Home

Long-range ISO/IEC15693 Protocol HF Tag Label

1. Tags of type B Len Com adr Cmd State Data CRC 16 OxXX 2 0 08 UID LSB MSB 0x05 OxXX 2 0 09 LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB addressed mode Cx04 CxXX 0 CRC 16 CxXX 2 Cx08 UIL CRC 16 lt gt Wait gt gt oe Lock DSFID Wait G gt Cx05 CxXX CxC E selected mode error_code 16 2 05 CxXX 2 06 CRC 1 Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 13 GET SYSTEM INFORMATION The host sends this command to let the reader get the detailed information of the appointed tag s The information include 1 byte information flag 8 byte UID 1 byte DSFID 1 byte AFI 2 bytes Memorey size and 1 byte IC reference The every bit meaning of the information flag is as follows 26 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A BIT NAME STATUS COMMENT Bitl DSFID 0 DSFID nonexistence or nonsupport 1 DSFID existence or support Bit2 AFI 0 AFI nonexistence or nonsupport 1 AFI existence or support Bit3 Memory_size 0 Memory_size nonexistence or nonsupport 1 Memory_size existence or support Bit4 IC_Reference 0 IC_Reference nonexistence or nonsupport 1
2. Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A addressed mode 0 16 OxXX 0x21 OxOc 7 0x04 OxXX CRC 16 ff data bytes CRC 16 lt tr or _ whether Wait operation Write Single Block Wait succeed 7 c 7 7 iler nado GH OxXX 0x21 OxOd block_number data bytes 16 Remark When tag in the effective field please refer to former chapter for the content of the response data block 7 1 5 LOCK BLOCK The host sends this command to let the reader lock the appointed block When a block has been locked its content should not be able to change any more Lock block is a write alike command and also has two styles according the tag s A or B type Please refer to 7 1 4 and appendix 1 Tags of type A Len Com_adr Cmd State Data CRC 16 0x0e OxXX 0x22 0x00 UID block number LSB MSB 0x06 OxXX 0x22 0x01 block number LSB MSB Len Com adr Status Data CRC 16 0x04 0 00 LSB MSB addressed mode Cx04 CxXX CxOC 16 Cx22 A UIL block number 16 lt yz Wait doo ec Sperati ge oe Loc
3. Len Com_adr Cmd State Data CRC 16 0 04 OxXX 0x25 0x00 UID LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 7 addressed mode 7 Cx04 CXXX 00 CRC 1 UIE CRC 1 lt 6 Wait c Caan 4 Select Wait Z C05 CxXX CxCf error code CRC 1 Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 8 RESET TO READY The host sends this command to let the reader turn the appointed tag from Quiet state into Ready state Len Com adr Cmd State Data CRC 16 0 0 0 26 0 00 UID LSB MSB 0x05 0 26 0 01 LSB MSB Len Com_adr Status Data CRC 16 0x04 0 00 LSB MSB This command with state 0x01 will turn all the tags in field from Quiet state into Ready state 20 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A addressed mode y Cx04 Cx00 16 CxCd CXXX 520 0300 UID CRC 1 lt 6 Wait Ke Orio Reset to Ready lt c Z 7 7 7 05 CxXX CxCf error_code CRC 1 05 CxXX C326 01 CRC 1 Remark When tag in the effective field please refer to former cha
4. Close and Open RF automatically before command execution to wake up all the tags in inductive field So all tags will 0x06 respond and the reader will return all UIDs that have Inventory been decoded before InventoryScanTime overflows The scan 2 reader will turn the tags whose UIDs have been decoded without into Quiet state AFI Consecutive Style All Ready state tags will respond The M reader will return all UIDs that have been decoded before X InventoryScanTime overflows The reader will turn the tags whose UIDs have been decoded into Quiet state Renewed Style The reader will run Close RF and Open RF automatically before command execution to wake up all the tags in inductive field So all tags with the 0x07 _AFI appointed AFI will respond and the reader will return all UIDs that have been decoded before InventoryScanTime overflows The reader will turn the tags whose UIDs have scan with been decoded into Quiet state AFI Consecutive Style All Ready state tags with the appointed AFI will respond The reader will return all 0x03 _AFI UIDs that have been decoded before InventoryScanTime overflows The reader will turn the tags whose UIDs have been decoded into Quiet state 7 1 1 1 INVENTORY WITHOUT AFI Len Com_adr Cmd State Data CRC 16 0x05 OxXX 0x01 0x00 LSB MSB Len Com adr Status Data CRC 16 OxXX 0x00 DSF
5. Ol 14 TAA WRITE SINGLE BLOCK dave da ut eto d e d abe 14 RIAL BLOCK 55 t 14 1252 BY TEBEOCKR 25 rene a tope 15 RUB LOCK mem Rr RR 17 T LORBADMUETIPEE BEOGK had etis dde ia 18 TAA 4 OF init etre tete a vives E 18 TAO BYTE OE BED CK eet ie eee ei eh ubi m ds 19 TET SELECT BEI M 19 LAS RESET TO READY iei te Hoe 20 TAL WRITE ABD FSI NES OON Pol AT WRITE DIS PID sag iet hee a eoo sro Ree Ep e E REINES 495x115 iam OBLSYSPLENLINFORNISCUION ea etas 7 2 READER DEFINED COMMANDS tne te 1 2 1 GET READER ION 2 2C DOSE REP sag elegi tsi te aic eb 12 9 OPEN iU RZAWRITE Com adi itso so isn e 1 2 3 WRITE InyentoryScan AVG s eet a A San 125 SET GENERAL OUTPUT ete eae es TuS OGETGENERALINPU onenean a PDB SET RELAY d Appendix 1 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 1 COMMUNICATION INTERFACE SPECIFICATION RR9001 RR9201 communicates with host MCU MPU Controller using serial communicati
6. selected mode error code CRC 16 0 CxXX 29 Cx0S DSFIL CRC 16 Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 12 LOCK DSFID The host sends this command to let the reader lock the tag s DSFID value When a tag s DSFID has been locked its value should not be able to change any more Lock DSFID is a write alike command and also has two styles according the tag s A or B type Please refer to 7 1 4 and appendix 1 Tags of type A Len Com adr Cmd State Data CRC 16 OxXX 2 0 00 UID LSB MSB 0x05 OxXX Ox2A 0x01 LSB MSB Len Com adr Status Data CRC 16 0x04 0 00 LSB MSB 25 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A addressed mode 2 0x04 OxXX 0x00 CRC 1 J 5 0x0d 0x2a 0x00 x y UID CRC 1 lt o P Operation gt Wait succeed 249 Lock DSFID Wait d e 0 05 OxXX OxOf 71 selected mode va error_code 16 0 05 2 0 01 P CRC 1 Remark When no tag in the effective field please refer to former chapter for the content of the response data block
7. 0x8408 Start Value PRESET VALUE Oxffff C Example int Lj unsigned int current crc value PRESET VALUE Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 Users Manual V3 80A for i 0 i lt len it len number of protocol bytes without CRC current crc value current crc value unsigned for j 0 j lt 8 j if current crc value amp 0x0001 current crc value current crc value 1 POLYNOMIAL else current_crc_value current_crc_value gt gt 1 int pData i pData i unsigned char current_crc_value amp 0x00ff pData i unsigned char current_cre_value gt gt 8 amp 0x00ff 4 OPERATION COMMAND CMD SUMMARY RR9001 RR9201 supports 21 commands Multi mode operation could be realized by defining operation control symbol state when host transmits a command data block The detailed description of every command can be found in the latter chapters 13 out of 21 commands are ISO IEC 15693 protocol command shown in the following table The high 4 bits of the operation control symbol State should be set to 0 when host transmits the commands COMMAND PARAMETER COMMENT Send Receive if NAME VALUE Addressed Selected operation mode mode successes DSFID Check if any tag exist Inventory 0x01 B EE _ UID in the effective field Turn appointed tag into let stat d Stay Quiet 0x02 UID ano respon
8. CRC 16 0x06 OxXX 0x03 Oxf0 Com adr LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 0x04 0 0x00 f 0x06 0 0x03 Oxf0 CRC 16 _Com_adr CRC 1 Wait Write Com_adr Wait 7 2 5 WRITE InventoryScanTime The host sends this command to change the value of InventoryScanTime of the reader The value is stored in the reader s inner EEPROM and is nonvolatile after reader powered off The default value is Ox1E corresponding to 30 100ms 3s The value range is 0x03 0xFF corresponding to 3 100ms 255 100ms When the host tries to set value 0x00 0x02 to InventoryScanTime the reader will set it to 0x03 automatically In various environments the actual inventory scan time may be 0 75ms longer than the InventoryScanTime defined Len Com_adr Cmd State Data CRC 16 0x06 0 04 Oxf0 _InventoryScanTime LSB MSB Len Com_adr Status Data CRC 16 0x04 0 00 LSB MSB 0x06 OxXX 0x04 InventoryScanTime 0x04 OxXX 0x00 SENS f CRC 16 Wait Write InventoryScanTimceeeeeeccccce Wait 30 Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 2 6 SET GENERAL OUTPUT The host sends this command to set the output level TTL level of the two general output ports of the reader T
9. IC_Reference existence or support Bit5 RFU m Set to 0 Bit6 RFU Set to 0 Bit7 RFU Set to 0 Bit8 RFU Set to 0 Len Com_adr State Data CRC 16 OxXX 0 2 0 00 00 LSB MSB 0x05 OxXX 0x2B 0x01 LSB MSB Len adr Status Data CRC 16 0x12 OxXX 0x00 Information flag UID DSFID AFI LSB MSB Memory size 2bytes IC reference Cx12 CxXX CxOC m Information flag UID DSFIL AFI Memory_size Zbytes addressed mode CxCd CxXX CxZb CxOC IC reference CRC 16 lt 7 lt 27 Wait Operation dees Get System Information Wait Eg p c CxO5 CxCf P P selected mode error code CRC 16 CxOE CxXX CxZb 01 CRC 16 Remark When no tag in the effective field please refer to former chapter for the content of the response data block Remark The above chart only describe the situation when Information flag 0 If Information flag is other value the length and contents of the response data block will alter according to Information flag s definition 7 2 READER DEFINED COMMANDS 8 reader defined commands are supported to facilitate the using of the RR9001 RR9201 reader When the host sends these commands the high 4 bits of the operation control state byte in command data block should be 27 Long Range ISO IEC 15
10. status block data 8bytes OxXX OxXX 0x00 LSB MSB Repeated times equals _number of blocks 7 addressed mode CxXX CxXX CxCf CxXX 22 Cx04 vA block security status lbyte UIL first block number data amp by tes CRC 1 A number_of_block 16 PA lt o Wait 4224 Read multiple Block eeees Wait c Z vA CxXX lected mode 7 A 7 error code CRC 16 CxO 7 Cx23 first block number number_of_block 16 Remark When no tag in the effective field please refer to former chapter for content of the response data block 19 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 1 7 SELECT The host sends this command to let the reader turn the appointed tag into Selected state All selected mode commands are aiming to the tag in Selected state There is only one tag in Selected state at a time in the effective field When turning a new tag into Selected state the former Selected state tag will turn into Ready state User can also use this command to turn a tag from Quiet state into Selected state This command can only run in Addressed mode and the command data block must contain UID of the appointed tag
11. to appendix 1 7 1 3 1 4 BYTE BLOCK Len Com_adr Cmd State Data CRC 16 0 0 OxXX 0x20 0x00 UID block_number LSB MSB 0x06 OxXX 0x20 0x01 block number LSB MSB Len Com adr Status Data CRC 16 0x09 OxXX 0x00 block security status LSB MSB block data 4bytes 0 OxXX 0x00 block security status lbyte data 4bytes lt zw CRC 16 addressed mode 0 OxXX 0x20 0x00 UID block number CRC 16 Wait eee succeed _ St Z Pp Operation ee Read Single Block Wait Ox0E OxXX OxOf error code CRC 16 selected mode 0x06 OxXX 0x20 0x01 block number CRC 16 Remark When no tag in the field please refer to former chapter for the content of the response data block 13 Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 1 3 2 8 BYTE BLOCK Len Com_adr Cmd State Data CRC 16 0 0 OxXX 0x20 0x04 UID block_number LSB MSB 0x06 OxXX 0x20 0x05 block number LSB MSB Len Com adr Status Data CRC 16 OxXX 0x00 block security status LSB MSB block data 8bytes OxXX 0x00 7 ri addressed mode block security status lbyte 2 0 OxXX 0x20 0x04 data bytes CRC 16 7 UID block_numbe
12. 16 selected mode 0 0 OxXX 0x27 0x01 l AFI CRC 16 Remark When tag in effective field please refer to former chapter content of the response data block Tags of type B Len Com_adr Cmd State Data CRC 16 OxXX 0x27 0x08 UID AFI LSB MSB 0x06 OxXX 0x27 0x09 AFI LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 7 addressed mode Cx04 CxXX 16 UIL AFI 16 lt gs Koma ERO den c 2 2 Cx05 CxXX CxCf selected mode 7 error 16 Cx06 CxXX Cx27 08 16 Remark When tag in the field please refer to former chapter for the content of response data block 22 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 1 10 LOCK AFI The host sends this command to let the reader lock the tag s AFI value When a tag s AFI has been locked its value should not be able to change any more Lock AFI is a write alike command and also has two styles according the tag s A or B type Please refer to 7 1 4 and appendix 1 Tags of type A Len Com_adr Cmd State Data CRC 16 OxXX 0x28 0x00 UID LSB MSB 0x05 OxXX 0x28 0x01 ES L
13. 16 Wait Operation 7 succeec P SHA CxXX CxCf error code CRC 16 4 lt addressed mode Cx12 CxXX Cx21 CxOC UIL block number data 4bytes CRC 16 Write Single Block Wait lt selected mode CxCa 21 CxOl block_number data Abytes CRC 16 Remark When no tag in the effective field please refer to former chapter for the content of the response data block Tags of type B Len Com adr Cmd State Data CRC 16 0 12 OxXX 0x21 0x08 UID block number data 4bytes LSB MSB 0x0a OxXX 0x21 0x09 block number data 4bytes LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB addressed mode 12 CxXX Cx21 Cx08 Cx04 CxXX CRC 1 block number data A4bytes CRC 1 E Wait Gperation Write Single Block Wait _succee 7 x ES c 2 Cx05 CxXX CxCf error code CRC 1 selected mode CxCa CxXX Cx21 Cx09 block number data A4bytes CRC 1 Remark When no tag in the effective field please refer to former chapter for the content of the response data block 15 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 1 4 2
14. 693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 2 1 GET READER INFORMATION The host sends this command to get the reader s information including reader s address Com adr firmware version reader type reader type 0x45 for RR9001 RR9201 supported protocol tr type and InventoryScanTime value default value is Ox1e for 3s The supported protocol byte is reserved to 0x00 and 0x08 as follows bit 15 14 13 12 11 10 9 8 Function F E bit 7 6 5 4 3 2 1 0 Function x ISO IEC 2 2 15693 State Data CRC 16 0x05 OxXX 0x00 Oxf0 EE LSB MSB Len Com adr Status Data CRC 16 0 0 OxXX 0x00 Version 2bytes RFU 2bytes LSB MSB Reader type Tr type 2bytes InventoryScanTime 0 0 0x00 Version 2bytes Sy RFU 2bytes Reader type 0x05 OXXX _Tr_type 2bytes 0 00 _InventoryScanTime CRC 1 54 CRC 1 Wait lt Get Reader Information 2 2 2 2 Wait 7 2 2 CLOSE RF The host sends this command to turn off the RF output of the reader and close the inductive field When the field is closed the reader would not run the ISO IEC 15693 commands and return a response data block indicating the field closed Len Com_adr Cmd State Data CRC 16 0x05 0 01 Ox
15. 7 6 Bit5 Bit4 Bit2 Bitl 0 Corresponding T Input general input port 7 2 8 SET RELAY The host sends this command to activate or release a relay in the reader The Common NormalOpen and NormalClose contacts of the relay have been routed to the reader s DB9 interface to facilitate using the relay to control other equipments Len Com adr Cmd State Data CRC 16 0x06 OxXX 0x07 Oxf0 _Relay LSB MSB Len Com_adr Status Data CRC 16 0x04 0 00 LSB MSB Data byte _Realay controls the state of the relay as follows Bit7 Bit6 Bit5 Bit4 Bit3 Bit2 Bitl 0 ud Released 1 elay state y Active 0 0x04 OxXX 0x00 x 2 0x06 OxXX 0x07 Oxf0 CRC 16 _Relay CRC 16 Wait Set Relay eoo Pocos Wait 32 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Appendix 1 M BLOCK INFORMATION TYPE anu MANUFACTURER CODE BLOCK BLOCK TYPE TYPE NUMBER SIZE A B 256 4 bytes Infineon 0x05 user available range 0 249 ISO Address mode 64 4 bytes user available range 0 57 STMicroelectroni 16 icroelectronics 0x02 jos J LRI512 user available range 0 15 256 Fujitsu MB89R116 0x08 8 bytes us
16. 8 BYTE BLOCK There are two types of write operation feedback style corresponding to the Option flag bit in ISO IEC defined write command s flag byte When tag supports write operation with Option flag l it is a type tag When tag supports write operation with Option flag 0 it is a type B tag Please refer to appendix 1 Tags of type A Len Com adr Cmd State Data CRC 16 0x16 OxXX 0x21 0x04 UID block number data 8bytes LSB MSB OxXX 0x21 0x05 block number data 8bytes LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB addressed mode 2 16 21 04 Cx04 CxXX CxOC CRC 16 UIL block_number data amp bytes CRC 16 lt P Wait nen 4 Write Single Block Wait t c CxXX CxCf selected mode Sse code CRC 16 CxCe CxXX 2 1 block_number data amp bytes CRC 16 Remark When tag in the effective field please refer to former chapter for the content of the response data block Tags of type B Len Com adr State Data CRC 16 0x16 OxXX 0x21 OxOC UID block number data 8bytes LSB MSB OxXX 0x21 0x0D block number data 8bytes LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB
17. D UID 1 CRC 16 Remark The number of response data blocks containing UID equals the number of tags have been decoded Remark There are three types of response data blocks indicate the end of inventory scan command Scan over 0x04 0xX X OxOE CRC 16 InventoryScanTime overflows and UID has been decoded 0x04 0x X X 0x0 A CRC 16 InventoryScanTime overflows and not all UIDs have been decoded 0x04 0x X X 0x0B CRC 16 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 1 1 4 Inventory scan with AFI Len Com adr Cmd State Data CRC 16 0x06 OxXX 0x01 0x07 renewed style _ LSB MSB 0x06 OxXX 0x01 0x03 consecutive style _ LSB MSB Len Com_adr Status Data CRC 16 OxXX 0x00 DSFID UID 1 LSB MSB OxXX 0x00 DSFID UID 2 LSB MSB OxXX 0x00 tts LSB MSB 0x04 OxXX LSB MSB 0x06 OxXX 0x01 0x07 AFT 16 Inventory 4 Wait 04 OxXX OxOe CRC 1 CRC 1 DSFID UID EL 0x00 Fi n DSFID UID 1 H 1 0x00 CRC 1 Remark The number of response data blocks containing UID equals the number of tags have been decoded Remark There are three types of response data blocks indicate the end of inventory scan command Scan over 0x04 0xXX 0x0E CRC 16 InventoryScanTime ove
18. ID UID LSB MSB Long Range ISO IEC 15693 Protocol Tag Reader RR9001 4 RR9201 User s Manual V3 80A OxXX 0x05 OxXX 0x01 OxOC ja y DSFID UID CRC 16 CRC 16 tr ur Wait foo zu Inventory posos Wait C Z 0 04 0 CRC 16 Remark The tag whose UID have been decoded by readers will be turn into Quiet state Remark If there is at least one Ready state tag in the field and the reader could no decode its UID before InventoryScanTime overflows for example the InventoryScanTime has been set to a too small value the reader will return the response data block 0x04 0xXX 0x0A CRC 16 7 1 1 2 Inventory with AFI Len Com adr State Data CRC 16 0x06 OxXX 0x01 0x01 AFI LSB MSB Len Com adr Status Data CRC 16 OxXX 0x00 DSFID UID LSB MSB x06 X 0x00 Q306 OXXX 0x01 0x01 DSFID UID CRC 16 CRC 16 lt tm on Maa Wait conforming tde Inventory 6 Wait We 2 0x04 0x0e CRC 16 Remark The tag whose UID have been decoded by the readers will be turn into Quiet state Remark If there is at least one Ready state tag in the field and the reader could no decode its UID before InventoryScanTime overflows for example the InventorySc
19. Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A Content 1 COMMUNICATION INTERFACE SPECIFICATION 2 2 0 0000 000000000008 1 2 PROTOCOL DESCRIPTION 45 cocoa Pet e 1 3 DATA BLOCK FORMAT 2 2 B RESPONSE DATA BLOCK 2 4 OPERATION COMMAND CMD SUMMARY 00 000000000 000000 0000000000 8 3 5 LIST OF COMMAND EXECUTION RESULT 5 8 6 6 ERROR CODE DEFININON OE 7 7 DETAILED DESCRIPTION OF OPERATION 2202 d 7 1 ISO IEC 15693 8 210 5 2 000000000000000000000000088 8 all INV EN TORY COMMAND 2 ae Rte a e ER as 8 LJ INVENTOR Y WITHOUT APT tnt 9 Inventory Satho BT ese tl aee pepe ides 10 7 1 1 3 Inventory scan without AFI aci ode eate epe er De ipee acd 11 7 1 1 4 Inventory scan with AFI 12 QUIET MODE 12 713 READ SINGLE BLOCK 5 deque ide RE 13 T Sd d BY Od 13 1113 8 BYTE BLOCK t Soc Sa Datta
20. SB MSB Len Com adr Status Data CRC 16 0x04 0 00 LSB MSB addressed mode 0x04 0x00 CRC 16 UID CRC 16 tr Wait eC Operation de 6 Wait e 0x0 OxXX 0 selected mpde error code CRC 16 0 05 OxXX 0 2 amp 0 01 CRC 16 Remark When no tag in the effective field please refer to former chapter for the content of the response data block Tags of type B Len Com adr Cmd State Data CRC 16 0 0 OxXX 0x28 0x08 UID LSB MSB 0x05 OxXX 0x28 0x09 LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 23 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A J addressed mode Cx04 CxXX Cx0C CRC 1 CxCd CxXX Cx28 Cx08 UIL CRC 1 lt Wait dee Mme Lock APL eeg C Cx05 CxXX CxCf selected mode error 1 05 CxXX 28 Cx09 i A CRC 1 Remark When tag in effective field please refer to former chapter for content of the response data block 7 1 11 WRITE DSFID The host sends this command to let the reader write a new DSFID value to the appoint
21. ach command description for details High 4 bytes control operation style value 0 means ISO IEC 15693 protocol command while value means reader defined command and other values are invalid Data Operation command parameters There is no parameters if the LEN item equals 5 CRC16 CRC 16 checksum 2 bytes with least significant byte first B RESPONSE DATA BLOCK Len Com adr Status Data LSB CRC16 MSB CRC16 Len Response data block 1 byte Value range is 4 28 The number of Len equals the length of Data plus 4 Com adr Reader address 1 byte Value rang is 0 254 Status Result status value Ibyte Refer to following table for details Data Response data There is no this item if Len equals 4 CRC16 CRC 16 checksum 2 bytes with least significant byte first Remark RR9001 RR9201 won t response if any error found in command data block The default value of RR9001 RR9201 address Com adr is 0x00 Users may change it by RR9001 RR9201 reader defined command Write Com adr Cyclic Redundancy Check CRC computation includes all data from Len The CRC generation polynomial is the same as that defined in ISO IEC 15693 protocol without reversing the computation result For example a data block is presented as follows 0x05 OxFF 0 01 0x00 LSB CRC MSB CRC CRC checksum is LSB CRC 0x5D MSB CRC 0xB2 A reference CRC computation program is presented as follow Polynomial POLY NOMIAL
22. anTime has been set to a too small value the reader will return the response data block 0x04 0x X X 0x0A CRC 16 10 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 Users Manual V3 80A When the reader run inventory command in scan mode the reader will try to decode all available tags in field and feedback their UIDs If the InventoryScanTime has been set to a small value and there are many tags in field the reader may not be able to decode all tags before InventoryScanTime overflows Under this circumstance the reader will send back the following response data block after sending UIDs collected Len Com_adr Status Data CRC 16 0x04 OxXX 0x0B LSB MSB Users can send a consecutive style inventory scan command next to let the reader decodes the remaining tags in the field 7 1 1 3 Inventory scan without AFI Len Com_adr Cmd State Data CRC 16 0x05 OxXX 0x01 0x06 renewed style LSB MSB 0x05 0xXX 0x01 0x02 consecutive style m LSB MSB Len Com adr Status Data CRC 16 OxXX 0x00 DSFID UID 1 LSB MSB OxXX 0x00 DSFID UID 2 LSB MSB OxXX 0x00 ttt ees LSB MSB 0x04 OxXX 0x0e LEE LSB MSB 0x05 0 0x01 0x06 CRC 16 Wait 4 Inventory 4 Wait 0x04 CRC 16 TU 7 DSFID UID n CRC 16 7 eee DSFI
23. ed tag Write DSFID is a write alike command and also has two styles according the tag s A or B type Please refer to 7 1 4 and appendix 1 Tags of type A Len Com_adr Cmd State Data CRC 16 0x0e 0 29 0 00 UID DSFID LSB MSB 0x06 OxXX 0x29 0x01 DSFID LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB Cx04 CxXX Cx00 CRC 1C addressed mode CxCe CxXX x29 Cx00 DSFID CRC 1 lt Ss e lt Succeed 4 28 Write DSFID 6 4 2 05 CxXX CxCf error code CRC 1 selected mode 06 CxXX 29 Cx01 7 DSFID CRC 1 Remark When no tag in the field please refer to former chapter for the content of the response data block 24 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Tags of type B Len Com_adr Cmd State Data CRC 16 0x0e OxXX 0x29 0x08 UID DSFID LSB MSB 0x06 OxXX 0x29 0x09 DSFID LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB addressed mode Cx04 CxXX CRC 16 CxXX 29 0 8 UID DSFIL CRC 16 lt 52 Pri Wait lt esd Write DSFID lt Wait cC z Cx0 CxXX CxC
24. efined commands shown in the following table When host send them the high 4 bits of operation control symbol State should be COMMAND PARAMETER COMMENT NAME VALUE SEND RECEIVE Version m Gain reader address reader Reader type Get Reader software version reader type 0x00 Tr type Information pA reader protocol information and Inventory n Inventory Scan Time Scan Time Close inductive field When the field closed the reader will not execute any ISO IEC 15693 Close RF 0x01 ue 23 protocol command the host sends and return corresponding error code Open RF 0x02 Open inductive field Write Com_adr 0x03 _Com_adr 5 Set reader address of the reader Write Inventory InventoryScanT 0x04 Set InventoryScanTime value ScanTime ime Set General 0x05 diat Set Outputl and Output2 state Output TTL level Get General 0x06 _Input Get the state of Input1 TTL level Input Set the state of th 1 in th Set Relay 0x07 _Relay Bio E reader Long Range ISO IEC 15693 Protocol Tag Reader RR9001 4 RR9201 User s Manual V3 80A 5 LIST OF COMMAND EXECUTION RESULT STATUS The high 4 bits and low 4 bits of command execution result status byte have different meaning Low 4 bits indicates command execution result and high 4 bits indicates protocol style High 4 bits are all zero for ISO IEC 15693 protocol The following table sho
25. er available range 0 249 32 Philips I Code SLI 0x04 4 bytes user available range 0 27 T Instrument 64 Meee Id 4 bytes J Tag it HF I user available range 0 63 Tags of type A corresponds to Option_flag 1 in ISO IEC 15693 protocol Tags of type corresponds Option_flag 0 in ISO IEC 15693 protocol As to tags not included in the appendix please refer to their datasheets 33
26. f0 LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 28 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 j 0x04 OxXX 0x00 CRC 16 0x05 OxXX 0x01 0xf0 7 5 CRC 16 Wait Wait 7 2 3 OPEN RF The host sends this command to turn on the RF output of the reader and establish the inductive field The RF is open when the reader is powered on Len Com_adr Cmd State Data CRC 16 0x05 OxXX 0x02 Oxf0 LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 ES LSB MSB 7 0x04 0 0x00 CRC 1 0x05 OXXX 7 002 0xf0 Wait Wait 29 Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 2 4 WRITE Com adr The host sends this command to change the address Com adr of the reader The address data is stored in the reader s inner EEPROM and is nonvolatile after reader powered off The default value of Com adr is 0x00 The range of Com adr is 0x00 OxFE When the host tries to write OxFF to Com adr the reader will set the value to 0x00 automatically Len Com adr Cmd State Data
27. flows Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Return status when the reader finds one or more tag LSM 4 OxXX 0x0C E MSB ISO error response in a way that is not compatible with ISO IEC 15693 protocol definition Return when the reader LSM 4 OxXX 0 0 MSB No tags finds no active tag in the inductive field Return status when an error occurred in command execution Error LSM Operation 5 OxXX 0 0 and further information of the code MSB error error is defined by the Error code in response data block Remark The length Len of response data block when a command finished successfully will vary from command to command Further information could be found in following detailed description of individual command Remark When the reader return status 0x0F the Error_code in response data block indicate further explanation to the error occurred in command execution The definition of Error_code is available in following chapter 6 ERROR_CODE DEFINITION When the reader return status OxOF the Error code in response data block indicate further explanation to the error occurred in command execution The value of Erro_code is predefined by the ISO IEC 15693 protocol as follows CODE COMMENT 0x01 Commands not support For examp
28. g Information Flag UID E Get detailed Get System DSFID Ox2B UID ES information of Information AFI appointed tag Memory _Ic reference Remark AFI the Application Family Identifier Remark DSFID the Data Storage Format IDentifier Remark UID Unique IDentifier every tag holds an unique UID 8 bytes as follows Bit64 bit57 Bit56 bit49 Bit48 bitl OxEO Manufacturer code Unique serial number Remark The tags conforming to ISO IEC protocol stores data in the blocks with 4 or 8 bytes size Remark Access mode which contains tags UID is addressed operation mode Remark Access mode which doesn t contain tags UID is selected operation mode To access tag in this operation mode Select command should be executed first on tag to make it in Selected stated Then all command operation in selected operation mode will be aimed at this tag Remark The following figure shows the state transfer of a tag Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Inductive field Power off Inductive field Inductive field Prey oanonpu 5 Reset to ready Stay quiet Quiet Select Stay quiet PAF spied 1240 129128 Selected 8 out of the 21 commands are reader d
29. he default level of these two general output ports is 0 low level when powered on Len Com_adr Cmd State Data CRC 16 0x06 OxXX 0x05 _Output LSB MSB Len Com_adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB Data byte Output defines the level of the two general output ports as follows Bit7 Bit Bit5 Bit4 Bit2 Bitl 0 Corresponding general output Output2 Outputl port 0x04 OxXX 0x00 Jf 0x06 OxXX 0x05 Oxf0 pA CRC 16 _Output 16 Wait Set General Output Wait 7 2 7 GET GENERAL INPUT The host sends this command to get the level TTL level of the general input port of the reader The input port is internally pulled up to 5V by a 20Kohm resistor Len Com adr Cmd State Data CRC 16 0x05 0 06 Oxf0 aa LSB MSB Len Com_adr Status Data CRC 16 0x05 0 00 _Input LSB MSB 31 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 f y 0x05 0x00 2 0x05 0x06 Oxf0 _Input CRC 16 CRC 16 7 7 Wait Get General Input 6 Wait Data byte Input indicates the level of the general input port as follows Bit
30. ize is 8 bytes 7 1 6 1 4 BYTE OF BLOCK Len Com adr Cmd State Data CRC 16 UID block OxOf OxXX 0x23 0x00 number number LSB MSB blocks first block number 0x07 OxXX 0x23 0x01 LSB MSB _number of blocks Len Com_adr Status Data CRC 16 block security status block data 4bytes OxXX OxXX 0x00 LSB MSB Repeated times equals number of blocks Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A gt addressed mode CxXX CxXX CxCf CxXX Cx22 CxOC 2 vA block security status lbyte UIL first block number data 4bytes CRC 1 number_of_block 16 2 lt o Wait OPIN 4 Read multiple Block c Z CxXX 5 lected ode 7 error code CRC 16 CxO 7 Cx22 01 L first block number P number_of_block 16 p Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 6 2 8 OF BLOCK Len Com adr Cmd State Data CRC 16 UID block OxOf 0 23 0 04 number number LSB MSB blocks first block number 0x07 OxXX 0x23 0x05 p LSB MSB _number of blocks Len Com_adr Status Data CRC 16 block security
31. k Block Wait iS 2 CxCf selected mode error_code 16 CxXX Cx22 3 vA block_number 16 Remark When tag in the effective field please refer to former chapter for content of the response data block 17 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Tags of type B Len Com_adr Cmd State Data CRC 16 0x0e OxXX 0x22 0x08 UID block number LSB MSB 0x06 OxXX 0x22 0x09 block number LSB MSB Len Com adr Status Data CRC 16 0x04 0 00 LSB MSB y 7 addressed mode Wait Lock Block Wait OxXX OxOf 7 selected mode error_code 16 22 2 block number CRC 16 E Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 6 Read Multiple Block The host sends this command to let the reader read out the corresponding tag s several blocks content 4 or 8 bytes per block and their security status bytes The blocks number and the size of a block may differ from tag to tag with different manufacturer Please refer to appendix 1 The reader can read out as many as 28 blocks one time with block size is 4 bytes and as many as 15 blocks with block s
32. le invalid command code 0x02 Commands can not be identified For example invalid command format 0x03 Operation not supported OxOf Unknown error 0x10 Appointed block is not available or don t exist 0 11 Appointed block has been locked and can t be locked again 0x12 Appointed block is locked and can t change its content 0x13 Appointed block does not operate normally 0x14 Appointed block can t be locked normally 0xA0 0xDF User defined error code Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A 7 DETAILED DESCRIPTION OF OPERATION COMMAND RR9001 RR9201 supports 21 commands Every command may run in multiple modes Detailed description of RR9001 RR9201 supported commands is presented as follow 7 1 ISO IEC 15693 PROTOCOL COMMAND RR9001 RR9201 supports 13 ISO IEC 15693 protocol commands When host sends these commands high 4 bits of operation control style State should be set to all 05 ISO IEC 15693 protocol commands could only be available when the inductive field is on The inductive field could be turned on by reader defined command Open RF The default state of inductive field is on when RR9001 RR9201 is powered on 7 1 1 INVENTORY The function of inventory command is to check the existence of any ISO IEC 15693 compatible tags in inductive field and get the UIDs of the tags Before running the inventory command users can set InventoryScanTime according t
33. o their requirement The default value of InventoryScanTime is 3s Its value can be changed by reader defined command Write InventoryScanTime The range of InventoryScanTime is 3 100ms 255 100ms In most cases Value 3s is a good choice in most circumstances User can appropriately set the time to meet their specific requirements Two points should be taken into consideration One is the value could be set a smaller value to speed up the response of inventory command the other one is the value should not be set too small to process all the tags in inductive field efficiently especially when there are a lot of tags at the same time If the InventoryScanTime value is set a too small value to get one tag s UID in the set time limit the reader will return a response data block as follow Len Com_adr Status Data CRC 16 0x04 OxXX m LSB MSB Six operation modes are available for Inventory command MODE STATE DATA COMMENT Inventory Ready state tags will respond Only one tag s UID without 0x00 will be returned and that tag will be turned into Quiet AFI state Ready state tags with the appointed AFI will respond Inventory MEAT 0x01 Only one tag s UID will be returned and that tag will be turned into Quiet state Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Renewed Style The reader will run
34. ommand symbol operation control symbol command operand and CRC 16 checksum RR9001 RR9201 completes command execution in 15 not including host sending data time except inventory command after receiving host command and returns the results During the period RR9001 RR9201 doesn t process any host data The feedback of command execution results is as follows READER DIRECTION HOST COMMENT Response data The interval between two consecutive bytes in block the response data block should be less than 15ms The response data block includes address command execution result status and response data After the feedback a whole communication process finishes 1 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 Users Manual V3 80A 3 DATA BLOCK FORMAT A COMMAND DATA BLOCK Len Com_adr Cmd State Data LSB CRCI6 MSB CRC16 Len Command data block length 1 byte not including itself Value range is 5 25 The number of Len equals the length of Data plus 5 Com_adr Reader address 1 byte Value range is 0 254 Only will the reader conforming to the address response the command data block Value 255 is broadcasting address All the readers will response to the command data block with a broadcasting address Cmd Operation command symbol 1 byte It defines 21 commands State Operation control symbol 1 byte Low 4 bytes control operation mode refer to e
35. on interface RS232 or RS485 and complete corresponding operation according to the host command The communication parameter is 19200bps 1 start bit 8 data bits 1 stop bit without parity check bit In the process of serial communication the least significant bit of one byte is transmitted first and the least significant byte of command data sequence is transmitted first 2 PROTOCOL DESCRIPTION A communication procedure is sponsored by the host sending commands and data to RR9001 RR9201 and RR9001 RR9201 returns the result status and data to host after command execution The RR9001 RR9201 with RS232 interface will send 4 bytes data once to check whether the RXD and TXD pin2 amp 3 in DB9 are connected when powered on If RXD and TXD are connected RR9001 RR9201 will turn into demo mode The function is void in the RR9001 RR9201 with RS485 interface The following table shows the process of the host computer command HOST DIRECTION RR9001 RR9201 COMMENT Command The interval between two consecutive Data Block bytes in the command data block should be less than 1515 During command data block sending synchronization will lost if the host receives any data from RR9001 RR9201 and the host should stop command sending and restart the communication after 15ms The command data block the post sending to RR9001 RR9201 should conform to the format of the protocol The block includes address operation c
36. pter content of the response data block 7 1 9 WRITE AFI The host sends this command to let the reader write a new AFI value to the appointed tag MSB of AFI LSB of AFI SIGNIFICATION 0 0 Entire types and subtypes X 0 Entire subtypes of X type X Y Y subtype of X type 0 Y Entire Y subtypes 1 0 Transportation 2 0 Y Finance 3 0 Identity authentication 4 0 Y Communication 5 0 Y Medicine 6 0 Y Multimedia 7 0 Y Gambling 8 0 Data storage 9 0 Y Item management A 0 Express package B 0 Y Post office 0 Airmail package D 0 0 0 Both X and Y represents 1 F Write AFI is a write alike command and also has two styles according the tag s A or B type Please refer to 7 1 4 and appendix 1 21 Long Range ISO IEC 15693 Protocol HF Tag Reader RR9001 amp RR9201 User s Manual V3 80A Tags of type A Len Com_adr Cmd State Data CRC 16 0x0e OxXX 0x27 0x00 UID AFI LSB MSB 0x06 OxXX 0x27 0x01 AFI LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 7 a addressed mode 0x04 0 0 CRC 16 10x00 4 UID AFI CRC 16 lt tr Operation ya 4 Write AFI Wait Wait succeed 2 OxXX OxOf error_code
37. r 16 lt tr ur Wait oo SC Operation de ee Read Single Block eeees Wait c Z Ox0E OxXX 7 selected mode error code 16 vA 0x06 OxXX 0x20 0x05 block number CRC 16 Remark When no tag in the effective field please refer to former chapter for the content of the response data block 7 1 4 WRITE SINGLE BLOCK The host sends this command to let the reader write corresponding tag s one block content 4 or 8 bytes The blocks number and the size of a block may differ from tag to tag with different manufacturer Please refer to appendix 1 If the appointed block has been locked operation will fail and the reader will return the error code 7 1 4 1 4 BYTE BLOCK There are two types of write operation feedback style corresponding to the Option flag bit in ISO IEC defined write command s flag byte When tag supports write operation with Option flag l it is a type tag When tag supports write operation with Option flag 0 it is a type B tag Please refer to appendix 1 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A Tags of type A Len Com adr State 16 0 12 OxXX 0x21 0x00 UID block number data 4bytes LSB MSB OxXX 0x21 0x01 block number data 4bytes LSB MSB Len Com adr Status Data CRC 16 0x04 OxXX 0x00 LSB MSB 04 CxXX CxOC
38. rflows and no one UID has been decoded 0x04 0x X X 0x0 A CRC 16 InventoryScanTime overflows and not all UIDs have been decoded 0x04 0x X X 0x0B CRC 16 7 1 2 STAY QUIET The host sends this command to let the reader turn the corresponding tag into Quiet state When a tag in Quiet state it will not reply any inventory command But it will still reply any command in addressed mode There are three ways to make the tag leave Quiet state Tagistaken out of effective field and reentry in it UseSelect command to turn the tag into Selected mode Use Reset to ready command to turn the tag into Ready state Len Com adr State Data CRC 16 OxXX 0x02 0x00 UID LSB MSB Len Com adr Status Data CRC 16 0x04 0 00 LSB MSB 0x04 OxXX 0x00 16 SHA Wait succeed c Z Operation 4 Long Range ISO IEC 15693 Protocol Tag Reader RR9001 amp RR9201 User s Manual V3 80A OxXX 0x02 0x00 UID CRC 1 Stay Quiet Wait 6 0x05 OxXX OxOf error code CRC 1 7 1 3 READ SINGLE BLOCK The host sends this command to let the reader read out the corresponding tag s one block content 4 or 8 bytes and its security status byte The blocks number and the size of a block may differ from tag to tag with different manufacturer Please refer
39. se to further inventory command UID block Read data Read Singl pod i inted block which 0 20 block block number ARN Block status 15 4 or 8 bytes and its number _data security state UID c block Write data of 4 or 8 Write Single block 0 21 number ve bytes into appointed Block number data block data Long Range ISO IEC 15693 Protocol Reader 9001 amp RR9201 User s Manual V3 80A _UID Lock appointed block Lock Block 0x22 _block _block number to turn it into a read number only one _block UID security g first block Read out data of first block 7 status Read Multiple number appointed multiple 0x23 number data Block number of blocks synchronously number of repeating 7 block and their security state block _number of block times Turn appointed tag into Select 0x25 UID PE selected state Reset to Turn appointed tag into 0x26 UID Ready state UID Write the Application Write AFI 0x27 SAEI Family Identifier of x appointed tag Lock the Application Lock AFI 0x28 UID m Family Identifier of appointed tag iD Write the Data Storage Write DSFID 0x29 F DSFID A Format IDentifier of DSFID E appointed tag Lock the Data Storage Lock DSFID 0 2 _UID Format IDentifier of appointed ta
40. w the details RESPONSE DATA BLOCK STATUS COMMENT Len Com_adr Status Data CRC 16 Legnth Return status 0 to host after of LSM command is executed OxXX 0x00 Success Data MSB successfully Data block contains 44 result data Return status 1 to host when the Command LSM number of command operands 4 OxXX 0x01 operand MSB doesn t conform to the command length error request Return status 2 to host when the LSM Command not 4 OxXX 0x02 reader does not support the eg MSB supported command the host sends Return status 3 to host when one LSM Operand out of or more operand of command 4 OxXX 0x03 MSB range data block sent by host are out of range Return status 5 to host when the Inductive LSM inductive field is closed and the 4 OxXX 0x05 field MSB host sends a ISO IEC 15693 closed command iss EEPROM Return status 6 to host when the 4 OxXX 0x06 MSB operation reader encounters error error EEPROM access Return status when the reader execute an Inventory Inventory LSM command and does not get one 4 OxXX 0x0A Scan Time MSB complete tag s UID before overflow user defined Inventory ScanTime overflows Inventory not Return status when finished before reader execute an Inventory 4 OxXX 0x0B MSB Inventory command and does not get all Scan Time tag s UIDs before user defined overflows Inventory ScanTime over

Long-range ISO/IEC15693 Protocol HF Tag Label

Contents

Download Pdf Manuals

Related Search

Related Contents