![]() |
|
If you can't view the Datasheet, Please click here to try to view without PDF Reader . |
|
Datasheet File OCR Text: |
1998 microchip technology inc. ds51111a hcs410 evaluation kit user's guide i nformation contained in this publication regarding device applications and the like is intended through suggestion only and may be superseded by updates. no representation or warranty is given and no liability is assumed by microchip technology incorporated with respect to the accuracy or use of such information, or infringement of patents or other intellectual property rights arising from such use or otherwise. use of microchip's products as critical components in life support systems is not authorized except with express written approval by microchip. no licenses are conveyed, implicitly or otherwise, under any intellectual property rights. the microchip logo, name, pic, keeloq, picmaster, picstart and pro mate are registered trademarks of microchip technology incorporated in the u.s.a. and other countries. picmicro, icepic, micro id , smart serial and mplab are trademarks of microchip in the u.s.a. and other countries. ? microchip technology incorporated 1998. fuzzy tech is a registered trademark of inform software corporation. intel is a registered trademark of intel corporation. dos and ibm pc/at are registered trademark of international business machines corporation. ms-dos, windows and excel are registered trademarks of microsoft corporation. compuserve is a registered trademark of compuserve incorporated. driveway is a trademark of aisys intelligent systems. all rights reserved. all other trademarks mentioned herein are the property of their respective companies.
hcs410 evaluation kit users guide ds51111a 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a table of contents chapter 1. setup evaluation kit overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 software installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 hardware setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 chapter 2. base station base station overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 base station outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 inductive communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 rf communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 high voltage - danger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 stand alone mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 base station programming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 learning a transponder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 erasing transponders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 chapter 3. hcs410 programming an hcs410 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 serial number . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 transport code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 user eeprom . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 low voltage trip point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 rf baud rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 iff baud rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 overflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 anti collision / xp rf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 synchronization counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 other options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 user eeprom dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 iff d ialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 monitor iff dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 code hopping transmissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 seed transmissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 hcs410 evaluation kit users guide ds51111a 1998 microchip technology inc. chapter 4. configuration file configuration file overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 load setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 save setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 save setup as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 chapter 5. key generation key generation overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 manufacturer's code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 key generation algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 key generation source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 seed/iff2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 simple learn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 normal learn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 secure learn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 chapter 6. communication serial port selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 chapter 7. fault finding fault finding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 appendix a. schematic diagrams hcs410 base station (base_v3.0) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 hcs410 base station (gen_5v) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 hcs410 base station (demod) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 hcs410 base station (pic16c63) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 hcs410 base station (coildrv) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 hcs410 dip socket long range rf transponder . . . . . . . . . . . . . . . . . . . . 30 hcs410 soic short range transponder. . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 index index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 worldwide sales & service sales listing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 1 chapter 1. setup evaluation kit overview the hcs410 evaluation kit allows the user to program hcs410s and look at how the hcs410 is used in a system. the kit is made up of 4 principal items. the software, the base station, a batteryless transponder and a battery powered transponder / rf transmitter. the base station has the ability to program transponders inductively and act as a stand alone decoder. when in stand alone mode the base station can learn transponders and do inductive iff validation. the batteryless transponder is powered through the magnetic field provided by the base station. the transponder / transmitter allows the user to combine the convenience of a rf transmitter with the security of a transponder. typically the rf transmitter will be used as a convenience item unlocking the car as the user approaches the car. once in the car a coil around the ignition electronically validates the key disarming the immobilizer. this is completely transparent to the user. even if the battery in the key goes flat the hcs410 will still be able to get power from the field generated by the car's coil. software installation place the software into a disk drive. from program manager choose file|run type in a:install.exe follow the installation instructions from there on. the first time you run the software please select the serial port you will be using for communicating to the base station from the options|serial port menu. hardware setup when the user wants to program either the base station or a transponder, the base station needs to be connected to a free serial port on the driving pc using the serial cable provided. after this the base station should be powered up using the 12v power supply provided in the evaluation kit. when programming a transponder inductively make sure the transponder is in the field when hitting the program button. hcs410 evaluation kit users guide ds51111a - page 2 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 3 chapter 2. base station base station overview warning: high voltage first and foremost. there are high voltage areas on the base station board. the voltage on the coil can reach over 400 vpp and has a peak current of 1a. the high voltage areas on the board are marked clearly. don't touch anything within those areas. warning: strong magnetic field the base stations generates a strong magnetic field. avoid close proximity with devices influenced by magnetic fields, such as crts, pacemakers, computer disks, audio and video tapes, and magnetic strp cards. base station features: ? inductive authentication of transponders ? can receive and validate keeloq ? code hopping transmissions ? can learn up to 4 keeloq encoders ? can be used to program hcs410 devices inductively or through the pwm / s2 lines the base station has a number of push button inputs and led outputs on it. these can be described as follows: the reset push button resets the base station the poll push button allows the user to force the base station to poll continuously for 2 seconds before switching off. the learn push button places the base station in learn mode the learn led gives the user information about the status of a learn and general functioning of the base station. the learn led will flicker on briefly each time a transponder's serial number is read as the transponder is brought into the field. this indicates that the base station has detected a transponder in the field. if the transponder has been learned the base station will attempt to validate the transponder. the valid token led is lit up for 500ms each time the base station successfully validates a learned transponder inductively. the s0, s1, s2, s3 and prox_rf leds are used to indicate that a valid rf transmission has been received from a transmitter and the leds are lit for 500ms depending on which buttons were pressed on the transmitter the field led indicates when the base station is polling for a transponder and the field is on. hcs410 evaluation kit users guide ds51111a - page 4 1998 microchip technology inc. figure 2.1: base station base station outputs the base station has a number of leds which display the results of authentication attempts. the s0, s1, s2, s3 and prox_rf leds are switched on for 500ms whenever the base station receives a valid code hopping transmission from a learned transmitter. the prox_rf will be illuminated if the hcs410 is activated by a magnetic field. the valid token led is switched on for 500ms whenever the base station authenticates a learned transponder. the learn led flickers every time a rf transmission is received or if the serial number is read from a transponder. this is done before the base station attempts check if the transmitter has been learned. this output is useful to a programmer giving feedback as to whether the base station detects a transponder or transmitter. 12v dc pic 16c63 93c 46b connect 12v power supply connect rs232 db9 to here reset poll learn high voltage area hcs410 evaluation kit base station rf reciever xx xx xx xx xx xx xx xx s0 s1 s2 s3 field learn prox_rf valid token jp2 1998 microchip technology inc. ds51111a - page 5 chapter 2. base station inductive communication the inductive communication between the base station and the hcs410 takes place via the resonant capacitor / coil combination and analog reception circuitry on the base station. the capacitor / coil are resonated at 125 khz. rf communication rf reception on the base station is done using the telecontrolli receiver module on the base station. the transmitter transmits at 433 mhz. table 2.1: base station jumpers jumper name description jp1 b2t this is the line between the pic and the circuitry controlling the base station coil. the jumper should be in place unless the user wants to disable the base station coil. jp2 t2b this connects the base station to the inductive analog reception circuitry (pins 1 and 2) or to the 8x2 header (pins 2 and 3). jp3 rf_out this is the output of the rf receiver. this jumper should be removed to disconnect the rf reciever from the pic. j2 the pins on the 8x2 header are mapped as follows: pin 1 - ground pin 2 - not used pin 3 - pwm used during programming pin 4 - not used pin 5 - 12 v directly from the power supply pin 6 - not used pin 7 - lc0 pin 8 - not used pin 9 - lc1 / s3 pin 10 - not used pin 11 - s2 pin 12 - not used pin 13 - s1 pin 14 - 5v pin 15 - s0 pin 16 - not used hcs410 evaluation kit users guide ds51111a - page 6 1998 microchip technology inc. high voltage - danger please note that base station capacitor / coil has a peak to peak voltage of over 400v and a peak current of over 1a. please don't touch any of the areas that are labeled as high voltage. you will get shocked. stand alone mode the base station in stand alone mode acts as a stand alone decoder. the base station can learn up to 4 transponders in stand alone mode. when in stand alone mode the user can look at iff activity on the base station by connecting the base station to the pc and selecting the monitor iff dialog box. stand alone mode is the default state of the base station and the base station returns to stand alone mode whenever a command from the pc is completed. the base station does not need to be connected to the pc when in stand alone mode. base station programming to program the base station the user should connect the base station to the appropriate com port on the pc using the rs232 cable given in the evaluation kit. after this the user should enter the appropriate key generation options and transport code in the options|key generation dialog box. following this the user should bring up the program dialog box by selecting the hcs410|program from the main menu. the user should then select the hcs410's baud rate, the lc encoding and the anti-collision / xprf option to be used by the system's transponders. the user should then hit the prgm base button after which the base will be programmed. please consult the fault finding section for communication problems. learning a transponder to learn a transponder onto a system inductively the user should go through the following steps: 1. check that the base station is powered up and connected to the pc. 2. program the base station and transponder with the appropriate setup. 3. hit the learn button - the learn led will light up. 4. bring the transponder into the field. 5. if the transponder is successfully learned the learn led will flash on and off about 10 times. 1998 microchip technology inc. ds51111a - page 7 chapter 2. base station 6. the base station can learn up to 4 transponders, after which the first transmitter learned will be over written. 7. if the learn operation fails the learn led will turn off and then on for a second before returning to normal stand alone mode. it is also possible to learn an hcs410 onto the base station using rf: 1. check that the base station is powered up and connected to the pc. 2. program the base station and transponder with the appropriate setup. 3. hit the learn button - the learn led will light up. 4. press one of the buttons on the transmitter - the learn led will switch off. 5. press a button on the transmitter a second time. note that when using secure learn the second transmission should be a seed transmission. 6. if the transponder is successfully learned the learn led will flash on and off about 10 times. 7. if the learn operation fails the learn led will turn off and then on for a second before returning to normal stand alone mode. if the learn operation fails the user should check that both the transponder and base station have been programmed correctly. erasing transponders it is possible to erase all the transponders learned by the base station. 1. press and hold the learn push button. the learn led will switch on. 2. after about 8 seconds the learn led will switch off indicating that all the transponders have been erased. hcs410 evaluation kit users guide ds51111a - page 8 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 9 chapter 3. hcs410 programming an hcs410 the program dialog box can be reached via hcs410|program in the main menu. the program dialog box allows the user to select the hcs410 options to be programmed into the hcs410. after programming the hcs410 the base station should be programmed so that it will be able to learn the hcs410. for a more detailed description of all the features please consult the latest data sheet. ? serial number - 32-bit serial number ? transport code - 32-bit transport code ? user eeprom - 64-bit user eeprom ? low voltage trip point - can be set to low (3v lithium battery) or high (6v battery). ? rf baud rate - selects the communication speed used in code hopping mode. ? iff baud rate - selects the communication speed used in inductive communication. ? overflow - extends the range of the synchronization counter. ? anti collision / xprf - sets anti-collision and rf transmission options in transponder mode. ? code word blanking - blanks out alternate code words enabling more power to be transmitted in each transmission (fcc). ? additional damping - used in circuits with a high q to enable faster data communication rates. ? min 3 tx - at least 3 complete rf transmissions are sent each time the transponder is activated using the s0, s1 or s2 inputs. ? led output - s2 can double as a led output if this option is enabled. ? delayed increment - increments the synchronization counter by 12, 20 seconds after the last button press. this can be used by the decoder to defeat the latest attack on code hopping systems. ? extended serial number - the full 32-bit serial number is transmitted in a code hopping transmission when the extended serial number is enabled. if not enabled the s0:s1:s2 status replaces the most significant nibble of the serial number in a transmission. ? the ind prgm button programs the hcs410 with the data selected inductively hcs410 evaluation kit users guide ds51111a - page 10 1998 microchip technology inc. ? the wire prgm button programs the hcs410 with the data selected using the s2 and pwm lines. this can be done when the transmitter is connected to the base station at j2. figure 3.2: wire programming a transmitter/transponder ? the ok button accepts the settings selected but does not program the hcs410 or base station. ? the cancel button discards the changes made and closes the dialog box. ? the prgm base button programs the base with the appropriate manufacturer's code, key generation source and algorithm, transmission format and speed so that it is able to communicate with an hcs410 programmed with the settings as given. the key and seed options are set when the user selects the key generation method to be used when the device is programmed. please consult the fault finding section for communication problems. serial number the hcs410 has a 32-bit (8 hex digit) serial number the user can select. the auto increment option will increment the serial number if the hcs410 is successfully programmed when checked. transport code to program the hcs410, change the serial number or the configuration word inductively the base station needs to send a 32-bit transport code after the appropriate op-code has been sent. after the transport code has been presented the base station can send the data to be programmed into the device. if the transport code presented to the hcs410 does not match the transport code in the hcs410 the op-code will be ignored. 12v dc pic 16c63 93c 46b connect 12v power supply connect rs232 db9 to here reset poll learn high voltage area hcs410 evaluation kit base station rf receiver xx xx xx xx xx xx xx xx s0 s1 s2 s3 field learn prox_rf valid token jp2 hcs 410 e t j1 1998 microchip technology inc. ds51111a - page 11 chapter 3. hcs410 this feature was added to prevent accidentally reprogramming the hcs410 inductively. the transport code is the 32 most significant bits of the seed / key2. during wire programming the transport code that is being programmed into the hcs410 is set in the key generation dialog box and does not need to match the transport code currently in the hcs410. if the user wants to inductively program the hcs410 or change the serial number the user should enter a transport code in the appropriate dialog box. user eeprom the hcs410 has 64 bits of user eeprom. a 64-bit number can be entered (16 hex digits) when programming the device. if a user were to enter 0123456789abcdef the data would be mapped such that cdef was programmed into usr0 and 0123 programmed into usr3. low voltage trip point the hcs410 can be used with either a 3v or a 6v battery. the low voltage trip point selects between the initial battery voltages. if the supply voltage drops below approximately 4v (6v battery) and 2v (3v battery) the hcs410 will set the vlow bit in a code hopping transmission. this gives the base station the ability to warn the user if the bit is used. in addition to the vlow bit being set the led output is disabled when a low voltage condition occurs warning the user to replace the battery. rf baud rate the hcs410 can communicate at 4 speeds in rf mode. the baud rate bits select the nominal communication rate. these run from 00 being the slowest (t e = 400 s) to 11 being the fastest (t e = 100 s) communication rate. iff baud rate the hcs410 can communicate at 2 speeds inductively. the slow baud rate has a nominal elemental period of 200 s and a fast baud rate of 100 s. overflow there are two overflow bits available in the hcs410. an overflow bit is cleared every time the 16-bit synchronization counter wraps from ffff to 0000 (hex). this extends the counter range from 64k transmissions to 192k transmissions. the overflow bits cannot be reset unless the device is re-programmed. anti collision / xp rf these two bits in the hcs410 are used to enable or disable anti-collision mode and enable or disable rf transmissions when in transponder mode. ? none - both anti-collision and inductively activated rf transmissions disabled and the hcs410 works as a pure transponder in iff mode. hcs410 evaluation kit users guide ds51111a - page 12 1998 microchip technology inc. ? proximity activated - when this is selected the hcs410 will send out ack pulses when it is placed in a magnetic field. if no response is received from the base station within 50ms the hcs410 will transmit a code hopping transmission for 2 seconds before returning to transponder mode. ? anti-collision - when in this mode anti-collision mode is entered. this allows multiple transponders to be brought into the same field. ? rf echo - all of the hcs410 transponder responses are echoed on the pwm output when this is selected. synchronization counter the synchronization counter is incremented and transmitted each time the hcs410 transmits a code hopping transmission. the synchronization counter is automatically set to 0000 in software when the hcs410 is first programmed. other options a number of options are automatically selected by the software. these are: ? the code hopping transmission modulation format is always set to pwm. ? the oscillator tuning bits are set by the base station. ? the key / seed options are set in the key generation dialog box selected from the options|key generation in the main menu. user eeprom dialog box the 64-bit user eeprom and 32-bit serial number on the hcs410 can be read and modified in iff mode. the user eeprom dialog box allows the user to read or write to the user eeprom on the hcs410. the user eeprom dialog box can be opened through the hcs410|eeprom in the main menu. to read the user eeprom the user should hit the r ead button. this will read all the user information if there is a transponder in the field. the user eeprom can then be modified as needed and written by hitting the write button. to write to the hcs410's serial number the base station needs to have the transport code that was originally programmed into the hcs410. the transport code should be entered to allow the user to change the serial number. if the transport code entered does not match the transport code in the hcs410 the serial number will not be modified. the command status line lets the user know whether the read / write passed or failed. please consult the fault finding section for communication problems. 1998 microchip technology inc. ds51111a - page 13 chapter 3. hcs410 iff dialog box the iff dialog box can be opened by selecting hcs410|iff from the main menu. the user can use this option to manually do a challenge / response with a transponder in the field. to do this the user should select the key and algorithm to be used for the iff and enter a 32-bit challenge. it is important to note that unless the 2 key iff mode is selected in the key generation dialog box the user will not be able to use key 2 for an iff. after selecting an algorithm, selecting a key and entering the 32-bit challenge the user should hit the iff button. the base station will attempt to do an iff with a transponder in the field. the iff result text box gives information about the result of the iff. please consult the fault finding section for communication problems. monitor iff dialog box when the base station is in stand alone mode the base station will dump the serial number, challenge sent, the hcs410's response and the decrypted response to the serial port whenever a successful iff is performed. valid rf transmissions received by the base station in stand alone mode are also dumped to the serial port and can be seen in the monitor iff dialog box, with the challenge set to 00000000. this can be monitored by the user in the monitor iff dialog box (hcs410|monitor iff). code hopping transmissions the hcs410 can be used as an rf transmitter. to force a keeloq code hopping transmission the user can activate any of the s inputs, s0, s1, s2 or a combination the s inputs (note: certain button combinations cause a seed transmission if enabled). a code hopping transmission has two portions - a fixed portion and a code hopping portion. the fixed portion contains the 2 que bits, 2 crc bits, a vlow bit, 4/0 button status bits and 28/32-bit serial number. the encrypted information contains 4 button status bits, 12 discrimination bits and a 16-bit synchronization counter. hcs410 evaluation kit users guide ds51111a - page 14 1998 microchip technology inc. seed transmissions if seed transmissions are enabled in the key generation dialog box the user can force the hcs410 to transmit a seed transmission in place of a code hopping transmission. a seed transmission takes 60 least significant bits of the seed from eeprom and transmits the, followed by the 4 bit button status information, vlow bit, 2 crc bits and the 2 que bits. seed transmissions are activated by pulling s0, s1 and s2 high at the same time. a delayed seed transmission can be activated by pulling s0 and s1 high at the same time. a delayed seed transmission transmits a normal c ode hopping transmission for 2 seconds and then switches over to seed transmissions. hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 15 chapter 4. configuration file configuration file overview the keeloq production programmer (pg306001) uses a configuration file to save user selectable settings. the evaluation kit also uses the configuration file to save the user selectable settings. this makes the migration from the evaluation kit to the production programmer easier than would otherwise be the case. load setup to load a previously saved configuration file select file|load setup from the main menu. save setup to save the current configuration select file|save setup from the main menu. save setup as to save the current configuration file under a different name and directory select file|save setup from the main menu. hcs410 evaluation kit users guide ds51111a - page 16 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 17 chapter 5. key generation key generation overview key generation is used to generate keys for hcs410 encoders. the hcs410 uses it's key to generate responses to iff challenges and to encrypt the code hopping portion of a transmission when used as a transmitter. the hcs410 has 2 keys available. the first of the keys is used to encrypt the code hopping portion of the key and to do any of the iff functions when an iff is performed using key 1. key 2 can be used either as a second iff key or as a seed in a seed transmission. the key is generated when the hcs410 is programmed. key generation in keeloq systems has 3 parts, the key generation source, the key generation algorithm and the manufacturer's code. the key generation source is either the hcs410's serial number or the hcs410's seed. normal key generation uses the encoder's serial number as the source. secure learn uses the hcs410's seed as a source. the key generation algorithm can be selected as either the keeloq decryption algorithm or as the xor algorithm. the manufacturer's code is a 64-bit value used to create a unique relationship between key generation source and the encoder key. the key generation method used when programming the base station or an hcs410 is selected in the key generation dialog box (options|key generation). note that in order to use secure learn the second key is used as a seed and the user only has a single key. this also implies that if a user were to use two keys for iff, key generation must be either simple or normal key generation because enabling 2 key mode in the hcs410 disables seed transmissions. manufacturer's code the 64-bit manufacturer's code is used in key generation for one or both of the hcs410's keys. the manufacturer's code creates a unique relationship between key generation source and the encoder key. if two manufacturers use the same source (say serial number of 1111) and algorithm (say decryption) the key generation process will produce two completely different encoder keys for the two manufacturer's. encoders for the two different manufacturers will not be interchangeable. this prevents cloning of transmitters. if two manufacturers decide to work together they will have to share a manufacturer's code. the manufacturer's code is central to system security and should be kept a closely guarded secret. the manufacturer's code is entered in the key generation dialog box (options|key generation). hcs410 evaluation kit users guide ds51111a - page 18 1998 microchip technology inc. key generation algorithm there are two key generation algorithms currently supported by microchip. the first of these is the decryption algorithm. the second is the xor algorithm. both algorithms use the manufacturer's code to create a unique link between the key generation source and the encoder key. key generation source the source used in key generation is either the serial number of the hcs410 or the seed of the hcs410. when using the seed as the source the user will need to transmit a seed transmission during the learn process. seed/iff2 the hcs410 has a 64-bit space that can be used as either a seed during a seed transmission or as a sec ond iff key. the selection can be made in the key generation dialog box (options|key generation). this space is also used as the transport code which is used to protect the hcs410 from being accidently being programmed in iff mode. the seed/key2 is used as the transport code regardless of the setting of seed/iff2. ? no seed - 1 key - this option disables the use of the area completely disabling both seed transmissions and the areas use as a second key. ? limited seed - the seed transmissions will be disabled when the synchronization counter goes over 256 when limited seed transmissions are enabled - only 1 key is available for iff authentication. ? seed - seed transmissions are always enabled in this mode - only 1 key is available for iff authentication. ? key iff - seed transmissions are disabled and the transponder has 2 keys for iff authentication available. simple learn simple learn uses a single key for all the encoders in a system. this key is the manufacturer's code. this method of key generation is less secure than either normal learn or secure learn because once the encryption key for one encoder in the system is known, the encryption key for all encoders in the system is known. in a system where convenience is a priority and security is a low priority this may not be a problem. 1998 microchip technology inc. ds51111a - page 19 chapter 5. key generation normal learn normal learn uses the serial number of the hcs410 during key generation to generate the key. when learning the hcs410 onto a receiver / base station the receiver needs to either read the serial number (iff mode) or receive a valid transmission (rf mode). thereafter a key can be generated using the decryption algorithm and the manufacturer's code. secure learn secure learn uses a seed transmission from the hcs410 to generate a key. when secure learn is used as the key generation method the user will only have a single iff key, the location of the second iff key being used to store the seed. the user can select between either the decryption algorithm or the xor algorithm to generate the encoder key. hcs410 evaluation kit users guide ds51111a - page 20 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 21 chapter 6. communication serial port selection the user can select which of the pc's serial ports to use in the select serial port dialog box. the user can select from com1 through com4 if available on the pc. the user can test the communication between the base station and the pc by hitting the 'test coms' button. ok accepts the selection and cancel leaves the dialog box discarding changes. please consult the fault finding section for communication problems. hcs410 evaluation kit users guide ds51111a - page 22 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 23 chapter 7. fault finding fault finding if the user gives a pc command (program, iff, read, write etc.) and the command fails the user should check for the following: 1. check that the base station is powered up. 2. check that the serial cable is connected to the base station and pc securely. 3. check that the correct serial port has been selected. 4. check that the base station has been programmed with the current setup (communication speed and protocol). 5. check that the transponder is in the field. 6. check that the jumpers at jp1, jp2 (across pins 1 & 2) and jp3 are inserted. if the user programs a transponder and the transponder doesn't want to learn the transponder: 1. check that the power is on. 2. check that the base station has been programmed - hit the 'prgm base' button in the hcs410|program dialog after programming the hcs410. 3. check that the transponder was programmed correctly. failed to program a long range transmitter/transponder when plugged into the board: 1. check that jumper at jp2 is placed across pins 2 & 3. fails to receive rf transmissions: 1. check that jp3 is inserted. 2. check that the transmitter is programmed with an rf transmission rate of 00 or 01. hcs410 evaluation kit users guide ds51111a - page 24 1998 microchip technology inc. notes: hcs410 evaluation kit users guide 1998 microchip technology inc. ds51111a - page 25 appendix a. schematic diagrams figure a.1: hcs410 base station (base_v3.0) l1 coil 500v wb1528 coildrv 12v data_b2t lc-coil lc-cap osc vcc gen_5v 12v dg_5v an_5v d1 1n5820 case 267-03 demod an_5v bs_rf data_t2b pic16c63 osc data_b2t data_t2b 12v c3 10nf 500v 2225 + 4 + 2 + 3 + 1 + 5 j1 mdc-034 12v voltage high hcs410 evaluation kit users guide ds51111a - page 26 1998 microchip technology inc. figure a.2: hcs410 base station (gen_5v) 12v r1 22r c4 1u 16v eia size a vin 3 vout 1 g n d 2 u2 njm78l05ua sot-89 c5 100n 16v c41 68u eia size d r71 1k dg_5v d14 power green led r2 22r vin 3 vout 1 g n d 2 u1 njm78l05ua sot-89 an_5v c40 68u eia size d c7 100n 16v jmp1 jumper c6 1u 16v eia size a jmp1 is a "virtual" jumper used to separate analog and digital ground netlists only and is to be shorted out. 1 23 1 sot-89 1998 microchip technology inc. ds51111a - page 27 appendix a. schematic diagrams figure a.3:hcs410 base station (demod) r41 270r an_5v r23 100r d6 uf1007 bs_rf 2.5v r27 470k d4 ll4148 d5 ll4148 r28 1k 3 2 1 4 1 u7a lm6036m soic-14 r20 10k r19 22k 5 6 7 4 1 1 u7b lm6036m soic-14 r33 10k 10 9 8 4 1 1 u7c lm6036m soic-14 r32 680r r36 47k r37 47k c24 18p 12 13 14 4 1 1 u7d lm6036m soic-14 r39 15k c25 100p r38 1k8 c22 1n r35 270r r31 6k8 c23 100n 16v r18 220k c18 1n c43 10n r22 10k c19 100n 16v r29 1k d7 lm385-2.5 to-92 r24 100r c21 1n5 500v r25 1m r26 1m c42 10n r58 n/c r54 68k r50 n/c 5 6 7 8 4 u8b lm358m soic-8 r49 1k r52 1k high voltage c20 10n 500v 3 2 1 8 4 u8a lm358m soic-8 c28 1n c27 2n7 r55 68k r48 1k r47 4k7 r42 100k d9 ll4148 data_t2b r45 1k r44 1k q8 2n7002a sot-23 c29 100n 16v c30 100n 16v 1 + - + - + - + - + - + - envelope detector buffer band pass filter band pass filter low pass filter schmidt trigger hcs410 evaluation kit users guide ds51111a - page 28 1998 microchip technology inc. figure a.4: hcs410 base station (pic16c63) c38 100n 16v vcc vcc 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 j3 rf-module vcc 1 j9 antenna-lead provide strain relief vcc vcc c39 100n 16v r66 10k r67 10k vcc sw1 learn pb ra0 2 ra1 3 ra2 4 ra3 5 ra4/t0cki 6 ra5/ss 7 rc0/t1oso/t1cki 11 rc1/t1osi/ccp2 12 rc2/ccp1 13 rc3/sck/scl 14 osc1/clkin 9 osc2/clkout 10 vss 8 vss 19 vdd 20 mclr/vpp 1 rb0/int 21 rb1 22 rb2 23 rb3 24 rb4 25 rb5 26 rb6 27 rb7 28 rc7/rx/dt 18 rc6/tx/ck 17 rc5/sdo 16 rc4/sdi/sda 15 u12 pic16c63 28 lead skinny dip s0 s1 s3 s2 r70 10k sw2 reset pb cs 1 clk 2 di 3 nc 6 nc 7 do 4 v c c 8 v s s 5 u11 93c46b 8 lead dip r69 10k 1 j6 tp jp3 rf out r80 1k rfin pwm r59 1k r61 1k r60 1k r62 1k d10 s0 d12 s1 d11 s2 d13 s3 sw3 pol pb c31 27p y1 4 mhz c32 27p 1 j4 tp r82 10k c35 1u 16v c36 1u 16v vcc jp1 b2t osc data_b2t 5 9 4 8 3 7 2 6 1 p1 db9 female v+ 2 din1 11 din2 10 rout1 12 rout2 9 c1+ 1 c1- 3 v- 6 dout1 14 dout2 7 rin1 13 rin2 8 c2+ 4 c2- 5 v c c 1 6 g n d 1 5 u10 ds14c232tm soic-16 tx1 1 j7 tp jp2 t2b 1 j5 tp data_t2b r79 1k 1 j8 tp c34 1u 16v rx1 c37 1u 16v r78 1k d17 prox_rf c33 1u 16v r77 1k d15 valid token d16 learn r81 1k d18 field r83 1k vcc 1 3 5 7 9 11 13 15 2 4 6 8 10 12 14 16 j2 con16a 12v s3 s2 s1 s0 pwm 12v lc0 1 1 1 1998 microchip technology inc. ds51111a - page 29 appendix a. schematic diagrams figure a.5: hcs410 base station (coildrv) q6 mmbt3904 sot-323 c16 100n 16v r13 680r c17 3300u 25v r17 0.47r 1watt 12v r14 150r q1 mtp23p06v to-220ab r16 1r 1watt lc-coil high voltage r76 n/c lc-cap q2 mtp50n06v to-220ab q7 mmbt3906 sot-323 q5 2n7002a sot-23 r75 n/c enhanced frequency circuit r11 10k vcc 9 10 8 u4c mc74hc00ad soic-14 12 13 11 u4d mc74hc00ad soic-14 vcc r15 680r d3 mur860 to-220ac q4 mtw14n50e to-247ae q3 2n7002a sot-23 d 12 clk 11 q 9 q 8 p r 1 0 c l 1 3 u5b mc74hc74ad soic-14 r84 100r d 2 clk 3 q 5 q 6 p r 4 c l 1 u5a mc74hc74ad soic-14 4 5 6 u4b mc74hc00ad soic-14 logic high = field logic low = no field data_b2t vcc enhanced frequency circuit inside this box resistors r74, r75 and r76 solder in 0 ohm resistors if not using c15 100n 16v c13 100n 16v c14 100n 16v vcc r73 n/c r72 0r 6 mhz 16 mhz pi 11 rst 12 q4 7 q5 5 q6 4 q7 6 q8 14 q9 13 q10 15 q12 1 q13 2 q14 3 po 9 po 10 u6 74hc4060 soic-16 1 2 3 u4a mc74hc00ad soic-14 r12 10k r74 n/c osc solder only one: r72 or r73 hcs410 evaluation kit users guide ds51111a - page 30 1998 microchip technology inc. figure a.6: hcs410 dip socket long range rf transponder 1 3 5 7 9 11 13 15 2 4 6 8 10 12 14 16 con16a bt1 6v c4 100nf 0805 vcc r6 10r 0805 pwm d2 ll4148 minimelf vcc sw1 s0 sw2 s1 s0 1 s1 2 s2/led 3 lc1 4 vdd 8 lc0 7 pwm 6 vss 5 u2 hcs410 dip-8 lc0 pwm jp1 jumper r2 47k 0805 q1 bfr92a sot23 c2 2.2pf 0805 l1 20mm pcb trace c1 470pf 0805 r1 47r 0805 vcc r3 220r 0805 c3 12pf 0805 2 3 1 4 u1 saw 42527 l2 transponder coil 1206 c6 n/c 1206 c5 1.5nf 1206 r7 220k 0805 r4 220r 0805 r5 220r 0805 c7 2.2uf 0805 sw3 s2 d1 hsmh-tx00 3528 1 nc nc t t j1 1998 microchip technology inc. ds51111a - page 31 appendix a. schematic diagrams figure a.7: hcs410 soic short range transponder 1234 j1 con4 surface mount pads with .1" spacing c3 2.2uf 0805 s0 1 s1 2 s2/led 3 lc1 4 vdd 8 lc0 7 pwm 6 vss 5 u1 hcs410 soic-8 r1 n/c 0805 c1 1.5nf 1206 c2 n/c 1206 l1 transponder coil * see note below * note b) coilcraft surface mount 1812ls-105 xkbc i nductor c) dale im-4 axial lead inductor transponder coil footprints for a) custom fair rite / em2 ferrite core inductor hcs410 evaluation kit users guide ds51111a - page 32 1998 microchip technology inc. notes: 1998 microchip technology inc. ds51111a - page 33 hcs410 evaluation kit users guide index a algorithm ................................ 10 anti collision ............................. 9 b battery ...................................... 1 c code word blanking .................. 9 com ........................................ 6 counter .................................. 12 d damping ................................... 9 delayed increment ..................... 9 e erase ........................................ 7 extended serial number .............. 9 h high voltage .........................3 , 6 i iff ...............................1 , 11 , 17 iff2 ....................................... 18 k key generation .................. 17 , 18 l learn .................................... 1 , 7 low voltage trip point ......... 9 , 11 m manufacturer's code .......... 10 , 17 monitor .....................................6 n normal learn ............................19 o outputs ......................................3 overflow ...................................9 p pc ....................................... 1 , 6 poll ...........................................3 power .......................................1 pwm ........................................3 r reset .....................................3 rf ....................................... 1 , 9 rf baud rate ............................9 s s0 ................................... 3 , 4 , 9 s1 ................................... 3 , 4 , 9 s2 ....................................... 3 , 9 secure learn ............................19 seed .............................. 17 , 18 serial number ........................ 4 , 9 serial port ..................................1 simple learn ............................18 software installation ...................1 source .....................................17 stand alone .......................... 1 , 6 synchronization .......................12 t transmission ............... 3 , 4 , 7 , 18 transmitter .................... 1 , 3 , 4 , 7 transport code ..........................9 u user eeprom ...........................9 v valid token ...................... 3 , 4 hcs410 evaluation kit users guide ds51111a - page 34 1998 microchip technology inc. notes: 1998 microchip technology inc. ds51111a - page 35 index notes: information contained in this publication regarding device applications and the like is intended for suggestion only and may be superseded by updates. no representation or warranty is given and no liability is assumed by microchip technology incorporated with respect to the accuracy or use of such information, or infringement of patents or oth er intellectual property rights arising from such use or otherwise. use of microchip?s products as critical components in life support systems is not authorized except with express written approval by microchip. no licenses are conveyed, implicitly or otherwise, under any intellectual property rights. the microchip logo and name are registered trademarks of microchip technology inc. in the u.s.a. and other countries. all rights reserved. al l other trademarks mentioned herein are the property of their respective companies. ? 1999 microchip technology inc. all rights reserved. ? 1999 microchip technology incorporated. printed in the usa. 11/99 printed on recycled paper. americas corporate office microchip technology inc. 2355 west chandler blvd. chandler, az 85224-6199 tel: 480-786-7200 fax: 480-786-7277 technical support: 480-786-7627 web address: http://www.microchip.com atlanta microchip technology inc. 500 sugar mill road, suite 200b atlanta, ga 30350 tel: 770-640-0034 fax: 770-640-0307 boston microchip technology inc. 5 mount royal avenue marlborough, ma 01752 tel: 508-480-9990 fax: 508-480-8575 chicago microchip technology inc. 333 pierce road, suite 180 itasca, il 60143 tel: 630-285-0071 fax: 630-285-0075 dallas microchip technology inc. 4570 westgrove drive, suite 160 addison, tx 75248 tel: 972-818-7423 fax: 972-818-2924 dayton microchip technology inc. two prestige place, suite 150 miamisburg, oh 45342 tel: 937-291-1654 fax: 937-291-9175 detroit microchip technology inc. tri-atria office building 32255 northwestern highway, suite 190 farmington hills, mi 48334 tel: 248-538-2250 fax: 248-538-2260 los angeles microchip technology inc. 18201 von karman, suite 1090 irvine, ca 92612 tel: 949-263-1888 fax: 949-263-1338 new york microchip technology inc. 150 motor parkway, suite 202 hauppauge, ny 11788 tel: 631-273-5305 fax: 631-273-5335 san jose microchip technology inc. 2107 north first street, suite 590 san jose, ca 95131 tel: 408-436-7950 fax: 408-436-7955 americas (continued) toronto microchip technology inc. 5925 airport road, suite 200 mississauga, ontario l4v 1w1, canada tel: 905-405-6279 fax: 905-405-6253 asia/pacific hong kong microchip asia pacific unit 2101, tower 2 metroplaza 223 hing fong road kwai fong, n.t., hong kong tel: 852-2-401-1200 fax: 852-2-401-3431 beijing microchip technology, beijing unit 915, 6 chaoyangmen bei dajie dong erhuan road, dongcheng district new china hong kong manhattan building beijing 100027 prc tel: 86-10-85282100 fax: 86-10-85282104 india microchip technology inc. india liaison office no. 6, legacy, convent road bangalore 560 025, india tel: 91-80-229-0061 fax: 91-80-229-0062 japan microchip technology intl. inc. benex s-1 6f 3-18-20, shinyokohama kohoku-ku, yokohama-shi kanagawa 222-0033 japan tel: 81-45-471- 6166 fax: 81-45-471-6122 korea microchip technology korea 168-1, youngbo bldg. 3 floor samsung-dong, kangnam-ku seoul, korea tel: 82-2-554-7200 fax: 82-2-558-5934 shanghai microchip technology rm 406 shanghai golden bridge bldg. 2077 yan?an road west, hong qiao district shanghai, prc 200335 tel: 86-21-6275-5700 fax: 86 21-6275-5060 asia/pacific (continued) singapore microchip technology singapore pte ltd. 200 middle road #07-02 prime centre singapore 188980 tel: 65-334-8870 fax: 65-334-8850 taiwan, r.o.c microchip technology taiwan 10f-1c 207 tung hua north road ta i p e i , ta i wa n , ro c tel: 886-2-2717-7175 fax: 886-2-2545-0139 europe united kingdom arizona microchip technology ltd. 505 eskdale road winnersh triangle wokingham berkshire, england rg41 5tu tel: 44 118 921 5858 fax: 44-118 921-5835 denmark microchip technology denmark aps regus business centre lautrup hoj 1-3 ballerup dk-2750 denmark tel: 45 4420 9895 fax: 45 4420 9910 france arizona microchip technology sarl parc d?activite du moulin de massy 43 rue du saule trapu batiment a - ler etage 91300 massy, france tel: 33-1-69-53-63-20 fax: 33-1-69-30-90-79 germany arizona microchip technology gmbh gustav-heinemann-ring 125 d-81739 mnchen, germany tel: 49-89-627-144 0 fax: 49-89-627-144-44 italy arizona microchip technology srl centro direzionale colleoni palazzo taurus 1 v. le colleoni 1 20041 agrate brianza milan, italy tel: 39-039-65791-1 fax: 39-039-6899883 11/15/99 w orldwide s ales and s ervice microchip received qs-9000 quality system certification for its worldwide headquarters, design and wafer fabrication facilities in chandler and tempe, arizona in july 1999. the company?s quality system processes and procedures are qs-9000 compliant for its picmicro ? 8-bit mcus, k ee l oq ? code hopping devices, serial eeproms and microperipheral products. in addition, microchip ? s quality system for the design and manufacture of development systems is iso 9001 certified. |
Price & Availability of HCS410-ISN
![]() |
|
|
All Rights Reserved © IC-ON-LINE 2003 - 2022 |
[Add Bookmark] [Contact Us] [Link exchange] [Privacy policy] |
Mirror Sites : [www.datasheet.hk]
[www.maxim4u.com] [www.ic-on-line.cn]
[www.ic-on-line.com] [www.ic-on-line.net]
[www.alldatasheet.com.cn]
[www.gdcy.com]
[www.gdcy.net] |