1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
Warning - Read before start-up!
The product may only be used for the intended purpose designed by the manufacturer. The
operation manual should be conveniently kept available at all times for each user.
Unauthorized changes that have not been sold or recommended by the manufacturer may have a
negative influence on the system the program has been installed or copied on. Such unauthorized
measures shall exclude any liability by the manufacturer.
The liability-prescriptions of the manufacturer in the issue valid at the time of purchase are valid for
the device. The manufacturer shall not be held legally responsible for inaccuracies, errors, or
omissions in the manual or automatically set parameters for a device or for an incorrect application
of a device.
Only qualified personnel should carry out installation, operation, and maintenance procedures.
Use of the program and its installation must be in accordance with national legal requirements.
When working on devices the valid safety regulations must be observed.
Read Me First
About this Guide
This manual describes the HF Multi ISO Reader. Its goal is to describe the reader, how it works,
how to integrate it and how to use it.
Contacts
Europe, Middle East and Africa
HID Global Corporation, Ltd. (Haverhill, UK)
HID GLOBAL, HID, the HID logo, and OMNIKEY are the trademarks or registered trademarks of HID
Global Corporation, or its licensors, in the U.S. and other countries.
Appendix A - References........................................................................................................................123
Appendix B - SAM Socket Details.........................................................................................................124
Appendix C - Timings.............................................................................................................................125
Appendix D ..............................................................................................................................................127
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
Scope
The HID HF Multi ISO Reader Module supports a broad range of tags compliant with ISO 14443
type A and B standards, including SR176 tags, tags which belong to the NXP MIFARE family, ISO
15693 tags, ISO 18000-3, EPC and UID tags. An open command structure allows the device to
communicate with tags that use an operating system. The read/write unit supports ISO 14443-4
layer with automatic chaining, 256 byte buffer and frame length, extended time framing and up to
848kBaud transmission rates over the air interface.
Several protocols are available to enable the reader module to be connected to a variety of
equipment. The ASCII protocol facilitates the use of a simple terminal; the Binary protocol provides
robust communication more suitable for a dedicated host system. If a host computer is used, then a
function library is available, providing function calls rather than low-level ‘byte-bashing’.
For the SAM interface security features and DESFire credential DES encryption, the function library
provides access to these features in the Reader Module. The function library is available for
Windows CE and XP host applications.
Major applications are:
Access control, identification using security credentials
Ticketing using standard MIFARE and DESFire credentials
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
Overview
Definitions
Anti-collision loop
An algorithm used to identify and handle a dialogue between a reader and one or more tags in its
antenna field.
ASCII notation
ASCII characters are listed within apostrophes, i.e. ‘x’ means a single x.
Hex notation
A hexadecimal value is marked with the suffix ‘h’, i.e. A1h has the value A1 hexadecimal.
Abbreviations
Abbreviation Description
AID Application ID
ASCII American Standard Code for Information Interchange
ATR Answer to Reset
ATS Answer to Select
AFI Application Family Identifier
Block For the MIFARE Standard one block contains 16 bytes
CBC Cipher Block Chai ning
CID Card Identifier (logical card address, ISO 14443-4)
CRC Cyclic Redundancy Check
DES Data Encryption Standard, for more details about DES refer to [3].
DSFID Data storage format identifier
EDC Error Detection Code
EGT Extra Guard Time
EOF End of Frame
ETU Elementary time unit
Hex / xxh Value in Hexadecimal notation
I-block Information block
KTT Key Transfer Transponder
LSB Least Significant Bit or Byte
MSB Most Significant Bit or Byte
NAD Node Address (ISO 14443-4)
OSI Open System Interconnection
OTP One time programmable
PCB Protocol Control Byte (ISO 14443-4)
PCON Protocol Configuration byte of the reader
PPS Protocol and Parameter Selection
RATS Request for Answer to Select
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
Abbreviation Description
R-block Receive ready block
REQA Request ISO Type A
REQB Request ISO Type B
RFU Reserved for Future Use
S-block Supervisory block
SAM Secure Application Module
Sector For the MIFARE Standard one sector contains 4 blocks
SID Station ID
SFGT Guard time after RATS
SN Serial Number of a tag (a 32 bit number)
SOF Start of frame
TDES Triple DES
Value block 32 bit data block format. Used in ticketing application
<CR> Carriage return (0Dh)
<LF> Line feed (0Ah)
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
1.3Jumper 2 Details
Table 3 - Pin out – Jumper 2
PIN PIN No. Description
VDD 20 Supply Voltage
GND 19 Ground
LEDg 18 LED green (reading LED)
LEDr 17 LED red
EN 16 Enable reader, open or logic high
MCLR 15 Master clear
USER 14 User Port
DIR 13 Direction of RS 485
TX 12 TX to PC
RX 11 RX from PC
Table 4 - Electrical characteristics of J2 PINs
PIN PIN No. Min Typ. Max. Description
RX 11
TX 12
DIR 13
USER 14
MCLR 15
EN 16
LEDr 17
VDD
min
@ 25mA
USART-TTL1 25 mA Rx to PC
To RS232, RS485 or RS422 device
driver
USART-TTL1 25 mA Tx to PC
To RS232, RS485 or RS422 device
driver
TTL 25 mA Direction of RS 485
Logic High = Reader to Host
Logic Low = Host to Reader
TTL3 25 mA User Port
TTL4
ST5 25 mA Enable reader
VDD
typ
@ 11mA
11mA 25mA External Resistor
VDD
max
@ 0 mA
Master clear
Leave unconnected
logic low will disable the reader
Open or logic high
TTL buffer output / input. If user port is used as an output, a 1kΩ (current limiting) series resistor
has to be integrated into the connecting wire, otherwise the reader device can be damaged.
4
Voltage spikes below GND at the MCLR/VDD pin, including currents greater than 80mA, may
cause latch-up. Thus, a series resistor of 50-100 should be used when applying a "low" level to
the MCLR/VDD, rather than pulling this pin directly to GND.
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
PIN PIN No. Min Typ. Max. Description
LEDg 18
GND 19
VDD 20 +4.5V +5.0V +5.5V Supply Voltage
IDD
32 mA 150 mA 250 mA Supply Current (Without SAM)
1.4V
@ 11mA
11mA 15mA
GND
VDD
@ 0mA
LED green (reading LED)
with 330 (internal serial) resistor
Ground
1.4 External Connections
1.4.1 Power Supply
If the supply voltage and any noise modulated on the supply voltage remains within the specified
limits, no further filtering is required. In some cases it is recommended to use additional filtering for
the power supply line. Insufficient power line filtering could cause unexpected or irregular
performance drops.
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
The board can be connected as shown in Figure 3 - Power Supply Option 2. Both alternatives are
possible and can be used as they fit best into the layout of the carrier board. The two VCC PINs and
the two GND PINs are connected internally.
+5V DC
OEM Board
3
4
Figure 3 - Power Supply Option 2
1.4.2Antenna
The typical antenna tuning and matching network is shown in Figure 4 - Typical Antenna Tuning.
The external antenna has to have the right inductance and a certain resistor and capacitor
combination for an optimized frequency tuning and antenna matching.
L ANT
C5
C3
C4
R1
C1
C2
1
2
5
6
OEM Board
Figure 4 - Typical Antenna Tuning
More details about the antenna design are available in the HID Antenna Design guide. Download
this document from http://www.hidglobal.com/Omnikey
.
Reference the specific application notes for the NXP reader IC (MIFARE & I-Code, Micore Reader
IC family Directly Matched Antenna Design).
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
1.4.3 Serial Interface
The OEM Board can be connected directly with a micro controller. Alternatively the OEM Board also
can be connected to most serial interface types by using the right interface converter circuit. In
order to optimize the communication quality the specific application note of the interface converter
circuit needs to be taken into consideration.
OEM Board
Figure 5 - OEM Board Serial Interface
1.4.4Function Control LEDs
Two external LEDs can be connected to the OEM Board. There are two alternatives possible.
OEM Board
uC
Figure 6- Connecting External LEDs - Option 1
OEM Board
uC
12
11
330 Ohm
330 Ohm
18
17
18
17
Interface
Converter
Circuit
330 Ohm
Host Interface
Figure 7 - Connecting External LEDs - Option 2
In both cases the LED supply voltage levels are TTL levels.
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
1.4.5SAM Connector/Socket
Note: The power supply to the SAM must be turned off during the entire SAM insertion/withdrawal
period; otherwise damage to the SAM may occur.
When using a SAM with the OEM board, it is recommended that a 100nF decoupling capacitor be
fitted between Vcc and GND close to the SAM socket to ensure proper operation. The complete
circuit diagram is shown in Figure 8 - SAM Connector.
Vcc
OEM Board
7
100nF
SAM
Module
CLK
I/O
RST
8
9
GND
Figure 8 - SAM Connector
PIN-outs for 8 Pin SAM Socket and 6 Pin SAM Socket is shown in Appendix B.
Note: The SAM interface hardware does not support error repetition and does not check the parity
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
2 Software
In order to offer the widest possible choice of interface, the MultiISO reader offers both ASCII and
Binary serial protocols – see Transmission Protocol, page 19.
EEPROM reg
settings, timing parameters and modulation index – listed in Register Set, page 23. These registers
are alterable using the
register settings are applie
These configuration registers may be altered ‘on-the-fly’ to immediately affect performance by the
‘set configuration flag/register’ commands, but the changes are lost once the reader is powered
down, unless also written into the EEPROM registers. These and all other configurable settings are
detailed in the Register Set – Register Set, page 23.
General read
Details, page 39, dealing with the physical attributes of the reader – r
control, Antenna power – and the basic tag commands – include/exclude tag types, continuous
read, tag select and air speed select, and simple block read/write commands.
Tag-specific commands for MIFARE and My-D tags are listed in Sections ISO 14443 Type A
(MIFARE
keys are listed in Key Management, page 76.
For more complex commands,
exchange information – see ‘t’ Command – Data Frame Transfer, page 90 and ‘t’ command block
format & ex
To communicate with
frame/packet to exchange information, based on the ISO7816 APDU – see ‘e’ command – SAM
data frame
isters in the reader hold default settings for Station ID, protocol, serial and air-speed
Read/Write EEPROM commands detailed in Command Set page 37. The
d to the reader through the configuration registers.
er commands are
listed in Command Set page 37 and detailed in Common Command
eset, LED control, User port
®
) only commands, page 70 and my-d™ secure, page 84, and commands to manipulate
the ‘t’ command is used. This uses a data frame or packet to
amples, page 94 for examples of use
the optional SAM, the ‘e’ command is used. This also encapsulates a data
transfer, page 97 and ‘e’ command block, page 102 for examples of use.
2.1 Transmission Protocol
Two protocol modes are supported, with the default held in the reader EEPROM. As factory default,
the ASCII protocol is used, and the default serial configuration is 9600baud, n, 8, 1, with no
handshaking.
2.1.1 ASCII Protocol
This protocol is designed for easy handling. The commands may be issued using a terminal
program, such as HyperTerminal, and the data is transmitted as ASCII hexadecimal that can be
easily displayed on the terminal program.
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
2.1.2 Binary Protocol
This protocol is designed for industrial applications with synchronization and frame checking. An
addressing byte for party line (master/slave, multi-drop) is also included.
The protocol usually requires a device driver. Data is transmitted in binary mode. The reader uses
an internal binary watchdog timer to ensure correct framing.
The binary frame version 2 is only sent to the host. It is implemented to give extended information to
the host. Version 2 must be enabled in the Protocol configuration 2 register.
Unique ID of the station
00h: Reserved for the bus master. Readers send response to this device ID.
FFh: Broadcast message. All devices will execute the command and send their response.
2.1.2.3 Length
Length defines the length of the data block, including the flag byte, if binary protocol version 2 is
activated. If length is set to zero, 256 data bytes are transmitted. The reader module only can send
256 data bytes, but cannot receive commands with 256 bytes.
2.1.2.4 Flags
The flag byte gives additional information to the host.
Bit 3 – Bit 7 Bit 1 – Bit 2 Bit 0
RFU Leading Character Info Error State
Error State
If cleared, the command was processed successfully. If set, an error occurred.
Leading Character Info
Bit 1 & 2 defines how to interpret the data in the binary frame.
Bit 2 Bit 1 Description
0 0 No leading character available, all values are hexadecimal.
0 1 The data contains one leading character.
1 0 All data bytes are characters.
1 1 RFU
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
2.1.2.5 Data
This part contains the command and the data. The command values are the same as in ASCII
protocol mode (‘x’, ‘s’, …) whereas data is transmitted in binary mode.
The length of the command block depends on the instruction.
2.1.2.6 Block Check Character (BCC)
The BCC is used to detect transmission errors. The BCC is calculated XOR-ing each byte of the
transmission frame excluding the STX/BCC and ETX characters. The flags are part of the data.
2.1.2.7 ETX
End of transmission. (03h)
2.1.2.8 Remarks
If the reader device receives an invalid instruction frame (i.e. wrong BCC) or the requested station
ID does not match the internal ID of the reader, the command is not executed. The reader waits for
the next valid frame.
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
2.2 Register Set
The reader has several system registers used for customization purposes. These registers are
stored in its non-volatile EEPROM. The reader accepts changes to these settings only during the
start-up phase. [See Write EEPROM, page 68]
f
Some o
feature. These are referred to as Flags. [See Set Configuration Flags, page 54]
the system registers are organized such that each of the 8 bits is an on-off selection for a
Clearing all RFU bits
is recommended in order to guarantee compatibility with future releases.
In addition, direct changes to some of these system registers may be made at any time, with
immediate effect, but these changes are NOT stored in EEPROM and thus are lost when the reader
powers down. [See Set Configuration Fl ags, page 54 and Set Configuration Register page 56]
These ‘on-the-
fly’ changes are mapped onto the EEPROM ‘registers’ or memory locations and do
not necessarily carry the same ‘register’ values.
The reader can store up to 32 authentication keys internally to login standard MIFARE cards. An
additional 32 keys can be stored for DESFire authentication. All keys are read only and cannot be
accessed through the interface lines.
2.2.1EEPROM Memory Organization
Register Description
00h … 04h Unique device ID; read only
05h … 09h Administrative data; read only
0Ah Station ID
0Bh Protocol configuration 1
0Ch Baud rate
0Dh Command Guard Time
0Eh Operation Mode
0Fh Single shot time-out value
10h TMR low *
11h TMR high *
12h Type B framing *
13h Protocol configuration 2
14h Reset Off Time
15h Reset Recovery Time
16h Application Family Identifier
17h ISO 14443A Selection Time-out
18h ISO 14443B Selection Time-out
19h SR176 Selection Time-out
1Ah ISO 15693 Selection Time-out
1Bh Protocol configuration 3
1Ch Page Start
1Dh Modulation con ductance 0 (Type B and SR176. Also ISO15693 if set to 10%
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
Register Description
1Fh Page number
20h Protocol configuration 4
21h CID
22h RxWait
23h Modulation conductance 1 (Type B and SR176)
24h Modulation conductance 2 (Type B and SR176)
25h Modulation conductance 3 (Type B and SR176)
26h - 7Fh RFU
80h … EFh User data
2.2.2 Unique Device ID (00h – 04h)
The unique device ID identifies a reader module. It is factory programmed and cannot be changed.
2.2.3 Station ID (0Ah)
Default = 01h
The station ID is used in binary mode to address a device in party line set up. The station ID can
range from 01h to FEh and can be set freely. The value 00h is reserved for the bus master. All
readers send their response to this device.
The broadcast message (FFh) forces all readers to response to the command.
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
Binary Protocol, page 20 for further information on the binary protocol format. Default setting =
ASCII protocol (0).
2.2.4.3 Multitag (default 0)
The Multitag flag will enable multi-tag recognition in continuous read mode. All tags are detected
and displayed. Due to the more complex search algorithm, the continuous read command
decreases its detection speed.
2.2.4.4 New Serial Mode (default 0)
If New Serial Mode is set to ‘1’, new serial mode is enabled. A leading character is added to the
serial number.
Leading Character Description
D ICode UID
E ICode EPC
I ICode
J ISO 14443 A Jewel tag
M ISO 14443 A
S SR 176
V ISO 15693
Z ISO 14443 B
2.2.4.5 LED (default 0)
If set the reader suppresses any LED activity. The user manages the state of the LEDs.
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
2.2.4.6 Single Shot (default 0)
If Single Shot is set, the reader displays the serial number of a tag in continuous read mode once
within a specified time-out. The time-out is defined at EEPROM register 0Fh.
The delay time can be adjusted stepwise in 100ms steps. 00h indicates no delay and FFh
indicates infinite delay.
Note: The delay precision depends on reset off and reset recovery time.
2.2.4.7 Extended Protocol (default 1)
If Extended Protocol is set, the transfer data telegram command supports ISO14443-4 and
automatically process the WTX and chaining for smaller frames. This flag has to be set to enable
14443-4 error handling – see Extended Protocol (default 1), page 27.
If sending
ISO 14443-3 co
mmands this flag has to be switched off.
The transfer data telegram command is only supported in normal mode, not in transmit / receive
mode.
2.2.4.8 Extend ID (default 0)
If the Extend ID is set, the reader extends the serial number with additional information.
ISO 14443 A tags
Tag type / ReqA Serial number [SAK]
1 byte / 2 bytes 4 / 7 / 10 bytes 1 byte
Tag type / ReqA Serial number [SAK] ATS Used Speed [CID]
1508-USM-00-0-04 HF Multi ISO RFID Reader User Manual, Firmware V1.4
2.2.5 BAUD, Baud Rate Control Register (0Ch)
Default = 00h
The baud rate register defines the communication speed of the reader device.
Baud rate register
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
RFU RFU RFU RFU RFU BS2 BS1 BS0
This register defines the baud rate of the device.
BS2 BS1 BS0 Baud rate
0 0 0 9600 baud (default)
0 0 1 19200 baud
0 1 0 38400 baud
0 1 1 57600 baud
1 0 0 115200 baud
1 0 1 230400 baud (depends on the used interface chip)
1 1 0 460800 baud (depends on the used interface chip)
With the high baud rates (230400 and 460800 baud), proper operation depends on the interface
chip used. Please note that some of the interface chips available do not support these high baud
rates.
The following table describes the exact baud rates used by the reader.
HF Multi ISO RFID Reader User Manual, Firmware V1.4 1508-USM-00-0-04
2.2.6 Command Guard Time (0Dh)
Default = 20h (1,2ms)
The Command Guard Time is used to ensure that commands are not sent to fast consecutively.
Following commands are sent after the guard time is elapsed. One time slice is around 37,8us. The
longest timeout value is 9,6ms (FFh).
2.2.7 OPMODE - Operating Mode Register (0Eh)
Default = FFh (all)
The operation mode register defines which tag types the reader supports. This register enables fast
tag recognition because only defined tag types are requested.
Operation mode register
Bit 7 (MSB) Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0 (LSB)
RFU
ICODE UID
ICODE EPC
ISO 15693
ICODE
SR176
ISO 14443B
Innovision Jewel tag
Innovision Jewel tag is part of ISO 14443 Type A. It can not be separately switched on/off.
2.2.8 Single Shot Time-Out (0Fh)
Default = 0Ah (1 sec)
The time-out value defines the delay time between two responses of the reader. It only has effect in
continuous read mode. To enable the time-out, the single shot flag has to be set. See