2023 S
2023 S
2023 S
CryptoMemory
4 Kbit
AT88SC0404C
Stream Encryption
Four Key Sets for Authentication and Encryption
Summary
Pin Configuration
Description
ISO Module
Contact
Standard
Package Pin
VCC
Supply Voltage
C1
GND
Ground
C5
SCL/CLK
C3
2023JSSMEM3/09
Pad
Description
Standard
Package Pin
SDA/IO
C7
RST
Reset Input
C2
NC
Figure 1.
Package Options
8-lead SOIC, PDIP
1.
ISO Module
Contact
C5=GND
C6=NC
C7=SDA/IO
C8=NC
NC
NC
NC
GND
1
2
3
4
8
7
6
5
VCC
NC
SCL
SDA
Description
The AT88SC0404C member of the CryptoMemory family is a high-performance secure memory providing 4 Kbits of
user memory with advanced security and cryptographic features built in. The user memory is divided into four 128-byte
zones, each of which may be individually set with different security access rights or effectively combined together to
provide space for 1 to 4 data files.
1.1.
1.2.
Embedded Applications
Through dynamic and symmetric mutual authentication, data encryption, and the use of encrypted checksums, the
AT88SC0404C provides a secure place for storage of sensitive information within a system. With its tamper detection
circuits, this information remains safe even under attack. A 2-wire serial interface running at 1.0 MHz is used for fast
and efficient communications with up to 15 devices that may be individually addressed. The AT88SC0404C is available
in industry standard 8-lead packages with the same familiar pinout as 2-wire serial EEPROMs.
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
Figure 2.
Block Diagram
VCC
GND
SCL/CLK
SDA/IO
RST
Power
Management
Authentication,
Encryption and
Certification Unit
Synchronous
Interface
Data Transfer
Asynchronous
ISO Interface
Password
Verification
Reset Block
Answer to Reset
2.
Pin Descriptions
2.1.
Random
Generator
EEPROM
The VCC input is a 2.7V to 5.5V positive voltage supplied by the host.
2.2.
Clock (SCL/CLK)
In the asynchronous T = 0 protocol, the SCL/CLK input is used to provide the device with a carrier frequency f. The
nominal length of one bit emitted on I/O is defined as an elementary time unit (ETU) and is equal to 372/ f. When the
synchronous protocol is used, the SCL/CLK input is used to positive edge clock data into the device and negative edge
clock data out of the device.
2.3.
Reset (RST)
The AT88SC0404C provides an ISO 7816-3 compliant asynchronous answer to reset sequence. When the reset
sequence is activated, the device will output the data programmed into the 64-bit answer-to-reset register. An internal
pull-up on the RST input pad allows the device to be used in synchronous mode without bonding RST. The
AT88SC0404C does not support the synchronous answer-to-reset sequence.
2.4.
3
2023JSSMEM3/09
Table 2.
DC Characteristics
Applicable over recommended operating range from VCC = +2.7 to 5.5V, TAC = -40C to +85C (unless otherwise noted)
Symbol
Parameter
Max
Units
5.5
mA
mA
ICC
mA
ICC
mA
ISB
100
mA
VCC(2)
Supply Voltage
ICC
ICC
Test Condition
Min
2.7
Typ
VIL
(1)
VCC x 0.2
VIL
(1)
VCC x 0.2
VIL
(1)
VCC x 0.2
VIH(1)(2)
VCC x 0.7
VCC
VIH(1)(2)
VCC x 0.7
VCC
VIH(1)(2)
VCC x 0.7
VCC
IIL
15
IIL
15
IIL
50
IIH
20
IIH
100
IIH
150
VOH
VCC x 0.7
VCC
VOL
IOL = 1mA
VCC x 0.15
IOH
VOH
20
Notes: 1. VIL min and VIH max are reference only and are not tested.
2. To prevent Latch Up Conditions from occurring during Power Up of the AT88SCxxxxC, VCC must be turned
on before applying VIH. For Powering Down, VIH must be removed before turning VCC off.
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
Table 3.
AC Characteristics
3.
Parameter
Min
Max
Units
fCLK
MHZ
fCLK
MHZ
fCLK
MHZ
40
60
tR
tF
tR
9% x period
tF
9% x period
tAA
35
nS
tHD.STA
200
nS
tSU.STA
200
nS
tHD.DAT
10
nS
tSU.DAT
100
nS
tSU.STO
200
nS
tDH
20
nS
tWR
mS
tWR
mS
A high-to-low transition of SDA with SCL high is a start condition which must precede any
other command (see Figure 6 on page 7).
STOP CONDITION:
A low-to-high transition of SDA with SCL high is a stop condition. After a read sequence, the
stop command will place the EEPROM in a standby power mode (see Figure 6 on page 7).
ACKNOWLEDGE:
All addresses and data words are serially transmitted to and from the EEPROM in 8-bit
words. The EEPROM sends a zero to acknowledge that it has received each word. This
happens during the ninth clock cycle.
MEMORY RESET:
After an interruption in protocol, power loss or system reset, any 2-wire part can be reset by
following these steps:
1.
2.
3.
Clock up to 9 cycles.
Look for SDA high in each cycle while SCL is high.
Create a start condition.
5
2023JSSMEM3/09
Figure 3.
Bus Timing for 2 wire communications: SCL: Serial Clock, SDA Serial Data I/O
tHIGH
tF
tR
tLOW
SCL
tSU.STA
tLOW
tHD.STA
tHD.DAT
tSU.DAT
tSU.STO
SDA IN
tAA
tDH
tBUF
SDA OUT
Figure 4.
Write Cycle Timing: SCL: Serial Clock, SDA Serial Data I/O
SCL
SDA
8th BIT
ACK
WORDn
twr
STOP
CONDITION
Note:
(1)
START
CONDITION
The write cycle time tWR is the time from a valid stop condition of a write sequence to the end of the internal
clear/write cycle.
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
Figure 5.
Data Validity
SDA
SCL
DATA STABLE
DATA STABLE
DATA
CHANGE
ALLOWED
Figure 6.
SDA
SCL
START
Figure 7.
STOP
Output Acknowledge
SCL
DATA IN
DATA OUT
START
ACKNOWLEDGE
7
2023JSSMEM3/09
4.
Device Architecture
4.1.
User Zones
The EEPROM user memory is divided into 4 zones of 1024 bits each. Multiple zones allow for different types of data or
files to be stored in different zones. Access to the user zones is allowed only after security requirements have been
met. These security requirements are defined by the user during the personalization of the device in the configuration
memory. If the same security requirements are selected for multiple zones, then these zones may effectively be
accessed as one larger zone.
Figure 8.
User Zones
Zone
$0
$1
$2
$3
$4
$5
$6
$7
$00
User 0
128 Bytes
$78
$00
User 1
128 Bytes
$78
$00
User 2
128 Bytes
$78
$00
User 3
128 Bytes
$78
5.
Control Logic
Access to the user zones occurs only through the control logic built into the device. This logic is configurable through
access registers, key registers and keys programmed into the configuration memory during device personalization.
Also implemented in the control logic is a cryptographic engine for performing the various higher-level security
functions of the device.
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
6.
Configuration Memory
The configuration memory consists of 2048 bits of EEPROM memory used for storing passwords, keys and codes and
for defining security levels to be used for each user zone. Access rights to the configuration memory are defined in the
control logic and may not be altered by the user.
Figure 9.
Configuration Memory
$0
$1
$2
$3
$08
$4
$5
$6
$7
Answer to Reset
$00
Fab Code
MTZ
Identification
$10
$18
DCR
$20
AR0
Read Only
Identification Number Nc
PR0
AR1
PR1
AR2
PR2
AR3
PR3
$28
Reserved
$30
Access Control
$38
$40
Issuer Code
$48
$50
$58
$60
$68
Cryptography
Secret
$70
$78
$80
$88
$90
$98
$A0
$A8
$B0
PAC
Write 0
PAC
Read 0
$B8
PAC
Write 1
PAC
Read 1
$C0
PAC
Write 2
PAC
Read 2
$C8
Password
$D0
Reserved
$D8
$E0
$E8
$F0
PAC
Write 7
PAC
Reserved
Read 7
Forbidden
$F8
9
2023JSSMEM3/09
7.
Security Fuses
There are three fuses on the device that must be blown during the device personalization process. Each fuse locks
certain portions of the configuration memory as OTP memory. Fuses are designed for the module manufacturer, card
manufacturer and card issuer and should be blown in sequence, although all programming of the device and blowing of
the fuses may be performed at one final step.
8.
Protocol selection
The AT88SC0404C supports two different communication protocols.
Smart Card Applications: The asynchronous T = 0 protocol defined by ISO 7816-3 is used for compatibility with
the industrys standard smart card readers.
Embedded Applications: A 2-wire serial interface is used for fast and efficient communication with logic or
controllers.
The power-up sequence determines which of the two communication protocols will be used.
8.1.
Asynchronous T = 0 Protocol
This power-up sequence complies with ISO 7816-3 for a cold reset in smart card applications.
The device will respond with a 64-bit ATR code, including historical bytes to indicate the memory density within the
CryptoMemory family. Once the asynchronous mode has been selected, it is not possible to switch to the synchronous
mode without powering off the device.
Figure 10.
Vcc
I/O-SDA
ATR
RST
CLK-SCL
10
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
8.2.
Figure 11.
Vcc
I/O-SDA
RST
1
CLK-SCL
Five clock pulses must be sent before the first command is issued.
Note:
9.
Mode
(1)
Configuration Data
User Data
Passwords
Standard
clear
clear
clear
MDC(1)
Authentication
clear
clear
encrypted
MAC(1)
Encryption
clear
encrypted
encrypted
MAC(1)
Note:
1. Configuration data include viewable areas of the Configuration Zone except the passwords:
MDC: Modification Detection Code
MAC: Message Authentication Code.
11
2023JSSMEM3/09
10.
Security Options
10.1.
Anti-tearing
In the event of a power loss during a write cycle, the integrity of the devices stored data may be recovered. This
function is optional: the host may choose to activate the anti-tearing function, depending on application requirements.
When anti-tearing is active, write commands take longer to execute, since more write cycles are required to complete
them, and data are limited to eight bytes.
Data are written first to a buffer zone in EEPROM instead of the intended destination address, but with the same
access conditions. The data are then written in the required location. If this second write cycle is interrupted due to a
power loss, the device will automatically recover the data from the system buffer zone at the next power-up.
In 2-wire mode, the host is required to perform ACK polling for up to 8 ms after write commands when anti-tearing is
active. At power-up, the host is required to perform ACK polling, in some cases for up to 2 ms, in the event that the
device needs to carry out the data recovery process.
10.2.
Write Lock
If a user zone is configured in the write lock mode, the lowest address byte of an 8-byte page constitutes a write access
byte for the bytes of that page.
Example:
The write lock byte at $080 controls the bytes from $080 to $087.
Figure 12.
Address
$0
$1
$2
$3
$4
$5
$6
$7
$080
11011001
xxxx xxxx
xxxx xxxx
xxxx xxxx
xxxx xxxx
xxxx xxxx
xxxx xxxx
xxxx xxxx
locked
locked
locked
The write lock byte may also be locked by writing its least significant (rightmost) bit to 0. Moreover, when write lock
mode is activated, the write lock byte can only be programmed that is, bits written to 0 cannot return to 1.
In the write lock configuration, only one byte can be written at a time. Even if several bytes are received, only the first
byte will be taken into account by the device.
12
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
11.
Password Verification
Passwords may be used to protect read and/or write access of any user zone. When a valid password is presented, it
is memorized and active until power is turned off, unless a new password is presented or RST becomes active. There
are eight password sets that may be used to protect any user zone. Only one password is active at a time, but write
passwords give read access also.
11.1.
Authentication Protocol
The access to a user zone may be protected by an authentication protocol. Any one of four keys may be selected to
use with a user zone.
The authentication success is memorized and active as long as the chip is powered, unless a new authentication is
initialized or RST becomes active. If the new authentication request is not validated, the card loses its previous
authentication and it should be presented again. Only the last request is memorized.
Note:
Password and authentication may be presented at any time and in any order. If the trials limit has been
reached (after four consecutive incorrect attempts), the password verification or authentication process will not
be taken into account.
Figure 13.
Device (Card)
Card Number
Host (Reader)
AUTHENTICATION
VERIFY A
COMPUTE Challenge B
COMPUTE Challenge A
Challenge A
Challenge B
VERIFY B
READ ACCESS
VERIFY RPW
DATA
Checksum (CS)
VERIFY WPW
VERIFY CS
Write DATA
13
2023JSSMEM3/09
11.2.
Checksum
The AT88SC0404C implements a data validity check function in the form of a checksum, which may function in
standard, authentication or encryption modes.
In the standard mode, the checksum is implemented as a Modification Detection Code (MDC), in which the host may
read an MDC from the device in order to verify that the data sent was received correctly.
In the authentication and encryption modes, the checksum becomes more powerful since it provides a bidirectional
data integrity check and data origin authentication capability in the form of a Message Authentication Code (MAC).
Only the host/device that carried out a valid authentication is capable of computing a valid MAC. While operating in the
authentication or encryption modes, the use of a MAC is required. For an ingoing command, if the device calculates a
MAC different from the MAC transmitted by the host, not only is the command abandoned but the mode is also reset. A
new authentication and/or encryption activation will be required to reactivate the MAC.
11.3.
Encryption
The data exchanged between the device and the host during read, write and verify password commands may be
encrypted to ensure data confidentiality.
The issuer may choose to require encryption for a user zone by settings made in the configuration memory. Any one of
four keys may be selected for use with a user zone. In this case, activation of the encryption mode is required in order
to read/write data in the zone and only encrypted data will be transmitted. Even if not required, the host may elect to
activate encryption provided the proper keys are known.
11.4.
Supervisor Mode
Enabling this feature allows the holder of one specific password to gain full access to all eight password sets, including
the ability to change passwords.
11.5.
Modify Forbidden
No write access is allowed in a user zone protected with this feature at any time. The user zone must be written during
device personalization prior to blowing the security fuses.
11.6.
Program Only
For a user zone protected by this feature, data within the zone may be changed from a 1 to a 0, but never from a 0
to a 1.
12.
14
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
13.
Ordering Information
Ordering Code
Package
Voltage Range
Temperature Range
AT88SC0404C-MJ
AT88SC0404C-MP
M2 J Module
M2 P Module
2.7V5.5V
Commercial (0C70C)
AT88SC0404C-PU
AT88SC0404C-SU
8P3
8S1
2.7V5.5V
AT88SC0404C-WI
7 mil wafer
2.7V5.5V
Industrial (40C85C)
Package Type(1)
Description
M2 J Module
M2 P Module
8P3
8S1
8-lead, 0.150 Wide, Plastic Gull Wing Small Outline Package (JEDEC SOIC)
Note:
15
2023JSSMEM3/09
14.
Packaging Information
Ordering Code: MJ
Module Size: M2
Dimension*: 12.6 x 11.4 [mm]
Glob Top:
Round - 8.5 [mm]
Thickness: 0.58 [mm]
Pitch:
14.25 mm
*Note:
16
Ordering Code: MP
Module Size: M2
Dimension*: 12.6 x 11.4 [mm]
Glob Top:
Square - 8.8 x 8.8 [mm]
Thickness: 0.58 [mm]
Pitch:
14.25 mm
The module dimensions listed refer to the dimensions of the exposed metal contact area. The actual
dimensions of the module after excise or punching from the carrier tape are generally 0.4 mm greater in both
directions (i.e., a punched M2 module will yield 13.0 x 11.8 mm).
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
14.1.
Ordering Code: SU
8S1 JEDEC SOIC
C
1
E
E1
Top View
End View
e
COMMON DIMENSIONS
(Unit of Measure = mm)
b
A
SYMBOL
A1
MIN
MAX
1.35
1.75
A1
0.10
0.25
0.31
0.51
0.17
0.25
4.80
5.05
E1
3.81
3.99
5.79
6.20
Side View
NOM
NOTE
1.27 BSC
0.40
1.27
Note: These drawings are for general information only. Refer to JEDEC Drawing MS-012, Variation AA for proper dimensions,
tolerances, datums, etc.
3/17/05
TITLE
8S1, 8-lead (0.150" Wide Body), Plastic Gull Wing
Small Outline (JEDEC SOIC)
DRAWING NO.
REV.
8S1
17
2023JSSMEM3/09
14.2.
Ordering Code: PU
8P3 PDIP
E1
Top View
c
eA
End View
D
D1
COMMON DIMENSIONS
(Unit of Measure = inches)
e
A2 A
b2
b3
4 PLCS
Side View
MIN
NOM
MAX
NOTE
0.210
A2
0.115
0.130
0.195
0.014
0.018
0.022
b2
0.045
0.060
0.070
b3
0.030
0.039
0.045
0.008
0.010
0.014
0.355
0.365
0.400
D1
0.005
0.300
0.310
0.325
E1
0.240
0.250
0.280
SYMBOL
0.100 BSC
eA
L
0.300 BSC
0.115
0.130
0.150
Notes: 1. This drawing is for general information only; refer to JEDEC Drawing MS-001, Variation BA, for additional
information.
2. Dimensions A and L are measured with the package seated in JEDEC seating plane Gauge GS-3.
3. D, D1 and E1 dimensions do not include mold Flash or protrusions. Mold Flash or protrusions shall not
exceed 0.010 inch.
4. E and eA measured with the leads constrained to be perpendicular to datum.
5. Pointed or rounded lead tips are preferred to ease insertion.
6. b2 and b3 maximum dimensions do not include Dambar protrusions. Dambar protrusions shall not exceed
0.010 (0.25 mm).
18
TITLE
8P3, 8-lead, 0.300" Wide Body, Plastic Dual
In-line Package (PDIP)
01/09/02
DRAWING NO.
REV.
8P3
AT88SC0404C
2023JSSMEM3/09
AT88SC0404C
Date
2023JS
03/2009
Comments
Features Section add Green compliant (exceeds RoHS) to end of Standard 8-lead
Plastic Packages bullet
Added Note to DC Characteristics table and applied to VCC and all 3 instances of Vih
symbols in table.
Ordering Information page: Add Green compliant (exceeds
RoHS) to middle row of Temperature Range
Replace Lead-free/Halogen-free. Keep industrial
Updated to 2009 Copyright..
2023IS
11/2008
2023HS
04/2007
2023HS
03/2007
19
2023JSSMEM3/09
Headquarters
International
Atmel Corporation
2325 Orchard Parkway
San Jose, CA 95131
USA
Tel: 1(408) 441-0311
Fax: 1(408) 487-2600
Atmel Asia
Unit 1-5 & 16, 19/F
BEA Tower, Millennium City 5
418 Kwun Tong Road
Kwun Tong, Kowloon
Hong Kong
Tel: (852) 2245-6100
Fax: (852) 2722-1369
Atmel Europe
Le Krebs
8, Rue Jean-Pierre Timbaud
BP 309
78054 Saint-Quentin-enYvelines Cedex
France
Tel: (33) 1-30-60-70-00
Fax: (33) 1-30-60-71-11
Atmel Japan
9F, Tonetsu Shinkawa Bldg.
1-24-8 Shinkawa
Chuo-ku, Tokyo 104-0033
Japan
Tel: (81) 3-3523-3551
Fax: (81) 3-3523-7581
Technical Support
securemem@atmel.com
Sales Contact
www.atmel.com/contacts
Product Contact
Web Site
www.atmel.com
Literature Requests
www.atmel.com/literature
Disclaimer: The information in this document is provided in connection with Atmel products. No license, express or implied, by estoppel or otherwise, to any
intellectual property right is granted by this document or in connection with the sale of Atmel products. EXCEPT AS SET FORTH IN ATMELS TERMS AND
CONDITIONS OF SALE LOCATED ON ATMELS WEB SITE, ATMEL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED
OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL ATMEL BE LIABLE FOR ANY DIRECT, INDIRECT,
CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDEN-TAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS
INTERRUPTION, OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF ATMEL HAS BEEN ADVISED
OF THE POSSIBILITY OF SUCH DAMAGES. Atmel makes no representations or warranties with respect to the accuracy or completeness of the contents of this
document and reserves the right to make changes to specifications and product descriptions at any time without notice. Atmel does not make any commitment to
update the information contained herein. Unless specifically provided otherwise, Atmel products are not suitable for, and shall not be used in, automotive
applications. Atmels products are not intended, authorized, or warranted for use as components in applications intended to support or sustain life.
2009 Atmel Corporation. All rights reserved. Atmel, logo and combinations thereof, and others are registered trademarks or trademarks of Atmel Corporation
or its subsidiaries. Other terms and product names may be trademarks of others.
2023JSSMEM3/09