View HCS365T_1247858.PDF datasheet online --- IC-ON-LINE

Datasheet File OCR Text:

HCS365
KEELOQ(R) Code Hopping Encoder
FEATURES
Security
* * * * * * * Two programmable 32-bit serial numbers Two programmable 64-bit crypt keys Two programmable 60-bit seed values Each transmission is unique 67/69-bit transmission code length 32-bit hopping code Crypt keys are read protected
PACKAGE TYPES
PDIP, SOIC S0 S1 S2 S3/SHIFT/ RFEN 1 8 VDD LED DATA Vss
HCS365
2 3 4
7 6 5
Operating
* * * * * * * * * * 2.05-5.5V operation Four button inputs 15 functions available Four selectable baud rates Selectable minimum code word completion Battery low signal transmitted to receiver Nonvolatile synchronization data PWM, VPWM, PPM, and Manchester modulation Button queue information transmitted Dual Encoder functionality
HCS365 BLOCK DIAGRAM
Oscillator RESET circuit LED LED driver Controller Power latching and switching
EEPROM
Encoder
DATA
32-bit SHIFT register VSS VDD S3/SHIFT S2 S1 S0 RFEN
Button input port
Other
* On-chip EEPROM * On-chip tuned oscillator (10% over voltage and temperature) * Button inputs have internal pull-down resistors * LED output * PLL control for ASK and FSK * Low external component count
GENERAL DESCRIPTION
The HCS365 is a code hopping encoder designed for secure Remote Keyless Entry (RKE) and secure remote control systems. The HCS365 utilizes the KEELOQ (R) code hopping technology, which incorporates high security, a small package outline, and low cost to make this device a perfect solution for unidirectional authentication systems and access control systems. The HCS365 combines a hopping code generated by a nonlinear encryption algorithm, a serial number, and status bits to create a secure transmission code. The length of the transmission eliminates the threat of code scanning and code grabbing access techniques.
Typical Applications
The HCS365 is ideal for Remote Keyless Entry (RKE) applications. These applications include: * * * * * * Automotive RKE systems Automotive alarm systems Automotive immobilizers Gate and garage door openers Identity tokens Burglar alarm systems
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 1
HCS365
The crypt key, serial number, and configuration data are stored in an EEPROM array which is not accessible via any external connection. The EEPROM data is programmable but read protected. The data can be verified only after an automatic erase and programming operation. This protects against attempts to gain access to keys or manipulate synchronization values. In addition, the HCS365 supports a dual encoder. This allows two manufacturers to use the same device without having to use the same manufacturer's code in each of the encoders. The HCS365 provides an easy to use serial interface for programming the necessary keys, system parameters, and configuration data. - Simple Learning The receiver uses a fixed crypt key. The crypt key is common to every component used by the same manufacturer. - Normal Learning The receiver derives a crypt key from the encoder serial number. Every transmitter has a unique crypt key. - Secure Learning The receiver derives a crypt key from the encoder seed value. Every encoder has a unique seed value that is only transmitted by a special button combination. * Manufacturer's Code - A unique and secret 64bit number used to derive crypt keys. Each encoder is programmed with a crypt key that is a function of the manufacturer's code. Each decoder is programmed with the manufacturer code itself. The HCS365 code hopping encoder is designed specifically for keyless entry systems. In particular, typical applications include vehicles and home garage door openers. The encoder portion of a keyless entry system is integrated into a transmitter carried by the user. The transmitter is operated to gain access to a vehicle or restricted area. The HCS365 is meant to be a costeffective yet secure solution to such systems requiring very few external components (Figure 2-1). Most low end keyless entry transmitters are given a fixed identification code that is transmitted every time a button is pushed. The number of unique identification codes in a low end system is usually a relatively small number. These shortcomings provide an opportunity for a sophisticated thief to create a device that `grabs' a transmission and retransmits it later or a device that quickly `scans' all possible identification codes until the correct one is found. The HCS365, on the other hand, employs the KEELOQ code hopping technology coupled with a transmission length of 67 bits to virtually eliminate the use of code `grabbing' or code `scanning'. The high security level of the HCS365 is based on the patented KEELOQ technology. A block cipher based on a block length of 32 bits and a key length of 64 bits is used. The algorithm obscures the information in such a way that if a single hopping code data bit changes (before encryption), statistically more than 50% of the encrypted data bits will change.
1.0
SYSTEM OVERVIEW
Key Terms The following is a list of key terms used throughout this data sheet. For additional information on KEELOQ and code hopping, refer to Technical Brief (TB003). * RKE - Remote Keyless Entry * Button Status - Indicates what button input(s) activated the transmission. Encompasses the 4 button status bits S3, S2, S1 and S0 (Figure 3-2). * Code Hopping - A method by which a code, viewed externally to the system, appears to change unpredictably each time it is transmitted. * Code Word - A block of data that is repeatedly transmitted upon button activation (Figure 3-2). * Transmission - A data stream consisting of repeating code words (Figure 4-1). * Crypt Key - A unique and secret 64-bit number used to encrypt and decrypt data. In a symmetrical block cipher such as the KEELOQ algorithm, the encryption and decryption keys are equal and will therefore be referred to generally as the crypt key. * Encoder - A device that generates and encodes data. * Encryption Algorithm - A recipe whereby data is scrambled using a crypt key. The data can only be interpreted by the respective decryption algorithm using the same crypt key. * Decoder - A device that decodes data received from an encoder (i.e., HCS5XX). * Decryption Algorithm - A recipe whereby data scrambled by an encryption algorithm can be unscrambled using the same crypt key. * Learn - Learning involves the receiver calculating the transmitter's appropriate crypt key, decrypting the received hopping code and storing the serial number, synchronization counter value, and crypt key in EEPROM. The KEELOQ product family facilitates several learning strategies to be implemented on the decoder. The following are examples of what can be done.
DS41109D-page 2
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
As indicated in the block diagram on page one, the HCS365 has a small EEPROM array which must be loaded with several parameters before use; most often programmed by the manufacturer at the time of production. The most important of these are: * A serial number, typically unique for every encoder * A crypt key * An initial synchronization value The crypt key generation typically inputs the transmitter serial number and 64-bit manufacturer's code into the key generation algorithm (Figure 1-1). The manufacturer's code is chosen by the system manufacturer and must be carefully controlled as it is a pivotal part of the overall system security.
FIGURE 1-1:
Production Programmer
CREATION AND STORAGE OF CRYPT KEY DURING PRODUCTION
HCS365 EEPROM Array
Serial Number Crypt Key Sync Counter
Transmitter Serial Number
Manufacturer's Code
Key Generation Algorithm
Crypt Key
. . .
The valid synchronization counter is the basis behind the transmitted code word changing for each transmission; it increments each time a button is pressed. Each increment of the synchronization value results in more than 50% of the hopping code bits changing. Figure 1-2 shows how the key values in EEPROM are used in the encoder. Once the encoder detects a button press, it reads the button inputs and updates the synchronization counter. The synchronization counter and crypt key are input to the encryption algorithm and the output is 32 bits of encrypted information. This data will change with every button press while its value will appear to `randomly hop around'. Hence, this data is referred to as the hopping portion of the code word. The 32-bit hopping code is combined with the button information and serial number to form the code word transmitted to the receiver. The code word format is explained in greater detail in Section 4.1. A receiver may use any type of controller as a decoder. Typically, it is a microcontroller with compatible firmware that allows the decoder to operate in conjunction with an HCS365 based transmitter. A transmitter must first be `learned' by the receiver before its use is allowed in the system. Learning includes calculating the transmitter's appropriate crypt key, decrypting the received hopping code, storing the serial number, storing the synchronization counter value, and storing crypt key in EEPROM.
In normal operation, each received message of valid format is evaluated. The serial number is used to determine if it is from a learned transmitter. If the serial number is from a learned transmitter, the message is decrypted and the synchronization counter is verified. Finally, the button status is checked to see what operation is requested. Figure 1-3 shows the relationship between some of the values stored by the receiver and the values received from the transmitter. For detailed decoder operation, see Section 7.0.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 3
HCS365
FIGURE 1-2:
EEPROM Array Crypt Key Sync Counter Serial Number
BUILDING THE TRANSMITTED CODE WORD (ENCODER)
KEELOQ Encryption Algorithm
Button Press Information
Serial Number
32 Bits Encrypted Data
Transmitted Information
FIGURE 1-3:
BASIC OPERATION OF RECEIVER (DECODER)
1 Received Information EEPROM Array
Button Press Information
Serial Number
32 Bits of Encrypted Data
Manufacturer Code
2
Check for Match
Serial Number Sync Counter Crypt Key 3 KEELOQ Decryption Algorithm
Decrypted Synchronization Counter Perform Function 5 Indicated by button press
Verify 4 Counter
NOTE: Circled numbers indicate the order of execution.
DS41109D-page 4
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
2.0 DEVICE DESCRIPTION
As shown in the typical application circuits (Figure 2-1), the HCS365 is an easy device to use. It requires only the addition of buttons and RF circuitry for use as the encoder in your security application. A description of each pin is described in Table 2-1. Refer to Figure 2-2 for information on the I/O pins. Note: S0-S3 inputs have pull-down resistors. VIN should be tied high if the step-up regulator is not used. The HCS365 will normally be in a low power SLEEP mode. When a button input is taken high, the device will wake up, start the step-up regulator, and go through the button debounce delay of TDB before the button code is latched. In addition, the device will then read the configuration options. Depending on the configuration options and the button code, the device will determine what the data and modulation format will be for the transmission. The transmission will consist of a stream of code words and will be transmitted TPU after the button is pressed for as long as the buttons are held down or until a time-out occurs. The code word format can be either a code hopping format or a seed format. The time-out time can be selected with the Time-out Select (TSEL) configuration option. This option allows the time-out to be set to 0.8s, 3.2s, 12.8s, or 25.6s. When a time-out occurs, the device will go into SLEEP mode to protect the battery from draining when a button gets stuck. If the device is in the transmit process and detects that a new button is pressed, the current code word will be aborted, a new code word will be transmitted and the time-out counter will RESET. If all the buttons are released, a minimum number of code words will still be completed. The minimum code words can be set to 1, 2, 4, or 8 using the Minimum Code Words (MTX) configuration option. If the time for transmitting the minimum code words is longer than the time-out time, the device will not complete the minimum code words.
TABLE 2-1:
Name S0 S1 S2 S3/ SHIFT/ RFEN VSS DATA LED VDD
PIN DESCRIPTIONS
Description Switch input 0 Switch input 1 Switch input 2 Switch input 3, SHIFT button or RF Enable output Ground reference Data output pin/ Open drain output for LED Positive supply voltage
Pin Number 1 2 3 4
5 6 7 8
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 5
HCS365
The HCS365 has an onboard nonvolatile EEPROM. This EEPROM is used to store user programmable data and the synchronization counter. The data is programmed at the time of production and includes the security related information such as encoder keys, serial numbers, discrimination values, and seed values. All the security related options are read protected. The initial counter value is also programmed at the time of production. From then on the device maintains the counter itself. The HCS365 has built in redundancy for protection and can recover from counter corruption. The counter will not increment if the previous write was corrupted by low voltage RESET or power failure during TPLL. Instead, the counter will revert back to the previous count and the HCS370 will attempt to correct the bad bits. This will continue on every button press until the voltage increases and the counter is successfully corrected.
FIGURE 2-1:
VDD
TYPICAL CIRCUITS
B0 B1 B2
S0 S1 S2 RFEN
VDD LED DATA VSS RF PLL DATA IN ENABLE
Three buttons remote with PLL control B4 B3 B2 B1 B0 VDD
S0 S1 S2 S3
VDD LED DATA VSS Tx out
Five buttons remote control (Note) VDD B1 B0 Tx2 Tx1
S0 S1 S2 SHIFT
VDD LED DATA VSS Tx out
DUAL Transmitter remote control Note: Up to 15 functions can be implemented by pressing more than one button simultaneously or by using a suitable diode array.
DS41109D-page 6
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
FIGURE 2-2: I/O CIRCUITS FIGURE 2-3: BASIC FLOW DIAGRAM OF THE DEVICE OPERATION
START Sample Buttons
ZIN
Figure 2-2(A)
S0, S1, S2 Inputs
Get Config
Seed TX? No Increment Counter Figure 2-2(B)
VDD
Yes
Read Seed
Encrypt
PFET DATA I/O NFET DATA OUT
Transmit
TimeOut No No MTX Figure 2-2(C) Yes
VDD P DATA, RFEN STEP Outputs
Yes
STOP
No Buttons No
Yes
N
Seed Time No No New Buttons Yes
Yes
Seed Button No
Yes
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 7
HCS365
3.0 EEPROM ORGANIZATION
A summary of the HCS370 EEPROM organization is shown in the three tables below. The address column shows the starting address of the option and its length or bit position. Options larger than 8 bits are stored with the Most Significant bits at the given address. Enough consecutive 8-bit blocks are reserved for the entire option size. Options such as SEED1, which have a length that is not an exact multiple of 8 bits, is stored right justified in the reserved space. Additional smaller options such as SDBT1 may be stored in the same address as the Most Significant bits.
TABLE 3-1:
Symbol KEY1 SEED1 SYNC1 SER1 DISC1 MSEL1
ENCODER1 OPTIONS (SHIFT=0)
Address16:Bits 1E: 64 bits 14: 60 bits 00: 20 bits 00: 18 bits 10: 32 bits 1C: 10 bits 1C: ---- 32-Encoder Key Encoder Seed Value Encoder Synchronization Counter (CNTSEL=1) Encoder Synchronization Counter (CNTSEL=0) plus overflow Encoder Serial Number Encoder Discrimination value Transmission Modulation Format Value2 00 01 10 11 Format PWM Manchester VPWM PPM 10 TE = 1 32 bits = 1 Enable = 1 Enable = 1 Once = 1 100 ms = 1 Enable = 1 Production = 1 Time (s) 0.0 0.8 1.6 3.2 4.1 3.2 5.5 4.1 5.3 5.3 3.3 3.3 3.3 Value2 00 01 10 11 3.3 Description(1) Reference Section 3.2.2 3.3 3.2, 3.2.1 3.2.2 3.2, 3.2.1 4.1
HSEL1 XSER1 QUEN1 STEN1 LEDBL1 LEDOS1 SDLM1 SDMD1 SDBT1 SDTM1
1C: ---4 ---1C: --5- ---1C: -6-- ---1C: 7--- ---3F: -6-- ---3F: 7--- ---3C: ---- ---0 3C: ---- --114: 7654 ---3C: ---- 32--
Header Select Extended Serial Number Queue counter Enable START/STOP Pulse Enable Low Voltage LED Blink LED On Time Select(1) Limited Seed Seed Mode Seed Button Code Time Before Seed Code Word(1)
4 TE = 0 28 bits = 0 Disable = 0 Disable = 0 Never = 0 50 ms = 0 Disable = 0 User = 0
BSEL1
3C: --54 ----
Transmission Baud Rate Select(1)
Value2 00 01 10 11
TE (s)
100 200 400 800 Time (ms) 00 6.4 51.2 102.4
4.1
GSEL1
3C: 76-- ----
Guard Time Select
(1)
Value2 00 01 10 11
4.1, 5.2
Note 1: All Timing values vary 10%.
DS41109D-page 8
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
TABLE 3-2:
Symbol KEY2 SEED2 SYNC2 SER2 DISC2 MSEL2
ENCODER2 OPTIONS (SHIFT=1)
Address16:Bits
Description(1) Encoder Key Encoder Seed Value Encoder Synchronization Counter (CNTSEL=1) Encoder Synchronization Counter (CNTSEL=0) plus overflow Encoder Serial Number Encoder Discrimination value Transmission Modulation Format Value2 00 01 10 11 Format PWM Manchester VPWM PPM 10 TE = 1 32 bits = 1 Enable = 1 Enable = 1 Once = 1 100 ms = 1 Enable = 1 Production = 1 Time (s) 0.0 0.8 1.6 3.2 TE (s) 100 200 400 800 Time (ms) 2 TE 6.4 51.2 102.4
Reference Section 3.2.1 3.3 3.2, 3.2.1 3.2, 3.2.2 3.2, 3.2.1 4.1
34: 64 bits 2A: 60 bits 08: 20 bits 08: 18 bits 26: 32 bits 32: 10 bits 32: ---- 32--
HSEL2 XSER2 QUEN2 STEN2 LEDBL2 LEDOS2 SDLM2 SDMD2 SDBT2 SDTM2
32: ---4 ---32: --5- ---32: -6-- ---32: 7--- ---3D: -6-- ---3D: 7--- ---3E: ---- ---0 3E: ---- --12A: 7654 ---3E: ---- 32--
Header Select Extended Serial Number Queue counter Enable START/STOP Pulse Enable Low Voltage LED Blink LED On Time Select(1) Limited Seed Seed Mode Seed Button Code Time Before Seed Code word(1)
4 TE = 0 28 bits = 0 Disable = 0 Disable = 0 Never = 0 50 ms = 0 Disable = 0 User = 0 Value2 00 01 10 11
4.1 3.2 5.5 4.1 5.3 5.3 3.3 3.3 3.3 3.3
BSEL2
3E: --54 ----
Transmission Baud Rate Select(1)
Value2 00 01 10 11
4.1
GSEL2
3E: 76-- ----
Guard Time Select(1)
Value2 00 01 10 11
4.1, 5.2
Note 1: All Timing values vary 10%. 2: Voltage thresholds are 150 mV.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 9
HCS365
TABLE 3-3:
Symbol WAKE
DEVICE OPTIONS
Address16:Bits
Description(1) Wake-up(1) Value2 00 01 10 11 Value No Wake-up 75 ms 50% 50 ms 33.3% 100 ms 16.7% 20 bits = 1 Enable = 1 3.2V = 1 FSK = 1 Value 1 2 4 8 Time(s) 0.8 3.2 12.8 25.6 Enable = 1 Enable = 1
Reference Section 4.1
3F: ---- --10
CNTSEL VLOWL VLOWSEL PLLSEL MTX
3F: ---- -2-3F: ---- 3--3F: ---4 ---3F: --5- ---3D: ---- --10
Counter Select Low Voltage Latch Enable Low Voltage Trip Point Select(2) PLL Interface Select Minimum Code Words
16 bits = 0 Disable = 0 2.2 V = 0 ASK = 0 Value2 00 01 10 11
3.2.1 3.2.3.1 3.2.3.1 5.2 2.0
TSEL
3D: --54 ----
Time-out Select(1)
Value2 00 01 10 11
2.0
DUAL RFENO
3D:-----2-3D: ----3---
Dual Encoder Enable RF Enable Output Select
Disable = 0 Disable = 0
Note 1: All Timing values vary 10%. 2: Voltage thresholds are 150 mV.
3.1
Dual Encoder Operation
The HCS365 contains two transmitter configurations with separate serial numbers, encoder keys, discrimination values, counters, and seed values. This means that the HCS365 can be used as two independent encoders. The code word is calculated using one of two possible encoder configurations. Most options for code word and modulation formats can be different from Encoder 1 and Encoder 2. However, LED and RF transmitter options have to be the same. The SHIFT input pin is used to select between the encoder configurations. A low on the SHIFT pin will select Encoder 1 and a high will select Encoder 2.
DS41109D-page 10
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
3.2 Code Word Format
A KEELOQ code word consists of 32 bits of hopping code data, 32 bits of fixed code data, and between 3 to 5 bits of status information. Various code word formats are shown in Figure 3-1 and Figure 3-2. serial number. This will be stored by the receiver system after a transmitter has been learned. The discrimination bits are part of the information that is to form the encrypted portion of the transmission.
3.2.2
FIXED CODE PORTION
3.2.1
HOPPING CODE PORTION
The hopping code portion is calculated by encrypting the counter, discrimination value, and function code with the Encoder Key (KEY). The hopping code is calculated when a button press is debounced and remains unchanged until the next button press. The counter can be either a 16- or 20-bit counter. The Configuration Option Counter Select (CNTSEL) value will determine this. The counter select option must be the same for both Encoder 1 and Encoder 2. If the 16-bit counter is selected, the discrimination value is 10 bits long and there are 2 counter overflow bits (OVR0, OVR1). Set both bits in production and OVR0 will be cleared on the first counter overflow and OVR1 on the second. If the counter is 20 bits, the discrimination value is 8 bits long and there are no overflow bits. The rest of the 32 bits are made up of the function code also known as the button inputs. The discrimination value can be programmed with any value to serve as a post decryption check on the decoder end. In a typical system, this will be programmed with the 8 or 10 Least Significant bits of the
The 32 bits of fixed code consist of 28 bits of the serial number (SER) and a copy of the 4-bit function code. This can be changed to contain the whole 32-bit serial number by setting the Extended Serial Number (XSER) configuration option to a 1. If more than one button is pressed, the function codes are logically OR'ed together. The function code is repeated in the encrypted and unencrypted data of a transmission.
TABLE 3-4:
Button S0 S1 S2 S3
FUNCTION CODES
Function Code xx1x2 x1xx2 1xxx2 xxx12
3.2.3
STATUS INFORMATION
The status bits will always contain the output of the Low Voltage (VLOW) detector and Cyclic Redundancy Check (CRC). If Queue (QUEN) is enabled, button queue information will be included in the code words.
FIGURE 3-1:
CODE WORD DATA FORMAT (16-BIT COUNTER)
With XSER=0, 16-bit Counter, QUEN=0 Status Information (3 Bits) CRC 2 Bits C1 C0 VLOW 1-Bit BUT 4 Bits Fixed Code Portion (32 Bits) Hopping Code Portion (32 Bits) Synchronization Counter 16 Bits 15 0
SERIAL NUMBER (28 Bits)
Counter BUT Overflow 4 Bits 2 Bits OVR1
DISC 10 Bits OVR0
S2 S1 S0 S3
S2 S1 S0 S3
With XSER=1, 16-bit Counter, QUEN=1 Status Information (5 Bits) QUE 2 Bits CRC 2 Bits VLOW 1-Bit Fixed Code Portion (32 Bits) Hopping Code Portion (32 Bits) Synchronization Counter 16 Bits 15 0
SERIAL NUMBER (32 Bits) S2 S1
Counter BUT Overflow 4 Bits 2 Bits S0 S3 OVR1
DISC 10 Bits OVR0
Q1 Q0 C1 C0
Transmission Direction LSB First
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 11
HCS365
FIGURE 3-2: CODE WORD DATA FORMAT (20-BIT COUNTER)
With XSER=0, 20-bit Counter, QUEN=1 Status Information (5 Bits) QUE 2 Bits CRC 2 Bits VLOW 1-Bit BUT 4 Bits S3 Fixed Code Portion (32 Bits) Hopping Code Portion (32 Bits) Synchronization Counter 20 Bits 19 0
SERIAL NUMBER (28 Bits) S2
BUT 4 Bits S1 S0 S3
DISC 8 Bits
Q1 Q0 C1 C0
S2 S1 S0
With XSER=1, 20-bit Counter, QUEN=0 Status Information (3 Bits) CRC 2 Bits C1 C0 VLOW 1-Bit Fixed Code Portion (32 Bits) Hopping Code Portion (32 Bits) Synchronization Counter 20 Bits 19 0
SERIAL NUMBER (32 Bits) S2
BUT 4 Bits S1 S0 S3
DISC 8 Bits
Transmission Direction LSB First
3.2.3.1
Low Voltage Detector Status (VLOW)
A low battery voltage detector onboard the HCS365 can indicate when the operating voltage drops below a predetermined value. There are two options available depending on the Low Voltage Trip Point Select (VLOWSEL) configuration option. The two options provided are: * A 2.2V nominal level for 3V operation * A 3.2V nominal level for 5V operation The output of the low voltage detector is transmitted in each code word, so the decoder can give an indication to the user that the transmitter battery is low. Operation of the LED changes as well to further indicate that the battery is low and needs replacing. The output of the Low Voltage Detector can also be latched once it has dropped below the selected value. The Low Voltage Latch (VLOWL) configuration option enables this option. If this option is enabled, the detector level is raised to 3V or 5V once a low battery voltage has been detected. The original value is reinstated if the VDD voltage is raised above this level, indicating that a new battery has been installed. The Low Voltage Latch (VLOWL) if enabled works similar to a Schmitt Trigger. This will effectively hold the VLOW bit high until the battery is replaced. If the Low Voltage Latch is enabled, then the break after the first preamble pulse can stretch by 4 ms one time as the latch changes state.
DS41109D-page 12
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
3.3 Seed Code Word Data Format
A seed transmission transmits a code word that consists of 60 bits of fixed data that is stored in the EEPROM. This can be used for secure learning of encoders or whenever a fixed code transmission is required. The seed code word contains the function code. The seed code also contains the status information (VLOW, CRC, and QUEUE). The Seed code word format is shown in Figure 3-3. The function code for seed code words is always 11112. Seed code words for Encoder 1 and Encoder 2 can be configured as follows: * Enabled with the Seed Button Code (SDBT) configuration option or disabled if SDBT = 00002. * If the Limited Seed (SDLM) configuration option is set, seed transmissions will be disabled when the synchronization counter is bigger than 127. Seed transmissions remain disabled even if the 16/20bit counter rolls over to 0. * The delay before the seed transmission is transmitted can be set to 0.0s, 0.8s, 1.6s and 3.2s with the Seed Time (SDTM) configuration option. When SDTM is set to a value other than 0.0s, the HCS365 will transmit a code hopping transmission until the selected time expires. After the selected time expires, the seed code words are transmitted. This is useful for the decoder to learn the serial number and the seed from a single button press. * The button code for transmitting a seed code word can be selected with the Seed Button (SDBT) configuration option. SDBT bits 0 to 3 correspond to button inputs S0 to S3. Set the bits high for the button combination that should trigger a seed transmission (i.e., If SDBT = 10102 then, S3+S1 will trigger a seed transmission). * The seed transmissions before the counter increments past 128 can be modified with the Seed Mode (SDMD) configuration option. Setting this bit for Production mode will cause the selected seed button combination to first transmit a normal hopping code word for the selected Minimum Code words (MTX) and then at least MTX seed code words until all buttons are released. This mode is disabled after the counter reaches 128 even if the 16/20-bit counter rolls over to 0. * The limit of 127 for SDLM or SDMD can be reduced by using an initial counter value >0.
Note:
The synchronization counter only increments on code hopping transmissions. The counter will not advance on a seed transmission unless Seed Delay or Production mode options are on.
FIGURE 3-3:
With QUEN = 1
SEED CODE WORD FORMAT
Open Portion (Not Encrypted) (9 bits) QUE CRC VLOW (2 Bits) (2 Bits) (1-Bit) Q1 Q0 C1 C0 1 Function (4 Bits) 1 1 1
SEED Code (60 bits) SEED
Transmission Direction LSB First
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 13
HCS365
4.0
4.1
TRANSMITTED WORD
Transmission Modulation Format
option. The Header time can be set to 4TE or 10TE with the Header Select (HSEL) configuration option. These options can all be set individually for Encoder 1 and Encoder 2. There are four different modulation formats available on the HCS365 that can be set individually for Encoder 1 or Encoder 2. The Modulation Select (MSEL) Configuration Option is used to select between: * * * * Pulse Width Modulation (PWM) Manchester (MAN) Variable Pulse Width Modulation (VPWM) Pulse Position Modulation (PPM)
The HCS365 transmission is made up of several code words. Each code word contains a preamble, header, and data. A code word is separated from another code word by guard time. The Guard Time Select (GSEL) configuration option can be set to 0 ms, 6.4 ms, 51.2 ms, or 102.4 ms. All other timing specifications for the modulation formats are based on a basic timing element (TE). This Timing Element can be set to 100 s, 200 s, 400 s or 800 s with the Baud Rate Select (BSEL) configuration
FIGURE 4-1:
PULSE WIDTH MODULATION (PWM)
TE LOGIC "0" LOGIC "1" TBP TE TE
1
16
31xTE 50% Preamble
4-10 xTE Header
Encrypted Portion
Fixed Code Portion
Guard Time
FIGURE 4-2:
MANCHESTER (MAN)
TE TE
LOGIC "0"
LOGIC "1" TBP START bit bit 0 bit 1 bit 2 1 2 16 STOP bit
31xTE 50% Preamble
4 xTE
Encrypted Portion
Fixed Code Portion
Header
Guard Time
DS41109D-page 14
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
FIGURE 4-3: VARIABLE PULSE WIDTH MODULATION (VPWM)
LOGIC "0" TE VPWM BIT ENCODING: on Transition Low to High TBP 2XTE on Transition High to Low LOGIC "0" TE TBP LOGIC "1" TE TE LOGIC "1" TE
TBP 1 2 16
TBP 2XTE
31xTE 50% Preamble
10xTE Header
Encrypted Portion
Fixed Code Portion
Guard Time
FIGURE 4-4:
PULSE POSITION MODULATION (PPM)
TE TE TE LOGIC "0" LOGIC "1" START bit TBP 3 X TE TBP STOP bit
1
2
16
31xTE 50% Preamble
10xTE Header
Encrypted Portion
Fixed Code Portion
Guard Time
In addition to the Modulation Format, Guard Time, and Baud Rate, the following options are also available to change the transmission format: * If the START/STOP Pulse Enable (STEN) configuration option is enabled, the HCS365 will place a leading and trailing `1' on each code word. This is necessary for modulation formats such as Manchester and PPM to interpret the first and last data bit. * A wake-up sequence can be transmitted before the transmission starts. The wake-up sequence is configured with the Wake-up (WAKE) configuration option and can be disabled or set to 50 ms, 75 ms, or 100 ms of pulses as indicated in Figure 4-5. * The WAKE option is the same for both Encoder 1 and Encoder 2.
FIGURE 4-5:
WAKE-UP ENABLE
TE TE
WAKE-UP = 75 ms TE 2TE
WAKE-UP = 50 ms TE 5TE
WAKE-UP = 100 ms
TG
WAKE-UP CODE
TG CODE
Guard Time = 6.4 ms, 51.2 ms, or 102.4 ms
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 15
HCS365
5.0
5.1
SPECIAL FEATURES
Internal RC Oscillator
tion option. When enabled, this pin will be driven high whenever data is transmitted through the DATA pin. If the RFEN output is enabled it will not be possible to utilize the dual encoder functionality. In addition, the RF Enable and DATA output interfaces with RF PLL's. The PLL interface select (PLLSEL) configuration option selects between the ASK and FSK interfaces. Figure 5-1 shows the startup sequence for both ASK and FSK interface options. The RFEN signal will go low at the end of the last code word, including the guard time. If RFENO = 1, the RFEN pin will be driven high whenever data is transmitted through the DATA pin.
The HCS365 has an onboard RC oscillator that controls all the logic output timing characteristics. The oscillator frequency varies over temperature and voltage variances, but stays within 10% of the tuned value. All the timing values specified in this document are subject to this oscillator variation.
5.2
RF Enable and PLL Interface
The S3/SHIFT/RFEN pin of the HCS365 can be configured to function as a RF enable output signal. This is done with the RF Enable Output (RFENO) configura-
FIGURE 5-1:
ASK/FSK INTERFACE
S0
ASK RFEN
CODE WORD
ASK DATA
CODE WORD
FSK RFEN
CODE WORD
FSK DATA
CODE WORD
TPU
TPLL
TG
TG
5.3
LED Output
The LED pin will be driven low while the HCS365 is transmitting data. The LED On Time (TLEDON) can be selected between 50 ms and 100 ms with the LED On Time Select (LEDOS) configuration option. The LED Off Time (TLEDOFF) is fixed at 500 ms. When the VDD voltage drops below the selected VLOW trip point, the LED will not blink unless the LED Blink (LEDBL) option is set. If LEDBL is set and VDD is low, then the LED will only flash once. Waveforms of the LED behavior are shown in Figure 5-2. For circuits with VDD greater than 3 volts, be sure to limit the LED circuit with a series resistor. The LED output can safely sink up to 25 mA but adding an external
resistor will conserve battery power. This is an open drain output but it does have a weak pull-up capable of driving a CMOS input.
DS41109D-page 16
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
FIGURE 5-2:
SN TLEDON LED VDD > VLOW
LED
LED OPERATION
TLEDOFF
FIGURE 5-3:
CODE WORD COMPLETION WITH QUEN SETTINGS
MTX = 012, WAKE > 002
SN
QUEN = Disabled
DATA WAKE-UP CODE1
VDD < VLOW LEDBL=1
LED
CODE1
WAKE-UP CODE2
CODE2
QUEN = Enabled
DATA
WAKE-UP
VDD < VLOW LEDBL=0
CODE1 00
WAKE-UP CODE2 01
CODE2 01
5.4
Cyclic Redundancy Check (CRC)
The CRC bits are calculated on the 65 previously transmitted bits. These bits contain the 32-bit hopping code, 32-bit fixed code, and VLOW bit. The decoder can use the CRC bits to check the data integrity before processing starts. The CRC can detect all single bit errors and 66% of double bit errors. The CRC is computed as follows:
6.0
PROGRAMMING SPECIFICATIONS
Refer to the "HCS365 Programming Specifications" document (DS41157) in Microchip Literature.
EQUATION 5-1:
CRC Calculation
CRC [ 1 ] n + 1 = CRC [ 0 ] n Di n and CRC [ 0 ] n + 1 = ( CRC [ 0 ] n Din ) CRC [ 1 ] n with CRC [ 1, 0 ]0 = 0 and Din the nth transmission bit 0 <= n <= 64
5.5
Button Queue Information (QUEUE)
The queuing or repeated pressing of the same buttons can be handled in two ways on the HCS365. This is controlled with the Queue Counter Enable (QUEN) configuration option. This option can be different for Encoder 1 and Encoder 2. When the QUEN option is disabled, the device will register up to two sequential button presses. In this case, the device will complete the minimum code words selected with the MTX option before the second code word is calculated and transmitted. The code word will be 67 bits in this case, with no additional queue bits transmitted. If the QUEN option is enabled, the queue bits are added to the standard code word. The queue bits are a 2-bit counter that does not wrap. The counter value starts at 002 and is incremented if a button is pushed within 2 seconds from the start of the previous button press. The current code word is terminated when a button is queued. This allows additional functionality for double or triple button presses.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 17
HCS365
7.0 INTEGRATING THE HCS365 INTO A SYSTEM
FIGURE 7-1: TYPICAL LEARN SEQUENCE
Use of the HCS365 in a system requires a compatible decoder. This decoder is typically a microcontroller with compatible firmware. Microchip will provide (via a license agreement) firmware routines that accept transmissions from the HCS365 and decrypt the hopping code portion of the data stream. These routines provide system designers the means to develop their own decoding system.
Enter Learn Mode Wait for Reception of a Valid Code Generate Key from Serial Number Use Generated Key to Decrypt Compare Discrimination Value with Fixed Value
7.1
Learning a Transmitter to a Receiver
A transmitter must first be 'learned' by a decoder before its use is allowed in the system. Several learning strategies are possible. Figure 7-1 details a typical learn sequence. The decoder must minimally store each learned transmitter's serial number and current synchronization counter value in EEPROM. Additionally, the decoder typically stores each transmitter's unique crypt key. The maximum number of learned transmitters will therefore be relative to the available EEPROM. A transmitter's serial number is transmitted in the 32-bit fixed code, but the synchronization counter only exists in the code word's encrypted portion. The decoder obtains the counter value by decrypting using the same key used to encrypt the information. The KEELOQ algorithm is a symmetrical block cipher so the encryption and decryption keys are identical and referred to generally as the crypt key. The encoder receives its crypt key during manufacturing. The decoder typically calculates the crypt key by running the encoder serial number or seed through the key generation routine. Figure 7-1 summarizes a typical learn sequence. The decoder receives and authenticates a first transmission; first button press. Authentication involves generating the appropriate crypt key, decrypting, validating the correct key usage via the discrimination bits, and buffering the counter value. A second transmission is received and authenticated. A final check verifies the counter values were sequential; consecutive button presses. If the learn sequence is successfully completed, the decoder stores the learned transmitter's serial number, current synchronization counter value, and appropriate crypt key. From now on, the crypt key will be retrieved from EEPROM during normal operation instead of recalculating it for each transmission received. Certain learning strategies have been patented by 3rd parties and care must be taken not to infringe.
Equal ?
No
Yes Wait for Reception of Second Valid Code Use Generated Key to Decrypt Compare Discrimination Value with Fixed Value
Equal ? Yes Counters Sequential ? Yes
No
No
Learn successful Store: Serial number Encryption key Synchronization counter
Learn Unsuccessful
Exit
DS41109D-page 18
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
7.2 Decoder Operation 7.3
Figure 7-2 summarizes normal decoder operation. The decoder waits until a transmission is received. The received serial number is compared to the EEPROM table of learned transmitters to first determine if this transmitter's use is allowed in the system. If from a learned transmitter, the transmission is decrypted using the stored crypt key and authenticated via the discrimination bits for appropriate crypt key usage. If the decryption was valid the synchronization value is evaluated.
Synchronization with Decoder (Evaluating the Counter)
The KEELOQ technology patent scope includes a sophisticated synchronization technique that does not require the calculation and storage of future codes. The technique securely blocks invalid transmissions while providing transparent resynchronization to transmitters inadvertently activated away from the receiver. Figure 7-3 shows a 3-partition, rotating synchronization window. The size of each window is optional but the technique is fundamental. Each time a transmission is authenticated, the intended function is executed and the transmission's synchronization counter value is stored in EEPROM. From the currently stored counter value there is an initial "Single Operation" forward window of 16 codes. If the difference between a received synchronization counter and the last stored counter is within 16, the intended function will be executed on the single button press and the new synchronization counter will be stored. Storing the new synchronization counter value effectively rotates the entire synchronization window. A "Double Operation" (resynchronization) window further exists from the "Single Operation" window up to 32K codes forward of the currently stored counter value. It is referred to as "Double Operation" because a transmission with synchronization counter value in this window will require an additional, sequential counter transmission prior to executing the intended function. Upon receiving the sequential transmission the decoder executes the intended function and stores the synchronization counter value. This resynchronization occurs transparently to the user as it is human nature to press the button a second time if the first was unsuccessful.
FIGURE 7-2:
Start
TYPICAL DECODER OPERATION
No
Transmission Received ? Yes
No
Does Serial Number Match ?
Yes Decrypt Transmission Is Decryption Valid ? Yes No Is Counter Within 16 ? No No Is Counter Within 32K ? Yes Save Counter in Temp Location Yes Execute Command and Update Counter
No
The third window is a "Blocked Window" ranging from the double operation window to the currently stored synchronization counter value. Any transmission with synchronization counter value within this window will be ignored. This window excludes previously used, perhaps code-grabbed transmissions from accessing the system.
Note:
The synchronization method described in this section is only a typical implementation and because it is usually implemented in firmware, it can be altered to fit the needs of a particular system.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 19
HCS365
FIGURE 7-3: SYNCHRONIZATION WINDOW
Entire Window rotates to eliminate use of previously used codes Blocked Window (32K Codes) Stored Synchronization Counter Value Double Operation (resynchronization) Window (32K Codes) Single Operation Window (16 Codes)
7.4
Security Considerations
The strength of this security is based on keeping a secret inside the transmitter that can be verified by encrypted transmissions to a trained receiver. The transmitter's secret is the manufacturer's key, not the encryption algorithm. If that key is compromised then a smart transceiver can capture any serial number, create a valid code word, and trick all receivers trained with that serial number. The key cannot be read from the EEPROM without costly die probing but it can be calculated by brute force decryption attacks on transmitted code words. The cost for these attacks should exceed what you would want to protect. To protect the security of other receivers with the same manufacturer's code, you need to use the random seed for secure learn. It is a second secret that is unique for each transmitter. Its transmission on a special button press combination can be disabled if the receiver has another way to find it, or limited to the first 127 transmissions for the receiver to learn it. This way, it is very unlikely to ever be captured. Now if a manufacturer's key is compromised, clone transmitters can be created, but without the unique seed they have to be relearned by the receiver. In the same way, if the transmissions are decrypted by brute force on a computer, the random seed hides the manufacturer's key and prevents more than one transmitter from being compromised. The length of the code word at these baud rates makes brute force attacks that guess the hopping code take years. To make the receiver less susceptible to this attack, make sure that you test all the bits in the decrypted code for the correct value. Do not just test low counter bits for sync and the bit for the button input of interest. The main benefit of hopping codes is to prevent the retransmission of captured code words. This works very well for code words that the receiver decodes. Its weakness is if a code is captured when the receiver misses it, the code may trick the receiver once if it is used before the next valid transmission. To make the
receiver more secure it could increment the counter on questionable code word receptions. To make the transmitter more secure, it could use separate buttons for lock and unlock functions. Another way would be to require two different buttons in sequence to gain access. There are more ways to make KEELOQ systems more secure, but they all have trade-offs. You need to find a balance between security, design effort, and usability, particularly in failure modes. For example, if a button sticks or kids play with it, the counter should not end up in the blocked code window rendering the transmitter useless or requiring retraining.
DS41109D-page 20
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
8.0 DEVELOPMENT SUPPORT
8.3
The KEELOQ(R) family of devices are supported with a full range of hardware and software development tools: * Integrated Development Environment - MPLAB(R) IDE Software - KEELOQ Toolkit Software * Device Programmers - PRO MATE(R) II Universal Device Programmer * Low Cost Demonstration Boards - KEELOQ Evaluation Kit II - KEELOQ Transponder Evaluation Kit
PRO MATE II Universal Device Programmer
The PRO MATE II universal device programmer is a full-featured programmer, capable of operating in stand-alone mode, as well as PC-hosted mode. The PRO MATE II device programmer is CE compliant. The PRO MATE II device programmer has programmable VDD and VPP supplies, which allow it to verify programmed memory at VDD min and VDD max for maximum reliability. It has an LCD display for instructions and error messages, keys to enter commands and a modular detachable socket assembly to support various package types. Microchip has various socket adapter modules available for PDIP, SOIC and SSOP devices. An In-Circuit Serial ProgrammingTM (ICSPTM) module is also available for programming devices after circuit assembly.
8.1
MPLAB Integrated Development Environment Software
The same MPLAB IDE software available at www.microchip.com that is used for microcontroller software development also supports the KEELOQ family of devices. With this Windows(R)-based application you can configure the device options in a graphical environment. The manufacturer's code is protected by two custodian keys so that the secret is split and neither employee can reveal the code alone. Once both custodian keys have been entered and the options selected, MPLAB IDE software is ready to produce parts in one of two ways. * The PRO MATE II Programmer, which is sold separately, can program individual parts. MPLAB IDE software can automatically increment the serial number and recalculate the unique encryption key, discrimination value and seed for each part. * Creating an SQTPsm file that contains all the individual device configurations to submit to Microchip for a production run without revealing your manufacturer's code. Please contact Microchip sales office etc., minimum order quantities apply.
8.4
KEELOQ Evaluation Kit II
The KEELOQ Evaluation Kit II contains all the necessary hardware to evaluate a code hopping system, including two transmitters and a multi-function receiver board that supports all HCS5XX stand-alone decoders. Additionally, it allows the users to develop their own software to receive, decode and interpret the KEELOQ transmission. The included PC software can configure and program the KEELOQ parts for evaluation (DM303006).
8.5
KEELOQ Transponder Evaluation Kit
The KEELOQ Transponder Evaluation Kit consists of a base station, a transmitter/transponder, a battery-less transponder and various HCS4XX samples. It also includes the PC software to configure and program the KEELOQ parts for evaluation (DM303005).
8.2
KEELOQ(R) Toolkit Software
The KEELOQ(R) Secure Solution CD-ROM is available free and can be ordered with part number DS40038. After accepting the KEELOQ license agreement, it will let you install application notes with complete decoder algorithms as well as the KEELOQ toolkit. The toolkit is a handy application that generates encryption keys from the manufacturer's code and serial number or seed. It can also decrypt KEELOQ transmitter's hopping code to help debug and test your decoder software.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 21
PIC14000
24CXX/ 25CXX/ 93CXX
PIC16C5X
PIC16C6X
PIC16C7X
PIC16C8X
PIC17C4X
HCSXXX rfHCSXXX
PIC16F62X
PIC16C7XX
PIC16F8XX
PIC16C9XX
PIC17C7XX
PIC18CXX2
PIC12CXXX rfPIC12XXXX
PIC16CXXX
PIC18FXXX
MCRFXXX MCP2510
TABLE 8-1:
Software Tools
Programmers Debugger Emulators
Demo Boards and Eval Kits
DS41109D-page 22
MPLAB(R) Integrated Development Environment
9
9
9
9
9
9
9
9
9
9
9
9
9
9
HCS365
99
99
MPLAB(R) C17 C Compiler
MPLAB(R) C18 C Compiler
99
99
MPASMTM Assembler/ MPLINKTM Object Linker
9
**
9
9
9
9
9
9
9
9
9
9
9
9
9
9
MPLAB(R) ICE In-Circuit Emulator
9 9 9 9 9
**
9
9
9
9
9
9
9
9
9
9
9
9
9
9
MPLAB(R) ICD In-Circuit Debugger
PICSTART(R) Plus Entry Level Development Programmer
9
**
9
9
9
9
9
9
9
9
9
9
9
9
9
9
PRO MATE(R) II Universal Device Programmer
9
9
9
9
9
9
9
9
9
9
9
9
9
9
9
9
9
DEVELOPMENT TOOLS FROM MICROCHIP
Preliminary
9 9 9 9

PICDEMTM 1 Demonstration Board
99
PICDEMTM 2 Plus Demonstration Board
9
9
9
9
PICDEMTM 3 Demonstration Board
9
PICDEMTM 14A Demonstration Board
9
PICDEMTM 17 Demonstration Board
9
KEELOQ(R) Evaluation Kit II
99
KEELOQ(R) Transponder Kit
microIDTM Programmer's Kit
125 kHz microIDTM Developer's Kit
99 9
125 kHz Anticollision microIDTM Developer's Kit
13.56 MHz Anticollision microIDTM Developer's Kit
9
MCP2510 CAN Developer's Kit
(c) 2002 Microchip Technology Inc.
* Contact the Microchip Technology Inc. web site at www.microchip.com for information on how to use the MPLAB(R) ICD In-Circuit Debugger (DV164001) with PIC16C62, 63, 64, 65, 72, 73, 74, 76, 77. ** Contact Microchip Technology Inc. for availability date. Development tool is available on select devices.
9
HCS365
9.0
9.1
ELECTRICAL CHARACTERISTICS
Maximum Ratings*
Ambient temperature under bias.............................................................................................................-40C to +125C Storage temperature .............................................................................................................................. -65C to +150C Voltage on VDD w/respect to VSS ................................................................................................................ -0.3 to +7.5V Voltage on LED w/respect to VSS ..................................................................................................................-0.3 to +11V Voltage on all other pins w/respect to VSS ........................................................................................-0.3V to VDD + 0.3V Total power dissipation (Note 1) ..........................................................................................................................500 mW Maximum current out of VSS pin ...........................................................................................................................100 mA Maximum current into VDD pin ..............................................................................................................................100 mA Input clamp current, IIK (VI < 0 or VI > VDD) ......................................................................................................... 20 mA Output clamp current, IOK (Vo < 0 or Vo >VDD).................................................................................................... 20 mA Maximum output current sunk by any Output pin....................................................................................................25 mA Maximum output current sourced by any Output pin ..............................................................................................25 mA *Notice: Stresses above those listed under "Maximum ratings" may cause permanent damage to the device. This is a stress rating only and functional operation of the device at those or any other conditions above those indicated in the operational listings of this specification is not implied. Exposure to maximum rating conditions for extended periods may affect device reliability. Note 1: Power dissipation is calculated as follows: Pdis=VDD x {IDD - A IOH} + A {(VDD-VOH) x IOH} + A(VOl x IOL).
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 23
HCS365
TABLE 9-1: DC CHARACTERISTICS: HCS365
Standard Operating Conditions (unless otherwise stated) Operating Temperature 0C TA +70C (Commercial) -40C TA +85C (Industrial) Characteristic Supply Voltage VDD start voltage to ensure internal Power-on Reset signal VDD rise rate to ensure internal Power-on Reset signal Brown-out Reset Voltage Supply Current(2) Min. 2.05(4) -- Typ. -- VSS Max. 5.5 -- Units V V Cold RESET Conditions
DC Characteristics All Pins Except Power Supply Pins Param No. D001 D003 Sym. VDD VPOR
D004
SVDD
0.05*
--
--
V/ms
D005 D010 D010B
VBOR IDD
-- --
1.9 1.0
2 5 2.0
V mA mA A FOSC = 4 MHz, VDD = 5.5V(3) FOSC = 4 MHz, VDD = 3.5V(3) VDD = 5.5V
D021A IPD VIL D030 D030A D031 VIH D040 D040A D041 D053 Vtol
Shutdown Current Input pins With TTL Buffer With Schmitt Trigger Buffer Input pins With TTL Buffer
--
0.1
1.0
Input Low Voltage VSS VSS VSS -- -- -- -- 2.0 (0.25 VDD +0.8) 0.8 VDD -- -- -- -- -- -- -- -- -- VDD VDD VDD +200 +350 1 V V V mV mV A setting 5 = 2.25V setting 25 = 4.25V VSS VPIN VDD, Pin at Hiimpedance, no pull-downs enabled 4.5V VDD 5.5V Otherwise 0.8 0.15 VDD 0.2 VDD V V V 4.5V VDD 5.5V Otherwise
Input High Voltage
With Schmitt Trigger Buffer Vlow detect tolerance
Input Threshold Voltage
Input Leakage Current D060 IIL Input pins
DS41109D-page 24
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
TABLE 9-1: DC CHARACTERISTICS: HCS365 (CONTINUED)
Standard Operating Conditions (unless otherwise stated) Operating Temperature 0C TA +70C (Commercial) -40C TA +85C (Industrial) Characteristic Min. Typ. Max. Units Conditions DC Characteristics All Pins Except Power Supply Pins Param No. D080 D090 D091 D100 D120 D121 D122 Sym.
Output Low Voltage VOL VOH VOH Rpd ED Vdrw Tdew Output pins Output pins LED S0 - S3 Endurance VDD for Read/Write Erase/Write Cycle Time(1) -- VDD-0.7 1.5 40 200K 2.05 -- -- -- -- 75 1000K -- 4 0.6 -- -- 100 -- 5.5 10 V V V IOL = 8.5 mA, VDD = 4.5V IOH = -3.0 mA, VDD = 4.5V IOH = -0.5 mA, VDD = 4.5V Output High Voltage
Internal Pull-down Resistance KOhms If enabled E/W V ms 25C at 5V Data EEPROM Memory
Note 1: * These parameters are characterized but not tested. 2: "Typ" column data is at 5.0V, 25C unless otherwise stated. These parameters are for design guidance only and are not tested. 3: The supply current is mainly a function of the operating voltage and frequency. Other factors such as I/O pin loading and switching rate, oscillator type, internal code execution pattern, and temperature also have an impact on the current consumption. Should operate down to VBOR but not tested below 2.0V.
4:
The test conditions for all IDD measurements in active Operation mode are: all I/O pins tristated, pulled to VDD. MCLR = VDD; WDT enabled/disabled as specified. The power-down/shutdown current in SLEEP mode does not depend on the oscillator frequency. Powerdown current is measured with the part in SLEEP mode, with all I/O pins in hi-impedance state and tied to VDD or VSS. The current is the additional current consumed when the WDT is enabled. This current should be added to the base IDD or IPD measurement.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 25
HCS365
TABLE 9-2: AC CHARACTERISTICS(1)
Commercial (C): TAMB = 0C to +70C Industrial (I): TAMB = -40C to +85C 2.05V < VDD < 5.5 Parameter Timing Element Sym. TE Min. 90 Typ. -- Max. 880 Unit Conditions s BSEL = 002 (min) or BSEL = 012 BSEL = 102 BSEL = 112 (max) WAIT = 0 WAIT = 1 LEDOS = 0 (min) or LEDOS = 1 (max) GSEL = 002(min) GSEL = 012 GSEL = 102 GSEL = 112(max)
Power-up Time PLL Set-up Time LED On Time LED Off Time Guard Time
TPU TPLL TLEDON TLEDOFF TG
-- 10 -- 45 450 1.8 5.6 46.1 96.1
25 15 -- -- 500 2TE 6.4 51.2 102.4
-- 30 285 110 550 112.6 7.0 56.3 42.6
ms ms ms ms ms ms ms ms ms
Note 1: All timing values are subject to the oscillator variance and are not tested. These parameters are characterized, but not tested.
DS41109D-page 26
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
10.0 PACKAGING INFORMATION
8-Lead Plastic Dual In-line (P) - 300 mil (PDIP) Package Type:
E1
D 2 n 1 E
A
A2
c
L A1
eB
B1 p B
Number of Pins Pitch Top to Seating Plane Molded Package Thickness Base to Seating Plane Shoulder to Shoulder Width Molded Package Width Overall Length Tip to Seating Plane Lead Thickness Upper Lead Width Lower Lead Width Overall Row Spacing Mold Draft Angle Top Mold Draft Angle Bottom * Controlling Parameter Significant Characteristic
Units Dimension Limits n p A A2 A1 E E1 D L c B1 B eB
MIN
INCHES* NOM 8 .100 .155 .130 .313 .250 .373 .130 .012 .058 .018 .370 10 10
MAX
MIN
.140 .115 .015 .300 .240 .360 .125 .008 .045 .014 .310 5 5
.170 .145 .325 .260 .385 .135 .015 .070 .022 .430 15 15
MILLIMETERS NOM 8 2.54 3.56 3.94 2.92 3.30 0.38 7.62 7.94 6.10 6.35 9.14 9.46 3.18 3.30 0.20 0.29 1.14 1.46 0.36 0.46 7.87 9.40 5 10 5 10
MAX
4.32 3.68 8.26 6.60 9.78 3.43 0.38 1.78 0.56 10.92 15 15
Notes: Dimensions D and E1 do not include mold flash or protrusions. Mold flash or protrusions shall not exceed .010" (0.254mm) per side. JEDEC Equivalent: MS-001 Drawing No. C04-018
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 27
HCS365
Package Type: 8-Lead Plastic Small Outline (SM) - Medium, 208 mil (SOIC)
E E1
p D 2 n B 1
c A A2
L A1
Number of Pins Pitch Overall Height Molded Package Thickness Standoff Overall Width Molded Package Width Overall Length Foot Length Foot Angle Lead Thickness Lead Width Mold Draft Angle Top Mold Draft Angle Bottom *Controlling Parameter Notes:
Units Dimension Limits n p A A2 A1 E E1 D L c B
MIN
.070 .069 .002 .300 .201 .202 .020 0 .008 .014 0 0
INCHES* NOM 8 .050 .075 .074 .005 .313 .208 .205 .025 4 .009 .017 12 12
MAX
MIN
.080 .078 .010 .325 .212 .210 .030 8 .010 .020 15 15
MILLIMETERS NOM 8 1.27 1.78 1.97 1.75 1.88 0.05 0.13 7.62 7.95 5.11 5.28 5.13 5.21 0.51 0.64 0 4 0.20 0.23 0.36 0.43 0 12 0 12
MAX
2.03 1.98 0.25 8.26 5.38 5.33 0.76 8 0.25 0.51 15 15
Dimensions D and E1 do not include mold flash or protrusions. Mold flash or protrusions shall not exceed .010" (0.254mm) per side. Drawing No. C04-056
DS41109D-page 28
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
10.1 Package Marking Information
8-Lead PDIP (300 mil) XXXXXXXX XXXXXNNN YYWW Example HCS365 XXX/NNN 9925
8-Lead SOIC (208 mil) XXXXXXXX XXXXXXXX YYWWNNN
Example
HCS365 XXXXXXXX 9925NNN
Legend: MM...M XX...X YY WW NNN Note:
Microchip part number information Customer specific information* Year code (last 2 digits of calendar year) Week code (week of January 1 is week `01') Alphanumeric traceability code
In the event the full Microchip part number cannot be marked on one line, it will be carried over to the next line thus limiting the number of available characters for customer specific information.
*
Standard marking consists of Microchip part number, year code, week code and traceability code. For marking beyond this, certain price adders apply. Please check with your Microchip Sales Office. For SQTP devices, any special marking adders are included in SQTP price.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 29
HCS365
ON-LINE SUPPORT
Microchip provides on-line support on the Microchip World Wide Web (WWW) site. The web site is used by Microchip as a means to make files and information easily available to customers. To view the site, the user must have access to the Internet and a web browser, such as Netscape(R) or Microsoft(R) Explorer. Files are also available for FTP download from our FTP site.
Systems Information and Upgrade Hot Line
The Systems Information and Upgrade Line provides system users a listing of the latest versions of all of Microchip's development systems software products. Plus, this line provides information on how customers can receive any currently available upgrade kits. The Hot Line Numbers are: 1-800-755-2345 for U.S. and most of Canada, and 1-480-792-7302 for the rest of the world.
Connecting to the Microchip Internet Web Site
The Microchip web site is available by using your favorite Internet browser to attach to: www.microchip.com The file transfer site is available by using an FTP service to connect to: ftp://ftp.microchip.com The web site and file transfer site provide a variety of services. Users may download files for the latest Development Tools, Data Sheets, Application Notes, User's Guides, Articles and Sample Programs. A variety of Microchip specific business information is also available, including listings of Microchip sales offices, distributors and factory representatives. Other data available for consideration is: * Latest Microchip Press Releases * Technical Support Section with Frequently Asked Questions * Design Tips * Device Errata * Job Postings * Microchip Consultant Program Member Listing * Links to other useful web sites related to Microchip Products * Conferences for products, Development Systems, technical information and more * Listing of seminars and events
DS41109D-page 30
Preliminary
(c) 2002 Microchip Technology Inc.
HCS365
READER RESPONSE
It is our intention to provide you with the best documentation possible to ensure successful use of your Microchip product. If you wish to provide your comments on organization, clarity, subject matter, and ways in which our documentation can better serve you, please FAX your comments to the Technical Publications Manager at (480) 792-7578. Please list the following information, and use this outline to provide us with your comments about this Data Sheet. To: RE: Technical Publications Manager Reader Response Total Pages Sent
From: Name Company Address City / State / ZIP / Country Telephone: (_______) _________ - _________ Application (optional): Would you like a reply? Device: HCS365 Questions: Y N Literature Number: DS41109D FAX: (______) _________ - _________
1. What are the best features of this document?
2. How does this document meet your hardware and software development needs?
3. Do you find the organization of this data sheet easy to follow? If not, why?
4. What additions to the data sheet do you think would enhance the structure and subject?
5. What deletions from the data sheet could be made without affecting the overall usefulness?
6. Is there any incorrect or misleading information (what and where)?
7. How would you improve this document?
8. How would you improve our software, systems, and silicon products?
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D-page 31
HCS365
11.0 HCS365 PRODUCT IDENTIFICATION SYSTEM
PART NO. Device X Temperature Range /XX Package XXX Pattern .To order or obtain information, e.g., on pricing or delivery, refer to the factory or the listed sales office.
Device
HCS365: Code Hopping Encoder HCS365T: Code Hopping Encoder (Tape and Reel - SM only)
Temperature Range
I
= =
0xC to +70xC -40xC to +85xC
Package
P SM
= =
Plastice DIP (300 mil body), 8-lead Plastic SOIC (208 mil body), 8-lead
Pattern
* JW Devices are UV erasable and can be programmed to any device configuration. JW Devices meet the electrical requirement of each oscillator type.
Sales and Support
Data Sheets Products supported by a preliminary Data Sheet may have an errata sheet describing minor operational differences and recommended workarounds. To determine if an errata sheet exists for a particular device, please contact one of the following: 1. 2. 3. Your local Microchip sales office The Microchip Corporate Literature Center U.S. FAX: (480) 792-7277 The Microchip Worldwide Site (www.microchip.com)
Please specify which device, revision of silicon and Data Sheet (include Literature #) you are using. New Customer Notification System Register on our web site (www.microchip.com/cn) to receive the most current information on our products.
DS41109D-page 32
Preliminary
(c) 2002 Microchip Technology Inc.
Microchip's Secure Data Products are covered by some or all of the following patents: Code hopping encoder patents issued in Europe, U.S.A., and R.S.A. -- U.S.A.: 5,517,187; Europe: 0459781; R.S.A.: ZA93/4726 Secure learning patents issued in the U.S.A. and R.S.A. -- U.S.A.: 5,686,904; R.S.A.: 95/5429
Information contained in this publication regarding device applications and the like is intended through suggestion only and may be superseded by updates. It is your responsibility to ensure that your application meets with your specifications. No representation or warranty is given and no liability is assumed by Microchip Technology Incorporated with respect to the accuracy or use of such information, or infringement of patents or other intellectual property rights arising from such use or otherwise. Use of Microchip's products as critical components in life support systems is not authorized except with express written approval by Microchip. No licenses are conveyed, implicitly or otherwise, under any intellectual property rights.
Trademarks The Microchip name and logo, the Microchip logo, FilterLab, KEELOQ, microID, MPLAB, PIC, PICmicro, PICMASTER, PICSTART, PRO MATE, SEEVAL and The Embedded Control Solutions Company are registered trademarks of Microchip Technology Incorporated in the U.S.A. and other countries. dsPIC, ECONOMONITOR, FanSense, FlexROM, fuzzyLAB, In-Circuit Serial Programming, ICSP, ICEPIC, microPort, Migratable Memory, MPASM, MPLIB, MPLINK, MPSIM, MXDEV, PICC, PICDEM, PICDEM.net, rfPIC, Select Mode and Total Endurance are trademarks of Microchip Technology Incorporated in the U.S.A. Serialized Quick Turn Programming (SQTP) is a service mark of Microchip Technology Incorporated in the U.S.A. All other trademarks mentioned herein are property of their respective companies. (c) 2002, Microchip Technology Incorporated, Printed in the U.S.A., All Rights Reserved.
Printed on recycled paper.
Microchip received QS-9000 quality system certification for its worldwide headquarters, design and wafer fabrication facilities in Chandler and Tempe, Arizona in July 1999. The Company's quality system processes and procedures are QS-9000 compliant for its PICmicro(R) 8-bit MCUs, KEELOQ(R) code hopping devices, Serial EEPROMs and microperipheral products. In addition, Microchip's quality system for the design and manufacture of development systems is ISO 9001 certified.
(c) 2002 Microchip Technology Inc.
Preliminary
DS41109D - page 33
WORLDWIDE SALES AND SERVICE
AMERICAS
Corporate Office
2355 West Chandler Blvd. Chandler, AZ 85224-6199 Tel: 480-792-7200 Fax: 480-792-7277 Technical Support: 480-792-7627 Web Address: http://www.microchip.com
ASIA/PACIFIC
Australia
Microchip Technology Australia Pty Ltd Suite 22, 41 Rawson Street Epping 2121, NSW Australia Tel: 61-2-9868-6733 Fax: 61-2-9868-6755
Japan
Microchip Technology Japan K.K. Benex S-1 6F 3-18-20, Shinyokohama Kohoku-Ku, Yokohama-shi Kanagawa, 222-0033, Japan Tel: 81-45-471- 6166 Fax: 81-45-471-6122
Rocky Mountain
2355 West Chandler Blvd. Chandler, AZ 85224-6199 Tel: 480-792-7966 Fax: 480-792-7456
China - Beijing
Microchip Technology Consulting (Shanghai) Co., Ltd., Beijing Liaison Office Unit 915 Bei Hai Wan Tai Bldg. No. 6 Chaoyangmen Beidajie Beijing, 100027, No. China Tel: 86-10-85282100 Fax: 86-10-85282104
Korea
Microchip Technology Korea 168-1, Youngbo Bldg. 3 Floor Samsung-Dong, Kangnam-Ku Seoul, Korea 135-882 Tel: 82-2-554-7200 Fax: 82-2-558-5934
Atlanta
500 Sugar Mill Road, Suite 200B Atlanta, GA 30350 Tel: 770-640-0034 Fax: 770-640-0307
Singapore
Microchip Technology Singapore Pte Ltd. 200 Middle Road #07-02 Prime Centre Singapore, 188980 Tel: 65-6334-8870 Fax: 65-6334-8850
Boston
2 Lan Drive, Suite 120 Westford, MA 01886 Tel: 978-692-3848 Fax: 978-692-3821
China - Chengdu
Microchip Technology Consulting (Shanghai) Co., Ltd., Chengdu Liaison Office Rm. 2401, 24th Floor, Ming Xing Financial Tower No. 88 TIDU Street Chengdu 610016, China Tel: 86-28-6766200 Fax: 86-28-6766599
Taiwan
Microchip Technology Taiwan 11F-3, No. 207 Tung Hua North Road Taipei, 105, Taiwan Tel: 886-2-2717-7175 Fax: 886-2-2545-0139
Chicago
333 Pierce Road, Suite 180 Itasca, IL 60143 Tel: 630-285-0071 Fax: 630-285-0075
Dallas
4570 Westgrove Drive, Suite 160 Addison, TX 75001 Tel: 972-818-7423 Fax: 972-818-2924
China - Fuzhou
Microchip Technology Consulting (Shanghai) Co., Ltd., Fuzhou Liaison Office Unit 28F, World Trade Plaza No. 71 Wusi Road Fuzhou 350001, China Tel: 86-591-7503506 Fax: 86-591-7503521
EUROPE
Denmark
Microchip Technology Nordic ApS Regus Business Centre Lautrup hoj 1-3 Ballerup DK-2750 Denmark Tel: 45 4420 9895 Fax: 45 4420 9910
Detroit
Tri-Atria Office Building 32255 Northwestern Highway, Suite 190 Farmington Hills, MI 48334 Tel: 248-538-2250 Fax: 248-538-2260
China - Shanghai
Microchip Technology Consulting (Shanghai) Co., Ltd. Room 701, Bldg. B Far East International Plaza No. 317 Xian Xia Road Shanghai, 200051 Tel: 86-21-6275-5700 Fax: 86-21-6275-5060
Kokomo
2767 S. Albright Road Kokomo, Indiana 46902 Tel: 765-864-8360 Fax: 765-864-8387
France
Microchip Technology SARL Parc d'Activite du Moulin de Massy 43 Rue du Saule Trapu Batiment A - ler Etage 91300 Massy, France Tel: 33-1-69-53-63-20 Fax: 33-1-69-30-90-79
Los Angeles
18201 Von Karman, Suite 1090 Irvine, CA 92612 Tel: 949-263-1888 Fax: 949-263-1338
China - Shenzhen
Microchip Technology Consulting (Shanghai) Co., Ltd., Shenzhen Liaison Office Rm. 1315, 13/F, Shenzhen Kerry Centre, Renminnan Lu Shenzhen 518001, China Tel: 86-755-2350361 Fax: 86-755-2366086
New York
150 Motor Parkway, Suite 202 Hauppauge, NY 11788 Tel: 631-273-5305 Fax: 631-273-5335
Germany
Microchip Technology GmbH Gustav-Heinemann Ring 125 D-81739 Munich, Germany Tel: 49-89-627-144 0 Fax: 49-89-627-144-44
San Jose
Microchip Technology Inc. 2107 North First Street, Suite 590 San Jose, CA 95131 Tel: 408-436-7950 Fax: 408-436-7955
Hong Kong
Microchip Technology Hongkong Ltd. Unit 901-6, Tower 2, Metroplaza 223 Hing Fong Road Kwai Fong, N.T., Hong Kong Tel: 852-2401-1200 Fax: 852-2401-3431
Italy
Microchip Technology SRL Centro Direzionale Colleoni Palazzo Taurus 1 V. Le Colleoni 1 20041 Agrate Brianza Milan, Italy Tel: 39-039-65791-1 Fax: 39-039-6899883
Toronto
6285 Northam Drive, Suite 108 Mississauga, Ontario L4V 1X5, Canada Tel: 905-673-0699 Fax: 905-673-6509
India
Microchip Technology Inc. India Liaison Office Divyasree Chambers 1 Floor, Wing A (A3/A4) No. 11, O'Shaugnessey Road Bangalore, 560 025, India Tel: 91-80-2290061 Fax: 91-80-2290062
United Kingdom
Arizona Microchip Technology Ltd. 505 Eskdale Road Winnersh Triangle Wokingham Berkshire, England RG41 5TU Tel: 44 118 921 5869 Fax: 44-118 921-5820
03/01/02
DS41109D-page 34
Preliminary
(c) 2002 Microchip Technology Inc.

▲Up To Search▲

Price & Availability of HCS365T

	To Download HCS365T Datasheet File
If you can't view the Datasheet, Please click here to try to view without PDF Reader .