This is the second edition of this manual. It describes the S6350 Reader (formerly
published as the Series 5000 RI-STU-TRDC-00 Reader Reference Guide).
It contains a description of the following reader modules:
Reader Module with Right-Angle Connector RI-STU-TRDC-01
Reader Module with Straight Connector RI-STU-TRDC-02
Texas Instruments (TI) reserves the right to make changes to its products or services or
to discontinue any product or service at any time without notice. TI provides customer
assistance in various technical areas, but does not have full access to data concerning
the use and applications of customer’s products
Therefore, TI assumes no liability and is not responsible for customer applications or
product or software design or performance relating to systems or applications
incorporating TI products. In addition, TI assumes no liability and is not responsible for
infringement of patents and/or any other intellectual or industrial property rights of third
parties, which may result from assistance provided by TI.
TI products are not designed, intended, authorized or warranted to be suitable for life
support applications or any other life critical applications which could involve potential
risk of death, personal injury or severe property or environmental damage.
The RFID Systems logo, TIRIS logo, the words RFID Systems, TIRIS and Tag-it are
trademarks or registered trademarks of Texas Instruments Incorporated (TI).
This document may be downloaded onto a computer, stored and duplicated as
necessary to support the use of the related TI products. Any other type of duplication,
circulation or storage on data carriers in any manner not authorized by TI represents a
violation of the applicable copyright laws and shall be prosecuted.
About This Manual
This reference guide for the S6350 High-frequency (13.56Mhz) Reader is designed for use by TI
customers who are engineers experienced with RFID Systems and Radio Frequency
Identification Devices (RFID).
Preface
Read This First
Conventions
Device Name
RI-STU-TRDC-011.4 (ISO 15693-3)Right-Angle Connector
RI-STU-TRDC-021.4 (ISO 15693-3)Straight Connector
Regulatory, safety and warranty notices that must be followed are provided in Chapter 4.
The following pictograms and designations are used in the operating instructions:
Firmware
Version
Hardware Configuration
WARNING:
A WARNING IS USED WHERE CARE MUST BE
TAKEN, OR A CERTAIN PROCEDURE MUST BE
FOLLOWED, IN ORDER TO PREVENT INJURY OR
HARM TO YOUR HEALTH.
CAUTION:
This indicates information on conditions, which must be
met, or a procedure, which must be followed, which if not
needed could cause permanent damage to the system.
Note:
Indicates conditions, which must be met, or procedures which must
be followed, to ensure proper functioning.
Information:
Indicates conditions or procedures that should be followed to ensure
proper functioning of the system.
September 2001 S6350 Reader Reference Guide
If You Need Assistance
Application Centers are located in Europe, North and South America, the Far East and
Australia to provide direct engineering support.
For more information, please contact your nearest TI-RFID Systems Sales and
Application Center. The contact addresses can be found on our home page:
http://www.ti-rfid.com.
Numerical Representations
Unless otherwise noted, numbers are represented as decimal.
Hexadecimal numbers are represented with the suffix
Binary numbers are represented with the suffix 2, e.g. 1011
, e.g. A5F1
hex
2
hex
Byte representations: the least significant bit (lsb) is bit 0 and the most significant bit
(msb) is bit 7.
1.2 Summary of Chapters and Appendixes .........................................................7
September 2001 S6350 Reader Reference Guide
1.1 Description
This document describes the features and operational characteristics of the RI-STU-TRDC-01 & -02
S6350 High Frequency Multi-Protocol Readers. The RI-STU-TRDC-02 reader is shown in Figure 1.
The S6350 Reader operates at a frequency of 13.56MHz and is compatible with both standard and
ISO/IEC 15693 Tag-it inlays and tags. This reference guide provides the details that are necessary to
properly interface and use the reader as a part of an integrated system.
In compliance with the ISO/IEC 15693 standard, a global open standard for optimal use under
different regulatory and noise environments around the world, the S6350 Reader allows for the
interoperability of inlays and tags from multiple manufacturers.
Figure 1: S6350 High Frequency Reader
1.1.1 Programming Interface
The S6350 Reader is designed to operate as a part of a host-based reader system, which essentially
relegates the reader to be a slave to the host. Host-to-Tag-it reader serial communications are
accomplished within data packets whereby communications from the host to the reader are known as
requests, and replies from the reader to the host are known as responses. This communication
occurs at RS-232 levels using 57,000 baud, 8 data bits, 1 start bit, 1 stop bit and no parity. By
definition, the host is always the primary station and initiates all communication sequences. These
sequences consist of request/response pairs where the host waits for a response prior to continuing.
2.2.1 RI-STU-TRDC-01 with 16-pin Right-Angle Connector .............................14
2.2.2 RI-STU-TRDC-02 with 16-pin Straight Header Connector .......................15
September 2001 S6350 Reader Reference Guide
2.1 General Specification
This chapter describes the electrical and mechanical specifications of the S6350 RI-STU-TRDC-02
reader. Operating at a frequency of 13.56 MHz, this low profile, low power device is designed to be
easily integrated into many systems as an embedded device. All reader I/O is accomplished through
the use of a 16-pin header connector (labeled as CN1), to include all communication, which is
asynchronous RS232 as controlled by a host system.
2.1.1 Functional Requirements
The following parameters define the functional requirements and operational environment of the
S6350 reader.
ParameterSpecifications
Operating temperature-20oC to +70o C
Storage temperature
(500 hours)-40oC to +85oC
Thermal shock
Mechanical shock
Vibration
Humidity500 hours at 80% humidity, non-condensing at 70oC
Operating frequencies13.56 MHz up-link and down-link
Transponder types13.56 MHz TI Tag-it™ tag (Standard & ISO tag)
Standard compliance
-40oC to +85oC, using MIL-STD-810E, Method 503.3,
for 100 cycles duration, 30 minutes per temperature.
5 Gs at 10 ms, half sinusoidal waves, 6 axes (MIL STD801E, Method 516.3)
15 Hz to 500 Hz, 1 g peak, 30 minutes sweep,
logarithmic (MIL-STD-810E, Method 514.4)
FCC Part 15, Subpart C, “Intentional Radiator”
2.1.2 Power Supply
Input Voltage5 ± .5 VDC
Average quiescent current90mA
Average current during read200mA (for TAG-IT tags)
(Dependent on read rate)
Maximum current during read250mA
2.1.3 Output Power
Output Power120mW into 50 Ohms (Typical)
CAUTION:
The S 6350 reader is an intentional radiator, and when
integrated, the integrator is subject to meeting FCC Part
15, Subpart C, and similar tenets under European
Standard EN 300330.
September 2001 S6350 Reader Reference Guide
2.1.4 Required Antenna Parameters
Impedance50Ω± 5Ω at 13.56 MHz
Loaded Q10 < Q < 30
Note:
As no standard antenna is provided by Texas Instruments for the
S6350 reader, the noted required antenna parameters must be
closely followed by the integrator for the reader to operate properly.
2.1.5 Input / output pins (CN1 pins 3 and 4)
Pins 3 and 4 on CN1 may be configured by software commands to read a logic level input or to
switch an external load to ground (no pull-up is provided).
Figure 2: Example Circuit Diagram of an IO pin
When used as a switch to ground the following ratings should not be exceeded:
Maximum voltage20V
Maximum current50mA
CAUTION:
Exceeding this Voltage and Current limit could cause
permanent damage to the reader.
Note:
That if an output has been set by a software command the state will
always read back as a logic 0.
September 2001 S6350 Reader Reference Guide
2.1.6 Baseband receiver
Minimum data pulse width5uS
Maximum data pulse width500uS
Typical settling time50uS from the first transition
Note:
The receiver extracts the mean level of the incoming data stream as
a reference. This takes approximately 50uS; therefore the data
output of the receiver is not valid until after this time.
2.1.7 Connector Details
All reader input and output is provided through a 16-pin header connector that is mounted on the
backside of the reader for the RI-STU-TRDC-02 and on the component side for the RI-STUTRDC-01. The details and orientation of each connector pin are provided in the following tables.
2.1.8 16-pin Header Connector CN1
PinFunction
1 0 Volts
2+5 Volts
3Open collector output / data input 2
4Open collector output / data input 1
5RS232 TxD (output from reader)
6RS232 RxD (input to reader)
7No connection (antenna guard)
8Antenna screen
9Antenna signal
10No connection (antenna guard)
11RS232 ground
12No connection (reserved for future expansion)
13No connection (reserved for future expansion)
14No connection (reserved for future expansion)
15No connection (reserved for future expansion)
16No connection (reserved for future expansion)
CAUTION:
Only pins 8 and 9 of connector CN1 should be used for
The S6350 reader accepts and sends data at RS232 levels, 57600 baud, 8 data bits, 1 start bit,
1 stop bit and no parity. The data packet from the host to the reader is known as the request
and the reply from the reader to the host as the response. The host is always the primary station
and initiates all communication sequences. These consist of request/response pairs where the
host waits for a response before continuing. The S6350 reader does not use the node address.
3.1.1 Request Packet Format (Host to Reader)
Field NameSOF
Field Size 1 byte
Field Value01
PurposeStart of Frame
Field NameLength
Field Size 2 byte LSB first
Field ValuePacket dependent
PurposeDescribes the length of the whole packet including SOF
Field NameNode Address
Field Size 2 byte LSB first
Field Value0000
PurposeMust be 0000
hex
hex
for upward compatibility
hex
Field NameCommand flags
Field Size 1 byte
Field ValueVaries by command
PurposeSpecifies the action to be taken by the reader
Field NameCommand
Field Size 1 byte
Field ValueVaries by command
PurposeSpecifies the action to be taken by the reader
Field NameData
Field Size 0 to xx bytes
Field ValueCommand dependent
PurposeContains the parameters and data for the command
Field NameBCC
Field Size 2 bytes
Field Value16 bit LRC of the preceding packet including the SOF
PurposeAllows the reader to validate the correct reception of the request
packet
September 2001 S6350 Reader Reference Guide
3.1.2 Response Packet Format (Reader to Host)
Field NameSOF
Field Size 1 byte
Field Value01
PurposeStart of Frame
Field NameLength
Field Size 2 byte LSB first
Field ValuePacket dependent
PurposeDescribes the length of the whole packet including SOF
Field NameNode Address
Field Size 2 byte LSB first
Field Value0000
Purposealways 0000
Field NameCommand flags
Field Size 1 byte
Field ValueVaries by command
PurposeSpecifies the action just taken by the reader
Field NameCommand
Field Size 1 byte
Field ValueVaries by command
PurposeSpecifies the action just taken by the reader
hex
hex
hex
Field NameData
Field Size 0 to 23 bytes
Field ValueCommand dependent
PurposeContains the parameters and data for the command just processed
Field NameBCC
Field Size 2 bytes
Field Value16 bit LRC of the preceding packet including the SOF
PurposeAllows the host to validate the correct reception of the response
3.1.3 Command Flags Request
The command flags in the request packet control the actions of the reader. The meanings of the
bits are defined below.
Bits 0-3 Reserved for future use and should be set to ‘0’ for upward
Bit 4 Is the address flag and if set, the command is only performed on
Bits 5-7 Reserved for future use and should be set to ‘0’ for upward
packet
compatibility.
transponders whose address matches the data section of the packet.
compatibility.
September 2001 S6350 Reader Reference Guide
3.1.4 Command Flags Response
The command flags in the response packet report the actions of the reader. The meanings of
the bits are defined below.
Bits 0-3 Reserved for future use.
Bit 4Error flag. If this flag is set the command was unsuccessful and the
data section of the response packet contains the error code. (See
section Appendix B for a list of error codes.)
Bits 5-7 Reserved for future use.
3.1.5 BCC
A Block Check Character (BCC) is used for error detection and is attached to the end of the
packet. The 16 bit BCC is calculated on all the bytes of the packet including the SOF. The BCC
consists of two parts: the LSbyte is a Longitudinal Redundancy Check (LRC) and the MSbyte is
the ones compliment of the LRC. The LRC is calculated by performing a cumulative ExclusiveOR operation on all the bytes of the packet.
3.1.6 Example Request Packet
01
0A
00
00
00
00
02
01
08
F7
hex
hex
hex
hex
hex
hex
hex
hex
hex
hex
SOF
LSbyte of length
MSbyte of length
LSbyte of node address
MSbyte of node address
Command flags (Not addressed)
Command (Tag-itTM Read block)
Data (Block number 1)
LSbyte of Checksum
MSbyte of Checksum
September 2001 S6350 Reader Reference Guide
3.2 Command Definitions
3.2.1 Tag-it™ HF Command Definitions
Command Function (Tag-it HF)Command Code
Read Single Non-addressed & Addressed Block02
Write Single Non-addressed & Addressed Block03
Lock Single Non-addressed & Addressed Block04
Read Transponder Details05
Special Read Block Command0F
Read Block Command (02
Reads a single block of data from a Tag-itTM transponder. If the address flag is set, the
address forms the first part of the data section (LSbyte first), followed by a single byte
containing the block number to be read. If the address flag is clear the data section
only contains the block number.
Example
Read block 3 of a Tag-itTM transponder whose address is 0134A4D5
Request packet
01 0E 00 00 00 10 02 D5 A4 34 01 03 5A A5
The response packet is similar to the request packet, with the data section containing
the data received from the transponder (LSbyte first) followed by a single byte
indicating the lock status and then another single byte containing the block address.
The two LSB’s of the lock status byte reflect the two lock bits in the transponder.
read from unlocked block 3 of a Tag-itTM transponder.
hex
Write Block Command (03
Writes a single block of data to a Tag-itTM transponder. If the address flag is set, the
address forms the first part of the data section, followed by a single byte containing the
block number to be written. The data to be written follows the block number. If the
address flag is clear the data section only contains the block byte and the data to be
written.
Example
Write Block 4 of a Tag-itTM transponder whose address is 000134A4
01234567
The response packet is similar to the request packet; with the data section containing
00
for a successful write operation.
hex
hex
hex
)
with data
hex
hex
September 2001 S6350 Reader Reference Guide
Example
Response packet
01 0A 00 00 00 00 03 00 08 F7
hex
Successful write.
Lock Block Command (04
hex
)
Locks a single block of data in a Tag-itTM transponder. If the address flag is set, the
address forms the first part of the data section, followed by a single byte containing the
number of the block to lock.
Example
Lock Block 4 of a Tag-itTM transponder whose address is 000134A4
Request packet
01 0E 00 00 00 10 04 A4 34 01 00 04 8E 71
The response packet is similar to the request packet, with the data section containing
00
Reads the details of a Tag-itTM transponder. If the address flag is set, the address
forms the data section.
Example
Read the details of a Tag-itTM transponder non-address
Request packet
01 09 00 00 00 00 05 0D F2
hex
hex
hex
hex
hex
)
The response packet is similar to the request packet, with the data section containing
the transponder address (4 bytes), manufacturers code (1 byte), transponder version
number (2 bytes), the number of blocks (1 byte) and the number of bytes per block
(1byte).
Example
Response packet
01 12 00 00 00 00 05 A4 34 01 00 01 05 00 08 04 8F 70
Transponder ID 000134A4
Manufacturers Number01
Version Number0005
Number of blocks08
Number of bytes per block04
Special Read Block Command (0F
Reads blocks of data from a Tag-itTM transponder. The address flag should not be
used. The data section contains a single byte detailing the blocks to be read. Each bit
of this byte represents a block of data (bit 0 = block 0 etc) if a bit is set then that block
is read. If the data byte is zero then only the SID is returned. The SID is always
retrieved first and then used to read the selected blocks in addressed mode.
hex
hex
hex
hex
hex
hex
hex
)
September 2001 S6350 Reader Reference Guide
Example
Read blocks 0, 3 & 4 of a Tag-itTM transponder (data byte = 00011001
bin
= 19
hex
)
Request packet
01 0A 00 00 00 00 0F 19 1D E2
hex
The data section of the response packet contains:
The SID address (LSbyte first),
Block 0 data (if selected) followed by a single byte indicating the lock status and then
another single byte containing the block address,
Block 1 data (if selected) followed by a single byte indicating the lock status and then
another single byte containing the block address,
Block 7 data (if selected) followed by a single byte indicating the lock status and then
another single byte containing the block address,
(The two LSB’s of the lock status bytes reflect the blocks two lock bits in the
transponder.)
read from unlocked block 0 of a Tag-itTM transponder.
hex
read from unlocked block 3 of a Tag-itTM transponder.
hex
read from unlocked block 4 of a Tag-itTM transponder.
hex
SID
September 2001 S6350 Reader Reference Guide
3.2.2 Miscellaneous Commands
Command FunctionCommand Code
Initiate FLASH Loader CommandD0
Send Data to FLASH CommandD8
Reader Version CommandF0
Read Inputs CommandF1
Write Reader Outputs CommandF2
RF Carrier on/off CommandF4
Initiate FLASH Loader Command (D0
This command is used to initialize and transfer control to the FLASH loader software.
Example
Request packet
01 09 00 00 00 00 D0 D8 27
The response packet is similar to the request packet with the data section containing
‘00’ if successful.
Example
Response packet
01 0A 00 00 00 00 D0 00 DB 24
FLASH loader initialised and control transferred.
Send Data to FLASH Command (D8
This command is used to load data into the FLASH memory.
hex
hex
)
)
hex
hex
hex
hex
hex
hex
hex
hex
Example
Request packet
01 8D 00 00 00 00 D8 <132 bytes of data> <2 byte checksum>
The Data section must always contain 132 bytes
The response packet data section contains ‘00’ if successful.
Example
Response packet
01 0A 00 00 00 00 D8 00 D3 2C
The section of FLASH memory was programmed correctly.
Reader Version Command (F0
Requests the version number of the reader. The flags are ignored for this command.
Example
Get the version number of the reader.
Request packet
01 09 00 00 00 00 F0 F8 07
The response packet is similar to the request packet with the data section containing
the 2 byte version number LSB first followed by a single byte representing the reader
type.
The version number is 1.4
The reader type response can be defined as follows:
Type 07 = Indicates that the reader has been successfully loaded with the noted
application firmware version number (in this example, version 1.4).
Type 00 = Indicates that the reader has not been loaded with application firmware, but
does have the boot-loader firmware in place with which to download the appropriate
application firmware. (Please refer to Appendix A: Downloading Data to FLASH
Memory)
Reader inputs Command (F1
hex
)
Reads the state of the reader inputs. The flags are ignored for this command.
Example
Get the status of the reader inputs.
Request packet
01 09 00 00 00 00 F1 F9 06
The response packet is similar to the request packet with the data section containing a
byte representing the state of the inputs. Bit 0 of this byte represents input 1 and bit 1
represents input 2 all other bits are reserved.
Example
Response packet
01 0A 00 00 00 00 F1 01 FB 04
Input 1 is at Logic 1
Input 2 is at Logic 0
Write reader outputs Command (F2
Writes the state of the reader outputs. The flags are ignored for this command.
The data section contains 1 byte with bits defined as follows:
Bit 01 = Output 1 switched on (output is pulled to ground)
Bit 11 = Output 2 switched on (output is pulled to ground)
Bit 2Reserved
Bit 3Reserved
Bit 41 = Bit 0 enabled (output 1 is controlled)
Bit 51 = Bit 1 enabled (output 2 is controlled)
Bit 6Reserved
Bit 7Reserved
hex
hex
hex
)
Example
Switch output 2 on without affecting output 1.
Request packet
01 0A 00 00 00 00 F2 22 DB 24
hex
September 2001 S6350 Reader Reference Guide
The response packet is similar to the request packet with the data section containing
‘00
’ for a successful write operation.
hex
Example
Response packet
01 0A 00 00 00 00 F2 00 F9 06
hex
Write successful.
RF Carrier on/off Command (F4
Switches the RF carrier on or off. The data section contains one byte FF
carrier on or 00
to turn the carrier off.
hex
Example
Switch the carrier on.
Request packet
01 0A 00 00 00 00 F4 FF 00 FF
The response packet is similar to the request packet with the data section containing
‘00
3.2.3 ISO/IEC FCD 15693 Part 3 Transmission Protocol
In addition to supporting the Tag-itTM protocol outlined within the preceding section, the S6350
Mid-Range HF-I Reader complies with the standard RF interface and transmission protocol of
ISO/IEC IS 15693-2 & 3. Please note that each of the ISO protocol command and response
packets outlined within the following sections are contained within the standard reader protocol
as outlined within Section 3.1. It should also be noted that the details of the individual ISO
15693-3 commands are not provided within this document, but are covered within the ISO/IEC
IS 15693-3:2001(E) Anti-Collision and Transmission Protocol document. The ISO 15693-3
commands that are specifically applicable to the S6350 Reader are defined within the following
table.
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
3.2.3.2 Request/Response Packet Format for ISO/IEC 15693-3
hex
hex
hex
hex
hex
hex
hex
hex
hex
hex
hex
The data packet from the host to the reader is known as the request and the reply from the
reader to the host as the response. The host is always the primary station and initiates all
communication sequences. These consist of request/response pairs where the host waits for a
response before continuing. All ISO/IEC 15693-3 command request packets are contained
within the standard reader command request packet format. In all cases, reader command 60
is used to pass through ISO 15693 Part 3 commands to the reader.
hex
September 2001 S6350 Reader Reference Guide
The Configuration Byte (ISO Command Data Byte 0)
As detailed in ISO/IEC 15693-2, the Configuration Byte (ISO Command Data Byte 0) is an 8bit byte that is used to configure the Data Coding Mode and Modulation Depth of the reader.
Modulation Depth
Bit 4 of the Configuration Byte is used to set Modulation Depth. When set high the
reader is configured for 100% Modulation Depth, when set low the reader will operate
at 10% to 30% (with a 20% nominal setting) Modulation Depth.
Data Coding Mode
Bit 0 of the Configuration Byte is used to set the Data Coding Mode. When set high
the reader is configured for Data Coding Mode 1 / 4; when set low the reader is
configured for Data Coding Mode 1 / 256.
Request Packet Format for ISO/IEC 15693-3
The request packet consists of the header, packet length, node address, command
flags, reader command (60
), ISO/IEC 15693-3 command/data bytes 0 to some
hex
number “n” (where byte 0 is the configuration byte) and the checksum.
ISO 15693 Command Data Request Structure
The structure of the ISO 15693 Command Data Request is contained within the Data
section of the ISO Command Data, bytes 1 - n. Specific to the S6350 reader, the ISO
15693 SOF, CRC16 and EOF fields must not be included in the message data packet.
Please refer to ISO/IEC 15693-3 for details about the ISO packet format). Specific to
the S6350 reader, the ISO 15693 SOF, CRC16 and EOF fields must not be included.
Note:
The protocol of S 6350 reader does not use the ISO 15693 SOF,
CRC16 and EOF fields within its message packet.
Note:
Please refer to ISO/IEC 15693-3 for details about the ISO message
packet.
September 2001 S6350 Reader Reference Guide
Request Packet Format
Standard reader Request Packet Format (See Section 3.1)
HeaderPacket
Length
Node
Address
Command
Flag
Command
ISO Command
Data
Config.
Data
Checksum
Byte
‘01
’LSBMSBLSBMSBFlags‘60
hex
1 byte2 bytes2 bytes1 byte1 byte
’XX
hex
hex
DataByte 1Byte 2
Byte 0bytes
1 - n
1 byten
bytes
Request Packet Description
FieldLengthDescription
Header1 byteDefines the start of the packet (01
hex
).
Packet Length2 bytesDefines the length of the packet, including checksum.
Node Address2 bytesDefines the Node address of the reader.
Command Flags1 byteDefines how a command will be executed.
Command1 byteDefines the command for the reader to execute (60
hex
ISO 15693-3 commands)
Data0 - n
Defines the data required by the reader for a command.
bytes
Checksum2 bytesByte 1 is an XOR checksum of all elements from the
header to the last byte
Response Packet Format for ISO/IEC 15693-3
2 bytes
for
Similar to the request packet, the response packet consists of the header, packet length, node
address, command flags, reader command (60
), ISO/IEC 15693-3 command/data bytes 0 to
hex
some number “m” and the checksum.
The ISO Response Data packet can come in one of two possible generic formats: (a) One for
the ISO Inventory Response, and (b) all other ISO responses. These will be highlighted in the
following sections.
Note:
With the exception of the ISO Inventory Response packet, the format
for each standard response packet is the same.
The Error Byte (ISO Response Data Byte 0)
There are three possible reader errors that can be generated in response to an ISO 15693
command. This error code will be returned within the Error Byte (Byte 0) of the ISO
Response Data. The error codes are as follows:
01
02
04
Transponder not found
hex
Command not supported
hex
Invalid flags
hex
September 2001 S6350 Reader Reference Guide
Response Packet Format
Standard reader Response Packet Format (See Section 3.1)
HeaderPacket
Length
Node
Address
Response
Flags
CommandChecksum
ISO Response
Data
Data
‘01
’LSBMSBLSBMSBFlags‘60
hex
hex
’
bytes
0 - ‘m’
Byte 1Byte 2
1 byte2 bytes2 bytes1 byte1 byte‘m’ bytes2 bytes
Response Packet Description
FieldLengthDescription
Header1 byteDefines the start of the packet (01
Packet
2 bytesDefines the length of the packet, including checksum.
hex
).
Length
Node
2 bytesDefines the Node address of the reader.
Address
Response
Flags
1 byteDefines the response of the reader to the request. Bit 4 defines the
error status; a set value indicates that an error has occurred. (Other
values reserved for future use)
Command1 byteDefines the command that the reader executed (60
for ISO 15693-3
hex
commands)
Data0-m
Defines the data returned by the reader in response to a command.
bytes
Checksum2 bytesByte 1 is an XOR checksum of all elements from the header to the
last byte of the data field. Byte 2 is calculated as (FF
) XOR (byte 1)
hex
September 2001 S6350 Reader Reference Guide
hex
3.2.3.3 Mandatory Commands
The data packet from the host to the reader is known as the request and the reply from the
reader to the host as the response. The host is always the primary station and initiates all
communication sequences. These consist of request/response pairs where the host waits for a
response before continuing. All ISO/IEC 15693-3 command request packets are contained
within the standard reader command request packet format. In all cases, reader command 60
is used to pass through ISO 15693 Part 3 commands to the reader.
hex
Inventory: Command Code (01
hex
)
ISO Inventory Request Command Packet
ISO Command DataHeaderPacket
Config. ByteData
’Byte 0bytes
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
byte
ISO Inventory Request Format
SOFFlagsInventory
Command
Not
‘O1
hex
Used1byte
Opt.
AFI
’1
byte
Mask
Length
1 byte0 - 7
ISO Inventory Response Packet
The inventory response packet format, while complying with ISO 15693, is unique to the
reader reader and is described within the following illustrations. All other ISO 15693 packet
responses contain ISO 15693 data as detailed within ISO/IEC FDIS 15693-3.
Mask
Value
bytes
1 - n
CRC16EOF
Not
Used
Not
Used
Check
-sum
2
bytes
Node
Length
‘01
’2 bytes2 bytes1 byte‘60
hex
Address
Response
Flags
Command
’bytes
hex
ISO Inventory Response Format
SOFValid Data
Flags
Not
Used
2 bytes
LSB/MSB
Collision
Flags
2 bytes
LSB/MSB
80-bit response to
Inventory Command
Data returned from 1
valid time slot
ISO Response DataHeaderPacket
Data
0 - m
Etc…CRC16EOF
st
Etc…Not
Used
Check
sum
2 bytes
Not
Used
September 2001 S6350 Reader Reference Guide
Valid Data & Collision Flags
Valid Data Flags: This 16-bit field corresponds to whether valid data was received in the 16
possible Time Slots. Bits 0 to 7 of the LSB respectively correspond to Time Slots1 to 8,
while bits 0 to 7 of the MSB correspond to Time Slots 9 to 16 respectively. A set bit
corresponds to valid data being received in that particular Time slot.
Collision Flags: This 16-bit field corresponding to whether a collision occurred in the 16
possible Time Slots. Bits 0 to 7 of the LSB respectively correspond to Time Slots 1 to 8,
while bits 0 to 7 of the MSB correspond to Time Slots 9 to 16 respectively. A set bit
corresponds to a collision being detected in that particular Time Slot.
Note:
It is possible to issue the Inventory Command for just 1 Time Slot
instead of 16. In this case, the preceding packet structure is still
valid; the required Valid Data flag and Collision flag reside in bit 0
of the LSB of their respective fields. It follows that issuing the
Inventory Command for a single Time Slot will result in a
maximum of one 80-bit response being returned
If both a Valid Data flag and its corresponding Collision flag are
both clear then this indicates that no transponder was detected for
that particular Time Slot.
Starting from Time Slot 1 and progressing to Time Slot 16, for each
Time Slot where a transponder was successfully read (without
collision), its 80-bit data is appended to the Data section of the
message packet.
September 2001 S6350 Reader Reference Guide
ISO Stay Quiet Request Command Packet: Command Code (02
Upon receipt of the Stay Quiet command, the ISO tag will enter the quiet state and will not
initiate a response. Note: There is no response to the Stay Quiet command.
The Stay Quiet command is always executed in the Addressed mode:
Select_flag set to 0
Addressed_flag set to 1
ISO Command DataHeaderPacket
Config. ByteData
’Byte 0bytes
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
hex
byte
ISO Stay Quiet Request Format
SOFFlagsStay Quiet
UIDCRC16EOF
Command
Not
1 byte‘O2
’8 bytesNot
hex
Used
Used
hex
1 - n
)
Check
-sum
2
bytes
Not
Used
3.2.3.4 Optional Commands
Read Single Block: Command Code (20
ISO Read Single Block Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
ISO Request Format
SOFFlagsRead
Not
Used
1 byte‘20
Node
Address
Single
Block
)
hex
Cmd
Flag
Cmd
ISO Command DataHeaderPacket
Config.
Byte
‘60
’Byte 0bytes
hex
byte
UIDBlock
number
’8 bytes1 byteNot
hex
Data
1 - n
CRC16EOF
Not
Used
Used
Check
-sum
2
bytes
September 2001 S6350 Reader Reference Guide
ISO Read Single Block Response Packet
Node
Length
‘01
’2 bytes2 bytes1 byte‘60
hex
Address
Response
Flags
Command
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsBlock Security
status
Not
1 byte1 byteBlock lengthNot
Used
ISO Response DataHeaderPacket
Check
Data
2 bytes
0 - m
Not
Used
Used
DataCRC16EOF
Not
Used
Used
sum
September 2001 S6350 Reader Reference Guide
ISO Write Single Block: Command Code (21
ISO Write Single Block Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
byte
ISO Request Format
SOF*FlagsWrite
UIDBlock
Single
Block
Not
1 byte‘21
’8 bytes1 byteNot
hex
Used
ISO Write Single Block Response Packet
Length
Node
Address
Response
Flags
Command
)
hex
ISO Command DataHeaderPacket
Config.
Byte
’Byte 0bytes
hex
CRC16EOF
number
Used
ISO Response DataHeaderPacket
Data
Data
1 - n
Check-
sum
2 bytes
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Lock Block: Command Code (22
hex
ISO Lock Block Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
byte
ISO Request Format
SOF*FlagsLock
UIDBlock
Block
Not
1 byte‘22
’8 bytes1 byteNot
hex
Used
ISO Lock Block Response Packet
Length
Node
Address
Response
Flags
Command
)
ISO Command DataHeaderPacket
Config. ByteData
’Byte 0bytes
hex
CRC16EOF
number
Used
ISO Response DataHeaderPacket
Data
Check-
sum
2 bytes
1 - n
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Read Multiple Blocks: Command Code (23
ISO Read Multiple Blocks Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
hex
byte
ISO Request Format
SOFFlagsRead
Multiple
UID1
Block
Blocks
Not
Used
1 byte‘23
’8
hex
1 byte1 byteNot
bytes
ISO Read Multiple Blocks Response Packet
Length
Node
Address
Response
Flags
Command
)
hex
ISO Command DataHeaderPacket
Config.
Data
Byte
’Byte 0bytes
1 - n
st
# of
blocks
CRC1
6
#
Used
ISO Response DataHeaderPacket
Data
Check-
sum
2 bytes
EOF
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsBlock
DataCRC16EOF
Security
Status
Not
1 byte1 byteBlock lengthNot
Used
Repeat as needed
1 - m
Used
Not
Used
Used
2
bytes
Not
Used
September 2001 S6350 Reader Reference Guide
ISO Write AFI: Command Code (27
hex
)
ISO Write AFI Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
hex
byte
ISO Request Format
SOF*FlagsWrite
UIDAFICRC16EOF
AFI
Not
1 byte‘27
’8 bytes1 byteNot
hex
Used
ISO Write AFI Response Packet
Length
Node
Address
Response
Flags
Command
ISO Command DataHeaderPacket
Config. ByteData
’Byte 0bytes
1 - n
Used
ISO Response DataHeaderPacket
Data
Chec
k-sum
2
bytes
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Lock AFI: Command Code (28
hex
)
ISO Lock AFI Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
byte
ISO Request Format
SOF*FlagsLock
UIDAFICRC16EOF
AFI
Not
1 byte‘28
’8 bytes1 byteNot
hex
Used
ISO Lock AFI Response Packet
Length
Node
Address
Response
Flags
Command
ISO Command DataHeaderPacket
Config.
Byte
’Byte 0bytes
hex
Used
ISO Response DataHeaderPacket
Data
Data
1 - n
Check-
sum
2 bytes
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Write DSFID: Command Code (29
hex
ISO Write DSFID Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
byte
ISO Request Format
SOF*FlagsWrite
UIDDSFIDCRC16EOF
DSFID
Not
1 byte‘29
’8 bytes1 byteNot
hex
Used
ISO Write DSFID Response Packet
Length
Node
Address
Response
Flags
Command
)
ISO Command DataHeaderPacket
Config. ByteData
’Byte 0bytes
hex
Used
ISO Response DataHeaderPacket
Data
Check-
sum
2 bytes
1 - n
Not
Used
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Lock DSFID: Command Code (2A
hex
)
ISO Lock DSFID Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
’Byte 0bytes
hex
byte
ISO Request Format
SOF*FlagsLock
UIDCRC16EOF
DSFID
Not
1 byte‘2A
’8 bytesNot
hex
Used
ISO Lock DSFID Response Packet
Length
Node
Address
Response
Flags
Command
ISO Command DataHeaderPacket
Config.
Byte
Used
ISO Response DataHeaderPacket
Data
1 - n
Not
Used
Data
Check-
sum
2 bytes
Check
sum
‘01
’2 bytes2 bytes1 byte‘60
hex
’bytes
hex
Response when Error_flag is set
SOFFlagsError CodeCRC16EOF
Not
1 byte1 byteNot
Used
OR
Response when Error_flag is not set
SOFFlagsCRC16EOF
Not
1 byteNot
Used
Note:
1 - m
Used
Used
2 bytes
Not
Used
Not
Used
* Bit 7 of the ISO 15693 protocol Option_Flag must be set to 1 for
all Write and Lock commands to respond properly.
September 2001 S6350 Reader Reference Guide
ISO Get Multiple Block Security Status: Command Code (2C
ISO Get Multiple Block Security Status Request Command Packet
Length
‘01
’2 bytes2 bytes1
hex
Address
Node
Cmd
Flag
Cmd
‘60
’Byte 0bytes
hex
byte
ISO Request Format
SOFFlagsGet Multiple
Block Security
UID1
Block
Status
Not
Used
1 byte‘2C
’8
hex
bytes
ISO Get Multiple Block Security Status Response Packet
4.2 ETSI Conformity........................................................................................43
4.3 CE Conformity ...........................................................................................43
4.4 Warranty and Liability ................................................................................43
July 2001 Series 6350 Reader Reference Guide
4.1 FCC Conformity
The S 6350 reader is an intentional radiator. The transmitter portion operates at 13.56 MHz and
is subject to FCC Part 15, Subpart C, “Intentional Radiator,” paragraph 15.225 (13.553-
13.567MHz). Radiated emissions from the device are subject to the limits in Section 15.209 of
the Rules outside of the 13.56 +/- 0.007 MHz band.
Note:
Any device or system incorporating the S 6350 reader, in full or in
part, needs to obtain FCC certification as part of the system within
which this reader unit resides. A system containing this product
may be operated only under an experimental license or final
approval issued by the relevant approval authority. Before any
such device or system can be marketed, an equipment
authorization must be obtained form the relevant approval
authority.
4.2 ETSI Conformity
Any device or system incorporating the S 6350 reader, in full or in part, may need to comply with
European Standard EN300330. It is the responsibility of each system integrator to have their
complete system tested and to obtain approvals as required from the local authorities before
operating or selling this system.
4.3 CE Conformity
Any device or system incorporating the S 6350 reader, in full or in part, may need to have a CE
Declaration of Conformity stating that it meets European EMC directive 99/5/EC. This must be
issued by the system integrator or user of such a system prior to marketing or operating it in the
European community.
4.4 Warranty and Liability
The "General Conditions of Sale and Delivery" of Texas Instruments Incorporated or a TI
subsidiary apply. Warranty and liability claims for defect products, injuries to persons and
property damages are void if they are the result of one or more of the following causes:
§ Improper use of the reader module.
§ Unauthorized assembly, operation and maintenance of the reader module.
§ Operation of the reader modules with defective and/or non-functioning safety and
protective equipment.
§Failure to observe the instructions during transport, storage, assembly, operation,
maintenance and setting up of the reader modules.
§ Unauthorized changes to the reader modules.
§ Insufficient monitoring of the reader modules' operation or environmental conditions.
§ Improperly conducted repairs.
§ Catastrophes caused by foreign bodies and acts of God.
Downloading Data to FLASH Memory
The S 6350 Reader FLASH memory contains two areas: the application area for the Reader
application firmware and a boot-loader area for the boot-loader firmware. The boot-loader
memory is factory locked.
After a reset the boot-loader firmware runs the following sequence:
• Control registers are initialized
• IO ports are initialized
• Application memory is scanned and verified
• If the application memory checksums are valid then control is transferred to the
application memory
•If the checksums fail then the boot-loader takes control of the communications.
Appendix A
The boot-loader will only accept the following commands:
• Initiate FLASH Loader Command (D0
• Send Data to FLASH Command (D8
• Read reader Version Command (F0
hex
hex
hex
)
)
)
The boot loader only operates at 57600 baud with 8 data bits, 1 start bit, 1 stop bit and no parity.
The application firmware will always accept the Initiate FLASH Loader Command (D0
hex
).
When this command is received by the application firmware, control is transferred to the bootloader. If the boot-loader does not receive a Send Data to FLASH Command (D8
seconds of the Initiate FLASH Loader Command (D0
) then a system reset is generated.
hex
) within 5
hex
The application firmware is provided in a single file and contains all the necessary checksums.
The file will always contain 29700 bytes of data.
The file must be sent to the reader in one session if any errors occur the whole file must be
resent. The file is sent in 225 segments, 132 bytes at a time (225 x 132 = 29700). Each segment
is sent using the Send Data to FLASH Command (D8
). The 132 bytes of data are contained
hex
in the data section of the packet.
Error Codes
Appendix B
Code numberMeaning
01
02
03
04
05
06
07
0F
Transponder not found
hex
Command not supported
hex
Packet BCC invalid
hex
Packet flags invalid for command
hex
General write failure
hex
Write failure due to locked block
hex
Transponder does not support function
hex
hex
Undefined error
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.