Philips SemiconductorsProduct Profile Security Transponder, SECT Features • • • • • • • • • • Programmable Security Transponder 48/48 bit challenge/response authentication Powerful security algorithm 128 bit Secret Key 32 bit device identification number 768 bit non-volatile user memory (EEPROM) EEPROM read/write protection capabilities Fully compatible with PCF7931/30 family 20 year EEPROM data retention Leadless stick shaped plastic package General Description PCF7935AS The PCF7935, SECT is a programmable Security Transponder employing challenge/response authentication ideally suited for contactless authentication and memory access between a basestation and the transponder. The SECT features a powerful security algorithm for vehicle immobiliser applications. The device is fully compatible with the PCF7931 read only and PCF7930 read/write transponder family, providing means for downward compatibility. The transponder features 1152 bit of non-volatile memory (EEPROM) from which 768 bit are reserved for user data storage. User data and configuration data may be exchanged in password mode for advanced pre-personalisation techniques. Memory access flags and a 56 bit password enable read and/or write protection of data. The SECT performs a 48 bit challenge/response authentication, employing a 128 bit Secret Key. In addition the SECT supports a 32 bit device identification number. The transponder power supply and system clock is derived from the magnetic component of the RF field generated by the basestation. The transponder is assembled in a small leadless stick shaped plastic package. Block Diagram PCF7935AS Stick Package Outline 11,9-12,1 A Contactless Interface Rectifier Voltage Limiter All Dimensions [mm] Control Logic Data Acqusition Power-On Reset EEPROM Access Control Clock Recovery 5,9-6,1 A L C Modulator Calculation Unit 4,4 - 4,6 4,9-5,1 1,9-2,1 Demodulator EEPROM Transponder IC June 1998 2,9-3,05 Cross Section A-A ( without Scale ) Block Diagram PCF7936AS Stick Package Outline 11.1 1. 39 ms 128 bit non-volatile user memory (EEPROM) EEPROM access in plain or cipher mode EEPROM read/write protection capabilities Read Only modes for downward compatibility Excellent device sensitivity in read and write mode.9-2.9-6.9-3.Philips Semiconductors Product Profile Security Transponder. The transponder provides 256 bit of non-volatile memory (EEPROM) from which 128 bit are reserved for user data storage. employing a Random Number.4 . 35 µT • 20 year EEPROM data retention • Leadless stick shaped plastic package General Description PCF7936AS The PCF7936. Memory access flags support read and/or write protection of data. The transponder meets the security and performance requirements of modern vehicle immobiliser applications.1 A Contactless Interface Control Logic All Dimensions [mm] Power-On Reset EEPROM Access Control Clock Recovery A L C Modulator Calculation Unit 5. Secret Key and Passwords. User data and configuration data may be exchanged in cipher mode for advanced prepersonalisation techniques.1 Demodulator EEPROM Transponder IC July 1998 2. Excellent device sensitivity (large distance) and short authentication time ensure easy application and outstanding system performance. Due to low power consumption the HITAG 2 provides excellent sensitivity in read and write mode. The transponder power supply and system clock is derived from the magnetic component of the RF field generated by the basestation.1 4. The device performs a fast mutual authentication algorithm. HITAG 2 is a programmable Security Transponder employing mutual authentication ideally suited for contactless authentication and memory access between a basestation and the transponder.05 Cross Section A-A ( without Scale ) .9-12. HITAG 2 Features • • • • • • • • • • Programmable Security Transponder 64/32 bit mutual authentication 32 bit unique device dentification number 48 bit Secret Key Fast authentication. In addition the HITAG 2 features a factory programmed 32 bit unique identification number to enable unambiguously device identification.9-5. The transponder is assembled in a small leadless stick shaped plastic package. The HITAG 2 features two Read Only modes for downward compatibility with common Read Only systems.4.6 Rectifier Voltage Limiter Data Acquisition 4. The transponder circuitry is compatible with the Security Transponder PCF7936AS.5V) • Device supply can be derived from LF Field Typical Application General Description PCF7941 The PCF7941 is a single chip high performance Security Transponder and Keyless Entry controller.Philips Semiconductors Preliminary Information Product Profile Security Transponder and RISC Controller. The Transponder circuitry meets the security and performance requirements of modern car immobilizer applications. separate Secret Keys are provided to ensure independent code characteristics. Code hopping generation may employ the transponder Calculation Unit. PCF7936AS. optional VDD VBAT P15 (XCLK) P17 (DOUT) P16 (XON) PCF7941 Security Transponder Contactless Interface IN1 EEPROM 384 Bit Calculation Unit Control Logic Transponder Interface RISC Controller 4 K ROM Timer Modulator Interrupt Control RC Oscillator Transmitter IR or UHF (PLL) P20 P21 P22 User Extensions 8 Bit RISC P14 (LED) I/O P13 (B3) P12 (B2) P11 (B1) P10 (B0) IN2 Power Management VSS Buttons RAM Li 3V November 1999 . Contactless code hopping synchronization may be accomplished via the conatctless interface. Excellent device sensitivity and short authentication time ensure outstanding system performance. 64 Byte RAM • On-chip < RC oscillator ( ±10%) • Short instruction execution time (as fast as 1µs) • 11 I/O ports. If the same security algorithm is applied for the Transponder and the Code Hopping function. The system timing is derived from a low tolerant on-chip RCOscillator. PD 300 nA) • Single battery cell operation (2. STARC lite Features • Compatible with Security Transponder. an external data rate reference clock may be applied for use with common PLL transmitter devices.1V to 5. for use in mixed systems that employ a STARC and a standard Security Transponder. If desired. PCF7936AS. at the same time. ideally suited for vehicle immobilizer applications that incorporate keyless entry functions. The RISC Controller circuitry is powered by an advanced low power 8-Bit RISC. The device features 11 I/O ports including up to four wake-up inputs for command button sensing. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition. • RISC Programmable Keyless Entry features • 384 Bit EEPROM • 16-Pin SO package Transponder • 64/32 bit mutual authentication calculation unit • 32 bit unique device identification number • 48 t bit Secre Key • Fast mutual authentication (39 ms) • EEPROM read/write protection capability • Excellent 5 sensitivity in read and write mode (3 µT) RISC Controller • Advanced 8-bit RISC architecture • 4 Kbyte ROM. while telegram transmission characteristics are controlled by the RISC. general purpose • Code hopping based on transponder calculation unit • Code hopping synchronization via transponder • Clock input to serve as external data rate reference • Programmable battery low detection • Low power consumption (300 µA. for use in mixed systems that employ a STARC and a standard Security Transponder. • RISC Programmable Keyless Entry features • Features battery charging from Transponder LF Field • Large 4 K Bit EEPROM for extended data storage • 16-Pin SO package Transponder • 64/32 bit mutual authentication calculation unit • 32 bit unique device identification number • 48 t bit Secre Key • Fast mutual authentication (39 ms) • EEPROM read/write protection capability • Excellent 5 sensitivity in read and write mode (3 µT) RISC Controller • Advanced 8-bit RISC architecture • 8 Kbyte ROM. Typical Application optional VDD VBAT P15 (XCLK) P17 (DOUT) P16 (XON) PCF7942 Security Transponder Contactless Interface IN1 EEPROM 4 K Bit Calculation Unit Control Logic Transponder Interface RISC Controller 8 K ROM Timer Modulator Interrupt Control RC Oscillator Transmitter IR or UHF (PLL) P20 P21 P22 User Extensions 8 Bit RISC P14 (LED) I/O P13 (B3) P12 (B2) P11 (B1) P10 (B0) IN2 Power Management VSS Buttons RAM Li 3V November 1999 . The RISC Controller circuitry is powered by an advanced low power 8-Bit RISC. The system timing is derived from a low tolerant on-chip RCOscillator. PCF7936AS. Excellent device sensitivity and short authentication time ensure outstanding system performance. 64 Byte RAM • On-chip < RC oscillator ( ±10%) • Short instruction execution time (as fast as 1µs) • 11 I/O ports. The device provides 4 K Bit of EEPROM for data storage with access control as defined by the application ROM. If the same security algorithm is applied for the Transponder and the Code Hopping function. If desired.1V to 5. Contactless code hopping synchronization may be accomplished via the conatctless interface. at the same time. The transponder circuitry is compatible with the Security Transponder PCF7936AS. Code hopping generation may employ the transponder Calculation Unit. STARC Features • Compatible with Security Transponder. PD 300 nA) • Single battery cell operation (2. The device supports battery charging from the Transponder LF Field under control of the RISC application program. PCF7936AS. The device features 11 I/O ports including up to four wake-up inputs for command button sensing. general purpose • Code hopping based on transponder calculation unit • Code hopping synchronization via transponder • Clock input to serve as external data rate reference • Programmable battery low detection • Programmable battery charging characteristics • Low power consumption (300 µA. separate Secret Keys are provided to ensure independent code characteristics. ideally suited for vehicle immobilizer applications that incorporate keyless entry functions. an external data rate reference clock may be applied for use with common PLL transmitter devices. while telegram transmission characteristics are controlled by the RISC. The Transponder circuitry meets the security and performance requirements of modern car immobilizer applications. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition.Philips Semiconductors Preliminary Information Product Profile Security Transponder and RISC Controller.5V) • Device supply can be derived from LF Field General Description PCF7942 The PCF7942 is a single chip high performance Security Transponder and Keyless Entry controller. POWER DOWN: 300 nA) Typical Application optional VBAT XCLK DOUT XON PCF7946 Security Transponder IN1 Contactless Interface EEPROM 384 Bit Calculation Unit Control Logic Remote Control User Interface Modulator Rolling Code Generator Control Logic RC Oscillator Transmitter IR or UHF (PLL) LED B3 B2 B1 B0 Command Buttons IN2 Power Management VSS TOUT Li 3V June 1999 . The device supports up to four user buttons and a LED for transmission acknowledgment.Philips Semiconductors Product Profile Security Transponder plus Remote Keyless Entry. The HITAG2PLUS features a clock input as an external data rate reference for use with common PLL transmitter devices.6V) • Low power consumption (ACTIVE: 0. PCF7936AS. The Transponder and rolling code algorithm employ the same security algorithm for easy system integration on the receiver side. HITAG2PLUS Features • Compatible with Security Transponder. • Rolling Code Generator for keyless entry • 14-pin SO package Transponder • 64/32 bit mutual authentication • 32 bit unique device identification number • Fast authentication. modulation and repetition rates of the remote transmission frame are configurable by the on-chip EEPROM. Separate Secret Keys are provided to ensure independent code characteristics. The Transponder circuitry meets the security and performance requirements of modern car immobiliser applications. Data rate. PCF7936AS at the same time. The device features automatic re-synchronisation of the rolling code via the transponder interface.3 mA.0V to 3. device identification. Code hopping upon each button press is provided. 39ms • 48 bit Secret Key • 128 bit user memory (EEPROM) • EEPROM read/write in cipher mode • EEPROM read/write protection capability • Excellent sensitivity in read and write mode Code Hopping Generator • Four user buttons (15 + 1 commands) • LED acknowledgment of transmission • 42 bit unidirectional code hopping • 48 bit Remote Secret Key • 114 bit message with run-in. Excellent device sensitivity (large distance) and short authentication time ensure easy application and outstanding system performance. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition. terminator and parity bits • Automatic code synchronisation via transponder • Programmable data rate and frame repetition rate • Clock input to support external data rate reference • Manchester encoding General Description PCF7946AT The HITAG2PLUS is a high performance monolithic Security Transponder and Remote Keyless Entry Chip ideally suited for car immobiliser applications that incorporate keyless entry functions. The Remote Control circuitry features a low power consumption to ensure long battery lifetime. function code. • Low tolerance on-chip RC oscillator (< ±10%) • Battery low indication • Single cell operation (2. The HITAG2PLUS transponder circuitry is compatible with the Security Transponder PCF7936AS to support mixed systems using a HITAG2PLUS and a standard Security Transponder. ideally suited for vehicle immobilisation applications. modulator. ASK modulation and receive characteristics are widely programmable for powerful system adaptation. Communication with the device and the transponder is provided via the serial microcontroller interface. CW: 200mAp • Low antenna driver output resistance. The ABIC. Antenna Clk Divider Timing Oscillator To microcontroller Driver TX2 RX EMI Filter DOUT Control Unit Synchron Demodulator SC Filter Amplifier CEXT Serial Interface DIN CLK Register VSS QGND May 1998 .5 V VDD XTAL1 XTAL2 PCF 7991 TX1 Modulation Pulse Gen. The carrier frequency can be derived from an on-chip oscillator or an external clock source. 5. The device enables system diagnostic functions by antenna fail detection features. 3.. Minimum Application Circuitry 4. ABIC Features • Extended system operating range due to powerful AM/PM demodulation technique • Ideally suited for "Intelligent Antenna" and "Active Antenna" architectures • High antenna drive capabilities.5 V • Power down mode: 7µA @ 5. A wide range of clock frequencies can be applied due to the programmable on-chip clock divider circuitry. 2mVpp • Large receiver dynamic range • Programmable clock divider.5 V • 14-pin SO package General Description PCF7991AT The PCF7991 is a highly integrated and powerful advanced basestation IC.Philips Semiconductors Product Profile Advanced Basestation IC. ABIC. PCF7991 employs a unique AM/PM demodulation technique that extends the system operating range compared with simple envelope detection.5 to 5. Optimised to operate with the Philips transponder family (PCF79xx). receiver gain and filter characteristics • Fast "read after write" receiver settling characteristics • On-chip receive EMI filter • Antenna failure mode detection • Few external components • Operating supply voltage: 4. Employing CMOS technology. the device features low power operation and supports Idle and Powerdown modes.. The device incorporates all necessary functions to facilitate reading and writing of transponders. The ABIC fits "Intelligent Antenna" as well as "Active Antenna" applications.5 . the ABIC can be used in combination with commonly available transponder that employ ASK modulation.5 Ω • Excellent receiver sensitivity.