Excel Semiconductor ES29LV320D Service Manual

ESI
ESI
Excel Semiconductor inc.
ES29LV320D
CMOS 3.0 Volt-only, Boot Sector Flash Memory
GENERAL FEATURES
• Single power supply operation
- 2.7V -3.6V for read, program and erase operations
•Sector Structure
- 8Kbyte x 8 boot sectors
- 64Kbyte x 63 sectors
- 256byte security sector
• Top or Bottom boot block
- ES29LV320DT for Top boot block device
- ES29LV320DB for Bottom boot block device
• A 256 bytes of extra sector for security code
- Factory lockable
- Customer lockable
• Package Options
- 48-pin TSOP
- Pb-free packages
- All Pb-free products are RoHS-Compliant
• Low Vcc write inhibit
• Manufactured on 0.18um process technology
• Compatible with JEDEC standards
- Pinout and software compatible with single-power supply flash standard
DEVICE PERFORMANCE
• Read access time
- 90ns/120n for normal Vcc range ( 2.7V - 3.6V )
- 80ns for regulated Vcc range ( 3.0V - 3.6V )
• Program and erase time
- Program time : 9us/byte, 11us/word ( typical )
- Accelerated program time : 8us/word ( typical )
- Sector erase time : 0.7sec/sector ( typical )
• Power consumption (typical values)
- 200nA in standby or automatic sleep mode
- 10 mA active read current at 5 MHz
- 15mA active write current during program or erase
• Minimum 100,000 program/erase cycles per sector
• 20 Year data retention at 125
o
C
SOFTWARE FEATURES
• Erase Suspend / Erase Resume
• Data# poll and toggle for Pro gr a m/erase status
• CFI ( Common Flash Interface) supported
• Unlock Bypass program
• Autoselect mode
• Auto-sleep mode after t
ACC
+ 30ns
HARDWARE FEATURES
• Hardware reset input pin ( RESET#)
- Provides a hardware reset to device
- Any internal device operation is terminated and the device returns to read mode by the reset
• Ready/Busy# output pin ( RY/BY#)
- Provides a program or erase operational status about whether it is finished for read or still being progressed
• WP#/ACC input pin
- Two outermost boot sectors are protected when WP# is set to low, regardless of sector protection
- Program speed is accelerated by raising WP#/ACC to a high voltage (12V)
• Sector protection / unprotection ( RESET# , A9 )
- Hardware method of locking a sector to prevent any program or erase operation within that sector
- Two methods are provided :
- In-system method by RESET# pin
- A9 high-voltage method for PROM programmers
• Temporary Sector Unprotection ( RESET# )
- Allows temporary unprotection of previously protected sectors to change data in-system
ES29LV320D
1
Rev. 2D Jan 5, 2006
GENERAL PRODUCT DESCRIPTION
ESI
ESI
Excel Semiconductor inc.
The ES29LV320 is a 32 megabit, 3.0 volt-only flash memory device, organized as 4M x 8 bits (Byte mode) or 2M x 16 bits (Word mode) which is config­urable by BYTE#. Eight boot sectors and sixty three main sectors with uniform size are provided : 8Kbytes x 8 and 64Kbytes x 63. The device is man­ufactured with ESI’s proprietary, high performance and highly reliable 0.18um CMOS flash technology. The device can be programmed or erased in-sys­tem with standard 3.0 Volt Vcc supply ( 2.7V-3.6V) and can also be programmed in standard EPROM programmers. The device offers minimum e ndur­ance of 100,000 program/erase cycles and more than 10 years of data retention.
The ES29LV320 offers access time as fast as 80ns or 90ns, allowing operation of high-speed micropro­cessors without wait states. Three separate control pins are provided to eliminate bus contention : chip enable (CE#), write enable (WE#) and output enable (OE#).
All program and erase operation are automatically and internally performed and controlled by embed­ded program/erase algorithms built in the device. The device automatically generates and times the necessary high-voltage pulses to be applied to the cells, performs the verification, and counts the num­ber of sequences. Some status bits (DQ7, DQ6 and DQ5) read by data# polling or toggling between consecutive read cycles provide to the users the internal status of program/erase operation: whether it is successfully done or still being progressed.
Extra Security Sector of 256 bytes
In the device, an extra security sector of 256 bytes is provided to customers. This extra sector can be used for various purposes such as storing ESN (Electronic Serial Number) or customer’s security codes. Once after the extra sector is written, it can be permanently locked by the device manufacturer(
factory-locked) or a customer( customer-lock­able). At the same time, a lock indicator bit (DQ7)
is permanently set to a 1 if the part is factory- locked, or set to 0 if it is customer-lockable. Therefore, this lock indicator bit (DQ7) can be properly used to avoid that any customer-lockable part is used to replace a factory-locked part. The extra security sector is an extra memory space for customers when it is used as a customer-lockable version. So, it can be read and written like any other sectors. But it should be noted that the number of E/W(Erase and Write) cycles is limited to 300 times (maximum) only in the Security Sector.
Special services such as ESN and factory-lock are available to customers ( ESI’s Special-Code ser- vice ) The ES29L V320 is completely comp atible with the JEDEC standard command set of single power supply Flash. Commands are written to the internal command register using standard write timings of microprocessor and data can be re ad out from the cell array in the device with the same way as used i n other EPROM or flash devices.
ES29LV320D
2
Rev. 2D Jan 5, 2006
PRODUCT SELECTOR GUIDE
Family Part Number ES29LV320
Voltage Range 3.0 ~ 3.6V 2.7 ~ 3.6V
Speed Option 80R 90 120
Max Access Time (ns) 80 90 120
CE# Access (ns) 80 90 120 OE# Access (ns) 35 40 50
FUNCTION BLOCK DIAGRAM
RY/BY#
ESI
ESI
Excel Semiconductor inc.
Vcc Vss
WE
RESET#
A<0:20
CE# OE#
BYTE#
Vcc Detector
#
Command Register
Timer/ Counter
Write State Machine
Analog Bias Generator
Sector Switches
Y-Decoder
DQ0-DQ15(A-1)
Input/Output Buffers
Data Latch/ Sense Amps
Y-Decoder
>
Cell Array Chip Enable Output Enable Logic
X-Decoder
Address Latch
ES29LV320D
3
Rev. 2D Jan 5, 2006
PIN DESCRIPTION
Pin Description
A0-A20 21 Addresses
DQ0-DQ14 15 Data Inputs/Outputs
DQ15/A-1
CE# Chip Enable OE# Output Enable
WE# Write Enable
WP#/ACC Hardware Write Protect/Acceleration Pin
RESET# Hardware Reset Pin, Active Low
BYTE# Se lects 8-bit or 16-bit mode
RY/BY# Ready/Busy Output
Vcc
Vss Device Ground
NC Pin Not Connected Internally
Excel Semiconductor inc.
DQ15 (Data Input/Output, Word Mode) A-1 (LSB Address Input, Byte Mode)
3.0 volt-only single power supply (see Product Selector Guide for speed options and voltage supply tolerances)
ESI
ESI
LOGIC SYMBOL
21
A0 ~ A20
CE# OE#
WE# WP#/ACC RESET#
BYTE#
16 or 8
DQ0 ~ DQ15 (A-1)
RY/BY#
ES29LV320D
4
Rev. 2D Jan 5, 2006
CONNECTION DIAGRAM
ESI
ESI
Excel Semiconductor inc.
A15 A14
A13 A12 A11 A10
A9
A8 A19 A20
WE#
RESET#
NC
WP#/ACC
RY/BY#
A18 A17
A7
A6
A5
A4
A3
A2
A1
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
48-Pin Standard TSOP
ES29LV320
48 47 46 45 44
43 42 41
40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25
A16 BYTE# Vss DQ15/A-1 DQ7 DQ14 DQ6 DQ13
DQ5 DQ12 DQ4 Vcc DQ11 DQ3 DQ10 DQ2 DQ9 DQ1 DQ8 DQ0 OE# Vss CE# A0
ES29LV320D
5
Rev. 2D Jan 5, 2006
DEVICE BUS OPERATIONS
ESI
ESI
Excel Semiconductor inc.
Several device operational modes are provided in the ES29LV320 device. Commands are used to ini­tiate the device operations. They are latched and stored into internal registers with the address and data information needed to execute the device operation.
The available device operational modes are listed in Table 1 with the required inputs, controls, and the resulting outputs. Each operational mode is described in further detail in the following subsec­tions.
Read
The internal state of the device is set for the read mode and the device is ready for reading arra y da t a upon device power-up, or after a hardware reset. To read the stored data from the cell array of the device, CE# and OE# pins should be driven to V
while WE# pin remains at VIH. CE# is the power control and selects the device. OE# is the output
control and gates array data to the output pins. Word or byte mode of output data is determined by
the BYTE# pin. No additional command is needed in this mode to obtain array data. Standard micro­processor read cycles that assert valid addresses
on the device address inputs produce valid data on the device data outputs. The device st ays at the read mode until another operation is activated by writing commands into the internal command register. Refer to the AC read cycle timing diagrams for further details ( Fig. 18 ).
Word/Byte Mode Configuration ( BYTE# )
The device data output can be configured by BYTE# into one of two modes : word and byte modes. If the BYTE# pin is set at logic ‘1’, the device is configured in word mode, DQ0 - DQ15 are active and controlled by CE# and OE#. If the BYTE# pin is set at logic ‘0’, the device is configured in byte mode, and only data I/O pins DQ0 - DQ7 are active and controlled by CE# and OE#. The data I/O pins DQ8 - DQ14 are tri­stated, and the DQ15 pin is used as an input for the LSB (A-1) address.
IL
Standby Mode
When the device is not selected or activated in a system, it needs to stay at the standby mode, in which current consumption is greatly reduced with outputs in the high impedance state.
ES29LV320D
6
Rev. 2D Jan 5, 2006
ESI
ESI
Excel Semiconductor inc.
The device enters the CMOS standby mode when CE# and RESET# pins are both held at Vcc
+
0.3V. (Note that this is a more restricted voltage range than V
not within Vcc
) If CE# and RESET# are held at VIH, but
IH.
+
0.3V, the device will be still in the standby mode, but the standby current will be greater than the CMOS standby current (0.2uA typi­cally). When the device is in the standby mode, only standard access time (t
) is required for read
CE
access, before it is ready for read data. And even if the device is deselected by CE# pin during erase or programming operation, the device draws active cur ­rent until the operation is completely done. While the device stays in the standby mode, the output is placed in the high impedance state, independent of the OE# input.
The device can enter the deep power-down mode where current consumption is greatly reduced down to less than 0.2uA typically by the following three ways:
- CMOS standby ( CE#, RESET# = Vcc + 0.3V )
- During the device reset ( RESET# = Vss
- In Autosleep Mode ( after t
ACC
+ 30ns )
+ 0.3V )
Refer to the CMOS DC characteristics Table11 for further current specification .
Autosleep Mode
The device automatically enters a deep power-down mode called the autosleep mode when addresses remain stable for t
consumption is greatly reduced ( less than 0.2uA typical ), regardless of CE#, WE# and OE# control signals.
+30ns. In this mode, current
ACC
set-up cycle and the last cycle with the program data and addresses. In this mode, two unlock cycles are saved ( or bypassed ).
Sector Addresses
The entire memory space of cell array is divided into a many of small sectors: 8kbytes x 8 boot sec­tors and 64Kbytes x 63 main sectors. In erase operation, a single sector, multiple sectors, or the entire device (chip erase) can be selected for erase. The address space that each sector occu­pies is shown in detail in the Table 3-4.
Accelerated Program Mode
The device offers accelerated program operations through the ACC function. This is one of two func­tions provided by the WP#/ACC pin. This function is primarily intended to allow faster manufacturing throughput at the factory. If the system asserts V
(11.5~12.5V) on this pin, the device automatically enters the previously mentioned Unlock Bypass mode, temporarily unprotects any protected sec­tors, and uses the higher voltage on the pin to reduce the time required for program operations. Only two-cycle program command sequences are required because the unlock bypass mode is auto­matically activated in this acceleration mode. The device returns to the normal operation when V
removed from the WP#/ACC pin. It should be noted that the WP#/ACC pin must not be at V
operations other than accelerated programming, or device damage may result. In addition, the WP#/ ACC pin must not be left floating or unconnected; inconsistent or undesired behavior of the device may result.
HH
HH
HH
for
is
Writing Commands
To write a command or command sequences to ini­tiate some operations such as program or erase, the system must drive WE# and CE# to V
. For program operations, the BYTE# pin deter-
V
IH
, and OE# to
IL
mines whether the device accepts pro gram data in bytes or words. Refer to “BYTE# timings for Write Operations” in the Fig. 21 for more information.
Unlock Bypass Mode
To reduce more the programming time, an unlock­bypass mode is provided. Once the device enters this mode, only two write cycles are required to ini­tiate the programming operation instead of four cycles in the normal program command sequences which are composed of two unlock cycles, program
ES29LV320D
7
Autoselect Mode
Flash memories are intended for use in applica­tions where the local CPU alter s me mory cont ents. In such applications, manufacturer and device identification (ID) codes must be accessible while the device resides in the target system ( the so called “in-system program”). On the other hand, signature codes have been typically accessed by raising A9 pin to a high voltage in PROM program­mers. However, multiplexing high voltage onto address lines is not the generally desired system design practice. Therefore, in the ES29LV320 device an autoselect command is provided to allow the system to access the signature codes without any high voltage. The conventional A9 high-voltage method used in the PROM progra m­ers for signature codes are still supported in this device.
Rev. 2D Jan 5, 2006
ESI
ESI
Excel Semiconductor inc.
If the system writes the autoselect command sequence, the device enters the Autoselect mode. The system can then read some useful codes such as manufacturer and device ID from the internal reg­isters on DQ7 - DQ0. Standard read cycle timings apply in this mode. In the Autoselect mode, the fol­lowing four informations can be accessed through either autoselect command method or A9 high-volt­age autoselect method. Refer to the Table 2.
-
-
-
-
Manufacturer ID Device ID Security Sector Lock-indicator Sector protection verify
Hardware Device Reset ( RESET# )
The RESET# pin provides a hardware method of resetting the device to read array data. When the RESET# pin is driven low for at least a period of t
the device immediately terminates any operation in progress, tristates all output pins, and ignores all read/write commands for the duration of the RESET# pulse The device also resets the internal state machine to reading array data. The operation that was interrupted should be reinitiated once after the device is ready to accept another command sequence, to ensure data integrity.
RP
CMOS Standby during Device Reset
Flash memory, enabling the system to read the boot-up firmware from the Flash memory.Refer to the AC Characteristics tables for RESET# parame­ters and to Fig. 19 for the timing diagram.
SECTOR GROUP PROTECTION
The ES29LV320 features hardware sector group protection. A sector group consists of two or more adjacent sectors that are protected or unprotected at the same time. In the device, sector protection is performed on the group of sectors previously defined in the Table 3-4. Once after a group of sec­tors are protected, any program or erase operation is not allowed in the protected sector group. The previously protected sectors must be unprotected by one of the unprotect methods provided here before changing data in those sectors. Sector pro­tection can be implemented via two methods.
,
-
-
To check whether the sector group protection was successfully executed or not, another operation called “protect verification” needs to be per­formed after the protection oper ation on a group of sectors. All protection and protect verifications pro­vided in the device are summarized in detail at the Table 1.
In-system protection A9 High-voltage protection
Current is reduced for the duration of the RESET# pulse. When RESET# is held at Vss device draws the greatly reduced CMOS standby current ( I
within Vss
). If RESET# is held at VIL but not
CC4
+
0.3V, the standby current will be greater.
+
0.3V, the
RY/BY# and Terminating Operations
If RESET# is asserted during a program or erase operation, the RY/BY# pin remains a “0” (busy) until the internal reset operation is completed, which requires a time of t
rithms). The system can thus monitor RY/BY# to determine whether the reset operation is completed. If RESET# is asserted when a program or erase operation is not executing (RY/BY# pin is “1”), the reset operation is completed within a time of t
(not during Embedded Algorithms). The system can read data after the RESET# pin returns to V
requires a time of t
READY
RH.
(during Embedded Algo-
READY
, which
IH
RESET# tied to the System Reset
The RESET# pin may be tied to the system reset cir­cuitry. A system reset would thus also reset the
In-System Protection
“In-system protection”, the primary method, requires V
A6=0, A1=1, and A0=0. This method can be imple­mented either in-system or via programming equip­ment. This method uses standard microprocessor bus cycle timing. Refer to Fig. 29 for timing diagram and Fig. 3 for the protection algorithm.
(11.5V~12.5V) on the RESET# with
ID
A9 High-Voltage Protection
“High-voltage protection”, the alternate method intended only for programming equipment, must force V
trol pin OE# with A6=0, A1=1 and A0=0. Refer to Fig. 31 for timing diagram and Fig. 5 for the protec­tion algorithm.
(11.5~12.5V) on address pin A9 and con-
ID
SECTOR UNPROTECTION
The previously protected sectors must be unpro­tected before modifying any data in the sectors. The sector unprotection algorithm unprotects all sectors in parallel. All unprotected sectors must first
ES29LV320D
8
Rev. 2D Jan 5, 2006
ESI
ESI
Excel Semiconductor inc.
be protected prior to the first sector unprotection write cycle to avoid any over-erase due to the intrin­sic erase characteristics of the protection cell. After the unprotection operation, all previously protected sectors will need to be individually re-protected. Standard microprocessor bus cycle timings are used in the unprotection and unprotect verification opera­tions. Three unprotect methods are provided in the ES29LV320 device. All unprotection and unprotect verification cycles are summarized in detail at the Table 1.
-
-
-
In-system unprotection A9 High-voltage unprotection T emporary sector unprotection
In-System Unprotection
“In-system unprotection”, the primary method, requires V
A6=1, A1=1, and A0=0. This method can be imple­mented either in-system or via programming equip­ment. This method uses standard microprocessor bus cycle timing. Refer to Fig. 29 for timing diagram and Fig. 4 for the unprotection algorithm.
(11.5V~12.5V) on the RESET# with
ID
If the system asserts V
on the WP#/ACC pin, the
IL
device disables program and erase func tions in the two “outermost” 8Kbytes boo t sectors indepen­dently of whether those sectors were protected or unprotected using the method described in “Sector Group Protection and Unprotection”. The two outer­most of 8 Kbyte boot sectors are the two sectors containing the lowest addresses in a bottom-boot­configured device, or the two sectors containing the highest addresses in a top-boot-configured device.
If the system asserts V
on the WP#/ACC pin, the
IH
device reverts to whether the two outermost 8 Kbyte boot sectors were last set to be protected or unprotected. That is, sector protection or unprotec­tion for these two sectors depends on whether they were last protected or unprotected using the method described in “Sector Group Protection and Unprotection”.
Note that the WP#/ACC pin must not be left floating or unconnected; inconsistent behavior of the device may result.
A9 High-Voltage Unprotection
“High-voltage unprotection”, the alternate method intended only for programming equipment, must force V
(11.5~12.5V) on address pin A9 and con-
ID
trol pin OE# with A6=1, A1=1 and A0=0. Refer to Fig. 32 for timing diagram and Fig. 6 for the unpro­tection algorithm.
Temporary Sector Unprotect
This feature allows temporary unprotection of previ­ously protected sectors to change data in-system. The Sector Unprotect mode is activated by setting the RESET# pin to V
(11.5V-12.5V). During this
ID
mode, formerly protected sectors can be pro­grammed or erased by selecting the sector addresses. Once V
is removed from the RESET#
ID
pin, all the previously protected sectors are pro­tected again. Fig. 1 shows the algorithm, and Fig. 27 shows the timing diagrams for this feature.
WRITE PROTECT ( WP# )
The Write Protect function provides a hardware method of protecting certain boot sectors without using V
WP#/ACC pin.
. This function is one of two provided by the
ID
START
RESET# = V
(Note 1)
Perform Erase or
Program Operations
RESET# = V
Temporary Sector
Unprotect Completed
(Note 2)
Notes:
1. All protected sectors are unprotected (If WP#/ACC = VIL, outermost boot sectors will remain protected).
2. All previously protected sectors are protected once again.
ID
IH
Figure 1. Temporary Sector Unprotect Operation
ES29LV320D
9
Rev. 2D Jan 5, 2006
SECURITY SECTOR
The security sector of the ES29LV320 device pro­vides an extra flash memory space that enables permanent part identification through an Electronic Serial Number (ESN). The security sector uses a security lock-Indicator Bit (DQ7) to indicate whether or not the security sector is locked when shipped from the factory. This bit is permanently set at the factory and cannot be changed, which pre­vents cloning of a factory locked part. This ensures the security of the ESN once the product is shipped to the field. Note that the ES29LV320 has a security sector size of 256 bytes.
Security Lock-Indicator Bit (DQ7)
In the device, the security sector can be provided in either factory locked version or customer lockable version. The factory-locke d version is always pro­tected when shipped from the factory, and has the security lock-Indicator Bit permanently set to a “1”. The customer-lockable version is shipped with the security sector unprotected, allowing customers to utilize the sector in any manner they choose. The customer-lockable version has the security lock­Indicator Bit permanently set to a “0”. Thus, the security lock-Indicator Bit prevents customer-lock­able devices from being used to replace devices that are factory locked.
ESI
ESI
Excel Semiconductor inc.
- A random, secure ESN (16 bytes ) only
- Customer code through the ESI’s Special-Code service
- Both a random, secure ESN and customer code through the ESI’s Special-Code service.
ESN ( Electronic Serial Number )
In devices that have an ESN, a Bottom Boot device will have the 16-byte (8-word) ESN in sector 0 at addresses 000000h-00000Fh in byte mode (or 000000h-000007h in word mode). In the Top Boot device the ESN will be in sector 70 at addresses 3FFF00h-3FFF0Fh in byte mode (or 1FFF80h­1FFF87h in word mode). Note that in upcoming top boot versions of this device, the ESN will be located in sector 70 at addresses 3FFF00h-3FFF0Fh in byte mode (or 1FFF80h-1FFF87h in word mode).
ESI’s Special-Code Service
Customers may opt to have their code programmed by ESI through the ESI’s Special-Code service. ESI programs the customer’s code, with or without the random ESN. The devices are then shipped from ESI’s factory with the Security Sector permanently locked. Contact an ESI representative for details on using ESI’s Special-Code service.
Customer-Lockable Device
Access to the Security Sector
The security sector can be accessed through a command sequence: Enter security and Exit security sector commands. After the system has written the Enter security sector command sequence, it may read the security sector by using the addresses normally occupied by the boot sec­tors. This mode of operation continues until the sys­tem issues the Exit security sector command sequence, or until power is removed from the device. On power-up, or following a hardware reset, the device returns to read mode in which the nor­mal boot sectors can be accessed, instead of the security sector.
Factory-Locked Device
In a factory-locked device, the security sector is protected when the device is shipped from the fac­tory. The security sector cannot be mo dified in any way. The device is available preprogrammed with one of the following:
The customer lockable version allows the security sector to be freely programmed or erased and then permanently locked. Note that the ES29LV320 has a security sector size of 256 bytes (128 words). Note that the accelerated programming (ACC) and unlock bypass functions are not available when program­ming the security sector.
Protection of the Security Sector
The security sector area can be prot ected using the following procedures: Write the three-cycle “Enter security sector command” sequence, and then fol­lowing the in-system sector protect algorithm as shown in Fig. 2, except that RESET# may be at either V
of the security sector without raising any device pin to a high voltage. Note that this method is only appli­cable to the security sector. To verify the protect/ unprotect status of the security sector. follow the algorithm shown in Fig. 2.
or VID. This allows in-system protection
IH
ES29LV320D
10
Rev. 2D Jan 5, 2006
Start
RESET# =
or V
V
IH
ID
Wait 1us
Write 60h to any address
Write 40h to security sector address with A6=0, A1=1,A0=0
Read from security sector address with A6=0,A1=1,A0=0
If data=00h, security sector is unprotected. If data=01h, security sector is protected
Remove V from RESET#
Write reset command
Security sector Protect Verify complete
IH
or V
ID
ESI
ESI
Excel Semiconductor inc.
can only occur after successful completion of spe­cific command sequences. And several features are incorporated to prevent inadvertent write cycles resulting from Vcc power-up and power-down transi­tion or system noise.
Low Vcc Write inhibit
When Vcc is less than V accept any write cycles. This protects data during
Vcc power-up and power-down. The command reg­ister and all internal program/erase circuits are dis­abled, and the device resets to the read mode. Subsequent writes are ignored until Vcc is greater than V
. The system must provide proper signals
LKO
to the control pins to prevent unintentional writes when Vcc is greater than V
, the device does not
LKO
.
LKO
Write Pulse “Glitch” Protection
Noise pulses of less than 5ns (typical) on OE#, CE# or WE# do not initiate a write cycle.
Figure 2. Security Sector Protect Verify
Exit from the Security Sector
Once the Security Sector is locked protected and verified, the system must write the Exit Security Sector Region command sequence to return to reading and writing the remainder of the array.
Caution for the Security Sector Protection
The security sector protection must be used with caution since, once protected, there is no proce­dure available for unprotecting the security sector area and none of the bits in the security sector memory space can be modified in any way.
HARDWARE DATA PROTECTION
The ES29LV320 device provides some protection measures against accidental erasure or program­ming caused by spurious system level signals that may exist during power transition. During power­up, all internal registers and latches in the device are cleared and the device automatically resets to the read mode. In addition, with its internal state machine built-in the device, any alteration of the memory contents or any initiation of new operation
Logical inhibit
Write cycles are inhibited by holding any one of OE#=V
, CE#=VIH or WE#=VIH. To initiate a write
IL
cycle, CE# and WE# must be a logical zero while OE# is a logical one.
Power-up Write Inhibit
If WE#=CE#=VIL and OE#=VIH during power up, the device does not accept any commands on the rising
edge of WE#. The internal state machine is automat­ically reset to the read mode on power-up.
ES29LV320D
11
Rev. 2D Jan 5, 2006
Table 1. ES29LV320 Device Bus Operations
ESI
ESI
Excel Semiconductor inc.
Operation CE# OE# WE# RESET# WP#/ACC Addresses
Read
Accelerated Program L H L H
Standby
Output Disable Reset
Sector Protect (Note 2)
In-system
A9 High-Volt­age Method
Sector Unprotect (Note 2) L H L V
Temporary Sec­tor Unprotect X X X
Sector protect
Sector unprotect
L L
Vcc+
0.3V
L H H H L/H X High-Z High-Z X X X L L/H X High-Z High-Z
LHL
L
L
H
L
L
H
X X Vcc+
V
ID
V
ID
0.3V
L
L
HL/H H (Note 3)
V
HH
H X High-Z High-Z
V
ID
ID
V
ID
H
H
L/H
L/H
(Note 3)
H
(Note 3)
H
(Note 3)
H
(Note 3)
(Note 1)
A
IN
A
IN
A
IN
SA,A6=L,
A1=H,A0=L
SA,A6=H,
A1=H,A0=L
A
IN
SA,A9=V
A6=L,
A1=H,A0=L SA,A9=V
A6=H,
A1=H,A0=L
DQ0
~
DQ7
D
OUT
(Note 4) (Note 4) (Note 4) (Note 4)
(Note 4) X X
(Note 4) X X
(Note 4) (Note 4) High-Z
,
ID
(Note 4) (Note 4) High-Z
,
ID
BYTE#
= V
D
OUT
DQ8~DQ15
IH
BYTE#
= V
IL
DQ8~DQ14 = High-Z,
DQ15 = A-1Write
High-Z
Legend:
A
L=Logic Low=VIL, H=Logic High=VIH, VID=11.5-12.5V, VHH=11.5-12.5V, X=Don’t Care, SA=Sector Address,
=Address In, DIN=Data In, D
IN
=Data Out
OUT
Notes:
1. Addresses are A20:A0 in word mode (BYTE#=VIH) , A20:A-1 in byte mode (BYTE#=VIL).
2. The sector protect and sector unprotect funct ions may als o be implement ed via programming eq uipment. See the “Sector/ Sector Block Protection and Unprotection” section.
3. If WP#/ACC=V
, the two outermost boot sectors remain protected. If WP#/ACC=VIH, the two outermost boot sector protection
IL
depends on whether they were last protected or unprotected using the method described in “Sector/Sector Block Protection and Unprotection”. If WP#/ACC=V
4. D
IN
or D
as required by command sequence, data polling, or sector protection algorithm.
OUT
, all sectors will be unprotected.
HH
Table 2. Autoselect Codes (A9 High-Voltage Method)
A20
Description CE# OE# WE#
to
A12
ManufactureID:ESI
Device ID:
ES29LV320
Sector Protection
Verification
Security Sector
Indicator Bit(DQ7) L L H X X
L
LLHX X
LLHSAX
H
L
XX
A11
to
A10
A9A8toA7A6
V
XLXLL X
ID
V
X L X L H 22h X F6(T),F9h(B)
ID
V
XLXHL X X
ID
V
XLXHH X X
ID
A5
toA2A1 A0
DQ8~DQ15
BYTE#
= V
IH
BYTE#
= V
IL
X4Ah
DQ7~DQ0
01h(protected)
00h(unprotected)
99h(factory-locked),
19h(customer-lock-
able)
Legend:
T= Top Boot Block, B = Bottom Boot Block, L=Logic Low=VIL, H=Logic High=VIH, SA=Sector Address, X = Don’t care
ES29LV320D
12
Rev. 2D Jan 5, 2006
Table 3. Top Boot Sector Addresses (ES29LV320DT)
ESI
ESI
Excel Semiconductor inc.
Group Sector
SA0 000000XXX 64/32 000000h~00FFFFh 000000h~07FFFh
SG0
SG1
SG2
SG3
SG4
SG5
SG6
SG7
SG8
SG9
SG10
SG11
SG12
SG13
SA1 000001XXX 64/32 010000h~01FFFFh 008000h~0FFFFh SA2 000010XXX 64/32 020000h~02FFFFh 010000h~17FFFh SA3 000011XXX 64/32 030000h~03FFFFh 018000h~01FFFFh SA4 000100XXX 64/32 040000h~04FFFFh 020000h~027FFFh SA5 000101XXX 64/32 050000h~05FFFFh 028000h~02FFFFh SA6 000110XXX 64/32 060000h~06FFFFh 030000h~037FFFh SA7 000111XXX 64/32 070000h~07FFFFh 038000h~03FFFFh SA8 001000XXX 64/32 080000h~08FFFFh 040000h~047FFFh
SA9 001001XXX 64/32 090000h~09FFFFh 048000h~04FFFFh SA10 001010XXX 64/32 0A0000h~0AFFFFh 050000h~057FFFh SA11 001011XXX 64/32 0B0000h~0BFFFFh 058000h~05FFFFh SA12 001100XXX 64/32 0C0000h~0CFFFFh 060000h~067FFFh SA13 001101XXX 64/32 0D0000h~0DFFFFh 068000h~06FFFFh SA14 001110XXX 64/32 0E0000h~0EFFFFh 070000h~077FFFh SA15 001111XXX 64/32 0F0000h~0FFFFFh 078000h~07FFFFh SA16 010000XXX 64/32 100000h~10FFFFh 080000h~087FFFh SA17 010001XXX 64/32 110000h~11FFFFh 088000h~08FFFFh SA18 010010XXX 64/32 120000h~12FFFFh 090000h~097FFFh SA19 010011XXX 64/32 130000h~13FFFFh 098000h~09FFFFh SA20 010100XXX 64/32 140000h~14FFFFh 0A0000h~0A7FFF h SA21 010101XXX 64/32 150000h~15FFFFh 0A8000h~0AFFFFh SA22 010110XXX 64/32 160000h~16FFFFh 0B0000h~0B7FFF h SA23 010111XXX 64/32 170000h~17FFFFh 0B8000h~0BFFFFh SA24 011000XXX 64/32 180000h~18FFFFh 0C0000h~0C7FFFh SA25 011001XXX 64/32 190000h~19FFFFh 0C8000h~0CFFFFh SA26 011010XXX 64/32 1A0000h~1AFFFFh 0D0000h~0D7FFFh SA27 011011XXX 64/32 1B0000h~1BFFFFh 0D8000h~0DFFFFh SA28 011100XXX 64/32 1C0000h~1CFFFFh 0E0000h~0E7FFFh SA29 011101XXX 64/32 1D0000h~1DFFFFh 0E8000h~0EFFFFh SA30 011110XXX 64/32 1E0000h~1EFFFFh 0F0000h~0F7FFFh SA31 011111XXX 64/32 1F0000h~1FFFFFh 0F8000h~0FFFFFh SA32 100000XXX 64/32 200000h~20FFFFh 100000h~107FFFh SA33 100001XXX 64/32 210000h~21FFFFh 108000h~10FFFFh SA34 100010XXX 64/32 220000h~22FFFFh 110000h~117FFFh SA35 100011XXX 64/32 230000h~23FFFFh 118000h~11FFFFh SA36 100100XXX 64/32 240000h~24FFFFh 120000h~127FFFh SA37 100101XXX 64/32 250000h~25FFFFh 128000h~12FFFFh SA38 100110XXX 64/32 260000h~26FFFFh 130000h~137FFFh SA39 100111XXX 64/32 270000h~27FFFFh 138000h~13FFFFh SA40 101000XXX 64/32 280000h~28FFFFh 140000h~147FFFh SA41 101001XXX 64/32 290000h~29FFFFh 148000h~14FFFFh SA42 101010XXX 64/32 2A0000h~2AFFFFh 150000h~157FFFh SA43 101011XXX 64/32 2B0000h~2BFFFFh 158000h~15FFFFh SA44 101100XXX 64/32 2C0000h~2CFFFFh 160000h~167FFFh SA45 101101XXX 64/32 2D0000h~2DFFFFh 168000h~16FFFFh SA46 101110XXX 64/32 2E0000h~2EFFFFh 170000h~177FFFh SA47 101111XXX 64/32 2F0000h~2FFFFFh 178000h~17FFFFh SA48 110000XXX 64/32 300000h~30FFFFh 180000h~187FFFh SA49 110001XXX 64/32 310000h~31FFFFh 188000h~18FFFFh SA50 110010XXX 64/32 320000h~32FFFFh 190000h~197FFFh SA51 110011XXX 64/32 330000h~33FFFFh 198000h~19FFFFh SA52 110100XXX 64/32 340000h~34FFFFh 1A0000h~1A7FFF h SA53 110101XXX 64/32 350000h~35FFFFh 1A8000h~1AFFFFh SA54 110110XXX 64/32 360000h~36FFFFh 1B0000h~1B7FFFh SA55 110111XXX 64/32 370000h~37F FFFh 1B8000h~1BFFFFh
Sector address
A20~A12
Sector Size
(Kbytes/Kwords)
(X8)
Address Range
(X16)
Address Range
Remark
Main Sector
ES29LV320D
13
Rev. 2D Jan 5, 2006
Table 3. Top Boot Sector Addresses (ES29LV320DT) Continued
ESI
ESI
Excel Semiconductor inc.
Group Sector
SA56 111000XXX 64/32 380000h~38FFFFh 1C0000h~1C7FFFh
SG14
SG15
SG16 SA63 111111000 8/4 3F0000h~3F1FFFh 1F8000h~1F8FFFh SG17 SA64 111111001 8/4 3F2000h~3F3FFFh 1F9000h~1F9FFFh SG18 SA65 111111010 8/4 3F4000h~3F5FFFh 1FA000h~1FAFFFh SG19 SA66 111111011 8/4 3F6000h~3F7FFFh 1FB000h~1FBFFFh SG20 SA67 111111100 8/4 3F8000h~3F9FFFh 1FC000h~1FCFFFh SG21 SA68 111111101 8/4 3FA000h~3FBFFFh 1FD000h~1FDFFFh SG22 SA69 111111110 8/4 3FC000h~3FDFFFh 1FE000h~1FEFFFh SG23 SA70 111111111 8/4 3FE000h~3FFFFFh 1FF000h~1FFFFFh
Security Sector 111111111
SA57 111001XXX 64/32 390000h~39FFFFh 1C8000h~1CFFFFh SA58 111010XXX 64/32 3A0000h~3AFFFFh 1D0000h~1D7FFFh SA59 111011XXX 64/32 3B0000h~3BFFFFh 1D8000h~1DFFFFh SA60 111100XXX 64/32 3C0000h~3CFFFFh 1E0000h~1E7FFFh SA61 111101XXX 64/32 3D0000h~3DFFFFh 1E8000h~1EFFFFh SA62 111110XXX 64/32 3E0000h~3EFFFFh 1F0000h~1F7FFFh
Sector address
A20~A12
Sector Size
(Kbytes/Kwords)
bytes/words
(256/128)
(X8)
Address Range
3FFF00h~3FFFFFh 1FFF80h~1FFFFFh
(X16)
Address Range
Note:
The addresses range is A20:A-1 in byte mode (BYTE#=VIL) or A20:A0 in word mode (BYTE#=VIH).
Remark
Main Sector
Boot Sector
SA69,SA70 protected at WP#/ ACC=low
ES29LV320D
14
Rev. 2D Jan 5, 2006
Table 4. Bottom Boot Sector Addresses (ES29LV320DB)
ESI
ESI
Excel Semiconductor inc.
Group Sector
SG0 SA0 000000000 8/4 000000h~001FFFh 000000h~000FFFh SG1 SA1 000000001 8/4 002000h~003FFFh 001000h~001FFFh SG2 SA2 000000010 8/4 004000h~005FFFh 002000h~002FFFh SG3 SA3 000000011 8/4 006000h~007FFFh 003000h~003FFFh SG4 SA4 000000100 8/4 008000h~009FFFh 004000h~004FFFh SG5 SA5 000000101 8/4 00A000h~00BFFFh 005000h~005FFFh SG6 SA6 000000110 8/4 00C000h~00DFFFh 006000h~006FFFh SG7 SA7 000000111 8/4 00E000h~00FFFFh 007000h~007FFFh
SA8 000001XXX 64/32 010000h~01FFFFh 008000h~00FFFFh
SG8
SG9
SG10
SG11
SG12
SG13
SG14
SG15
SG16
SG17
SG18
SG19
SA9 000010XXX 64/32 020000h~02FFFFh 010000h~017FFFh SA10 000011XXX 64/32 030000h~03FFFFh 018000h~01FFFFh SA11 000100XXX 64/32 040000h~04FFFFh 020000h~027FFFh SA12 000101XXX 64/32 050000h~05FFFFh 028000h~02FFFFh SA13 000110XXX 64/32 060000h~06FFFFh 030000h~037FFFh SA14 000111XXX 64/32 070000h~07FFFFh 038000h~03FFFFh SA15 001000XXX 64/32 080000h~08FFFFh 040000h~047FFFh SA16 001001XXX 64/32 090000h~09FFFFh 048000h~04FFFFh SA17 001010XXX 64/32 0A0000h~0AFFFFh 050000h~057FFFh SA18 001011XXX 64/32 0B0000h~0BFFFFh 058000h~05FFFFh SA19 001100XXX 64/32 0C0000h~0CFFFFh 060000h~067FFFh SA20 001101XXX 64/32 0D0000h~0DFFFFh 068000h~06FFFFh SA21 001110XXX 64/32 0E0000h~0EFFFFh 070000h~077FFFh SA22 001111XXX 64/32 0F0000h~0FFFFFh 078000h~07FFFFh SA23 010000XXX 64/32 100000h~10FFFFh 080000h~087FFFh SA24 010001XXX 64/32 110000h~11FFFFh 088000h~08FFFFh SA25 010010XXX 64/32 120000h~12FFFFh 090000h~097FFFh SA26 010011XXX 64/32 130000h~13FFFFh 098000h~09FFFFh SA27 010100XXX 64/32 140000h~14FFFFh 0A0000h~0A7FFFh SA28 010101XXX 64/32 150000h~15FFFFh 0A8000h~0AFFFFh SA29 010110XXX 64/32 160000h~16FFFFh 0B0000h~0B7FFFh SA30 010111XXX 64/32 170000h~17FFFFh 0B8000h~0BFFFFh SA31 011000XXX 64/32 180000h~18FFFFh 0C0000h~0C7FFFh SA32 011001XXX 64/32 190000h~19FFFFh 0C8000h~0CFFFFh SA33 011010XXX 64/32 1A0000h~1AFFFFh 0D0000h~0D7FFFh SA34 011011XXX 64/32 1B0000h~1BFFFFh 0D8000h~0DFFFFh SA35 011100XXX 64/32 1C0000h~1CFFFFh 0E0000h~0E7FFFh SA36 011101XXX 64/32 1D0000h~1DFFFFh 0E8000h~0EFFFFh SA37 011110XXX 64/32 1E0000h~1EFFFFh 0F0000h~0F7FFFh SA38 011111XXX 64/32 1F0000h~1FFFFFh 0F8000h~0FFFFFh SA39 100000XXX 64/32 200000h~20FFFFh 100000h~107FFFh SA40 100001XXX 64/32 210000h~21FFFFh 108000h~10FFFFh SA41 100010XXX 64/32 220000h~22FFFFh 110000h~117FFFh SA42 100011XXX 64/32 230000h~23FFFFh 118000h~11FFFFh SA43 100100XXX 64/32 240000h~24FFFFh 120000h~127FFFh SA44 100101XXX 64/32 250000h~25FFFFh 128000h~12FFFFh SA45 100110XXX 64/32 260000h~26FFFFh 130000h~137FFFh SA46 100111XXX 64/32 270000h~27FFFFh 138000h~13FFFFh SA47 101000XXX 64/32 280000h~28FFFFh 140000h~147FFFh SA48 101001XXX 64/32 290000h~29FFFFh 148000h~14FFFFh SA49 101010XXX 64/32 2A0000h~2AFFFFh 150000h~157FFFh SA50 101011XXX 64/32 2B0000h~2BFFFFh 158000h~15FFFFh SA51 101100XXX 64/32 2C0000h~2CFFFFh 160000h~167FFFh SA52 101101XXX 64/32 2D0000h~2DFFFFh 168000h~16FFFFh SA53 101110XXX 64/32 2E0000h~2EFFFFh 170000h~177FFFh SA54 101111XXX 64/32 2F0000h~2FFFFFh 178000h~17FFFFh
Sector address
A20~A12
Sector Size
(Kbytes/Kwords)
(X8)
Address Range
(X16)
Address Range
Remark
Boot Sector
SA0,SA1 protected at WP#/ ACC=low
Main Sector
ES29LV320D
15
Rev. 2D Jan 5, 2006
Table 4. Bottom Boot Sector Addresses (ES29LV320DB) Continued
ESI
ESI
Excel Semiconductor inc.
Group Sector
SA55 110000XXX 64/32 300000h~30FFFFh 180000h~187FFFh
SG20
SG21
SG22
SG23
Security Sector 000000000
SA56 110001XXX 64/32 310000h~31FFFFh 188000h~18FFFFh SA57 110010XXX 64/32 320000h~32FFFFh 190000h~197FFFh SA58 110011XXX 64/32 330000h~33FFFFh 198000h~19FFFFh SA59 110100XXX 64/32 340000h~34FFFFh 1A0000h~1A7FFFh SA60 110101XXX 64/32 350000h~35FFFFh 1A8000h~1AFFFFh SA61 110110XXX 64/32 360000h~36FFFFh 1B0000h~1B7FFFh SA62 110111XXX 64/32 370000h~37FFFFh 1B8000h~1BFFFFh SA63 111000XXX 64/32 380000h~38FFFFh 1C0000h~1C7FFFh SA64 111001XXX 64/32 390000h~39FFFFh 1C8000h~1CFFFFh SA65 111010XXX 64/32 3A0000h~3AFFFFh 1D0000h~1D7FFFh SA66 111011XXX 64/32 3B0000h~3BFFFFh 1D8000h~1DFFFFh SA67 111100XXX 64/32 3C0000h~3CFFFFh 1E0000h~1E7FFFh SA68 111101XXX 64/32 3D0000h~3DFFFFh 1E8000h~1EFFF Fh SA69 111110XXX 64/32 3E0000h~3EFFFFh 1F0000h~1F7FFFh SA70 111111XXX 64/32 3F0000h~3FFFFFh 1F8000h~1FFFFFh
Sector address
A20~A12
Sector Size
(Kbytes/Kwords)
bytes/words
(256/128)
(X8)
Address Range
000000h~0000FFh 000000h~00007Fh
Address Range
Note:
The addresses range is A20:A-1 in byte mode (BYTE#=VIL) or A20:A0 in word mode (BYTE#=VIH).
(X16)
Remark
Main Sector
ES29LV320D
16
Rev. 2D Jan 5, 2006
ESI
ESI
Excel Semiconductor inc.
Temporary Sector
Unprotect Mode
Increment
COUNT
No
COUNT=25?
Yes Yes
Device failed
No
Set up sector address
Sector Protect: Write 60h to sec­tor address with A6 = 0, A1 = 1, A0 = 0
Write 40h to sec-
tor address with
A6 = 0, A1 = 1,
Read from sec-
tor address with
A6 = 0, A1 = 1,
No
Sector Protect
In-System Protection / Unprotection Method
START
COUNT = 1
RESET# = V
Wait 1us
First Write Cycle = 60h?
Yes
Wait 150us
Verify Se ctor
Protect:
A0 = 0
A0 = 0
Data = 01h?
Protect another
sector?
No
Remove VID
from RESET#
Write reset
command
complete
Protect all sectors: The indicated por­tion of the sector
ID
Reset
COUNT = 1
Yes
protect algorithm must be performed for all unprotected sectors prior to issuing the first sector unprotect address
Increment
COUNT
No
COUNT =1000?
Yes Yes
Device failed
No
No
START
COUNT = 1
RESET# = V
Wait 1us
First Write Cycle = 60h?
All sectors
protected ?
Set up first sector address
Sector Unpro­tect: Write 60h to sec­tor address with A6 = 1, A1 = 1,
Wait 15ms
Verify Se ctor Unprotect: Write 40h to sec­tor address with A6 = 1, A1 = 1, A0 = 0
Read from sec­tor address with A6 = 1, A1 = 1, A0 = 0
Data = 00h?
Last sector
verified?
Remove VID from RESET#
Write reset
command
Yes
Yes
Yes
ID
No
Temporary Sector
Unprotect Mode
Set up next sector address
No
Figure 3. In-System Sector Protect Algorithm
ES29LV320D
17
Sector Unprotect complete
Figure 4. In-System Sector Unprotect Algorithm
Rev. 2D Jan 5, 2006
ESI
ESI
Excel Semiconductor inc.
A9 High-Voltage Method
Start
Start
COUNT = 1
SET A9=OE#=V
ID
Note: All sectors must be previously protected.
COUNT = 1
SET A9=OE#=V
ID
Increase COUNT
No
COUNT= 25?
Yes
Device failed
CE#,OE#,A6,A0=V RESET#, A1 = V
No
Set Sector Address A<20 :12> CE#, A6, A0=V
RESET#, A1=V
SET WE# = V
Wait 150 us
SET WE# = V
Read Data
Data = 01h?
Protect Another Sector ?
Remove VID from A9 and Write
Reset Command
IL
IH
IL
IH
IH
Yes
No
CE#, A0=V RESET#,
A6, A1=V
SET WE# = V
Wait 15ms
SET WE# = V
Increase COUNT
IL
No
COUNT=1000?
Yes
Yes
Device failed
CE#,OE#, A0=V RESET#, A6, A1=V
Set Sector AddressA<20 :12>
Read Data
No
Data = 00h?
Yes
The Last Sector Address ?
Remove VID from A9 and Write Reset Command
IH
Yes
,
IL
IL
IH
IL
IH
Increase Sector Address
No
Sector Protection Complete
Figure 5. Sector Protection Algorithm (A9 High-Voltage Method)
ES29LV320D
18
Sector Unprotection Complete
Figure 6. Sector Un-Protection Algorithm (A9 High-Voltage Method)
Rev. 2D Jan 5, 2006
Loading...
+ 41 hidden pages