Datasheet

NXP Semiconductors
MF0ICU2
MIFARE Ultralight C - Contactless ticket IC
MF0ICU2 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2019. All rights reserved.
Product data sheet Rev. 3.3 — 30 July 2019
COMPANY PUBLIC 137633 20 / 36
A roll-over mechanism is implemented to continue reading from page 00h once the
end of the accessible memory is reached. For example, reading from address 29h on a
MF0ICU2 results in pages 29h, 2Ah, 2Bh and 00h being returned.
The following conditions apply if part of the memory is protected by the 3DES
authentication for read access:
• if the MF0ICU2 is in the ACTIVE state
– addressing a page which is equal or higher than AUTH0 results in a NAK response
– addressing a page lower than AUTH0 results in data being returned with the roll-over
mechanism occurring just before the AUTH0 defined page
• if the MF0ICU2 is in the AUTHENTICATED state
– the READ command behaves like on a MF0ICU2 without access protection
aaa-006284
CRC
CRC
AddrPCD Cmd
Data
PICC ,,ACK''
368 µs 1548 µs
PICC ,,NAK'' NAK
Time out
T
TimeOut
T
NAK
T
ACK
57 µs
Figure 11. READ
Table 17. READ command
Name Code Description Length
Cmd 30h read four pages 1 byte
Addr - start page address ‘00h’ to ‘2Bh‘ 1 byte
CRC - CRC according to Ref. 2 2 bytes
Data - data content of the addressed pages 16 bytes
NAK see Table 15 see Section 8.3 4-bit
Table 18. READ timing
These times exclude the end of communication of the PCD.
T
ACK
min T
ACK
max T
NAK min
T
NAK max
T
TimeOut
READ n=9 T
TimeOut
n=9 T
TimeOut
5 ms
9.3 WRITE
The WRITE command is used to program the lock bytes in page 02h, the OTP bytes in
page 03h, data bytes in pages 04h to 27h, configuration data from page 28h to 2B and
keys from page 2Ch to 2Fh. A WRITE command is performed page-wise, programming 4
bytes in a page.The WRITE command is shown in Figure 12 and Table 19.