Rainbow Electronics MAX66020 User Manual

MAX66020

ISO/IEC 14443 Type B-Compliant

1Kb Memory Fob

________________________________________________________________

Maxim Integrated Products

1

19-5540; Rev 0; 12/10

For pricing, delivery, and ordering information, please contact Maxim Direct at 1-888-629-4642,
or visit Maxim’s website at www.maxim-ic.com.

General Description

The MAX66020 combines 1024 bits of user EEPROM, a
64-bit unique identifier (UID), and a 13.56MHz RF inter­face (ISO/IEC 14443 Type B, Parts 2-4) in a plastic key
fob. The memory is organized as 16 blocks of 8 bytes
plus two more blocks for data and control registers.
Four adjacent user EEPROM blocks form a memory
page (pages 0 to 3). Memory protection features are
write protection and EPROM emulation, which the user
can set for each individual memory page. Memory
access is accomplished through the block transmission
protocol (ISO/IEC 14443-4), where requests and
responses are exchanged through I-blocks once a
device is in the ACTIVE state. The data rate can be as
high as 847.5kbps. The reader must support a frame
size of 19 bytes. The device supports an application
family identifier (AFI) and a card identifier (CID).
ISO/IEC 14443 functions not supported are chaining,
frame-waiting time extension, and power indication.

Applications

Driver Identification (Fleet Application)

Access Control

Asset Tracking

Features

♦ Fully Compliant ISO/IEC 14443 (Parts 2-4) Type B

Interface

♦ 13.56MHz ±7kHz Carrier Frequency

♦ 1024-Bit User EEPROM with Block Lock Feature,

Write-Cycle Counter, and Optional EPROM­Emulation Mode

♦ 64-Bit UID

♦ Read and Write (64-Bit Block)

♦ Supports AFI and CID Function

♦ 10ms Maximum Programming Time

♦ To Fob: 10% ASK Modulation at 105.9kbps,

211.9kbps, 423.75kbps, or 847.5kbps

♦ From Fob: Load Modulation Using BPSK

Modulated Subcarrier at 105.9kbps, 211.9kbps,

423.75kbps, or 847.5kbps

♦ 200,000 Write/Erase Cycles (Minimum)

♦ 40-Year Data Retention (Minimum)

♦ Powered Entirely Through the RF Field

♦ Operating Temperature: -25°C to +50°C

Ordering Information

+

Denotes a lead(Pb)-free/RoHS-compliant package.

PART TEMP RANGE PIN-PACKAGE

MAX66020K-000AA+ -25°C to +50°C Key Fob

Typical Operating Circuit

Key Fob Mechanical Drawing appears at end of data sheet.

EVALUATION KIT

AVAILABLE

13.56MHz READER

TX_OUT

TRANSMITTER

RX_IN

MAGNETIC
COUPLING

MAX66020

IC LOAD

SWITCHED

ANTENNA

LOAD

MAX66020

ISO/IEC 14443 Type B-Compliant
1Kb Memory Fob

2 _______________________________________________________________________________________

ABSOLUTE MAXIMUM RATINGS

ELECTRICAL CHARACTERISTICS

(TA= -25°C to +50°C.) (Note 1)

Stresses beyond those listed under “Absolute Maximum Ratings” may cause permanent damage to the device. These are stress ratings only, and functional
operation of the device at these or any other conditions beyond those indicated in the operational sections of the specifications is not implied. Exposure to
absolute maximum rating conditions for extended periods may affect device reliability.

Note 1: System requirement.
Note 2: Measured from the time at which the incident field is present with strength greater than or equal to H

(MIN)

to the time at
which the MAX66020’s internal power-on reset signal is deasserted and the device is ready to receive a command frame.
Not characterized or production tested; guaranteed by simulation only.

Maximum Incident Magnetic Field Strength ..........141.5dBµA/m

Operating Temperature Range ...........................-25°C to +50°C

Relative Humidity ..............................................(Water Resistant)

Storage Temperature Range ...............................-25°C to +50°C

PARAMETER SYMBOL CONDITIONS MIN TYP MAX UNITS

EEPROM

Programm ing Time t

Endurance N

Data Retention t

RF INTERFACE

Carrier Frequency f

Operating Magnetic Field Strength H At +25°C (Note 1) 123.5 137.5 dBμA/m

Power-Up Time t

PROG

CYCLE

RET

POR

9 10 ms

At +25°C 200,000 Cycles

40 Years

(Note 1) 13.553 13.560 13.567 MHz

C

(Note 2) 1.0 ms

MAX66020

ISO/IEC 14443 Type B-Compliant

1Kb Memory Fob

_______________________________________________________________________________________ 3

Detailed Description

The MAX66020 combines 1024 bits of user EEPROM,
128 bits of user and control registers, a 64-bit UID, and
a 13.56MHz RF interface (ISO/IEC 14443 Type B, Parts
2-4) in a single key fob. The memory is organized as 18
blocks of 8 bytes each. Four adjacent user EEPROM
blocks form a memory page (pages 0 to 3). Memory
protection features include write protection and EPROM
emulation, which the user can set for each individual
memory page. The memory of the MAX66020 is
accessed through the ISO/IEC 14443-4 block transmis­sion protocol, where requests and responses are
exchanged through I-blocks once a device is in the
ACTIVE state. The reader must support a frame size of
at least 19 bytes. The data rate can be as high as

847.5kbps. The MAX66020 supports AFI and CID.
Functions not supported are chaining, frame-waiting
time extension, and power indication. Applications of
the MAX66020 include driver identification (fleet appli­cation), access control, and asset tracking.

Overview

Figure 1 shows the relationships between the major
control and memory sections of the MAX66020. The
device has three main data components: 64-bit UID,
four 256-bit pages of user EEPROM, and two 8-byte

blocks of user and control registers. Figure 2 shows the
hierarchical structure of the ISO/IEC 14443 Type B­compliant access protocol. The master must first apply
network function commands to put the MAX66020 into
the ACTIVE state before the memory and control func­tions become accessible. The protocol required for
these network function commands is described in the

Network Function Commands

section. Once the
MAX66020 is in the ACTIVE state, the master can issue
any one of the available memory and control function
commands. Upon completion of such a command, the
MAX66020 returns to the ACTIVE state and the master
can issue another memory and control function com­mand or deselect the device, which returns it to the
HALT state. The protocol for these memory and control
function commands is described in the

Memory and

Control Function Commands

section. All data is read
and written least significant bit (LSb) first, starting with
the least significant byte (LSB).

Parasite Power

As a wireless device, the MAX66020 is not connected
to any power source. It gets the energy for operation
from the surrounding RF field, which needs to have a
minimum strength as specified in the

Electrical

Characteristics

table.

Figure 1. Block Diagram

RF

FRONT-

END

DATA

f

c

MODULATION

VOLTAGE

REGULATOR

ISO 14443

FRAME

FORMATTING

AND

ERROR

DETECTION

INTERNALSUPPLY

MEMORY AND

FUNCTION

CONTROL

REGISTER

BLOCK

UID

USER

EEPROM

MAX66020

ISO/IEC 14443 Type B-Compliant
1Kb Memory Fob

4 _______________________________________________________________________________________

Figure 2. Hierarchical Structure of ISO/IEC 14443 Type B Protocol

MSb LSb

64 57 56 49 48 45 44 37 36 1

E0h 2Bh 0h FEATURE CODE (02h) 36-BIT IC SERIAL NUMBER

Figure 3. 64-Bit UID

Unique Identification Number (UID)

Each MAX66020 contains a factory-programmed and
locked identification number that is 64 bits long
(Figure 3). The lower 36 bits are the serial number of
the chip. The next 8 bits store the device feature
code, which is 02h. Bits 45 to 48 are 0h. The code in
bit locations 49 to 56 identifies the chip manufacturer,
according to ISO/IEC 7816-6/AM1. This code is 2Bh
for Maxim. The code in the upper 8 bits is E0h. The
UID is read accessible through the Get UID and Get
System Information commands. The lower 32 bits of
the UID are transmitted in the PUPI field of the ATQB
response to the REQB, WUPB, or SLOT-MARKER
command. By default, the upper 32 bits of the UID are
factory programmed into the application data field,

which is transmitted as part of the ATQB response.
This way the master receives the complete UID in the
first response from the slave. See the

Network

Function Commands

section for details.

Detailed Memory Description

The memory of the MAX66020 is organized as 18
blocks of 8 bytes each. Figure 4 shows the memory
map. The first 16 blocks (block numbers 00h to 0Fh in
hexadecimal counting) are the user EEPROM, the area
for application-specific data. Four adjacent blocks are
referred to as a page. Blocks 00h to 03h are page 0,
blocks 04h to 07h are page 1, blocks 08h to 0Bh are
page 2, and blocks 0Ch to 0Fh are page 3.

MAX66020

COMMAND LEVEL:

NETWORK

FUNCTION COMMANDS

AVAILABLE COMMANDS: DATA FIELD AFFECTED:

REQUEST (REQB)
WAKEUP (WUPB)
SLOT-MARKER
HALT (HLTB)
SELECT (ATTRIB)
DESELECT (DESELECT)

AFI, ADMINISTRATIVE DATA
AFI, ADMINISTRATIVE DATA
(ADMINISTRATIVE DATA)
PUPI
PUPI, ADMINISTRATIVE DATA
(ADMINISTRATIVE DATA)

GET SYSTEM INFORMATION
WRITE SINGLE BLOCK
LOCK BLOCK
READ SINGLE BLOCK

MEMORY AND CONTROL

FUNCTION COMMANDS

READ SINGLE BLOCK WITH
BLOCK SECURITY STATUS
CUSTOM READ BLOCK
WRITE AFI
LOCK AFI
GET UID

64-BIT UID, AFI, CONSTANTS
DATA OF SELECTED MEMORY BLOCK, APPLICABLE PROTECTION CONTROL REGISTER
PROTECTION CONTROL REGISTER
SELECTED MEMORY BLOCK
SELECTED MEMORY BLOCK, APPLICABLE PROTECTION CONTROL REGISTER

SELECTED MEMORY BLOCK, INTEGRITY BYTES
AFI BYTE
AFI-LOCK BYTE
64-BIT UID

Block 10h provides storage for user-programmable
parameters that are defined by the ISO/IEC 14443 stan­dard. These are application data field and AFI. The
remaining bytes (U1, U2, U3) are not defined by the
communication standard; the application software can
use them, e.g., for proprietary markings. Block 11h con­tains control bytes that determine the operation of the
individual pages (EPROM-emulation mode, write protec­tion of individual blocks), or to write protect the applica­tion data field, the AFI, and U1. The S-Lock byte, if
programmed to a suitable code, only protects itself from
future changes. The self-protection feature can be used
to permanently mark the fob as being “special,” as

defined by the application. Table 1 illustrates the rela­tionship between the controlling register in block 11h
and the memory area affected. Tables 2 and 3 specify
the code assignments to achieve the protection.

Besides the storage for 8 data bytes, each memory
block has 2 integrity bytes, which are not memory
mapped. The integrity bytes function as a MAX66020­maintained, 16-bit write-cycle counter. Having
reached its maximum value of 65,535, the write-cycle
counter stops incrementing, but does not prevent
additional write cycles to the memory block. The
integrity bytes can be read through the Custom Read
Block command.

MAX66020

ISO/IEC 14443 Type B-Compliant

1Kb Memory Fob

_______________________________________________________________________________________ 5

Figure 4. Memory Map

BLOCK

NUMBER

00h Page 0 User EEPROM R/(W) Write-Cycle Counter

01h Page 0 User EEPROM R/(W) Write-Cycle Counter

02h Page 0 User EEPROM R/(W) Write-Cycle Counter

03h Page 0 User EEPROM R/(W) Write-Cycle Counter

04h Page 1 User EEPROM R/(W) Write-Cycle Counter

05h Page 1 User EEPROM R/(W) Write-Cycle Counter

06h Page 1 User EEPROM R/(W) Write-Cycle Counter

07h Page 1 User EEPROM R/(W) Write-Cycle Counter

08h Page 2 User EEPROM R/(W) Write-Cycle Counter

09h Page 2 User EEPROM R/(W) Write-Cycle Counter

0Ah Page 2 User EEPROM R/(W) Write-Cycle Counter

0Bh Page 2 User EEPROM R/(W) Write-Cycle Counter

0Ch Page 3 User EEPROM R/(W) Write-Cycle Counter

0Dh Page 3 User EEPROM R/(W) Write-Cycle Counter

0Eh Page 3 User EEPROM R/(W) Write-Cycle Counter

0Fh Page 3 User EEPROM R/(W) Write-Cycle Counter

10h ISO/IEC 14443 Appl icat ion Data Field AFI U1 U2 U3 Write-Cycle Counter

11h BP1 BP2 BP3 BP4 ADF-Lock AFI-Loc k U1-Lock S-Lock Write-Cycle Counter

(SEQUENCE LEFT TO RIGHT AS WRITTEN TO OR READ FROM DEVICE)

0 1 2 3 4 5 6 7 LSB MSB

DATA BYTE NUMBER

INTEGRITY BYTES

MAX66020

ISO/IEC 14443 Type B-Compliant
1Kb Memory Fob

6 _______________________________________________________________________________________

Table 1. Memory Protection Matrix

Legend (Table 1):

Table 2. BP1 to BP4 Protection Code Assignments

*

If programmed to a locking (protecting) code, the controlling register irreversibly protects itself from further changes. See Tables 2

and 3 for additional details.

Note: Do not program the upper nibble of BP4 to 9 or 5, because this blocks the read access to blocks 0Ch to 0Fh.

Table 3. Protection Code Assignments for ADF-Lock, AFI-Lock, U1-Lock, S-Lock

CONTROLLING

REGISTER*

BP1 E, W — — — — — — —

BP2 — E, W — — — — — —

BP3 — — E, W — — — — —

BP4 — — — E, W — — — —

ADF-Lock — — — — W — — —

AFI-Loc k — — — — — W — —

U1-Lock — — — — — — W —

S-Lock — — — — — — — W

BLOCKS

00h TO 03h

BLOCKS

04h TO 07h

BLOCKS

08h TO 0Bh

AFFECTED MEMORY AREA

BLOCKS

0Ch TO 0Fh

APPLICATION

DATA FIELD

AFI U1 S-LOCK

CODE DESCRIPTION

E ERPOM-Emulation Mode

W Write Protection

CODE DESCRIPTION

00000000b
(00h)

00001010b
(0Ah)

1010<b3><b2><b1><b0>b
(Axh)

Unlocked (factory default)

EPROM-Emulation Mode (irreversible)
BP1: blocks 00h to 03h
BP2: blocks 04h to 07h
BP3: blocks 08h to 0Bh
BP4: bloc ks 0Ch to 0Fh

Write-Protect Block Mode. Once set to Ah, the upper nibble cannot be changed to any other
value (irreversible). The bits of the lower nibble can still be changed only from 0 (unlocked) to 1
(locked) to write protect blocks individually.
b0: block 00h (BP1), block 04h (BP2), block 08h (BP3), block 0Ch (BP4)
b1: block 01h (BP1), block 05h (BP2), block 09h (BP3), block 0Dh (BP4)
b2: block 02h (BP1), block 06h (BP2), block 0Ah (BP3), block 0Eh (BP4)
b3: block 03h (BP1), block 07h (BP2), block 0Bh (BP3), block 0Fh (BP4)

CODE DESCRIPTION

00000000b (00h) Unlocked (factory default)

10101010b (AAh) Locked (irreversible)

All other codes Unlocked

MAX66020

ISO/IEC 14443 Type B-Compliant

1Kb Memory Fob

_______________________________________________________________________________________ 7

ISO/IEC 14443 Type B

Communication Concept

The communication between the master and the
MAX66020 (slave) is based on the exchange of data
packets. The master initiates every transaction; only
one side (master or slaves) transmits information at any
time. Data packets are composed of characters, which
always begin with a START bit and typically end with
one or more STOP bits (Figure 5). The least significant
data bit is transmitted first. Data characters have 8 bits.
Each data packet begins with a start-of-frame (SOF)
character and ends with an end-of-frame (EOF) charac­ter. The EOF/SOF characters have 9 all-zero data bits
(Figure 6). The SOF has 2 STOP bits, after which data
characters are transmitted. A data packet with at least
3 bytes between SOF and EOF is called a frame
(Figure 7). The last two data characters of an
ISO/IEC 14443 Type B frame are an inverted 16-bit
CRC of the preceding data characters generated
according to the CRC-16-CCITT polynomial. This CRC
is transmitted with the LSB first. For more details on the
CRC-16-CCITT, refer to ISO/IEC 14443-3, Annex B.
With network function commands, the command code,
parameters, and response are embedded between
SOF and CRC. With memory function commands, com­mand code, and parameters are placed into the infor­mation field of I-blocks (see the

Block Types

section),

which in turn are embedded between SOF and EOF.

For transmission, the frame information is modulated on a
carrier frequency, which is 13.56MHz for ISO/IEC 14443 .
The subsequent paragraphs are a concise description
of the required modulation and coding. For full details
including SOF/EOF and subcarrier on/off timing, refer to
ISO/IEC 14443-3, Sections 7.1 and 7.2.

The path from master to slave uses amplitude modula-
tion with a modulation index between 8% and 14%
(Figure 8). In this direction, a START bit and logic 0 bit
correspond to a modulated carrier; STOP bit and
logic 1 bit correspond to the unmodulated carrier. EOF
ends with an unmodulated carrier instead of STOP bits.

The path from slave to master uses an 847.5kHz sub­carrier, which is modulated using binary phase-shift key
(BPSK) modulation. Depending on the data rate, the
transmission of a single bit takes eight, four, two, or one
subcarrier cycles. The slave generates the subcarrier
only when needed; i.e., starting shortly before an SOF
and ending shortly after an EOF. The standard defines
the phase of the subcarrier before the SOF as 0° refer­ence, which corresponds to logic 1. The phase of the
subcarrier changes by 180° whenever there is a binary
transition in the character to be transmitted (Figure 9).
The first phase transition represents a change from
logic 1 to logic 0, which coincides with the beginning of
the SOF. The BPSK modulated subcarrier is used to
modulate the load on the fob’s antenna (Figure 10).

START

1
0

BIT 1

BIT 2 BIT 3 BIT 4 BIT 5 BIT 6 BIT 7 BIT 8

LSb MSb

STOP

Figure 5. ISO/IEC 14443 Data Character Format

START

1
0

BIT 1 BIT 2 BIT 3 BIT 4 BIT 5 BIT 6 BIT 7 BIT 9

STOP/IDLE

BIT 8

Figure 6. ISO/IEC 14443 SOF/EOF Character Format

SOF ONE OR MORE DATA CHARACTERS

CRC (LSB) CRC (MSB) EOF

TIME

Figure 7. ISO/IEC 14443 Frame Format

MAX66020

ISO/IEC 14443 Type B-Compliant
1Kb Memory Fob

8 _______________________________________________________________________________________

Figure 9. Uplink: BPSK Modulation of the 847.5kHz Subcarrier

A

B

CARRIER AMPLITUDE

t

11 1100

MODULATION INDEX M = = 0.08 TO 0.14

A - B
A + B

Figure 8. Downlink: 8% to 14% Amplitude Modulation

DATA TO BE TRANSMITTED

847kHz SUBCARRIER

BPSK MODULATION

INDICATES 180° PHASE CHANGE (POLARITY REVERSAL)

OR

CAN BE REDUCED TO FOUR, TWO, OR ONE SUBCARRIER CYCLES FOR COMMUNICATION IN THE ACTIVE STATE.

110

TRANSMISSION OF A SINGLE BIT

POWER-UP DEFAULT = EIGHT CYCLES OF 847kHz (9.44μs)