This specification is subject to change without notice.
11.1
Page 2
Features:
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
Single 5.0-Volt Read and Write Operations
CMOS SuperFlash EEPROM Technology
Endurance: 100,000 Cycles (typical)
Greater than 100 years Data Retention
Memory Organization:512K x 8
Sector Erase Capability:256 bytes per Sector
Low Power Consumption:
Active Current:15 mA (typical)
Standby Current:5 µA(typical)
Fast Sector Erase/Byte Program Operation
Byte Program Time:35 µs(typical)
Sector Erase Time:2 ms (typical)
Complete Memory Rewrite:20 sec (typical)
Fast Access Time: 120, 150, and 200 ns
Product Description
The 28SF040 is a 512K x 8 bit CMOS sector erase,
byte program EEPROM. The 28SF040 is manufactured using SST’s proprietary, high performance
CMOS SuperFlash EEPROM Technology. The split
gate cell design and thick oxide tunneling injector
attain better reliability and manufacturability compared with alternative approaches. The 28SF040
erases and programs with a 5.0-volt only power
supply. The 28SF040 conforms to JEDEC standard
pinouts for byte wide memories and is compatible
with existing industry standard EPROM, flash
EPROM and EEPROM pinouts.
Featuring high performance programming, the
28SF040 typically byte programs in 35 µs. The
28SF040 typically sector erases in 2 ms. Both program and erase times can be optimized using
interface features such as Toggle bit or Data# Polling
to indicate the completion of the write cycle. To protect against an inadvertent write, the 28SF040 has
on chip hardware and software data protection
schemes. Designed, manufactured, and tested for a
wide spectrum of applications, the 28SF040 is offered with a guaranteed sector endurance of 104 and
103 cycles. Data retention is rated greater than 100
years.
The 28SF040 is best suited for applications that require reprogrammable nonvolatile mass storage of
program, configuration, or data memory. For all
system applications, the 28SF040 significantly improves performance and reliability, while lowering
power consumption when compared with floppy
Latched Address and Data
Hardware and Software Data Protection
7-Read-Cycle-Sequence Software Data
Protection
End of Write Detection
Toggle Bit
Data# Polling
TTL I/O Compatibility
Packages Available
40-Pin TSOP (10 mm x 20 mm)
32-Pin TSOP (8 mm x 20 mm)
32-Pin PLCC
32-Pin PDIP
diskettes or EPROM approaches. EEPROM technology makes possible convenient and economical
updating of codes and control programs on-line. The
28SF040 improves flexibility, while lowering the cost
of program and configuration storage application.
Figure 1 shows the functional blocks of the
28SF040. Figures 2A, 2B, and 3 show the pin assignments for the 40 pin TSOP, 32 pin TSOP, 32 pin
PDIP, and 32 pin PLCC packages. Pin description
and operation modes are described in Tables 1
through 4.
Device Operation
Commands are used to initiate the memory operation functions of the device. Commands are written
to the device using standard microprocessor write
sequences. A command is written by asserting WE#
low while keeping CE# low. The address bus is
latched on the falling edge of WE# or CE#, whichever occurs last. The data bus is latched on the
rising edge of WE# or CE#, whichever occurs first.
Note, during the software data protection sequence
the address are latched on the rising edge of OE# or
CE#, whichever occurs first.
Command Definitions
Table 3 contains a command list and a brief summary of the commands. The following is a detailed
description of the operations initiated by each command.
This specification is subject to change without notice.
Page 3
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
Sector_Erase Operation
The Sector_Erase operation erases all bytes within a
sector and is initiated by a setup command and an
execute command. A sector contains 256 bytes.
This sector erasability enhances the flexibility and
usefulness of the 28SF040, since most applications
only need to change a small number of bytes or
sectors, not the entire chip.
The setup command is performed by writing 20H to
the device. The execute command is performed by
writing D0H to the device. The erase operation begins with the rising edge of the WE# or CE#,
whichever occurs first and terminates automatically
by using an internal timer. The end of Erase can be
determined using either Data# Polling, Toggle Bit, or
Successive Reads detection methods. See Figure 9
for timing waveforms.
The two-step sequence of setup command followed
by an execute command ensures that only memory
contents within the addressed sector are erased and
other sectors are not inadvertently erased.
Sector_Erase Flowchart Description
Fast and reliable erasing of the memory contents
within a sector is accomplished by following the
sector erase flowchart as shown in Figure 18. The
entire procedure consists of the execution of two
commands. The Sector_Erase operation will terminate after a maximum of 4 ms. A Reset command
can be executed to terminate the erase operation;
however, if the erase operation is terminated prior to
the 4 ms time-out, the sector may not be fully
erased. An erase command can be reissued as
many times as necessary to complete the erase operation. The 28SF040 cannot be “overerased”.
Chip_Erase Operation
The Chip_Erase operation is initiated by a setup
command (30H) and an execute command (30H).
The Chip_Erase operation allows the entire array of
the 28SF040 to erase in one operation, as opposed
to 2048 sector erase operations. Using the
Chip_Erase operation will minimize the time to rewrite the entire memory array. The Chip_Erase
operation will terminate after a maximum of 20 ms. A
Reset command can be executed to terminate the
erase operation; however, if the erase operation is
terminated prior to the 20 ms time-out, the Chip may
not be completely erased. If an erase error occurs an
erase command can be reissued as many times as
necessary to complete the erase operation. The
28SF040 cannot be “overerased”. (See Figure 8)
Byte_Program Operation
The Byte_Program operation is initiated by writing
the setup command (10H). Once the program setup
is performed, programming is executed by the next
WE# pulse. See Figures 5 and 6 for timing waveforms. The address bus is latched on the falling edge
of WE# or CE#, whichever occurs last. The data bus
is latched on the rising edge of WE# or CE#, whichever occurs first, and begins the program operation.
The program operation is terminated automatically
by an internal timer. See Figure 16 for the programming flowchart.
The two-step sequence of a setup command followed by an execute command ensures that only the
addressed byte is programmed and other bytes are
not inadvertently programmed.
The Byte_Program Flowchart Description
Programming data into the 28SF040 is accomplished by following the Byte_Program flowchart
shown in Figure 16. The Byte_Program command
sets up the byte for programming. The address bus
is latched on the falling edge of WE# or CE#, whichever occurs last. The data bus is latched on the
rising edge of WE# or CE#, whichever occurs first
and begins the program operation. The end of program can be detected using either the Data# Polling,
Toggle bit, or Successive reads.
Reset Operation
The Reset command is provided as a means to
safely abort the erase or program command sequences. Following either setup commands (erase
or program) with a write of FFH will safely abort the
operation. Memory contents will not be altered. After
the Reset command, the device returns to the read
mode. The Reset command does not enable software data protection. See Figure 7 for timing
waveforms.
This specification is subject to change without notice.
11.3
Page 4
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
Read
The Read operation is initiated by setting CE#, and
OE# to logic low and setting WE# to logic high (See
Table 2). See Figure 4 for read memory timing
waveform. The read operation from the host retrieves data from the array. The device remains
enabled for read until another operation mode is accessed. During initial power-up, the device is in the
read mode and is software data protected. The device must be unprotected to execute a write
command.
The read operation of the 28SF040 is controlled by
OE# and CE# at logic low. When CE # is high, the
chip is deselected and only standby power will be
consumed. OE# is the output control and is used to
gate data from the output pins. The data bus is in
high impedance state when CE# and OE# are high.
Read_ID operation
The Read_ID operation is initiated by writing a single
command (90H). A read of address 0000H will output the manufacturer’s code (BFH). A read of
address 0001H will output the device code (04H).
Any other valid command will terminate this operation.
Data Protection
In order to protect the integrity of nonvolatile data
storage, the 28SF040 provides both hardware and
software features to prevent inadvertent writes to the
device, for example, during system power-up or
power-down. Such provisions are described below.
Hardware Data Protection
The 28SF040 is designed with hardware features to
prevent inadvertent writes. This is done in the following ways:
1. Write Inhibit Mode: OE# low, CE#, or WE# high
will inhibit the write operation.
2. Noise/Glitch Protection: A WE# pulse width of
less than 15 ns will not initiate a write cycle.
3. VCC Power Up/Down Detection: The write operation is inhibited when VCC is less than 2.5V.
4. After power-up the device is in the read mode
and the device is in the software data protect
state.
Software Data Protection (SDP)
The 28SF040 has software methods to further prevent inadvertent writes. In order to perform an erase
or program operation, a two-step command sequence consisting of a set-up command followed by
an execute command avoids inadvertent erasing and
programming of the device.
The 28SF040 will default to software data protection
after power up. A sequence of seven consecutive
reads at specific addresses will unprotect the device
The address sequence is 1823H, 1820H, 1822H,
0418H, 041BH, 0419H, 041AH. The address bus is
latched on the rising edge of OE# or CE#, whichever
occurs first. A similar seven read sequence of
1823H, 1820H, 1822H, 0418H, 041BH, 0419H,
040AH will protect the device. Also refer to Figures
10 and 11 for the 7 read cycle sequence Software
Data Protection. The I/O pins can be in any state
(i.e., high, low, or tristate).
Write Operation Status Detection
The 28SF040 provides three means to detect the
completion of a write cycle, in order to optimize the
system write cycle time. The end of a write cycle
(erase or program) can be detected by three means:
1) monitoring the Data# Polling bit; 2) monitoring the
Toggle bit; or 3) by two successive read of the same
data. These three detection mechanisms are described below.
The actual completion of the nonvolatile write is
asynchronous with the system; therefore, either a
Data# Polling or Toggle Bit read may be simultaneous with the completion of the write cycle. If this
occurs, the system may possibly get an erroneous
result, i.e., valid data may appear to conflict with the
DQ used. In order to prevent spurious rejection, if an
erroneous result occurs, the software routine should
include a loop to read the accessed location an additional two (2) times. If both reads are valid, then the
device has completed the write cycle, otherwise the
rejection is valid.
Data# Polling (DQ7)
The 28SF040 features Data# Polling to indicate the
write operation status. During a write operation, any
attempt to read the last byte loaded during the byteload cycle will receive the complement of the true
data on DQ7. Once the write cycle is completed, DQ
will show true data. The device is then ready for the
This specification is subject to change without notice.
Page 5
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
next operation. See Figure 12 for Data Polling timing
waveforms. In order for Data# Polling to function correctly , the byte being polled must be erased prior to
programming.
Toggle Bit ( DQ6)
An alternative means for determining the write operation status is by monitoring the Toggle Bit, DQ6.
During a write operation, consecutive attempts to
read data from the device will result in DQ6 toggling
between logic 0 (low) and logic 1 (high). When the
write cycle is completed, the toggling will stop. The
device is then ready for the next operation. See Figure 13 for Toggle Bit timing waveforms.
Successive Reads
An Alternative means for determining an end of a
write cycle is by reading the same address for two
consecutive data matches.
Product Identification
The Product Identification mode identifies the device
as 28SF040 and the manufacturer as SST. This
mode may be accessed by hardware and software
operations. The hardware operation is typically used
by an external programmer to identify the correct algorithm for the 28SF040. Users may wish to use the
software operation to identify the device (i.e., using
the device code). For details see Table 2 for the
hardware operation and Figure 19 for the software
operation. The manufacturer and device codes are
the same for both operations.
This specification is subject to change without notice.
11.7
Page 8
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
Table 1:Pin Description
SymbolPin NameFunctions
A18-A
8
A7-A
0
DQ7-DQ
0
CE#Chip EnableTo activate the device when CE # is low.
OE#Output EnableTo gate the data output buffers.
WE#Write EnableTo control the write operations.
VccPower Supply
VssGround
Row Address InputsTo provide memory addresses. Row addresses define a sector.
Column Address InputsSelects the byte within the sector.
Data Input/OutputTo output data during read cycles and receive input data during
write cycles. Data is internally latched during a write cycle. The outputs are in tri-state when OE#, CE # is high.
(1)
(1)
To provide 5-volt supply (± 10%)
(1)
Note:
(1)
This pin is considered an input for the purposes of the DC Operation Characteristics Table.
This specification is subject to change without notice.
11.9
Page 10
SST 28SF040
5.0V-only 4 Megabit
SuperFlash EEPROM
Absolute Maximum Stress Ratings (Applied conditions greater than those listed under “Absolute Maximum
Stress Ratings” may cause permanent damage to the device. This is a stress rating only and functional operation of the device at these conditions or conditions greater than those defined in the operational sections of this
data sheet is not implied. Exposure to absolute maximum stress rating conditions may affect device reliability.)
Temperature Under Bias ........................................................................-55°C to +125°C
Storage Temperature .............................................................................-65°C to +150°C
D. C. Voltage on Any Pin to Ground Potential ........................................-0.5V to VCC+ 0.5V
Transient Voltage (<20 ns) on Any Pin to Ground Potential ...................-1.0V to VCC+ 1.0V
Voltage on A
Package Power Dissipation Capability (Ta = 25°C) .................................1.0W
Through Soldering Temperature (10 Seconds).........................................300°C
Surface Mount Lead Soldering Temperature (3 Seconds) ......................240°C
Output Short Circuit Current
(1)
Note:
Table 5:Operating Range Table 6:AC Conditions of Test
RangeAmbient TempV
Commercial
Industrial
Pin to Ground Potential ....................................................-0.5V to 14.0V
9
(1)
.................................................................100 mA
Outputs shorted for no more than one second. No more than one output shorted at a time.
Input Rise/Fall Time...............10 ns
Output Load...........................1 TTL Gate and CL = 100 pF
See Figures 14 and 15
0 °C to +70 °C
-40 °C to +85 °C
CC
5V±10%
5V±10%
Table 7:DC Operating Characteristics
Symbol ParameterLimitsUnits Test Conditions
MinMax
I
CC
Power Supply CurrentCE# = OE# =VIL, WE# =VIH,
all I/Os open
Read25mAAddress input = VIL/V
V
= V
CC
Max
CC
Program and Erase40mACE# =WE# =VIL, OE# =V
I
SB1
Standby VCC Current (TTL in-
V
CC =VCC
3mACE# =OE# =WE# = VIH, VCC=V
Max.
put)
I
I
I
V
V
V
V
V
I
SB2
LI
LO
IL
IH
OL
OH
H
H
Standby V
(CMOS input)
Input Leakage Current 1
Output Leakage Current10
Input Low Voltage0.8VV
Input High Voltage2.0VV
Current
CC
20
CE# = OE# = WE# = V
µA
µA
µA
VCC=V
V
IN
V
OUT
CC
CC
Max
CC
= GND to V
=GND to V
= V
CC
= VCC Max.
Max.
Output Low Voltage0.4VIOL= 2.1 mA, V
Output High Voltage2.4V
Supervoltage for A
This parameter is measured only for initial qualification and after the design or process change that
could affect this parameter.
Parameter
Read Cycle Time
Address Access Time
Chip Enable Access Time
Output Enable Access Time
CE# Low to Active Output
OE# Low to Active Output
CE# High to High-Z Output
OE# High to High-Z Output
Output Hold from Address
MinMaxMinMaxMinMaxUnits
120150200ns
120150200ns
120150200ns
50 70 75ns
000ns
000ns
30 40 40ns
30 40 40ns
000ns
Change
Byte Program Cycle Time40
µs
Write Pulse Width (WE#)100ns
Address Setup Time10ns
Address Hold Time50ns
CE# Setup Time0ns
CE# Hold Time0ns
OE# High Setup Time10ns
OE# High Hold Time10ns
Write Pulse Width (CE#)100ns
Data Setup Time50ns
Data Hold Time10ns
Sector Erase Cycle Time4ms
Reset Command Recovery Time4
µs
Software Chip_Erase Cycle Time20ms
CE# High Pulse Width50ns
WE# High Pulse Width50ns
Protect Chip Enable Pulse Width10ns
Protect Chip Enable High Time10ns
Protect Address Setup Time0ns
Protect Address Hold Time50ns