Atmel AT88RF1354 User manual

AT88RF1354
SPI User Guide
For CryptoRF®
8586A—RFID—5/09

i
8586A—RFID—5/09
Table of Contents
Section 1 Introduction.............................................................................................................................
1-1
1-1
1-1
2-1
2-3
2-4
2-7
2-9
2-11
2-13
2-14
2-15
2-16
2-17
2-19
2-21
3-1
3-1
3-4
3-6
3-8
3-10
3-12
3-14
3-16
3-18
3-20
3-22
3-24
3-26
4-1
4-1
4-1
4-4
A-1
B-1
B-1
1.1 Product Description......................................................................................................
1.2 System Diagram...........................................................................................................
1.3 Scope...........................................................................................................................1-2
1.4 Conventions................................................................................................................. 1-2
Section 2 AT88RF1354 Instruction Set..................................................................................................
2.1 Abort Command [$0D]................................................................................................. 2-2
2.2 Clear Command [$0E] .................................................................................................
2.3 Poll Continuous (REQB) Command [$02] ...................................................................
2.4 Poll Single (REQB) Command [$01]............................................................................
2.5 Poll Single (WUPB) Command [$01]...........................................................................
2.6 Read Buffer Command [$08].....................................................................................
2.7 Read Register Command [$07] .................................................................................
2.8 RF OFF Command [$0B]...........................................................................................
2.9 RF ON Command [$0A].............................................................................................
2.10 Sleep Command [$0C]...............................................................................................
2.11 TX Data Command [$03]...........................................................................................
2.12 Write Buffer Command [$09] .....................................................................................
2.13 Write Register Command [$06]..................................................................................
Section 3 CryptoRF Commands.............................................................................................................
3.1 Command Overview ....................................................................................................
3.2 REQB Polling Command [$05] .................................................................................... 3-2
3.3 ATTRIB Command [$1D].............................................................................................
3.4 HLTB Command [$50].................................................................................................
3.5 Set User Zone Command [$c1] ...................................................................................
3.6 Read User Zone Command [$c2]..............................................................................
3.7 Read User Zone (Large Memory) Command [$c2] ...................................................
3.8 Write User Zone Command [$c3] ..............................................................................
3.9 Write User Zone (Large Memory) Command [$c3]....................................................
3.10 Write System Zone Command [$c4]..........................................................................
3.11 Read System Zone Command [$c6]..........................................................................
3.12 DESELECT Command [$cA].....................................................................................
3.13 IDLE Command [$cB]................................................................................................
3.14 Check Password Command [$cC].............................................................................
Section 4 Register Summary..................................................................................................................
4.1 Overview......................................................................................................................
4.2 AT88RF1354 Register Set...........................................................................................
4.3 AT88RF1354 Register Memory Map........................................................................... 4-2
4.4 AT88RF1354 Register Bit Coding Summary...............................................................
Appendix A Initialization Procedure......................................................................................................
Appendix B The SPI Serial Interface......................................................................................................
B.1 SPI Interface ................................................................................................................

Table of Contents (continued)
ii AT88RF1354 SPI User Guide for CryptoRF
8586A—RFID—5/09
Appendix C Index.....................................................................................................................................C-1
C-1
C-1
C.1 Figure Index.................................................................................................................
C.2 Table Index ..................................................................................................................
C.3 Revision History...........................................................................................................C-2

Section 1
Introduction
Features
AT88RF1354 Instruction Set Examples
CryptoRF Instruction Set Examples
AT88RF1354 Register Definitions Summary
Initialization Procedure
Description
This document describes the instruction set examples for the AT88RF1354 13.56 MHz ISOI/IEC
14443 Type B Reader IC and the CryptoRF PICC. Device initialization examples are included for
reference by the software developer or embedded systems programmer using this RF reader.
This specification is formatted as a reference document, with each command description and
register definition on a separate page.
1-1
8586A—RFID—5/09
1.1 Product Description
The AT88RF1354 is a smart, high performance ISO/IEC 14443 Type B RF Reader IC. The
AT88RF1354 communicates with RFID Transponders or Contactless Smartcards using the
industry standard ISO/IEC 14443-2 Type B signal modulation scheme and ISO/IEC 14443-3 Type
B frame format. Data is exchanged half duplex at a 106k bit per second rate. A two byte CRC_B
provides communication error detection capability.
The AT88RF1354 is compatible with 3.3 V and 5 V host microcontrollers with two-wire or SPI
serial interfaces. In two-wire interface mode the AT88RF1354 operates as a TWI slave and
requires four microcontroller pins for data communication and handshaking. In SPI interface
mode the AT88RF1354 operates as a mode 0 SPI slave and requires six microcontroller pins for
data communication and handshaking.
The AT88RF1354 device performs all RF communication packet formatting, decoding, and
communication error checking. The host microcontroller is not burdened with RF encoding,
timing, or protocol functions as these tasks are all performed by the AT88RF1354 device. To
communicate with a RFID transponder the host microcontroller sends a data packet to the
AT88RF1354 for transmission over the RF communications channel. When the response is
received from the transponder, the AT88RF1354 extracts the data packet and returns it to the
host microcontroller.
1.2 System Diagram
Figure 1. Communications in an RFID System
Serial Interface RF Communications
Host
Microcontroller CardReader IC

AT88RF1354 SPI User Guide For CryptoRF
1.3 Scope
The AT88RF1354 SPI User Guide includes command illustrations and examples necessary to
communicate with a CryptoRF PICC. This document summarizes AT88RF1354 and CryptoRF
device specific details.
All examples assume a microcontroller is being used as a pass-thru device between the PC host
and the reader. The microcontroller translates command and data strings from the host into SPI
format. Likewise all SPI response data from the AT88RF1354 is translated back to strings by the
microcontroller.
Refer to the AT88RF1354 Datasheet for electrical details, the AT88RF1354 Command Reference
Guide and the CryptoRF Specification for complete device detail. Reference Designs and
additional technical information is available at:
http://www.atmel.com/dyn/products/product_card.asp?part_id=4418.
1.4 Conventions
ISO/IEC 14443 nomenclature is used in this document where applicable. The following terms
and abbreviations are utilized throughout this document. Additional terms are defined in the
section in which they are used.
Card: A Contactless Smart Card or RFID Tag in proximity to the reader antenna.
Host: The personal computer connected to the serial interface of the reader IC.
PCD: Proximity Coupling Device – is the host and reader with antenna.
PICC: Proximity Integrated Circuit Card – is the tag/card containing an IC and antenna.
Reader: The AT88RF1354 Integrated Circuit with loop antenna and associated circuitry
RFU: Reserved for Future Use – is any feature, memory location, or bit that is held as
reserved for future use by the ISO standards committee or by Atmel.
$ xx: Hexadecimal Number – denotes a hex number “xx” (Most Significant Bit on left).
xxxx b: Binary Number – denotes a binary number “xxxx” (Most Significant Bit on left).
See Atmel Application Note Understanding the Requirements of ISO/IEC 14443 for Type B
Proximity Contactless Identification Cards at www.atmel.com for detailed information regarding
the ISO/IEC 14443 RF communication protocol.
1-2
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
1.4.1 SPI Command Format
Each command example shown in this document is presented in two formats. First each
command is shown as a high level illustration (Figure 2). This illustration shows high level byte
information plus processing and signaling information. RF transmissions are denoted by a green
text box. Reader and PICC response bytes are shown below the blue text box.
All command/response examples in this document assume the Host initiates communication by
sending a command string from its serial port. A microcontroller intercepts the Host’s command
string and converts the string into SPI format. The SPI formatted command is then passed to the
AT88RF1354 SPI interface. The Host’s command string is shown in the left-most column.
The reader processes the SPI formatted command passed to it from the microcontroller. The
reader’s actions are shown in the middle column.
The CryptoRF PICC processes commands received from the reader. The PICC response is RF
transmitted back to the reader. PICC actions and responses are shown in the right-most column.
The PICC response is processed by the reader. When processing is complete, the AT88RF1354
ISTAT line goes high to indicate data is ready. The AT88RF1354 will not accept additional
commands when ISTAT is high. The AT88RF1354 data buffer must be emptied before
continuing. Empty the data buffer by clocking data out the SPI interface.
Depending upon the command, a response may be generated from just the reader or the
response may include data bytes from both the reader and the PICC. The bytes are shown in the
order in which they are sent and transmitted.
Following each illustration is a detailed description of the command and response string (Figure
3). Command strings sent from the Host to the reader are preceded by the letter “O”. Responses
received by the Host are preceded by the letter “I”.
1-3
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
Figure 2. Illustration Example – Serial Communications with the SPI Interface
PICC CID N
PICC
Command Processing
RF Transmit Response
Command Processing
Host Reader
Send six bytes
AT88RF1354 command
Bytes sent to PICC
AT88RF1354 PARAM
FWI
PICC command
RF Transmit Command
PICC PARAM
ISTAT goes High
Response Processing
EREG Register Byte
PICC Bytes Received
ISTAT stays Low
Get six bytes
Response Bytes
PICC ACK/NACK
PICC Status Code
PARAM
1-4
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
Figure 3. Detail Example – Serial Communications with the SPI Interface
String Decode > O0006 Host sends six bytes thru microcontroller to AT88RF1354 serial port.
> 03 AT88RF1354 TX Data command.
> 02 Data bytes sent to PICC. In this example 2 bytes are sent to the PICC.
> 01 PARAM. Bits[2:0] select AT88RF1354 Communication Protocol Register 1 (CPR1).
> 00 Timeout. A $00 selects the Frame Waiting Interval defined during CPR initialization.
> 11 To PICC: Upper nibble is CID assigned in the ATTRIB command. Lower nibble is $1.
> 00 To PICC: PARAM. Upper nibble is $0 (disable anti-tearing). Lower nibble is user zone 0.
The AT88RF1354 automatically appends RF communication CRC bytes to the transmitted data stream.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
> I0006 Host gets six bytes from AT88RF1354 buffer.
> 00 AT88RF1354 Response: $00 (No RF communication error bits set in the EREG register).
> 03 AT88RF1354 Response: PICC response byte count.
> 01 AT88RF1354 Response: PARAM. Echo PARAM byte used in prior TX Data command.
> 11 PICC Response: Upper nibble is CID assigned in ATTRIB command. Lower nibble is $1.
> 00 PICC Response: PICC ACK/NACK. ACK is $00, the command executed correctly.
> 00 PICC Response: PICC status code. Status message $00 is no errors.
The AT88RF1354 automatically strips the RF communication CRC bytes.
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
All examples assume a microcontroller is being used as a pass-thru device between the
PC host and the reader. The microcontroller translates command and data strings from
the host into SPI format. Likewise all SPI response data from the AT88RF1354 is
translated back to strings by the microcontroller.
1-5
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
1.4.2 ACK/NACK Response Byte
The first byte of each response is usually an ACK/NACK byte which indicates if the requested
operation succeeded or failed. The bit definitions for the ACK/NACK byte are shown in Figure 4
and Figure 5. This response byte contains 6 bits from the Error Register, and 2 bits which indicate
the success or failure of the requested operation. 01b in the least significant bits is an ACK,
indicating success. 10b in the least significant bits is a NACK, indicating failure. The contents of
the error register are not relevant to non-RF commands and can be ignored.
Figure 4. ACK/NACK Byte Format for ACK Response
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
CRC FRAME BYTE TIME COL SPE 0 b 1 b
Error Register Bits ACK
Figure 5. ACK/NACK Byte Format for NACK Response
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
CRC FRAME BYTE TIME COL SPE 1 b 0 b
Error Register Bits NACK
The three RF communication commands Poll Continuous, Poll Single, and TX Data return the
Error Register contents in the first byte of the response. Figure 6 shows the Error Register
format.
Figure 6. Error Register Format in RF Command Responses
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
CRC FRAME BYTE TIME COL SPE 0 b 0 b
1-6
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
1.4.3 First Response Byte By Command
The first byte of each response indicates if the requested operation succeeded or failed. When a
command initiates a RF operation where the reader and PICC talk, the first response byte will
always be the AT88RF1354 EREG register contents.
When the command initiates a non-RF operation where there is no reader and PICC
communication the first response byte is usually the AT88RF1354 ACK/NACK response. The
exception is the Sleep command. There is no response to the sleep command.
The first byte response for the AT88RF1354 command set and the CryptoRF command set are
shown in Table 1 and Table 2, respectively.
Table 1. AT88RF1354 Command Set – First Response Byte
Command Name First Response Byte
Abort AT88RF1354 ACK/NACK
Clear AT88RF1354 ACK/NACK
Poll Continuous AT88RF1354 EREG Register Contents
Poll Single (REQB) AT88RF1354 EREG Register Contents
Poll Single (WUPB) AT88RF1354 EREG Register Contents
Read Buffer AT88RF1354 ACK/NACK
Read Register AT88RF1354 ACK/NACK
RF OFF AT88RF1354 ACK/NACK
RF ON AT88RF1354 ACK/NACK
Sleep No Response
TX Data AT88RF1354 EREG Register Contents
Write Buffer AT88RF1354 ACK/NACK
Table 2. CryptoRF Command Set – First Response Byte
Command Name First Response Byte
All commands AT88RF1354 EREG Register Contents
1-7
8586A—RFID—5/09

2-1
Section 2
AT88RF1354 Instruction Set
Table 3. Instruction Set Sorted by Command Name
Command Name Description Code
Abort Exit Command in Progress $0D
Clear Exit Command in Progress, Clear Buffer, Turn RF OFF $0E
Poll Continuous Poll Continuously for Type B PICCs $02
Poll Single (REQB) Poll Once for Type B PICCs $01
Poll Single (WUPB) Poll Once for Type B PICCs in the Halt or Idle States $01
Read Buffer Read Data Buffer $08
Read Register Read Configuration Register $07
RF OFF Turn Off 13.56 MHz RF Field $0B
RF ON Turn On 13.56 MHz RF Field $0A
Sleep Activate Standby Mode $0C
TX Data Transmit Data to PICC and Receive the Response $03
Write Buffer Write Data Buffer $09
Write Register Write Configuration Register $06
All other command code values are NOT supported
Commands in the following sections are listed in alphabetical order.
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF®
2.1 Abort Command [$0D]
This command aborts a command in progress and places the reader in the idle state.
2.1.1 Command Format
ISTAT goes High
ACK/NACK
Abort ($0D)
ISTAT stays Low
Get one byte
Command Processing
Response Bytes
PICCHost Reader
Send one byte
2.1.2 Example
String Decode > O0001 Host sends one byte thru microcontroller to AT88RF1354 serial port.
> 0D AT88RF1354 ABORT command.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
String Decode > I0001 Host gets one byte from AT88RF1354 buffer.
> 01 AT88RF1354 Response: $01 (Acknowledge).
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
2.1.3 Operation
The Abort command stops a command operation in progress. The contents of the RAM buffer
and registers are not modified by the Abort command.
2-2
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
2.2 Clear Command [$0E]
This command aborts a command in progress, turns off the RF field, clears the RAM buffer, and
places the reader in the idle state.
2.2.1 Command Format
PICCHost Reader
Send one byte
ISTAT goes High
ACK/NACK
Clear ($0E)
ISTAT stays Low
Get one byte
Command Processing
Response Bytes
2.2.2 Example
String Decode > O0001 Host sends one byte thru microcontroller to AT88RF1354 serial port.
> 0E AT88RF1354 CLEAR command.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
String Decode > I0001 Host gets one byte from AT88RF1354 buffer.
> 01 AT88RF1354 Response: $01 (Acknowledge).
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
2.2.3 Operation
The Clear command stops a command in progress, turns off the RF field, and clears the RAM
buffer. The contents of the error register are reset by the Clear command. The contents of the
other registers are unchanged.
2-3
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF®
2.3 Poll Continuous (REQB) Command [$02]
This command performs multiple Type B polling sequences to detect cards near the antenna.
The first response is returned to the host. In the event a card response containing a
communication error is received, then an error code is returned. If no response is detected, then
polling continues until an Abort command is sent by the host.
The optional Smart Poll mode modifies the polling operation to include error tolerance. In Smart
Poll mode polling continues until an error free card response is received.
2.3.1 Command Format
APP 0
APP 1
APP 2
Command Processing
RF Transmit Response
Command Processing
ISTAT goes High
EREG Register Byte
Response Processing
Response Bytes
PICC
Protocol 3
Protocol 2
APP 3
Protocol 1
$50
PUPI 0
PUPI 1
PUPI 2
PUPI 3
ISTAT stays Low
Get thirteen bytes
RF Transmit Command
Host Reader
Send three bytes
Poll Continuous ($02)
AFI
PARAM
2-4
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
2.3.2 Example
String Decode > O0003 Host sends three bytes thru microcontroller to AT88RF1354 serial port.
> 02 AT88RF1354 POLL CONTINUOUS command. Poll for Type B PICC's until a response is received.
> 00 To PICC: AFI. A $00 activiates all Type B PICC's.
> 00 To PICC: PARAM. Specify a REQB when bit [3] is 0b, and 2Nanti-collision slots where N is bits [2:0].
The AT88RF1354 automatically appends RF communication CRC bytes to the transmitted data stream.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
String Decode > I000D Host gets thirteen bytes from AT88RF1354 buffer.
> 00 AT88RF1354 Response: $00 (No RF communication error bits set in the EREG register).
> 50 PICC Response: $50 (Success).
> FF PICC Response: PUPI 0 -- CryptoRF System Zone Byte $00
> FF PICC Response: PUPI 1 -- CryptoRF System Zone Byte $01
> FF PICC Response: PUPI 2 -- CryptoRF System Zone Byte $02
> FF PICC Response: PUPI 3 -- CryptoRF System Zone Byte $03
> FF PICC Response: APP 0 -- CryptoRF System Zone Byte $04
> FF PICC Response: APP 1 -- CryptoRF System Zone Byte $05
> FF PICC Response: APP 2 -- CryptoRF System Zone Byte $06
> 22 PICC Response: APP 3 -- CryptoRF System Zone Byte $07 (22 = AT88SC0404CRF density)
> 00 PICC Response: Protocol 1 -- $00
> 10 PICC Response: Protocol 2 -- CryptoRF System Zone byte $08
> 51 PICC Response: Protocol 3 -- $51
The AT88RF1354 automaticallystrips the RF communication CRC bytes.
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
2.3.3 Operation
The functionality of the Poll Continuous command is identical to the Poll Single command, except
that after the final Slot-MARKER is sent, if no card response is received, the reader chip repeats
the polling procedure. The Poll Continuous command is like an infinite loop of Poll Single
commands that is broken when a card response (good or bad) is received.
This command performs multiple polling sequences with “N” slots using the ISO/IEC14443-3
Type B commands REQB, WUPB, and Slot-MARKER. The CPR0 default Communication
Protocol settings are used by this command.
A polling sequence consists of either an REQB or WUPB command, followed by the number of
Slot-MARKER commands indicated by “N”. When a response is received, then the polling
sequence is stopped and the response is returned to the host. When a communication error is
detected, then the polling sequence is stopped and an error code is returned to the host.
Subsequent commands will require the PUPI data read from the PICC. A user should expect
each PICC will contain a unique PUPI.
A system should also utilize the density code stored in APP byte 3. The density code information
can easily be used to identify different CryptoRF user memory sizes. Refer to the CryptoRF
Specification for a complete list of CryptoRF density codes.
2-5
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF®
2.3.4 Smart Poll Mode Operation
Smart Poll mode is enabled by sending the Poll Continuous command with N = 111b. In the
Smart Poll mode, the reader will continually send REQB/WUPB with N = 000b until it receives a
card response. If this response is valid, it will return the response to the host. If the card response
generates a communication error, the reader assumes that there was a collision. It will then send
the next REQB/WUPB with N = 001b, and if there is no valid card response it will send Slot-
MARKER for slot two.
If there is no response from a card in either slot, then the reader returns to polling with N = 000b.
If there is an error free card response, then it will be returned to the host. If there is another
collision and no valid response, however, N will again be incremented, and the reader will send
the correct sequence of REQB/WUPB and Slot-MARKERs. In the case where Smart Poll mode
reaches 16 slots and only collisions are detected, then polling is stopped, and a Smart Poll error
code is returned to the host. If no error-free card response is detected, then polling continues until
an Abort command is sent by the host.
2-6
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
2.4 Poll Single (REQB) Command [$01]
This command performs a single Type B polling sequence to detect cards near the antenna. The
first response is returned to the host. In the event no error free response is detected, then an
error code is returned.
2.4.1 Command Format
ISTAT stays Low
Get thirteen bytes
RF Transmit Command
Host Reader
Send three bytes
Poll Single ($01)
AFI
PARAM
PICC
Protocol 3
Protocol 2
APP 3
Protocol 1
$50
PUPI 0
PUPI 1
PUPI 2
PUPI 3
APP 0
APP 1
APP 2
Command Processing
RF Transmit Response
Command Processing
ISTAT goes High
EREG Register Byte
Response Processing
Response Bytes
2-7
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF®
2.4.2 Example
String Decode > O0003 Host sends three bytes thru microcontroller to AT88RF1354 serial port.
> 01 AT88RF1354 POLL SINGLE command. Poll once for Type B PICC's.
> 00 To PICC: AFI. A $00 activiates all Type B PICC's.
> 00 To PICC: PARAM. Specify a REQB when bit [3] is 0b, and 2N anti-collision slots where N is bits [2:0].
The AT88RF1354 automatically appends RF communication CRC bytes to the transmitted data stream.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
String Decode > I000D Host gets thirteen bytes from AT88RF1354 buffer.
> 00 AT88RF1354 Response: $00 (No RF communication error bits set in the EREG register).
> 50 PICC Response: $50 (Success).
> FF PICC Response: PUPI 0 -- CryptoRF System Zone Byte $00
> FF PICC Response: PUPI 1 -- CryptoRF System Zone Byte $01
> FF PICC Response: PUPI 2 -- CryptoRF System Zone Byte $02
> FF PICC Response: PUPI 3 -- CryptoRF System Zone Byte $03
> FF PICC Response: APP 0 -- CryptoRF System Zone Byte $04
> FF PICC Response: APP 1 -- CryptoRF System Zone Byte $05
> FF PICC Response: APP 2 -- CryptoRF System Zone Byte $06
> 22 PICC Response: APP 3 -- CryptoRF System Zone Byte $07 (22 = AT88SC0404CRF density code)
> 00 PICC Response: Protocol 1 -- $00
> 10 PICC Response: Protocol 2 -- CryptoRF System Zone byte $08
> 51 PICC Response: Protocol 3 -- $51
The AT88RF1354 automaticallystrips the RF communication CRC bytes.
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
2.4.3 Operation
This command performs one polling sequence with “N” slots using the ISO/IEC14443-3 Type B
commands REQB, WUPB, and Slot-MARKER. The CPR0 default Communication Protocol
settings are used by this command.
A polling sequence consists of either an REQB or WUPB command, followed by the number of
Slot-MARKER commands indicated by “N”. When a card response not containing a CRC error is
received, then the polling sequence is stopped and the response is returned to the host.
Subsequent commands will require the PUPI data read from the PICC. A user should expect
each PICC will contain a unique PUPI.
A system should also utilize the density code stored in APP byte 3. The density code information
can easily be used to identify different CryptoRF user memory sizes. Refer to the CryptoRF
Specification for a complete list of CryptoRF density codes.
2-8
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF
2.5 Poll Single (WUPB) Command [$01]
This command performs a single Type B polling sequence to detect cards in the Halt State or Idle
State near the antenna. The first response is returned to the host. In the event no error free
response is detected, then an error code is returned.
2.5.1 Command Format
APP 0
APP 1
APP 2
Command Processing
RF Transmit Response
Command Processing
ISTAT goes High
EREG Register Byte
Response Processing
Response Bytes
PICC
Protocol 3
Protocol 2
APP 3
Protocol 1
$50
PUPI 0
PUPI 1
PUPI 2
PUPI 3
ISTAT stays Low
Get thirteen bytes
RF Transmit Command
Host Reader
Send three bytes
Poll Single ($01)
AFI
PARAM
2-9
8586A—RFID—5/09

AT88RF1354 SPI User Guide For CryptoRF®
2.5.2 Example
String Decode > O0003 Host sends three bytes thru microcontroller to AT88RF1354 serial port.
> 01 AT88RF1354 POLL SINGLE command. Poll once for Type B PICC's.
> 00 To PICC: AFI. A $00 activiates all Type B PICC's.
> 08 To PICC: PARAM. Specify a WUPB when bit [3] is 1b, and 2N anti-collision slots where N is bits [2:0].
The AT88RF1354 automatically appends RF communication CRC bytes to the transmitted data stream.
Wait for AT88RF1354 ISTAT pin state.
ISTAT goes High.
The AT88RF1354 buffer has data ready. Data must be read before the next command can be issued.
String Decode > I000D Host gets thirteen bytes from AT88RF1354 buffer.
> 00 AT88RF1354 Response: $00 (No RF communication error bits set in the EREG register).
> 50 PICC Response: $50 (Success).
> FF PICC Response: PUPI 0 -- CryptoRF System Zone Byte $00
> FF PICC Response: PUPI 1 -- CryptoRF System Zone Byte $01
> FF PICC Response: PUPI 2 -- CryptoRF System Zone Byte $02
> FF PICC Response: PUPI 3 -- CryptoRF System Zone Byte $03
> FF PICC Response: APP 0 -- CryptoRF System Zone Byte $04
> FF PICC Response: APP 1 -- CryptoRF System Zone Byte $05
> FF PICC Response: APP 2 -- CryptoRF System Zone Byte $06
> 22 PICC Response: APP 3 -- CryptoRF System Zone Byte $07 (22 = AT88SC0404CRF density code)
> 00 PICC Response: Protocol 1 -- $00
> 10 PICC Response: Protocol 2 -- CryptoRF System Zone byte $08
> 51 PICC Response: Protocol 3 -- $51
The AT88RF1354 automaticallystrips the RF communication CRC bytes.
ISTAT stays Low.
The AT88RF1354 buffer is empty. The AT88RF1354 will now accept a new command.
2.5.3 Operation
This command performs one polling sequence with “N” slots using the ISO/IEC14443-3 Type B
commands REQB, WUPB, and Slot-MARKER. The CPR0 default Communication Protocol
settings are used by this command.
A polling sequence consists of either an REQB or WUPB command, followed by the number of
Slot-MARKER commands indicated by “N”. When a card response not containing a CRC error is
received, then the polling sequence is stopped and the response is returned to the host.
Subsequent commands will require the PUPI data read from the PICC. A user should expect
each PICC will contain a unique PUPI.
A system should also utilize the density code stored in APP byte 3. The density code information
can easily be used to identify different CryptoRF user memory sizes. Refer to the CryptoRF
Specification for a complete list of CryptoRF density codes.
2-10
8586A—RFID—5/09