Figure 14.CR14-to-host transfer: I²C random address read from I/O frame register for ISO14443B 23
Figure 15.CR14-to-host transfer: I²C current address read from I/O frame register for ISO14443B . 24
Answer PICC Frames do not provide SOF and EOF
delimiters
b
5
t
WDG
Answer delay watchdog
b
6
b
RFU0Not used
7
1. RFU = Reserved for Future Use.
b5=0, b6=0: Watchdog time-out = 500µs to be used for read
b5=0, b6=1: Watchdog time-out = 5ms to be used for read
b5=1, b6=0: Watchdog time-out = 10ms to be used for write
b5=1, b6=1: Watchdog time-out = 309ms to be used for MCU timings
3.2 Input/Output Frame Register (01h)
The Input/Output Frame Register is a 36-Byte buffer that is accessed serially from Byte 0
through to Byte 35 (see Ta b l e 4 ). It is located at the I²C address 01h.
The Input/Output Frame Register is the buffer in which the CR14 stores the data Bytes of
the request frame to be sent to the PICC. It automatically stores the data Bytes of the
answer frame received from the PICC. The first Byte (Byte 0) of the Input/Output Frame
Register is used to store the frame length for both transmission and reception.
When accessed in I²C Write mode , the register stores the request frame Bytes that are to
be transmitted to the PICC. Byte 0 must be set with the request frame length (in Bytes) and
the frame is stored from Byte 1 onwards. At the end of the transmission, the 16-bit CRC is
automatically added. After the transmission, the CR14 wait for the PICC to send back an
answer frame. When correctly decoded, the PICC answer frame Bytes are stored in the
Input/Output Frame Register from Byte 1 onwards. Byte 0 stores the number of Bytes
received from the PICC.
When accessed in I²C Read mode, the Input/Output Register sends back the last PICC
answer frame Bytes, if any, with Byte 0 transmitted first. The 16-bit CRC is not stored, and it
is not sent back on the I²C bus.
The Input/Output Frame Register is set to all 00h between transmission and reception. If
there is no answer from the PICC, Byte 0 is set to 00h. In the case of a CRC error, Byte 0 is
set to FFh, and the data Bytes are discarded and not appended in the register.
The CR14 Input/Output Frame Register is so designed as to generate all the ST short range
memory command frames. It can also generate all standardized ISO14443 type-B
command frames like REQB, SLOT-MARKER, ATTRIB, HALT, and get all the answers like
ATQB, or answer to ATTRIB. All ISO14443 type-B compliant PICCs can be accessed by the
CR14 provided that their data frame exchange is not longer than 35 Bytes in both request
and answer.
Doc ID 11922 Rev 213/47
CR14 registersCR14
Table 4.Input/output frame register description
Byte 0Byte 1Byte 2Byte 3...Byte 34Byte 35
Frame LengthFirst data ByteSecond data ByteLast data Byte
00h No Byte transmitted
FFh CRC Error
xxh Number of transmitted Bytes
<------------- Request and Answer Frame Bytes exchanged on the RF ------------->
3.3 Slot marker register (03h)
The slot Marker Register is located at the I²C address 03h. It is used to trigger an automated
anti-collision sequence between the CR14 and any ST short range memory present in the
electromagnetic field. With one I²C access, the CR14 launches a complete stream of
commands starting from PCALL16(), SLOT_MARKER(1), SLOT_MARKER(2) up to
SLOT_MARKER(15), and stores all the identified Chip_IDs into the Input/Output Frame
Register (I²C address 01h).
This automated anti-collision sequence simplifies the host software development and
reduces the time needed to interrogate the 16 slots of the STMicroelectronics anti-collision
mechanism.
When accessed in I²C Write mode, the Slot Marker Register starts generating the sequence
of anti-collision commands. After each command, the CR14 wait for the ST short range
memory answer frame which contains the Chip_ID. The validity of the answer is checked
and stored into the corresponding Status Slot Bit (Byte 1 and Byte 2 as described in
Ta bl e 5 ). If the answer is correct, the Status Slot Bit is set to ‘1’ and the Chip_ID is stored
into the corresponding Slot_Register. If no answer is detected, the Status Slot Bit is set to
‘0’, and the corresponding Slot_Register is set to 00h. If a CRC error is detected, the Status
Slot Bit is set to ‘0’, and the corresponding Slot_Register is set to FFh.
Each time the Slot Marker Register is accessed in I²C Write mode, Byte 0 of the
Input/Output Frame Register is set to 18, Bytes 1 and 2 provide Status Bits Slot information,
and Bytes 3 to 18 store the corresponding Chip_ID or error code.
The Slot Marker Register cannot be accessed in I²C Read mode. All the anti-collision data
can be accessed by reading the Input/Output Frame Register at the I²C address 01h.
Table 5.Slot marker register description
Byte 0Number of stored Bytes: fixed to 18
Byte 1
Byte 2
Byte 3Slot_Register 0 = Chip_ID value detected in Slot 0
Byte 4Slot_Register 1 = Chip_ID value detected in Slot 1
Byte 5Slot_Register 2 = Chip_ID value detected in Slot 2
Byte 6Slot_Register 3 = Chip_ID value detected in Slot 3
Byte n.....
Byte 17Slot_Register 14 = Chip_ID value detected in Slot 14
Byte 18Slot_Register 15 = Chip_ID value detected in Slot 15
Status bit value description:
1: No error detected. The Chip_ID stored in the Slot register is valid.
0: Error detected
– Slot register = 00h: No answer frame detected from ST short range memory
– Slot register = FFh: Answer Frame detected with CRC error. Collision may have occurred
b
1
b
0
Doc ID 11922 Rev 215/47
CR14 I²C protocol descriptionCR14
4 CR14 I²C protocol description
The CR14 is compatible with the I²C serial bus memory standard, which is a two-wire serial
interface that uses a bi-directional data bus and serial clock.
The CR14 has a pre-programmed, 4-bit identification code, ’1010’ (as shown in Ta bl e 6 ),
that corresponds to the I²C bus definition. With this code and the three Chip Enable inputs
(E2, E1, E0) up to eight CR14 devices can be connected to the I²C bus, and selected
individually.
The CR14 behaves as a slave device in the I²C protocol, with all CR14 operations
synchronized to the serial clock.
I²C Read and Write operations are initiated by a START condition, generated by the bus
master.
The START condition is followed by the Device Select Code and by a Read/Write bit (R/W
It is terminated by an acknowledge bit. The Device Select Code consists of seven bits (as
shown in Ta bl e 6 ):
●the Device Code (first four bits)
●plus three bits corresponding to the states of the three Chip Enable inputs, E2, E1 and
E0, respectively
When data is written to the CR14, the device inserts an acknowledge bit (9th bit) after the
bus master’s 8-bit transmission.
When the bus master reads data, it also acknowledges the receipt of the data Byte by
inserting an acknowledge bit (9th bit).
Data transfers are terminated by a STOP condition after an ACK for Write, or after a NoACK
for Read.
The CR14 supports the I²C protocol, as summarized in Figure 6.
Any device that sends data on to the bus, is defined as a transmitter, and any device that
reads the data, as a receiver.
The device that controls the data transfer is known as the master, and the other, as the
slave. A data transfer can only be initiated by the master, which also provides the serial
clock for synchronization. The CR14 is always a slave device in all I²C communications. All
data are transmitted Most Significant Bit (MSB) first.
Table 6.Device select code
).
Device codeChip enableRW
b7b6b5b4b3b2b1b0
CR14 Select1010E2E1E0RW
4.1 I²C start condition
START is identified by a High-to-Low transition of the Serial Data line, SDA, while the Serial
Clock, SCL, is stable in the High state. A START condition must precede any data transfer
command.
16/47Doc ID 11922 Rev 2
CR14CR14 I²C protocol description
The CR14 continuously monitors the SDA and SCL lines for a START condition (except
during Radio Frequency data exchanges), and will not respond unless one is sent.
4.2 I²C stop condition
STOP is identified by a Low-to-High transition of the Serial Data line, SDA, while the Serial
Clock, SCL, is stable in the High state.
A STOP condition terminates communications between the CR14 and the bus master.
A STOP condition at the end of an I²C Read command, after (and only after) a NoACK,
forces the CR14 into its stand-by state.
A STOP condition at the end of an I²C Write command triggers the Radio Frequency data
exchange between the CR14 and the PICC.
4.3 I²C acknowledge bit (ACK)
An acknowledge bit is used to indicate a successful data transfer on the I²C bus.
The bus transmitter, either master or slave, releases the Serial Data line, SDA, after sending
8 bits of data. During the 9th clock pulse the receiver pulls the SDA line Low to acknowledge
the receipt of the 8 data bits.
4.4 I²C data input
During data input, the CR14 samples the SDA bus signal on the rising edge of the Serial
Clock, SCL. For correct device operation, the SDA signal must be stable during the Low-to-
High Serial Clock transition, and the data must change only when the SCL line is Low.
Doc ID 11922 Rev 217/47
CR14 I²C protocol descriptionCR14
SCL
SDA
SCL
SDA
SDA
START
CONDITION
SDA
INPUT
SDA
CHANGE
AI00792
STOP
CONDITION
123789
MSB
ACK
START
CONDITION
SCL
123789
MSBACK
STOP
CONDITION
Figure 6.I²C bus protocol
4.5 I²C memory addressing
18/47Doc ID 11922 Rev 2
To start up communication with the CR14, the bus master must initiate a START condition.
Then, the bus master sends 8 bits (with the most significant bit first) on the Serial Data line,
SDA. These bits consist of the Device Select Code (7 bits) plus a RW
According to the I²C bus definition, the seven most significant bits of the Device Select Code
are the Device Type Identifier. For the CR14, these bits are defined as shown in Tab le 6 .
The 8th bit is the Read/Write bit (RW
). It is set to ‘1’ for I²C Read, and to ‘0’ for I²C Write
operations.
If the data sent by the bus master matches the Device Select Code of a CR14 device, the
corresponding device returns an acknowledgment on the SDA bus during the 9
The CR14 devices whose Device Select Codes do not correspond to the data sent,
generate a No-ACK. They deselect themselves from the bus and go into stand-by mode.
bit.
th
bit time.
CR14CR14 I²C protocol description
AI12062
STOP
DATA N
ACKACK
START
CR14 WRITE
DEV SELBYTE ADDR
DATA 1DATA 2DATA 3
ACKACKACK
ACK
R/W
BUS Master
BUS Slave
4.6 CR14 I²C write operations
The bus master sends a START condition, followed by a Device Select Code and the R/W
bit set to ’0’. The CR14 that corresponds to the Device Select Code, acknowledges and
waits for the bus master to send the Byte address of the register that is to be written to. After
receipt of the address, the CR14 returns another ACK, and waits for the bus master to send
the data Bytes that are to be written.
In the CR14 I²C Write mode, the bus master may sends one or more data Bytes depending
on the selected register.
The CR14 replies with an ACK after each data Byte received. The bus master terminates
the transfer by generating a STOP condition.
The STOP condition at the end of a Write access to the Input/Output Frame Register causes
the Radio Frequency data exchange between the CR14 and the PICC to be started.
During the Radio Frequency data exchange, the CR14 disconnects itself from the I²C bus.
The time (t
command format. To know when the exchange is complete, the bus master uses an ACK
polling sequence as shown in Figure 8. It consists of the following:
●Initial condition: a Radio Frequency data exchange is in progress.
●Step 1: the master issues a START condition followed by the first Byte of the new
instruction (Device Select Code plus R/W
●Step 2: if the CR14 is busy, no ACK is returned and the master goes back to Step 1. If
the CR14 has completed the Radio Frequency data exchange, it responds with an
ACK, indicating that it is ready to receive the second part of the next instruction (the
first Byte of this instruction being sent during Step 1).
) needed to complete the exchange is not fixed as it depends on the PICC
RFEX
bit).
Figure 7.CR14 I²C write mode sequence
Doc ID 11922 Rev 219/47
CR14 I²C protocol descriptionCR14
Radio Frequency
data exchange
in progress
START Condition
DEVICE SELECT
CODE with R/W=1
ACK
returned
Next
operation is
addressing
the CR14
ReSTART
STOP
STOP
Proceed to READ
Operation
YES
NO
First byte of instruction
with R/W = 1 already
decoded by the CR14
NOYES
ai12063
Figure 8.I²C polling flowchart using ACK
4.7 CR14 I²C read operations
20/47Doc ID 11922 Rev 2
To send a Read command, the bus master sends a START condition, followed by a Device
Select Code and the R/W
bit set to ’1’.
The CR14 that corresponds to the Device Select Code acknowledges and outputs the first
data Byte of the addressed register.
To select a specific register, a dummy Write command must first be issued, giving an
address Byte but no data Bytes, as shown in the bottom half of Figure 9. This causes the
new address to be stored in the internal address pointer, for use by the Read command that
immediately follows the dummy Write command.
In the I²C Read mode, the CR14 may read one or more data Bytes depending on the
selected register. The bus master has to generate an ACK after each data Byte to read all
the register data in a continuous stream. Only the last data Byte should not be followed by
an ACK. The master then terminates the transfer with a STOP condition, as shown in
Figure 9.
CR14CR14 I²C protocol description
START
CR14 READ
DEV SEL
DATA 1DATA 2DATA 3
AI12064
STOP
DATA N
ACK
ACKACK
R/W
ACKNoACK
BUS Master
BUS Slave
ACK
DATA 4
START
CR14 READ
DEV SELADDRESS
ACK
BUS Master
BUS Slave
R/W
ACK
DEV SEL
DATA 1
STOP
DATA N
ACK
ACK
R/WACKNoACK
DATA 2
Re-START
I²C CURRENT ADDRESS READ
I²C RANDOM ADDRESS READ
After reading each Byte, the CR14 waits for the master to send an ACK during the 9th bit
time. If the master does not return an ACK within this time, the CR14 terminates the data
transfer and switches to stand-by mode.
Figure 9.CR14 I²C read modes sequences
Doc ID 11922 Rev 221/47
Applying the I²C protocol to the CR14 registersCR14
S
T
A
R
T
1010XXX00hdata
S
T
O
P
ACK
ACKACK
Register Byte
Value
Parameter Register
Address
Device Select
Code
Bus Master
CR14 Write
Bus Slave
ai12038
R/W
S
T
A
R
T
1010XXX00hdata
S
T
O
P
ACK
ACK
ACK
Register Byte
Value
Parameter Register
Address
Device Select
Code
Bus Master
CR14 Read
Bus Slave
ai12039
R
E
S
T
A
R
T
1010XXX
R/W
Device Select
Code
R/WNoACK
data
S
T
O
P
ACK
Register Byte
Value
Bus Master
CR14 Read
Bus Slave
ai12040
S
T
A
R
T
1010XXX
Device Select
Code
R/WNoACK
5 Applying the I²C protocol to the CR14 registers
5.1 I²C parameter register protocol
Figure 10 shows how new data is written to the Parameter Register. The new value
becomes active after the I²C STOP condition.
Figure 11 shows how to read the Parameter Register contents. The CR14 sends and re-
sends the Parameter Register contents until it receives a NoACK from the I²C Host.
The CR14 supports the I²C Current Address and Random Address Read modes. The
Current Address Read mode can be used if the previous command was issued to the
register where the Read is to take place.
Figure 10. Host-to-CR14 transfer: I²C write to parameter register
Figure 11. CR14-to-host transfer: I²C random address read from parameter register
Figure 12. CR14-to-host transfer: I²C current address read from parameter register
22/47Doc ID 11922 Rev 2
CR14Applying the I²C protocol to the CR14 registers
S
T
A
R
T
1 0 1 0 XX X01hN
S
T
O
P
ACK
ACKACK
Request Frame
Length N
Input/Output
Register
Address
Device
Select
Code
Bus
Master
CR14
Write
Bus
Slave
ai12041
R/W
Data 1Data 2
PICC
Command
Parameter
PICC
Command
Code
Data N
PICC
Command
Parameter
PICC
Command
Parameter
ACK
ACKACKACK
S
T
A
R
T
1010XXX01hN
S
T
O
P
ACK
ACKACK
Received
Frame
Length
Input/Output
Register
Address
Device
Select
Code
Bus
Master
CR14
Read
Bus
Slave
ai12042
R/W
Data1Data 2
Answer
Frame
Data
Answer
Frame
Data
Data N
Answer
Frame
Data
Answer
Frame
Data
NoACK
ACKACKACK
R
E
S
T
A
R
T
101 0XXX
Device
Select
Code
R/W
ACK
5.2 I²C input/output frame register protocol
Figure 13 shows how to store a PICC request frame command of N Bytes into the
Input/Output Frame Register.
After the I²C STOP condition, the request frame is RF transmitted in the ISO14443 type-B
format. The CR14 then waits for the PICC answer frame which will also be stored in the
Input/Output Frame Register. The request frame is over-written by the answer frame.
Figure 14 shows how to read an N-Byte PICC answer frame.
The two CRC Bytes generated by the PICC are not stored.
The CR14 continues to output data Bytes until a NoACK has been generated by the I²C
Host, and received by the CR14. After all 36 Bytes have been output, the CR14 “rolls over”,
and starts outputting from the start of the Input/Output Frame Register again.
The CR14 supports the I²C Current Address and Random Address Read modes. The
Current Address Read mode can be used if the previous command was issued to the
register where the Read is to take place.
Figure 13. Host-to-CR14 transfer: I²C write to I/O frame register for ISO14443B
Figure 14. CR14-to-host transfer: I²C random address read from I/O frame register for
ISO14443B
Doc ID 11922 Rev 223/47
Applying the I²C protocol to the CR14 registersCR14
S
T
A
R
T
1010XXXN
S
T
O
P
ACK
ACK
Answer Frame
Data
Device
Select
Code
Bus Master
CR14 Write
Bus Slave
ai12043
R/W
Data 1Data 2
Answer Frame
Data
Answer Frame
Data
Data N
Answer Frame
Data
Received
Frame Length
ACKACKNoACKACK
03h
S
T
O
P
ACK
Slot Marker
Register
Address
Bus Master
CR14 Write
Bus Slave
ai12044
S
T
A
R
T
1010XXX
Device Select
Code
R/W
ACK
S
T
A
R
T
1010XXX00hFFh
S
T
O
P
ACK
ACK
ACK
Slot Marker
Register
Address
Device Select
Code
Bus Master
CR14 Read
Bus Slave
ai12045
R
E
S
T
A
R
T
1010XXX
R/W
Device Select
Code
R/WNoACK
Figure 15. CR14-to-host transfer: I²C current address read from I/O frame register for ISO14443B
5.3 I²C slot marker register protocol
An I²C Write command to the Slot Marker Register generates an automated sixteencommand loop (See Figure 16 for a description of the command).
All the answers from the ST short range memory devices that are detected, are written in
the Input/Output Frame Register.
Read from the I²C Slot Marker Register is not supported by the CR14. If the I²C Host tries to
read the Slot Marker Register, the CR14 will return the data value FFh in both Random
Address and Current Address Read modes until NoACK is generated by the I²C Host.
The result of the detection sequence is stored in the Input/Output Frame Register. This
Register can be read by the host by using I²C Random Address Read.
Figure 16. Host-to-CR14 transfer: I²C write to slot marker register
Figure 17. CR14-to-host transfer: I²C random address read from slot marker register
24/47Doc ID 11922 Rev 2
CR14Applying the I²C protocol to the CR14 registers
FFh
S
T
O
P
ACK
Bus Master
CR14 Read
Bus Slave
ai12047
S
T
A
R
T
1010XXX
Device Select
Code
R/WNoACK
Figure 18. CR14-to-host transfer: I²C current address read from slot marker register
5.4 Addresses above location 06h
In I²C Write mode, when the CR14 receives the 8-bit register address, and the address is
above location 06h, the device does not acknowledge (NoACK) and deselects itself from the
bus. The Serial Data line, SDA, stays at logic ‘1’ (pull-up resistor), and the I²C Host receives
a NoACK during the 9th bit time. The SDA line stays High until the STOP condition is issued.
In the I²C Current and Random Address Read modes, when the CR14 receives the 8-bit
register address, and the address is above location 06h, the device does not acknowledge
the Device Select Code after the START condition, and deselects itself from the bus.
Doc ID 11922 Rev 225/47
CR14 ISO14443 type-B radio frequency data transferCR14
DATA BIT TRANSMITTED
BY THE CR14
10% ASK MODULATION
OF THE 13.56MHz WAVE,
GENERATED BY THE RF
OUT
DRIVER
Transfer time for one data bit is 1/106 kHz
AI12048
10% ASK MODULATION
OF THE 13.56MHz WAVE,
GENERATED ON THE CR14
ANTENNA
6 CR14 ISO14443 type-B radio frequency data transfer
6.1 Output RF data transfer from the CR14 to the PICC (request
frame)
The CR14 output buffer is controlled by the 13.56MHz clock signal generated by the
external oscillator and by the request frame generator. The CR14 can be directly connected
to an external matching circuit to generate a 13.56MHz sinusoidal carrier frequency on its
antenna.
The current driven into the antenna coil is directly generated by the CR14 RFOUT output
driver.
If the antenna is correctly tuned, it emits an H-field of a large enough magnitude to power a
contactless PICC from a short distance. The energy received on the PICC antenna is
converted to a Power Supply Voltage by a regulator, and turned into data bits by the ASK
demodulator. The CR14 amplitude modulates the 13.56MHz wave by 10% as represented
in Figure 19. The data transfer rate is 106 kbit/s.
Figure 19. Wave transmitted using ASK modulation
6.2 Transmission format of request frame characters
26/47Doc ID 11922 Rev 2
The CR14 transmits characters of 10 bits, with the Least Significant Bit (b0) transmitted first,
as shown in Figure 20.
Several 10-bit characters, preceded by the Start Of Frame (SOF) and followed by the End Of
Frame (EOF), constitute a Request Frame, as shown in Figure 26.
A Request Frame includes the SOF, instructions, addresses, data, CRC and the EOF as
defined in the ISO14443 type-B.
Each bit duration is called an Elementary Time Unit (ETU). One ETU is equal to 9.44µs
(1/106kHz).
CR14CR14 ISO14443 type-B radio frequency data transfer
1
ETU
Start
'0'
LSBMSB
Stop
'1'
Information Byte
b0b1b2b3b4b5b6b7b8b9
ai12049
b0b1b2b3b4b5b6b7b8b9b10b
11
ETU000000000011
ai12050
b0b1b2b3b4b5b6b7b8b
9
ETU0000000000
ai09252
Figure 20. CR14 request frame character format
Table 7.CR14 request frame character format
BitDescriptionValue
b
0
b
1 to b8
b
9
Start bit used to synchronize the transmission
Information Byte (instruction, address or data)
Stop bit used to indicate the end of the character
6.3 Request start of frame
The Start Of Frame (SOF) described in Figure 21 consists of:
●a falling edge,
●followed by ten Elementary Time Units (ETU) each containing a logical ‘0’
●followed by a single rising edge
●followed by two ETUs, each containing a logical ‘1’.
Figure 21. Request start of frame
b
= 0
0
Information Byte is sent Least
Significant Bit first
= 1
b
9
6.4 Request end of frame
The End Of Frame (EOF) shown in Figure 22 consists of:
●a falling edge,
●followed by ten Elementary Time Units (ETU) containing each a logical ‘0’,
●followed by a single rising edge.
Figure 22. Request end of frame
Doc ID 11922 Rev 227/47
CR14 ISO14443 type-B radio frequency data transferCR14
V
DYN
V
RFIN
t
V
OFFSET
1/106kHz
1/847kHz
phase shift
V
RET
Load modulation effect on
the H-Field received on the
CR14 RFIN input pad
PICC data bit to be transmitted
to the CR14.
847kHz BPSK, resulting signal
generated by the PICC for the
load modulation.
ai12051
6.5 Input RF data transfer from the PICC to the CR14 (answer
frame)
The CR14 uses the ISO14443 type-B retro-modulation scheme which is demodulated and
decoded by the RF
The modulation is obtained by modifying the PICC current consumption (load modulation).
This load modulation induces an H-field variation, by coupling, that is detected by the CR14
RF
input as a voltage variation on the antenna. The RFIN input demodulates this variation
IN
and decodes the information received from the PICC.
circuitry.
IN
Data must be transmitted using a 847kHz, BPSK modulated sub-carrier frequency, f
shown in Figure 23, and as specified in ISO14443 type-B. In BPSK, all data state transitions
(from ‘0’ to ‘1’ or from ‘1’ to ‘0’) are encoded by phase shift keying the sub-carrier.
Figure 23. Wave received using BPSK sub-carrier modulation
, as
S
6.6 Transmission format of answer frame characters
The PICC should use the same character format as that used for output data transfer (see
Figure 20).
An Answer Frame includes the SOF, data, CRC and the EOF, as illustrated in Figure 26. The
data transfer rate is 106 kbit/s.
The CR14 will also accept Answer Frames that do not contain the SOF and EOF delimiters,
provided that these Frames are correctly set in the Parameter Register. (See Figure 26).
28/47Doc ID 11922 Rev 2
CR14CR14 ISO14443 type-B radio frequency data transfer
b0b1b2b3b4b5b6b7b8b9b10b
11
ETU000000000011
ai09254
b
12
1
b0b1b2b3b4b5b6b7b8b9b10b
11
ETU000000000011
ai09254
b
12
1
6.7 Answer start of frame
The PICC SOF must be compliant with the ISO14443 type-B, and is shown in Figure 24
●Ten or eleven Elementary Time Units (ETU) each containing a logical ‘0’,
●Two ETUs containing a logical ‘1’.
Figure 24. Answer start of frame
6.8 Answer end of frame
The PICC EOF must be compliant with the ISO14443 type-B, and is shown in Figure 25:
●Ten or eleven Elementary Time Units (ETU) each containing a logical ‘0’,
●Two ETUs containing a logical ‘1’
Figure 25. Answer end of frame
6.9 Transmission frame
The Request Frame transmission must be followed by a minimum delay, t0 (see Ta bl e ), in
which no ASK or BPSK modulation occurs, before the Answer Frame can be transmitted. t
is the minimum time required by the CR14 to switch from transmission mode to reception
mode, and should be inserted after each frame. After t
modulated by the PICC at 847kHz for a minimum time of t
to synchronize. After t
bit (‘0’) of the Answer SOF (or the start bit ‘0’ of the first data character in non SOF/EOF
mode).
, the first phase transition generated by the PICC represents the start
1
, the 13.56MHz carrier frequency is
0
(see Ta bl e ) to allow the CR14
1
0
Doc ID 11922 Rev 229/47
CR14 ISO14443 type-B radio frequency data transferCR14
SOFCmdDataCRCCRCEOF
12 bits
at 106Kb/s
10 bits10 bits10 bits10 bits10 bits
Sent by
the CR14
t
0
64/fs Min
t
1
80/fs Min
Sync
fs = 847.5kHz
SOFData
CRCCRC
EOF
12 or 13
bits
10 bits12 or 13
bits
10 bits 10 bits
t
WDG
Case of Answer Frame with SOF & EOF
Sent by the PICC
SyncData
DataCRC
t
WDG
Case of Answer Frame without SOF & EOF
DataCRC
t
0
64/fs Min
t
1
80/fs Min
10 bits 10 bits10 bits10 bits 10 bits
Output Data Transfer using ASK ModulationInput Data Transfer using 847kHz BPSK Modulation
ai12052
t
DR
LSByteMSByte
CRC 16 (8 bits)CRC 16 (8 bits)
LSBitMSBit LSBitMSBit
ai09256
Figure 26. Example of a complete transmission frame
6.10 CRC
The 16-bit CRC used by the CR14 follows the ISO14443 type B recommendation. For
further information, please see Appendix A on page 44.
The two CRC Bytes are present in all Request and Answer Frames, just before the EOF.
The CRC is calculated on all the Bytes between the SOF and the CRC Bytes.
Upon transmission of a Request from the CR14, the PICC verifies that the CRC value is
valid. If it is invalid, it discards the frame and does not answer the CR14.
Upon reception of an Answer from the PICC, the CR14 verifies that the CRC value is valid. If
it is invalid, it stores the value FFh in the Input/Output Frame Register.
The CRC is transmitted Least Significant Byte first. Each Byte is transmitted Least
Significant Bit first.
Figure 27. CRC transmission rules
30/47Doc ID 11922 Rev 2
CR14Tag access using the CR14 coupler
S
T
A
R
T
Device
Select
Code
Input/
Output
Register
Address
Request
Frame
Length
TAG
Cmd
Code
ParamParamParam
S
T
O
P
SOFEOFData 1DataData 2Data NCRCCRC
CR14
SOF
TAG
Cmd
Code
ParamParamParam
SR14
EOF
CRCCRC
I²C
RF
ai12053
Data 1DataData 2Data N01hN
7 Tag access using the CR14 coupler
In all the following I²C commands, the last three bits of the Device Select Code can be
replaced by any of the three-bit binary values (000, 001, 010, 011, 100, 101, 110, 111).
These values are linked to the logic levels applied to the E2, E1 and E0 pads of the CR14.
7.1 Standard TAG command access description
Standard PICC commands, like Read and Write, are generated by the CR14 using the
Input/Output Frame Register.
When the host needs to send a standard frame command to the PICC, it first has to
internally generate the complete frame, with the command code followed by the command
parameters. Only the two CRC Bytes should not be generated, as the CR14 automatically
adds them during the RF transmission.
When the frame is ready, the host has to write the request frame into the Input/Output Frame
Register using the I²C write command specified in Figure 13 on page 23. After the I²C STOP
condition, the CR14 inserts the I²C Bytes in the required ISO character format ( Figure 20)
and starts to transmit the request frame to the PICC. Once the RF transmission is over, the
CR14 waits for the PICC to send an answer frame.
If the PICC answers, the characters received (Figure 26) are demodulated, decoded and
stored into the Input/Output Frame Register, as specified in Ta bl e 4 . During the entire RF
transmission, the CR14 disconnects itself from the I²C bus. On reception of the PICC EOF,
the CR14 checks the CRC and reconnects itself to the I²C bus.
The host can then get the PICC answer frame by issuing an Input/Output Frame Register
Read on the I²C bus, as specified in Figures 14 and 15.
If no answer from the PICC is detected after a time-out delay, fixed in the Parameter
Register (bits b
and b6), the Input/Output Frame Register is set as specified in Ta bl e 4 .
5
Figure 28. Standard TAG command: request frame transmission
Doc ID 11922 Rev 231/47
Tag access using the CR14 couplerCR14
S
T
A
R
T
Device
Select
Code
Input/
Output
Register
Address
Answer
Frame
Length
TAG
Data
S
T
O
P
SOFEOFData 1DataData 2Data PCRCCRC
TAG
SOF
TAG
Data
TAG
Data
TAG
Data
TAG
Data
TAG
EOF
TAG
CRC
TAG
CRC
I²C
RF
ai09261
Data 1DataData 2Data P01hP
TAG
Data
TAG
Data
TAG
Data
Device
Select
Code
Write
I/O
Register
Address
Request
Frame
Length
Request
Frame
Bytes
I²C
STARTSTOP
CRC
Request
Frame
Characters
SOFEOF
CRC
TA G
Answer Frame
Characters
SOFEOF
T
0
<-->
T
1
<-->
Device
Select
Code
Read
Answer
Frame
Length
Request
Frame
Bytes
STARTSTOP
RF
ai09262
Figure 29. Standard TAG command: answer frame reception
Figure 30. Standard TAG command: complete TAG access description
7.2 Anti-collision TAG sequence
The CR14 can identify an ST short range memory using a proprietary anti-collision system.
Issuing an I²C Write command to the Slot Marker Register (Figure 16) causes the CR14 TO
automatically generate a 16-slot anti-collision sequence, and to store the identified Chip_ID
in the Input/Output Frame Register, as specified in Tab le 4 .
After receiving the Slot Marker Register I²C Write command, the CR14 generates an RF
PCALL16 command followed by fifteen SLOT_MARKER commands, from
SLOT_MARKER(1) to SLOT_MARKER(15). After each command, the CR14 waits for a tag
answer. If the answer is correctly decoded, the corresponding Chip_ID is stored in the
Input/Output Frame Register. If there is no answer, or if the answer is wrong (with a CRC
error, for example), the CR14 stores an error code in the Input/Output Frame Register. At
the end of the sequence, the host has to read the Input/Output Frame Register to retrieve all
the identified Chip_IDs.
32/47Doc ID 11922 Rev 2
CR14Tag access using the CR14 coupler
03hI²C
S
T
A
R
T
Device
Select
Code
Slot
Marker
Register
Address
S
T
O
P
SOFSlot 0
06h04hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOF
CR14
SOF
PCALL 16 TAG
Command
CRCCRCCR14
EOF
TAG
SOF
TAG
Chip_ID
TAG
CRC
TAG
CRC
TAG
EOF
RF
I²C
SOFSlot 116hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 226hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 336hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 446hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 556h
CRCCRC
EOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 666hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 776hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 886hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
I²C
SOFSlot 996hCRCCRCEOFSOF
t
0
<-->
t
1
<-->
Chip_IDCRCCRCEOFRF...
CR14
SOF
Slot Marker
Command
CRCCRCCR14
EOF
TAG
SOF
TAG
Chip_ID
TAG
CRC
TAG
CRC
TAG
EOF
ai12054
Figure 31. Anti-collision ST short range memory sequence (1)
Figure 32. Anti-collision ST short range memory sequence continued
34/47Doc ID 11922 Rev 2
CR14Maximum rating
8 Maximum rating
Stressing the device above the rating listed in the Absolute Maximum Ratings table may
cause permanent damage to the device. Exposure to Absolute Maximum Rating conditions
for extended periods may affect device reliability. These are stress ratings only and
operation of the device at these or any other conditions above those indicated in the
Operating sections of this specification is not implied. Refer also to the STMicroelectronics
SURE Program and other relevant quality documents.
Table 8.Absolute maximum ratings
SymbolParameterValueUnit
P
T
V
STG
V
V
V
OUT
ESD
IO
IO
CC
Storage Temperature–65 to 150°C
Input or Output range (SDA)–0.3 to 6.5V
Input or Output range (others pads)–0.3 to Vcc+0.3V
Supply Voltage–0.3 to 6.5V
Output Power on Antenna Output Driver (RF
Electrostatic Discharge Voltage (Human Body model)
Electrostatic Discharge Voltage (Machine model)
1. MIL-STD-883C, 3015.7 (100 pF, 1500 ).
2. EIAJ IC-121 (Condition C) (200 pF, 0 )
OUT
)
(1)
(2)
100mW
4000V
500V
Doc ID 11922 Rev 235/47
DC and AC parametersCR14
AI09235
0.8V
CC
0.2V
CC
0.7V
CC
0.3V
CC
9 DC and AC parameters
This section summarizes the operating and measurement conditions, and the DC and AC
characteristics of the device. The parameters in the DC and AC Characteristic tables that
follow are derived from tests performed under the Measurement Conditions summarized in
the relevant tables. Designers should check that the operating conditions in their circuit
match the measurement conditions when relying on the quoted parameters.
Table 9.I²C AC measurement conditions
ParameterMin.Max.Unit
V
Supply Voltage
CC
Ambient Operating Temperature (TA)
Input Rise and Fall Times50ns
Input Pulse Voltages
Input and Output Timing Reference Voltages
Figure 33. I²C AC testing I/O waveform
4.55.5V
–2085°C
0.2V
0.3V
CC
CC
0.8V
0.7V
CC
CC
V
V
Table 10.I²C Input Parameters
(1,2)
SymbolParameterMin.Max.Unit
C
Input Capacitance (SDA)8pF
IN
C
Input Capacitance (SCL, E0, E1, E2))6pF
IN
t
Low Pass Filter Input Time Constant (SCL & SDA Inputs)100400ns
NS
1. Sampled only, not 100% tested.
= 25 °C, f = 400kHz.
2. T
A
Table 11.I²C DC characteristics
SymbolParameterTest conditionMin.Max.Unit
Input Leakage Current
I
LI
(SCL, SDA, E0, E1, E2)
Output Leakage Current
I
LO
(SCL, SDA, E0, E1, E2)
0V V
0V VIN V
OUT
36/47Doc ID 11922 Rev 2
V
CC
CC
SDA in Hi-Z
,
±2µA
±2µA
CR14DC and AC parameters
tCHCLCLCH
tDLCL
tCHDX
START
CONDITION
tDXCX
tCLDX
tCHDH
tDHDL
SDA
INPUT
SDA
CHANGE
STOP &
BUS FREE
SCL
SDA IN
SCL
SDA OUT
DATA VALID
tCLQVtCLQX
DATA OUTPUT
SCL
SDA IN
tCHDH
tRFEX
tCHDX
STOP
CONDITION
CR14 command executionSTART
CONDITION
ai12055
Table 11.I²C DC characteristics (continued)
SymbolParameterTest conditionMin.Max.Unit
= 5 V, fC = 400 kHz
V
I
Supply Current
CC
I
Supply Current (Stand-by)
CC1
Input Low Voltage (SCL,
SDA)
V
IL
Input Low Voltage (E0, E1,
E2)
Input High Voltage (SCL,
SDA)
V
IH
Input High Voltage (E0, E1,
E2)
CC
(rise/fall time < 30ns), RF OFF
VCC = 5V, fC = 400 kHz (rise/fall
time < 30ns), RF ON
V
= VSS or VCC, V
IN
= 5 V, RF
CC
OFF
–0.3
–0.3
0.7V
0.7V
CCVCC
CCVCC
6mA
20mA
5mA
0.3V
0.3V
+ 1
+ 1
CC
CC
V
V
V
V
V
Output Low Voltage (SDA)
OL
Figure 34. I²C AC waveforms
I
= 3 mA, VCC = 5 V
OL
0.4V
Doc ID 11922 Rev 237/47
DC and AC parametersCR14
Table 12.I²C AC characteristics
SymbolAlt.Parameter
t
CH1CH2
(1)
(1)
t
CL1CL2
t
DH1DH2
)
(1)
t
DL1DL2
(2)
t
CHDX
t
CHCL
t
DLCL
t
CLDX
t
CLCH
t
DXCX
t
CHDH
t
DHDL
t
CLQV
t
CLQX
f
C
1. Sampled only, not 100% tested.
2. For a reSTART condition, or following a write cycle.
t
Clock Rise Time3001000ns
R
t
Clock Fall Time300300ns
F
(1
t
SDA Rise Time20300201000ns
R
t
SDA Fall Time2030020300ns
F
t
SU:STA
t
HIGH
t
HD:STA
t
HD:DAT
t
LOW
t
SU:DAT
t
SU:STO
t
BUF
t
t
f
SCL
Clock High to Input Transition6004700ns
Clock Pulse Width High6004000ns
Input Low to Clock Low (START)6004000ns
Clock Low to Input Transition00µs
Clock Pulse Width Low1.34.7µs
Input Transition to Clock Transition100250ns
Clock High to Input High (STOP)6004000ns
Input High to Input Low (Bus Free)1.34.7µs
Clock Low to Data Out Valid10003500ns
AA
Data Out Hold Time After Clock Low200200ns
DH
Clock Frequency400100kHz
Fast I²C
400 kHz
I²C
100 kHz
MinMaxMinMax
Unit
38/47Doc ID 11922 Rev 2
CR14DC and AC parameters
t
RFSBL
t
RFF
t
RFR
BA
t
POR
V
RFOUT
f
CC
RF
OUT
ASK Modulated Signal
101EOFDATA
FRAME transmitted by the CR14 in ASK
847kHzSOF1 1 0 DATA 1 0 DATA 1 0
FRAME transmitted by the PICC in BPSK
t
DR
t
DR
t
0
t
1
t
DA
t
DA
0
START
t
RFSBL
t
RFSBL
t
RFSBL
t
RFSBL
t
RFSBL
t
JIT
t
JIT
t
JIT
t
JIT
t
JIT
Data jitter on FRAME transmitted by the CR14 in ASK
ai12056
FRAME transmission between the reader and the contactless device
Figure 35. CR14 synchronous timing
Table 13.RF
SymbolParameterConditionMin.Max.Unit
f
CC
MI
CARRIER
t
RFR,tRFF
t
RFSBL
t
JIT
t
0
t
1
AC characteristics
OUT
External Oscillator Frequency
Carrier Modulation IndexMI=(A-B)/(A+B)1014%
10% Rise and Fall time0.51.5µs
Pulse Width on RF
OUT
ASK modulation bit jitterCR14 to PICC-0.50.5µs
Antenna Reversal delay
Synchronization delay
= 5 V
V
CC
1 ETU = 128/f
Min = 64/f
Min = 80/f
S
S
CC
13.55313.567MHz
9.44µs
75µs
94µs
Doc ID 11922 Rev 239/47
DC and AC parametersCR14
Table 13.RF
AC characteristics (continued)
OUT
SymbolParameterConditionMin.Max.Unit
t
WDG
t
WDG
t
WDG
t
WDG
t
DR
P
A
t
POR
Table 14.RFIN AC characteristics
Symbol
t
RFSBL
f
S
t
DA
V
DY N
V
OFFSET
V
RET
1. Data specified in the table above are estimated or target values. All values can be updated during product qualification.
Answer delay watchdog (b5=0, b6=0)
500µs
Request EOF
Answer delay watchdog (b5=0, b6=1)
Answer delay watchdog (b5=1, b6=0)
Answer delay watchdog (b5=1, b6=1)
rising edge to
first Answer
start bit
5ms
10ms
309ms
Time Between Request charactersCR14 to PICC9.44µs
RF
output power
OUT
CR14 Power-On delay20ms
1. Data specified in the table above are estimated or target values. All values can be updated
during product qualification.
Parameter
(1)
PICC Pulse Width
PICC Sub-carrier Frequency
ConditionMin.Max.Unit
1 ETU = 128/f
f
CC
CC
/16
90mW
9.44µs
847.5KHz
Time Between Answer charactersPICC to CR141, 2, 3ETU
RFIN Dynamic Voltage LevelV
RFIN Offset Voltage Level
RFIN Retro-modulation Level
Max for V
DYN
OFFSET
= VCC/2
VCC/2
0.5
23V
120mV
V
40/47Doc ID 11922 Rev 2
CR14Package mechanical
10 Package mechanical
In order to meet environmental requirements, ST offers these devices in different grades of
ECOPACK® packages, depending on their level of environmental compliance. ECOPACK®
specifications, grade definitions and product status are available at: www.st.com.
ECOPACK® is an ST trademark.
Doc ID 11922 Rev 241/47
Package mechanicalCR14
%
%
! !
!
C
$
B
E
,
K
CCC#
MM
'AGEPLANE
H§
1?-%
Figure 36. SO16 narrow - 16 lead plastic small outline, 150 mils body width, Package
outline
1. Drawing is not to scale.
Table 15.SO16 narrow - 16 lead plastic small outline, 150 mils body width,
package mechanical data
MillimetersInches
Symbol
Typ.Min.Max.Typ.Min.Max.
A1.750.0689
A10.10.250.00390.0098
A21.250.0492
b0.310.510.01220.0201
c0.170.250.00670.0098
D9.99.8100.38980.38580.3937
E65.86.20.23620.22830.2441
E13.93.840.15350.14960.1575
e1.270.05
h0.250.50.00980.0197
L0.41.270.01570.05
k0°8° 0°8°
Tolerancemillimetersinches
ccc0.10.0039
42/47Doc ID 11922 Rev 2
CR14Ordering information
11 Ordering information
Table 16.Ordering information scheme
Example:CR14–MQ / XXX
Device type
CR14
Package
MQ = SO16 Narrow (150 mils width)
MQP = SO16 Narrow (150 mils width) ECOPACK®
Customer code
XXX = Given by the issuer
For a list of available options (speed, package, etc.) or for further information on any aspect
of this device, please contact your nearest ST Sales Office.
Doc ID 11922 Rev 243/47
ISO14443 type B CRC calculationCR14
Appendix A ISO14443 type B CRC calculation
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <ctype.h>
#define BYTEunsigned char
#define USHORTunsigned short
unsigned short UpdateCrc(BYTE ch, USHORT *lpwCrc)
{
ch = (ch^(BYTE)((*lpwCrc) & 0x00FF));
ch = (ch^(ch<<4));
*lpwCrc = (*lpwCrc >> 8)^((USHORT)ch <<
8)^((USHORT)ch<<3)^((USHORT)ch>>4);
return(*lpwCrc);
}
void ComputeCrc(char *Data, int Length, BYTE *TransmitFirst, BYTE
*TransmitSecond)
printf("] Transmitted: %02X then %02X.", First, Second);
return(0);
}
Doc ID 11922 Rev 245/47
Revision historyCR14
Revision history
Table 17.Document revision history
DateRevisionChanges
16-Dec-20051Initial release.
19-Mar-20102Updated Figure 36 and Table 15 on page 42
46/47Doc ID 11922 Rev 2
CR14
Please Read Carefully:
Information in this document is provided solely in connection with ST products. STMicroelectronics NV and its subsidiaries (“ST”) reserve the
right to make changes, corrections, modifications or improvements, to this document, and the products and services described herein at any
time, without notice.
All ST products are sold pursuant to ST’s terms and conditions of sale.
Purchasers are solely responsible for the choice, selection and use of the ST products and services described herein, and ST assumes no
liability whatsoever relating to the choice, selection or use of the ST products and services described herein.
No license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted under this document. If any part of this
document refers to any third party products or services it shall not be deemed a license grant by ST for the use of such third party products
or services, or any intellectual property contained therein or considered as a warranty covering the use in any manner whatsoever of such
third party products or services or any intellectual property contained therein.
UNLESS OTHERWISE SET FORTH IN ST’S TERMS AND CONDITIONS OF SALE ST DISCLAIMS ANY EXPRESS OR IMPLIED
WARRANTY WITH RESPECT TO THE USE AND/OR SALE OF ST PRODUCTS INCLUDING WITHOUT LIMITATION IMPLIED
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE (AND THEIR EQUIVALENTS UNDER THE LAWS
OF ANY JURISDICTION), OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT.
UNLESS EXPRESSLY APPROVED IN WRITING BY AN AUTHORIZED ST REPRESENTATIVE, ST PRODUCTS ARE NOT
RECOMMENDED, AUTHORIZED OR WARRANTED FOR USE IN MILITARY, AIR CRAFT, SPACE, LIFE SAVING, OR LIFE SUSTAINING
APPLICATIONS, NOR IN PRODUCTS OR SYSTEMS WHERE FAILURE OR MALFUNCTION MAY RESULT IN PERSONAL INJURY,
DEATH, OR SEVERE PROPERTY OR ENVIRONMENTAL DAMAGE. ST PRODUCTS WHICH ARE NOT SPECIFIED AS "AUTOMOTIVE
GRADE" MAY ONLY BE USED IN AUTOMOTIVE APPLICATIONS AT USER’S OWN RISK.
Resale of ST products with provisions different from the statements and/or technical features set forth in this document shall immediately void
any warranty granted by ST for the ST product or service described herein and shall not create or extend in any manner whatsoever, any
liability of ST.
ST and the ST logo are trademarks or registered trademarks of ST in various countries.
Information in this document supersedes and replaces all information previously supplied.
The ST logo is a registered trademark of STMicroelectronics. All other names are the property of their respective owners.