is set and the corresponding PPB is set for
the sector, the PPB Program command will not execute and the c ommand will
time-out without programming the PPB.
After programming a PPB, two additional cycles are needed to determine whether
the PPB has been programmed with margin. If the PPB has been progra mmed
without margin, the program command should be reissued to improve the pro
gram margin. Also note that the total number of PPB program/erase cycles is
limited to 100 cycles. Cycling the PPBs beyond 100 cycles is not guaranteed.
-
The PPB Program command does not follow the Embedded Program algorithm.
All PPB Erase Command
The All PPB Erase command is used to erase all PPBs in bulk. There is no means
for individually erasing a specific PPB. Unli k e the PPB program, no specific se ctor
address is required. However, when the PPB erase command is written all Sector
PPBs are erased in parallel. If the PPB Lock Bit is set the ALL PPB Erase command
will not execute and the command will time-out without erasing the PPBs. After
erasing the PPBs, two additional cycles are needed to determine whet her the PPB
has been erased with margin. If the PPBs has been erased without margin, the
erase command should be reissued to improve the program margin.
It is the responsibility of the user to preprogram all PPBs prior to issuing the All
PPB Erase command. If the user attempts to erase a cleared PPB, over-erasure
may occur making it difficult to program the PPB at a later time. Also note that
the total number of PPB program/erase cycles is limited to 100 cycles. Cy cling the
PPBs beyond 100 cycles is not guaranteed.
DYB Write Command
The DYB Write command is used for setting the DYB, which is a volatile bit that
is cleared at reset. There is one DYB per sector. If the PPB is set, the sector is
protected regardless of the value of the DYB. If the PPB is cleared, setting the
DYB to a 1 protects the sector from programs or erases. Since this is a volatile
bit, removing power or resetting the device will clear the DYBs. The bank add ress
is latched when the command is written.
PPB Lock Bit Set Command
The PPB Lock Bit set command is used for setting the DYB, which is a volatile bit
that is cleared at reset. There is one DYB per sector. If the PPB is set, the sector
is protected regardless of the value of the DYB. If the PPB is cleared, setting the
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP53
Page 54
Advance Information
DYB to a 1 protects the sector from programs or erases. Since this is a volatile
bit, removing power or resetting the device will clear the DYBs. The bank add ress
is latched when the command is written.
Command
The programming of either the PPB or D YB for a given sector or sector g roup can
be verified by writing a Sector Protection Status command to the device.
Note that there is no single command to independently verify the programming
of a DYB for a given sector group.
Addr DataAddr DataAddr Data AddrDataAddrDataAddrData
Cycles
4555AAA2AA55
(BA)
555
(BA)
555
(BA)
555
(BA)
555
(BA)
90
X00
(BA)
90
X01
90X03
(SA)
90
X02
01
227E
(Note
8)
XX00/
XX01
(BA)
X0E
(Note
10)
(BA)
X0F
(Note
10)
Legend:
BA = Address of bank switching to autoselect mode, bypass mode, or erase operation. Determin ed by Amax :A19.
PA = Program Address (Amax:A0). Addresses latch on falling edge of WE# or CE1#/CE2# pulse, whichever happens
later.
PD = Program Data (DQ15:DQ0) written to location PA. Data latches on rising edge of WE# or CE1#/CE2# pulse,
whichever happens first.
RA = Read Address (Amax:A0).
RD = Read Data (DQ15:DQ0) from location RA.
SA = Sector Address (Amax:A12) for verifying (in autoselect mode) or erasing.
WD = Write Data. See “Configuration Register” definition for specific write data. Data latched on rising edge of WE#.
X = Don’t care
Notes:
1. See Table 1 for description of bus operations.
2. All values are in hexadecimal.
3. Shaded cells in table denote read cycles. All other cycles are write operations.
54S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 55
Advance Information
4. During unlock and command cycles, when lower address bits are 555 or 2AAh as shown in table, address bits higher than
A11 (except where BA is required) and data bits higher than DQ7 are don’t cares.
5. No unlock or command cycles required when bank is reading array data.
6. The Reset command is required to return to reading array (or to erase-suspend-read mode if previously in Erase Suspend)
when bank is in autoselect mode, or if DQ5 goes high (while bank is providing status information).
7. Fourth cycle of autoselect command sequence is a read cycle. System must provide bank address to obtain manufacturer ID
or device ID information. See
“Autoselect Command Sequence” on page 46 for more information.
8. The data is DQ6=1 for factory and customer locked and DQ7=1 for factory locked.
9. The data is 00h for an unprotected sector group and 01h for a protected sector group.
10.Device ID must be read across cycles 4, 5, and 6. PL129J (X0Eh = 2221h, X0Fh = 2200h).
11.System may read and program in non-erasing sectors, or enter autoselect mode, when in Program/Erase Suspend mode.
Program/Erase Suspend command is valid only during a sector erase operation, and requires bank address.
12.Program/Erase Resume command is valid only during Erase Suspend mode, and requires bank address.
13.Command is valid when device is ready to read array data or when device is in autoselect mode.
14.WP#/ACC must be at VID during the entire operation of command.
15.Unlock Bypass Entry command is required prior to any Unlock Bypass operation. Un lock Bypass Reset command is required
to return to the reading array.
Ta b l e 1 3 . Sector Protection Command Definitions
Command (Notes)
Reset1 XXXF0
Secured Silicon Sector Entry3 555AA2AA5555588
Secured Silicon Sector Exit4 555AA2AA5555590XX00
Secured Silicon Protection Bit Program
(Notes
5, 6)
Secured Silicon Protection Bit Status5 555AA2AA5555560OW48OW
All PPB Erase (Notes 5, 6, 13, 14)6 555AA2AA5555560WP60(SA)40
PPB Lock Bit Set3 555AA2AA5555578
PPB Lock Bit Status (Note 15)4 555AA2AA5555558SA
DYB Write (Note 7)4 555AA2AA5555548SAX1
DYB Erase (Note 7)4 555AA2AA5555548SAX0
DYB Status (Note 6)4 555AA2AA5555558SA
PPMLB Program (Notes 5, 6, 12)6 555AA2AA5555560PL68PL48PL
PPMLB Status (Note 5)5 555AA2AA5555560PL48PL
SPMLB Program (Notes 5, 6, 12)6 555AA2AA5555560SL68SL48SL
SPMLB Status (Note 5)5 555AA2AA5555560SL48SL
Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data
Cycles
6 555AA2AA5555560OW68OW48OW
Bus Cycles (Notes 1-4)
XX
[0-3]PD[0-3]
PWA
PWD
[0-3]
[0-3]
PWA
PWD
[0]
68
(0)
RD
(1)
RD
(0)
PWA
[1]
(SA)
WP
[0]
(SA)
WP
(SA)WPRD
RD
(0)
PWD
[1]
48
RD
(0)
RD
(0)
RD
(0)
PWA
PWD
[2]
[2]
(SA)WPRD
(0)
(SA)WPRD
(0)
RD
(0)
RD
(0)
PWA
[3]
PWD
[3]
Legend:
DYB = Dynamic Protection Bit
OW = Address (A7:A0) is (00011010)
PD[3:0] = Password Data (1 of 4 portions)
PPB = Persistent Protection Bit
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP55
Page 56
Advance Information
PWA = Password Address. A1:A0 selects portion of password.
PWD = Password Data being verified.
PL = Password Protection Mode Lock Address (A7:A0) is (00001010)
RD(0) = Read Data DQ0 for protection indicator bit.
RD(1) = Read Data DQ1 for PPB Lock status.
SA = Sector Address where security command applies. Address bits Amax:A12 uniquely select any sector.
SL = Persistent Protection Mode Lock Address (A7:A0) is (00010010)
WP = PPB Address (A7:A0) is (00000010)
X = Don’t care
PPMLB = Password Protection Mode Locking Bit
SPMLB = Persistent Protection Mode Locking Bit
Notes:
1. See Table 1 for description of bus operations.
2. All values are in hexadecimal.
3. Shaded cells in table denote read cycles. All other cycles are write operations.
4. During unlock and command cycles, when lower address bits are 555 or 2AAh as shown in table, address bits higher than
A11 (except where BA is required) and data bits higher than DQ7 are don’t cares.
5. The reset command returns device to reading array.
6. Cycle 4 programs the addressed locking bit. Cyc les 5 and 6 vali date bit has been ful ly programme d when DQ 0 = 1. If DQ0 =
0 in cycle 6, program command must be issued and verified again.
7. Data is latched on the rising edge of WE#.
8. Entire command sequence must be entered for each portion of password.
9. Command sequence returns FFh if PPMLB is set.
10.The password is written over four consecutive cycles, at addresses 0-3.
11.A 2 µs timeout is required between any two portions of password.
12.A 100 µs timeout is required between cycles 4 and 5.
13.A 1.2 ms timeout is required between cycles 4 and 5.
14.Cycle 4 erases all PPBs. Cycles 5 and 6 validate bits have been fully erased when DQ0 = 0. If DQ0 = 1 in cycle 6, erase
command must be issued and verified aga in. Before issuing erase command, all PPBs should be pro grammed to preven t PPB
overerasure.
15.DQ1 = 1 if PPB locked, 0 if unlocked.
Write Operation Status
The device provides several bits to determi ne the status of a progr am or erase oper a tion: DQ2, DQ3, DQ5, DQ6, and DQ7. Table 14 and the following subsections descri be
the function of these bits. DQ7 and DQ6 each offer a method for determining whether
a program or erase operation is complete or in progress. The device also provides a
hardware-based output signal, RY/BY#, to determine whether an Embedd ed Program
or Erase operation is in progress or has been completed.
DQ7: Data# Polling
The Data# Polling bit, DQ7, indicates to the host system whether an Embedded Program or Erase algorithm is in progress or completed, or whether a bank is in Erase
Suspend. Data# Polling is valid after the rising edge of the final WE# pulse in the com
mand sequence.
During the Embedded Program algorithm, the device outputs on DQ7 the complement
of the datum programmed to DQ7. This DQ7 st atus also applies to programming during
Erase Suspend. When the Embedded Program algorithm is complete, the device out
puts the datum programmed to DQ7. The s ystem must provide the program address
to read valid status information on DQ7. If a program address falls within a protected
sector, Data# Polling on DQ7 is active for approximately 1 µs, then that bank returns
to the read mode.
56S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
-
-
Page 57
Advance Information
During the Embedded Erase algorithm, Data# Polling produces a “0” on DQ7.
When the Embedded Erase algorithm is comp lete, or if the bank enters the Erase
Suspend mode, Data# Polling produces a “1” on DQ7. The system must provide
an address within any of the sectors selected for erasure to read valid status in
formation on DQ7.
After an erase command sequence is written, if all sectors selected for erasing
are protected, Data# Polling on DQ7 is active for approximately 400 µs, then the
bank returns to the read mode. If not all selected sectors are protected, the Em
bedded Erase algorithm erases the unprotected sec tors, and ignores the selected
sectors that are protected. However, if the system reads DQ7 at an address within
a protected sector, the status may not be valid.
When the system detects DQ 7 has changed from the complement to true data,
it can read valid data at D Q15–DQ0 on the following read cy cles. Just prior to the
completion of an Embedded Program or Erase oper ation, DQ7 may change asyn
chronously with DQ15–DQ0 while Output Enable (OE#) is asserted low. That is,
the device may change from providing status information to valid data on DQ7.
Depending on when the system samples the DQ7 output, it may read the status
or valid data. Even if the device has completed the program or erase operation
and DQ7 has valid data, the data outputs on DQ15–DQ0 may be still invalid. Valid
data on DQ15–DQ0 appears on successive read cycles.
-
-
-
Table 14 shows the outputs for Data# Polling on DQ7. 6 shows the Data# Polling
algorithm. Fi gure 18 in AC Characteristics shows the Data# Polling timing
diagram.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP57
Page 58
Advance Information
START
Read DQ7–DQ0
Addr = VA
Notes:
1. VA = Valid address for programming. During a sector erase operation, a valid address is
any sector address within t he sector being erased. During chip erase, a valid address is
any non-protected sector address.
2. DQ7 should be rechecked even if DQ5 = “1” because DQ7 may change simultaneously
with DQ5.
RY/ BY# : Rea d y/ B usy #
The RY/BY# is a dedicated, open-drain output pin which indicates whether an
Embedded Algorithm is in progress or complete. The RY/BY# status is valid after
the rising edge of the final WE# pulse in the command sequence. Since RY/BY#
is an open-drain output, several RY/BY# pins can be tied together in parallel with
a pull-up resistor to V
If the output is low (Busy), the device is actively erasing or programming. (This
includes programming in the Erase Suspend mode.) If the output is high (Ready),
the device is in the read mode, the standby mode, or one of the banks is in the
erase-suspend-read mode.
Yes
Yes
PASS
No
DQ7 = Data?
No
DQ5 = 1?
Yes
Read DQ7–DQ0
Addr = VA
DQ7 = Data?
No
FAIL
Figure 6. Data# Polling Algorithm
.
CC
Table 14 shows the outputs for RY/BY#.
DQ6: Toggle Bit I
Toggle Bit I on DQ6 indicates whether an Embedded Program or Erase algorithm
is in progress or complete, or whether the device has entered the Erase Suspend
mode. Toggle Bit I may be read at any address, and is valid after the rising edge
of the final WE# pulse in the command sequence (prior to the program or erase
operation), and during the sector erase time-out.
58S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 59
Advance Information
During an Embedded Program or Erase algorithm operation, successive read cycles to any address cause DQ6 to toggle. The system may use either OE# or CE#
to control the read cycles. When the operation is complete, DQ6 stops toggling.
After an erase command sequence is written, if all sectors selected for erasing
are protected, DQ6 toggles for approxi mately 400 µs, then returns to reading
array data. If not all selected sectors are protected, the Embedded Erase algo
rithm erases the unprotected sectors, and ignores the selected sectors that are
protected.
The system can use DQ6 and DQ2 together to determine whether a sector is ac tively erasing or is erase-suspende d. When the device is actively er asing (that is,
the Embedded Erase algorithm is in progress), DQ6 toggles. When the device en
ters the Erase Suspend mode, DQ6 stops toggling. However, the system must
also use DQ2 to determine which sectors are erasing or erase-suspende d. A lter
natively, the system can use DQ7 (see “DQ7: Data# Polling” on page 56).
If a program address falls within a protected sector, DQ6 toggles for approximately 1 µs after the program command sequence is written, then returns to
reading array data.
DQ6 also toggles during the erase-suspend-program mode, and stops toggling
once the Embedded Program algorithm is complete.
-
-
-
Table 14 shows the outputs for T og gle Bit I on DQ6. Fi gure 7 shows the toggle bit
algorithm. Figure 19 in “R ead Operation Timings” shows the toggle bit timing diagrams. Figure 20 shows the differences between DQ2 and DQ6 in graphical
form. See also “DQ2: Toggle Bit II”.
START
Read Byte
(DQ7–DQ0)
Address =VA
Read Byte
(DQ7–DQ0)
Address =VA
No
No
Toggle Bit
= Toggle?
Yes
DQ5 = 1?
Yes
Read Byte Twice
(DQ7–DQ0)
Address = VA
Toggle Bit
= Toggle?
Yes
Program/Erase
Operation Not
Complete, Write
Reset Command
No
Program/Erase
Operation Complete
Figure 7. Tog g l e B i t A l go r it h m
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP59
Page 60
Note: The system should recheck the toggle bit even if DQ5 = “1” because the toggle
bit may stop toggling as DQ5 changes to “1.” See
gle Bit II” for more information.
DQ2: Toggle Bit II
The “Toggle Bit II” on DQ2, when used with DQ6, indicates whether a particular
sector is actively erasing (that is, the Embedded Er ase al gorithm is in progress),
or whether that sector is erase-suspended. Toggle Bit II is valid after the rising
edge of the final WE# pulse in the command sequence.
DQ2 toggles when the system reads at addresses within those sectors that hav e
been selected for erasure. (The system may use either OE# or CE1# / CE2# to
control the read cycles.) But DQ2 cannot distinguish whether the sector is actively
erasing or is erase-suspend ed. DQ6, by comparison, indicates whether the device
is actively erasing, or is in Erase Suspend, but cannot distinguish which sectors
are selected for erasure. Thus, both status bits are required for s ector and mode
information. See
Figure 7 shows the toggle bit algorithm in flowchart form, and the “DQ2: To ggle
Bit II” explains the algorithm. See also “DQ6: Toggle Bit I.” Figure 19 shows the
toggle bit timing diagram. Figure 20 shows the differences between DQ2 and DQ6
in graphical form.
Advance Information
“DQ6: Toggle Bit I” and “DQ2: Tog-
Figure 7. Toggle Bit Algorithm
Table 14 to compare outputs for DQ2 and DQ6.
Reading Toggle Bits DQ6/DQ2
Refer t o Fi gure 7 for the following discussion. Whenever the system initially begins reading toggle bit status, it must read DQ7–DQ0 at least twice in a row to
determine whether a toggle bit is toggling. Typically, the system would note and
store the value of the toggle bit after the first read. After the second read, the
system would compare the new value of the toggle bit with the first. If the toggle
bit is not toggling, the device has completed the program or erase ope ration. The
system can read array data on DQ7–DQ0 on the following read cycle.
However , if after the initial two read cycles, the system determines that the toggle
bit is still toggling, the system also should note whether the value of DQ5 is high
“DQ5: Exceeded Timing Limits”). If it is, the system should then determine
(see
again whether the toggle bit is toggling, since the toggle bit may have stopped
toggling just as DQ5 went high. If the toggle bit is no longer toggling, the device
has successfully completed the program or erase operation. If it is still toggling,
the device did not completed the operation successfully, and the system must
write the reset command to return to reading array data.
The remaining scenario is that the system initially determines that the toggle bit
is toggling and DQ5 has not gone high. The system may continue to monitor the
toggle bit and DQ5 through successive read cycles, determining the status as de
scribed in the previous paragraph. Alternatively, it may choose to perform other
system tasks. In this case, the system must start at the beginning of the algo
rithm when it returns to determine the status of the operation (top of Figure 7).
-
-
DQ5: Exceeded Timing Limits
DQ5 indicates whether the program or erase time has exceede d a speci fied in ternal pulse count limit. Under these conditions DQ5 produces a “1,” indicating that the
program or erase cy cle was not su ccessfully completed .
The device may output a “1” on DQ5 if the system tries to program a “1” to a
location that was previously programmed to “0.” Only an erase operation can
60S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 61
Advance Information
change a “0” back to a “1.” Under this condition, the device halts the operation, and when the timing limit has been exceeded, DQ5 produces a “1.”
Under both these conditions, the system must write the reset command to return
to the read mode (or to the erase-suspend-read mode if a bank was previously
in the erase-suspend-program mode).
DQ3: Sector Erase Timer
After writing a sector erase command sequence, the system may read DQ3 to determine whether or not erasure has begun. (The sector erase timer does not
apply to the chip erase command.) If additional sectors ar e selected for er asure,
the entire time-out also applies after each additional sector erase command.
When the time-out period is complete, DQ3 switches from a “0” to a “1.” See also
“Sector Erase Command Sequence” on page 49.
After the sector erase command is written, the sys tem shoul d re ad the status of
DQ7 (Data# Polling) or DQ6 (Toggle Bit I) to ensure that the device has accepted
the command sequence, and then read DQ3. If DQ3 is “1,” the Embedded Erase
algorithm has begun; all further commands (except Erase Suspend) are ignored
until the erase operation is complete. If DQ3 is “0,” the device accepts additional
sector erase commands. To ensure the command has been accepted, the system
software should check the status of DQ3 prior to and following each subsequent
sector erase command. If DQ3 is high on the second status check, the last com
mand might not have been accepted.
-
Table 14 shows the status of DQ3 relative to the other status bits.
Ta bl e 1 4 . Write Operation Status
DQ7
Status
Standard
Mode
Erase
Suspend
Mode
Notes:
1. DQ5 switches to ‘1’ when an Embedded Program or Embedded Erase operation has exceeded the maximum timing
limits.
2. DQ7 and DQ2 require a valid addres s when read ing status information. Refer to the appropriate subsection for
further details.
3. When reading write operation status bits, the system must always provide the bank address where the Embedded
Algorithm is in progress. The device outputs array data if the system addresses a non-busy bank.
Embedded Program AlgorithmDQ7#Toggle0N/ANo toggle0
Embedded Erase Algorithm0Toggle01Toggle0
Erase
Erase-SuspendRead
Erase-Suspend-Progr a mDQ7#T oggle0N/AN/A0
“DQ5: Exceeded Timing Limits” for more information.
Suspended Sector
Non-Erase
Suspended Sector
(Note 2)DQ6
1No toggle0N/AToggle1
DataDataDataDataData1
DQ5
(Note 1)DQ3
DQ2
(Note 2)RY /B Y #
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP61
1. Minimum DC voltage on input or I/O pins is –0.5 V. During voltage transitions,
input or I/O pins may overshoot V
DC voltage on input or I/O pins is V
I/O pins may overshoot to V
2. Minimum DC input voltage on pins A9, OE#, RESET#, and WP#/ACC is –0.5 V.
During voltage transitions, A9, OE#, WP#/ACC, and RESET# may overshoot V
to –2.0 V for periods of up to 20 ns. See Figure 8. Maximum DC input voltage on
pin A9, OE#, and RESET# is +12.5 V which may overshoot to +14.0 V for periods
up to 20 ns. Maximum DC input voltage on WP#/ACC is +9.5 V which may
overshoot to +12.0 V for periods up to 20 ns.
3. No more than one output may be shorted to ground at a time. Duration of the
short circuit should not be greater than one second.
4. Stresses above those listed under “Absolute Maximum Ratings” may cause permanent damage to the device. This is a stress rating only; functional operation of the
device at these or any other conditions above those indicated in the operational
sections of this data sheet is not implied. Exp osure of the device to absolute maximum rating conditions for extended periods may affect device reliability.
Advance Information
to –2.0 V for periods of up to 20 ns. Maximum
SS
+0.5 V. During voltage transitions, input or
CC
+2.0 V for periods up to 20 ns. See Figure 8.
CC
SS
+0.8 V
–0.5 V
–2.0 V
ns
ns
V
CC
+2.0 V
V
CC
+0.5 V
2.0 V
20 ns
Maximum Negative Overshoot WaveformMaximum Positive Overshoot Waveform
20 ns
Figure 8. Maximum Overshoot Waveforms
ns
20 ns
62S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 63
Operating Ranges
Operating ranges define those limits between which the functionality of the device is guaranteed.
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP63
Page 64
DC Characteristics
Advance Information
Ta bl e 1 5 . CMOS Compatible
Parameter
Symbol
I
LI
I
LIT
I
LR
I
LO
I
CC1
I
CC2
I
CC3
I
CC4
I
CC5
I
CC6
I
CC7
I
CC8
I
CC9
V
IL
V
IH
V
HH
V
ID
V
OL
V
OH
V
LKO
Parameter DescriptionTest ConditionsMinTypMaxUnit
Input Load Current
A9, OE#, RESET# Input Load CurrentVCC = V
Reset Leakage CurrentVCC = V
Output Leakage Current
VCC Active Read Current (Notes 1, 2)
VCC Active Write Current (Notes 2, 3)OE# = VIH, WE# = V
VCC Standby Current (Note 2)
VCC Reset Current (Note 2)RESET# = V
Automatic Sleep Mode (Notes 2, 4)
VCC Active Read-While-Program Current
1, 2)
(Notes
VCC Active Read-While-Erase Current
(Notes
1, 2)
VCC Active Program-While-EraseSuspended Current (Notes 2, 5)
VIN = VSS to VCC,
VCC = VCC
V
OUT
VCC = V
OE# = VIH, VCC = V
(Note 1)
CE#, RESET#, WP#/ACC
= VIO ± 0.3 V
VIH = V
V
IL
max
; VID= 12.5 V35µA
CC max
; VID= 12.5 V35µA
CC max
= VSS to VCC, OE# = V
CC max
CC max
IL
± 0.3 V0.25µA
SS
± 0.3 V;
IO
= V
± 0.3 V
SS
OE# = VIH,
OE# = VIH,
OE# = V
IH
IH
5 MHz2030
10 MHz4555
5 MHz2145
10 MHz4670
5 MHz2145
10 MHz4670
±1.0µA
±1.0µA
mA
1525mA
0.25µA
0.25µA
mA
mA
1725mA
VCC Active Page Read Current (Note 2)OE# = VIH, 8 word Page Read1015mA
Input Low VoltageVIO = 2.7–3.6 V–0.50.8V
Input High VoltageVIO = 2.7–3.6 V2.0VCC+0.3V
Voltage for ACC Program AccelerationVCC = 3.0 V ± 10%8.59.5V
Voltage for Autoselect and Temporary
Sector Unprotect
Output Low Voltage
Output High Voltage
VCC = 3.0 V ± 10%11.512.5V
IOL = 2.0 mA, VCC = V
V
IOH = –2.0 mA, VCC = V
V
, VIO = 2.7–3.6
CC min
, VIO = 2.7–3.6
CC min
0.4V
2.4V
Low VCC Lock-Out Voltage (Note 5)2.32.5V
Notes:
1. The ICC current listed is typically less than 5 mA/MHz, with OE# at VIH.
2. Maximum ICC specifications are tested with VCC = V
CCmax
.
3. ICC active while Embedded Erase or Embedded Program is in progress.
4. Automatic sleep mode enables the low power mode when addresses rema in stable for t
+ 30 ns. Typical sleep
ACC
mode current is 1 mA.
5. Not 100% tested.
6. In S29PL129J there are two CE# (CE1#, CE2#).
7. Valid CE1#/CE2# conditions: (CE1# = V
CE2# = V
IL,
) or (CE1# = V
IH,
CE2# = VIL) or (CE1# = V
IH,
CE2# = VIH)
IH,
64S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
72S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 73
Advance Information
t
AHT
Addresses
t
ASO
CE#
t
OEH
WE#
OE#
t
DH
DQ6/DQ2Valid Data
RY/BY#
Valid Data
(first read)(second read)(stops toggling)
Valid
Status
t
OEPH
t
OE
Valid
Status
t
CEPH
t
t
AS
AHT
Valid
Status
Notes:
1. VA = Valid address; not required for DQ6. Illustration shows first two status cycle after co mmand sequence, last
status read cycle, and array data read cycle
2. S29PL129J - During CE1# transitions, CE2# = VIH; During CE2# transitions, CE1# = VIH
3. S29PL129J - There are two CE# (CE1#, CE2#). In the above waveform CE# = CE1# or CE2#
Figure 19. Toggle Bit Timings (During Embedded Algorithms)
Enter
Embedded
Erasing
WE#
Erase
Erase
Suspend
Erase Suspend
Suspend Program
Read
Enter Erase
Erase
Suspend
Program
Erase Suspend
Read
Erase
Resume
Erase
Erase
Complete
DQ6
DQ2
Note:Note: DQ2 toggles only when read at an address within an erase-suspended sector. The system may use OE# or
CE# to toggle DQ2 and DQ6.
Figure 20. DQ2 vs. DQ6
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP73
76S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 77
Advance Information
Addresses
WE#
OE#
CE#
Data
RESET#
555 for program
2AA for erase
t
WC
t
WH
t
WS
t
RH
PA for program
SA for sector erase
555 for chip erase
t
AS
t
GHEL
t
CP
t
CPH
t
DS
t
DH
A0 for program
55 for erase
t
AH
t
BUSY
PD for program
30 for sector erase
10 for chip erase
Data# Polling
t
WHWH1 or 2
PA
DQ7#D
OUT
RY/BY#
Notes:
1. Figure indicates last two bus cycles of a program or erase operation.
2. PA = program address, SA = sector address, PD = program data.
3. DQ7# is the complement of the data written to the device. D
4. S29PL129J - During CE1# transitions, CE2# = VIH; During CE2# transitions, CE1# = VIH
is the data written to the device
OUT
5. S29PL129J - There are two CE# (CE1#, CE2#). In the above waveform CE# = CE1# or CE2#
Ta b l e 2 3 . Alternate CE# Controlled Write (Erase/Program) Operation Timings
Ta b l e 2 4 . CE1#/CE2# Timing
Parameter
DescriptionAll Speed OptionsUnitJEDECStd
t
CE1#/CE2# Recover TimeMin30ns
CCR
June 4, 2004 S29PL129J_MCP_00_A0S29PL129J for MCP77
Page 78
CE1#
CE2#
Advance Information
t
CCR
t
CCR
Figure 23. Timing Diagram for Alternating Between CE1# and CE2# Control
Ta bl e 2 5 . Erase And Programming Performance
Parameter
Sector Erase Time
Chip Erase Time
Word Program Time
Accelerated Word Program Time
Chip Program Time
(Note 3)
Notes:
1. Typical program and erase times assume the following conditions: 25°C, 3.0 V VCC, 100,000 cycles. Additionally,
programming typicals assume checkerboard pattern. All values are subject to change.
2. Under worst case conditions of 90°C, VCC = 2.7 V, 1,000,000 cycles. All values are subject to change.
3. The typical chip programming time is considerably less than the maximum chip programming time listed, since most
bytes program faster than the maximum program times listed.
4. In the pre-programming step of the Embedded Erase algorithm, all bytes are programmed to 00h b e fore erasure.
5. System-level overhead is the time required to execute the two- or four-bus-cycle sequence for the program
command. See
6. The device has a minimum erase and program cycle endurance of 100,000 cycles.
Table 12 for further information on command definitions.
PL129J135 216sec
PL129J50.4 200sec
Ty p (Note 1)Max (Note 2)UnitComments
0.52sec
6100µs
460µs
Excludes 00h programming
prior to erasure
Excludes system level
overhead
(Note 5)
(Note 4)
BGA Pin Capacitance
Parameter SymbolParameter DescriptionTe s t S e t upTy pMaxUnit
C
C
C
C
OUT
IN
IN2
IN3
Input CapacitanceVIN = 06.37pF
Output CapacitanceV
Control Pin CapacitanceVIN = 05.58pF
WP#/ACC Pin CapacitanceVIN = 01112pF
= 07.08pF
OUT
Notes:
1. Sampled, not 100% tested.
2. Test conditions TA = 25°C, f = 1.0 MHz.
78S29PL129J for MCPS29PL129J_MCP_00_A0 June 4, 2004
Page 79
Advance Information
pSRAM Type 6
2M Word by 16-bit Cmos Pseudo Static RAM (32M Density)
4M Word by 16-bit Cmos Pseudo Static RAM (64M Density)
Features
Single power supply voltage of 2.6 to 3.3 V
Direct TTL compatibility for all inputs and outputs
Deep power-down mode: Memory cell data invalid
Page operation mode:
— Page read operation by 8 words
Logic compatible with SRAM R/W pin
Standby current
Legend:L = Low-level Input (VIL), H = High-level Input (VIH), X = VIL or VIH, High-Z = High Impedance.
Absolute Maximum Ratings
SymbolRatingVal ueUnit
V
V
V
T
T
I
DD
IN
OUT
opr
strg
P
D
OUT
Power Supply Voltage-1.0 to 3.6V
Input Voltage-1.0 to 3.6V
Output Voltage-1.0 to 3.6V
Operating Temperature-40 to 85°C
Storage Temperature-55 to 150°C
Power Dissipation0.6W
Short Circuit Output Current50mA
I
DDO
DDO
I
DDO
I
DDO
DDO
I
DDO
DDO
DDO
DDSD
Note:ESD Immunity: Spansion Flash memory Multi-Chip Products (MCPs) may contain component devices that are
developed by Spansion and component devices that are developed by a third party (third-party components). Spansion
components are tested and guaranteed to the ESD immunity levels listed in the corresponding Spansion Flash memory
Qualification Database. Third-party components are neither tested nor guaranteed by Spansion for ESD immunity. How
ever, ESD test results for third-party components may be available from the component manufacturer. Component manufacturer contact information is listed in the Spansion MCP Qualification Report, when available. The Sp ansi on Flash
memory Qualification Database and Spansion MCP Qua li f ic ation Report are available from Spansion sales offices.
DC Recommended Operating Conditions (Ta = -40°C to 85°C)
SymbolParameterMinTy pMaxUnit
V
DD
IH
V
IL
Note: VIH (Max) VDD = 1.0 V with 10 ns pulse width. VIL (Min) -1.0 V with 10 ns pulse width.
80pSRAM Type 6pSRAM_Type06_14_A1 Ocotober 16, 2004
Power Supply Voltage2.62.753.3
Input High Voltage2.0—VDD + 0.3 (Note)
Input Low Voltage-0.3 (Note)—0.4
VV
-
Page 81
Advance Information
DC Characteristics (Ta = -40°C to 85°C, VDD = 2.6 to 3.3 V) (See Note 3 to 4)
SymbolParameterTest ConditionMinTy p .MaxUnit
Input Leakage
I
I
V
V
I
DDO1
IL
Current
Output Leakage
LO
Current
Output High VoltageIOH = - 0.5 mA2.0¾VV
OH
Output Low VoltageIOL = 1.0 mA——0.4V
OL
Operating Current
VIN = 0 V to V
Output disable, V
DD
= 0 V to V
OUT
CE1#= VIL, CE2 = VIH, I
mA, t
= min.
RC
OUT
-1.0—+1.0µA
DD
ET5UZ8A-43DS——40
= 0
-1.0—+1.0µA
ET5VB5A-43DS——50
mA
I
DDO2
I
DDS
I
DDSD
Page Access
Operating Current
Standby Current
(MOS)
Deep Power-down
Standby Current
CE1#= VIL, CE2 = VIH, I
OUT
= 0 mA
Page add. cycling, tRC = min.
CE1# = VDD - 0.2 V,
CE2 = VDD - 0.2 V
ET5UZ8A-43DS——70mA
ET5VB5A-43DS——100µA
CE2 = 0.2 V——5µA
Capacitance (Ta = 25°C, f = 1 MHz)
SymbolParameterTest ConditionMaxUnit
C
IN
C
OUT
Note: This parameter is sampled periodically and is not 100% tested.
Input CapacitanceVIN = GND10pF
Output CapacitanceV
= GND10pF
OUT
AC Characteristics and Operating Conditions
(Ta = -40°C to 85°C, VDD = 2.6 to 3.3 V) (See Note 5 to 11)
SymbolParameterMinMaxUnit
t
RC
t
ACC
t
CO
t
OE
t
BA
t
COE
t
OEE
t
BE
t
OD
t
ODO
t
BD
Read Cycle Time7010000ns
Address Access Time—70ns
Chip Enable (CE1#) Access Time—70ns
Output Enable Access Time—25ns
Data Byte Control Access Time—25ns
Chip Enable Low to Output Active10—ns
Output Enable Low to Output Active0—ns
Data Byte Control Low to Output Active0—ns
Chip Enable High to Output High-Z—20ns
Output Enable High to Output High-Z—20ns
Data Byte Control High to Output High-Z—20ns
——25mA
Ocotober 16, 2004 pSRAM_Type06_14_A1pSRAM Type 681
Page 82
Advance Information
SymbolParameterMinMaxUnit
t
OH
t
PM
t
PC
t
AA
t
AOH
t
WC
t
WP
t
CW
t
BW
t
AW
t
AS
t
WR
t
CEH
t
WEH
t
ODW
t
OEW
t
DS
t
DH
t
CS
t
CH
t
DPD
t
CHC
t
CHP
Output Data Hold Time10—ns
Page Mode Time7010000ns
Page Mode Cycle Time30—ns
Page Mode Address Access Time—30ns
Page Mode Output Data Hold Time10—ns
Write Cycle Time7010000ns
Write Pulse Width50—ns
Chip Enable to End of Write70—ns
Data Byte Control to End of W rite60—ns
Address Valid to End of Wr ite60—ns
Address Set-up Time0—ns
Write Recov ery Time0—ns
Chip Enable High Pulse Width10—ns
Write Enable High Pulse Width6—ns
WE# Low to Output High-Z—20ns
WE# High to Output Active0ns
Data Set-up Time30—ns
Data Hold Time0—ns
CE2 Set-up Time0—ns
CE2 Hold Time300—µs
CE2 Pulse Width10—ms
CE2 Hold from CE1#0—ns
CE2 Hold from Power On30—µs
AC Test Conditions
ParameterCondition
Output load30 pF + 1 TTL Gate
Input pulse levelVDD - 0.2 V, 0.2 V
Timing measurementsVDD x 0.5
Reference levelVDD x 0.5
tR, t
F
82pSRAM Type 6pSRAM_Type06_14_A1 Ocotober 16, 2004
5 ns
Page 83
Timing Diagrams
Read Timings
Address
A0 to A20(32M)
A0 to A21(64M)
CE1#
Advance Information
t
RC
t
ACC
t
CO
t
OH
CE2
OE#
WE#
UB#, LB#
D
OUT
I/O1 to I/O16
Fix-H
t
t
ODO
BD
t
OD
t
OE
t
BA
t
BE
t
OEE
Hi-ZHi-Z
t
COE
INDETERMINATE
VALID DATA OUT
Figure 24. Read Cycle
Ocotober 16, 2004 pSRAM_Type06_14_A1pSRAM Type 683
Page 84
Address
A
A0 to A2
Address
3 to A20(32M)
A3 to A21(64M)
CE1#
Advance Information
t
PM
t
RC
t
PC
t
PC
t
PC
CE2
OE#
WE#
UB#, LB#
D
OUT
I/O1 to I/O16
Fix-H
t
t
BA
t
OEE
t
BE
Hi-ZHi-Z
t
COE
t
CO
t
ACC
OE
D
OUT
t
AOH
t
AOH
D
OUT
t
AA
D
OUT
t
AA
* Maximum 8 words
t
AOH
t
BD
t
OH
D
OUT
t
AA
t
ODO
t
OD
Figure 25. Page Read Cycle (8 Words Access)
84pSRAM Type 6pSRAM_Type06_14_A1 Ocotober 16, 2004
Page 85
Write Timings
A
A
Address
0 to A20
(32M)
0 to
A21(64M)
WE#
CE1#
CE2
, LB#
UB#
D
OUT
I/O1 to I/O16
D
IN
I/O1 to I/O16
Advance Information
t
WC
t
AW
t
CH
t
AS
t
ODW
(See Note 9)(See Note 9)
t
WP
t
CW
t
BW
t
VALID DATA IN
DS
t
OEW
t
DH
t
WR
t
WR
t
WR
Figure 26. Write Cycle #1 (WE# Controlled) (See Note 8)
t
WEH
(See Note 11)(S)ee Note 10Hi-Z
Ocotober 16, 2004 pSRAM_Type06_14_A1pSRAM Type 685
Page 86
Address
A0 to A20
A0 to
(32M)
A21(64M)
UB#, LB#
D
I/O1 to I/O16
I/O1 to I/O16
WE#
CE1#
CE2
OUT
D
Advance Information
t
WC
t
AW
t
CW
t
BW
t
WP
t
WR
t
WR
t
WR
t
CEH
t
AS
t
CH
t
t
ODW
BE
Hi-ZHi-Z
t
COE
t
DS
IN
(See Note 9)
VALID DATA IN
t
DH
Figure 27. Write Cycle #2 (CE# Controlled) (See Note 8)
Deep Power-down Timing
CE1#
CE2
t
Figure 28. Deep Power Down Timing
Power- on Ti ming
V
DD
CE1#
CE2
VDD min
t
DPD
CS
t
CHC
t
CHP
Figure 29. Power-on Timing
t
CH
t
CH
86pSRAM Type 6pSRAM_Type06_14_A1 Ocotober 16, 2004
Page 87
Advance Information
A
A
Provisions of Address Skew
Read
In case multiple invalid address cycles shorter than tRC min. sustain over 10 µs
in an active status, at least one valid address cy cle over t
ing 10µs.
CE1#
WE#
ddress
Write
In case multiple invalid address cycles shorter than tWC min. sustain over 10 µs
in an active status, at least one valid addre ss cycle over t
ing 10 µs.
over 10µs
Figure 30. Read
min. is required dur-
RC
t
min
RC
min. is required dur-
WC
CE1#
tWPmin
WE#
ddress
t
min
WC
Figure 31. Write
Notes:
1. Stresses greater than listed under "Absolute Maximum Ratings" section may cause perma nent damage to the device.
2. All voltages are reference to GND.
3. I
4. I
5. AC measurements are assumed t
6. Parameters t
7. Data cannot be retained at deep power-down stan d-by mode.
8. If OE# is high during the write cycle, the outputs will remain at high impedance.
9. During the output state of I/O signals, input signals of reverse polarity must not be applied.
10.If CE1# or LB#/UB# goes LOW coincident with or after WE# goes LOW, the outputs will remain at high impedance.
11.If CE1# or LB#/UB# goes HIGH coincident with or before WE# goes HIGH, the outputs will remain at high impedance.
depends on the cycle time.
DDO
depends on output loading. Specified values are defined with the output open condition.
DDO
, tF = 5 ns.
R
, t
reference levels.
OD
, tBD and tODW define the time at which the output goes the open condition and are not output voltage
ODO
Ocotober 16, 2004 pSRAM_Type06_14_A1pSRAM Type 687
Page 88
Advance Information
pSRAM Type 1
4Mbit (256K Word x 16-bit)
8Mbit (512K Word x 16-bit)
16Mbit (1M Word x 16-bit)
32Mbit (2M Word x 16-bit)
64Mbit (4M Word x 16-bit)