Fig.1Communication Protocol and Packet Structure3
Fig.2Printed Model No. (type C)10
Fig.3Example of Antenna Placement (type C)11
Fig.4Pin Assignment of Connectors CN1-311
Fig.5Placement of Parts for RS-232C Interface12
Fig.6 Antenna Board (type C)13
Fig.7 RF/Control Board14
Fig.8 Printed Mode l No. (type E)15
Fig.9 Antenna Board (type E)17
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 1
1 Definition
In this document, following words are used in the following sense.
Controller - An external computer, a gate controller or an equivalent equipment directly
connected to Reader/ Wr iter t hrough specified wired interface.
Reader/Writer - The equipment, specified in this document, for Sony Remote Card
System : FeliCa.
Card - A Contactless Smart Card for Sony Remote Card System : FeliCa
2 General
2.1Basic Specification
Table 1 shows Reader/Writer “RC-S44x” models. RC-S445 has dual CPUs and
external memories for sub CPU . RC-S441 is a singl e CPU type same as th e models
RC-S430 and RC-S480.
Reader/Writer consists of 3 parts – an antenna board, an RF/control board and the
cable that connects the antenna board and the RF/control board. There are 2 antenna
types called Type C and E (see Chapter 6).
Model No.CPUMemory
RC-S445C/6LDual
RC-S441C/6LCStraight
RC-S441E/6L
2.1.1Dimensions
The dimension of each ty pe are descri bed in Chapter 6.
The tolerance is ±0.5mm.
modulation: Receive - ASK, Manchester Coding
Transmit - ASK(8-14%), Manchester Coding
modulation bandwidth: ±300kHz (-30dB relative to carrier level)
( ISO type B )
[Note] ISO/IEC document 14443 on the type B protocol was not
published at the design stage of these Reader/Writer. The design was
made according to then the newest available documents as described
below.
Single-
Table 1 Reader/Writer RC-S44x models
µ
V/m at 1 0m (Ty pe E Ant enna)
µ
V/m at 10m (Type B Antenna)
Flash 4Mbyte
SRAM 0.5Mbyte
µ
V/m at 10m (Type C Antenna)
Antenna
Type
C
E
Serial
Interface
RS485A
RS232C
RS485A
CMOS
Connector
Type
Right angle
Right angle
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 2
ISO/IEC JTC1/SC17 CD 14443-2 document N1433 (22.10.1998)
ISO/IEC JTC1/SC17 2
All communications to and from the Card, with the exception of Polling Command,
are encrypted.
All the communications to and from the Controller, with the exception of the
Attention Command, are encrypted.
Two kinds of Encryption algorithm, Single-DES 56bit and Triple-DES 56bit can be
applied.
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 3
3 Reader/Writer Operation
3.1Connection with Controller
The pin assignment is desc r ibed in Chapter 6.
3.2Transaction Overview
3.2.1Communication Protocol
There are two communication protocols, namely, data link level and application level
protocol.
Either ACK or NACK packet is returned in every packet transfer. ACK indicates a
successful transfer, NACK means unsuccessful.
Reader/WriterController
Command Packet
ACK
Max. 2ms
Max. 2ms
Response Packet
ACK
Start of Packet Code
00FF00LEN LCS PD0PDnPD1DCS 00
Preamble
Packet Length
Packet Length Checksum
Command or Response Code
Packet Data
Packet Data Checksum
…
Fig. 1 : Communication Protocol and Packet St ruct ure
3.2.2Re-sending Protocol
Reader/Writer support s t he re-sending procedure in Controller interface. Re-sending
handling is triggered or requ ired in the two cases below :
1. NACK packet is returned.
2. Neither ACK nor NACK response co mes. (t ime out)
Controller should re-send the same packet within 5ms after receiving NACK or
detecting time out.
3.2.3ACK / NACK Packet
ACK / NACK packet format is as follows :
ACK : LEN = 00h & LCS = ffh without Packet Data part and DCS
NACK : LEN = ffh & LCS = 00h without Packet Data part and DCS
3.2.4Mutual Authentication
Mutual Authentication is a process that is performed between Controller and
Reader/Writer to authenti cat e each other mutually in order to avoid the fraud usage.
Postamble
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 4
This authentication is based on the following ele ments :
1. two 8byte (64bit) keys
2. three pass authentication model (ISO 9758)
3. cryptography algorithm mentioned in section 3. 2. 5.
3.2.5Encryption and Decr yptionThe cryptography algorithm is used for the following three stages :
1. mutual authentication bet ween Controller and Reader/Writer
2. mutual authentication bet ween Reader/Writer and Card
3. commands and data encry pt ion t hrough Reader/Writer
4 Communication Commands
4.1General
In this section, the communication commands between Controller and Reader /Writer
are described.
Table 2-4 shows all commands between Controller and general Reader/Writer. All
commands are categorized int o 3 groups as follows :
1. Reader/Writer internal operation command
2. Card operation command
3. Card management command
Card management command group is for issue Reader/Writer and not for general
Reader/Writer .
4.2Reader/Writer Internal Operation Command
4.2.1Attention CommandAttention Command enables Reader/Writer and Controller to recognize each other
and is the only command available before the authentication completes. The main
purpose of this Attention Command is to recognize its partner before authentication
and to force Reader/Writer to be in t he idle state.
4.2.9Kill Module CommandKill Module Command is used for killing the specified modu le w ithin Reader/Writer.
4.2.10Reader/Writer Reset CommandReader/Writer Reset Command executes the initialization routine.
4.2.1 1Firmware Maintenanc e Comma ndFirmware Maintenance Command is used for updating the firmware within
Reader/Writer.
4.3Card Operation Command
4.3.1Polling CommandPolling Command enables Reader/Writer to give a call to Card and to detect
existence of Card by the response from Card.
4.3.2Request Service CommandRequest Service Command enables Reader/Writer to check whether the specified
service code is registered to Card or not. In case that the specified service is
registered to Card, key version of the service is available by t he response from Card.
4.3.3Request Response CommandRequest Response Command enables Reader/Writer to check which m ode Card is
in. There are 4 modes, ‘before Authentication’, ‘after Authentication 1’, ‘after
Authentication 2’ and ‘after Register xxx Command (see 4.4 Card Management
Command)’.
4.3.4Mutual Authentication CommandMutual Authentication Command activates the mutual authentication procedure
between Reader/Writer and Card.
4.3.5Read Block CommandRead Block Command activates Reader/Writer to read the specified block data from
Card after the mutual authentication between the Reader/Writer and Card has been
established successfully.
Read Block Command enables a Service Provider with successful mutual
authentication to read blocks t hat t his Service Provider has the right to access.
With one Read Block Command, up to 8 block can be read simultaneously. If more
than 8 blocks should be read, more than one Read Block Command shall be called
separately.
The response of Read Block Command is a 1byte Read result and Block Data that
has been read. In the Read result, a 1byte consequence of one block Read is given
in 1bit. As there are up to 8 blocks, 1byte is enough to record all the Read
consequence.
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 7
4.3.6Write Block Com m andWrite Block Command activates Reader/Writer to write the specified block data to
Card as new data after the mutual authentication between Reader/writer and Card
has been established successfully.
With one Write Block Command, up to 8 block can be written simultaneously. If
more than 8 blocks should be written, more than one Write Block Command shall be
called separately.
The response of Write Block Command is a 1byte Write result. In the Write result, a
1byte consequence of one block Write is given in 1bit. As there are up to 8 blocks,
1byte is enough to record all the Write consequence.
The purse operation can be performed with Write Bloc k Command.
4.3.7Release CommandRelease Command enables Card to be released from established communication
sequence with Reader/Writer.
4.3.8Read Without E ncr yption CommandRead Without Encryption Command activates Reader/Writer to read the specified
block data from Card without the mutual authentication between the Reader/Writer
and Card. Read Without Encryption Command can be applied only to blocks which
service code is registered security-free.
The number of blocks that can be read simultaneously and the response of Read
Without Encryption Command are the same as those for Read Block Command (see
4.3.5).
4.3.9Write W i t hout Encryption CommandWrite Without Encryption Command activates Reader/Writer to write the specified
block data to Card without the mutual authentication between the Reader/Writer andCard, however can be applied only to blocks which service code is registered
security-free.
The number of blocks that can be write simultaneously and the response of Write
Without Encryption Command are the same as those for Write Block Command (see
4.3.6).
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 8
4.4Card Management Command
The commands described in this section are for issue Reader/Writer and not for
general Reader/Writer .
4.4.1Register Issue ID CommandRegister Issue ID Command makes it possible to register Issue ID(IDi) , Issue
Parameter(PMi), System Code and Area 0000 Key to Card, and also makes it to
erase other services and to in it ialize Memory Allocation I nformation in Card.
4.4.2Register Area CommandRegister Area Command makes it possible to register new Area and the parameters
of new Area to Card, which are Service Code Range, Available Block Number and
Area Key.
4.4.3Register Service CommandRegister Service Command makes it possible to register new Service and the
parameters of new Service to Card, which are Service Code, Block Number and
Service Key.
4.4.4Register Manufacture ID CommandRegister Manufacture ID Command makes it possible to register Manufacture
ID(IDm) , Manufacture Parameter(PMm), System Code, System Key and Area 0000
Key to Card, and also makes it t o clear I ssue ID of Card.
In order to execute Register Manufacture ID Command, Manufacture ID must be all
00h. This means that Reg ister Manufacture ID Command is effective to Card once for
all.
4.4.5Card Self-Diagnosis Command
Card Self-Diagnosis Command activates self-diagnosis test of Card. After the
Diagnosis completion, Card sends back the test result.
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 9
5 Fundamental Specifications
5.1Operating Temperature
-20 to 85°C
Compliant to IEC 68-2-2 Part 2 Test Bd and IEC 68-2-1 Part 2 Test Ad, with duration
16 hours.
5.2Storage Temperature
-40 to 85°C
Compliant to IEC 68-2-2 Part 2 Test Bb and IEC 68-2-1 Part 2 Test Ab, with duration
72 hours.
5.3Humidity
Compliant to IEC 68-2-3 Part 2 Test Ca, with duration 4 days.
5.4Cold and Heat Shock
Compliant to IEC 68-2-1 Part 2 Test Aa, with temperature -20°C and duration 2 hours,
and IEC 68-2-2 Part 2 Test Ba, with temperature 70°C and duration 2 hours.
5.5Shock
Compliant to IEC 68-2-27 Part 2 Test Ea, severity 60g, duration 11ms.
5.6Vibration
Compliant to IEC 68-2-6 with respect to t he f ol low i ng parameters :
•Frequency Range : 10Hz to 500Hz
•Vibration Severity : 3gn
•Sweep rate : 1 octave per minute
•Endurance by sweeping : 20 sweep cycles for each X,Y and Z axis.
5.7Spurious Emissions
Compliant to MPT 1339 clause 4.1.3 ; FCC Regulation Part 15.225 and Part 15.209 ;
and EC(EU) I-ETS 300 330 cl ause 7. 2.1.3.
5.8Bump
Compliant to IEC 68-2-29 Part 2 Test Eb, severity 40gn, duration 6ms and 4000
bumps.
5.9Electrostatic Discharge
Compliant to IEC 801-2, with severity level 3 (Test Voltage Air discharge : 8kV ).
5.10Multiple Card
The Reader/Writer allows addressing and authentication of up to four Cards in the
communication area. Each Card will only respond to commands intended for it and only
one Card can be addressed in a single command.
5.11 Anti-Collision
Reader/Writer support s anti-collision of multiple cards.
FeliCa : Reader/Writer
A
A
RC-S441,445 Users Manual Sony Confidential 10
6 Reader/Writer Specification Table
6.1Type C Reader/Writer
6.1.1Type C Reader/Writer Specification Table
• Model No. RC-S441C/6L and 44 5C/6L
General model No. “RC-S441” or “RC-S445” is printed on the RF/Control board
(see Fig.2-1and 2-2). “Type C” means antenna type shown in Fig.6 and it is
marked on “C” as in Fig.2. A mark on numerals 1-6 (it is 1 in Fig.2-1 and 2-2)
indicates the instal led software version.
RC-S441
B
DCE
F
RC-S445
123456
Fig.2-1 Fig.2-2
Fig.2 : Printed Model No. (Type C )
• Operating Distance : 100 mm (Card : RC-S832)
- The Reader/Writer is adjusted by the combination of the RF/Control board
and the antenna board, both of whi ch shall have the same serial number labels
to maximize the operating distance, and therefore, the operating distance
cannot be assured by the different combination of the boards.
- The antenna board and the RF/Control board shall be placed more than
30mm apart to prevent decrease of the operating distance more than 10mm,
i.e. to obtain more than 90mm operating distance. In case of adjusting the
variable capacitor on the RF/Control board to maximize the output level, the
minimum distance between the boards is improved to 15mm . (see Fig. 3)
- In the effective operating scope of the antenna, there shall be nothing that
generates electric or magnetic noise. Neither shall there be an electric or
magnetic shield or reflect ion.
- Emission from another Reader/Writer affects the operating distance. In
operating plural Reader/Writers simultaneously, it is desirable for antenna
boards to be separated more than 70cm each other in order to keep the
100mm operating distance. However, Reader/Writers can be operated under
less than 70cm separation each other with no problem except for decrease of
the operating distance.
B
DCE
123456
F
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 11
The interface connector is a 10-pin connector located at the right edge of the
RF/Control board which is shown in the schematic drawing of Fig.7. The pitch of
connector pins is 2.54mm. The most upper connector pin is No. 1. Pin
assignment of the connector is shown in Fig. 4 and Table 5.
Table 5 : Pin Assignment of Int erface Connector CN3
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 12
• External Interface
serial 1 port: RS-485A and CMOS logic level (5V) for RC-S441C
RS485A and RS232C for RC-S445C
software selecta ble, non-inverted or inverted, and baud rate
(default setting : non-inverted, 115.2kbps)
Common pins are assigned for RS-232C and CMOS logic level. CMOS logic
level can be available inst ead of RS232C for RC-S445C by mounting 2 resistors
R46-47 and removing 2 resistors R52-53 which are located near the right, lower
corner of the RF/Control board as shown in Fig.5.
CMOS Logic Level
R46,47 : < 10 ohm
R52,53 : no mou ntin g
RS-232C
R46,47 : no mou ntin g
R52,53 : < 10 ohm
1
2
1
IC10 : MAX3221CAE
R53
R52
R47
R46
IC10
39
40
RF/Control Board (0-881-428-02)
Fig.5 : Placement of Parts for RS-232C or CMOS Interface
voltage: DC12 V (shal l be applied to DCIN of CN 2)
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 13
voltage allowance: +4V, -0.5Vcurrent: < 400mAvoltage ripple allowance: 100mV (peak-to-peak)
The Reader/Writer can be operated in the voltage range of 8-11.5V and the
voltage ripple > 100mV, however operating distance cannot be assured in such
condition.
6.1.2Type C Reader/Writer Schematic Drawing
Fig.6 : Antenna Board (Type C)
FeliCa : Reader/Writer
RC-S441,445 Users Manual Sony Confidential 14
Fig.7 : RF/Control Board
FeliCa : Reader/Writer
A
RC-S441,445 Users Manual Sony Confidential 15
6.2Type E Reader/Writer (Limited Model)
6.2.1Type E Reader/Writer Specification Table
• Model No. : RC-S441E/6L
General model No. “RC-S441” is printed on the RF/Control board (see Fig.8).
“Type E” means antenna type shown in Fig.9 and it is marked on “E” as in Fig.8.
A mark on numerals 1-6 (it is 1 in Fig.8) indicates the installed software versi on.
RC-S441
B
DCE
F
123456
Fig.8 : Printed Model No. (Type E )
• Operating Distance : 40 mm (Card : RC-S832)
- The Reader/Writer is adjusted by the combination of the RF/Control board
and the antenna board, both of whi ch shall have the same serial number labels
to maximize the operating distance, and therefore, the operating distance
cannot be assured by the different combination of the boards.
- The antenna board and the RF/Control board shall be placed more than
30mm apart.
- In the effective operating scope of the antenna, there shall be nothing that
generates electric or magnetic noise. Neither shall there be an electric or
magnetic shield or reflection. Type E antenna is affected by conductive
material more easily than other antenna types because a ferrite block is not
attached on the antenna bo ard.
- Emission from another Reader/Writer affects the operating distance. In
operating plural Reader/Writers simultaneously, it is desirable for antenna
boards to be separated more than 50cm each other in order to keep the
40mm operating distance. However, Reader/Writers can be operated under
less than 50cm separation each other with no problem except for decrease of
the operating distance.
The interface connector is a 10-pin connector located at the right edge of the
RF/Control board which is shown in the schematic drawing of Fig.7. The pitch of
connector pins is 2.54mm. The most upper connector pin is No. 1. Pin
assignment of the connector is shown in Fig. 4 and Table 5.
• External Interface
serial 1 port : RS-485A, CMOS logic level (5V)
software selecta ble, non-inverted or inverted, and baud rate
(default setting : non-inverted, 115.2kbps)