![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg1.png)
Sony Confidential
FeliCa Reader/Writer RC-S441C and RC-S445C
- Users Manual -
(Version 2.10)
Sony Corporation
19 November 19 99
“FeliCa” is a trademark of Sony Corporation
Contents
1 Definition 1
2 General 1
2.1 Basic Specification 1
2.1.1 Dimensions 1
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg2.png)
FeliCa: Reader/Writer
RC-S441,445 Users Manual Sony Confidential ii
2.1.2 Specification Table 1
2.1.3 Encryption Technique 2
3 Reader/Writer Operation 3
3.1 Connection with Controller 3
3.2 Transaction Overview 3
3.2.1 Communication Protocol 3
3.2.2 Re-sending Protocol 3
3.2.3 ACK/NACK Packet 3
3.2.4 Mutual Authentication 3
3.2.5 Encryption and Decryption 4
4 Communication Commands 4
4.1 General 4
4.2 Reader/Writer Internal Operation Commands 4
4.2.1 Attention Command 4
4.2.2 Authentication 1 Command 4
4.2.3 Authentication 2 Command 4
4.2.4 Disconnect Command 4
4.2.5 Change Reader/Writer Access Key Command 4
4.2.6 Self-Diagnosis Command 6
4.2.7 Check Firmware Version Command 6
4.2.8 Change Communication Mode Command 6
4.2.9 Kill Module Command 6
4.2.10 Reader/Writer Reset Command 6
4.2.11 Firmware Maintenance Command 6
4.3 Card Operation Command 6
4.3.1 Polling Command 6
4.3.2 Request Service Command 6
4.3.3 Request Response Command 6
4.3.4 Mutual Authentication Command 6
4.3.5 Read Block Command 6
4.3.6 Write Block Command 7
4.3.7 Release Command 7
4.3.8 Read Without Encryption Command 7
4.3.9 Write Without Encryption Command 7
4.4 Card Management Command 8
4.4.1 Register Issue ID Command 8
4.4.2 Register Area Command 8
4.4.3 Register Service Command 8
4.4.4 Register Manufacture ID Command 8
4.4.5 Card Self-Diagnosis Common Security Key Command 8
5 Fundamental Specifications 9
5.1 Operating Temperature 9
5.2 Storage Temperature 9
5.3 Humidity 9
5.4 Cold and Heat Shock 9
5.5 Shock 9
5.6 Vibration 9
5.7 Spurious Emissions 9
5.8 Bump 9
5.9 Electrostatic Discharge 9
5.10 Multiple cards 9
5.11 Anti-Collision 9
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg3.png)
FeliCa: Reader/Writer
RC-S441,445 Users Manual Sony Confidential iii
6 Reader/Write Specification Table 10
6.1 Type C Reader/Writer 10
6.1.1 Type C Reader/Writer Specification Table 10
• Model No. 10
• Operating Distance 10
• Interface Connector 11
• External Interface 12
• Dimensions 13
• Mounting Holes 13
• Power 13
6.1.2 Type C Reader/Writer Schematic Drawing 13
6.2 Type E Reader/Writer 15
6.2.1 Type E Reader/Writer Specification Table 15
• Model No. 15
• Operating Distance 15
• Interface Connector 15
• External Interface 15
• Dimensions 16
• Mounting Holes 16
• Power 16
6.2.2 Type E Reader/Writer Schematic Drawing 17
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg4.png)
FeliCa: Reader/Writer
RC-S441,445 Users Manual Sony Confidential iv
List of Table
Table 1 Reader/Writer RC-S44x Models 1
Table 2 Reader/Writer Internal Operation Command 4
Table 3 Card Operation Command 4
Table 4 Card Management Command 4
Table 5 Pin Assignment of Interface Connector CN2 12
List of Figur es
Fig.1 Communication Protocol and Packet Structure 3
Fig.2 Printed Model No. (type C) 10
Fig.3 Example of Antenna Placement (type C) 11
Fig.4 Pin Assignment of Connectors CN1-3 11
Fig.5 Placement of Parts for RS-232C Interface 12
Fig.6 Antenna Board (type C) 13
Fig.7 RF/Control Board 14
Fig.8 Printed Mode l No. (type E) 15
Fig.9 Antenna Board (type E) 17
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg5.png)
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 1
1 Definition
In this document, following words are used in the following sense.
Controller - An external computer, a gate controller or an equivalent equipment directly
connected to Reader/ Wr iter t hrough specified wired interface.
Reader/Writer - The equipment, specified in this document, for Sony Remote Card
System : FeliCa.
Card - A Contactless Smart Card for Sony Remote Card System : FeliCa
2 General
2.1 Basic Specification
Table 1 shows Reader/Writer “RC-S44x” models. RC-S445 has dual CPUs and
external memories for sub CPU . RC-S441 is a singl e CPU type same as th e models
RC-S430 and RC-S480.
Reader/Writer consists of 3 parts – an antenna board, an RF/control board and the
cable that connects the antenna board and the RF/control board. There are 2 antenna
types called Type C and E (see Chapter 6).
Model No. CPU Memory
Antenna
Type
Serial
Interface
Connector
Type
RC-S445C/6L Dual
Flash 4Mbyte
SRAM 0.5Mbyte
C
RS485A
RS232C
Right angle
RC-S441C/6L C Straight
RC-S441E/6L
Single -
E
RS485A
CMOS
Right angle
Table 1 Reader/Writer RC-S44x models
2.1.1 Dimensions
The dimension of each ty pe are descri bed in Chapter 6.
The tolerance is ±0.5mm.
2.1.2 Specification Table
Communication with Card
( Common )
carrier frequency: 13.56MHz (±50ppm)
modulation bandwidth: ±300kHz (-30dB relative to carrier level)
radiation level: less than 4500
µ
V/m at 10m (Type C Antenna)
1000
µ
V/m at 1 0m (Ty pe E Ant enna)
300
µ
V/m at 10m (Type B Antenna)
Communication method: half-duplex, CRC16
( ISO type C )
data transfer rate: 211.875kbps
modulation: Receive - ASK, Manchester Coding
Transmit - ASK(8-14%), Manchester Coding
modulation bandwidth: ±300kHz (-30dB relative to carrier level)
( ISO type B )
[Note] ISO/IEC document 14443 on the type B protocol was not
published at the design stage of these Reader/Writer. The design was
made according to then the newest available documents as described
below.
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg6.png)
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 2
ISO/IEC JTC1/SC17 CD 14443-2 document N1433 (22.10.1998)
ISO/IEC JTC1/SC17 2
nd
CD 14443-3 document N14 75R (28.2.1999)
data transfer rate: 106 kbps
modulation: Receive - ASK, BPSK( sub carrier 847.5kHz )
Transmit - ASK(8-14%), NRZ
modulation bandwidth: ±100kHz (-30dB relative to carrier level, 106 kbps)
Power Supply (see Chapter 6)
Digital Processing Unit (DPU)
Main: CXD8680R (designe d by Sony)
Clock Frequency = 13. 56MHz
CXD8680R has a 32 bit CPU core, 8 kbyte ROM, 3 kbyte SRAM, 2 kbyte Block
Erasable Flash Memory and 4×32 kbyte Flash Me mory inside.
Sub: 32 bit CPU MC68340 (RC-S445)
Clock Frequency = 13. 56MHz
External Memory
RC-S445: 4 Mbyte Flash Memory and 500 kbyte SRAM
Controller Interface (serial interf ace)
number of ports : 1 (one)
signal level : RS485 and CMOS logic level (5V) for RC-S441C/ E
: RS485 and RS232C for RC-S445C
baud rate for operation: 7.2kbps ∼ 1.2288Mbps
(7.2, 8.192, 9.6, 14.4, 16.384, 19.2, 28.8, 32.768, 38.4,
57.6, 65.536, 76.8, 115.2, 131.072, 153.6, 230.4, 262.144,
460.8, 524.288, 921.6, 1048.576, 122 8.8 kbps)
:
50bps ∼ 115.2kbps (Sub CPU)
communication method : half-duplex, check sum
2.1.3 Encryption Technique
All communications to and from the Card, with the exception of Polling Command,
are encrypted.
All the communications to and from the Controller, with the exception of the
Attention Command, are encrypted.
Two kinds of Encryption algorithm, Single-DES 56bit and Triple-DES 56bit can be
applied.
![](/html/35/3554/3554a0ba2219738645150ed09f8756b6b166453423dcfa3ad45c4642f1ba1538/bg7.png)
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 3
3 Reader/Writer Operation
3.1 Connection with Controller
The pin assignment is desc r ibed in Chapter 6.
3.2 Transaction Overview
3.2.1 Communication Protocol
There are two communication protocols, namely, data link level and application level
protocol.
Either ACK or NACK packet is returned in every packet transfer. ACK indicates a
successful transfer, NACK means unsuccessful.
Fig. 1 : Communication Protocol and Packet St ruct ure
3.2.2 Re-sending Protocol
Reader/Writer support s t he re-sending procedure in Controller interface. Re-sending
handling is triggered or requ ired in the two cases below :
1. NACK packet is returned.
2. Neither ACK nor NACK response co mes. (t ime out)
Controller should re-send the same packet within 5ms after receiving NACK or
detecting time out.
3.2.3 ACK / NACK Packet
ACK / NACK packet format is as follows :
ACK : LEN = 00h & LCS = ffh without Packet Data part and DCS
NACK : LEN = ffh & LCS = 00h without Packet Data part and DCS
3.2.4 Mutual Authentication
Mutual Authentication is a process that is performed between Controller and
Reader/Writer to authenti cat e each other mutually in order to avoid the fraud usage.
Reader/WriterController
Max. 2ms
Command Packet
ACK
ACK
Max. 2ms
Response Packet
00 FF00 LEN LCS PD0 PDnPD1 DCS 00
…
Postamble
Packet Data Checksum
Packet Data
Packet Length Checksum
Start of Packet Code
Packet Length
Preamble
Command or Response Code