View RX95HF_9037784.PDF datasheet online --- IC-ON-LINE

Datasheet File OCR Text:

this is information on a product in full production. june 2014 docid023884 rev 3 1/44 RX95HF near field communication transceiver for tag emulation datasheet - production data features ? operating mode supported: ? tag emulation for passive peer-to-peer communication ? hardware features ? dedicated internal frame controller ? highly integrated analog front end (afe) for rf communications ? transmission and reception modes in tag emulation mode ? optimized power management ? field detection mode ? rf communication @13.56 mhz ? iso/iec 14443 type a in tag emulation mode ? communication interfaces with a host controller ? serial peripheral interface (spi) slave interface ? up to 256-byte command/reception buffer (fifo) ? 32-lead, 5x5 mm, very thin fine pitch quad flat (vfqfpn) ecopack?2 package applications typical protocols supported: ? iso/iec 14443-3 type a tag emulation typical RX95HF applications include: ? keyboard, laptop, set top box, printer, tv, etc. ? identification, item pairing and data exchange vfqfpn32 5x5 mm www.st.com
contents RX95HF 2/44 docid023884 rev 3 contents 1 description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1.1 block diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1.2 list of terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2 pin and signal descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 3 power management and operating modes . . . . . . . . . . . . . . . . . . . . . . . 8 3.1 operating modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 3.2 startup sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 4 communication protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 4.1 serial peripheral interface (spi) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 4.1.1 polling mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 4.1.2 interrupt mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 5 commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 5.1 command format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 5.2 list of commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 5.3 idn command (0x01) description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 5.4 protocol select command (0x02) description . . . . . . . . . . . . . . . . . . . . . . 15 5.5 pollfield command (0x03) description . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 5.6 listen command (0x05) description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 5.7 send command (0x06) description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 5.8 idle command (0x07) description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 5.8.1 idle command parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 5.8.2 optimizing wake-up conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 5.8.3 using various techniques to return to ready state . . . . . . . . . . . . . . . . 21 5.9 read register (rdreg) command (0x08) description . . . . . . . . . . . . . . . 22 5.10 write register (wrreg) command (0x09) description . . . . . . . . . . . . . . . 23 5.10.1 improving rf performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 5.11 acfilter command (0x0d) description . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 5.12 echo command (0x55) description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
docid023884 rev 3 3/44 RX95HF contents 3 6 electrical characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.1 absolute maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.2 dc characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.3 power consumption characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 6.4 spi characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6.5 rf characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 6.6 oscillator characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 7 package mechanical data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 8 part numbering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 appendix a card emulation communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
description RX95HF 4/44 docid023884 rev 3 1 description the RX95HF is an integrated transceiver ic for contactless applications. the RX95HF embeds an analog front end to provide the 13.56 mhz air interface. the RX95HF supports iso/iec 14443 type a communication in tag emulation mode. 1.1 block diagram figure 1. RX95HF application overview RX95HF host interrupt management spi controller (mcu) figure 2. RX95HF block diagram
docid023884 rev 3 5/44 RX95HF description 7 1.2 list of terms table 1. list of terms term meaning gnd ground hfo high frequency oscillator lfo low frequency oscillator mcu microcontroller unit nfc near field communication rfid radio frequency identification rfu reserved for future use spi serial peripheral interface t l low frequency period t ref reference time wfe wait for event
pin and signal descriptions RX95HF 6/44 docid023884 rev 3 2 pin and signal descriptions figure 3. RX95HF pinout description table 2. RX95HF pin descriptions pin pin name type (1) main function alternate function 1 st_r3 st reserved 2 st_r4 st reserved 3 nc not connected 4 nc not connected 5 rx1 i receiver input 1 6 rx2 i receiver input 2 7 nc not connected 8 gnd_rx p ground (analog) 9 st_r0 o st reserved (2) 10 nc not connected 11 nc not connected 12 irq_in i (3) interrupt input 13 vps p main power supply 1 17 25 9 st_r5 gnd_tx xout xin nc nc nc gnd st_r1 ssi_1 spi_miso spi_ss irq_in vps st_r3 st_r4 nc nc rx1 shaded area represents the dissipation pad. (must be connected to ground.) rx2 nc gnd_rx nc nc nc ssi_0 spi_sck spi_mosi nc nc st_r0 irq_out
docid023884 rev 3 7/44 RX95HF pin and signal descriptions 7 14 irq_out o (4) interrupt output 15 spi_ss i (5) spi slave select (active low) 16 spi_miso o (5) spi data, slave output 17 spi_mosi i (5) spi data, slave input (5) 18 spi_sck i (6) spi serial clock 19 ssi_0 i (5) select serial communication interface 20 ssi_1 i (5) select serial communication interface 21 st_r1 i (7) st reserved 22 gnd p ground (digital) 23 nc not connected 24 nc not connected 25 nc not connected 26 nc not connected 27 nc not connected 28 nc not connected 29 xin crystal oscillator input 30 xout crystal oscillator output 31 gnd_tx p ground (rf drivers) 32 st_r5 st reserved 1. i: input, o: output, and p: power 2. must add a capacitor to ground (~1 nf). 3. pad internally connected to a very weak pull-up to vps. 4. pad internally connected to a weak pull-up to vps. 5. must not be left floating. 6. pad internally connected to a weak pull-down to gnd. 7. pad input in high impedance. must be connected to vps. table 2. RX95HF pin descriptions (continued) pin pin name type (1) main function alternate function
power management and operating modes RX95HF 8/44 docid023884 rev 3 3 power management and operating modes 3.1 operating modes the RX95HF has 2 operating modes: wait for event (wfe) and active. in active mode, the RX95HF communicates actively with an nfc reader or an external host (an mcu, for example). the RX95HF can switch from one mode to another. hibernate, and sleep/field detector states can only be activated by a command from the external host. as soon as any of these three states are activated, the RX95HF can no longer communicate with the external host. it can only be woken up. table 3. RX95HF operating modes and states mode state description wait for event (wfe) power-up this mode is accessible directly after por. low level on irq_in pin (longer than 10 s) is the only wakeup source. lfo (low-frequency oscillator) is running in this state. hibernate lowest power consumption state. the RX95HF has to be woken-up in order to communicate. low level on irq_in pin (longer than 10 s) is the only wakeup source. sleep/field detector low power consumption state. wakeup source is configurable: ? irq_in pin ? field detector lfo (low-frequency oscillator) is running in this state. active ready in this mode, the RX95HF waits for a command (p rotocol s elect , ...) from the external host via the serial interface (spi). tag emulation the RX95HF can communicate as a tag with an external reader. the tag application is located in the host and communicates with the RX95HF via the serial interface (spi).
docid023884 rev 3 9/44 RX95HF power management and operating modes 43 3.2 startup sequence after the power supply is established at power-on, the RX95HF waits for a low pulse on the pin irq_in (t 1 ) before automatically selecting the external interface (spi) and entering ready state after a delay (t 3 ). 1. pin irq_in low level < 0.2 vps_main. note: when RX95HF leaves wfe mode (from power-up, hibernate, or sleep/field detector) following an irq_in low level pulse. figure 4. RX95HF initialization and operating state change figure 5. power-up sequence -36 603 )21?). &irstvalid command t t t t 33)? 33)? t 6
power management and operating modes RX95HF 10/44 docid023884 rev 3 figure 5 shows the power-up sequence for a RX95HF device; where, ? t 0 is the initial wake-up delay 100 s (minimum) ? t 1 is the minimum interrupt width 10 s (minimum) ? t 2 is the delay for the serial interface selection 250 ns (typical) ? t 3 is the hfo setup time (t su(hfo) ) 10 ms (maximum) ? t 4 is the v ps ramp-up time from 0v to vps 200 s (minimum) and 10 ms (max. by design validation) note: vps must be 0v before executing the start-up sequence. the serial interface is selected after the following falling edge of pin irq_in when leaving from por or hibernate state. table 4 lists the signal configuration used to select the serial communication interface. table 4. select serial communication interface selection table pin serial interface (spi) ssi_0 1 ssi_1 0
docid023884 rev 3 11/44 RX95HF communication protocols 43 4 communication protocols 4.1 serial peripheral interface (spi) 4.1.1 polling mode in order to send commands and receive replies, the application software has to perform 3 steps. 1. send the command to the RX95HF. 2. poll the RX95HF until it is ready to transmit the response. 3. read the response. the application software should never read data from the RX95HF without being sure that the RX95HF is ready to send the response. the maximum allowed spi communication speed is f sck . a control byte is used to specify a communication type and direction: ? 0x00: send command to the RX95HF ? 0x03: poll the RX95HF ? 0x02: read data from the RX95HF ? 0x01: reset the RX95HF the spi_ss line is used to select a device on the common spi bus. the spi_ss pin is active low. when the spi_ss line is inactive, all data sent by the master device is ignored and the miso line remains in high impedance state. figure 6. sending command to RX95HF figure 7. polling the RX95HF until it is ready mosi 00000000 cmd len data data control byte miso xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx several data bytes mosi 00000011 xxxxxx11 xxxxxx11 xxxxxx11 control byte miso xxxxxxxx flag flag flags are polled until data is ready (bit 3 is set when data is ready) 00000xxx 00000xxx 00001xxx
communication protocols RX95HF 12/44 docid023884 rev 3 figure 8. reading data from RX95HF data must be sampled at the rising edge of the sck signal. ?sending?, ?polling? and ?reading? commands must be separated by a high level of the spi_ss line. for example, when the application needs to wait for data from the RX95HF, it asserts the spi_ss line low and issues a ?polling? command. keeping the spi_ss line low, the host can read the flags waiting bit which indicates that the RX95HF can be read. then, the application has to assert the spi_ss line high to finish the polling command. the host asserts the spi_ss line low and issues a ?reading? command to read data. when all data is read, the application asserts the spi_ss line high. the application is not obliged to keep reading flags using the polling command until the RX95HF is ready in one command. it can issue as many 'polling' commands as necessary. for example, the application asserts spi_ss low, issues 'polling' commands and reads flags. if the RX95HF is not ready, the application can assert spi_ss high and continue its algorithm (measuring temperature, communication with something else). then, the application can assert spi_ss low again and again issue 'polling' commands, and so on, as many times as necessary, until the RX95HF is ready. note that at the beginning of communication, the application does not need to check flags to start transmission. the RX95HF is assumed to be ready to receive a command from the application. figure 9. reset the RX95HF to reset the RX95HF using the spi, the application sends the spi reset command (control byte 01, see figure 9 ) which starts the internal controller reset process and puts the RX95HF into power-up state. the RX95HF will wake up when pin irq_in goes low. the RX95HF reset process only starts when the spi_ss pin returns to high level. caution: spi communication is msb first. table 5. interpretation of flags bit meaning (application point of view) [7:4] not significant 3 data can be read from the RX95HF when set. 2 data can be sent to the RX95HF when set. [1:0] not significant mosi 00000010 xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx control byte miso xxxxxxxx resp code len data data several data bytes mosi 00000001 control byte 01 miso xxxxxxxx
docid023884 rev 3 13/44 RX95HF communication protocols 43 4.1.2 interrupt mode when the RX95HF is configure to use the spi serial interface, pin irq_out is used to give additional information to user. when the RX95HF is ready to send back a reply, it sends an interrupt request by setting a low level on pin irq_out, which remains low until the host reads the data. the application can use the interrupt mode to skip the polling stage. caution: spi communication is msb first.
commands RX95HF 14/44 docid023884 rev 3 5 commands 5.1 command format ? the frame from the host to the RX95HF has the following format: ? the frame from the RX95HF to host has the following format: these two formats are available in spi mode. fields , and are always 1 byte long. can be from 0 to 253 bytes. note: the e cho command is an exception as it has only one byte (0x55). the following symbols correspond to: >>> frame sent by the host to RX95HF <<< frame sent by the RX95HF to the host 5.2 list of commands table 6 summarizes the available commands. table 6. list of RX95HF commands code command description 0x01 idn requests short information about the RX95HF and its revision. 0x02 p rotocol s elect selects the rf communication protocol and specifies certain protocol-related parameters. 0x03 p ollfield returns the current value of the fielddet flag. 0x05 l isten listens for data using previously selected protocol. 0x06 s end sends data using previously selected protocol. 0x07 i dle switches the RX95HF into a low consumption wait for event (wfe) mode (power-up, hibernate, or sleep/field detector), specifies the authorized wake-up sources and waits for an event to exit to ready state. 0x08 r d r eg reads wake-up event register or the analog register configuration (acc_a) register. 0x09 w r r eg writes analog register configuration (acc_a) register or writes index of acc_a register address. 0x0d a cfilter enables or disables the anti-collision filter for iso/iec 14443 type a protocol. 0x55 e cho RX95HF performs a serial interface e cho command (reply data 0x55 or stops the listening state when a listen command has been sent without error). other codes st reserved
docid023884 rev 3 15/44 RX95HF commands 43 5.3 idn command (0x01) description the idn command ( 0x01 ) gives brief information about the RX95HF and its revision. it takes approximately 6 ms to calculate the crc for the entire rom. the application must allow sufficient time for waiting for a response for this command. 5.4 protocol select command (0x02) description this command selects the rf communication protocol and prepares the RX95HF for communication with a reader. when the application selects a protocol, the RX95HF performs all necessary settings: it will choose the appropriate reception and transmission chains. table 7. idn command description direction data comments example host to RX95HF 0x01 command code >>>0x0100 0x00 length of data RX95HF to host 0x00 result code <<<0x000f4e4643204653324a415354 34002ace in this example, <<<0x4e4643204653324a4153543400 : ?nfc fs2jast4?, #4 (last character of nfc fs2jast4 means rom code revision 4.) 0x2ace : crc of rom (real crc may differ from this example) length of data data in ascii format (13 bytes) crc calculated for rom content (2 bytes) table 8. p rotocol s elect command description direction data comments example host to RX95HF 0x02 command code see table 9: list of values for different protocols (tag emulation) for a detailed example. >>>0x02021208 length of data protocol codes: 12 : iso/iec 14443-a each protocol has a different set of parameters. see table 9 . RX95HF to host 0x00 result code <<<0x0000 protocol is successfully selected 0x00 length of data RX95HF to host 0x82 error code <<<0x8200 invalid command length 0x00 length of data RX95HF to host 0x83 error code <<<0x8300 invalid protocol 0x00 length of data
commands RX95HF 16/44 docid023884 rev 3 table 9. list of values for different protocols (tag emulation) protocol (card) code parameters examples of commands comments byte bit function iso/iec 14443 type a 0x12 0 7:6 transmission data rate 00 : 106 kbps 01 : 212 kbps (1) 10 : 424 kbps (1) 11 : rfu >>>0x02021208 <<<0x0000 tag emulation for iso/iec 14443 type a, data rate is 106 kbps for both up- and down-links. 5:4 reception data rate 00 : 106 kbps 01 : 212 kbps (1) 10 : 424 kbps (1) 11 : rfu 1. not qualified for this version. 3 0 : return an error, if no rf field 1 : wait for rf field 2 rfu 1 0 : hfo 1 : clkrec 0 rfu
docid023884 rev 3 17/44 RX95HF commands 43 5.5 pollfield command (0x03) description this command returns the current value of the fielddet flag. 5.6 listen command (0x05) description in tag emulation mode, this command waits for a command from an external reader. before sending this command, the application must select a protocol. table 10. p ollfield command description direction data comments example host to RX95HF 03 command code >>>0x0300 check if rf field is on or off >>> 0x0303010fff - wait for rf field appearance for (16*256)/13.56 s flags , presc and timer parameters are optional. they must be specidfied if the application has to wait for rf field appearance or disappearance. the time to wait is ( presc +1)*( timer +1)/13.56 s. length of data rf field presence (optional): 01 : wait for rf field appearance 00 : wait for rf field disappearance timer prescaler (optional) timer time-out (optional) RX95HF to host 00 result code <<<0x0000 or 0x000100 (no rf field detected) or 0x000101 (rf field detected) 01 length of data 01 , if fielddet is set. otherwise, 00 . table 11. response for < p ollfield > command function explanation response example comments pollfield response 00 01 01 or 00 this command returns the current state of the rf field. <<<0x0000 or 0x000100 (no rf field detected) or 0x000101 (rf field detected) result code length of data field bits [7:1]: rfu bit 0 : field detected (if set) table 12. l isten command description direction data comments example host to RX95HF 05 command code 0x0500 : enters a listening mode where the RX95HF waits for a command from an external reader. 00 length of data RX95HF to host 00 result code 0x0000 : no error. confirmation that RX95HF now is in listening mode. 00 length of data
commands RX95HF 18/44 docid023884 rev 3 after reception of the l isten command and the return of a ?no error? confirmation, the RX95HF enters listening mode. the host controller has to use spi poll mode or irq_out pin to detect when a receive frame is available in the RX95HF buffer. the RX95HF will exit listening mode as soon it receives the e cho command (0x55) from the host controller (mcu) or a command from an external reader (not including commands supported by the a c f ilter command listed in table 29 ). in all cases, the RX95HF will send data or an error code to the host controller (mcu). the e cho command (0x55) allows exiting listening mode. in response to the e cho command, the RX95HF sends 0x55 + 0x8500 (error code of the listening state cancelled by the mcu). possible return codes are listed in table 13 . RX95HF to host 82 error code 0x8200 : invalid command length 00 length of data RX95HF to host 83 error code 0x8300 : invalid protocol or protocol is not supported. 00 length of data RX95HF to host 8f error code 0x8f00 : no field. command cannot be executed because there is no external field. 00 length of data table 13. response codes from the RX95HF in listening mode direction data comments example RX95HF to host 80 result code <<<0x8005e050bca508 the request from the reader is decoded. this is an example of a response in iso/iec 14443 type a protocol. length of data data received. interpretation depends on protocol RX95HF to host 85 error code <<<0x8500 listening mode was cancelled by the application 00 length of data RX95HF to host 86 error code <<<0x8600 communication error 00 length of data RX95HF to host 88 error code <<<0x8800 invalid sof 00 length of data RX95HF to host 89 error code <<<0x8900 receive buffer overflow (too many bytes received) 00 length of data RX95HF to host 8a error code <<<0x8a00 framing error (start bit=0, stop bit=1) 00 length of data table 12. l isten command description (continued) direction data comments example
docid023884 rev 3 19/44 RX95HF commands 43 if the request from the reader was received and decoded correctly, the RX95HF will send data back to the host (tag emulation application). this is explained in table 14 . 5.7 send command (0x06) description this command immediately sends data to the reader using the load modulation method without waiting for a reply. before sending this command, the application must select a communication protocol. RX95HF - host 8e error code <<<0x8e00 reception lost without eof received 00 length of data table 14. data format sent to the host in listening mode protocol explanation response example comments iso/iec- 14443 type a request example 80 0a 9370800f8c8e 8d 4e01 08 <<<0x80 0a 9370800f8c8e 8d 4e01 08 result code length of entire data field data received from reader received value of bcc (if any) received value of crc (if any) 7: rfu 6: rfu 5: crc error 4: parity error 3:0: number of significant bits in last byte table 13. response codes from the RX95HF in listening mode (continued) direction data comments example table 15. s end command description direction data comments example host to RX95HF 06 command code depends on protocol previously selected! >>>0x0606d07387080028 : emulation of tag response in iso/iec 14443 type a protocol length of data data and additional parameter to be sent RX95HF to host 00 result code <<<0x0000 data was successfully sent 00 length of data RX95HF to host 82 error code <<<0x8200 invalid length (for example, length=0 where it is not possible) 00 length of data RX95HF to host 83 error code <<<0x8300 invalid protocol previously selected by select protocol command 00 length of data
commands RX95HF 20/44 docid023884 rev 3 5.8 idle command (0x07) description this command switches the RX95HF into low consumption mode and defines the way to return to ready state. the result code contains the wake-up flag register value indicating to the application the wake-up event that caused the device to exit wfe mode. table 16. format of data to be sent using s end command protocol explanation response example comments iso/iec- 14443 type a send example 06 03 0400 08 >>>0x0603040008 command code length of entire data field data parameter: 7:6: rfu 5: append crc 4: rfu (do not append parity) 3:0: number of significant bits in first byte table 17. i dle command description direction data comments example host to RX95HF 07 command code example of switch from active mode to hibernate state (wake-up by low pulse on irq_in pin): >>>0x07 0e 08 04 00 04 00 18 00 00 00 00 00 00 00 00 example of switch from active to wfe mode (sleep) (wake-up by low pulse on irq_in pin): >>>0x07 0e 08 01 00 38 00 18 00 00 60 00 00 00 00 00 example of switch from active mode to wfe mode (field detector) with wake-up by field detection: >>> 0x07 0e 04 01 42 38 00 18 00 00 60 00 00 00 00 0e length of data specifies authorized wake- up sources and the lfo frequency enterctrll settings to enter wfe mode: 0x0400 , 0x0100 or 0x0142 enterctrlh wuctrll settings to wake-up from wfe mode: 0x0400 or 0x3800 wuctrlh leavectrll settings to leave wfe mode (default value = 0x1800 ) leavectrlh RX95HF to host 0x00 result code this response is sent only when RX95HF exits wfe mode. <<<0x000104 wake-up by field detect <<<0x000108 wake-up by low pulse on irq_in pin 0x01 length of data data (wake-up source): 0x04: field detect 0x08: low pulse on irq_in pin
docid023884 rev 3 21/44 RX95HF commands 43 5.8.1 idle command parameters the idle command (host to RX95HF) has the following structure (all values are hexadecimal): 5.8.2 optimizing wake-up conditions using the wake-up source register, it is possible to cumulate sources for a wake-up event. it is strongly recommended to always set an external event as a possible wake-up source. to cumulate wake-up sources, simply set the corresponding bits in the wake-up source register. for example, to enable a wake-up when an rf field is detected (bit 1 set to ?1?) or on a low pulse on pin irq_in (bit 3 set to ?1?), set the register to 0x0a. 5.8.3 using various techniques to return to ready state the idle command and reply set offers several benefits to users by enabling various methods to return the RX95HF to ready state. some methods are nearly automatic, such as waiting for a timer overflow or a field detection, but others consume more power compared to the ones requesting a host action. a description of each method follows below. RX95HF to host 0x82 error code <<<0x8200 invalid command length 0x00 length of data table 17. i dle command description (continued) direction data comments example table 18. idle command structure 07 0e xx yy zz yy zz yy zz command code data length wu source enter control wu control leave control table 19. summary of idle command parameters parameter description command code this byte is the command code. ?07? represents the idle command. this command switches the device from active mode to wfe mode. data length this byte is the length of the command in bytes. its value depends on the following parameter values. wu source this byte defines the authorized wake-up sources in the wake-up source register. predefined values are: 0x04 : field detector 0x08 : low pulse on irq_in enter control these two bytes (enterctrll and enterctrlh) define the resources when entering wfe mode. 0x0400 : hibernate 0x0142 : sleep (if field detector source is enabled) wu control these two bytes (wuctrll and wuctrlh) define the wake-up resources. 0x0400 : hibernate 0x3800 : sleep leave control these two bytes (leavectrll and leavectrlh) define the resources when returning to ready state. 0x1800 : hibernate 0x1800 : sleep
commands RX95HF 22/44 docid023884 rev 3 default setting: from por to ready state after power-on, the RX95HF enters power-up state. to wake up the RX95HF and set it to ready state, the user must send a low pulse on the irq_in pin. the RX95HF then automatically selects the external interface (spi) and enters ready state and is able to accept commsands after a delay of approximately 6 ms (t 3 ). from ready state to hibernate state and back to ready state in hibernate state, most resources are switched off to achieve an ultra-low power consumption. the only way the RX95HF can wake-up from hibernate state is by an external event (low pulse on pin irq_in). a basic idle command is: >>>0x07 0e 08 04 00 04 00 18 00 00 00 00 00 00 00 00 note: the wake-up flag value is not significant when returning to ready state from hibernate state or after a por. from ready state to sleep state and back to ready state wake-up by external event (low pulse on irq_in) in sleep or power-up states, operating resources are limited in function of the selected wake-up source to achieve a moderate power consumption level. an idle command example when wake-up source is pin irq_in: >>>0x07 0e 08 01 00 38 00 18 00 00 60 00 00 00 00 00 5.9 read register (rdreg) command (0x08) description this command is used to read the wakeup register. table 20. r d r eg command description direction data comments example host to RX95HF 0x08 command code ex 1. >>> 0x0803690100 reads the acc_a register. (1) 1. this command must be preceded by the setting of the acc_a register index ( 0x0903680004). 0x03 length of data 0x62 or 0x69 register address 0x01 register size 0x00 st reserved RX95HF to host 0x00 result code <<<0x000127 see section 5.10: write register (wrreg) command (0x09) description for more information on received register data. length of data register data RX95HF to host 0x82 error code <<<0x8200 invalid command length 0x00 length of data
docid023884 rev 3 23/44 RX95HF commands 43 note: the management of the analog register configuration register ( acc_a ) is described in section 5.10: write register (wrreg) command (0x09) description . 5.10 write register (wrreg) command (0x09) description the write register (w r r eg ) command ( 0x09 ) is used to: ? set the analog register configuration address index value before reading or overwriting the analog register configuration register (acc_a) value ? set the analog register configuration register (acc_a) value ? bits [7:6] are st reserved and must be set to ?0? ? bits [5:4] set the demodulator sensitivity (?00? = am 10% or ?10? = am 100%) ? bits [3:0] set the load modulation index (?0001? = minimum load modulation, ?0111? = default value, ?1111? = maximum load modulation). the user can adjust this value to better fit his application. 5.10.1 improving rf performance adjusting the load modulation index and demodulator sensitivity parameters in card emulation mode helps improve application behavior. the default value of these parameters ( table 21 ) is set by the p rotocol s elect command, but they can be overwritten using the write register (w r r eg ) command ( 0x09 ). table 22 and table 23 list possible values for the load modulation index and demodulator sensitivity parameters respectively. this new configuration is valid until a new p rotocol s elect or write register (of register acc_a) command is executed. register values are cleared at power off. table 21. w r r eg command description (load modulation index and demodulator sensitivity) direction data comments example host to RX95HF 0x09 command code >>>0x0903680004 set analog register index to 0x04 (acc_a) (1) >>>0x090468010425 update acc_a to 0x25 1. this command must be executed before reading the acc_a register ( 0x0903680004 ). 0x03 or 0x04 length of data 0x68 analog register configuration address index 0x00 or 0x01 flag increment address or not after write command 0x04 index pointing to the demodulator sensitivity and load modulation values in acc_a register (0x04) (see section 5.10.1 ) 0xxx new value for demodulator sensitivity and load modulation (see section 5.10.1 ) RX95HF to host 0x00 result code <<<0x0000 register written 0x00 length of data (= regcount )
commands RX95HF 24/44 docid023884 rev 3 how to modify analog register configuration register (acc_a) values 1. use the p rotocol s elect command ( 0x02 ) to select the correct communication protocol. for example, to select the iso/iec 14443-a card emulation protocol: send p rotocol s elect command: >>> 0x02021208 RX95HF reply: <<< 0x0000 2. read the analog register configuration register (acc_a) value. a) write the acc_a register index at 0x04: >>>0x0903680004 RX95HF reply: <<< 0x0000 b) read the acc_a register value: >>> 0x0803690100 RX95HF reply: <<< 0x0127 in this example, the acc_a register value is 0x27 , where ?2? is the demodulator sensitivity and ?7? is the load modulation index. 3. modify the load modulation index values with 0x25. write the acc_a register index: >>> 0x090468010425 RX95HF reply: <<< 0x0000 4. read the analog configuration register (acc_a) value. a) write the acc_a register index at 0x04: >>> 0x0903680004 RX95HF reply: <<< 0x0000 b) read the acc_a register value: >>> 0x0803690100 RX95HF reply: <<< 0x0125 load modulation index and demodulator sensitivity values . note: bits [7:6] of acc_a register are rfu and must set to ?0?. table 22. possible load modulation index values code (bits [3:0] of acc_a register) 1 2 ... 7 ... e f load modulation index min. default max. table 23. possible demodulator sensitivity values code (bits [5:4] of acc_a register) 0x1 0x2 demodulator sensitivity (1) 1. characterized by design simulation. 10% 100%
docid023884 rev 3 25/44 RX95HF commands 43 5.11 acfilter command (0x0d) description this command activates/deactivates the anti-collision filter in type a tag emulation mode. the following tables define the command and response fields depending on the ac filter command length. table 24. ac filter command description (command > 0x02) direction data comments example host to RX95HF 0d command code general case (len ?? 0x00, 0x01 or 0x02) >>>0d0b440320880251744aef2280 activate filter for 2-cascade anti-collision note that the command length can be 7, 11 or 15 bytes depending on uid length: 7: for 1-cascade level filter 11: for 2-cascade levels filter 15: for 3-cascade levels filter all other values greater than 2 will result in an ?invalid command length? error. values 0, 1 and 2 are defined in the following tables. *** special cases of command *** len = 0x00 >>>0x0d00 de-activate ac filter (len = 0x00) <<< 0x0001xx0000 ac filter is successfully deactivated ( xx : table 28 ) len = 0x01 >>> 0x0d01xx - set ac state (see table below) <<< 0x0000 ac state successfully set len = 0x02 >>> 0x0d020000 - returns ac state without deactivating filter <<< 0x0001xx ac state ( xx : table 28 ) length of data (2 bytes) unused and proprietary bits of sak (protocol bits will be handled by firmware) unused and proprietary bits of sak (protocol bits will be handled by firmware) uid for cascade level 1 (mandatory) uid for cascade level 2 (optional) uid for cascade level 3 (optional) RX95HF to host 00 result code ac filter is successfully activated. <<<0x0000 ac filter is successfully deactivated (len = 0x00). <<<0x0001xx0000 (where xx is st reserved) 00 length of data RX95HF to host 82 error code <<<0x8200 invalid command length 00 length of data
commands RX95HF 26/44 docid023884 rev 3 table 25. ac filter command description (command = 0x00) direction data comments example host to RX95HF 0d command code if = 0x00, ac filter is deactivated and response will return tag emulation state. >>>0x0d00 deactivate ac filter length of data (0x00) RX95HF to host 00 result code ac filter is deactivated and response will return tag emulation state. <<<0x0001yy where yy is the tag emulation state ( table 28 ). 01 length of data yy tag emulator state RX95HF to host 82 error code <<<0x8200 invalid command length 00 length of data table 26. ac filter command description (command = 0x01) direction data comments example host to RX95HF 0d command code if = 0x01, ac filter state will be forced to yy state ( table 28 ). >>>0x0d01yy force new tag emulation state (yy). length of data (0x01) yy tag emulator state RX95HF to host 00 result code if = 0x01, tag emulation state is successfully set. <<<0x0000 00 length of data RX95HF to host 82 error code <<<0x8200 invalid command length 00 length of data table 27. ac filter command description (command = 0x02) direction data comments example host to RX95HF 0d command code if = 0x02, response will return tag emulation state without de- activating the ac filter. >>>0x0d020000 length of data (0x02) 0000 st reserved RX95HF to host 00 result code if = 0x02, returns tag emulation state ( table 28 ) without de-activating the ac filter. <<<0x0001yy 01 length of data yy tag emulator state RX95HF to host 82 error code <<<0x8200 invalid command length 00 length of data
docid023884 rev 3 27/44 RX95HF commands 43 the a c f ilter command activates or deactivates an anti-collision filter for iso/iec 14443a tag protocol. this command also forces or indicates the card emulator state. if the ac filter is not activated, all received commands are stored in the RX95HF buffer before being read by the external microcontroller. if the ac filter is activated, internal firmware will try to interpret the commands sent by the reader itself and perform an anti-collision sequence. non-interpreted commands are stored in the RX95HF buffer before being read by the external microcontroller to perform level 4 of the iso/iec 14443 type a protocol. the RX95HF is able to interpret and respond to the commands listed in the table below. the device remains in listening mode after executing these commands. 5.12 echo command (0x55) description the e cho command verifies the possibility of communication between a host and the RX95HF. this command also can be used to exit listening mode without an error when the RX95HF has received a listen command. table 28. RX95HF state tag emulation state iso/iec 14443 - 3 type a definition tag emulation state iso/iec 14443 - 3 type a definition 0x00 idle 0x80 halt 0x01 readya 0x81 readya* (1) 1. after a iso/iec 14443 - 3 type a wakeup command. 0x02 readyb 0x82 readyb* (1) 0x03 readyc 0x83 readyc* (1) 0x04 active table 29. commands to which the device is able to respond command code definition sens_req 26 (7-bit) sense request all_req 52 (7-bit) wakeup all request sdd_req 93, 95, 97 single device detection request sel_req 9370, 9570, 9770 select request table 30. e cho command description direction data comments example host to RX95HF 0x55 command code RX95HF to host 0x55 code response >>> 0x55 : sends an e cho command <<< 0x55 : response to an e cho command
electrical characteristics RX95HF 28/44 docid023884 rev 3 6 electrical characteristics 6.1 absolute maximum ratings note: stresses listed above may cause permanent damage to the device. this is a stress rating only and functional operation of the device at these or any other conditions above those indicated in the operational sections of the specification is not implied. exposure to absolute maximum rating conditions for extended periods may affect device reliability. 6.2 dc characteristics table 31. absolute maximum ratings symbol parameter value unit vps_main supply voltage (1) 1. to properly reset the device, vps_main must be tied to 0v before executing the start-up sequence. ?0.3 to 7.0 v v io input or output voltage relative to ground ?0.3 to vps_main +0.3 v v maxcarrier maximum input voltage (pins rx1 and rx2) 14.0 v t a ambient operating temperature ?25 to +85 c ambient operating temperature (rf mode) ?25 to +85 t stg storage temperature (please also refer to package specification). ?65 to +150 c t lead lead temperature during soldering see note (2) 2. compliant with jedec standard j-std-020d (for small-body, sn-pb or pb assembly), the st ecopack? 7191395 specification, and the european directive on restrictions on hazardous substances (rohs directive 2011/65/eu of july 2011). c v esd electrostatic discharge voltage according to jesd22-a114, human body model 2000 v p tot (3) 3. depending on the thermal resistance of package. total power dissipation per package 1 w table 32. dc characteristics symbol parameter condition min. typ. max. unit vps_main supply voltage 2.7 3.0 5.5 v v il input low voltage (i/os) 0 0.2 x vps_main v v ih input high voltage (i/os) 0.7 x vps_main vps_main v v oh output high voltage (i/os) i oh = - 8 a 0.7 x vps_main vps_main v v ol output low voltage (i/os) i olmax = 500 a0 0.15 x vps_main v por power-on reset voltage 1.8 v
docid023884 rev 3 29/44 RX95HF electrical characteristics 43 6.3 power consumption characteristics t a = ?25c to 85c, unless otherwise specified. table 33. power consumption characteristics (vps_main from 2.7 to 5.5 v) symbol parameter condition typ. max. unit i cc (v ps ) power-up supply current in power-up state t a = 25c 200 600 a i cc (v ps ) tag emulation supply current in tag emulation mode t a = 25c 2.5 5.0 ma i cc (v ps ) hibernate supply current in hibernate state t a = 25c 1 5 a i cc (v ps ) sleep/field detector supply current in sleep/field detector state t a = 25c 20/25 80 a i cc (v ps ) ready supply current in ready state t a = 25c 2.5 5.0 ma
electrical characteristics RX95HF 30/44 docid023884 rev 3 6.4 spi characteristics the RX95HF supports (cpol = 0, cpha = 0) and (cpol = 1, cpha = 1) modes. figure 10. spi timing diagram (slave mode and cpol = 0, cpha = 0) table 34. spi interface characteristics symbol parameter condition min. max. unit f sck 1/ t c(sck) spi clock frequency 2.0 mhz v il input low voltage 0.3 x v ps v v ih input high voltage 0.7 x v ps v ol output low voltage 0.4 x v ps v oh output high voltage 0.7 x v ps t su(nss) (1) 1. values based on design simulation and/or characterization results, and not on tested in production. nss setup time 70 ns t h(nss) (1) nss hold time 0 t ch(sckl) (1) clock low time 200 ns t ch(sckh) (1) clock high time 200 t su(si) (1) data slave input setup time 20 ns t h(si) (1) data slave input hold time 80 t v(so) (1) data slave output valid time 80 ns t h(so) (1) data slave output hold time after enable edge c b_spi_in capacitive load for input pins nss, clk, mosi 3pf c b_spi_out capacitive load for input pins mosi 20 pf -36 3#+)nput .33input t 35.33 t c3#+ t h.33 t 63/ t h3/ t su3) t h3) #0/, #0(! t #(3#+( t #(3#+, -3"/ut -3")n "it/ut "it)n ,3"/ut ,3")n -)3/ -/3)
docid023884 rev 3 31/44 RX95HF electrical characteristics 43 figure 11. spi timing diagram (slave mode and cpol = 1, cpha = 1) 069 6&.,qsxw 026, 0,62 w f6&. w k166 w &+6&./ w y62 w k62 w vx6, w k6, 166lqsxw 06%2xw 06%,q %lw2xw %lw,q /6%2xw /6%,q w &+6&.+ w 68166 &32/ &3+$
electrical characteristics RX95HF 32/44 docid023884 rev 3 6.5 rf characteristics test conditions are t a = 0c to 50c, unless otherwise specified. table 35. tag emulation characteristics symbol parameter condition min. typ. max. unit f c frequency of operating field (carrier frequency) 13.553 13.56 13.567 mhz mi carrier carrier modulation index from reader iso/iec 14443 -type a 100 % hfield (1) 1. maximum values based on design simulation and/or characterization results, and not tested in production. operating field strength in iso/iec 14443 1.5 7.5 a/m v maxcarrier input voltage between rx1 and rx2 18 v f s (2) 2. parameter measured on samples using recommended output matching network. frequency of subcarrier modulation (iso/iec 14443) f c / 16 aload load modulation amplitude f c + f s f c - f s iso 10373-6 test methods for iso/iec 14443-a @ 1.5 a/m 18 18 mv f c + f s f c - f s iso 10373-6 test methods for iso/iec 14443-a @ 7.5a/m 8 8 mv aload load modulation amplitude f c + f s f c - f s ecma 356 test methods for ecma 340 @ 1.5 a/m 18 18 mv f c + f s f c - f s ecma 356 test methods for ecma 340 @ 7.5 a/m 8 8 mv datar iso/iec 14443 type a 106 kbps table 36. field detection characteristics symbol parameter min. typ. max. unit level of detection (1) 1. parameter measured using recommended output matching network for iso/iec 14443 communication. 0.5 8 a/m
docid023884 rev 3 33/44 RX95HF electrical characteristics 43 6.6 oscillator characteristics the external crystal used for this product is a 27.12 mhz crystal with an accuracy of 14 khz. for c l1 and c l2 , it is recommended to use high-quality external ceramic capacitors in the 10 pf to 20 pf range (typ.), designed for high-frequency applications, and selected to match the requirements of the crystal or resonator (see figure 12 ). c l1 and c l2 are usually the same size. the crystal manufacturer typically specifies a load capacitance which is the series combination of c l1 and c l2 . figure 12. typical application with a 27.12 mhz crystal note: for c l1 and c l2 it is recommended to use high-quality ceramic capacitors in the 10 pf to 20 pf range selected to match the requirements of the crystal or resonator. c l1 and c l2, are usually the same size. the crystal manufacturer typically specifies a load capacitance which is the series combination of c l1 and c l2 . load capacitance c l has the following formula: c l = c l1 x c l2 / ( c l1 + c l2 ) + c stray where c stray is the pin capacitance and board or trace pcb-related capacitance. typically, it is between 2 pf and 7 pf. table 37. hfo 27.12 mhz oscillator characteristics (1) (2) 1. resonator characteristics given by the crystal/ceramic resonator manufacturer. 2. based on characterization, not tested in production. symbol parameter conditions min. typ. max. unit f xtal oscillator frequency 27.12 mhz r f feedback resistor 2 m ? c recommended load capacitance versus equivalent serial resistance of the crystal (r s ) (3) 3. the relatively low value of the r f resistor offers a good protection against issues resulting from use in a humid environment, due to the induced leakage and the bias condition change. however, it is recommended to take this point into account if the host is used in tough humidity conditions. r s = 30 ?? 6pf t su(hfo) (4) 4. t su(hfo) is the startup time measured from the moment it is enabled (by software) to a stabilized 27.12 mhz oscillation is reached. this value is measured for a standard crystal resonator and it can vary significantly with the crystal manufacturer. startup time v ps is stabilized 6 10 ms dle9 ;28 7 ;,1 i +)2 & / 5 ) 1)&ghylfh 0+ ] fu\vwdo & /
package mechanical data RX95HF 34/44 docid023884 rev 3 7 package mechanical data in order to meet environmental requirements, st offers these devices in different grades of ecopack ? packages, depending on their level of environmental compliance. ecopack ? specifications, grade definitions and product status are available at: www.st.com . ecopack ? is an st trademark. this device is available in a 32-lead, 5x5 mm, 0.5 mm pitch, very thin fine pitch quad flat pack no-lead package (vfqfpn). figure 13. 32-lead vfqfpn package outline 6hdwlqjsodqh ggg & & $ $ $ ' h 3lq,' 5 ( / / ' e ( b0( %rwwrpylhz
docid023884 rev 3 35/44 RX95HF package mechanical data 43 note: 1) amkor variation b. dimensions are not in accordance with jedec. 2) amkor and muar. table 38. 32-pin vfqfpn package mechanical data symbol millimeters inches (1) 1. values in inches are rounded to 4 decimal digits. note min. typ. max. min. typ. max. a 0.800 0.900 1.000 0.0315 0.0354 0.0394 a1 0.000 0.020 0.050 0.0000 0.0008 0.0020 a3 0.200 0.0079 b 0.180 0.250 0.300 0.0071 0.0098 0.0118 d 4.850 5.000 5.150 0.1909 0.1969 0.2028 d2 (amk_b) 3.500 3.600 3.700 0.1378 0.1417 0.1457 1 e 4.850 5.000 5.150 0.1909 0.1969 0.2028 e2 (amk_b) 3.500 3.600 3.700 0.1378 0.1417 0.1457 1 e 0.500 0.0197 l 0.300 0.400 0.500 0.0118 0.0157 0.0197 ddd (amk) 0.050 0.0020 2
part numbering RX95HF 36/44 docid023884 rev 3 8 part numbering not all combinations are necessarily available. for a list of available options (speed, package, etc.) or for further information on any aspect of this device, please contact your nearest stmicroelectronics sales office. table 39. ordering information scheme example: rx 95 hf ? v md 5 t device type rx = nfc transceiver for tag emulation wired access 95 = spi frequency band hf = high frequency (13.56 mhz) operating voltage v = 2.7 to 5.5 v package md = 32-pin vfqfpn (5 x 5 mm) operating temperature 5 = ?25 to +85 c packaging t = tape and reel
docid023884 rev 3 37/44 RX95HF card emulation communication 43 appendix a card emulation communication the following information is a log of basic exchanges between the cr95hf transceiver and RX95HF card emulator. cr95hfdll_stcmd : is the standard RX95HF frame exchange command. in this command, the first byte 01 is not sent, it is only requested by the RX95HF development software in order to recognize if it is a user or service command. cr95hfdll_sendrecv : is the encapsulated cr95hf sendreceive command for which command codes, number of bytes, and crc are automatically appended to the parameter. in this section, ? the cr95hf data exchanges are in blue . ? the RX95HF card emulation data exchanges are in green . ? the cr95hf and RX95HF command overhead (command code, length of data and transmission flag) is in bold . ? the crc value is in red . when the crc append option is set in the protocol select command, the crc is automatically appended by the RX95HF, but the crc is not visible in the instruction log file. when the crc is present in the command or response, crc reply is in italics . the following symbols correspond to: >>> frame sent by host to RX95HF <<< frame received by host from RX95HF
card emulation communication RX95HF 38/44 docid023884 rev 3 table 40. example logs comment cr95hf reader direc -tion RX95HF card emulation comment exchange: host -> reader cr95 rx95 exchange: host -> card emulator set reader config. iso/iec 14443 type a at 106 kbps rem, demo RX95HF for card emulation exchange rem, 0a rem, check serial com with host >>> RX95HFdll_echo <<< 5500 >>> RX95HFdll_idn <<< 000f 4e4643204653324a415354 34002 ace check RX95HF connection to host rem, pollfield >>> RX95HFdll_stcmd, 01 0300 <<< 000100 no field detected rem, reader for card emulation test max waiting time for manual exchange rem, 0b >>> cr95hfdll_stcmd, 01 020402000a05 <<< 0000 rem, select emulation tag mode 14443a >>> RX95HFdll_stcmd, 01 02021208 <<< 0000 set RX95HF config. card emu- lator iso/iec 14443 type a at 106 kbps
docid023884 rev 3 39/44 RX95HF card emulation communication 43 set reader config. iso/iec 14443 type a at 106 kbps (cont.) rem, 02000180 rem, cr95hfdll_stcmd rem, cr95hfdll_stcmd 01 09043a00xx04 rem, default xx 52 max 5a >>> cr95hfdll_stcmd, 01 09043a005804 <<< 0000 rem, increase demodulator gain d3 >>> cr95hfdll_stcmd, 01 0904680101d3 <<< 0000 rem, increase dec tolerance >>> cr95hfdll_stcmd, 01 09110b00241204880f1f3f3f0100050 5005500 <<< 0000 rem, read default value card emulator configuration register acca rem, acca (7:6 card clamp 00 default rem, acca (5:4 card demod 01 noise immunity low sensitivity 10% rem, acca (3:0 mod depth default 7 mon 0 max f) rem, read default value reg acca set reg index @4 >>> RX95HFdll_stcmd, 01 0903680004 <<< 0000 rem, read reg acca card config 1 reg @69 index 4 >>> RX95HFdll_stcmd, 01 0803690100 <<< 000127 check con- figuration break rem, configure card emulator (set uid) rem, set anti-collision filter type a uid 0251744aef2280 rem, atqa 4403 sak 20 uid1 88025174 uid2 4aef2280 >>> RX95HFdll_stcmd, 01 0d0b440320880251744aef2280 <<< 0000 break set RX95HF identity rem, pollfield >>> RX95HFdll_stcmd, 01 0300 <<< 000101 rem, listen >>> RX95HFdll_stcmd, 01 0500 <<< 0000 break check rf field on RX95HF set in lis- tening mode table 40. example logs (continued) comment cr95hf reader direc -tion RX95HF card emulation comment
card emulation communication RX95HF 40/44 docid023884 rev 3 execute anti-colli- sion pro- cess iso/iec 14443 type a >>> cr95hfdll_anticolselect123 ------ iso14443-a start of anti-collision algorithm ------ iso14443-a reqa >>> cr95hfdll_sendrecv, 2607 <<< 80054403280000 iso14443-a anticol 1 >>> cr95hfdll_sendrecv, 932008 <<< 800888025174a9280000 iso14443-a select 1 >>> cr95hfdll_sendrecv, 937088025174a928 <<< 800624d836080000 iso14443-a anticol 2 >>> cr95hfdll_sendrecv, 952008 <<< 80084aef228007280000 iso14443-a select 2 >>> cr95hfdll_sendrecv, 95704aef22800728 <<< 800620fc70080000 --> uid = 0251744aef2280 --> tag selected ------ iso14443-a end of anti-collision algorithm ------ break > < > < > < > < > < anti-colli- sion pro- cess on rx side (no return to host) response automati- cally sent to reader iso/iec 14443-3 table 40. example logs (continued) comment cr95hf reader direc -tion RX95HF card emulation comment
docid023884 rev 3 41/44 RX95HF card emulation communication 43 applicative communication iso/iec 14443-4: data exchange between reader (cr95hf) & card emulator (RX95HF) applica- tion comm protocol setup iso/iec 14443-4 RX95HF is in listening mode rem, rats 1a >>> cr95hfdll_sendrecv, e050 28 <<< 800f 06757781028 002f 00800 break > < >>> RX95HFdll_polling_reading <<< 8005 e050 bca5 08 rem, 1b send ats 060706757781028028 >>> RX95HFdll_stcmd, 01 060b 06757781028002f00800 28 <<< 0000 after capture, data is transferred to host which defines the response rem, listen >>> RX95HFdll_stcmd, 01 0500 <<< 0000 break RX95HF returns to listening mode rem, pps 2a >>> cr95hfdll_sendrecv, d01100 28 <<< 800a d0 7387 0800 > < >>> RX95HFdll_polling_reading <<< 8006 d01100 52a6 08 rem, 2b pps >>> RX95HFdll_stcmd, 01 0606 d07387 0800 28 <<< 0000 after capture, data is transferred to host which defines the response break rem, listen >>> RX95HFdll_stcmd, 01 0500 <<< 0000 break RX95HF returns to listening mode table 40. example logs (continued) comment cr95hf reader direc -tion RX95HF card emulation comment
card emulation communication RX95HF 42/44 docid023884 rev 3 applica- tion comm protocol setup iso/iec 14443-4 (cont.) rem, iblock exchange 3a >>> cr95hfdll_sendrecv, 0200a4040007d2760000860100 28 <<< 800c 029000 f109 0800 > < >>> RX95HFdll_polling_reading <<< 8010 0200a4040007d2760000860100 4 bf7 08 rem, 3b iblock >>> RX95HFdll_stcmd, 01 0608 029000f1090800 28 <<< 0000 after capture, data is transferred to host which defines the response rem, listen >>> RX95HFdll_stcmd, 01 0500 <<< 0000 break RX95HF returns to listening mode rem, set rf off >>> cr95hfdll_stcmd, 01 02020000 <<< 0000 >>> RX95HFdll_polling_reading <<< 8f00 no field error close spi link break >>> cr95hfdll_reset_spi <<< 0000 break rem, 4b >>> RX95HFdll_reset_spi <<< 0000 close spi link table 40. example logs (continued) comment cr95hf reader direc -tion RX95HF card emulation comment
docid023884 rev 3 43/44 RX95HF revision history 43 revision history table 41. document revision history date revision changes 04-jan-2013 1 initial release. 15-oct-2013 2 updated section 5.3: idn command (0x01) description on page 15 , section 8: part numbering on page 36 and title of appendix a: card emulation communication on page 37 . 02-jun-2014 3 updated section 3.2: startup sequence on page 9 , table 31: absolute maximum ratings on page 28 and appendix a: card emulation communication on page 37 .
RX95HF 44/44 docid023884 rev 3 please read carefully: information in this document is provided solely in connection with st products. stmicroelectronics nv and its subsidiaries (?st ?) reserve the right to make changes, corrections, modifications or improvements, to this document, and the products and services described he rein at any time, without notice. a ll st products are sold pursuant to st?s terms and conditions of sale. purchasers are solely responsible for the choice, selection and use of the st products and services described herein, and st as sumes no liability whatsoever relating to the choice, selection or use of the st products and services described herein. no license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted under this document. i f any part of this document refers to any third party products or services it shall not be deemed a license grant by st for the use of such third party products or services, or any intellectual property contained therein or considered as a warranty covering the use in any manner whatsoev er of such third party products or services or any intellectual property contained therein. unless otherwise set forth in st?s terms and conditions of sale st disclaims any express or implied warranty with respect to the use and/or sale of st products including without limitation implied warranties of merchantability, fitness for a particular purpose (and their equivalents under the laws of any jurisdiction), or infringement of any patent, copyright or other intellectual property right. st products are not designed or authorized for use in: (a) safety critical applications such as life supporting, active implanted devices or systems with product functional safety requirements; (b) aeronautic applications; (c) automotive applications or environments, and/or (d) aerospace applications or environments. where st products are not designed for such use, the purchaser shall use products at purchaser?s sole risk, even if st has been informed in writing of such usage, unless a product is expressly designated by st as being intended for ?automotive, automotive safety or medical? industr y domains according to st product design specifications. products formally escc, qml or jan qualified are deemed suitable for use in aerospace by the corresponding governmental agency. resale of st products with provisions different from the statements and/or technical features set forth in this document shall immediately void any warranty granted by st for the st product or service described herein and shall not create or extend in any manner whatsoev er, any liability of st. st and the st logo are trademarks or registered trademarks of st in various countries. information in this document supersedes and replaces all information previously supplied. the st logo is a registered trademark of stmicroelectronics. all other names are the property of their respective owners. ? 2014 stmicroelectronics - all rights reserved stmicroelectronics group of companies australia - belgium - brazil - canada - china - czech republic - finland - france - germany - hong kong - india - israel - ital y - japan - malaysia - malta - morocco - philippines - singapore - spain - sweden - switzerland - united kingdom - united states of america www.st.com

▲Up To Search▲

Price & Availability of RX95HF

	To Download RX95HF Datasheet File
If you can't view the Datasheet, Please click here to try to view without PDF Reader .