User's Manual
Table Of Contents
- 1. Introduction
- The PN7150 architecture overview
- 2. NCI Overview
- 3. DH interface
- 5. Initialization & Operation configuration
- 6. Reader/Writer Mode
- 6.1 T1T, T2T, MIFARE Ultralight, MIFARE Classic and MIFARE Plus tags
- 6.1.1 Access through the [NCI] Frame RF Interface
- 6.1.2 [PN7150-NCI] extension: TAG-CMD Interface
- 6.1.3 [PN7150-NCI] extension: Payload structure of the TAG-CMD RF Interface
- 6.1.4 [PN7150-NCI] extension: REQs & RSPs rules
- 6.1.5 [PN7150-NCI] extension: List of REQs & RSPs
- 6.1.6 [PN7150-NCI] extension: raw data exchange REQs & RSPs
- 6.1.7 [PN7150-NCI] extension: T2T & MFU REQs & RSPs
- 6.1.8 [PN7150-NCI] extension: MIFARE Classic REQs & RSPs
- 6.1.9 Access through the TAG-CMD RF Interface
- 6.2 T3T tag
- 6.3 T4T & ISO-DEP Tags/Cards
- 6.3.1 Access through the Frame RF Interface
- 6.3.2 Access through the ISO-DEP RF Interface
- 6.3.3 [PN7150-NCI] extension: Presence check Command/Response
- 6.3.4 [PN7150-NCI] extension: S-Block Command/Response
- 6.3.5 [PN7150-NCI] extension: WTX notification
- 6.3.6 [PN7150-NCI] extension: Higher bit rates in Poll NFC-A & NFC-B
- 6.4 [PN7150-NCI] extension: 15693 & I-Code tags
- 6.5 [PN7150-NCI] extension: KOVIO tags
- 6.1 T1T, T2T, MIFARE Ultralight, MIFARE Classic and MIFARE Plus tags
- 7. Card Emulation Mode
- 8. P2P Initiator & Target Mode
- 9. RF Discovery Management
- 9.1 RF Discovery functionalities
- 9.2 NFC FORUM Profile as defined in [NCI]
- 9.3 [PN7150-NCI] extension: additional technologies not yet supported by the NFC FORUM
- 9.4 [PN7150-NCI] extension: Low Power Card Detector (LPCD) Mode
- 9.5 [PN7150-NCI] extension: EMVCo Profile in Poll & Listen Modes
- 9.6 [PN7150-NCI] extension: Power optimization
- 10. Configurations
- 11. Test Mode
- 12. PN7150 Practical approach
U
M10936
P
N7150 User Manual
UM
10936 All information provided in this document is subject to legal disclaimers.
U
ser manual
CO
MPANY PUBLIC
Rev. 2.0 — 6 November 2020
348120
52 of 127
Commands sent by DH on Authenticated Sector 0
N
CI_DATA_MSG(
MFC_Authe
nticate_RSP
)
Commands sent by DH on Authenticated Sector S
SEN
D DATA (
XCHG_DATA_REQ
(MF_CMD1))
SEN
D DATA (
XCHG_DATA_RSP
(MF_RSP1))
[MF_CMD1]_encrypted_SectS
[MF_RSP1]_encrypte
d_SectS
CORE_CON
N_CREDITS_NTF
N
CI_DATA_MSG
(
MFC_Authe
nticate_REQ(Sect. Addr = S, Key)
)
[MIFARE Authent. Ste
p1]_
encrypted_Sect0
CORE_CON
N_CREDITS_NTF
Authentication to sector 0: triggered by DH, executed by NFCC
NFCC activates the TAG-CMD intf: move to RFST_POLL_ACTIVE
DH NFCC
RF_DISCOVER_CMD
(NFC_A_PASSIVE_POLL_MODE,
...)
RF_DISCOVER_RSP
N
CI_DATA_MSG
(
MFC_Authe
nticate_REQ(Sect. Addr = 0, Key)
)
N
CI_DATA_MSG(
MFC_Authe
nticate_RSP
)
Endpoint
REQA/ATQA
AntiColl CL1
RF_IN
TF_ACTIVATED_NTF
(Prot =
MF_CLASSIC
,
Intf =
TAG-CMD
.)
[MIFARE Authent.]_Plain
Tok
en RB
NCI RF
[HLTA]_encrypted_SectS
[NACK]_e
ncrypted_SectS
SELECT/SAK
N
CI_DATA_MSG(
XCHG_DATA_REQ
(MF_CMD1))
N
CI_DATA_MSG(
XCHG_DATA_RSP
(MF_RSP1))
[MF_CMD1]_encrypted_Se
ct0
[MF_RSP1]_encrypted_Sect0
SEN
D DATA (
XCHG_DATA_REQ
(HLTA))
RF_DEACTIVATE_CMD(Discove
ry)
Activation sequence: driven by the NFCC
CORE_CON
N_CREDITS_NTF
CORE_CON
N_CREDITS_NTF
CORE_CON
N_CREDITS_NTF
RF_DISCOVER_MAP_RSP
RF_DISCOVER_MAP_CMD
(RF Prot. = MF_CLASSIC,Mode = Poll,
RF Intf. = TAG-CMD, ...)
RF_DEACTIVATE_RSP
RF_DEACTIVATE_N
TF
Token AB_encrypted_Sect0
Tok
en BA_encrypted_Sect0
N
CI_DATA_MSG(
XCHG_DATA_REQ
(MF_CMDn))
N
CI_DATA_MSG(
XCHG_DATA_RSP
(MF_RSPn))
[MF_CMDn]_e
ncrypted_Sect0
[MF_RSPn]_encrypted_Sect0
CORE_CON
N_CREDITS_NTF
NFCC encrypts/decrypts data
using the key for sector 0
SEN
D DATA (
XCHG_DATA_RSP
())
DH sends a HLTA cmd to
close the MFC transaction
NFCC still
encrypts/decrypts
data using the key for sector 0
SAK shows MIFARE Classic
with bit b4=1b (see AN10833).
RF Field On
Map MIFARE Classic prot.
to TAG-CMD Intf
Start Discovery
(move to RFST_DISCOVERY)
DH stops the communication by
deactivating the TAG-CMD RF intf
RF Field OFF
[MIFARE Authent. Ste
p2]_
encrypted_SectS
NFCC encrypts/decrypts data
using the key for sector S
Authentication to sector S: triggered by DH, executed by NFCC
Fig 32. Reader Sequence for MIFARE Classic