Home

HT EV400 HITAG Proximity Evaluation Kit

image

Contents

1. This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Reset System Resets the read write device and switches off high frequency for 100 ms As a consequence the transponder in the antenna field is reset e g trans ponder that is in Halt Mode will respond again Fast Fourier The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices Page 15 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 5 HITAG 2 Transponders 5 1 Memory Partitioning The memory of the transponder TAG consists of 256 bits EEPROM and is organized in 8 pages with 32 bits each The READ and WRITE instructions always read or write a whole page and the address transmitted by the base station represents the page address Depending on the mode of operation the EEPROM is organized in the following way crypto mode 32 bit Key KEY LOW Sacra 16 bit Key KEY HIGH Lana 8 bit Configuration 24 bit Password TAG aaa read write Page C 5 read write Page a read write Page A read write Page password mode Oo IDnumber Password RWD reserved EER S 24 bit Password TAG 4 readwritePage 6 readwritePage HTEV4_1 DOC HS Page 16 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 5 2 Cry
2. ReadWrite Keys A B Can be set to WriteOnly or Locked Default WriteOnly Logdata Can be set to Read Write or Locked Default ReadWrite Block 4 7 Can be set to Public or Secret access Default Public Configuration Locks the configuration of the transponder Default ReadWrite If you set the state of Configuration to Locked you cannot reset this setting back to ReadWrite Page 33 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 9 3 HITAG 2 Transponders Using HITAG 2 transponders you are able to configure the following items 9 3 1 Read Write Device HT2 RWD Configuration Current Config New Config 1 meee ee ee ee ee ee ee o aaa a a a a a ie Rey ReadWrite ReadWrite 1 Password TAG ReadWrite ReadWrite Password RWD ReadWrite ReadWrite i Check Password TAG Off Off KeyInit Password WriteOnly WriteOnly i Lock Configuration Unlocked Unlocked i CAUTION Once LOCKED only a higher security level is possible SELECT CrUp CrDn CHANGE CrLeft CrRight lt ESC gt to quit lt CTRL gt lt Enter gt to accept Key y Lets you choose among the 3 security levels as described before Password TAG ReadWrite WriteOnly and NoAccess Password RWD J see chapter 9 1 resp 10 1 2 Check Password TAG Enables checking of the Password TAG KeyInit Password Can be set to WriteOnly or Locked Configuration Locks the configuration of the read writ
3. Important You have to be very careful when changing keys and logdata as inconsiderate use results in loss of access to the secret area on the transponder See Chapter 10 for a de tailed description Page 13 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 4 2 Operating HITAG 1 Transponders Operating a HITAG 1 transponder the screen will be displayed as follows __ Transponder Sta Transponder 10n HITAG1 RW Device Proximity 4 3 Transponder Get ID Get all ID Read Page Read all Page Read Block Write Page Write Block et al Read Page Read all Page Read Block Write Page Write Block Personalization gt Configuration Reads the ID number of the transponder located in the field of the antenna Reads the ID numbers of up to 10 transponders located in the field of the antenna If more transponders are in the field the total number is displayed in the bottom line of the window On entering a page number 0 63 one page 4 bytes of the transponder is read and displayed on the screen On entering a page number 0 63 the content of one page 4 bytes of up to 10 transponders is read and displayed on the screen On entering a block number 0 15 and a page number 0 3 one block up to 16 bytes of the transponder is read and displayed on the screen On entering a page number 8 63 and 4 bytes of numbers one page 4 bytes is written to the transponder
4. Set BCD Reset System Submenu to change keys and passwords of the read write device see also chapter 10 Submenu used to change the configuration of the read write device see also chapter 9 Use this submenu to change the password for the configuration and person alization see chapter 9 and 10 Reads the version and programming date of the firmware and the serial number of the Core Module This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Resets the read write device and switches off high frequency for 100 ms As a consequence the transponder in the antenna field is reset e g trans ponder that is in Halt Mode will respond again The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range read write devices HTEV4_1 DOC HS Page 18 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 5 3 Password Mode Operating a HITAG 2 transponder in password mode the screen will be displayed as follows __ Transponder RW Device Proximit 5 3 1 Transponder Write Page Personalization gt Configuration Get ID Reads the ID number of the transponder located in the f
5. chooses the submenu shown with e You can also use the hotkeys to select a submenu e All menu items coloured in blue are not enabled in the software e Upon starting the software checks which serial interface is used for communication with the read write device This may last for some seconds e To increase the data reliability accessing transponders the software includes double read and read after write Page 9 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 3 Mainmenu unction Transponder Ho TAG RW Device Proximit The two bottom lines display error messages information about transponder interface and read write device Status Displays error respectively status messages Transponder Shows the chosen transponder e g HT2 Crypto RW Device Gives information about the type of connected read write device Proximity or Long Range Cyclic 1ms Shows the mode of command repetition Single or Cyclic access with delay time between end of first and beginning of the next command See chapter 3 1 Options Transponder Access COM 2 Shows the used serial interface COM 1 or COM 2 3 1 Options Options Transponder Ty Select Interface gt gt Select Interface Chooses the serial interface COM 1 or COM 2 Transponder Access Switches between single and periodically repeated commands The speci fied value determines the time between the end of the first and the begin ning
6. 2 Change a key e g Key A on the transponder i e using transponder personalization sub menu see chapter 4 3 3 Change Key A on the read write device to the new value using the Personalization submenu see Chapter 4 4 Caution On the transponder the key can only be written which means that you cannot call up the entry Moreover you need to know the old value if you want to change the key on the read write device If you enter wrong values the message Wrong old data is displayed Only after carrying out correctly steps 1 through to 3 may the second key be changed following the steps described above Conveniently you change both keys to the same value HTEV4_1 DOC HS Page 40 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 10 3 1 2 Incorrect Procedures Changing Keys e You change both keys on the read write device and then try to access the transponder This is not possible the status line displays the message Authentication error because there is no identity between any of the keys on the transponder and the read write device e You change only one key e g Key A on the read write device the second key in this ex ample B remains the Transport Key Then you try again to access the transponder In this case you will gain access because one key here it is Key B on the transponder and the read write device is still identical Therefore the status line briefly displays the message Authentication error
7. 23 A eas ce eh trie xs sett Get ae aah rue Sik ad bach ha Led ra athe es E tia 24 Page 3 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 6 Transponders PCF793x PIT cocaina 25 6 l M mory Paid da add E R 25 6 2 Operating PIT Trans ponders A a 26 6 3 Transponder vu ai 26 64 RIW DEVICES A ae eee AE 27 Te MIRO TrANSPONGELS wi cicinisiedencdededectiniadectdohededncwiadanedatadentdeiudaaadatedansacisdeweiaiadandeandeune 28 Valle Memory Sizes ia ti od a tala el 28 7 2 Operating MIRO Transponders ici tdi id 28 DS LEADS DOI A ie A A A A a ES 28 A eerste e een beatae Reel leer ies E EAE Sulton cial deel meme g 29 8 Error Messages cccciroccsicccisnnra canario rn ralla nea cas 30 9 Configuration of hitag TranSpOnderS ccssseeeeeeeeeeeeeseeeeeeeeeeeeeeeeeeeeeeeeeeeeneees 31 9 1 Security Mechas A a 31 9 2 HIPAG L Trasponders dida ins 32 92 1 Read Write DEVICE src a io ento 32 IA A ia psaecstuncadea E aiea 33 OS ATEAG 2 LEAD Ponders a a lacie ta ea AA a oh A ath ie A A ed 34 9 3 1 Read Write Dd ce ena ate ant ame icant els 34 Ds LAMISIL EN ca saat fa acti ecu a ye en sc tae cs vaste cel ec sae nese ae Sao cent T eee 35 10 Personalizing your Read Write Device and the Transponders ccmmm 36 101 General Definitions A AS 37 OLLA HITAC Trans pondria asi 37 1011 2 HEILA G 2 Transpondels ist lios T E eds 39 10 2 Personalization ConCept aiii einas borea aaia eiii
8. Business Centre Bld 3 r 1211 Volodarski Str 6 220050 MINSK Tel 375172 200 733 Fax 375172 200 773 Belgium see The Netherlands Brazil see South America Bulgaria Philips Bulgaria Ltd Energoproject 15th floor 51 James Bourchier Blvd 1407 SOFIA Tel 3592 689 211 Fax 3592 689 102 Canada Philips Semiconductors Components Tel 1800 234 7381 China Hong Kong 501 Hong Kong Industrial Technology Centre 72 Tat Chee Avenue Kowloon Tong HONG KONG Tel 85223 19 7888 Fax 85223 19 7700 Colombia see South America Czech Republic see Austria Denmark Prags Boulevard 80 PB 1919 DK 2300 COPENHAGEN S Tel 4532 88 2636 Fax 4531 57 1949 Finland Sinikalliontie 3 FIN O2630 ESPOO Tel 3589 61 5800 Fax 3589 61 580 xxx France 4 Rue du Port aux Vins BP 317 92156 SURESNES Cedex Tel 331 40 99 6161 Fax 331 40 99 6427 Germany HammerbrookstraBe 69 D 20097 HAMBURG Tel 4940 23 53 60 Fax 4940 23 536 300 Greece No 15 25th March Street GR 17778 TAVROS ATHENS Tel 301 4894 339 239 Fax 301 4814 240 Hungary see Austria India Philips INDIA Ltd Shivsagar Estate A Block Dr Annie Besant Rd Worli MUMBAI 400018 Tel 9122 4938 541 Fax 9122 4938 722 Indonesia see Singapore Ireland Newstead Clonskeagh DUBLIN 14 Tel 3531 7640 000 Fax 3531 7640 200 Israel RAPAC Electronics 7 Kehilat Saloniki St TEL AVIV 61180 Tel 9723 645 0444 Fax 9723 649 1007 Italy Philips Semi
9. NOT NECESSARY to personalize the read write device and the transponders in order to operate the Evaluation Kit A pre personalization was done by Philips In order to profit from the full functionality of the HITAG system the Evaluation Kit however supports all cryptographic features This requires the use of some secret data keys logdata and passwords The process of loading these data into the read write device is called personalization The same personalization proce dure has to be carried out on your transponders The read write device and the transponders are personalized by Philips by means of defined Transport Keys Transport Logdata and Trans port Passwords HITAG 1 Keys and Logdata are set to 0x00000000 HITAG 2 Key is set to 0x4D494B524F4E HITAG 2 Password TAG to 0xAA4854 and HITAG 2 Password RWD to 0x4D494B52 Therefore you can operate the Evaluation Kit without changing any data If you want to use own keys logdata or passwords you have to personalize read write device and transponders as it is described in the following chapters Make sure you are in a safe environment while writing secret data to the transponder or the read write device This prevents possible listening in to the communication between HOST and read write device On the next few pages you find a description of how to personalize your read write device In Chapter 10 3 the loading of own keys logdata and passwords into the read write device and the tra
10. after the first failed attempt to gain access using the changed key then the message Function OK appears The same scenario applies if you first change one or both of the keys on the transponder but leave the keys on the read write device unchanged transport keys 10 3 1 3 Changing Logdata Change logdata using the same procedure as described for changing keys Be careful to change them by pairs on the read write device and on the transponder Change for example Logdata 0A on the transponder by overwriting Page 5 Change Logdata OA on the read write device to the new value Change Logdata 1A on the transponder by overwriting Page 6 Change Logdata 1A on the read write device to the new value se Walon Again you need to know the old values before they can be changed on the read write device Therefore we recommend that you use a table to record changed keys and logdata during the first phase of getting to know the system When you change a key this does not mean that you also have to change the corresponding log data and the other way round Page 41 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 10 3 2 HITAG 2 Transponders 10 3 2 1 Changing the Key Please note the order of the steps 1 Access the transponder in crypto mode using the Transport Key 2 Change the key on the transponder using the transponder personalization submenu see chap ter 5 2 1 You do not need to
11. applications do so on their own risk and agree to fully indemnify Philips for any damages resulting from such improper use or sale Page 5 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 1 General Remarks 1 1 Scope of Delivery The Evaluation Kit comprises the following components 1 HITAG proximity read write device 1 Interface cable 1 Power supply cable 1 Floppy disc 3 1 2 containing evaluation software Transponders e User manual Data sheet containing 1 floppy disc 3 1 2 with libraries and header files 1 2 Specifications Power supply 9 16 VDC e Supply current maximum 150 mA Frequency 125 kHz Temperature 0 70 C Interface RS232 HTEV4_1 DOC HS Page 6 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 1 3 Hardware Startup Metallic environment and electromagnetic interferences e g monitors keyboards have a nega tive effect on the reading and writing range 1 3 1 Housing extermal antenna A connector rA TAG detected Power Antenna hitag Proximity Evaluation Kit of Companies serial Interface _ power supply connector connector 1 3 2 Connecting the Read Write Device to your PC and to the Po wer Supply Connect the supplied interface cable to the serial interface COM1 or COM2 on your IBM compa tible PC 286 or hig
12. change the password 3 Change the key on the read write device to the new value using the RW Device personaliza tion submenu see chapter 5 2 2 Only after carrying out correctly steps 1 through to 3 the transponders are accessible with the new key 10 3 2 2 Incorrect Procedures Changing the Key e You change the key on the read write device and then try to access the transponder This is not possible the status line displays the message NOTAG because there is no identity between the keys on the transponder and the read write device The same scenario applies if you first change the key on the transponder but leave the key on the read write device unchanged transport key 10 3 2 3 Changing Passwords Change passwords using the same procedure as described for changing the key Be careful to change them by pairs on the read write device and on the transponder 1 Access the transponders in password mode 2 Change one Password e g Password TAG on the transponders using the transponder person alization submenu see chapter 5 3 1 3 Change Password TAG on the read write device to the new value using the RW Device per sonalization submenu see chapter 5 3 2 Only after carrying out correctly steps 1 through to 3 executing a read access test the message Func tion OK has to be displayed in the status line may the second password be changed following the same steps described above When you change e g Password TAG t
13. stage is a test that is done by the producer respectively Philips Here the unique serial number is fixed and transport keys and transport passwords are pre programmed In the next stage the customers program their own keys and passwords so nobody besides them can access the transponders and configure the memory of the transponders We recommend to lock sensitive areas that means for example to prevent the possibility to change keys and pass words for the user In the last stage the user just reads from and writes to the memory of the transponders 10 3 Changing Keys and Passwords You can change keys and passwords using the menu options in the personalization submenu for the read write device and for the transponders You have to be careful when carrying out such a change Entering the personalization submenu for the read write device requires a password you have to enter only once when running the demosoftware The default password is set to 0x00000000 by Philips You do not have to change this data in order to operate the Demonstration Kit If you want to change keys and passwords please strictly follow the steps below e Set Transponder Access to Single access See chapter 3 1 e Place transponders one after the other directly on the antenna or hold them directly to it 0 distance 10 3 1 HITAG 1 Transponders 10 3 1 1 Changing Keys Please note the order of the steps 1 Access the transponder using the Transport Keys
14. the serial number of the Core Module This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment Set BCD This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Reset System Resets the read write device and switches off high frequency for 100 ms As a consequence the transponder in the antenna field is reset e g trans ponder that is in Halt Mode will respond again Fast Fourier The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices HTEV4_1 DOC HS Page 20 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 5 4 Public Mode A Operating a HITAG 2 transponder in Public Mode A the screen will be displayed as follows __ Transponder Status ction HT2 Public A RW Device Proximit 5 4 1 Transponder py Configuration Init Opens a submenu to configure the HT2 transponder as HT2 Public A and allows you to write 5 bytes of data to the transponder Read Reads the data of a HT2 Public A transponder Copy Opens a submenu to read the contents of a MIRO transponder write these data to a HT2 transponder and set it into Public Mode A Configuration Submenu used to change the configuration of the transponde
15. 10 1 2 2 Definition of the Passwords Passwords are needed to gain access to the transponder A pair of passwords is stored in every transponder This password pair has to be identical both on the transponder and the read write device Password TAG Password that the transponder sends to the read write device and which may be verified by the latter depending of the configuration of the read write device Password RWD Password that the read write device sends to the transponder and which is checked for identity by the latter The passwords are also predefined by Philips using defined transport passwords They can be read and written Password TAG and Password RWD do not have to show the same values but all passwords have to be identical on the read write device and on the transponder The passwords are predefined by Philips by means of defined transport passwords So it is important that the following values are in accordance with each other i e the respective data on the read write device and on the transponder have to be identical pairs on the read write on the device transponder Key e KEY Password TAG Password TAG Password RWD Password RWD Page 39 of 43 HTEV4_1 DOC HS hitag proximity Evaluation Description Rev 2 1 January 1999 10 2 Personalization Concept To enable utmost security and flexibility Philips worked out a personalization concept that shall be shortly described in the following The first
16. 8 895 Byte Byte 112 127 Block 7 so 1023 Blocks O and 1 store information for read write access control The intention of these blocks is to provide some flexibility for different applications in terms of data security and access to relevant information Byte Byte 0 15 Block O o 127 write Byte Byte 16 31 Block 1 hag 255 read Page 25 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 6 2 Operating PIT Transponders Operating a PIT transponder the screen will be displayed as follows __ Transponder Transponder RW Device Proximit 6 3 Transponder Read Write Byte Write Block Personalization Configuration HTEV4_1 DOC HS Write Block Personalization Configuration Reads all 8 data blocks of the transponder On entering a byte address 32 127 and one byte this data are written to the transponder On entering a block address 2 7 and 16 bytes these data are written to the transponder Submenu to change the password stored in the transponder Submenu used to change the status of the password checkbit of the trans ponder for write access Page 26 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 6 4 R W Device Personalization Configuration Get Version Fast Fourier Set BCD Reset System ANETTE Get Version Fast Fourier Set BCD Reset System Submenu to chang
17. On entering a block number 2 15 a page number 0 3 and up to 16 bytes of numbers one block up to 16 bytes is written to the transponder Attention You can only write cyclically on a TAG that is in the field when you initiate the write command To write to another TAG please repeat the write command HTEV4_1 DOC HS Page 14 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description Personalization Gives access to key and passwords stored on the transponder TAG see also chapter 10 Configuration Submenu used to change the configuration of the transponder see also chapter 9 The commands Get all ID and Read all Page are only enabled when using HITAG Long Range Read Write Devices 4 4 R W Device ALEC ReyInit Password Get Version Fast Fourier Set BCD Reset System Personalization Submenu to change keys and passwords of the read write device refer to chapter 10 Configuration Submenu used to change the configuration of the read write device refer to chapter 9 KeyInit Password Use this submenu to change the password for the configuration and person alization see chapters 9 and 10 Get Version Reads the version and programming date of the firmware and the serial number of the Core Module This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment Set BCD
18. Sales Communications Internet http www semiconductors philips com Building BE p P O Box 218 5600 MD EINDHOVEN The Netherlands Fax 3140 27 24825 O Philips Electronics N V 1997 SCB52 All rights are reserved Reproduction in whole or in part is prohibited without the prior written consent of the copyright owner The information presented in this document does not form part of any quotation or contract is believed to be accurate and reliable and may be changed without any notice No liability will be accepted by the publisher for any consequence of its use Publication thereof does not convey nor imply any license under patent or other industrial or intellectual property rights Philips Semiconductors amp PHILIPS
19. USER MANUAL HT EV400 HITAG Proximity Evaluation Kit Product Description January 1999 Revision 2 1 PH ILI PS NG E y y hitag Proximity Evaluation Description Rev 2 1 January 1999 hitag is the name of one of the universal and powerful product lines of our 125 kHz family The HITAG product family is used both in the proximity area reading range up to about 200 mm and in the long range area reading range up to about 1000 mm Developing our HITAG products utmost consideration was given to security and reliability The use of cryptography guarantees highest data security Using optimized antennas and powerful transponders operating ranges of up to Im can be achived The central part of every HITAG Read Write Device is the HITAG Core Module which ensures full compatibility for every HITAG Read Write Device Easy integration and application of the HITAG Core Module is due to its e small size e standard interfaces e flexible supply voltage To give you the possibility for an easy and quick start with our HITAG products we offer a HITAG Proximity Evaluation Kit Easy application certainly is an important factor in making the Proximity Evaluation Kit suitable for evaluation purposes You will be able to present your ideas and demonstrate the performance of your system with the help of the HITAG Evaluation Kit HTEV4_1 DOC HS Page 2 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description hit TM tag Pro
20. ai 40 10 3 Changing Keys and Passwords 1000 A A A 40 TOS st A TANG A Transponders il dotado oo 40 10 3 2 ATT AG 2 Transponders a 42 11 Ordering IntorMatON acaricia 43 HTEV4_1 DOC HS Page 4 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description Definitions Data sheet status Objective specification This data sheet contains target or goal specifications for product development Preliminary specification This data sheet contains preliminary data supplementary data may be published later Product specification This data sheet contains final product specifications Limiting values Limiting values given are in accordance with the Absolute Maximum Rating System IEC 134 Stress above one or more of the limiting values may cause permanent damage to the device These are stress ratings only and operation of the device at these or at any other conditions above those given in the Characteristics section of the specification is not implied Exposure to limiting val ues for extended periods may affect device reliability Application information Where application information is given it is advisory and does not form part of the specification Life support applications These products are not designed for use in life support appliances devices or systems where mal function of these products can reasonably be expected to result in personal injury Philips custom ers using or selling these products for use in such
21. al commands This mechanism has 3 levels Level 0 All security relevant data can be read and written Level 1 The data cannot be read any more If you want to change an entry you have to know the old value Otherwise writing access will be denied Level 2 The internal data are locked and can neither be read nor written At this level it is impossible for the user to change the stored data The following data are subject to the mechanism described above e Key information A and B e Logdata 0A 0B F for HITAG 1 transponders e Logdata 1A 1B e Key information e Password TAG for HITAG 2 transponders e Password RWD You cannot reset levels e g from level 2 to level 1 Once a security level has been chosen it becomes irreversible If you want to write the key and passwords to or read them from the read write device you have to enter the Keylnit Password If you do not know this password you will not be able to enter the personaliza tion and configuration submenus of the read write device as you cannot read this password from the read write device To change the KeyInit Password you have to know the current value The default password is set to 0x00000000 by Philips After entering the correct KeyInit Password access to the personalization and configuration sub menus of the read write device is granted Page 31 of 43 HTEV4_1 DOC HS e TM hitag Proximity Evaluation Description Rev 2 1 January 1999 9 2 HITAG 1 Trans
22. ase of block read or write the transponder is processed from the start to the end of the block The drawing below describes the memory configuration on the Demokit transponder Serial Number Configuration Key A Key B Logdata 1B Logdata 0A secret Logdata 1A Logdata 0B public secret secret ro read only r w read write wo write only 0 neither read nor write Configuration of the memory is Block 15 done in the configuration page Areas or settings marked with an asterisk may be configured by the client The memory location described above and marked with an asterisk has been configured by Philips whereby the content of some of the memory areas is free some allocated Block O defines the serial number the configuration of the memory area and the keys Block 1 the logdata Memory locations marked with secret can only be accessed after a mutual authentication An enciphered data communication is used in that area Memory locations marked with public can be accessed without mutual authentication no en cryption is used HTEV4_1 DOC HS Page 12 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description Transponders delivered with this Demokit are configured as follows Blocks 4 to 7 of the transponder are public and read write The table shows that the logdata can be both written and read keys can only be written That means that keys and logdata can be changed
23. assword which the read write device sends to the transponder and which is checked for identity by the latter ad Key B Logdata O B and Logdata 1 B analogous to Key A The logdata are also predefined by Philips using defined Transport Logdata all logdata show the same bit map They can be read and written Logdata OA and 1A as well as Logdata OB and 1B do not have to show the same values but all Logdata have to be identical on the read write device and on the transponder Page 37 of 43 HTEV4_1 DOC HS hitag proximity Evaluation Description Rev 2 1 January 1999 So it is important that the following values are in accordance with each other i e the respective data on the read write device and on the transponder have to be identical pairs Attention HTEV4_1 DOC HS on the read write on the trans device ponder LOGDATA 0A lt LOGDATA 0A LOGDATA 1A lt LOGDATA 1A KEYB lo KEYB I LOGDATA 0B_ lt LOGDATA 0B LOGDATA IB_ lt LOGDATA 1B Set A P Set B Keys and Logdata only can be changed if the Transport Keys and the Transport Logdata are known Page 38 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 10 1 2 HITAG 2 Transponders 10 1 2 1 Definition of the Keys Keys are cryptographic codes which determine data encryption during data transfer between read write device and transponder The key is predefined by Philips by means of a defined transport key
24. ax 2711 470 5494 South America Rua do Rocio 220 5th floor Suite 51 04552 903 Sao Paulo SAO PAULO SP Brazil Tel 5511 821 2333 Fax 5511 829 1849 Spain Balmes 22 08007 BARCELONA Tel 343 301 6312 Fax 343 301 4107 Sweden Kottbygatan 7 Akalla S 16485 STOCKHOLM Tel 468 632 2000 Fax 468 632 2745 Switzerland AllmendstraBe 140 CH 8027 ZURICH Tel 411 488 2686 Fax 411 481 7730 Taiwan Philips Taiwan Ltd 2330F 66 Chung Hsiao West Road Sec 1 P O Box 22978 TAIPEI 100 Tel 8862 382 4443 Fax 8862 382 4444 Thailand Philips Electronics Thailand Ltd 209 2 Sanpavuth Bangna Road Prakanong BANGKOK 10260 Tel 662 745 4090 Fax 662 398 0793 Turkey Talapasa Cad No 5 80640 GULTEPE ISTANBUL Tel 90212 279 2770 Fax 90212 282 6707 Ukraine Philips Ukraine 4 Patrice Lumumba Str Building B Floor 7 252042 KIEV Tel 38044 264 2776 Fax 38044 268 0461 United Kingdom Philips Semiconductors Ltd 276 Bath Road Hayes MIDDLESEX UMS 5BX Tel 44181 730 5000 Fax 44181 754 8421 United States 811 Argues Avenue SUNNYVALE CA94088 3409 Tel 1800 234 7381 Uruguay see South America Vietnam see Singapore Yugoslavia Philips Trg N Pasica 5 v 11000 BEOGRAD Tel 38111 625 344 Fax 38111 635 777 Philips Semiconductors Gratkorn GmbH Mikron Weg 1 A 8101 Gratkorn Austria Fax 43 3124 299 270 For all other countries apply to Philips Semiconductors Marketing amp
25. conductors Piazza IV Novembre 3 20124 MILANO Tel 392 6752 2531 Fax 392 6752 2557 Japan Philips Bldg 13 37 Kohnan 2 chome Minato ku TOKYO 108 Tel 813 3740 5130 Fax 813 3740 5077 Korea Philips House 260 199 Itaewon dong Yonsan ku SEOUL Tel 822 709 1412 Fax 822 709 1415 Malaysia No 76 Jalan Universiti 46200 PETALING JAYA Selangor Tel 60 3750 5214 Fax 603 757 4880 Mexico 5900 Gateway East Suite 200 EL PASO Texas 79905 Tel 9 5800 234 7381 Middle East see Italy Published by Netherlands Postbus 90050 5600 PB EINDHOVEN Bldg VB Tel 3140 27 82785 Fax 3140 27 88399 New Zealand 2 Wagener Place C P O Box 1041 AUCKLAND Tel 649 849 4160 Fax 649 849 7811 Norway Box 1 Manglerud 0612 OSLO Tel 4722 74 8000 Fax 4722 74 8341 Philippines Philips Semiconductors Philippines Inc 106 Valero St Salcedo Village P O Box 2108 MCC MAKATI Metro MANILA Tel 632 816 6380 Fax 632 817 3474 Poland UI Lukiska 10 PL 04 123 WARSZWA Tel 4822 612 2831 Fax 4822 612 2327 Portugal see Spain Romania see Italy Russia Philips Russia Ul Usatcheva 35A 119048 MOSCOW Tel 7095 247 9145 Fax 7095 247 9144 Singapore Lorong 1 Toa Payoh SINGAPORE 1231 Tel 65350 2538 Fax 65251 6500 Slovakia see Austria Slovenia see Italy South Africa S A Philips Pty Ltd 195 215 Main Road Martindale 2092 JOHANNESBURG P O Box 7430 Johannesburg 2000 Tel 2711 470 5911 F
26. e device If you set the state of CheckPasswordTag to ON or Configuration to LOCKED you cannot reset these settings HTEV4_1 DOC HS Page 34 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 9 3 2 Transponder HT2 Tag Configuration Current Config New Config i arm mm Ml M a td Page 1 2 ReadWrite ReadWrite i Page 3 ReadWrite ReadWrite H Page 4 5 ReadWrite ReadWrite i Page 6 7 ReadWrite ReadWrite H Version Crypto Crypto CAUTION Once LOCKED it is unchangeable SELECT CrUp CrDn CHANGE Crleft CrRight lt ESC gt to quit lt CTRL gt lt Enter gt to accept Page 1 2 Can be set to ReadWrite or NoAccess Locked Default ReadWrite Page 3 Can be set to ReadWrite or ReadOnly Locked Default ReadWrite Page 4 5 Can be set to ReadWrite or ReadOnly Default ReadWrite Page 6 7 Can be set to ReadWrite or ReadOnly Default ReadWrite Version Changes between Password Crypto Public A and Public B mode Default Password If you set the state of Pages 1 2 to NoAccess LOCKED or the state of Page 3 to ReadOnly LOCKED you cannot reset these settings back to ReadWrite Page 3 locks the complete configuration of the transponder Once set to Re adOnly LOCKED you cannot reset this setting back to ReadWrite Page 35 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 10 Personalizing your Read Write Device and the Transponders Note It is
27. e the password of the read write device Submenu used to change the password status of the read write device for write access to the transponder The current status cannot be read from the read write device Reads the version and programming date of the firmware and the serial number of the Core Module This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Resets the read write device and switches off high frequency for 100 ms The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices Attention PIT transponders can only be accessed using the proximity read write device Page 27 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 7 MIRO Transponders 7 1 Memory size In the 64 bit memory the unique 40 bit serial numer of the transponder is stored as well as 24 bits header and parity bits The data are read only and cannot be changed 7 2 Operating MIRO Transponders Operating a MIRO transponder the screen will be displayed as follows __ Transponder Status Function A E E Transponder MIRO RW Device Proximity Cyclic 1ms 7 3 Transpond
28. er Transponder _ esti Read Miro Reads the serial number of a MIRO read only transponder HTEV4_1 DOC HS Page 28 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 7 4 R W Device pn paa Set BCD gt Reset System Get Version Reads the version and programming date of the firmware and the serial number of the Core Module Fast Fourier This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment Set BCD This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Reset System Resets the read write device and switches off high frequency for 100 ms The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices Page 29 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 8 Error Messages Error messages and the message function OK are displayed in the status line e Function OK System is working correctly e Serial error Error on the serial interface e NOTAG There is no transponder in the communication field of the antenna or a not initialized HT2 Public A or B is in the communication field of the antenna or a HT2 Crypto was accessed using the wrong key e TIMEOUT error There i
29. her Plug the power supply cable into a power supply unit 9 16 VDC 1 3 3 Connecting an external Antenna User derfined antennas may be connected at the external antenna connector Concering the design of proximity antennas please please refer to the document HT RM400 HITAG Core Module resp HT RM440 HITAG Proximity Reader Module Page 7 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 1 4 Software Startup 1 4 1 System Requirements In order to use the RFIDDEMO Software the following system requirements must be satisfied e IBM PC or compatible minimum 286 processor e 640 kbyte RAM e serial interface 1 4 2 Installation 1 Create a new directory on your PC for the Demo Files e g CARFIDDEMO 2 Copy all the files from the floppy disc into the directory you created in step 1 1 4 3 Starting the Demo Program Start your Demo Program by typing the command RFIDDEMO EXE We strongly recommend to carefully read this description especially chapters 9 and 10 before starting the Demo System Inconsiderate use of individual menu options may result in unwanted irreversible changes in access rights HTEV4_1 DOC HS Page 8 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 2 General Definitions for the Demo Software e lt ESC gt quits a submenu e Scrolling the menubar is done with the cursor keys and J e lt ALT F4 gt always quits the program e lt ENTER gt
30. his does not mean that you also have to change Password RWD and the other way round HTEV4_1 DOC HS Page 42 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 10 3 2 4 Incorrect Procedures Changing Passwords e You change the Password RWD on the read write device and then try to access the trans ponder This is not possible the status line displays the message incorrect Password RWD because there is no identity between the Password RWD on the transponder and on the read write device e You change the Password TAG on the read write device and then try to access the transponder This is not possible the status line displays the message incorrect Password TAG because there is no identity between the Password TAG on the transponder and on the read write de vice This only applies if you enabled checking of the Password TAG see chapter 9 3 1 in the read write device The same scenario applies if you change the passwords on the transponders but leave the pass words on the read write device unchanged transport passwords 11 Ordering Information HT EV400 HITAG Proximity Evaluation Kit 9352 341 40122 Page 43 of 43 HTEV4_1 DOC HS Philips Semiconductors a worldwide company Argentina see South America Australia 34 Waterloo Road NORTHRYDE NSW 2113 Tel 612 9805 4455 Fax 612 9805 4466 Austria ComputerstraBe 6 A 1101 WIEN P O Box 213 Tel 431 60 101 Fax 431 30 101 1210 Belarus Hotel Minsk
31. ield of the antenna Read Page On entering a page number 0 7 one page of the transponder is read and displayed on the screen Write Page On entering a page number 4 7 and 4 bytes of numbers one page is writ ten to the transponder Personalization Gives access to the two passwords stored in the transponder TAG see also chapter 10 e Password RWD is sent from read write device to transponder and checked for identity by the latter e Password TAG is sent from transponder to read write device and can be verified by the latter depending on the configuration of the read write device Configuration Submenu used to change the configuration of the transponder see also chapter 9 Attention You can only write cyclically on a TAG that is in the field when you initiate the write command To write to another TAG please repeat the write command Page 19 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 5 3 2 R W Device ETETTITIITT KeyInit Password Get Version Fast Fourier Set BCD Reset System Personalization Submenu to change keys and passwords of the read write device see also chapter 10 Configuration Submenu used to change the configuration of the read write device see also chapter 9 KeyInit Password Use this option to change the password for the configuration and personal ization see chapter 9 and 10 Get Version Reads the version and programming date of the firmware and
32. nsponder is described in exact order HTEV4_1 DOC HS Page 36 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 10 1 General Definitions In order to be able to read data from the secret area of a transponder you have to carry out a pro cedure called authentication To do this you need special data keys After transmitting the according command the authentication is automatically carried out by the HITAG Read Write Device 10 1 1 HITAG 1 Transponders 10 1 1 1 Definition of the Keys Keys are cryptographic codes which determine data encryption during data transfer between read write device and transponder Two keys Key A and Key B which you can use independently of each other have been installed for security and flexibility reasons The identity of either Key A or Key B on the read write device and on the transponder is sufficient see table under 10 1 1 2 The keys are predefined by Philips by means of defined Transport Keys both keys show the same bit map They can be written only 10 1 1 2 Definition of the Logdata Logdata represent passwords needed to gain access to secret areas on the transponder A pair of logdata is included with every cryptographic key Key A and Key B This logdata pair has to be identical both on the transponder and the read write device ad Key A Logdata 0A Password which the transponder sends to the read write device and which is verified by the latter Logdata 1 A P
33. of the next command Sound Select Enables a signal tone after successful read commands HTEV4_1 DOC HS Page 10 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 3 2 Transponder Type Auto Hitagl Hitag2 Miro Pit 3 3 Help System Overview About 3 4 Quit f uto Hitag1 Pit HT2 Public A HT2 Public B A Initiates automatically transponder recognition e g HT2 Crypto and pressing ENTER switches to the correct submenu Please note HT2 Public A transponders may also be recognized as MIRO transponders To access HT2 Public A transponders use the proper sub menu HT2 Public A Provides access to HITAG 1 transponders Chooses between the four modes of this transponder Password Crypto Public A and Public B Provides access to MIRO read only transponders Provides access to PCF793x transponders Gives a short overview on the 125kHz transponder system Gives short information about the software AAA Use this command to exit the Demonstration Program Page 11 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 4 HITAG 1 Transponders 4 1 Memory Partitioning The 2 KBit EEPROM memory on the transponder is divided into 16 blocks Every block consists of 4 pages with 4 bytes at 8 bits each Addressing is done page by page and access is gained either page by page or block by block en tering the respective start address In c
34. ponders Using HITAG 1 transponders you are able to configure the following items 9 2 1 Read Write Device Key A y Key B Logdata 0A A TAG Lets you choose among the 3 security levels as described before Logdata 1A A RWD r ReadWrite WriteOnly and NoAccess Logdata 0B B TAG see chapter 9 1 resp 10 1 1 Logdata 1B B RWD KeyInit Password HTEV4_1 DOC HS Page 32 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 9 2 2 Transponder HT1 Tag Configuration Current Config Hew Config j 4 4 Block 2 ReadWrite ReadWrite H Block 3 ReadWrite ReadWrite H Block 4 ReadWrite ReadWrite H Block 5 ReadWrite ReadWrite L Block 6 ReadWrite ReadWrite i Block ReadWrite ReadWrite I Keys A B Writelnly Writelnly H Logdata ReadWrite ReadWrite i Block 4 7 Public Public L Configuration ReadWrite ReadWrite i SELECT CrUp CrDn CHANGE CrLeft CrRight _ lt ESC gt to quit lt CTRL gt lt Enter gt to accept Block 2 Can be set to Read Write or ReadOnly Default Read Write Block 3 Can be set to Read Write or ReadOnly Default ReadWrite Block 4 Can be set to Read Write or ReadOnly Default Read Write Block 5 Can be set to Read Write or ReadOnly Default ReadWrite Block 6 Can be set to ReadWrite or ReadOnly Default Read Write Block 7 Can be set to Read Write or ReadOnly Default
35. ption Rev 2 1 January 1999 5 5 2 R W Device Set BCD gt Reset System Get Version Reads the version and programming date of the firmware and the serial number of the Core Module Fast Fourier This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment Set BCD This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Reset System Resets the read write device and switches off high frequency for 100 ms The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices HTEV4_1 DOC HS Page 24 of 43 January 1999 Rev 2 1 hitag Proximity Evaluation Description 6 Transponders PCF793x PIT 6 1 Memory Partitioning The EEPROM provides a memory capacity of 128 bytes It is organized in 8 blocks each block consisting of 16 bytes This capacity is split into 6 blocks 96 bytes for reading writing of user data and into 2 blocks 32 bytes for the control of the memory access The user memory partitioning is shown below Byte Byte 32 47 Block 2 256 383 Byte Byte 48 63 Block 3 384 511 Byte Byte 64 79 Block 4 512 639 Byte Byte 80 95 Block 5 640 767 Byte Byte 96 111 Block 6 76
36. pto Mode Operating a HITAG 2 transponder in crypto mode the screen will be displayed as follows _ Transponder S unction a x Transponder HT2 Crypto RW Device Proximity Cyclic 1ms 5 2 1 Transponder Write Page Personalization gt Configuration Get ID Reads the ID number of the transponder located in the field of the antenna Read Page On entering a page number 0 7 one page of the transponder is read and displayed on the screen Write Page On entering a page number 4 7 and 4 bytes of numbers one page is writ ten to the transponder Personalization Gives access to the key and password stored on the transponder TAG e Key is used to encrypt the data sent to and received from the trans ponder e Password TAG is sent from transponder to read write device and can be verified by the latter depending on the configuration of the read write device see also chapter 10 Configuration Submenu used to change the configuration of the transponder see also chapter 9 Attention You can only write cyclically on a TAG that is in the field when you initiate the write command To write to another TAG please repeat the write command Page 17 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 5 2 2 R W Device Personalization Configuration KeyInit Password Get Version Fast Fourier Set BCD Reset System oercrece KeyInit Password Get Version Fast Fourier
37. r Please note If you set a HITAG 2 transponder to Public Mode A an Init procedure has to be carried out before reading the HT2 Public A transponder Otherwise you might get a NOTAG message Page 21 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Description Rev 2 1 January 1999 5 4 2 R W Device Set BCD gt Reset System Get Version Reads the version and programming date of the firmware and the serial number of the Core Module Fast Fourier This command starts the Fast Fourier Transformation FFT of the Digital Signal Processor This command is to be used as often as required depend ing on the noisefloor of the environment Set BCD This command adjusts the timing of the read write device to the antenna The command has to be operated once when an antenna is connected for the first time or changed Reset System Resets the read write device and switches off high frequency for 100 ms The commands Fast Fourier and Set BCD are only enabled when using HITAG Long Range Read Write Devices HTEV4_1 DOC HS Page 22 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 5 5 Public Mode B Operating a HITAG 2 transponder in Public Mode B the screen will be displayed as follows __ Transponder Status Function OR Transponder HT2 Public B 5 5 1 Transponder Read Reads the data of a HT2 Public B transponder Page 23 of 43 HTEV4_1 DOC HS hitag Proximity Evaluation Descri
38. s not enough energy to write to the trans ponder e AUTHENT error An error occured during the authentication process e QUIT error The acknowledgement was not received correctly e CRYPTO not initialized A cryptographic command was transmitted with out authentication e HT2 authentication error No conformity between password RWD stored in the read write device and password RWD stored on the transponder or a HT2 Crypto Tag was accessed using the Pass word mode e incorrect password TAG No conformity between password TAG stored in the read write device and password TAG stored on the transponder e EEPROM error Read write device EEPROM check sum error e EEPROM wrong old data On comparison old and new data for keys and passwords prove inconsistent e EEPROM write protected Parts of the EEPROM on the read write device were locked using the configuration menu and a write access to this part was tried e EEPROM tread protected Parts of the EEPROM on the read write device were locked using the configuration menu and a read access to this part was tried HTEV4_1 DOC HS Page 30 of 43 January 1999 Rev 2 1 hitag proximity Evaluation Description 9 Configuration of hitag Transponders 9 1 Security Mechanism All the data necessary for the authentication of the transponder and the read write device as well as data needed for encryption can be protected from being read and from being written on the read write device using speci
39. ximity Evaluation Kit Description TABLE OF CONTENTS 1 General RemarKs siii iiaiai nisada idsid niidina 6 O 6 ERES Pe CCAA A A SN N aa EEEE A E RAAR 6 1 3 Hardware StartUp dai 7 A A A E TE E A 7 1 3 2 Connecting the Read Write Device to your PC and to the Power Supply 7 1 3 3 Connecting an external Antenna do 7 l4 Software Startup A e a E ae aaia 8 14 1 System REQUIEM dc RIS 8 1 4 2 Installation snotra nannan ua nnan a a aie 8 1 4 3 Starting the Demo Prog ram is SSS 8 2 General Definitions for the Demo Software ooonnocconnncnccnnnnccccnnnnnannccnnnnncnnnnnnanannnnnnnns 9 3 MAIN MON iii 10 AL OPUS rr E ana resina 10 SI Transponder Type sei Je vec coisa Go aarti cious eae waa lo A EE ee vats E ao ie aoe OO ERS 11 33r Helpis e e do 11 JA QUE ee A A ite AE A aie aes a oa 11 4 HITAG 1 Transponders cuna a 12 4 Memory Parti naoi n naa A AS 12 4 2 Operating HITAG 1 Trans ponderaci n soecaginnsdeegantonantes 14 LS TEA PO A idas 14 44 RIW DEVICE A A A A e ASS 15 5 HITAG 2 TransponderS siii 16 5 1 M mo rty Partitioning AA A en a E E cartel AEE 16 O NES O 17 5 2 1 Transponder cuenta aida sacadas 17 A A O E ean Sages eee 18 5 3 PassWord Mod A ii las 19 Dl Era ponder taco iia 19 5 3 2 Al O In eevee eninge 20 JA PUBLIO MOI A SS 21 A A a ea doge ia idd eas At cee as iach neta sheds ah Lia Aa 21 DPE DS IR DIENA TE e E O E PO 22 5 5 Publi Mode Busspipiin ia ld 23 D202 bad PalSPONUGE A O

Download Pdf Manuals

image

Related Search

Related Contents

Passeport Mobilité  プレクストークリンクポケット 取扱説明書  Equip eSATA / USB 2.0 Express Card  Service Manual  ce 705 proceso de lodos activados  Power Pack 1 & Solar Panel 1 Manual  ブルドーザ  Nobo Internal Glazed Case Magnetic 27xA4  - Audiomonde  Fr-bridomat-00707026  

Copyright © All rights reserved.
DMCA: DMCA_mwitty#outlook.com.