Page 3
East Wind Technologies, Inc. 1 Introduction 1.1 Features ■ NFC Function ■ Support ISO 14443A/B, ISO 15693, FeliCa Lite-S (RCS966) and more ISO STD ■ Support ISO-DEP(ISO 14443-4) ■ Frequency: 13.56 MHz (±20PPM) ■ Input voltage: 4V – 6V ■ Average current: 150mA ( ±10mA) ■...
Page 4
East Wind Technologies, Inc. Warning: Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
Page 5
East Wind Technologies, Inc. KDB 996369 D03 OEM Manual rule sections: 2.2 List of applicable FCC rules This module has been tested for compliance to FCC Part 15.225, 15.215 2.3 Summarize the specific operational use conditions Any other usage conditions such as co-location with other transmitter(s) will need a separate reassessment through a class II permissive change application or new certification.
Page 6
Ben Chen / Vice President TEL: +886-2-7712-8686#17 FAX: +886-2-7712-8688 Email: benchen@ewt.com.tw IMPORTANT NOTE: In the event that these conditions cannot be met (for example certain laptop configurations or co-location with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID cannot be used on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product (including the transmitter) and obtaining a separate FCC authorization.
East Wind Technologies, Inc. Industry Canada statement: This device complies with ISED’s licence-exempt RSSs. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Le présent appareil est conforme aux CNR d’...
L'appareil peut être conservé aussi loin que possible du corps de l'utilisateur ou que le dispositif est réglé sur la puissance de sortie la plus faible si une telle fonction est disponible. Le produit final doit être étiqueté dans un endroit visible avec l'inscription suivante: "Contient des IC: 24646-EWTJ680E". Manual Information To the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the user’s manual of the end product which integrates this module.
East Wind Technologies, Inc. 1.3 Pin Configurations Function Type Description Power Power Indication of whether there is a card in the Output antenna area: 0: Card present; 1: No card Input/ Output RS232C TXD / UART TXD Input RS232C RXD / UART RXD hardware reset Input active low, time:150us(Typ)
So after power on again, it will be back to the default setting. If the moduleoperate card mode (via 0x70 command)is set to ISO15693, then EWTJ680E just only auto detect ISO15693 cards. If the moduleoperate card mode (via 0x70 command) is set to ISO14443A, then EWTJ680E just only detectISO14443A cards.
Page 15
East Wind Technologies, Inc. data. 1.8.2 Data returned format Success: Length Command Data Checksum Failure: Length Invert Command Checksum NOTE: "Failure" means that the communication between module and card failed. 1.9 Data Returned Time Slaves begin to execute the command once received host's commands. The executive time is normally lessthan 100ms, depand on the command type.Some command executive time maybe need longer.
East Wind Technologies, Inc. 2 Communication Interface 2.1 RS232C interface 2.1.1 Physical Interface RS232C is the UART interface which belongs to RS232C-level.The communication between RS232C and PC is via TXD, RXD and GND pins. The host TXD pin connects to the device RXD pin, meanwhile the host RXD pin connects to the device TXD pin.
Page 17
East Wind Technologies, Inc. 3 Application-layer Protocol 3.1 Overview This chapter will introduce the communication protocol application level commands and data structures in detail, the application level protocol only introduce the commands and the data. We illustrate each command in the following format: Frame Command Data...
East Wind Technologies, Inc. 3.2 System commands 3.2.1 Module reset to factory default Function: Reset all configuration of the module to factory default setting.The new setting will effect after re-power on. Host send: Frame 0x0F 52 45 53 45 54 Checksum Success: Frame...
Page 19
East Wind Technologies, Inc. Success: Frame 0x1B Checksum Failure: Frame 0xE4 Checksum 3.2.4 Set Automatic Detecting Card Interval Time Function: set interval time of automatic detecting card function. The default is 100ms.Settings will save in the module; it will be not lost after power OFF. Host sends: Frame 0x1C...
Page 21
East Wind Technologies, Inc. 3.3 ISO14443A/B CPU Card Commmands 3.3.1 ISO14443 TYPE ARequest Function: ISO14443A request cards, cards include MIFARE and other ISO14443A cards. In the returned results, user could judge the length of serial number via the returned data package length, and judge the card type by ATQA, also judge whether the card supports ISO14443-4 by SAK.
Page 22
East Wind Technologies, Inc. Success: Frame 0x60 Info. Checksum Info: total 13 bytes, 12 bytes of ATQB: 0x50 (1 byte), PUPI (4 bytes), application data (4 bytes), protocol information (3bytes), 1 byte answer to Attribute. For more details, please reference to ISO14443-3 "ATQB Response" part. Failure: Frame 0x9F...
Page 23
East Wind Technologies, Inc. Failure: Frame 0xCE Checksum 3.3.6 ISO14443-4 TYPE B Card Halt Function: To let the current ISO14443B card enters into halt status. Not all of the cards support this command, most don't support, especially the new card. Host sends: Frame 0x62...
East Wind Technologies, Inc. 3.4 MIFARE 1K/4K/miniCard Commands 3.4.1 MIFARERequest MIFAREseriescards request, please refer to ISO14443 TYPE A Request. 3.4.2 MIFARE 1K/4KData Block Read Function: Read MIFARE1K/4K one block data. Host sends: Frame 0x21 Key ID Block Checksum Key ID: 1 byte, Key identifier BIT0=0: Key A;...
Page 25
East Wind Technologies, Inc. Data: blocks * 16 bytes card data per block Failure: Frame 0xD5 Checksum 3.4.4 MIFARE 1K/4KData Block Write Function: Write the data to a block of MIFARE 1K/4K. Host sends: Frame 0x22 Key ID Block Data Checksum Key ID: 1 byte, Key identifier;...
East Wind Technologies, Inc. about MIFARE 1K/4K card, please reference the datasheet. Host sends: Frame 0x23 Key ID Block Value Checksum Key ID: 1 byte, Key identifier; Block: 1 byte, Block number to be initialized; Key: 6 bytes, the key of the card; Value: 4 bytes, initialized value, LSB first.
Page 27
East Wind Technologies, Inc. Failure: Frame 0xDA Checksum 3.4.9 MIFARE 1K/4KPurse Decrement Function: Purse decrement of MIFARE 1K/4K. The format of the purse uses MIFARE 1K/4K’s default. Purse decrement means the decrement on the basis of the original number. Purse decrement only needs the “read authority”...
Page 28
East Wind Technologies, Inc. Frame 0x28 Checksum Success: Frame 0x28 Checksum Failure: Frame 0xD7 Checksum 3.4.12 Download MIFARE 1K/4K Card Key into Module Function: Download the MIFARE 1K/4K card key into module. There are 32 key memory spaces in the module that could storage 32 different keys. While using the downloaded key in the module, this key wouldn’t appear on the pin-outs of the PCD.
Page 29
East Wind Technologies, Inc. 3.4.13 About KEY Identifier There is a byte of KEY identifier incommand of MIFARE 1K/4K cards. This byte will identify the way to get the card key. KeyIdentifier BIT7 BIT6 BIT5 BIT4 BIT3 BIT2 BIT1 BIT0 BIT0 = 0: KEY A;...
Page 30
East Wind Technologies, Inc. 3.5 MIFARE Ultralight/Ultralight C/Ultralight EV1Card Commands 3.5.1 MIFARE Ultralight/Ultralight C/Ultralight EV1 Request For MIFAREUltraLight/UltraLight C card request, please refer to ISO14443 TYPE A Request. 3.5.2 MIFARE Ultralight/Ultralight C/Ultralight EV1 Card Read Function: Read the data from MIFAREUltraLight/UltraLight C cards. A read command will read 4 blocks data from the card.
Page 31
East Wind Technologies, Inc. Host sends: Frame 0x43 Checksum Key: 16bytes UltraLight C key Success: Frame 0x43 Checksum Failure: Frame 0xBC Checksum 3.5.5 MIFAREUltraLightCEk (RndB)Read Function:To read encrypted RndBthis is generated by Ultralight C card. Command 0x44 and 0x45 are the separation commands to authenticate Ultralight C.Because the microcontroller calculates 3DES is slower, so authentication will be more time-consuming, and therefore part of the separation of authentication allows users to calculate 3DES to save authentication time.Users could first consider using 0x43 to authenticate, if required authentication in speed, you could...
Page 32
East Wind Technologies, Inc. 3.5.7 Ultralight EV1 GET_VERSION Function: The GET_VERSION command is used to retrieve information on the MIFARE family, product version, storage size and other product data required to identify the Ultralight EV1 card. Host sends: Frame 0x46 Checksum Success: Frame...
Page 33
East Wind Technologies, Inc. Failure: Frame 0xB7 Checksum 3.5.10 Ultralight EV1 INCR_CNT Function: The INCR_CNT command is used to increment one of the 3 one-way counters of the Ultralight EV1. The two arguments are the counter number and the increment value. Host sends: Frame 0x49...
Page 34
East Wind Technologies, Inc. Frame 0xB4 Checksum 3.5.13 Ultralight EV1 CHECK_TEARING_EVENT Function: The CHECK_TEARING_EVENT command enables the application to identify if a tearing event happened on a specified counter element. It takes the counter number as single argument and returns a specified valid flag for this counter. If the returned valid flag is not equal to the predefined value, a tearing event happened.
Page 35
East Wind Technologies, Inc. 3.6 MIFAREPlusCard Commands EWTJ680E reader module supportMIFAREPlus card operation.NXP MIFAREPlus cards are used to instead MIFARE 1 card.We provide application commands are based on Level 3. In the card level 3, the authentication use AES encryption algorithm. In the communication process between module and card, all are using encrypted data +command with MAC +response with MAC mode.
Page 36
East Wind Technologies, Inc. using this command, please use MIFAREPlus Write Persocommand to write all AES key and the initial value of all the blocks, then make the changed data effect. Host sends: Frame 0x34 Checksum Success: Frame 0x34 Status Checksum Status: statuscode returned from the card.
Page 37
East Wind Technologies, Inc. 3.6.3.2 MIFAREPlusData Block Read Function:Level 3 command, reading operation of data block; before reading,the relevant block need to be authorized. Host sends: Frame 0x37 Start Block Blocks Checksum Start Block: 2 bytes (MSB first). Blocks: 1 byte, blocks to be read Success: Frame 0x37...
Page 38
East Wind Technologies, Inc. 3.6.3.5 MIFAREPlusPurse Read Function: Level 3 command, reading the balance of the purse. Host sends: Frame 0x3A Block Checksum Block: 2 bytes (MSB first), block number. Success: Frame 0x3A Status Value Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code.
Page 39
East Wind Technologies, Inc. Host sends: Frame 0x3D Source Target Checksum Source: 2 bytes (MSB first), source block number Target: 2 bytes (MSB first), target block number Success: Frame 0x3D Status Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code.
Page 40
East Wind Technologies, Inc. 3.6.4 MIFAREPlusReturned Status Code There is a status code after MIFAREPluscardresponse;this table indicates the possible value. Status Explanation 0x90 OPERATION_SUCCESS Normal operation ends Authentication conditions are not met; No 0x06 AUTHENTICATION_ERROR exist block; The block is visited in a numeric 0x07 COMMAND_OVERFLOW Plaintext R&W in a task Overflow.
Page 41
We are here to provide a separate operation for DESFire card. DESFire card authentication and communication use DES encryption algorithm. The encryption of communication between EWTJ680E and DESFire cardsis set by users. If the user sets the RF communication process is encrypted then the card data security is extremely high.
Page 42
East Wind Technologies, Inc. Failure: Frame 0x6F Checksum 3.7.1.5 DESFire Authenticate first step Get ekNo (RndB) Function: Authentication is initiated by the module. Get the ekNo (RndB) from the card. Host sends: Frame 0x8E KeyNo Checksum KeyNo: 1 byte. Success: Frame 0x8E Status...
Page 43
East Wind Technologies, Inc. Host sends: Frame 0x98 Checksum AID: 3 bytes (LSB in first). Success: Frame 0x98 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x67 Checksum 3.7.2 DESFire Initialization Commands 3.7.2.1 DESFireFormat Card Function:Format card, all the card application and application files will be deleted.
Page 44
East Wind Technologies, Inc. Frame 0x91 KeySettings Checksum KeySettings: 8 bytes encrypted key settings. Success: Frame 0x91 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x6E Checksum 3.7.2.4 DESFire Get Key Settings Function:Get the master key/appalication master key configureation settings.
Page 45
East Wind Technologies, Inc. Success: Frame 0x94 Status Version Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Version: 1 byte. Failure: Frame 0x6B Checksum 3.7.2.7 DESFire Delete Application Function: Delete the specified application. Host sends: Frame 0x96 Checksum...
Page 46
East Wind Technologies, Inc. Frame 0x68 Checksum 3.7.2.10 DESFire Get File IDs Function:Get all file identifier of current application. Host sends: Frame 0x9B Checksum Success: Frame 0x9B Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code.
Page 47
East Wind Technologies, Inc. AccessRight: 2bytes (LSB in first). EncryptedSetting: 8 bytes, 1 byte communication setting+ 2 bytes file permission+ 2 bytes CRC + 3 bytes 0x00 got via encryption. Success: Frame 0x9D Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code.
Page 48
East Wind Technologies, Inc. 3.7.2.15 DESFire Create Value File Function: Create Value File in current application, support backup mechanism. Host sends: Limited Comm. Access Lower Upper Checks Frame 0xA0 Value Credit Sett Right limit limit enable FID: 1 byte. Comm.Sett: 1byte,0: Plaintext;1: MAC code checksum;...
Page 49
East Wind Technologies, Inc. FID: 1 byte. Comm.Sett: 1byte,0: Plaintext;1: MAC code checksum; 3: DES/3DES encryption. AccessRight: 2bytes (LSB in first). Record Size: 3bytes (LSB in first), bytes of single record. Max Records: 3bytes (LSB in first), total record numbers of the file. Success: Frame 0xA2...
Page 50
East Wind Technologies, Inc. 3.7.3.2 DESFire Write Data Function: Write specified Data File (Standard Data File or Backup Fata File) in current application. For BackupData File, Commit isneeded to take effectafter write, refer to:DESFire Commit Transaction please. Host sends: Frame 0xA5 Offset Length...
Page 51
East Wind Technologies, Inc. Encryption: 8 bytes encrypted data, After decryption: 4bytes value (LSB first)+2 bytes CRC + 2 bytes 0x00. Success: Frame 0xA7 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x58 Checksum...
Page 52
East Wind Technologies, Inc. 3.7.3.7 DESFire Write Record Function:Write data to specified Data File in current application.The data file could be Linear Record or CyclicRecord file. This command appends one record at the end of the record file. The status will show an error when the linear record file is full. In case of cyclic record file is already full, it erases and overwrites the oldest record.
Page 53
East Wind Technologies, Inc. Success: Frame 0xAC Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x53 Checksum 3.7.3.10 DESFire Commit Transaction Function: Submit all WRITE operation of Backup Data file, Value file and Record file incurrent application.
Page 54
East Wind Technologies, Inc. 3.7.4 DESFire Returned State Code Coding of Status and Error Codes of DESFire card HEX code Status Explanation 0x00 OPERATION_OK Successful operation 0x0C NO_CHANGES No changes done to backup files, CommitTransaction / AbortTransaction not necessary 0x0E OUT_OF_EEPROM_ERROR Insufficient NV-Memory to complete command 0x1C...
Page 55
East Wind Technologies, Inc. 3.8 SR176 Card Commands 3.8.1 SRSerial Cards 1 Slot Initiate Card Function: SR serial cards (SR176/SRI512/SRI1K/SRI2K/SRI4K/SRIX4K, the same below) single channel initiate card. Before read/write card, it needs to use the command of “SR serial cards select”...
Page 56
East Wind Technologies, Inc. 3.8.4 SR176 Card Read Function: Read data block of SR176 card. Host sends: Frame 0x68 StartBlock BlockNumbers Checksum StartBlock: 1 byte. BlockNumbers: 1 byte; the quantity of blocks to be read. Success: Frame 0x68 Data Checksum Data: 2 bytes*BlockNumbers, data from the card.
Page 57
East Wind Technologies, Inc. 3.9 SRI512/1K/2K/4KCard Commands 3.9.1 SRI Serial Cards 1 Slot Initiate Card Please reference:SR serial cards 1 slot initiate card. 3.9.2 SRI Serial Cards 16 Slots Initiate Card Function: SR serial cards (SRI512/SRI1K/SRI2K/SRI4K/SRIX4K, the same below) 16 channels initiate card.
Page 58
East Wind Technologies, Inc. 3.9.6 SRI Serial Cards Read Function: Read data block of SRI serial card. Host sends: Frame 0x6B StartBlock BlockNumbers Checksum StartBlock: 1 byte. BlockNumbers: 1 byte; the quantity of blocks to be read. Success: Frame 0x6B Data Checksum Data:...
Page 59
East Wind Technologies, Inc. 3.9.9 SRISerial Cards Read UID Function: Read UID of SRI serial card. Host sends: Frame 0x6E Checksum Success: Frame 0x6E Checksum UID: 8 bytes, UID of CURRENT CARD. Failure: Frame 0x91 Checksum 3.9.10 SRIX Serial Cards Authentication Function: SRIX serial card authentication;...
Page 60
East Wind Technologies, Inc. 3.10 ISO15693Operation Commands 3.10.1 ISO15693 Inventory Function: Find a card in RF effective field. If success, to set the tag as CURRENT TAG. If automatic detecting card function was turned on, then this command is to take the result of automatic detecting card, not to detect card after received the command.
Page 61
East Wind Technologies, Inc. to the data sheet of the card. Failure: Frame 0xA1 Checksum 3.10.4 ISO15693 Reset to Ready Function: Set a stay quiet TAG reset to ready. Host sends: Frame 0x5F Checksum Data: 8 bytes, UID of the tag to reset to ready. Success: Frame 0x5F...
Page 62
East Wind Technologies, Inc. 3.10.7 ISO15693 Lock Block Function: Lock a block of CURRENT TAG. Host sends: Frame 0x56 BlockNumber Checksum BlockNumber: 1 byte, block number to be locked. Success: Frame 0x56 Checksum Failure: Frame 0xA9 Checksum 3.10.8 ISO15693 Write AFI Function: Write AFI to CURRENT TAG.
Page 63
East Wind Technologies, Inc. Frame 0x59 DSFID Checksum DSFID: 1 byte, DSFIDvalue to be written. Success: Frame 0x59 Checksum Failure: Frame 0xA6 Checksum 3.10.11 ISO15693 Lock DSFID Function: Lock DSFID of CURRENT TAG. Host sends: Frame 0x5A Checksum Success: Frame 0x5A Checksum Failure:...
Page 64
East Wind Technologies, Inc. 3.11 Felica Card Commands 3.11.1 Send APDU to Felica card Function: Use this command to send / receive APDU to / from Felica card. Host sends: Frame 0x2F APDU command Checksum APDU: Please refer to Felica user manual for detailed APDU command. Success: Frame 0x2F...
Page 65
East Wind Technologies, Inc. • Manufacture Parameter (PMm) PMm consists of IC Code (2 Bytes) and the maximum response time parameters (6 Bytes). oIC Code (2 Bytes) This is the information to identify a product. IC code consists of two components, i.e., ROM Type and IC Type.
Page 66
East Wind Technologies, Inc. Failure: Frame 0xD0 Checksum Example: Send: 0x22 2F 20 0801 2E 3D 23 BA 07 5C 45 01 09 00 01 80 0011 22 33 44 55 66 77 88 11 22 33 44 55 66 77 88 Response: 0x0E2F 0C0901 2E 3D 23 BA 07 5C 45 00 00 19...
Need help?
Do you have a question about the EWTJ680E and is the answer not in the manual?
Questions and answers