IDIC Demo Kit 3
Contents
1. Vcc VSIN D7 BR4 BRS eE R41 RL O 0 Ote e e A BAV21 68K c8 Jack R12 R5 ae Rip a 1K 360 gt E 43K connector T1 Pea 2 22UF 22UF S e _ oe c5 Rr d H green oup oun _ L z no 7 BR3 DVS 5 14 15 7 Di L ra Power eo ole oO ape D4 D5 ge I fi 4 BAV21 gis IKIE 4 1NF EID afl RI RS 4K7 bd 4 7UF 22NF roK al 12 o 100K VBATT Components ici IC c2 f R2 D3 Z D2 for feedback 2 22NF 470K 1N4148 1N4148 aan jms Sole 10 vExT application BR 2 U2270B if DZ3 Hi 4 ZS 13 ISTANDBY lana 5 6 Data Out GaN n alo 3 6 e ne 2 OUTPUT aoe kag x 13 S00 cANT2 BRI Base station DZ2 O antenna A 1 ZS Danh aloe vm ore 5 6 4 3 700UH G a 5 RANT Li 16 6 L R10 16 4K7 220NF RI 6 CFE DZ1 R16 Mm 150 s6 T pY L eases RFon 4A Yellow 20 25 CTUNE L 2 d _ CTUNE2 Components for tuning application Z 100PF 180PF 3me Dz4 A oe RI gt 100 5 6 100 R18 R4 m e o 5 He 220 3 6K RIT l R13 L ps T2 Dp a Components 220 3 6K Z BAv21 r2 Z BAV21 for Centronics T3 Kr ae DT R6 4 gt interface pri AE N ed2. 5 6 S NZ ted Te 1 5K protection az RI elz TUNE 1 5K weage IMNO silo19npuootwas OINA L TEMIC Semiconductors Partlist of U2270B Demo Board Kit 3 Part Value Manufactorer Part Value Manufactorer IC U2270B TEMIC Semicond Resistors continued Diodes R6 1 5k D1 BAV21 R7 10k D2 1N4148 Vishay Telefunken R8 75k D3 1N4148 Vishay Telefunken R9 100 k D4 1N4148 Vishay Telefunken R10 4 7k D5 1N4148 Vishay Telefunken R11 100 D6 BAV21 R12 1k D7 BAV21 R13 3 6k D8 BAV21 R14 1 5k DZ1 BZX55C5 6V Vishay Telefunken R15 100 DZ2 BZX55C5 6V Vishay Telefunken R16 150 DZ3 BZX55C5 6V Vishay Telefunken R17 220 DZ4 BZX55C5 6V Vishay Telefunken R18 220 DZ5 BZX55C5 6V Vishay Telefunken R41 68 k DG TLUG5400 Vishay Telefunken R42 43k DY TLUY5400 Vishay Telefunken RANT 16 DT1 TLUR5400 Vishay Telefunken Capacitors DT2 TLUR5400 Vishay Telefunken CANTI 2 2 n Transistors CANT2 150 p U1 T1 LM7808 BD139 CTUNE1 100 p T2 BF420 CTUNE2 180 p T3 BF420 Cl 22n Resistors C2 2 2n R1 4 1k C5 Tantal 10u 16V R2 470k C6 4 7n R3 200 C7 220n R4 3 6k C8 Tantal 22u 16V R5 360 C9 Tantal 22 u 16 V C10 Tantal 4 7u The antenna coil used with
3. 1 2 high active mode low standby mode 2 3 NC Please note that standby mode is not available when using the 5 V supply Not available Four Stages Frequency Tuning The demo board has a built in tuning feature to match the resonant frequency of the LC circuits of the transponder and the base station Hence follows an increase of reliabil ity and operating distance There are three different tuning modes fixed frequency manual tuning and auto tuning mode In fixed frequency mode the demo kit has one fixed frequency nominally 125 kHz In manual tuning mode the user can select one of four frequency stages from 122 kHz to 128 kHz in steps of 2 kHz low semi low semi high and high assuming the U2270B on chip oscillator is tuned to 125 kHz these values are nominal values the actual values may slightly differ due to component tolerances The currently selected frequency stage is indicated on the demo board by the Tune 1 2 LEDs binary encoded When jumper BR1 is set between position 1 and 2 the fixed frequency mode is selected default To enable the manual and auto mode set jumper BR1 between positions 2 and 3 Tuning Mode BRI Disabled 1 2 Enabled 2 3 RF Field Status The status RF On is indicated by the yellow LED on the demo board 11 98 86 LL 1 ons uoneordde Surun pue 12600991 YIM WRISRIP mong 7 IP 0019 DICI
4. IDIC Demo Kit 3 is based on following parameters measured at f 125 kHz Inductance L 700 yH Coil diameter d 10 cm Winding number n 60 Wire diameter dw 0 25 mm Quality factor Q 35 11 98 TEMIC Semiconductors Description of the IDIC Demo Software IDS Hardware Requirements 6 IBM Personal Computer or 100 compatible with Intel 386 25 processor or higher 6 Parallel printer interface centronics VGA compatible graphics adapter Mouse 6 MS DOS 6 0 or higher U2270B base station demo board Transponder with f 125 kHz for example TK5530 TK5550 or TK5560 6 Connection cable Power supply DC 5 V or 12 V Settings Read Transponder Identification Demo V1 61 Write Transponder Software Structure The software is suitable for all TEMIC transponders All types of transponders and their particular features and functions can be controlled by one program Depending on which transponder type is selected the software automatically selects the features supported by this transponder type The software is developed for the use of the different transponders and their features that means the user does not need to care about the technical details Main Window The main window is the starting point of any operation Status fields at the right side of the bottom line indicate the current status of the system The menu items differ in some respect depending on the selected transponder
5. change to another mode Two different bit rates and modulations are possible The purpose of the ID code is to enable the base station to identify the transponder in order to select the corresponding crypto key for this particular transponder Synchronization can be carried out by using terminators or headers Both are used by the base station for synchronization Terminators are easy to detect because they are a violation of the modulation pattern The TK5560 is capable of using two different terminators They are referred to as Terminator 1 and Terminator 2 For details on these terminators please consult the e5560 data sheet The options of selecting the terminators are valid for ID mode only In all other modes including response mode Terminator 1 is always used For ID mode the following is valid If no terminator is selected the base station needs some other means for synchronization For this purpose the header is used The header 8 bits long is a normal piece of code Unlike the terminators the header is not a violation of the modulation scheme The user has to assure that there is only one header in the data stream otherwise the base station could lock on at various points of the data stream resulting in different read outs It is recommended to use terminators rather than headers First of all terminators are easier to detect which makes the data transfer more reliable An additional advantage is that the
6. program also checks the data stream for multiple headers if the header mode is used If some are found a special error report is shown 11 98 TEMIC Semiconductors Settings Read Transponder Write Transponder Special Identification Demo V1 61 Cal Transponder Code A7AAAAAASDSS5555505555555B8555555555555555555555502690387 TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 5 Transponder code output box Show Graphics F7 The show graphics display can be used to gain more information on the received data stream This is especially useful when the show transponder code operation has failed By using the show graphics display it is possible to determine many common faults on the transponder the hardware setup or the software setup of the equipment used This menu is started directly if the function key F7 is chosen A typical show graphics screen is shown in figure 6 Elements of the Show Graphics Windows The Oscilloscope Window The incoming bit stream is displayed as waveform using the upper part of the PC screen as an oscilloscope If a transponder has been decoded correctly and the header mode is in use the header will be printed white and the rest of the code will be printed in red color If terminator mode is used the code is printed in red color and no header is displayed Note The data format of the TK5560 is changed to
7. programmed are selected by ticking the box in the write column The data is entered using hexadecimal code characters 0 9 and A F To replace the default data contents delete the data using backspace and type in the new data 12 11 98 TEMIC Semiconductors Settings Read Transponder Write Transponder Special Identification Demo U1 61 m B10000081 B20800002 B30900003 B40000064 B50900005 BG00000p B70800007 Program TK5550 Blocki Block2 Block3 Block4 BlockS Block6 Block TK5558 program setup Write Lock urite Program amp Read TK555 Alt X Exit F Graphic F8 Program Figure 9 Program TK5550 The programming of the transponder is performed by the button Program TK5550 A programming with auto matic read out after programming is carried out by pressing the button Program amp Read TK5550 This is a useful option to verify if programming was successful Remark Programming requires higher field strength than reading If programming fails place the transponder closer to the base station coil and try again To protect the data from being overwritten the lock bit feature can be used Once set the information can not be overwritten anymore Note Activating the lock bit is not reversible Settings Read Transponder Write Transponder Password Function of the TK5550 The Password function allows to protect memory from unauthorized or accidental progra
8. the data format TK5530 and TK5550 For the TK5560 each block is transmitted with the LSB first Also the hexadecimal characters are sent and received with LSB first For example the bit stream for hexadecimal A would be 0101 for TK5560 and 1010 for TK5530 TK5550 This can be confusing but is due to the internal register structure of the devices For more information please refer to the e55xx data sheets Note The signal in the oscilloscope window is the same signal that can be seen on the demo board on Pin DATA OUT A HIGH signal on the oscilloscope window corresponds to a damped signal from the transponder A LOW signal on the oscilloscope window corresponds to anon damped signal from the transponder Please refer to the e55xx data sheets for details on damping and non damping 11 98 TEMIC Semiconductors white code Bit Length Histograma ed damping offsHiGH damping o Received waveform Oscilloscop window Histogram Transponder settings i Manchester Frequency stage Transponder Code Transponder code TEMIC IDIC Demo Software Press any Keu tO raur ass Figure 6 A typical show graphics window The Histogram The Transponder Settings The measured time frames are counted and their distribution is displayed in the histogram The length of the time frame is measured in microseconds and displayed on the x axis Every occ
9. type Many of the points listed below apply for all types These are explained first in the following chapter General Information for All Trans ponder Types The more specialized features e g the encryption algorithm of the TK5560 are explained later starting with the chapter Read Only Transponder TK5530 Special TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 2 Main window of the IDS V1 61 11 98 TEMIC Semiconductors General Information for All Transponder Types Settings Menu PC Setup Choosing the menu item PC Setup in the settings menu opens the PC setup dialog box This box displays all the centronics ports that are available for use on the PC for example LPT 1 and LPT 2 Select the port that is connected to the U2270B base station board and choose the button Set Transponder Type The type of TEMIC transponder that will be used has to be selected from the following list in the menu Set tings Transponder Type TK5530 read only type TK5550 read write type TK5560 read write crypto type Depending on the selection the user interface will be adjusted The software needs to know which transponder has been selected Some parameters differ from one transponder type to the other However these parameters are set automatically Also only menu options that are appropriate for this type of transponder are displayed in black all others are shaded Fo
10. user underlies no restrictions with regard to the data itself When using headers a piece of data may resemble the terminator This can be avoided by the use of terminators Programming ID Blocks If the transponder type TK5560 is selected in the dialog box Transponder type choosing the menu item Write Transponder Program memory shows the TK5560 program setup dialog box figure 13 All memory blocks of the TK5560 can be programmed The blocks to be programmed are selected by ticking the box in the write column The data is entered using hexadecimal code Characters 0 9 and A F To replace the default data contents delete the data using backspace and type in the new data Programming of the transponder is performed by the button Program TK5560 Programming with automatic read out after programming is carried out by button Program amp Read TK5560 This is a useful option to verify if programming was successful Remark Programming requires higher field strength than reading If programming fails place the transponder closer to the base station coil and try again Programming Crypto Blocks Blocks 5 8 contain the relevant data for the authentication procedure In order to demonstrate the encryption some actions have to be carried out beforehand The demo software emulates the AUT64 encryption algorithm To obtain an identical response all the data used as input has to be the same This is know
11. 0 L 0 EE REE eenn RRR etched ed ee ieee RR s Writing to the TK5550 occ a ek ca ae des ee Nek RGN aes aaa Password Function of the TK5550 ce eee ee Answer On Request AOR Function of the TK5550 ee ce ee eee Read Write Crypto Transponder TK5560 00 0 0 e eee eee eee Overview of the TK5560 Operating Modes 20 0000 setup forthe TK5960 RRR aR ake kas eh MSS aad aes ID Mode Programming ID Blocks 00 cee cece teen ene eee Programming Crypto Blocks 0 0 0 0 ccc ee eee Lock Crypto Key vicicptat cae eee ae eae wean ah east oe aaa Password Function of the TK5560 eee ee eee Authentication seresa Re LA RE deed N it ened eb ne ee eee desea Errors Special Commands ONN G G G G KN E LM LM LM LM LM HA NNN NY NY j me GO 11 11 98 TEMIC Semiconductors U2270B Base Station Board 3 R W Demo Software IDS V1 61 Getting Started Read this demo board user s manual Connect acentronics cable to the U2270B demo board and to the PC Connect either a 12 V or a 5 V power supply to the demo board using the jack connector or pins Vcc and GND For 12 V apply the jumper BR3 has to be closed jumpers BR4 and BR5 have to be open de fault setting For 5 V apply the jumpers BR3 BR4 and BR5 must be closed The status Power on is in dicated by a green LED 6 Start MS DOS Do not start the software from the Windows DOS shell since Windows is likely to interfe
12. 128 bit Custom header C 6h FFh gt Figure 7 Setup for the TK5530 11 98 TEMIC Semiconductors Read Write Transponder TK5550 Settings Read Transponder Write Transponder Special Identification Demo V1 61 Ca TK5556 setup Modulation coding 1 direct C manchester gt biphase Modulation coding 2 C direct lt FSK1 PSK1 PSKZ PSK3 PSK clock frequency C RF 2 RF 4 gt RFS Bitrate RF 8 RF 16 RF 32 RF 46 RF S RF 64 gt RF 106 Cc gt RF 128 L gt A C Ge L C L C C Fla L L L L L answer on request mode password o gt sequence terminator block terminator disable stop activation MAXBLK Header EJ lt 20h FFD L lock block Default 1 7 lt gt FSK2 FSKla lt gt FSK2a TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 8 Setup for the TK5550 Setup for the TK5550 If the transponder type TK5550 is selected in the dialog box Transponder type choosing the menu item Settings Setup shows the TK5550 setup dialog box figure 8 When leaving the menu using the Configure button the configuration block of the transponder is programmed The transponder should be placed close to the base station antenna Choosing the button Default enables a default adjustment but the configuration is not programmed to the transponder This box enables the following para
13. D mode the ID code is sent out in a loop If the TEMIC terminator is set the demo kit takes a part of the ID mode as a response Obviously this will not be the same as the calculated response and authentication fails To overcome this error retry the procedure If the error continues to occur check the settings of the transponder bit rate modulation type Different data used as input for encryption algorithm If the algorithm was started with the button start the data in the transponder s memory is not overwritten with the data of the data input window For the algorithm the PC uses the data inside the data input window the transponder uses the data of its memory blocks 5 8 If this data is not the same authentication fails To make sure the data is the same use Program amp Start Now the contents of the data input window are written into the memory blocks of the transponder before the algorithm is started This ensures that the data is identical 6 Transponder is too far away The farther away the transponder is from the field generating base station coil the more likely are data errors in the data stream The TK5560 has many features to detect errors in the data stream and therefore avoid programming with the wrong data If such an error is detected the trans ponder stops programming and enters ID mode The histogram window in the show graphics win dow provides a good indication about the quality o
14. TEMIC Semiconductors IDIC Demo Kit 3 Table of Contents IDIC Demo Kit 3 U2270B Base Station Board 3 R W Demo Software IDS V1 61 0 0 00000005 Getting Started eee were reer rer er eee eer ere rece errr eee ececec creer reerec rece eer eecce Using the TK5530 Read Only Transponder 00 0000 renerne Using the TK5550 Read Write Transponder 00 0 0 00 eee eee eee eee Using the TK5560 Read Write Crypto Transponder 0000005 Exit the Program General Description of the U2270B Base Station Board 00 0 0 0 00 e eee Power Supply Standby Mode Four Stages Frequency Tuning 0 0 0 cece eee eee RF Field Status Circuit Diagram Partlist of U2270B Demo Board Kit3 2 0 0 0 0 cece nes Description of the IDIC Demo Software IDS 0 0 cece eee tenes Hardware Requirements 0 cece ccc eee eee tence ene e eens Software Structure Main Window General Information for All Transponder Types 0 0 0 0 02 eee eee eee Sets Mens ces et ie ee RR eR Ree ae ed Be R T A E RENE Byte cis Read Transponder ns cs ose pig hata R ERER es RRS RAGES CAAA Reale elas Write Transponder 2sn seca hbo ew ed ea eee ehh eee aie N Read Only Transponder TK5530 0 2 0 eee eee setup for the TK5530 oot sk Swat Seka RRR Seba E RRR Read Write Transponder TK5550 ce eee eee Setup for the TK555
15. coding method TS1 min short bit time TS2 max short bit time TL1 min long bit time TL2 max long bit time Note To ensure valid computations the times have to be in the following order 50 us lt TS1 lt TS2 lt TL1 lt TL2 lt 1200 us Special Read timing setup max shorttime CTS max longtime CTL2Z TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 3 Read timing setup 11 98 TEMIC Semiconductors Write Timing Setup Settings Read Transponder Write Transponder Special Identification Demo V1 61 Cal Write timing setup Cus GAP Time ELM us ZERO Tine Cus ONE Time TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 4 Write timing setup In the dialog box Settings Timing setup Write the parameters for the write mode can be adjusted figure 4 The TEMIC write method is used The RF field is interrupted by gaps The time between the gaps is used to encode the information The length of the gap and for transmitting a one or a zero can be adjusted 6 GAP time ONE time Duration of switch on mode logic 1 The time the field is switched on between two gaps to be recognized as a valid 1 e ZERO time Duration of switch on mode logic 0 The time the field is switched on between two gaps to be regognized as a valid 0 Time of field interruption For detailed information about this write meth
16. d transponders can be read data can be written to the trans ponders and different operating modes of the transponders can be set A complete verification of the encryption algorithm used by the TEMIC Semiconductors crypto transponder TK5560 is also possible The demo board can be regarded as a base station using the PC as an intelligent user inter face terminal Power Supply The demo board can be operated from a 9 to 16 V supply rail standard application or a 5 V regulator The supply voltage is connected to the jack connector or between the pins Vcc and GND To switch the demo board to the adequate supply rail the jumpers BR3 BR4 and BR5 have to be set as shown in the following table Supply Voltage BR3 BR4 BRS5 9 to 16 V default Closed Open Open 5V Closed Closed Closed The status Power On is indicated by the green LED Warning Before switching on the power supply make sure that the voltage is set correctly The demo board is not protected against overvoltage Standby Mode If the demo board is operated with the default 12 V supply an additional power saving mode is available This mode is referred to as standby mode Setting jumper BR2 between position 1 and 2 makes the standby mode available In this case the demo software can switch the board to standby or active mode When jumper BR2 is set between 2 and 3 this function is disabled Standby BR2 STBY Mode Available
17. er type TK5560 is selected in the dialog box Transponder type choosing the menu item Settings Setup shows the TK5560 setup dialog box figure 12 When leaving the menu using the Configure button the configuration block is programmed The transponder should be placed close to the base station antenna Choosing the button Default achieves a default adjustment but the configuration is not programmed This box enables to set the following parameters 6 Bit rate The correct setting for the bit rate is important for the time frames in which the detected time is classified as valid Modulation coding Select the Manchester or Biphase coding If the wrong modulation type is selected the received data will not be interpreted correctly This results in most cases in an error message In a few rare cases the received data stream can be decoded in both modulation types and yield a valid result in each case Special Identification Demo V1 61 Cs _ TKS568 setup Bitrate c gt RF 32 gt RF 64 Modulation coding C 3 manchester gt biphase Lockbits C first 8 bits of block C J first 8 bits of block 1 C first 8 bits of block 5 L 1 block 8 ID code length C gt 64 bit gt 128 bit Terminator C Temic 1 terminator Temic 2 terminator No terminator Header EJ 00h FPO Default TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figu
18. f the received signal If a good signal is to be achieved the distribution is narrow the detected times are close together If the histogram is spread out wide the signal is difficult to decode via the base station If the detected times are outside the limits decoding is not possible This is indicated by coloring the usually gray area below the histogram red 11 98 19 TEMIC Semiconductors Special Commands Send Stop The command Write Transponder Send stop transmits the stop command to the TK5550 and the TK5560 After that the transponder terminates the modulation procedure A following read command Read Trans ponder shows that the transponder does not modulate anymore Reset Transponder The command Special Reset transponder switches off the magnetic field for two seconds Due to the field inter rupt a power on reset occurs to the transponder chip This is necessary in order to return from stop mode to read mode RF Field on Switches on the RF field of the base station antenna Control Pin DATA IN high The status RF on on the right side of the bottom line is displayed Note The status RE On is additionally indicated by the yellow LED on the demo board Settings Read Transponder Write Transponder RF Field off Switches off the RF field of the base station antenna Control Pin DATA IN low The status RF off on the right side of the bottom line
19. gram amp Read TK5550 6 For each additional reading use the function key F or F7 show transponder code or show graphics to read the used transponder key Using the TK5560 Read Write Crypto Transponder Select transponder type gt menu Settings Trans ponder type TK5560 6 Place a transponder close to the base station antenna e Enter the transponder s configuration details such as bit rate modulation coding and header menu Settings Setup 6 For non specialized applications use the default set tings Choose Configure this function programs the configuration block block 0 of the TK5560 Choose the function key F8 TK5560 program setup to program block 0 4 of the transponder memory Choose Program amp Read TK5560 6 For each additional reading choose F4 or F7 show transponder code or show graphics to read the used transponder key e For starting the encryption process choose gt menu Write transponder Crypto mode then choose Program amp Start Exit the Program Choose in the main window menu Settings Exit 11 98 TEMIC Semiconductors General Description of the U2270B Base Station Board The TEMIC Semiconductors IDIC demo board is capable of demonstrating the features of the TEMIC Semicon ductors transponder family It is used for several base station application examples With this boar
20. is displayed Standby on Switches the base station IC U2270B to standby mode sleep Control Pin STANDBY high The status STBY on on the right side of the bottom line is displayed Standby off Switches the base station IC U2270B to operation mode Control Pin STANDBY low The status STBY off on the right side of the bottom line is displayed Tuning This feature controls the four stage frequency tuning ap plication which is implemented on the base station demo board The available settings are shown in figure 16 For detailed information see General Description of the U2270B Base Station Board Special Identification Demo U1 61 CaJ Application Tuning mode Fixed Frequency High Frequency Semi high Frequency Semi low Frequency Lou Frequency Auto Tuning MIC Semiconductors Alt X Exit F Graphic F8 Program Figure 16 Frequency tuning application 20 11 98
21. meters to be set 6 Bitrate Select the required bit rate 6 Flags Many of the features of the TK5550 are selected by the setting of a particular bit in the configuration block For details on these features please refer to the e5550 data sheet 6 Header custom header 00 FF default E6 Modulation coding The two modulation coding stages can be programmed independently Please note that not all settings make sense As a simple guideline at least one of the modulators should be in direct mode For more information on how to configure the modulation stages please refer to the e5550 data sheet 6 PSK clock frequency This setting is only of interest if PSK is used Mod 1 direct Mod 2 PSK1 2 3 For details please refer to the e5550 data sheet 6 Lock bit of block 0 Setting this bit locks the configuration block of the transponder This means the modulation type bit rate etc are fixed and can not be changed ever again Please use this feature with care Note The U2270B is not able to read all the bit rates and modulation types displayed If a transponder is about to be configured in such a mode a warning is displayed Writing to the TK5550 If the transponder type TK5550 is selected in the dialog box Transponder type choosing the menu item Write Transponder Program memory shows the TK5550 program setup dialog box figure 9 All memory blocks of the TK5550 can be programmed The blocks to be
22. mming When active a write sequence is only accepted as valid if the password is recognized correctly by the IC The transponder regards the content of block 7 as password If no password is transmitted or the transmitted password does not match with the content of block 7 the IC will not enter programming mode It will then remain in ID mode Special Identification Demo U1 61 Ca Password mode TK5550 Password enable 02690307 TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 10 Password function of the TK55550 11 98 13 TEMIC Semiconductors A usual write sequence consists of the write opcode the lockbit 32 data bits and 3 address bits If the password is activated the IC expects the following sequence opcode 32 bits password lockbit 32 bits data 3 bits address If the IC is in password mode anything but the correct se quence with the correct password will be treated like an error and the IC immediately falls into ID mode To enable the transponder for password mode choose Settings Setup and select password Place the trans ponder near the reader coil of the base station and choose configure The transponder is now in password mode If the password function is not used disable password and configure the transponder Block 7 then can be used to store customer data To activate the password mode select Write Transpon der Password mode and
23. n as the crypto key which is the contents of the memory blocks 5 8 and also the challenge random number Assuming the same data is used both responses should be identical To ensure that the same data input is used for the algorithm the key information has to be identical both in the demonstration program and in the memory of the transponder 16 11 98 TEMIC Semiconductors Settings Read Transponder Write Transponder Special Identification Demo V1 61 m TK5560 program setup 0DDD00D D0000900 C9000900 D9000900 Write Blocki EEN Blockz LESH Blocks LESH Block4 LESH Progam TK5568 Program amp Read TK556 Alt X Exit F Graphic F8 Program Figure 13 Program ID blocks TK5560 This can be achieved in two ways 1 Type in the data content of blocks 5 8 in the dialog box crypto mode figure 13 and then write the data into the transponder Program amp Start This dialog box is reached through the menu Write Transponder Crypto mode Now the old contents of the transponder have been overwritten by the data that has been typed in the demo software by the user 2 Read out the data content of the transponder s memory blocks with direct access mode and type in this data at the data window of the crypto mode and press Start The data will not been programmed in the blocks but the crypto process is initialized Settings Read Transponder Write Transponder Once the memo
24. ndividual transponder by allocating different password data to each of them The AOR feature is only useful in combination with the password mode for configuration of password mode see Password Function To enable the transponder for AOR mode choose Settings Setup and select answer on request mode Place the transponder near to the reader coil of the base station and choose configure The transponder is now in AOR mode If the AOR function is not used disable answer on request mode To activate the AOR mode select Write Transpon der Answer on request mode and select AOR enable Enter the AOR enable code of the transponder in hexade cimal notation and select OK A single transponder can now be addressed in a field among several transponders Special Identification Demo V1 61 CalAnswer on request mo AOR enable 62696307 TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 11 Answer on request function of the TK5550 14 11 98 TEMIC Semiconductors To repeat an AOR the transponder has to be reset or taken out of the field A new AOR call is then executed by selecting OK in the Write Transponder Answer on request mode Box Warning If the transponder has once been configured to AOR mode the correct AOR wake up sequence password block 7 has to be known to read out the transponder s code To change the _ transponder s co
25. nfiguration e g deactivate AOR mode the password is also required During system design use this feature with care Read Write Crypto Transponder TK5560 Overview of the TK5560 Operating Modes In order to understand the operation of the demo kit and especially the emulation of the encryption algorithm it is useful to describe the most important modes of the TK5560 briefly The TK5560 can be operated in several internal modes each providing a special function The relevant modes for demonstration are e ID Mode This is the default mode after start up The transponder transmits an ID code This ID code is used by the base station to recognize the transponder and select the appropriate key for the following authentication procedure If for any reason a write procedure has failed the transponder terminates this procedure and returns to ID mode 6 Direct Access Mode In this mode the contents of one of the transponder s memory blocks is read out This is possible for all Settings Read Transponder Write Transponder blocks Direct access mode can also be used to verify write operations 6 Programming Mode and Crypto Mode In programming mode data is written to the memory of the TK5560 This applies to the memory location of the ID code blocks 1 4 as well as the crypto key blocks 5 8 For more information about other possible modes please refer to the e5560 data sheet Setup for the TK5560 If the transpond
26. od please refer to the e5550 or e5560 data sheets Note The times listed above are dependent on the LC circuit In order to receive and decode a signal reliably those times have to be adjusted correctly The default values are suitable for a wide range of applications However under certain circumstances such as different LC combinations adjustment is necessary Colors To change the color outfit of the main window choose this menu item Exit To exit the program choose this menu item Read Transponder The bit stream coming from the base station board to the PC s centronics interface is recorded and decoded by the demo software The code of the transponder can be displayed as a string of hexadecimal characters show transponder code or alternatively as waveform show graphics To read out the transponder first set the configuration If the reading fails check in the show graphics window Make sure the bit rate the modulation type and if used the header was set correctly Show Transponder Code F4 A measurement is started if the function key F4 is chosen or the menu item Read transponder Show transponder code is selected A message box shows the decoded transponder code figure 5 or an error report The transponder code is displayed as a string of hexadecimal characters If no code is detected or the program fails to receive a valid data format an error message is displayed The
27. p Start the challenge is sent to the transponder The computation of the valid result is carried out in parallel in the PC and the hardware of the 5560 transponder During the computation of the response the transponder sends out the checksum of the challenge This checksum is also computed by the demo software Once computation of the response is finished the transponder transmits the response in a loop separated by a terminator The demo kit synchronizes for this terminator and reads the response Finally the response and the checksum calculated by the software are compared with the actually received data If the result for the checksum and for the response is identical authentication was successful In this case the following window figure 14 is the output Special Identification Demo U1 61 Cal read checksum 32 32 read response 4ACB61B6 Crypto responses calculated checksum calculated response 4ACB61B6 Authentification is correct Alt X Exit F Graphic F8 Program Please wait Figure 15 Crypto mode output box 18 11 98 TEMIC Semiconductors Errors The response and the checksum received from the trans ponder are compared with the response and the checksum calculated by the demo kit software If one comparison fails the whole authentication fails The most common errors are 6 Transponder interrupts programming or chal lenge response procedure and returns to ID mode In I
28. r example all the write options are disabled for the read only transponder TK5530 Select the transponder type that will be used and choose the button OK For direct switching to the setup window choose the button Setup Read Transponder Identification Demo U1 61 Settings Cal min shorttime CTS1 gt min longtime lt TL1 Write Transponder Read Timing Setup Choosing the Settings Timing setup Read menu item opens the decoding setup dialog box figure 3 Here the timing parameters for the decoding can be set Under normal operating conditions the default values can be used The decoding principle in simple terms is to record the incoming data stream and process it afterwards During processing the received waveform is analyzed One step of the decoding principle is to determine the time elapsed between two state transitions at the data input This data is then used to retrieve the information from the signal In order to ensure reliable decoding certain time frames are defined If the times from the received signal are out side these given time frames the signal is classified as invalid and an error message is displayed The time frames differ depending on the LC circuit and the bit rates of the transponder Each bit rate has a default value This value however can be changed by the user if necessary The following parameters define the decoding frames for the biphase and manchester de
29. re 12 Setup for the TK5560 11 98 15 TEMIC Semiconductors 6 ID Code length The ID code can be 64 bits or 128 bits long If 64 bits are selected memory block 1 and 4 are transmitted When 128 bits are selected all blocks from 1 4 are transmitted e Terminator The transponder can be configured to use different terminators or none at all when it is in ID mode The terminators are sequence terminators They are inserted every 64 or 128 bits depending on the ID code length This setting refers to the ID mode only It has no effect on the challenge response part The terminator used there is the TEMIC 1 terminator and can not be altered by the user 6 Lock bits Setting the lock bits of a special memory part After locking the memory bits they cannot be programmed anymore Please use this feature with care 6 Adapt mode No function 6 Header custom header 00 FF default E6 ID Mode In ID mode the transponder transmits an identification data stream also referred to as ID code to the base station The ID code consists of the content of memory blocks 1 to 4 Depending on the configuration of the transponder the length of the ID code data stream is 64 or 128 bits The blocks read out are displayed as hexadecimal characters If the ID mode is set to 64 bits only block 1 and block 4 are transmitted The ID code is sent in a loop as long as the RF field is applied and no field gap causes the transponder to
30. re with the measurement procedures Make a new directory mkdir IDS Copy the IDS software from disk to harddisk A copy IDS C VIDS Change to the IDS directory gt cd IDS Start the program id1 exe Select used centronics port gt menu Settings PC setup Using the TK5530 Read Only Transponder Select transponder type gt menu Settings Trans ponder type TK5530 6 Place a transponder close to the base station antenna 6 Enter the transponder s configuration details such as bit rate modulation coding and header menu Settings Setup 6 For non specialized applications use the default set tings Choose Set to activate the new settings Choose the function key F4 or F7 show trans ponder code or show graphics to read the used transponder key Using the TK5550 Read Write Transponder Select transponder type gt menu Settings Trans ponder type TK5550 6 Place a transponder close to the base station antenna 6 Enter the transponder s configuration details such as bit rate modulation coding and header menu Settings Setup For non specialized applications use the default set tings Choose Configure this function programs the configuration block block 0 of the TK5550 Choose the function key F8 TK5550 program setup to program block 0 7 of the transponder memory Choose Pro
31. rmation is encoded in the time between field gaps A long time between two gaps is a 1 a short time is a 0 The times are set up in the dialog box Write timing setup which is described in the chapter Settings Menu Read Only Transponder TK5530 Setup for the TK5530 If the transponder type TK5530 is selected in the dialog box Transponder type choosing the menu item Settings Read Transponder Write Transponder Settings Setup shows the TK5530 setup dialog box figure 8 This box enables to set the following parameters 6 Bit rate RE 32 RF 40 and RF 64 Header sample header E6 or custom header 00 FF Modulation coding Manchester Modulation rising edge gt 1 falling edge gt 0 long bit time 0 two short bit times gt 1 Biphase Modulation 6 ID code length 64 or 128 bit If any other header than the standard TEMIC sample header is desired the custom header button has to be selected and the desired header has to be typed in the text field The text field accepts two hexadecimal characters each representing four bits After the selection of the correct configuration press the Set button Special Identification Demo U1 61 TK553 setup lt gt RF 40 RF 64 Header C Ep Custom gt Set Alt X Exit F Graphic F8 Program Modulation C Manchester lt gt Biphase ID code length C 64 bit lt gt
32. ry contents are the same i e the trans ponder and the demonstration program use the same key the authentication may proceed Lock Crypto Key During the design of an application it is useful to read out and or change the crypto keys For custom use the crypto keys can be locked which means that the crypto key can not be changed and read out anymore To lock the crypto keys choose Write Tansponder crypto mode and en able the Lock crypto keys Press Start the crypto key of the TK5560 is now locked Warning As the Lock Crypto Key function is not revers ible use this feature with care Special Identification Demo V1 61 e Crypto mode CCFFFAAAAAFFFFFF AFFEAFFE 6B25CF18 4387EBAD 14236748 Block5 Block6 Block Block amp Lock crypto keys Lock block 9 Program amp Start Challenge TEMIC Semiconductors Alt X Exit F Graphic F8 Program Figure 14 Crypto mode input box 11 98 17 TEMIC Semiconductors Password Function of the TK5560 The TK5560 is capable of using a password To lock the password choose Write Transponder Crypto mode and enable Lock block 9 The content of block 9 is re garded as password Note The password function has not yet been imple mented to the IDS V1 61 A later update version will support the password feature of the TK5560 Block 9 can be read out by direct access if it has not been locked Warning As the Lock Block 9 f
33. select the Password enable Enter the valid password of the transponder block 7 in hexadecimal notation The transponder now can be pro grammed The password mode will be used in any write sequence if the password enable box is ticked If the box is not ticked a normal write sequence is carried out Warning To change the transponder s configuration e g deactivate password mode the password is also required During system design use this feature with care Answer On Request AOR Function of the TK5550 This feature is used to address individual transponder when several transponder are in the field A transponder Settings Read Transponder Write Transponder with activated AOR feature remains silent when a RF field is applied It waits for an AOR wake up sequence Once the sequence was transmitted the transponder wakes up and starts transmitting in ID mode and remains active until a power on reset occurs or a stop mode sequence is received A transponder that has been activated by an AOR sequence behaves exactly like a transponder in standard read mode An AOR sequence consists of the standard write opcode followed by 32 password bits The AOR sequence is then compared with the content of block 7 Gust like the password Only if the sequence data and the data in block 7 are identical the AOR is recognized and this transponder is woken up and starts ID mode All other transponder remain silent This allows to address i
34. the transponder Direct Access The direct access mode is available for TK5550 and TK 5560 transponders It is used to read out one block of the transponder s memory It is possible to read out data from blocks that are usually not transmitted especially if the transmitted bit stream is limited by the MaxBlock setting see e5550 data sheet By using direct access the data contents of these blocks can also be read out For the e5550 the software does not support terminators as synchronization method for direct access To use the direct access feature with the e5550 use a header in each block which is identical to the transponder s header 10 11 98 TEMIC Semiconductors A later IDS update version will support a block termina tor to simplify the direct access mode The direct access command is transferred to the trans ponder by entering the menu item Read transponder Direct Access The transponder responds with transmitting the selected block in a loop Leaving the menu will set the transponder into normal mode Write Transponder To transfer data to the R W transponders TK5550 and TK5560 the DATA IN Pin of the U2270B demo board is triggered by the demo software through the centronics interface By switching the RF field on and off in a certain pattern the data is transmitted serially to the transponder For details on the TEMIC write method please refer to the e5550 or e5560 data sheet The info
35. unction is not reversible use this feature with care Authentication To start the authentication procedure the menu Write Transpondercode Crypto mode has to be activated The demo kit can be used to demonstrate the encryption feature of the TK5560 read write crypto transponder The PC based software provides a user interface that enables the configuration of the transponder Furthermore the demo kit acts as a base station and a real challenge response authentication procedure can be carried out The AUT64 encryption algorithm used in the transponder is fully emulated by the software of the demo kit The algorithm is carried out by hardware in the transponder and by software in the PC Both results are displayed and authentication is verified or not The user can change the Settings Read Transponder Write Transponder input parameters and key data of the encryption algorithm and observe the results Set Challenge The challenge is typed in by the user It is then stored in an ASCII file called challeng dat If the program is restarted the previously used challenge is loaded and displayed in the crypto mode window To change the challenge simply delete the characters and type in the new challenge The menu item crypto mode starts the actual authentication procedure The software reads the ASCII files key dat and challeng dat to obtain the initial values of the input for the algorithm With Start or Program am
36. urrence of a particular time frame is counted and the number of occurrences determines the length of the red line The two boxes below show the permitted values and the actually measured values The permitted values are limited by the minimum and maximum times at either side of the boxes The maximum spread of the actually measured values is displayed as gray area The limits for the time frames vary depending on the bit rate chosen If the measured values are outside the given limits the signal cannot be decoded reliably any more and an error message is displayed A common error is to read data from a transponder using a different bit rate If such a problem occurs the settings of the transponder as well as the base station board should be checked The precision of the measured times is dependent on the PC used The tolerance of the measured times is about 10us The bit stream is then decoded with the Manchester or Biphase method see data sheet e55xx Here the settings of the demo board are displayed The transponder type the bit rate used the modulation coding used and if applicable the header Please note that these settings are not necessarily identical to the settings of the transponder They should be the same but the user has to be aware of the fact that the way the transponder is set up is not checked by the software of the demo board The Transponder Code At the bottom of the screen a text field shows the code of
Download Pdf Manuals
Related Search