3,56 MHz Multitag Reader Module H102022, H6160 Firmware: 0.9v 10/10/2003, wk ACG Identification Technologies GmbH Dantestrasse 4-6 65189 Wiesbaden Germany Fon +49 (611) 1739.0 Fax +49 (611) 1739.198 www.acg.de rfid@acg-id.
13,56 MHz Multitag Reader Module, Version 0.9v Table of Content 1 Scope ..................................................................................................3 2 Definitions and abbreviations ...........................................................4 2.1 Definitions:......................................................................................................... 4 2.1.1 Anticollision loop ......................................................................................... 4 2.1.
13,56 MHz Multitag Reader Module, Version 0.9v 5.2.6 ETX........................................................................................................... 17 5.2.7 Remarks ................................................................................................... 17 5.2.8 Examples: ................................................................................................. 17 5.3 Instruction Set ...........................................................................................
13,56 MHz Multitag Reader Module, Version 0.9v 1 Scope The 13,56 MHz Multitag Reader Module is a proximity reading device supporting a wide range of 13,56 MHz tag. It supports ISO15693, Icode®, Tagit®, Mifare® Standard, Mifare® Ultralight, SR176 and ISO14443 Type B cards. Using an external antenna and a serial interface it can be easily connected to a PC. The Plug and Play version has an integrated antenna and serial interface.
13,56 MHz Multitag Reader Module, Version 0.9v 2 Definitions and abbreviations 2.1 Definitions: 2.1.1 Anticollision loop Algorithm processed to identify and handle a dialogue between VCD and one or more VICCs in its antenna field. 2.1.2 Hex notation A hexadecimal value is noted with a following h. i.e. A1h has the value A1 hexadecimal. 2.1.3 ASCII notation ASCII characters are listed within apostrophes, i.e. ‘x’ means a single x. 2.
13,56 MHz Multitag Reader Module, Version 0.9v 3 Tag organization 3.1 State diagram Power off Anticollision Loop, Inventory HALT Ready WAKE-UP Select ACTIVE Application Figure 3-1: State Diagram The state diagram shows the different states of a tag. First the tag must be power up. Next command initialize a tag using the anticollision or inventory command. A selection of a tag is necessary to interact with a tag of interest especially if more than one tag is present at the same time.
Serial number Read page Write page Lock Transfer page command Comments (1) ISO15693 EM Microelec. Philips STM Infineon Infineon TI KSW √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ √ - √ √ √ √ √ √ √ Tagit® TI √ √ √ √ - Icode® Philips √ √ √ √ - Mifare® Std.
13,56 MHz Multitag Reader Module, Version 0.9v 3.3 ISO 15693 The reader can communicate with ISO15693 tags. An anticollision is needed if multiple instances of tags are in the same antenna field. The reader detects each type of ISO15693 labels and handles them individually 3.3.1 Coding of UID The UID of a tag is defined in ISO/IEC 15693-3. All tags compliant to ISO15693 support the specified format. The UID is factory programmed and cannot be changed.
13,56 MHz Multitag Reader Module, Version 0.9v 3.3.3 My-D Label (SRF55VxxP) My-D labels are specific labels of Infineon. These labels show a different memory organization. Two different modes of tags are supported: plain and secure mode. At the moment only plain mode tags are supported in full functionality. Only serial numbers are supported in secure mode. Two different cards with 320 bytes or 1k bytes EEPROM memory are available. The EEPROM memory is divided into pages.
13,56 MHz Multitag Reader Module, Version 0.9v 3.3.4 EM 4135 The EM4135 is an ISO15693 compliant label of EM Microelectronic-Marin SA. It has eight bytes per page as the same as the My-D label. It only supports 35 pages. The administrative area holds the information of the access condition and the UID. Address Page 0 1 2 3 4 24h User data … … 00h User data 5 6 7 Administrative area Figure 3-8: Memory organization of EM 4135 3.
13,56 MHz Multitag Reader Module, Version 0.9v 3.4.3 Write access condition Page 02h contains the write access condition for each page. Each page can be set to read only (bits are set to 0). This procedure is irreversible. Locking page 2 no further changed of the access condition can be done. Always two bits must be change at the same time. This register is implemented as OTP.
13,56 MHz Multitag Reader Module, Version 0.9v 3.6 SR176 The SR176 label contains only 64 bytes of data organized in two bytes per page. 3.6.1 Memory organization Page address Byte 1 0Fh Lock byte Byte 0 RFU 0Eh User data … … 04h User data 03h Serial number 02h Serial number 01h Serial number 00h Serial number Chip ID Figure 3-11: SR176 memory organization 3.6.2 Serial number UID The UID is stored at the first 4 pages. Page 00h contains the LSB of the UID.
,56 MHz Multitag Reader Module, Version 0.9v 3.7 ISO 14443 The reader can only handle single tags according ISO 14443 type A or B. The reader only identifies single tags and returns its serial number. All other command such as read, write, select are not supported. The Mifare® transponder family consists of various 13.56 MHZ transponders according to ISO14443. For more details refer to ISO14443 part 1-4. 3.8 Mifare® Ultralight Mifare® Ultralight tags have no crypto algorithm included.
13,56 MHz Multitag Reader Module, Version 0.9v 3.8.3 Lock bytes On page 2 the lock bytes are stored. Each bit specifies a page or block. Once a bit is set it cannot be changed anymore. This process is irreversible. If a block lock bit is set all pages within this block are read only regardless the single lock states.
13,56 MHz Multitag Reader Module, Version 0.9v 4 Hardware J1 J2 25,5 4.1 Pin out of OEM Module 2,54 1,27 30,5 Figure 4-1: Pin out of the reader device 4.1.
13,56 MHz Multitag Reader Module, Version 0.9v 4.1.2 Pin out of J2 PIN PIN Nr Description VDD 20 +5 V DC GND 19 Ground LEDg 18 LED green (reading LED) LEDr 17 LED red EN 16 Enable reader, open or logic high RFU 15 Reserved for future use USER 14 User Port DIR 13 Direction of RS 485 TX 12 TX to PC RX 11 RX from PC Figure 4-3: Pin out of jumper 2 4.1.
13,56 MHz Multitag Reader Module, Version 0.9v 5 Software As a default data is transmitted at 9600,n,8,1. Two protocol modes are supported. The protocol mode is configured in the reader EEPROM. As factory default, the ASCII protocol is used. 5.1 ASCII Protocol This protocol was designed for easy handling. The commands can be issued using a terminal program. Data is transmitted as ASCII hexadecimal that can be displayed on any terminal program (e.g. HyperTerminal).
13,56 MHz Multitag Reader Module, Version 0.9v 5.2.6 ETX End of transmission. (03h) 5.2.7 Remarks If the reader device receives an invalid instruction frame (i.e. BCC wrong) or the requested station ID does not match the internal ID of the reader, the command is not executed. The reader waits for the next valid frame. Use the binary timeout (see protocol configuration register) to detect incomplete binary frames. 5.2.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3 Instruction Set Following table describes all commands of the reader device. Each command returns an answer to the host. Exceptions are mentioned explicitly. The green LED is acknowledging a successfully executed command. The red LED indicates an error. 5.3.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.2 Error Codes Following figure shows an overview of all error messages of the reader device. Error Code Description ‘?’ Unknown command ‘F’ General failure ‘I’ Invalid data format, this error occurs only in ASCII mode. The reader assumes a hexadecimal value but receives bad data ‘N’ No tag in the field ‘U’ Read data does not match written data, block might be write protected or write process fails. ‘X’ Page is already locked.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.3.1 Unique device ID (00h-04h) The unique device ID identifies a reader module. It is factory programmed and cannot be changed. 5.3.3.2 Station ID (0Ah) The station ID is used in binary mode to address a device in party line set up. The station ID has the rage of 01h to FEh and can be freely set. The value 00h is reserved for the bus master. All readers send a response to this device.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.3.3.6 Single shot (default 0) If set the reader displays the serial number of a tag only once within a specified timeout. The time out is defined at EEPROM register 0Fh. 00h indicated no delay. The delay time can be adjusted stepwise in 100 msec steps. 5.3.3.3.7 Page read (default 0) If set the reader sends the content of a page specified at EEPROM register 11h instead of the serial number.
13,56 MHz Multitag Reader Module, Version 0.9v Following figure describes the communication settings Description 8 data bits No parity bit 1 stop bit No flow control Figure 5-10: Communication settings 5.3.3.5 Binary watchdog timer (0Dh) The binary watchdog timer defines the maximum delay time between two byte in binary protocol mode sent from the host to the reader. In binary protocol mode the binary watchdog timer should be enabled in order to detect incomplete or corrupted frames.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.3.8 Start page (10h) The EEPROM register defines the start page address in page read mode. To enable this function the page read flag has to be set. See above protocol configuration register. The reader will send the content of this page instead of the serial number. This mode is only supported for ISO15693, Icode® and Tagit® tags. The reader does not check the integrity of the page address.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.4 Reset This command executes a power on (software) reset. New configuration settings will be loaded. 5.3.4.1 Command Command Data ‘x’ none 5.3.4.2 Answer Answer Description none ASCII Mode: “ISO 1.0” + CR + LF Binary Mode: none This command will reset the reader module as well as all tags in the antenna field. The reader starts according the startup settings. 5.3.4.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.6 Continuous Read The reader device reads and displays the serial numbers continuously while one or more tags remain in the field. This command stops if any character is sent to the reader module. The reader module returns the character ‘S’ (53h). Only different tag types are detected at the same time. Use the multitag list command (see chapter 5.3.8) if more than one ISO15693 tag are present. The reader supports different tag types.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.6.4 Continuous read mode at start up (default enabled) Continuous read mode at startup could be activated using the utility program. 5.3.6.5 Lock mode (default disabled) If set the reader locks to the first recognized tag type. This speeds up the communication to a tag in continuous read mode. The reader only uses this tag type anymore. 5.3.6.6 Extended ID (default disabled) If set Tagit® and ISO14443 Type B cards returns additional information.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.7 Select This command selects a single card in the antenna field. It can only be used in single tag mode. In case of success the command returns the UID of the selected card. 5.3.7.1 Command Command Data ‘s’ none 5.3.7.2 Answer Answer Description data Leading character (1 byte) + serial number ‘N’ Error: No Tag in the field 5.3.7.3 Select a single tag No previous continuous read is required. 5.3.7.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.8 Multi Tag Selection / List This command detects several ISO15693 tags at the same time. It replaces the fast select command in multiple tag surroundings. The Multi Tag list command lists all tags with its serial numbers. Using the Multi Tag Select command to address a single or a group of tag together. Each tag has to be selected separately 5.3.8.1 Command Command Data ‘m’ Serial number (8 bytes) 5.3.8.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.9 Read page This command reads a data block on a card. Size of returned data depends on the used tag. A valid page address depends on the present tag. E.g. an Icode® tag supports only 16 pages, an ISO15693 SRF55V10P 128 pages. 5.3.9.1 Command Command Data ‘r’ page address (1 byte) 5.3.9.2 Answer Answer Description data page data (depends on tag type) ‘F’ Error: read failure ‘N’ Error: No tag in field 5.3.9.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.9.6 Examples r05 00112233 reads page 05. page data is 00112233 5.3.10 Read reader EEPROM Reads the internal reader EEPROM. It contains all startup parameters and the device ID. Changes of the startup settings will only be taken into effect after a reset of the device. 5.3.10.1 Command Command Data ‘rp’ EEPROM address (1 byte) 5.3.10.2 Answer Answer Description data EEPROM data (1 bytes) 5.3.10.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.11 Write page This command writes data to a page. A read after write is done automatically to ensure correct writing. 5.3.11.1 Command Command Data ‘w’ page address (1 byte) + data (n bytes) 5.3.11.2 Answer Answer Description data ‘w’ + page data (depends on tag type) ‘N’ Error: No tag in field ‘F’ Error: Write failure ‘U’ Error: read after write incorrect 5.3.11.3 Page data Page data depends on the used tag.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.11.6 Read after write error ‘U’ After each write access to a TAG a read is done automatically. This error is thrown if read data does not match the written data. E.g. the page is read only. 5.3.11.7 Example Command Description w0511223344 w11223344 writes data 11223344 on page 05. 5.3.12 Write EEPROM Writes to the internal reader EEPROM. It contains all startup parameters and the device ID.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.13 Set tag type This command switches the reader to a specific tag type. The continuous read function will speed up because only this tag type is recognized. These changes are not stored into the EEPROM. After a reset the reader starts as defined in the startup configuration. 5.3.13.1 Command Command Data ‘o’ Leading character (1 byte) 5.3.13.2 Answer Answer Description none String of tag type 5.3.13.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.14 Include tag type This command includes a specific tag type to the reader device. 5.3.14.1 Command Command Data ‘o+’ Leading character (1 byte) 5.3.14.2 Answer Answer Description none String of tag type 5.3.14.3 Leading character See chapter 5.3.13.3. 5.3.14.4 Example Command Description o+t +TAGIT Include Tagit® protocol to the reader device 5.3.15 Exclude tag type This command excludes a specific tag type from the reader device. 5.3.15.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.15.4 Example Command Description o-i -ICODE Exclude Icode® protocol from the reader device 5.3.16 Lock page This command locks a page permanently. It only supports ISO15693 and Tagit® tags. Icode® and Mifare® Ultralight tags can be locked using the write command. See tag organization for more details. 5.3.16.1 Command Command Data ‘k’ Page address (1 byte) 5.3.16.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.17 Transfer data telegram This command sends a custom data block to a card. First the proper tag type has to be specified using the set tag type command. The reader device only supports ISO15693. The command shows a specific command frame for each tag type. The maximum frame size is limited to 200 bytes each. 5.3.17.1 ISO15693 The reader set the according flag of the protocol automatically. Only FM and high data rate can be used. 5.3.17.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.17.6.1 Flags Flags have to be correct in order to succeed. Following figure describes the flag byte. RFU bits are set automatically and cannot be changed. The inventory flag has to be set executing the inventory command.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.17.6.2 Command code Refer to ISO15693-3 or the tag manufacturer documentation for more details. 5.3.17.6.3 UID The UID is optional. If address flag is set it is mandatory. Only the addressed VICC executes the command. All other tags remain quit. 5.3.17.6.4 Data Depends on command code. 5.3.17.7 Answer The length of the answer is specified in the uplink length byte. Following figure shows a complete response data frame.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.18 Set LED This command controls the LED. If the LED flag is set the automatic LED is deactivated. The user can set the state of the LED manually. 5.3.18.1 Command Command Data ‘d’ LED state (1 byte) 5.3.18.2 Answer Answer Description none String of LED state 5.3.18.3 LED Command Answer Description ‘dg’ DG Switch on LED green, LED red off ‘dr’ DR Switch on LED red, LED green off ‘dn’ DN Switch off both LEDs Figure 5-24: LED response 5.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.19.2.1 ASCII mode The station ID has only effect in binary mode. 5.3.19.3 Time slotted answer In party line mode more than one reader can be used simultaneously. The time slotted answer allows a separation of all connected devices. The station ID is used to determine the correct time slot. The reader supports up to 254 unique time slots. Following formula allows calculating the needed time of one time slot.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.20 Antenna power on/off This command controls the antenna power. 5.3.20.1 Command Command Data ‘pon’ Switch on reader ‘poff’ Reader enters the stand by mode 5.3.20.2 Answer Answer Description ‘P’ Positive acknowledge 5.3.20.3 Power off The reader enters the stand by mode. Power consumption is decreases. All tags in the antenna field are powered off and reset. The stand by mode is only entered manually.
13,56 MHz Multitag Reader Module, Version 0.9v 5.3.21 Read/Write User Port This command will set or read the state of the USER port (pin 14) of the OEM reader device. The port can be set either as output or as input. 5.3.21.1 Command Command Data ‘pr’ none ‘pw’ State of user port (1 Byte) 5.3.21.2 Answer Answer Description data State of user port (1 Byte) 5.3.21.3 Read port The port read command returns the actually state of the USER port.
13,56 MHz Multitag Reader Module, Version 0.9v 6 Timing The timing is measured between request and response of the reader. Additionally to the process timing the protocol timing must be included. It depends on protocol mode as well as on the baud rate.
13,56 MHz Multitag Reader Module, Version 0.
13,56 MHz Multitag Reader Module, Version 0.
13,56 MHz Multitag Reader Module, Version 0.9v 7 Frequently Ask Questions 7.1 Getting started To test and interface the ACG 13,56 MHz Multitag OEM Reader Module, no sophisticated µP development system is needed. All you need is a PC, a connection cable and a power supply for the reader. If you are using Microsoft Windows (98/NT/2000…), take following steps: 1. 1. 2. 3. 4. 5. 6.
13,56 MHz Multitag Reader Module, Version 0.9v 7.3 Release notes 7.3.1 Version 0.9x 7.3.1.1 New features added to version 0.9x: o o o o o o o o o Anticollision ISO15693 Single shot of UID including delay time Page read as continuous read default Set of tag type is selectable Tagit® and ISO14443B supports extend ID Tagit® lock page Set LED manually SR176 new edition EM4135 7.3.1.2 Changes made to version 0.
13,56 MHz Multitag Reader Module, Version 0.9v 8 APPENDIX A 8.1 P & P module (version 3) 8.1.
13,56 MHz Multitag Reader Module, Version 0.9v 8.1.2 Supply voltage 12V Following components have to be added: Component Description U1 Voltage Regulator 7805 D1 TMM BAT42 C4 330 nF, 50V, Shape 1206 C5 100 nF, 50V, Shape 0805 Figure 8-2: 12 V components 8.1.3 RS485/422 Using the RS485 bus following changes are necessary.
13,56 MHz Multitag Reader Module, Version 0.9v 9 APPENDIX B: 9.1 Antenna design 9.1.1 Layout Figure 9-1: Antenna layout 9.1.2 Mechanical data: Dimension 51x42 mm Wire width 1,27 mm; 35 um Cu thickness Distance between 2 turns Number of turns 1,75 mm 4 Figure 9-2: Coil design - mechanical data 9.1.
13,56 MHz Multitag Reader Module, Version 0.9v 9.1.4 Antenna matching circuit: R Pin 1 C1 Pin 2 C3 Pin 6 C5 LAnt C4 Pin 5 Figure 9-4: Antenna matching circuit 9.1.4.1 Connecting scheme Pin Nr Pin Description 1 ARX Antenna RX 2 ATX1 Antenna TX 5 RFU Not connected 6 TGND Antenna ground Figure 9-5: Antenna connecting scheme 9.1.4.
13,56 MHz Multitag Reader Module, Version 0.9v 10 APPENDIX C 10.1 TempSense® KSW Transponder The TempSense® KSW transponder is an ISO15693 compliant tag. The reader ahs to be set up for this tag type. 10.1.1 How to start with o o o o Connect the module to the power supply and the PC. Start the ISO Reader Utility program. Inquire Reader first in order to get a correct connection to the module Switch to the KSW label. Alternatively you can use any terminal program (i.e. HyperTerminal).
13,56 MHz Multitag Reader Module, Version 0.9v 11 References ISO/IEC 15693, Part 1-4, Contact less integrated circuit(s) cards – vicinity cards ISO/IEC 14443, Part 1-4, TempSense KSW Tags, http://www.ksw-microtec.