ZKHY ZK_RFID101 User manual

UHF RFID Reader ZK_RFID101
User's Manual V2.0

Content
1. COMMUNICATION INTERFACE SPECIFICATION ..................................................................................4
2. PROTOCOLDESCRIPTION............................................................................................................................ 4
3. DATA BLOCK FORMAT................................................................................................................................... 5
3.1 COMMAND DATA BLOCK.................................................................................................................... 5
3.2 RESPONSE DATA BLOCK ..................................................................................................................... 5
4. OPERATION COMMAND (CMD) SUMMARY............................................................................................. 6
4.1 EPC C1 G2（ISO18000-6C）COMMAND............................................................................................ 6
4.2 18000-6B COMMAND.............................................................................................................................. 8
4.3 READER DEFINED COMMAND .......................................................................................................... 8
5. LIST OF COMMAND EXECUTION RESULT STATUS............................................................................... 9
6. TAG ERROR CODES....................................................................................................................................... 12
7. TAG MEMORYAND ISSUES REQUIRINGATTENTION......................................................................... 12
8. DETAILED DESCRIPTION OF OPERATION COMMAND...................................................................... 13
8.1 COMMAND OVERVIEV....................................................................................................................... 13
8.2 EPC C1G2 COMMAND......................................................................................................................... 13
8.2.1 Inventory ....................................................................................................................................... 13
8.2.2 Read Data...................................................................................................................................... 14
8.2.3 Write Data..................................................................................................................................... 16
8.2.4 Write EPC ..................................................................................................................................... 17
8.2.5 Kill Tag........................................................................................................................................... 17
8.2.6 Lock................................................................................................................................................ 18
8.2.7 BlockErase..................................................................................................................................... 20
8.2.8 ReadProtect (With EPC).............................................................................................................. 21
8.2.9 ReadProtect (Without EPC) ........................................................................................................ 22
8.2.10 Reset ReadProtect....................................................................................................................... 22
8.2.11 Check ReadProtect ..................................................................................................................... 23
8.2.12 EASAlarm................................................................................................................................... 23
8.2.13 Check EAS Alarm....................................................................................................................... 24
8.2.14 User Block Lock.......................................................................................................................... 24
8.2.15 Inventory (Single)....................................................................................................................... 25
8.2.16 Block Write.................................................................................................................................. 26
8.3 18000-6B COMMAND............................................................................................................................ 27
8.3.1Inventory Signal 6B....................................................................................................................... 27
8.3.2 Inventory Multiple 6B.................................................................................................................. 27
8.3.3 Read Data 6B................................................................................................................................. 28
8.3.4 Write Data 6B................................................................................................................................ 29
8.3.5 Check Lock 6B.............................................................................................................................. 29
8.3.6 Lock 6B.......................................................................................................................................... 30
8.4 READ-DEFINED COMMAND.............................................................................................................. 30
8.4.1 Get Reader Information............................................................................................................... 30
8.4.2 Set Region...................................................................................................................................... 31
8.4.3 SetAddress.................................................................................................................................... 32

8.4.4 Set Scan Time................................................................................................................................ 32
8.4.5 Set Band Rate................................................................................................................................ 33
8.4.6 Set Power....................................................................................................................................... 33
8.4.7 Acousto-optic Control................................................................................................................... 34
8.4.8 Set Wiegand................................................................................................................................... 34
8.4.9 Set WorkMode...............................................................................................................................35
8.4.10 Get WorkMode............................................................................................................................ 37
8.4.11 SetEasAccuracy........................................................................................................................... 38
8.4.12 Syris Response Offset .................................................................................................................38
8.4.13 Trigger Offset.............................................................................................................................. 38

ZK-RFID102 UHF RFID Reader User's Manual V2.0
4
1. COMMUNICATION INTERFACE SPECIFICATION
The reader communicates with host (MCU，MPU，Controller) using serial communication interface RS232 or
RS485 and complete corresponding operation according to the host command. The communication parameter is
57600bps 1 start bit, 8 data bits, 1 stop bit without parity check bit. In the process of serial communication, the
least significant bit of one byte is transmitted first and the least significant byte of command data sequence is
transmitted first.
2. PROTOCOL DESCRIPTION
A communication procedure is sponsored by the host sending commands and data to the reader and the
reader returns the result status and data to host after command execution.
Reader receives a command executes a command, only the reader complete the implementation of a
command, to receive the next command. During the implementation of the command in the reader, if sending
commands to the reader, the command will be lost.
The following table shows the process of the host computer command:
HOST
DIRECTION
READER
Command Data Block
→
The interval between two consecutive bytes in the command data block should be less than 15ms. During
command data block sending, synchronization will lost if the host receives any data from the reader and the host
should stop command sending and restart the communication after 15ms.
The reader completes command execution in inventory ScanTime (not including host sending data time)
except inventory command after receiving host command and returns the results. During the period, it doesn’t
process any host data. The feedback of command execution results is as follows:
READER
DIRECTION
HOST
Command Data Block
→
The interval between two consecutive bytes in the response data block should be less than 15ms.

ZK-RFID102 UHF RFID Reader User's Manual V2.0
5
3. DATA BLOCK FORMAT
3.1 COMMAND DATA BLOCK
Len
Adr
Cmd
Data[]
LSB-CRC16
MSB-CRC16
COMMENT：
LENGTH(Byte)
COMMENT
Len
1
Command data block length 1 byte (not including itself). Value
range is 4~96. The number of Len equals the length of Data []
plus 4.
Adr
1
Reader address, 1 byte. Value range is 0~254. Only will the
reader conforming to the address response the command data
block. Value 255 is broadcasting address. All the readers will
response to the command data block with a broadcasting
address. The default value shall be zero.
Cmd
1
Operation command symbol, 1 byte.
Data[]
Variable
Operation command parameters. There is no parameter if the
LEN item equals 4.
LSB-CRC16
1
CRC-16 LSB. CRC-16 checksum, 2 bytes with least
significant byte first.
MSB-CRC16
1
CRC-16 MSB.
3.2 RESPONSE DATA BLOCK
Len
Adr
reCmd
Status
Data[]
LSB-CRC16
MSB-CRC16
COMMENT：
LENGTH(Byte)
COMMENT
Len
1
Response data block length 1 byte (not including itself). The
number of Len equals the length of Data [] plus 5.
Adr
1
Reader address, 1 byte. Value rang is 0~254.
reCmd
1
Response command symbol, 1 byte. If the command is
unrecognized, the reCmd is 0x00.
Status
1
Result status value, 1byte. Refer to following table for details.
Data[]
Variable
Response data. There is no this item if Len equals 5.
LSB-CRC16
1
CRC16 LSB .CRC-16 checksum, 2 bytes with least significant
byte first.
MSB-CRC16
1
CRC16 MSB
The default value of the reader address is 0x00. The host may change it by using reader-defined command

ZK-RFID102 UHF RFID Reader User's Manual V2.0
6
“Write Adr”.
Cyclic Redundancy Check (CRC) computation includes all data from Len. A reference CRC computation
program is presented as follow:
C-Example:
#define PRESET_VALUE 0xFFFF
#define POLYNOMIAL 0x8408
unsigned int uiCrc16Cal(unsigned char const * pucY, unsigned char ucX)
{
unsigned char ucI,ucJ;
unsigned short int uiCrcValue = PRESET_VALUE;
for(ucI = 0; ucI < ucX; ucI++)
{
uiCrcValue = uiCrcValue ^ *(pucY + ucI);
for(ucJ = 0; ucJ < 8; ucJ++)
{
if(uiCrcValue & 0x0001)
{
uiCrcValue = (uiCrcValue >> 1) ^ POLYNOMIAL;
}
else
{
uiCrcValue = (uiCrcValue >> 1);
}
}
}
return uiCrcValue;
}
4. OPERATION COMMAND (CMD) SUMMARY
4.1 EPC C1 G2（ISO18000-6C）COMMAND
NUM
COMMAND
CODE
COMMENT
1
Inventory
0x01
The function is used to inventory tags in the effective field and
get their EPC values.
2
Read Data
0x02
The function is used to read part or all of a Tag’s Password,
EPC, TID, or User memory. To the word as a unit, start to read
data from the designated address.
3
Write Data
0x03
The function is used to write several words in a Tag’s
Reserved, EPC, TID, or User memory.

ZK-RFID102 UHF RFID Reader User's Manual V2.0
7
4
Write EPC
0x04
The function is used to write EPC value in a Tag’s EPC
memory. Random write one tag in the effective field.
5
Kill Tag
0x05
The function is used to kill tag. After the tag killed, it never
process command.
6
Lock
0x06
The function is used to set Password area as readable and
writeable from any state, readable and writeable from the
secured state, permanently readable and writeable, never
readable and writeable. It used to set EPC, TID or User as
writeable from any state, writeable from the secured state,
permanently writeable, never writeable.
7
Block Erase
0x07
The function is used to erase multiple words in a Tag’s
Password, EPC, TID, or User memory.
8
ReadProtect
0x08
The function is used to set designated tag read protection. After
the tag protected, it never process command. Even if inventory
tag, reader can not get the EPC number. The read protection
can be removed by executing Reset ReadProtect. Only NXP's
UCODE EPC G2X tags valid.
9
Read Protect
(without EPC)
0x09
The function is used to random set one tag read protection in
the effective field. The tag must be having the same access
password. Only NXP's UCODE EPC G2X tags valid.
10
Reset ReadProtect
0x0a
The function is used to remove only one tag read protection in
the effective field. The tag must be having the same access
password. Only NXP's UCODE EPC G2X tags valid.
11
Check ReadProtect
0x0b
The function is used to check only one tag in the effective field,
whether the tag is protected. It can not check the tag whether
the tag support protection setting. Only NXP's UCODE EPC
G2X tags valid.
12
EAS Alarm
0x0c
The function is used to set or reset the EAS status bit of
designated tag. Only NXP's UCODE EPC G2X tags valid.
13
Check
EAS Alarm
0x0d
The function is used to check EAS status bit of any tag in the
effective field. Only NXP's UCODE EPC G2X tags valid.
14
Block Lock
0x0e
The function is used to permanently lock the designated data in
designated tag’s user memory. The locked data can be read
only, but not written and not erased. Only NXP's UCODE EPC
G2X tags valid.
15
Inventory(Single)
0x0f
The function is used to inventory one tag in the effective field
and get their EPC values.
16
Block Write
0x10
The function is used to write multiple words in a Tag’s
Reserved, EPC, TID, or User memory.

ZK-RFID102 UHF RFID Reader User's Manual V2.0
8
4.2 18000-6B COMMAND
NUM
COMMAND
CODE
CONNECT
1
Inventory signal 6B
0x50
The function is used to Inventory only one tag in the effective
field and get their ID values. If more than one tag in the
effective field at the same time, reader may be get nothing.
2
Inventory multiple 6B
0x51
The function is used to according to the given conditions
Inventory tags in the effective field and get their ID values.
3
Read Data 6B
0x52
The function is used to start to read several bytes from the
designated address.
4
Write Data 6B
0x53
The function is used to start to write several bytes from the
designated address.
5
Check Lock 6B
0x54
The function is used to check whether the designated byte is
locked.
6
Lock 6B
0x55
The function is used to lock the designated byte.
4.3 READER DEFINED COMMAND
NUM
COMMAND
CODE
CONNECT
1
GetReader
Information
0x21
This function is used to get reader-related information such as
reader address (Adr), firmware version, supported protocol
type, Inventory ScanTime, power and frequency.
2
Set Region
0x22
Sets the current region. The function is used to set the reader
working of the lower limit and the upper limit of frequency.
3
Set Address
0x24
This function is used to set a new address of the reader. The
address value will store in reader’s inner nonvolatile memory.
Default address value is 0x00. The value range is 0x00~0xFE.
The address 0xFF is reserved as the broadcasting address.
When user tries to write a 0xFF to Adr, the reader will set the
value to 0x00 automatically.
4
Set ScanTime
0x25
This function is used to set a new value to Inventory ScanTime
of an appointed reader. The range is 3~255 corresponding to
3*100ms~255*100ms Inventory ScanTime. The default value
of Inventory ScanTime is 10*100ms.
5
Set Baud Rate
0x28
The function is used to change the serial port baud rate.
6
Set Power
0x2F
The function is used to set the power of reader.
7
Acousto-optic Control
0x33
Acousto-optic Control
8
Set Wiegand
0x34
The function is used to set Wiegand parameter.
9
Set WorkMode
0x35
The function is used to set work mode parameter.
10
Get WorkMode
0x36
The function is used to get work mode parameter.
11
SetEasAccuracy
0x37
The function is used to set EasAlarmAccuracy.
12
Syris Response Offset
0x38
The function is used to set Syris485 response offset time.
13
Trigger Offset
0x3b
The function is used to set Trigger Offset time.

ZK-RFID102 UHF RFID Reader User's Manual V2.0
9
5. LIST OF COMMAND EXECUTION RESULT STATUS
RESPONSE DATA BLOCK
STATES
CONNECT
Len
Adr
reCmd
Status
Data[]
CRC16
Length
of
Data[]
+5
0xXX
0xXX
0x00
……..
LSB+MSB
Success
Return status 0x00 to host
after command is executed
successfully. Data block
contains result data.
Length
of
Data[]
+5
0xXX
0x01
0x01
……..
LSB+MSB
Return before
Inventory
finished
Return status 0x01 to host
when the reader executes
an Inventory command and
gets some complete G2
tags’EPC before
user-defined
Inventory-ScanTime
finished.
Length
of
Data[]
+5
0xXX
0x01
0x02
……..
LSB+MSB
the
Inventory-sca
n-time
overflow
Return status 0x02 when
the reader executes an
Inventory command and
does not get all G2 tags’
EPC before user-defined
Inventory-ScanTime
overflows.
Length
of
Data[]
+5
0xXX
0x01
0x03
……..
LSB+MSB
More Data
Return status 0x03 when
the reader executes an
Inventory command and
gets many G2 tags’EPC,
Data can not be completed
within in a message, and
then send in multiple.
Length
of
Data[]
+5
0xXX
0x01
0x04
……..
LSB+MSB
Reader
module flash
is Full
Return status 0x04 when
the reader executes an
Inventory command and
gets G2 tags’EPC too
much, more than the
storage capacity of reader.
5
0xXX
0xXX
0x05
__
LSB+MSB
Access
Password
error
Return status 0x05 when
the reader implements a
command whit password,
while the password is
wrong.

ZK-RFID102 UHF RFID Reader User's Manual V2.0
10
5
0xXX
0x05
0x09
__
LSB+MSB
Kill Tag error
Return status 0x09 when
the reader implement a
Kill command, while the
kill password error, or poor
communication reader and
tag.
5
0xXX
0x05
0x0a
__
LSB+MSB
Kill Password
error can’t be
zero
Return status 0x0a when
the Kill Password is zero.
5
0xXX
0xXX
0x0b
__
LSB+MSB
Tag Not
Support the
command
Return status 0x0b when
the G2 Tag dose not
supports the command.
5
0xXX
0xXX
0x0c
__
LSB+MSB
Use the
command,
Access
Password
Can’t be Zero
Return status 0x0c when
the NXP UCODE EPC
G2X Tag is set read
protection or EAS Alarm,
the access password is
zero.
5
0xXX
0x0a
0x0d
__
LSB+MSB
Tag is
protected,
cannot set it
again
Return status 0x0d when
the NXP UCODE EPC
G2X Tag is protected.
5
0xXX
0x0a
0x0e
__
LSB+MSB
Tag is
unprotected,
no need to
reset it
Return status 0x0e when
the NXP UCODE EPC
G2X Tag is unprotected or
the tag does not support
the command.
5
0xXX
0x53
0x10
__
LSB+MSB
There is some
locked bytes,
write fail
Return status 0x10 when
the 6B Tag is written data,
while there are some
locked bytes, write fail.
5
0xXX
0x55
0x11
__
LSB+MSB
can not lock it
Return status 0x11 when
the 6B Tag can’t be
locked.
5
0xXX
0x55
0x12
__
LSB+MSB
Be locked,
cannot lock it
again
Return status 0x12 when
the 6B Tag has been
locked.
5
0xXX
0xXX
0x13
__
LSB+MSB
Save Fail,
Can Use
Before Power
Return status 0x13 when
the parameter is save fail.
5
0xXX
0xXX
0x14
__
LSB+MSB
Cannot adjust
Return status 0x14 when
the power can not be
adjusted.