East Wind Technologies, Inc. EWTJ680H Module General Technical Manual (Revision 0.10) East Wind Technologies, Inc.
East Wind Technologies, Inc. ■ Revise history No. Date Description Rev. Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Copyright © 2022 East Wind Technologies, Inc. All rights reserved.
East Wind Technologies, Inc. 1 Introduction 1.1 Features ■ NFC Function ■ MIFARE CLASSIC, ISO 14443A/B, FeliCa Lite-S ■ ISO-DEP(ISO 14443-4) ■ Frequency: 13.56 MHz (±20PPM) ■ Input voltage: 5V (±0.5V) ■ Average current: 150mA (±10mA) ■ Detect distance: 6.5cm (±0.
East Wind Technologies, Inc. Warning: This module is intended for OEM integrators only. Per FCC KDB 996369 D03 OEM Manual v01 guidance, the following conditions must be strictly followed when using this certified module: KDB 996369 D03 OEM Manual v01 rule sections: 2.2 List of applicable FCC rules This module has been tested for compliance to FCC Part 15 2.3 Summarize the specific Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules.
East Wind Technologies, Inc. operational use conditions Any other usage conditions such as co-location with other transmitter(s) will need a separate reassessment through a class II permissive change application or new certification. 2.4 Limited module procedures Not applicable. 2.5 Trace antenna designs Not applicable. 2.
East Wind Technologies, Inc. the transmitter) and obtaining a separate FCC authorization. Manual Information To the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the user’s manual of the end product which integrates this module. The end user manual shall include all required regulatory information/warning as show in this manual.
East Wind Technologies, Inc. 1.2 Pin Configurations Pin Function Type Description 1 GND Power GND 2 RXD Input RS232C RXD / UART RXD 3 TXD Input/Output RS232C TXD / UART TXD 4 VCC Power VCC 1.3 Dimension Copyright © 2022 East Wind Technologies, Inc. All rights reserved.
East Wind Technologies, Inc. 1.4 Physical photos Module front: Module back: Copyright © 2022 East Wind Technologies, Inc. All rights reserved.
East Wind Technologies, Inc. 1.5 Waveform Parameters 1.5.1 Type A Parameter t1 t2 t3 t4 Min Max 2.06 0.52 0 0 2.99 t1 1.18 min(0.44,t3/1.5) EWTJ680H Measurements 2.86 1.33 0.976 0.384 Unit μs μs μs μs 1.5.2 Type B Parameter Min Max modi tf tr Vou,B 9.0+0.25Z 0 0 0 15.0-0.25Z 1.18 1.18 0.1 Copyright © 2022 East Wind Technologies, Inc. All rights reserved. EWTJ680H Measurements 12.36% 0.24 0.58 0.
East Wind Technologies, Inc. 1.6 Module function configuration table EWTJ680H JCP04 Communication Protocol ● JCP05 Communication Protocol ● MIFARE Classic 1K ● MIFARE Classic 4K ● MIFARE Ultralight ● MIFARE Mini ● MIFARE DESFire ● MIFARE Plus ● T=CL TYPE A ● SR176 ● SRI512 ● SRI1K ● SRI2K ● SRI4K ● SRIX4K ● T=CL TYPE B ● NTAG213, NTAG216 and so on ● NTAG series ● RS232C Interface EWTJ680H 1.
East Wind Technologies, Inc. be saved. So after power on again, it will be back to the default setting. If the module operate card mode (via 0x70 command) is set to ISO14443A, then EWTJ680H-I just only detect ISO14443A cards. Automatic detecting cards function support MIFARE 1K/4K and MIFARE Ultra Light cards. ISO14443A T=CL card could be detected when the automatic detecting cards function is open. If you want to operate the card, you need send RATS command (0x30) to the module firstly.
East Wind Technologies, Inc. 1.9 Communication Protocol 1.9.1 Data sent format Length Command Data Checksum Length: 1 byte, number of bytes from Length byte to the last byte of Data. Command: 1 byte, Application-layer command, please refers to Application-layer protocol in detailed. Data: length depends on the command type, from 0x00 to 0xFC bytes. Checksum: 1 byte, Exclusive OR (XOR) results from length byte to the last byte of data. 1.9.
East Wind Technologies, Inc. 2 Communication Interface 2.1 RS232C interface 2.1.1 Physical Interface RS232C is the UART interface which belongs to RS232C-level. The communication between RS232C and PC is via TXD, RXD and GND pins. The host TXD pin connects to the device RXD pin, meanwhile the host RXD pin connects to the device TXD pin. The communication protocol is byte oriented. Both sending and receiving bytes are in hexadecimal format.
East Wind Technologies, Inc. 3 Application-layer Protocol 3.1 Overview This chapter will introduce the communication protocol application level commands and data structures in detail, the application level protocol only introduce the commands and the data. We illustrate each command in the following format: Frame Command Data Checksum Frame Header: 1 byte length information, all the bytes except Checksum byte. Checksum: Exclusive OR (XOR) results from length byte to the last byte of data.
East Wind Technologies, Inc. 3.2 System commands 3.2.1 Module reset to factory default Function: Reset all configuration of the module to factory default setting. The new setting will effect after re-power on. Host send: Frame 0x0F 52 45 53 45 54 Frame 0x0F Checksum Frame 0xF0 Checksum Checksum Success: Failure: send: 0x07 0F 52 45 53 45 54 5D return: 0x02 0F 0D 3.2.2 Set LED Function: set the LED ON or OFF.
East Wind Technologies, Inc. Frame 0x1C Checksum Frame 0xE3 Checksum Failure: 3.2.4 Set the Default of Automatic Detecting Card Function: Set the default state of automatic detecting card when power on device. Settings will save in the module; it will be not lost after power OFF. For temporarily open or close automatically detect card, please use the 0x11 command.
East Wind Technologies, Inc. 3.3 ISO14443A/B CPU Card Commmands 3.3.1 ISO14443 TYPE A Request Function: ISO14443A request cards, cards include MIFARE and other ISO14443A cards. In the returned results, user could judge the length of serial number via the returned data package length, and judge the card type by ATQA, also judge whether the card supports ISO14443-4 by SAK. If automatic detect card function was opened, then this command is only to read the result of automatic detect card.
East Wind Technologies, Inc. Mode: 1 byte, 0: WUPB; 1: REQB; other values: RFU AFI: 1 byte, the AFI to request, if request all AFI, please use 0x00. Success: Frame 0x60 Info. Checksum Info: total 13 bytes, 12 bytes of ATQB: 0x50 (1 byte), PUPI (4 bytes), application data (4 bytes), protocol information (3 bytes), 1 byte answer to Attribute. For more details, please reference to ISO14443-3 "ATQB Response" part. Failure: Frame 0x9F Checksum 3.3.
East Wind Technologies, Inc. Frame Response: Failure: 0x31 Response Checksum card response, length depends on the detailed command Frame 0xCE Checksum 3.3.6 ISO14443-4 TYPE B Card Halt Function: To let the current ISO14443B card enters into halt status. Not all of the cards support this command, most don't support, especially the new card. Host sends: Frame 0x62 PUPI Checksum PUPI: 4 bytes, PUPI of the card that will be halt.
East Wind Technologies, Inc. 3.4 MIFARE 1K/4K/mini Card Commands 3.4.1 MIFARE Request MIFARE series cards request, please refer to ISO14443 TYPE A Request. 3.4.2 MIFARE 1K/4K Data Block Read Function: Read MIFARE 1K/4K one block data.
East Wind Technologies, Inc. Key: 6 bytes, the key of the card. Success: Frame 0x2A Data Checksum Data: blocks * 16 bytes card data per block Failure: Frame 0xD5 Checksum 3.4.4 MIFARE 1K/4K Data Block Write Function: Write the data to a block of MIFARE 1K/4K. Host sends: Frame Key ID: Block: Key: Data: Success: 0x22 Key ID Block Key Data Checksum 1 byte, Key identifier; 1 byte, Block number to be written; 6 bytes, the key of the card; 16 bytes data to be written.
East Wind Technologies, Inc. 3.4.6 MIFARE 1K/4K Purse Block Initialization Function: Initialize a block of MIFARE 1K/4K as a purse. The format of purse uses MIFARE 1K/4K’s default. The card's key block and block 0 could not be used as a purse. For more details about MIFARE 1K/4K card, please reference the datasheet.
East Wind Technologies, Inc. Key: 6 bytes, the key of the card; Value: 4 bytes, increment value, LSB first. Success: Frame 0x25 Checksum Frame 0xDA Checksum Failure: 3.4.9 MIFARE 1K/4K Purse Decrement Function: Purse decrement of MIFARE 1K/4K. The format of the purse uses MIFARE 1K/4K’s default. Purse decrement means the decrement on the basis of the original number. Purse decrement only needs the “read authority” of the key.
East Wind Technologies, Inc. 3.4.11 ISO14443A Card Halt Function: Set the current operating ISO14443A card (including MIFARE series cards) into halt status. Host sends: Frame 0x28 Checksum Frame 0x28 Checksum Frame 0xD7 Checksum Success: Failure: 3.4.12 Download MIFARE 1K/4K Card Key into Module Function: Download the MIFARE 1K/4K card key into module. There are 32 key memory spaces in the module that could storage 32 different keys.
East Wind Technologies, Inc. 3.4.13 About KEY Identifier There is a byte of KEY identifier in command of MIFARE 1K/4K cards. This byte will identify the way to get the card key. KeyIdentifier BIT7 BIT6 BIT5 BIT4 BIT3 BIT2 BIT1 BIT0 BIT0 = 0: KEY A; authenticate Key A of the card. BIT0 = 1: KEY B; authenticate Key B of the card. BIT1 = 0: Using the following 6 bytes Key in command. BIT1 = 1: Using the downloaded Key by command. BIT6:BIT5:BIT4:BIT3:BIT2: Index of the Key already downloaded (0 to 31).
East Wind Technologies, Inc. 3.5 MIFARE Ultralight/Ultralight C/Ultralight EV1 Card Commands 3.5.1 MIFARE Ultralight/Ultralight C/Ultralight EV1 Request For MIFARE UltraLight/UltraLight C card request, please refer to ISO14443 TYPE A Request. 3.5.2 MIFARE Ultralight/Ultralight C/Ultralight EV1 Card Read Function: Read the data from MIFARE UltraLight/UltraLight C cards. A read command will read 4 blocks data from the card.
East Wind Technologies, Inc. 3.5.4 MIFARE UltraLight C Key Authentication Function: Inputting UltraLight C key, the device directly authenticate the key. This process of authentification is controled by the module. Host sends: Frame 0x43 Key Frame 0x43 Checksum Frame 0xBC Checksum Checksum Key: 16 bytes UltraLight C key Success: Failure: 3.5.5 MIFARE UltraLight C Ek (RndB) Read Function: To read encrypted RndB this is generated by Ultralight C card.
East Wind Technologies, Inc. Failure: Frame 0xBA Checksum Ek(RndA): The card returned encrypted RndA. After decrypted and shifted via using 3DES CBC, then to compare result with RndA. If equality, authentication is passed. 3.5.7 Ultralight EV1 GET_VERSION Function: The GET_VERSION command is used to retrieve information on the MIFARE family, product version, storage size and other product data required to identify the Ultralight EV1 card.
East Wind Technologies, Inc. Address: 1byte, Ultralight EV1 counters address. Success: Frame 0x48 Data Checksum Data: 3 bytes Ultralight EV1 counter data. Failure: Frame 0xB7 Checksum 3.5.10 Ultralight EV1 INCR_CNT Function: The INCR_CNT command is used to increment one of the 3 one-way counters of the Ultralight EV1. The two arguments are the counter number and the increment value. Host sends: Frame 0x49 Address Data Checksum Address: 1byte, Ultralight EV1 counters address.
East Wind Technologies, Inc. Success: Frame Signature: Failure: 0x4B Signature Checksum 32 bytes signature data. Frame 0xB4 Checksum 3.5.13 Ultralight EV1 CHECK_TEARING_EVENT Function: The CHECK_TEARING_EVENT command enables the application to identify if a tearing event happened on a specified counter element. It takes the counter number as single argument and returns a specified valid flag for this counter. If the returned valid flag is not equal to the predefined value, a tearing event happened.
East Wind Technologies, Inc. Frame 0x72 Checksum Copyright © 2022 East Wind Technologies, Inc. All rights reserved.
East Wind Technologies, Inc. 3.6 MIFARE Plus Card Commands EWTJ680H-I reader module support MIFARE Plus card operation. NXP MIFARE Plus cards are used to instead MIFARE 1 card. We provide application commands are based on Level 3. In the card level 3, the authentication use AES encryption algorithm. In the communication process between module and card, all are using encrypted data + command with MAC + response with MAC mode. So the security of RF communication is extremely high.
East Wind Technologies, Inc. the card. If need switch to Level 1 or Level 3, please tell the suppliers when purchasing. Before using this command, please use MIFARE Plus Write Perso command to write all AES key and the initial value of all the blocks, then make the changed data effect. Host sends: Frame 0x34 Checksum Frame 0x34 Status Success: Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Failure: Frame 3.6.2.
East Wind Technologies, Inc. 3.6.3.2 MIFARE Plus Data Block Read Function: Level 3 command, reading operation of data block; before reading, the relevant block need to be authorized. Host sends: Frame Start Block: Blocks: Success: 0x37 Start Block Blocks Checksum Data Checksum 2 bytes (MSB first). 1 byte, blocks to be read Frame 0x37 Status Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Data: block * 16 bytes Failure: Frame 3.6.3.
East Wind Technologies, Inc. 3.6.3.5 MIFARE Plus Purse Read Function: Level 3 command, reading the balance of the purse. Host sends: Frame 0x3A Block Checksum Block: 2 bytes (MSB first), block number. Success: Frame 0x3A Status Value Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Value: 4 bytes balance of the purse. Failure: Frame 3.6.3.
East Wind Technologies, Inc. sector. Host sends: Frame 0x3D Source Target Checksum Source: 2 bytes (MSB first), source block number Target: 2 bytes (MSB first), target block number Success: Frame 0x3D Status Checksum Status: status code returned from the card. Please reference: MIFARE Plus Returned Status Code. Failure: Frame 3.6.3.9 0xC2 Checksum MIFARE Plus First Authenticate Function: Level 1/3 Command.
East Wind Technologies, Inc. 3.6.4 MIFARE Plus Returned Status Code There is a status code after MIFARE Plus card response; this table indicates the possible value. HEX Code 0x90 Status Explanation OPERATION_SUCCESS Normal operation ends 0x06 AUTHENTICATION_ERROR 0x07 COMMAND_OVERFLOW Authentication conditions are not met; No exist block; The block is visited in a numeric format R&W is not ainnumeric block. Plaintext a task Overflow. 0x08 INVALID_MAC MAC error.
East Wind Technologies, Inc. 3.7 DESFire Card Commands We are here to provide a separate operation for DESFire card. DESFire card authentication and communication use DES encryption algorithm. The encryption of communication between EWTJ680H-H-I and DESFire cards is set by users. If the user sets the RF communication process is encrypted then the card data security is extremely high. Use the following command allows the user to quickly start DESFire card R&D works.
East Wind Technologies, Inc. SenssionKey: 16 bytes. The senssion key will be sent back only after a successful authentication. The senssion key will be used in the following card operations. It is the key to decrypt the encrypted data in encrypted communication process. Failure: Frame 3.7.1.5 0x6F Checksum DESFire Authenticate first step Get ekNo (RndB) Function: Authentication is initiated by the module. Get the ekNo (RndB) from the card.
East Wind Technologies, Inc. 3.7.1.7 DESFire Select Application Function: Select the specified card application. The following operation will effect to this application. Host sends: Frame 0x98 AID Checksum Status Checksum AID: 3 bytes (LSB in first). Success: Frame 0x98 Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x67 Checksum 3.7.2 DESFire Initialization Commands 3.7.2.
East Wind Technologies, Inc. 3.7.2.3 DESFire Change Key Settings Function: Modify the master key/application master key configuration setting. DES/3DES encryption and CRC checksum will be used in the process of instruction execution. Host sends: Frame 0x91 KeySettings Checksum KeySettings: 8 bytes encrypted key settings. Success: Frame 0x91 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 3.7.2.
East Wind Technologies, Inc. 3.7.2.6 DESFire Get Key Version Function: Get the key version information. Host sends: Frame 0x94 KeyID Checksum KeyID: 1 byte. Success: Frame 0x94 Status Version Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Version: 1 byte. Failure: Frame 3.7.2.7 0x6B Checksum DESFire Delete Application Function: Delete the specified application.
East Wind Technologies, Inc. Success: Frame 0x97 Status AID Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. AID: Application identifier length is 3 bytes, the length is 3* identification number. Failure: Frame 0x68 Checksum 3.7.2.10 DESFire Get File IDs Function: Get all file identifier of current application. Host sends: Frame 0x9B Checksum Frame 0x9B Status Success: FID Checksum Status: status code returned from the card.
East Wind Technologies, Inc. Host sends: Plaintext: Frame 0x9D File ID Comm.Sett AccessRight 0x9D File ID EncryptedSetting Checksum Cryptograph: Frame Checksum File ID: 1 byte. Comm.Sett: 1byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption. AccessRight: 2 bytes (LSB in first). EncryptedSetting: 8 bytes, 1 byte communication setting + 2 bytes file permission + 2 bytes CRC + 3 bytes 0x00 got via encryption.
East Wind Technologies, Inc. Frame 0x9F Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x60 Checksum 3.7.2.15 DESFire Create Value File Function: Create Value File in current application, support backup mechanism. Host sends: Frame 0xA0 FID Comm. Sett Access Right Lower limit Upper limit Value Limited Credit enable Checks um FID: 1 byte. Comm.Sett: 1byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption.
East Wind Technologies, Inc. 3.7.2.17 DESFire Create Cyclic Record File Function: Create Cyclic Record File in the current application. Host sends: Frame 0xA2 FID: Comm.Sett: AccessRight: Record Size: Max Records: Success: Comm. Sett FID Access Right Record Size Max Records Checksum 1 byte. 1byte, 0: Plaintext; 1: MAC code checksum; 3: DES/3DES encryption. 2 bytes (LSB in first). 3 bytes (LSB in first), bytes of single record. 3 bytes (LSB in first), total record numbers of the file.
East Wind Technologies, Inc. Status: status code returned from the card. Please reference: DESFire Returned State Code. Data: data returned from the card. Failure: Frame 3.7.3.2 0x5B Checksum DESFire Write Data Function: Write specified Data File (Standard Data File or Backup Fata File) in current application. For Backup Data File, Commit is needed to take effect after write, refer to: DESFire Commit Transaction please.
East Wind Technologies, Inc. Host sends: Frame FID: Data: 0xA7 FID Data Checksum 1 byte. There are two lengths, depending on whether encryption. Plaintext: 4 bytes value (LSB in first). Encryption: 8 bytes encrypted data, After decryption: 4 bytes value (LSB first) + 2 bytes CRC + 2 bytes 0x00. Success: Frame 0xA7 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 3.7.3.
East Wind Technologies, Inc. Frame 0xA9 Status Checksum Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 3.7.3.7 0x56 Checksum DESFire Write Record Function: Write data to specified Data File in current application. The data file could be Linear Record or Cyclic Record file. This command appends one record at the end of the record file. The status will show an error when the linear record file is full.
East Wind Technologies, Inc. 3.7.3.9 DESFire Clear Record File Function: Clear specified Record File of current application. Commitment is needed to take effect after this operation, refer to: DESFire Commit Transaction please. Host sends: Frame 0xAC FID Checksum 0xAC Status Checksum FID: 1 byte. Success: Frame Status: status code returned from the card. Please reference: DESFire Returned State Code. Failure: Frame 0x53 Checksum 3.7.3.
East Wind Technologies, Inc. 3.7.
East Wind Technologies, Inc. 3.8 SR176 Card Commands 3.8.1 SR Serial Cards 1 Slot Initiate Card Function: SR serial cards (SR176/SRI512/SRI1K/SRI2K/SRI4K/SRIX4K, the same below) single channel initiate card. Before read/write card, it needs to use the command of “SR serial cards select” to select the card. More detailed card operations please refer to the card manual please. Host sends: Frame 0x63 Checksum Frame 0x63 Card ID Success: Checksum Card ID: 1 byte. It is a random ID.
East Wind Technologies, Inc. 3.8.4 SR176 Card Read Function: Read data block of SR176 card. Host sends: Frame StartBlock: BlockNumbers: Success: 0x68 StartBlock BlockNumbers Checksum 1 byte. 1 byte; the quantity of blocks to be read. Frame 0x68 Data Checksum Data: 2 bytes * BlockNumbers, data from the card. Failure: Frame 0x97 Checksum 3.8.5 SR176 Card Write Function: Write into the data block of SR176 card. After wrote, module will read the data to compare. If not equal, then return failure.
East Wind Technologies, Inc. 3.9 SRI512/1K/2K/4K Card Commands 3.9.1 SRI Serial Cards 1 Slot Initiate Card Please reference: SR serial cards 1 slot initiate card. 3.9.2 SRI Serial Cards 16 Slots Initiate Card Function: SR serial cards (SRI512/SRI1K/SRI2K/SRI4K/SRIX4K, the same below) 16 channels initiate card.
East Wind Technologies, Inc. 3.9.6 SRI Serial Cards Read Function: Read data block of SRI serial card. Host sends: Frame StartBlock: BlockNumbers: Success: Frame 0x6B StartBlock BlockNumbers Checksum 1 byte. 1 byte; the quantity of blocks to be read. 0x6B Data Checksum Data: 4 bytes * BlockNumbers, data from the card. Failure: Frame 0x94 Checksum 3.9.7 SRI Serial Cards Write Function: Write data block of SRI serial card. After write, module will read the data to compare.
East Wind Technologies, Inc. 3.9.9 SRI Serial Cards Read UID Function: Read UID of SRI serial card. Host sends: Frame 0x6E Checksum Frame 0x6E UID Success: Checksum UID: 8 bytes, UID of CURRENT CARD. Failure: Frame 0x91 Checksum 3.9.10 SRIX Serial Cards Authentication Function: SRIX serial card authentication; Anti clone function of the SRIX serial card. Host sends: Frame 0x6F Data Checksum Result Checksum Data: 6 bytes, data input. Success: Frame 0x6F Result: 3 bytes, result return.
East Wind Technologies, Inc. 3.10 Felica Card Commands 3.10.1 Send APDU to Felica card Function: Use this command to send / receive APDU to / from Felica card. Host sends: Frame 0x2F APDU command Checksum APDU: Please refer to Felica user manual for detailed APDU command. Success: Frame 0x2F Response Checksum Response: Felica card answers. Response length depends on each command. Failure: Frame 0xD0 Checksum 3.10.2 Polling Function: Use this command to acquire and identify a card.
East Wind Technologies, Inc. The upper 4 bits of IDm of System 0 is 0000b, so (for example), the upper 4 bits of IDm of System 1 becomes 0001b. • Manufacture Parameter (PMm) PMm consists of IC Code (2 Bytes) and the maximum response time parameters (6 Bytes). o IC Code (2 Bytes) This is the information to identify a product. IC code consists of two components, i.e., ROM Type and IC Type.
East Wind Technologies, Inc. Frame 0x2F Response Checksum Response: Felica card answers. Failure: Frame 0xD0 Checksum Example: Send: 0x22 2F 20 08 01 2E 3D 23 BA 07 5C 45 01 09 00 01 80 00 11 22 33 44 55 66 77 88 11 22 33 44 55 66 77 88 Response: 0x0E 2F 0C 09 01 2E 3D 23 BA 07 5C 45 00 00 19 Copyright © 2022 East Wind Technologies, Inc. All rights reserved.