NXP Semiconductors
Security Transponder and RISC Controller (STARC 2XLite)
Product Specification
PCF7x41ATJ
1 FEATURES
Single chip Security Transponder and Remote Keyless
Entry solution
RISC programmable device features
Up to seven Keyless Entry command buttons
512 Byte EEPROM for extended data storage
32 bit unique device and product type identification
Package integrated Transponder LF coil
Security Transponder
Transponder operation like PCF7936 family
Fast mutual authentication, 39ms (48 bit Secret Key)
EEPROM read/write protection capability
RISC programmable transponder extensions
Calculation Unit
Hardwired security algorithm
48 (96) bit Secret Key
RISC Controller and Peripherals
8 Bit RISC Architecture (MRK )
4 kByte E-ROM respectively ROM (application)
4 kByte ROM (device firmware and library functions)
128 Byte User RAM
11 general purpose I/O (incl. 7 command button inputs)
Two 8 Bit Timer/Counter
Optional external clock input for Timer/Counter
Watchdog
Single level interrupt architecture
On-chip RC Oscillator (< 8%)
Short instruction execution time (as fast as 0.5 s)
Programmable battery low detection
Low power consumption
RUN: 300 A, IDLE: 20A, PD: 100 nA
Single Lithium cell operation, 2.1V to 3.6V
2 GENERAL DESCRIPTION
The PCF7x41ATJ is a high performance single chip
Security Transponder and RISC Controller, ideally suited
for automotive applications with combined vehicle
Immobilization and Remote Keyless Entry functions.
Unless other products, the device comes with a package
integrated Transponder LF coil to operate as Security
Transponder and enable contactless communication with
the base station. Neither other external components nor an
additional battery supply is needed. The basic transponder
operation is emulated utilizing the on-chip RISC and may
feature a customized functions or may utilize the built in
Transponder Library, that offer HT2 functional compatible
operation (e.g. PCF7936), except for the ReadOnly mode.
The Security Transponder operation features secure
contactless authentication, employing a Secret Key and a
random number in order to cipher any communication
between the device and the base station. The device
features a factory programmed unique serial number that
also serves as product type identification.
Device operation is controlled by a ROM or E-ROM
(FLASH like features) based RISC Controller, powered by
NXP’ low power 8-Bit MICRO RISC KERNEL (MRK ). 11
general purpose I/Os are provided for command buttons,
LED, or control of an external RF transmitter/transceiver
circuitry.
In case of Remote Keyless Entry applications, the
application program may accomplish rolling code
generation using the hardwired Calculation Unit. The
Calculation Unit may operate in standard HITAG2 (48 bit
Shift Register) or Enhanced mode (64 bit Shift Register).
The RISC employs a 2 stage pipeline architecture in order
to execute an instruction in a single clock cycle. Device
timing is derived from an on-chip low tolerance
RC Oscillator that provides a programmable system clock,
with a frequency up to 2 MHz. The system clock may also
be derived from the transponder interface, e.g. LF field
clock.
Depending on the operation mode, the RISC is powered
from the external battery or derives its power supply by
inductive coupling to the LF field generated by the base
station.
The PCF7x41ATJ incorporates an advanced power
management that supports battery voltage measurement.
For increased battery lifetime the device quiescent current
is minimized in POWER-OFF state by disconnecting the
battery from most of the internal circuitry.
The device comes in a 36 pin Leaded Stick Package (LSP).
The device is available as E-ROM (FLASH like features)
and ROM coded product. In case of the E-ROM version,
in-circuit program download and debugging is supported.
For further detailed descriptions about features, functional
blocks and known anomalies not related to the integrated
Transponder functionality, please refer to datasheet
PCF7x41A compiled for the SSOP and TSSOP package.
2013 Oct 15
3
CONFIDENTIAL