Sony S480C User Manual
Sony Confidential
Reader/Writer RC-S480C Users Manual
(Version 1.50)
Sony Corporation
30 November 1999
Contents
1 Definition 1
2 General 1
2.1 Basic Specification 1
2.1.1 Dimensions 1
FeliCa : Reader/Writer RC-S480 Users Manual Sony Confidential ii
Version 1.50
2.1.2 Specification Table 1
2.1.3 Encryption Technique 1
3 Reader/Writer Operation 2
3.1 Connection with Controller 2
3.2 Transaction Overview 2
3.2.1 Communication Protocol 2
3.2.2 Re-sending Protocol 2
3.2.3 ACK/NACK Packet 2
3.2.4 Mutual Authentication 3
3.2.5 Encryption and Decryption 3
4 Communication Commands 3
4.1 General 3
4.2 Reader/Writer Internal Operation Commands 3
4.2.1 Attention Command 3
4.2.2 Authentication 1 Command 3
4.2.3 Authentication 2 Command 3
4.2.4 Disconnect Command 3
4.2.5 Change Reader/Writer Access Key Command 5
4.2.6 Self-Diagnosis Command 5
4.2.7 Check Firmware Version Command 5
4.2.8 Change Communication Mode Command 5
4.2.9 Kill Module Command 5
4.2.10 Reader/Writer Reset Command 5
4.2.11 Firmware Maintenance Command 5
4.3 Card Operation Command 5
4.3.1 Polling Command 5
4.3.2 Request Service Command 5
4.3.3 Request Response Command 5
4.3.4 Mutual Authentication Command 5
4.3.5 Read Block Command 6
4.3.6 Write Block Command 6
4.3.7 Release Command 6
4.3.8 Read Without Encryption Command 6
4.3.9 Write Without Encryption Command 6
4.4 Card Management Command 7
4.4.1 Register Issue ID Command 7
4.4.2 Register Area Command 7
4.4.3 Register Service Command 7
4.4.4 Register Manufacture ID Command 7
4.4.5 Card Self-Diagnosis Common Security Key Command 7
5 Fundamental Specifications 8
5.1 Operating Temperature 8
5.2 Storage Temperature 8
5.3 Humidity 8
5.4 Cold and Heat Shock 8
5.5 Shock 8
5.6 Vibration 8
5.7 Spurious Emissions 8
FeliCa : Reader/Writer RC-S480 Users Manual Sony Confidential iii
Version 1.50
5.8 Bump 8
5.9 Electrostatic Discharge 8
5.10 Multiple cards 8
5.11 Anti-Collision 8
6 Reader/Write Specification Table 9
6.1 B-antenna Reader/Writer 9
6.1.1 B-antenna Reader/Writer Specification Table 9
6.1.2 B-antenna Reader/Writer Schematic Drawing 13
6.2 C-antenna Reader/Writer 15
6.2.1 C-antenna Reader/Writer Specification Table 15
6.2.2 C-antenna Reader/Writer Schematic Drawing 17
List of Table
Table 1 Reader/Writer Internal Operation Command 4
Table 2 Card Operation Command 4
Table 3 Card Management Command 4
Table 4 Pin Assignment of Interface Connector CN2 11
List of Figures
Fig.1 Communication Protocol and Packet Structure 2
Fig.2 Printed Model No. (B-antenna) 9
Fig.3
Fig.4 Pin Assignment of Connectors CN1-2 11
Fig.5 RF/Control Board 13
Fig.6 Antenna Board (B-antenna) 14
Fig.7 Printed Model No. (C-antenna) 15
Fig.8 Antenna Board (C-antenna) 17
RF/Control Board Attached to External Board 10
FeliCa : Reader/Writer RC-S480 Users Manual Sony Confidential 1
Version 1.50
1 Definition
In this document, following words are used in the following sense.
Controller - An external computer, a gate controller or equivalent equipment directly
connected to Reader/Writer through specified wired interface.
Reader/Writer - The equipment, specified in this document, for Sony Remote Card System:
FeliCa
Card - A Contactless Smart Card for Sony Remote Card System: FeliCa
2 General
2.1 Basic Specification
Reader/Writer consists of 3 parts – an antenna board, an RF/control board and the cable
that connects the antenna board and the RF/control board.
2.1.1 Dimensions
The dimension of each type is described in Chapter 6.
The tolerance is ±0.5mm.
2.1.2 Specification Table
Communication with Card
data transfer rate : 250kbps or 211.875kbps
carrier frequency : 13.56MHz (±50ppm)
modulation : Receive - ASK, Manchester Coding
: Transmit - ASK(12±2%), Manchester Coding
modulation bandwidth : ±300kHz (-30dB relative to carrier level)
radiation level : less than 2000µV/m at 10m distance (C-antenna)
: less than 300µV/m at 10m distance (B-antenna)
Communication method : half-duplex, CRC16
Power Supply (see Chapter 6)
Digital Processing Unit (DPU)
IC CXD8680R (designed by Sony)
CXD8680R has 32 bit CPU core, 8 kbyte ROM, 3 kbyte SRAM, 2 kbyte
Block Erasable Flash Memory and 4x32 kbyte Flash Memory inside.
Controller Interface (serial interface)
number of ports : 1 (one)
signal level : CMOS logic level
baud rate for operation : 7.2kbps ~ 1.2288Mbps
(7.2, 8.192, 9.6, 14.4, 16.384, 19.2, 28.8, 32.768, 38.4, 57.6, 65.536, 76.8, 115.2,
131.072, 153.6, 230.4, 262.144, 460.8, 524.288, 921.6, 1048.576, 1228.8 kbps)
communication method : half-duplex, check sum
2.1.3 Encryption Technique
All communications to and from the Card, with the exception of Polling Command,
are encrypted.
All the communications to and from the Controller, with the exception of the Attention
Command, are encrypted.
3 kinds of Encryption algorithm, Single-DES 56bit, Triple-DES 56bit and SEAC (Sony
Encryption Algorithm for Card) 64bit, can be applied.
3 Reader/Writer Operation
FeliCa : Reader/Writer RC-S480 Users Manual Sony Confidential 2
Version 1.50
3.1 Connection with Controller
The pin assignment is described in Chapter 6.
3.2 Transaction Overvie w
3.2.1 Communication Protocol
There are two communication protocols, namely, data link level and application level
protocol.
Either ACK or NACK packet is returned in every packet transfer. ACK indicates a
successful transfer, NACK means unsuccessful.
Reader/WriterController
Command Packet
ACK
Max. 2ms
Max. 2ms
Response Packet
ACK
Start of Packet Code
00 FF00 LEN LCS PD0 PDnPD1 DC S 00
Preamble
Packet Length
Packet Length Checksum
Command or Response Code
…
Packet Data
Fig. 1 : Communication Protocol and Packet Structure
3.2.2 Re-sending Protocol
Reader/Writer supports the re-sending procedure in Controller interface. Re-sending
handling is triggered or required in the two cases below :
1. NACK packet is returned.
2. Neither ACK nor NACK response comes. (time out)
Controller should re-send the same packet within 5ms after receiving NACK or
detecting time out.
3.2.3 ACK / NACK Packet
ACK / NACK packet format is as follows :
ACK : LEN = 00h & LCS = ffh without Packet Data part and DCS
NACK : LEN = ffh & LCS = 00h without Packet Data part and DCS
Packet Data Checksum
Postamble
FeliCa : Reader/Writer RC-S480 Users Manual Sony Confidential 3
Version 1.50
3.2.4 Mutual Authentication
Mutual Authentication is a process that is performed between Controller and
Reader/Writer to authenticate each other mutually in order to avoid the fraud usage.
This authentication is based on the following elements :
1. two 8byte (64bit) keys
2. three pass authentication model (ISO 9758)
3. cryptography algorithm mentioned in section 3.2.5.
3.2.5 Encryption and Decryption
The cryptography algorithm is used for the following three stages :
1. mutual authentication between Controller and Reader/Writer
2. mutual authentication between Reader/Writer and Card
3. commands and data encryption through Reader/Writer
4 Communication Commands
4.1 General
In this section, the communication commands between Controller and Reader /Writer are
described.
Table 1-3 shows all commands between Controller and general Reader/Writer. All
commands are categorized into 3 groups as follows :
1. Reader/Writer internal operation command
2. Card operation command
3. Card management command
Card management command group is for issue Reader/Writer and not for general
Reader/Writer .
4.2 Reader/Writer Internal Operation Command
4.2.1 Attention Command
Attention Command enables Reader/Writer and Controller to recognize each other and
is the only command available before the authentication completes. The main purpose of
this Attention Command is to recognize its partner before authentication and to force
Reader/Writer to be in the idle state.
4.2.2 Authentication 1 Command
Authentication 1 Command enables Controller to authenticate Reader/Writer.
4.2.3 Authentication 2 Command
Authentication 2 Command enables Reader/Writer to authenticate Controller.
4.2.4 Disconnect Command
Disconnect Command is for Controller to terminate the communication with
Reader/Writer.
Command Command Code Response Code
Attention 00h 01h
Authentication 1 02h 03h
Authentication 2 04h 05h
Loading...