—2.7 V– 3.6 V Read/Program/Erase
—12 V for Fast Production Programming
■ 1.65 V–2.5 V or 2.7 V–3.6 V I/O Option
—Reduces Overall System Power
■ High Performance
—2.7 V– 3.6 V: 70 ns Max Access Time
■ Optimized Architecture for Code Plus
Data Storage
—Eight 4 Kword Blocks, Top or Bottom
Parameter Boot
—Up to One Hundred-Twenty-Seven 32
Kword Blocks
—Fast Program Suspend Capability
—Fast Erase Suspend Capability
■ Flexible Block Locking
—Lock/Unlock Any Block
—Full Protection on Power-Up
—WP# Pin for Hardware Block Protection
■ Low Power Consumption
—9 mA Typical Read
—7 A Typical Standby with Automatic
Power Savings Feature (APS)
■ Extended Temperature Operation
—–40°C to+85 °C
■ 128-bit Protection Register
—64 bit Unique Device Identifier
—64 bit User Programmable OTP Cells
■ Extended Cycling Capability
—Minimum 100,000 Block Erase Cycles
■ Software
—Intel
®
Flash Data Integrator (FDI)
—Supports Top or Bottom Boot Storage,
Streaming Data (e.g., voice)
—Intel Basic Command Set
—Common Flash Interface (CFI)
■ Standard Surface Mount Packaging
—48-Ball µBGA*/VFBGA
—64-Ball Easy BGA Packages
—48-Lead TSOP Package
■ ETOX™ VIII (0.13 µm) Flash
Technology
—16, 32 Mbit
■ ETOX™ VII (0.18 µm)Flash Technology
—16, 32, 64 Mbit
■ ETOX™ VI (0.25 µm) Flash Technology
—8, 16 and 32 Mbit
The Intel®Advanced+ Book Block Flash Memory (C3) device, manufactured on Intel’s latest
0.13 µm and 0.18 µm technologies, represents a feature-rich solution for low-power applications.
The C3 device incorporates low-voltage capability (3 V read, program, and erase) with highspeed, low-power operation. Flexible block locking allows any block to be independently locked
or unlocked. Add to this the Intel
effective, flexible, monolithic code plus data storage solution. Intel
Memory (C3) products will be available in 48-lead TSOP, 48-ball CSP, and 64-ball Easy BGA
packages. Additional information on this product family can be obtained by accessing the Intel
®
Flash Data Integrator (FDI) software and you have a cost-
®
Advanced+ Boot Block Flash
®
Flash website: http://www.intel.com/design/flash.
Notice: This specification is subject to change without notice. Verify with your local Intel sales
office that you have the latest datasheet before finalizing a design.
Order Number: 290645-017
October 2003
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY
ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED IN
INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER, AND INTEL DISCLAIMS
ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES
RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER
INTELLECTUAL PROPERTY RIGHT. Intel products are not intended for use in medical, life saving, or life sustaining applications.
Intel may make changes to specifications and product descriptions at any time, without notice.
Designers must not rely on the absence or characteristics of any features or instructions marked "reserved" or "undefined." Intel reserves these for
future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them.
The 28F800C3, 28F160C3, 28F320C3, 28F640C3 may contain design defects or errors known as errata which may cause the product to deviate from
published specifications. Current characterized errata are available on request.
Contact your local Intel sales office or your distributor to obtain the latest specifications and before placing your product order.
Copies of documents which have an ordering number and are referenced in this document, or other Intel literature may be obtained by calling 1-800548-4725 or by visiting Intel's website at http://www.intel.com.
10/03-017Corrected information in the Device Geometry Details table, address 0x34.
VersionDescription
Updated 64Mb product offerings.
Updated 16Mb product offerings.
Revised and corrected DC Characteristics Table.
Added mechanicals for Easy BGA.
Minor text edits throughout document.
6Datasheet
1.0Introduction
1.1Document Purpose
This datasheet contains the specifications for the Intel®Advanced+ Boot Block Flash Memory
(C3) device family. These flash memories add features such as instant block locking and protection
registers that can be used to enhance the security of systems.
1.2Nomenclature
0xHexadecimal prefix
0bBinary prefix
Byte8 bits
Word16 bits
Kword1024 words
Mword1,048,576 words
Kb1024 bits
KB1024 bytes
Mb1,048,576 bits
MB1,048,576 bytes
APSAutomatic Power Savings
CUICommand User Interface
OTPOne Time Programmable
PRProtection Register
PRDProtection Register Data
PLRProtection Lock Register
RFUReserved for Future Use
SRStatus Register
SRDStatus Register Data
WSMWrite State Machine
Intel£Advanced+ Boot Block Flash Memory (C3)
1.3Conventions
The terms pin and signal are often used interchangeably to refer to the external signal connections
on the package. (ball is the term used for CSP).
Group Membership Brackets: Square brackets will be used to designate group membership or to
define a group of signals with similar function (i.e. A[21:1], SR[4:1])
Set: When referring to registers, the term set means the bit is a logical 1.
Clear: When referring to registers, the term clear means the bit is a logical 0.
Block: A group of bits (or words) that erase simultaneously with one block erase instruction.
Main Block: A block that contains 32 Kwords.
Parameter Block: A block that contains 4 Kwords.
Datasheet7
Intel£Advanced+ Boot Block Flash Memory (C3)
2.0Device Description
This section provides an overview of the Intel®Advanced+ Boot Block Flash Memory (C3) device
features, packaging, signal naming, and device architecture.
2.1Product Overview
The C3 device provides high-performance asynchronous reads in package-compatible densities
with a 16 bit data bus. Individually-erasable memory blocks are optimally sized for code and data
storage. Eight 4 Kword parameter blocks are located in the boot block at either the top or bottom of
the device’s memory map. The rest of the memory array is grouped into 32 Kword main blocks.
The device supports read-array mode operations at various I/O voltages (1.8 V and 3 V) and erase
and program operations at 3 V or 12 V VPP. With the 3 V I/O option, VCC and VPP can be tied
together for a simple, ultra-low-power design. In addition to I/O voltage flexibility, the dedicated
VPP input provides complete data protection when V
The device features a 128-bit protection register enabling security techniques and data protection
schemes through a combination of factory-programmed and user-programmable OTP data
registers. Zero-latency locking/unlocking on any memory block provides instant and complete
protection for critical system code and data. Additional block lock-down capability provides
hardware protection where software commands alone cannot change the block’s protection status.
PP
≤ V
PPLK
.
A command User Interface(CUI) serves as the interface between the system processor and internal
operation of the device. A valid command sequence issued to the CUI initiates device automation.
An internal Write State Machine (WSM) automatically executes the algorithms and timings
necessary for block erase, program, and lock-bit configuration operations.
The device offers three low-power saving features: Automatic Power Savings (APS), standby
mode, and deep power-down mode. The device automatically enters APS mode following read
cycle completion. Standby mode begins when the system deselects the flash memory by
deasserting CE#. The deep power-down mode begins when RP# is asserted, which deselects the
memory and places the outputs in a high-impedance state, producing ultra-low power savings.
Combined, these three power-savings features significantly enhanced power consumption
flexibility.
2.2Ballout Diagram
The C3 device is available in 48-lead TSOP, 48-ball VF BGA, 48-ball µBGA, and Easy BGA
packages. (Refer to Figure1onpage9, Figure 3 on page 11,andFigure 4 on page 12,
respectively.)
1. For lower densities, upper address should be treated as NC. For example, a 16-Mbit device will have NC on
Pins 9 and 10.
Datasheet9
Intel£Advanced+ Boot Block Flash Memory (C3)
Figure 2. Mark for Pin-1 indicator on 48-Lead 8Mb, 16Mb and 32Mb TSOP
Current Mark:
New Mark:
Note:The topside marking on 8 Mb, 16 Mb, and 32 Mb Intel
£
Advanced and Advanced + Boot Block
48L TSOP products will convert to a white ink triangle as a Pin 1 indicator. Products without the
white triangle will continue to use a dimple as a Pin 1 indicator. There are no other changes in
package size, materials, functionality, customer handling, or manufacturability. Product will
continue to meet Intel stringent quality requirements. Products affected are Intel Ordering Codes
shown in Table 1 .
Tabl e 2 lists the active signals used and provides a brief description of each.
Table 2. Signal Descriptions
SymbolTypeName and Function
ADDRESS INPUTS for memory addresses. Address are internally latched during a program or erase
cycle.
A[MAX:0]INPUT
DQ[15:0]
CE#INPUT
OE#INPUT
RP#INPUT
WE#INPUT
WP#INPUT
VPP
VCCPOWER
VCCQPOWER
GNDPOWER
DU-
NC-
INPUT/
OUTPUT
INPUT/
POWER
8 Mbit: AMAX= A18
16 Mbit: AMAX = A19
32 Mbit: AMAX = A20
64 Mbit: AMAX = A21
DATA INPUTS/OUTPUTS: Inputs data and commands during a write cycle; outputs data during read
cycles. Inputs commands to the Command User Interface when CE# and WE# are active. Data is
internally latched. The data pins float to tri-state when the chip is de-selected or the outputs are
disabled.
CHIP ENABLE: Active-low input. Activates the internal control logic, input buffers, decoders and sense
amplifiers. CE# is active low. CE# high de-selects the memory device and reduces power consumption
to standby levels.
OUTPUT ENABLE: Active-low input. Enables the device’s outputs through the data buffers during a
Read operation.
RESET/DEEP POWER-DOWN: Active-low input.
When RP# is at logic low, the device is in reset/deep power-down mode, which drives the outputs to
High-Z, resets the Write State Machine, and minimizes current levels (I
When RP# is at logic high, the device is in standard operation. When RP# transitions from logic-low to
logic-high, the device resets all blocks to locked and defaults to the read array mode.
WRITE ENABLE: Active-low input. WE# controls writes to the device. Address and data are latched on
therisingedgeoftheWE#pulse.
WRITE PROTECT: Active-low input.
When WP# is a logic low, the lock-down mechanism is enabled and blocks marked lock-down cannot
be unlocked through software.
When WP# is logic high, the lock-down mechanism is disabled and blocks previously locked-down are
now locked and can be unlocked and locked through software. After WP# goes low, any blocks
previously marked lock-down revert to the lock-down state.
See Section 5.0, “Security Modes” on page 27 for details on block locking.
PROGRAM/ERASE POWER SUPPLY: Operates as an input at logic levels to control complete device
protection. Supplies power for accelerated Program and Erase operations in 12 V
cannot be left floating.
Lower VPP
Set VPP = VCC for in-system Read, Program and Erase operations. In this configuration, VPP can
drop as low as 1.65 V to allow for resistor or diode drop from the system supply.
Apply VPP to 12 V
to VPP can only be done for a maximum of 1000 cycles on the main blocks and 2500 cycles on the
boot blocks. VPP may be connected to 12 V for a total of 80 hours maximum. See Section 5.6 for
details on VPP voltage configurations.
DEVICE CORE POWER SUPPLY: Supplies power for device operations.
OUTPUT POWER SUPPLY: Output-driven source voltage. This ball can be tied directly to V
operating within V
GROUND: For all internal circuitry. All ground inputs must be connected.
DON’T USE: Do not use this ball. This ball should not be connected to any power supplies, signals or
other balls, and must be left floating.
NO CONNECT: Pin must be left floating.
≤ VPPLK to protect all contents against Program and Erase commands.
± 5% for faster program and erase in a production environment. Applying 12 V ± 5%
range.
CC
CCD
).
± 5% range. This pin
CC
if
Datasheet13
Intel£Advanced+ Boot Block Flash Memory (C3)
2.4Block Diagram
V
CCQ
Power
Reduction
Control
A[MAX:MIN]
Input B uff er
Address
Latch
Address
Counter
Y-Decoder
X-Decoder
Output Buffer
Output
Multiplexer
Y-G ating/ Sensing
4-KWord
Paramet er B lock
DQ0-DQ
Comparat or
4-KWord
Paramet er B lock
Identifier
Register
Stat us
Register
Dat a
32- KWor d
Main Block
15
Input Buffer
Data
Re gist er
Command
User
Interface
Write State
Machine
32- KWor d
Main Block
I/O Logic
Program /Eras e
Voltage Switch
CE#
WE#
OE#
RP#
WP#
V
GND
V
PP
CC
14Datasheet
2.5Memory Map
The C3 device is asymmetrically blocked, which enables system code and data integration within a
single flash device. The bulk of the array is divided into 32 Kword main blocks that can store code
or data, and 4 Kword boot blocks to facilitate storage of boot code or for frequently changing small
parameters. See Table 3, “Top Boot Memory Map” on page 15 and Table 4, “Bottom Boot Memory
The C3 device uses a CUI and automated algorithms to simplify Program and Erase operations.
The CUI allows for 100% CMOS
programming.
The internal WSM completely automates Program and Erase operations while the CUI signals the
start of an operation and the status register reports device status. The CUI handles the WE#
interface to the data and address latches, as well as system status requests during WSM operation.
3.1Bus Operations
The C3 device performs read, program, and erase operations in-system via the local CPU or
microcontroller. Four control pins (CE#, OE#, WE#, and RP#) manage the data flow in and out of
the flash device. Table 5 on page 17 summarizes these bus operations.
Table 5. Bus Operations
Intel£Advanced+ Boot Block Flash Memory (C3)
-level control inputs and fixed power supplies during erasure and
3.1.1Read
When performing a read cycle, CE# and OE# must be asserted; WE# and RP# must be deasserted.
CE# is the device selection control; when active low, it enables the flash memory device. OE# is
the data output control; when low, data is output on DQ[15:0]. See Figure 8, “Read Operation
Wav ef orm” on page 42.
3.1.2Write
A write cycle occurs when both CE# and WE# are low; RP# and OE# are high. Commands are
issued to the Command User Interface (CUI). The CUI does not occupy an addressable memory
location. Address and data are latched on the rising edge of the WE# or CE# pulse, whichever
occurs first. See Figure 9, “Write Operations Waveform” on page 47.
ModeRP#CE#OE#WE#DQ[15:0]
ReadV
WriteV
Output DisableV
StandbyV
ResetV
NOTE: X = Don’t Care (V
IL
or VIH)
IH
IH
IH
IH
IL
V
IL
V
IL
V
IL
V
IH
XXXHigh-Z
V
IL
V
IH
V
IH
XXHigh-Z
V
IH
V
IL
V
IH
D
OUT
D
High-Z
IN
3.1.3Output Disable
With OE# at a logic-high level (VIH), the device outputs are disabled. DQ[15:0] are placed in a
-impedance state.
high
Datasheet17
Intel£Advanced+ Boot Block Flash Memory (C3)
3.1.4Standby
Deselecting the device by bringing CE# to a logic-high level (VIH) places the device in standby
mode, which substantially reduces device power consumption without any latency for subsequent
read accesses. In standby, outputs are placed in a high-impedance state independent of OE#. If
deselected during a Program or Erase operation, the device continues to consume active power
until the Program or Erase operation is complete.
3.1.5Reset
From read mode, RP# at VILfor time t
impedance state, and turns off all internal circuits. After return from reset, a time t
until the initial read-access outputs are valid. A delay (t
reset before a write cycle can be initiated. After this wake
deselects the memory, places output drivers in a high-
PLPH
PHQV
PHWL
or t
) is required after return from
PHEL
-up interval, normal operation is restored.
is required
The CUI resets to read-array mode, the status register is set to 0x80, and all blocks are locked. See
Figure 10, “Reset Operations Waveforms” on page 48.
If RP# is taken low for time t
during a Program or Erase operation, the operation will be
PLPH
aborted and the memory contents at the aborted location (for a program) or block (for an erase) are
no longer valid, since the data may be partially erased or written. The abort process goes through
the following sequence:
1. When RP# goes low, the device shuts down the operation in progress, a process which takes time
to complete.
t
PLRH
2. After time t
enter reset mode (if RP# is deasserted after t
, the part will either reset to read-array mode (if RP# is asserted during t
PLRH
). See Figure 10, “Reset Operations Waveforms”
PLRH
PLRH
)or
on page 48.
In both cases, after returning from an aborted operation, the relevant time t
PHQV
or t
PHWL/tPHEL
must be observed before a Read or Write operation is initiated, as discussed in the previous
paragraph. However, in this case, these delays are referenced to the end of t
rather than when
PLRH
RP# goes high.
As with any automated device, it is important to assert RP# during a system reset. When the system
comes out of reset, the processor expects to read from the flash memory. Automated flash
memories provide status information when read during program or Block-Erase operations. If a
CPU reset occurs with no flash memory reset, proper CPU initialization may not occur because the
flash memory may be providing status information instead of array data. Intel
®
Flash memories
allow proper CPU initialization following a system reset through the use of the RP# input. In this
application, RP# is controlled by the same RESET# signal that resets the system CPU.
18Datasheet
4.0Modes of Operation
4.1Read Mode
The flash memory has four read modes (read array, read identifier, read status, and CFI query), and
two write modes (program and erase). Three additional modes (erase suspend to program, erase
suspend to read, and program suspend to read) are available only during suspended operations.
Table 7, “Command Bus Operations” on page 24 and Table 8, “Command Codes and
Descriptions”onpage25summarize the commands used to reach these modes. Appendix A,
“Write State Machine States” on page 50 is a comprehensive chart showing the state transitions.
4.1.1Read Array
When RP# transitions from VIL(reset) to VIH, the device defaults to read-array mode and will
respond to the read-control inputs (CE#, address inputs, and OE#) without any additional CUI
commands.
When the device is in read array mode, four control signals control data output.
• WE# must be logic high (V
• CE# must be logic low (V
• OE# must be logic low (V
• RP#mustbelogichigh(V
)
IH
)
IL
)
IL
)
IH
Intel£Advanced+ Boot Block Flash Memory (C3)
In addition, the address of the desired location must be applied to the address pins. If the device is
not in read-array mode, as would be the case after a Program or Erase operation, the Read Array
command (0xFF) must be issued to the CUI before array reads can occur.
4.1.2Read Identifier
The read-identifier mode outputs three types of information: the manufacturer/device identifier, the
block locking status, and the protection register. The device is switched to this mode by issuing the
Read Identifier command (0x90). Once in this mode, read cycles from addresses shown in Table 6
retrieve the specified information. To return to read-array mode, issue the Read Array command
(0xFF).
Datasheet19
Intel£Advanced+ Boot Block Flash Memory (C3)
Table 6.Device Identification Codes
Item
Manufacturer IDBlock0x000x0089
Device IDBlock0x01
Block Lock Status
Block Lock-Down Status
Protection Register Lock StatusBlock0x80Lock Data
Protection RegisterBlock
NOTES:
1. The address is constructed from a base address plus an offset. For example, to read the Block Lock Status
for block number 38 in a bottom boot device, set the address to 0x0F8000 plus the
0x0F8002. Then examine DQ0 of the data to determine if the block is locked.
2. See Section 5.2, “Reading Block-Lock Status” on page 28 for valid lock status.
2
2
Address
BaseOffset
Block0x02
Block0x02
1
0x81 -
0x88
DataDescription
0x88C08-Mbit Top Boot Device
0x88C18-Mbit Bottom Boot Device
0x88C216-Mbit Top Boot Device
0x88C316-Mbit Bottom Boot Device
0x88C432-Mbit Top Boot Device
0x88C532-Mbit Bottom Boot Device
0x88CC64-Mbit Top Boot Device
0x88CD64-Mbit Bottom Boot Device
DQ0 = 0b0Block is unlocked
DQ0 = 0b1Block is locked
DQ1 = 0b0Block is not locked-down
DQ1 = 0b1Block is locked down
Register Data
Multiple reads required to read
the entire 128-bit Protection
Register.
offset (0x02), i.e.
4.1.3CFI Query
The CFI query mode outputs Common Flash Interface (CFI) data after issuing the Read Query
Command (0x98). The CFI data structure contains information such as block size, density,
command set, and electrical specifications. Once in this mode, read cycles from addresses shown in
Appendix C, “Common Flash Interface,” retrieve the specified information. To return to read-array
mode, issue the Read Array command (0xFF).
4.1.4Read Status Register
The status register indicates the status of device operations, and the success/failure of that
operation. The Read Status Register (0x70) command causes subsequent reads to output data from
the status register until another command is issued. To return to reading from the array, issue a
Read Array (0xFF) command.
The status-register bits are output on DQ[7:0]. The upper byte, DQ[15:8], outputs 0x00 when a
Read Status Register command is issued.
20Datasheet
The contents of the status register are latched on the falling edge of OE# or CE# (whichever occurs
last) which prevents possible bus errors that might occur if Status Register contents change while
being read. CE# or OE# must be toggled with each subsequent status read, or the Status Register
will not indicate completion of a Program or Erase operation.
When the WSM is active, SR[7] will indicate the status of the WSM; the remaining bits in the
status register indicate whether the WSM was successful in performing the preferred operation (see
Table 9, “Status Register Bit Definition” on page 26).
4.1.4.1Clear Status Register
The WSM can set Status Register bits 1 through 7 and can clear bits 2, 6, and 7; but, the WSM
cannot clear Status Register bits 1, 3, 4 or 5. Because bits 1, 3, 4, and 5 indicate various error
conditions, these bits can be cleared only through the Clear Status Register (0x50) command. By
allowing the system software to control the resetting of these bits, several operations may be
performed (such as cumulatively programming several addresses or erasing multiple blocks in
sequence) before reading the status register to determine if an error occurred during that series.
Clear the status register before beginning another command or sequence. The Read Array
command must be issued before data can be read from the memory array. Resetting the device also
clears the Status Register.
Intel£Advanced+ Boot Block Flash Memory (C3)
4.2Program Mode
Programming is executed using a two-write cycle sequence. The Program Setup command (0x40)
is issued to the CUI followed by a second write which specifies the address and data to be
programmed. The WSM will execute a sequence of internally timed events to program preferred
bits of the addressed location, then verify the bits are sufficiently programmed. Programming the
memory results in specific bits within an address location being changed to a “0.” If users attempt
to program “1”s, the memory cell contents do not change and no error occurs.
The Status Register indicates programming status. While the program sequence executes, status bit
7 is “0.” The status register can be polled by toggling either CE# or OE#. While programming, the
only valid commands are Read Status Register, Program Suspend, and Program Resume.
When programming is complete, the program-status bits should be checked. If the programming
operation was unsuccessful, bit SR[4] of the Status Register is set to indicate a program failure. If
SR[3] is set, then V
command. If SR[1] is set, a program operation was attempted on a locked block and the operation
was aborted.
The status register should be cleared before attempting the next operation. Any CUI instruction can
follow after programming is completed; however, to prevent inadvertent status-register reads, be
sure to reset the CUI to read-array mode.
4.2.112-Volt Production Programming
When VPPis between 1.65 V and 3.6 V, all program and erase current is drawn through the VCC
pin. Note that if V
1.65 V to perform in-system flash modifications. When V
the device draws program and erase current directly from the VPP pin. This eliminates the need for
an external switching transistor to control V
flash power supplies can be configured for various usage models.
was not within acceptable limits, and the WSM did not execute the program
PP
is driven by a logic signal, VIHmin = 1.65 V. That is, VPPmust remain above
PP
PP
is connected to a 12 V power supply,
PP
. Figure 7 on page 31 shows examples of how the
Datasheet21
Loading...
+ 47 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.