Philips Semiconductors

Product Profile
Security Transponder, SECT
Features Programmable Security Transponder 48/48 bit challenge/response authentication Powerful security algorithm 128 bit Secret Key 32 bit device identification number 768 bit non-volatile user memory (EEPROM) EEPROM read/write protection capabilities Fully compatible with PCF7931/30 family 20 year EEPROM data retention Leadless stick shaped plastic package General Description

PCF7935AS

The PCF7935, SECT is a programmable Security Transponder employing challenge/response authentication ideally suited for contactless authentication and memory access between a basestation and the transponder. The SECT features a powerful security algorithm for vehicle immobiliser applications. The device is fully compatible with the PCF7931 read only and PCF7930 read/write transponder family, providing means for downward compatibility. The transponder features 1152 bit of non-volatile memory (EEPROM) from which 768 bit are reserved for user data storage. User data and configuration data may be exchanged in password mode for advanced pre-personalisation techniques. Memory access flags and a 56 bit password enable read and/or write protection of data. The SECT performs a 48 bit challenge/response authentication, employing a 128 bit Secret Key. In addition the SECT supports a 32 bit device identification number. The transponder power supply and system clock is derived from the magnetic component of the RF field generated by the basestation. The transponder is assembled in a small leadless stick shaped plastic package.

Block Diagram
PCF7935AS

Stick Package Outline

11,9-12,1 A
Contactless Interface
Rectifier Voltage Limiter

All Dimensions [mm]

Control Logic

Data Acqusition

Power-On Reset

EEPROM Access Control

Clock Recovery

5,9-6,1

C
Modulator

Calculation Unit

4,4 - 4,6

4,9-5,1

1,9-2,1

Demodulator

EEPROM

Transponder IC

June 1998

2,9-3,05

Cross Section A-A ( without Scale )

Philips Semiconductors

Product Profile
Security Transponder, HITAG 2
Features Programmable Security Transponder 64/32 bit mutual authentication 32 bit unique device dentification number 48 bit Secret Key Fast authentication, 39 ms 128 bit non-volatile user memory (EEPROM) EEPROM access in plain or cipher mode EEPROM read/write protection capabilities Read Only modes for downward compatibility Excellent device sensitivity in read and write mode, 35 T 20 year EEPROM data retention Leadless stick shaped plastic package General Description

PCF7936AS

The PCF7936, HITAG 2 is a programmable Security Transponder employing mutual authentication ideally suited for contactless authentication and memory access between a basestation and the transponder. The transponder meets the security and performance requirements of modern vehicle immobiliser applications. Excellent device sensitivity (large distance) and short authentication time ensure easy application and outstanding system performance. The transponder provides 256 bit of non-volatile memory (EEPROM) from which 128 bit are reserved for user data storage. User data and configuration data may be exchanged in cipher mode for advanced prepersonalisation techniques. Memory access flags support read and/or write protection of data. The device performs a fast mutual authentication algorithm, employing a Random Number, Secret Key and Passwords. In addition the HITAG 2 features a factory programmed 32 bit unique identification number to enable unambiguously device identification. The HITAG 2 features two Read Only modes for downward compatibility with common Read Only systems. The transponder power supply and system clock is derived from the magnetic component of the RF field generated by the basestation. Due to low power consumption the HITAG 2 provides excellent sensitivity in read and write mode. The transponder is assembled in a small leadless stick shaped plastic package.

Block Diagram
PCF7936AS

Stick Package Outline

11,9-12,1 A
Contactless Interface Control Logic

All Dimensions [mm]

Power-On Reset

EEPROM Access Control

Clock Recovery
A

C Modulator

Calculation Unit

5,9-6,1

4,4 - 4,6

Rectifier Voltage Limiter

Data Acquisition

4,9-5,1

1,9-2,1

Demodulator

EEPROM

Transponder IC

July 1998

2,9-3,05

Cross Section A-A ( without Scale )

Philips Semiconductors

Preliminary Information

Product Profile
Security Transponder and RISC Controller, STARC lite
Features Compatible with Security Transponder, PCF7936AS. RISC Programmable Keyless Entry features 384 Bit EEPROM 16-Pin SO package Transponder 64/32 bit mutual authentication calculation unit 32 bit unique device identification number 48 t bit Secre Key Fast mutual authentication (39 ms) EEPROM read/write protection capability Excellent 5 sensitivity in read and write mode (3 T) RISC Controller Advanced 8-bit RISC architecture 4 Kbyte ROM, 64 Byte RAM On-chip < RC oscillator ( 10%) Short instruction execution time (as fast as 1s) 11 I/O ports, general purpose Code hopping based on transponder calculation unit Code hopping synchronization via transponder Clock input to serve as external data rate reference Programmable battery low detection Low power consumption (300 A, PD 300 nA) Single battery cell operation (2.1V to 5.5V) Device supply can be derived from LF Field Typical Application General Description

PCF7941

The PCF7941 is a single chip high performance Security Transponder and Keyless Entry controller, ideally suited for vehicle immobilizer applications that incorporate keyless entry functions. The transponder circuitry is compatible with the Security Transponder PCF7936AS, for use in mixed systems that employ a STARC and a standard Security Transponder, PCF7936AS, at the same time. The Transponder circuitry meets the security and performance requirements of modern car immobilizer applications. Excellent device sensitivity and short authentication time ensure outstanding system performance. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition. The RISC Controller circuitry is powered by an advanced low power 8-Bit RISC. The device features 11 I/O ports including up to four wake-up inputs for command button sensing. Code hopping generation may employ the transponder Calculation Unit, while telegram transmission characteristics are controlled by the RISC. If the same security algorithm is applied for the Transponder and the Code Hopping function, separate Secret Keys are provided to ensure independent code characteristics. Contactless code hopping synchronization may be accomplished via the conatctless interface. The system timing is derived from a low tolerant on-chip RCOscillator. If desired, an external data rate reference clock may be applied for use with common PLL transmitter devices.

optional

VDD

VBAT

P15 (XCLK) P17 (DOUT) P16 (XON)

PCF7941
Security Transponder Contactless Interface IN1 EEPROM 384 Bit Calculation Unit Control Logic Transponder Interface RISC Controller 4 K ROM Timer Modulator Interrupt Control RC Oscillator

Transmitter IR or UHF (PLL)

P20 P21 P22

User Extensions

8 Bit RISC

P14 (LED)

I/O
P13 (B3) P12 (B2) P11 (B1) P10 (B0)

IN2

Power Management VSS

Buttons

RAM

Li 3V

November 1999

Philips Semiconductors

Preliminary Information

Product Profile
Security Transponder and RISC Controller, STARC
Features Compatible with Security Transponder, PCF7936AS. RISC Programmable Keyless Entry features Features battery charging from Transponder LF Field Large 4 K Bit EEPROM for extended data storage 16-Pin SO package Transponder 64/32 bit mutual authentication calculation unit 32 bit unique device identification number 48 t bit Secre Key Fast mutual authentication (39 ms) EEPROM read/write protection capability Excellent 5 sensitivity in read and write mode (3 T) RISC Controller Advanced 8-bit RISC architecture 8 Kbyte ROM, 64 Byte RAM On-chip < RC oscillator ( 10%) Short instruction execution time (as fast as 1s) 11 I/O ports, general purpose Code hopping based on transponder calculation unit Code hopping synchronization via transponder Clock input to serve as external data rate reference Programmable battery low detection Programmable battery charging characteristics Low power consumption (300 A, PD 300 nA) Single battery cell operation (2.1V to 5.5V) Device supply can be derived from LF Field General Description

PCF7942

The PCF7942 is a single chip high performance Security Transponder and Keyless Entry controller, ideally suited for vehicle immobilizer applications that incorporate keyless entry functions. The transponder circuitry is compatible with the Security Transponder PCF7936AS, for use in mixed systems that employ a STARC and a standard Security Transponder, PCF7936AS, at the same time. The Transponder circuitry meets the security and performance requirements of modern car immobilizer applications. Excellent device sensitivity and short authentication time ensure outstanding system performance. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition. The RISC Controller circuitry is powered by an advanced low power 8-Bit RISC. The device features 11 I/O ports including up to four wake-up inputs for command button sensing. The device provides 4 K Bit of EEPROM for data storage with access control as defined by the application ROM. Code hopping generation may employ the transponder Calculation Unit, while telegram transmission characteristics are controlled by the RISC. If the same security algorithm is applied for the Transponder and the Code Hopping function, separate Secret Keys are provided to ensure independent code characteristics. Contactless code hopping synchronization may be accomplished via the conatctless interface. The system timing is derived from a low tolerant on-chip RCOscillator. If desired, an external data rate reference clock may be applied for use with common PLL transmitter devices. The device supports battery charging from the Transponder LF Field under control of the RISC application program.

Typical Application

optional

VDD

VBAT

P15 (XCLK) P17 (DOUT) P16 (XON)

PCF7942
Security Transponder Contactless Interface IN1 EEPROM 4 K Bit Calculation Unit Control Logic Transponder Interface RISC Controller 8 K ROM Timer Modulator Interrupt Control RC Oscillator

Transmitter IR or UHF (PLL)

P20 P21 P22

User Extensions

8 Bit RISC

P14 (LED)

I/O
P13 (B3) P12 (B2) P11 (B1) P10 (B0)

IN2

Power Management VSS

Buttons

RAM

Li 3V

November 1999

Philips Semiconductors

Product Profile
Security Transponder plus Remote Keyless Entry, HITAG2PLUS
Features Compatible with Security Transponder, PCF7936AS. Rolling Code Generator for keyless entry 14-pin SO package Transponder 64/32 bit mutual authentication 32 bit unique device identification number Fast authentication, 39ms 48 bit Secret Key 128 bit user memory (EEPROM) EEPROM read/write in cipher mode EEPROM read/write protection capability Excellent sensitivity in read and write mode Code Hopping Generator Four user buttons (15 + 1 commands) LED acknowledgment of transmission 42 bit unidirectional code hopping 48 bit Remote Secret Key 114 bit message with run-in, device identification, function code, terminator and parity bits Automatic code synchronisation via transponder Programmable data rate and frame repetition rate Clock input to support external data rate reference Manchester encoding General Description

PCF7946AT

The HITAG2PLUS is a high performance monolithic Security Transponder and Remote Keyless Entry Chip ideally suited for car immobiliser applications that incorporate keyless entry functions. The HITAG2PLUS transponder circuitry is compatible with the Security Transponder PCF7936AS to support mixed systems using a HITAG2PLUS and a standard Security Transponder, PCF7936AS at the same time. The Transponder circuitry meets the security and performance requirements of modern car immobiliser applications. Excellent device sensitivity (large distance) and short authentication time ensure easy application and outstanding system performance. The Transponder circuitry does not require any battery supply and full operation is granted in a Keyless Entry battery low condition. The Remote Control circuitry features a low power consumption to ensure long battery lifetime. The device supports up to four user buttons and a LED for transmission acknowledgment. Code hopping upon each button press is provided. The device features automatic re-synchronisation of the rolling code via the transponder interface. The Transponder and rolling code algorithm employ the same security algorithm for easy system integration on the receiver side. Separate Secret Keys are provided to ensure independent code characteristics. Data rate, modulation and repetition rates of the remote transmission frame are configurable by the on-chip EEPROM. The HITAG2PLUS features a clock input as an external data rate reference for use with common PLL transmitter devices.

Low tolerance on-chip RC oscillator (< 10%)

Battery low indication Single cell operation (2.0V to 3.6V) Low power consumption (ACTIVE: 0.3 mA, POWER DOWN: 300 nA) Typical Application

optional

VBAT

XCLK DOUT XON

PCF7946
Security Transponder IN1 Contactless Interface EEPROM 384 Bit Calculation Unit Control Logic Remote Control User Interface Modulator Rolling Code Generator Control Logic RC Oscillator

Transmitter IR or UHF (PLL)

LED B3 B2 B1 B0
Command Buttons

IN2

Power Management VSS TOUT

Li 3V

June 1999

Philips Semiconductors

Product Profile
Advanced Basestation IC, ABIC
Features Extended system operating range due to powerful AM/PM demodulation technique Ideally suited for "Intelligent Antenna" and "Active Antenna" architectures High antenna drive capabilities, CW: 200mAp Low antenna driver output resistance, 3.5 Excellent receiver sensitivity, 2mVpp Large receiver dynamic range Programmable clock divider, modulator, receiver gain and filter characteristics Fast "read after write" receiver settling characteristics On-chip receive EMI filter Antenna failure mode detection Few external components Operating supply voltage: 4.5 to 5.5 V Power down mode: 7A @ 5.5 V 14-pin SO package General Description

PCF7991AT

The PCF7991 is a highly integrated and powerful advanced basestation IC, ABIC, ideally suited for vehicle immobilisation applications. The device incorporates all necessary functions to facilitate reading and writing of transponders. The ABIC, PCF7991 employs a unique AM/PM demodulation technique that extends the system operating range compared with simple envelope detection. Optimised to operate with the Philips transponder family (PCF79xx), the ABIC can be used in combination with commonly available transponder that employ ASK modulation. ASK modulation and receive characteristics are widely programmable for powerful system adaptation. The ABIC fits "Intelligent Antenna" as well as "Active Antenna" applications. The carrier frequency can be derived from an on-chip oscillator or an external clock source. A wide range of clock frequencies can be applied due to the programmable on-chip clock divider circuitry. The device enables system diagnostic functions by antenna fail detection features. Communication with the device and the transponder is provided via the serial microcontroller interface. Employing CMOS technology, the device features low power operation and supports Idle and Powerdown modes.

Minimum Application Circuitry

4.5 ... 5.5 V

VDD

XTAL1

XTAL2

PCF 7991
TX1 Modulation Pulse Gen. Antenna Clk Divider Timing Oscillator
To microcontroller

Driver
TX2 RX EMI Filter

DOUT Control Unit Synchron Demodulator SC Filter Amplifier CEXT Serial Interface DIN CLK

Register VSS

QGND

May 1998