Manual

ManualsBrandsRainbow Electronics ManualsAudio accessoriesATVaultIC200

General Features

The ATVaultIC200 is an ASSP designed to secure various systems against counter-

feiting, cloning or identity theft. It is a hardware security module that can be used in

many applications such as anti-cloning, access control or hardware protection.

For more details about the algorithms supported please refer to Table 2-1, “Supported

Algorithms table”, on page 8.

Cryptographic Services Cryptographic Algorithms

• Digital Signature

• Encryption / Decryption

• Message Digest

• Key Wrapping / Unwrapping

• HOTP One-Time Password Generation

• True Random Number Generation

• DES / 3DES

• AES 128/192/256 bits

Software Features Memory

• FIPS 140-2 Identity-based authentication

using password, Secure Channel

Protocol (SCP02 / SCP03)

• Rights Management (Administrator,

Approved User, Non-approved User...)

• Embedded Dynamic FAT12 File System

• EEPROM 4 Kbytes (for user)

• Write Endurance 100 Kcycles

• Data Retention 10 Years

• 2ms Program + 2ms Erase

Communication Packages

• Hi gh Speed Slave SPI Serial Interface,

ATMEL Proprietary Protocol

• I²C (Two Wire Interface), ATMEL

Proprietary Protocol

• ISO7816 UART using T=0 or T=1

Protocols

• 8-DFN (RoHS compliant)

•8-SOIC (RoHS compliant)

Hardware Platform Certifications

• SecureAVR

8-/16-bit RISC CPU

• Hardware Random Number Generator

• Hardware 3DES Crypto Accelerator (112-

bits keys)

• EAL4+ Certification

• FIPS 140-2 Security Level 3

VaultIC

Family

ATVaultIC200

Technical

Datasheet

TPR0460AX–SMS–02/10

Summary of content (26 pages)

PAGE 1
General Features The ATVaultIC200 is an ASSP designed to secure various systems against counterfeiting, cloning or identity theft. It is a hardware security module that can be used in many applications such as anti-cloning, access control or hardware protection.
PAGE 2
Preliminary This document is the complement to the “AT98SO/VaultIC Generic Datasheet” [1](TPR0395XAvailable under Non-Disclosure Agreement only) for the ATVaultIC200. It only documents the values and set of features specific to this product.
PAGE 3
ATVaultIC200 1. Overview 1.1 Tampering resistance The proven technology used in ATVaultIC200 security modules is already widespread and used in national ID/health cards, e-passports, bank cards (storing user Personal Identification Number, account numbers and authentication keys among others), pay-TV access control and cell phone SIM cards (allowing the storage of subscribers’ unique ID, PIN code, and authentication to the network), where cloning must definitely be prevented.
PAGE 4
3. The authenticator checks the signature using either the same secret key or the public key associated to the claimant’s private key and decides whether the claimant is authorized or not based on the signature verification result. This strong authentication method requires storing secret data. Pure software multi-factor solutions are thus not reliable. 1.
PAGE 5
ATVaultIC200 1.5 Typical application The ATVaultIC200 is a turnkey solution that combines powerful cryptographic capabilities and secure data storage. Ink Cartridge, Access Control or Smart meters are some examples of use of the ATVaultIC200. Below is described an example of an ATVaultIC200 product used in a typical application : Ink Cartridge anti-cloning. Figure 1-1.
PAGE 6
1.6.
PAGE 7
ATVaultIC200 1.7 Software and Hardware Architecture The ATVaultIC200 software architecture is as exposed on the diagram below. Figure 1-2. Software and Hardware Architecture CRYPTO APPLICATION Crypto services ( MAC,Signature,…) Crypto Library (AES...
PAGE 8
2. Detailed Features 2.1 Communication Interfaces The ATVaultIC200 embeds the following communication interfaces: • High Speed SPI : up to 16 Mbps • I²C : up to 400 kbps • ISO7816 : up to 625 kbps 2.2 Security Mechanisms The table below summarizes the cryptographic algorithms, and their identifiers, supported by the ATVaultIC200. Table 2-1.
PAGE 9
ATVaultIC200 Cryptographic Services Supported Algorithms Algo Identifier Block Ciphering: • DES • ALG_DES • 3DES-EDE • ALG_3DES_EDE • 3DES-EEE • ALG_3DES_EEE • AES • ALG_AES Block chaining modes: Message Encryption • ECB • CHA_ECB • CBC • CHA_CBC • OFB • CHA_OFB • CFB • CHA_CFB Padding methods: HOTP - One-Time Password Generation Message Digest Random Number Generation • No padding • PAD_NONE • Method 1 • PAD_METHOD_1 • Method 2 • PAD_METHOD_2 • PKCS 5 • PAD_PKCS5 • PKCS 7 •
PAGE 10
3. Product Characteristics 3.1 Command Timings (T=25°C) ! Caution Table 3-1. The table below includes only the ATVaultIC200 internal process. Communication protocol overhead and device-side process are excluded. Command Timings table Command Context Min. Typ. Max.
PAGE 11
ATVaultIC200 3.2 Maximum Ratings Table 3-2. Absolute Maximum Ratings(1) Symbol Parameter Min. Max. Unit VCC Supply Voltage -0.3 7.5 V VIN Input Voltage VSS-0.3 VCC+0.3 V TA Operating Temperature -25 +85 °C 500 000 (2) cycles EEPROM Data Retention Virgin 10 Years Electrostatic Discharge (HBM) 4 kV +/- 200 mA EEPROM Endurance for write/erase cycles EEEPROM VDataRetention ESD Latch-up Notes: 3.3 1.
PAGE 12
Symbol Parameter Condition Min. Typ. Max. Unit VOL Output Low Voltage - I/O0,I/O1 Output Low Voltage - MISO, MOSI IOL =1mA 0 0 0.08*VCC 0.15*VCC V VOH Output High Voltage - I/O0,I/O1 Output High Voltage - MISO, MOSI IOH = 1mA 0.
PAGE 13
ATVaultIC200 3.4 Timings 3.4.1 I²C Timings The table below describes the requirements for devices connected to the I²C Bus. The ATVaultIC200 I²C Interface meets or exceeds these requirements under the noted conditions. Timing symbols refer to Figure 3.4.2. I²C Requirements Table 3-4.
PAGE 14
3.4.2 SPI Timings The table below describes the requirements for devices connected to the SPI. The ATVaultIC200 SPI meets or exceeds these requirements under the noted conditions. See Figure 3-2 for details. SPI Timing Parameters Table 3-5.
PAGE 15
ATVaultIC200 3.5 Connexions for Typical Application ATVaultIC200 connexions for I²C typical application Figure 3-3. VCC VCC VCC C1 C2 GND ATVaultIC200 HOST RESET RST VCC R2 SCL SDA R1 SCL SDA / SPI_SEL For the address selection of the VaultIC200 in I²C configuration, please refer to the “AT98SO/VaultIC Generic Datasheet”. ATVaultIC200 connexions for SPI typical application Figure 3-4.
PAGE 16
Table 3-6. Configuration Reference Typ.Value Comment Pull-Up Resistors 2.2 kΩ Recommended C1 Power Supply Decoupling Capacitors 4.7 μF Recommended C2 Power Supply Decoupling Capacitors 10 nF Recommended C1 Power Supply Decoupling Capacitors 4.7 μF Recommended C2 Power Supply Decoupling Capacitors 10 nF Recommended R1 Pull-Up Resistor 20 kΩ usually on reader side C1 Power Supply Decoupling Capacitors 4.
PAGE 17
ATVaultIC200 3.6.2 Pinouts for packages SOIC8 and DFN8 Figure 3-6. Pinout ATVaultIC200 - Package SOIC8 MOSI 1 8 MISO 7 VCC INDEX CORNER GND 2 ATVaultIC200 SOIC8 SCL / SS 3 6 RST SDA / SPI_SEL / IO0 4 5 SCK / CLK Figure 3-7.
PAGE 18
3.6.3 Packages characteristics SOIC-8 package characteristics Figure 3-8. C 1 E E1 L N Top View ? End View e b A COMMON DIMENSIONS (Unit of Measure = mm) A1 SYMBOL D Side View 18 NOM MAX NOTE 1.70 2.16 A1 0.05 0.25 b 0.35 0.48 5 C 0.15 0.35 5 D 5.13 5.35 E1 5.18 5.40 E 7.70 8.26 L 0.51 0.85 ? 0˚ e Notes: 1. 2. 3. 4. 5. MIN A 2, 3 8˚ 1.27 BSC 4 This drawing is for general information only; refer to EIAJ Drawing EDR-7320 for additional information.
PAGE 19
ATVaultIC200 Figure 3-9.
PAGE 20
Definitions and abbreviations 3DES / TDES Triple DES algorithm AES Advanced Encryption Standard algorithm as defined in FIPS PUB 197 APDU Application Protocol Data Unit as defined in ISO7816-3 Authentication An identification or entity authentication technique assures one party (the verifier), through acquisition of corroborative evidence, of both the identity of a second party involved, and that the second (the claimant) was active at the time the evidence was created or acquired.
PAGE 21
ATVaultIC200 Slave The device addressed by a master SPI Serial Protocol Interface Strong Authentication Exchange of messages during which a claimant proves its identity to a verifier by demonstrating its knowledge of a secret but without revealing it TWI / I2C Two Wire Interface and Inter Integrated Circuit Bus respectively 21 TPR0460AX–SMS–02/10
PAGE 22
Referenced Documents 22 [1] ATMEL Corporation. AT98SO/VaultIC Generic Datasheet. TPR0395AX-July2009 (Availbale under Non-Disclosure Agreement signed with ATMEL). [2] NIST SP 800-63 - Electronic Authentication Guideline - April 2006 [3] ISO9798 - 2 Entity Authentication - Part 2 : Mechanisms using symmetric encipherment algorithms. July 1999 [4] FIPS PUB 196. Entity Authenticationusing public key cryptography. Feb 1997. [5] Atmel Corporation.
PAGE 23
ATVaultIC200 Datasheet Revision History Rev AX - 01 February 2010 : Initial Version 23 TPR0460AX–SMS–02/10
PAGE 24
1 Overview ................................................................................................... 3 1.1 Tampering resistance ........................................................................................3 1.2 Authentication capability ....................................................................................3 1.3 Secure storage ..................................................................................................4 1.4 Flexibility .........................
PAGE 25
ATVaultIC200 25 TPR0460AX–SMS–02/10
PAGE 26
Headquarters International Atmel Corporation 2325 Orchard Parkway San Jose, CA 95131 USA Tel: 1(408) 441-0311 Fax: 1(408) 487-2600 Atmel Asia Unit 01-05 & 16, 19/F BEA Tower, Millennium City 5 418 Kwun Tong Road Kwun Tong, Kowloon Hong Kong Tel: (852) 2245-6100 Fax: (852) 2722-1369 Atmel Europe Le Krebs 8, Rue Jean-Pierre Timbaud BP 309 78054 Saint-Quentin-enYvelines Cedex France Tel: (33) 1-30-60-70-00 Fax: (33) 1-30-60-71-11 Atmel Japan 9F, Tonetsu Shinkawa Bldg.