Page 1
Technical Data Sheet RFID reader CTU-M series CTU-Mxx-man-eng-v2.pdf Fig. 1 CTU-M2R ATTENTION! THIS CONFIDENTIAL DOCUMENT IS PROPERTY OF NETRONIX SP. Z O.O. DISTRIBUTION OF THIS DOCUMENT IN ANY WAY WITHOUT SPECIAL PERMISSION OF ITS OWNER IS STRICTLY FORBIDDEN...
INTRODUCTION ..................... 5 GENERAL SPECIFICATION................6 DIMENSION, TERMINAL DESCRIPTION............7 MODULE SETTINGS BY ON-BOARD SWITCH..........8 TRANSMISSION PROTOCOLS..............8 RS-232/485 TRANSMISSION PROTOCOL ..........8 5.1. Protocol for I C transmission................8 5.2. Data exchange algorithm ................8 5.2.1. Timings......................10 5.2.2.
Page 3
Reading-out the configuration of freely selected port ......25 5.7.4. Access password ....................25 5.8. Logging to reader................... 25 5.8.1. Changing the password................26 5.8.2. Logging out of the reader ................26 5.8.3. Operating the transponder internal memory ..........27 5.9.
Page 4
OPERATION EXAMPLE OF TRANSPONDER..........39...
NETRONIX CTU-Mxx 1. Introduction CTU-M device series is OEM miniature RFID card reader operating at frequency of 13,56 MHz Main features: • Support of Mifare S50, S70, Ultralight, Desfire • built-in antenna • card memory with build-in lock driver, • lots of communication interfaces type, depend on version (see table below) •...
20mA Transmission parameters for 2400, 4800, 9600, 19200, 38400, 57600, RS232/RS485/RSTTL 115200 bps, 8 data bits, 1 stop bit, no parity compliant with „Netronix Protocol” Address on I C bus 0xC0 1WIRE family code,address (configurable) 0x01,0x01 WIEGAND number of bits...
RS-232/485 transmission protocol 5.1. In this data sheet RS-232/485 protocol has been confined to descriptions of commands, responses and their parameters. Header and CRC control sum exist always and are compliant with full “Netronix Protocol” document. Command frame: Header C_CommandName Response_parameters1…n Response frame: Header C_CommandName+1 Response_parametrers…m...
Page 9
NETRONIX CTU-Mxx (commands connected with write to/and read from transponders can last up to 100 ms). We write inquiry-command to CTU module: NUMBER OF BYTES(1B) COMMAND (1B) SLAVE ADDRESS (1B) PARAMETERS (0...n B) The „number of bytes” field must contain information on byte quantity sent directly “command”...
NETRONIX CTU-Mxx Timings 5.2.2. Module sends and receives data at 400 kHz clock frequency considering timings showed below. Note 2: Reader keeps in low state first clock pulse of each byte sent until proper state is placed on SDA line.
Page 11
NETRONIX CTU-Mxx Family code ID1…ID5 Address 1 byte 5 bytes 1 byte 1 bytet ID1...5 – unique ID number of transponder CRC_DAL- check sum of data send The format conforms 1-WIRE Dallas (e.g.. DS1990A). It means, that described module could be used as a replacement of DS1990A drop.
NETRONIX CTU-Mxx 5.4. Wiegand protocol The format conforms WIEGAND protocol specification for N bits. During operation, a module tries to read-out transponder periodically. If it fails (no successful read-out), module does not send data (bus does not "see" the module). If module reads out the transponder, the module starts to send data via Wiegand bus.
NETRONIX CTU-Mxx 5.5. Key management Key management feature includes key loading to internal key memory. For security reasons, these keys cannot be red-out. To maintain the highest level of data security, employed a particular philosophy of working with these keys.
NETRONIX CTU-Mxx Key loading to key static memory 5.5.2. Important feature of static memory is that in case of supply decay, data stored in it will not be lost. The memory can be overwritten many times. Command frame: Header C_LoadKeyToSKB Key1…6, KeyNo...
NETRONIX CTU-Mxx Selecting one of many transponders 5.6.2. Command frame: Header C_Select RequestType Where: Parameter Parameter name Values description Selecting C_Select 0x12 many transponders 0x00 - Standard selecting from group of transponders, which are not in stand-by Type of transponder...
NETRONIX CTU-Mxx Logging by means of Dynamic Key Buffer to selected sector of 5.6.3. transponder To complete logging successfully, it is important after any input of the reader, to reload the Dynamic Key Buffer. Command frame: Header C_LoginWithDKB SectorNo, KeyType, DKNo...
NETRONIX CTU-Mxx Reading-out the content of transponder block 5.6.5. Command frame: Header C_ReadBlock BlockNo Where: Parameter name Parameter description Value range Read-out transponder C_ReadBlock 0x1e block content Block number within given BlockNo **Sector and block numeration sector Response frame: Header C_ReadBlock +1 Data1…..
NETRONIX CTU-Mxx Copying the content of transponder block into other block 5.6.7. Command frame: Header C_CopyBlock SourceBlockNo, TargetBlockNo Where: Parameter name Parameter description Value range Copying content C_CopyBlock transponder block into other 0x60 block SourceBlockNo Source block **Sector and block numeration...
NETRONIX CTU-Mxx Reading the page content in Mifare UL 5.6.9. Command frame: Header C_ReadPage16B PageAdr Where: Parameter name Parameter description Value range C_ReadPage16B Read-out of page content in Mifare UL 0x28 Page address, from which read-out of following four pages should start. If PageAdr>0x????, PageAdr 0x00…0x0f...
NETRONIX CTU-Mxx transponder block. Response frame: Header C_WriteValue +1 OperationCode CRC Reading-out the values from transponder block 5.6.11. Command frame: Header C_ReadValue BlockNo Where: Parameter Parameter description Value range name Read-out Value from C_ReadValue 0x36 transponder block. Block number within given sector,...
NETRONIX CTU-Mxx Value, which is being added to Value1...4 existed real value block transponder. Response frame: C_IncrementValue OperationCode CRC Header Decreasing the value included in block transponder 5.6.13. To execute a command successfully, format of data included in declared block should be “Value”...
NETRONIX CTU-Mxx Reader inputs and outputs 5.7. Reader has inputs and outputs which are configurable. Inputs are controlled directly from microcontroller outputs. Output load current is up to 20 mA. Writing the output state 5.7.1. Command frame: C_WriteOutputs IONo, State...
NETRONIX CTU-Mxx Writing the settings to any port 5.7.3. „0” „1” INTERF ↓ INTERF Base card Each card TOGGLE TypeOfOutput ConfByte1 - BIT 1 t2=Hold-UP x 100ms tn=nTime x 100ms ConfByte1 - BIT 3:2 ConfByte1 - BIT 0 Command frame: Header C_SetIOConfig IONo, IOConfigData1…n...
Page 24
NETRONIX CTU-Mxx or as sensitive for simulation state ConfByte1 Bit 3:2 (state sensitive). 00 – rectangular wave BIT3:2 determines operation method generator of output referring to trigger signal 01- directly state. 10 – output state change 0x00 – permanently off 0x01 –...
NETRONIX CTU-Mxx Reading-out the configuration of freely selected port 5.7.4. Command frame: Header C_GetIOConfig IONo Where: Parameter name Parameter description Value range Reading-out the configuration of freely selected C_GetIOConfig 0x52 port. I/O port number, which configuration is to be IONo 0x00…0x05...
NETRONIX CTU-Mxx Any from range: 0x01…0xff. Data1…n This is any byte string String length, which can be 0 to 8 bytes Logic Zero, which terminates a 0x00 0x00 string. Response frame: Header C_LoginUser +1 OperationCode CRC Changing the password 5.8.2.
NETRONIX CTU-Mxx Operating the transponder internal memory 5.9. Reading-out the transponder number from memory 5.9.1. Command frame: C_CardMemoryRead AdrL, AdrH Header Where: Parameter name Parameter description Value range Read-out of transponder number from C_CardMemoryRead 0x20 memory. AdrL, AdrH Younger and older byte respectively.
NETRONIX CTU-Mxx Parameter name Parameter description Value range Write of access control C_AccesControlConfigWrite 0x74 configuration. Operation mode of control 0x00 – module disabled Mode access module. 0x01 – module enabled Response frame: C_AccesControlConfigWrite+ OperationCod Header Reading-out the configuration of access control 5.10.2.
Page 29
NETRONIX CTU-Mxx Parameter name Parameter description Value range C_SetAutoReader Writing the automatic device 0x58 Config configuration. 0-automatic device disabled permanently 1-automatic device enabled permanently 2=enabled automatically in case of Defines, when automatic reading ATrig transmission lack on interface for a device UID will operate.
NETRONIX CTU-Mxx Parameter name Parameter description Value range C_GetRtc Read-out of date and time 0xb6 Response frame: Year, Month, Day, Hour, Minute, OperationCode CRC Header C_GetRtc+1 Second Where: The meaning of response parameters is the same as described before. Configuring the UART serial interface 5.11.
NETRONIX CTU-Mxx Managing the events 5.12. The CTU-MxxM series readers has equipped with event memory of capacity 4400 records. Reason of event can be operation related to card or state changing on reader outputs. The readers does not have RTC clock with battery back-up. After supply failure, clock is reset to defaults: date: 1 January 2000, time: 00:00:00.
NETRONIX CTU-Mxx E.g. In4Trig-In1Trig configuration byte sequence: 0x00,0x31,0x40,0x08, causes, that events will be written in case of: Any state change of input with index 10 occurs − Positive slope appears on input with index 8 − Positive slope appears on input with index 7 −...
NETRONIX CTU-Mxx Example: If using C_GetEventParam command, we have red that event memory capacity is 4400 inputs; the total value of input events is 5678. For instance, if we want to read the event with no. 5600, event index event of interest will be 5678-4400=1278.
NETRONIX CTU-Mxx Pursuing the sector for given application 5.13.3. Command frame: Header C_GetSectorMad LSB, MSB Wherein: Parameter name Parameter description Value range C_GetSectorMad Pursuing the sector 0xAC 0xAC LSB of application number 0x00 - 0xFF MSB of application number 0x00 - 0xFF...
NETRONIX CTU-Mxx After clearing the memory, apply selected card to module, whenever you like. This moment, the card becomes “master card”. It is impossible to remove or add the master card by means of other card. If you want to register a card as a “user card”, apply “master card” to reader first, and next during five seconds, apply registered card.
Page 40
NETRONIX CTU-Mxx SetAutoReaderConfig with parameters: 0x00, 0x00, 0x00, 0x00. To read-out the transponder, first load key to key memory. So load the key to SKB, by means of: C_LoadKeyToSKB, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00 Enable the field. TurnOnAntennaPower, 0x01 Apply transponder to reader.