STMicroelectronics-M24LR04E-RMC6T-2

Part #STMicroelectronics-M24LR04E-RMC6T-2
Download 
STMicroelectronics-M24LR04E-RMC6T-2
M24LR04E-R  
Dynamic NFC/RFID tag IC with 4-Kbit EEPROM,  
energy harvesting, I²C bus and ISO 15693 RF interface  
Datasheet
–
production data  
•
From tag: load modulation using Manchester  
coding with 423 kHz and 484 kHz subcarriers  
in low (6.6 kbit/s) or high (26 kbit/s) data rate  
mode. Supports the 53 kbit/s data rate with  
SO8 (MN)  
150 mils width  
Fast commands  
UFDFPN8 (MC)  
TSSOP8 (DW)  
•
Internal tuning capacitance: 27.5pF  
•
64-bit unique identifier (UID)  
•
Read Block & Write (32-bit blocks)  
Digital output pin  
•
User configurable pin: RF write in progress or  
RF busy mode  
Wafer (SB12I)  
Energy harvesting  
•
Analog pin for energy harvesting  
•
4 sink current configurable ranges  
Features  
•
Belonging to ST25 family, which includes all  
Temperature range  
NFC/RF ID tag and reader products from ST  
•
From –40 to 85 °C  
I

2

C interface  
2
Memory  
•
Two-wires I
 
C serial interface supports  
400 kHz protocol  
•
4-Kbit EEPROM organized into:  
2
– 512
 
bytes in I
 
C mode  
•
Single supply voltage:  
– 128
 
blocks of 32 bits in RF mode  
– 1.8
 
V to 5.5 V  
•
Write time  
•
Byte and Page Write (up to 4 bytes)  
•
Random and Sequential read modes  
•
Self-timed programming cycle  
•
Automatic address incrementing  
•
Enhanced ESD/latch-up protection  
•
I²C timeout  
2
– I
 
C: 5 ms (max.)  
–
RF: 5.75 ms including the internal Verify time  
•
Write cycling endurance:  
– 1
 
million write cycles at 25 °C  
– 150k
 
write cycles at 85 °C  
•
More than 40-year data retention  
•
Multiple password protection in RF mode  
Contactless interface  
2
•
Single password protection in I
 
C mode  
•
ISO 15693 and ISO 18000-3 mode 1 compatible  
•
Package  
•
13.56 MHz ± 7 kHz carrier frequency  
®
– SO8
 
(ECOPACK2 )  
•
To tag: 10% or 100% ASK modulation using 1 out  
of 4 (26 Kbit/s) or 1 out of 256 (1.6 Kbit/s) pulse  
position coding  
®
– TSSOP8
 
(ECOPACK2 )  
®
– UFDFPN8
 
(ECOPACK2 )  
July 2017  
DocID022208 Rev 11  
1/146  
This is information on a product in full production.  
 

Contents  
M24LR04E-R  
Contents  

V

SS

ground . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
16  

Supply voltage (V

CC

) .
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
16  
CC .
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
.
1
6  
2

I

C device operation
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31  
2/146  
DocID022208 Rev 11  

M24LR04E-R  
Contents  

5.16 M24LR04E-R

2

C password security
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
38  
2

5.16.1 I

C present password command description . . . . . . . . . . . . . . . . . . . . . 38  
2

5.16.2 I

C write password command description
 
. . . . . . . . . . . . . . . . . . . . . . . 39  
Initial dialog for vicinity cards
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
43  
Operating field
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43  
Communication signal from VCD to M24LR04E-R . . . . . . . . . . . . . . . . 44  
Data rate and data coding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46  

Da

ta coding mode: 1 out of 256
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
46  
Data coding mode: 1 out of 4
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
47  
VCD to M24LR04E-R frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
48  
DocID022208 Rev 11  
3/146  
7

Contents  
M24LR04E-R  
Communication signal from M24LR04E-R to VCD . . . . . . . . . . . . . . . . 50  

10.1

Load modulation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
50  

10.2

Subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
50  

10.3

Data rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
50  
Bit representation and coding
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51  

11.1

Bit coding using one subcarrier
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
51  

11.2

Bit coding using two subcarriers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
53  
M24LR04E-R to VCD frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54  

12.1

SOF when using one subcarrier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
54  
Unique identifier (UID)
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58  

15.1

CRC .
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
60  
M24LR04E-R protocol description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61  
4/146  
DocID022208 Rev 11  

M24LR04E-R  
Contents  
Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65  

18.1

Addressed mode
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
65  

18.2

Non-addressed mode (general request)
 
. . . . . . . . . . . . . . . . . . . . . . . . .
 
65  

18.3

Select mode
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
65  
Request format
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66  

Request processing by the M24LR04E-R

. . . . . . . . . . . . . . . . . . . . . . . 72  

25.3 t

3

: VCD new request delay when no response is received  

from

the M24LR04E-R
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
76  
DocID022208 Rev 11  
5/146  
7

Contents  
M24LR04E-R  
2

I

C DC and AC parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121  
6/146  
DocID022208 Rev 11  

M24LR04E-R  
Contents  

Appendix A

Anticollision algorithm (informative) . . . . . . . . . . . . . . . . . . . . . . . 139  
Algorithm for pulsed slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
139  

Appendix B

CRC (informative)
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140  
CRC error detection method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
140  
CRC calculation example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
140  

Appendix C

(informative) . . . . . . . . . . . . . . 143  
DocID022208 Rev 11  
7/146  
7

List of tables  
M24LR04E-R  
List of tables  
CRC transmission rules
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60  
M24LR04E-R Response frame format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61  
8/146  
DocID022208 Rev 11  

M24LR04E-R  
List of tables  
DocID022208 Rev 11  
9/146  
10  

List of tables  
M24LR04E-R  

Table 118.

C operating conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121  

Table 121.

C DC characteristics
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122  
2

Table 122.

C AC characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123  

Table 132.

CRC definition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140  
10/146  
DocID022208 Rev 11  

M24LR04E-R  
List of figures  
List of figures  

I

C Fast mode (f
 
= 400 kHz): maximum R  
value vs. bus parasitic capacitance (C
 
) 17  
C
bus  
bus  
2

I

C bus protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17  

Figure 12.

C present password command
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38  
2

Figure 13.

C write password comman
d
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3
9  

Figure 17.

Detail of a time perio
d
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4
7  

Figure 20.

SOF to select 1 out of 256 data coding mode
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49  

Figure 21.

SOF to select 1 out of 4 data coding mode
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49  

Figure 22.

EOF for either data coding mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49  
DocID022208 Rev 11  
11/146  
12  

List of figures  
M24LR04E-R  

Figure 49.

M24LR04E-R state transition diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64  

Figure 80.

C AC waveforms
 
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124  
12/146  
DocID022208 Rev 11  

M24LR04E-R  
Description  
1
Description  
The M24LR04E-R device is a Dynamic NFC/RFID tag IC with a dual-interface, electrically  
erasable programmable memory (EEPROM). The logic scheme is shown in

.  
2
It features an I
 
C interface and can be operated from a V
 
power supply. It is also a  
CC  
contactless memory powered by the received carrier electromagnetic wave. The  
2
M24LR04E-R is organized as 512 × 8 bits in the I
 
C mode and as 128 × 32 bits in RF mode.  
The M24LR04E-R also features an energy harvesting analog output, as well as a user-  
configurable digital output pin toggling during either RF write in progress or RF busy mode.  
Figure 1. Logic diagram  
9

&&
 

6&/
 
9

RXW
 

6’$
 
0ꢅꢀ/5ꢁꢀ(ꢆ5
 
$&ꢁ
 
5)ꢇ:,3ꢇꢈꢇ%86<
 
$&ꢄ
 
9

66
 

06ꢀꢁꢂꢁꢃ9ꢄ
 
2
I C
 
uses a two-wire serial interface, comprising a bidirectional data line and a clock line. The  
2
devices carry a built-in 4-bit device type identifier code (1010) in accordance with the I C  
bus definition.  
2
The device behaves as a slave in the I
 
C protocol, with all memory operations synchronized  
by the serial clock. Read and Write operations are initiated by a Start condition, generated  
by the bus master. The Start condition is followed by a device select code and Read/Write  
bit (RW) (as described in

), terminated by an acknowledge bit.  
th  
When writing data to the memory, the device inserts an acknowledge bit during the 9
 
bit  
time, following the bus master’s 8-bit transmission. When data is read by the bus master,  
the bus master acknowledges the receipt of the data byte in the same way. Data transfers  
are terminated by a Stop condition after an Ack for Write, and after a NoAck for Read.  
In the ISO15693/ISO18000-3 mode 1 RF mode, the M24LR04E-R is accessed via the  
13.56 MHz carrier electromagnetic wave on which incoming data are demodulated from the  
received signal amplitude modulation (ASK: amplitude shift keying). When connected to an  
antenna, the operating power is derived from the RF energy and no external power supply is  
required. The received ASK wave is 10% or 100% modulated with a data rate of 1.6 Kbit/s  
using the 1/256 pulse coding mode or a data rate of 26 Kbit/s using the 1/4 pulse coding  
mode.  
Outgoing data are generated by the M24LR04E-R load variation using Manchester coding  
with one or two subcarrier frequencies at 423 kHz and 484 kHz. Data are transferred from  
the M24LR04E-R at 6.6 Kbit/s in low data rate mode and 26 Kbit/s high data rate mode. The  
DocID022208 Rev 11  
13/146  
145  
 
 

Description  
M24LR04E-R  
M24LR04E-R supports the 53 Kbit/s fast mode in high data rate mode using one subcarrier  
frequency at 423 kHz.  
The M24LR04E-R follows the ISO 15693 and ISO 18000-3 mode 1 recommendation for  
radio-frequency power and signal interface.  
The M24LR04E-R provides an Energy harvesting mode on the analog output pin Vout.  
When the Energy harvesting mode is activated, the M24LR04E-R can output the excess  
energy coming from the RF field on the Vout analog pin. In case the RF field strength is  
insufficient or when Energy harvesting mode is disabled, the analog output pin Vout goes  
into high-Z state and Energy harvesting mode is automatically stopped.  
The M24LR04E-R features a user configurable digital out pin RF WIP/BUSY that can be  
used to drive a micro controller interrupt input pin (available only when the M24LR04E-R is  
correctly powered on the Vcc pin).  
When configured in the RF write in progress mode (RF WIP mode), the RF WIP/BUSY pin is  
driven low for the entire duration of the RF internal write operation. When configured in the  
RF busy mode (RF BUSY mode), the RF WIP/BUSY pin is driven low for the entire duration  
of the RF command progress.  
The RF WIP/BUSY pin is an open drain output and must be connected to a pull-up resistor.  
Table 1. Signal names  
Signal name  
Function  
Direction  
Analog output  
Vout  
Energy harvesting Output  
Serial Data  
SDA  
I/O  
SCL  
Serial Clock  
Input  
AC0, AC1  
V

CC  

Antenna coils  
Supply voltage  
Digital signal  
Ground  
I/O  
–
RF WIP/BUSY  
V

SS  

Digital output  
–
Figure 2. 8-pin package connections  
9

RXW
 

ꢄ
ꢅ
ꢃ
ꢀ
ꢋ
ꢊ
ꢌ
ꢂ
9

&&
 

$&ꢁ
 
5)ꢇ:,3ꢈ%86<
 
6&/
 
$&ꢄ
 
9

66
 

6’$
 
06ꢄꢉꢊꢀꢅ9ꢄ
 
1. See
 

for package dimensions, and how to identify pin-1.  
14/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Signal descriptions  
2
Signal descriptions  
2.1  
Serial clock (SCL)  
This input signal is used to strobe all data in and out of the device. In applications where this  
signal is used by slave devices to synchronize the bus to a slower clock, the bus master  
must have an open drain output, and a pull-up resistor must be connected from Serial Clock  
(SCL) to V
 
. (

indicates how the value of the pull-up resistor can be calculated). In  
CC  
most ap

gh, this method of synchronization is not employed, and so the pull-  
up resistor is not necessary, provided that the bus master has a push-pull (rather than open  
drain) output.  
2.2  
2.3  
2.4  
Serial data (SDA)  
This bidirectional signal is used to transfer data in or out of the device. It is an open drain  
output that may be wire-OR’ed with other open drain or open collector signals on the bus. A  
pull up resistor must be connected from Serial Data (SDA) to V
 
. (

indicates how  
CC  
the value of the pull-up resistor can be calculated).  
RF Write in progress / RF Busy (RF WIP/BUSY)  
This configurable output signal is used either to indicate that the M24LR04E-R is executing  
an internal write cycle from the RF channel or that an RF command is in progress. RF WIP  
and signals are available only when the M24LR04E-R is powered by the Vcc pin. It is an  
open drain output and a pull up resistor must be connected from RF WIP/BUSY to V  
.
CC  
Energy harvesting analog output (Vout)  
This analog output pin is used to deliver the analog voltage Vout available when the Energy  
harvesting mode is enabled and the RF field strength is sufficient. When the Energy  
harvesting mode is disabled or the RF field strength is not sufficient, the energy harvesting  
analog voltage output Vout is in high-Z state.  
2.5  
Antenna coil (AC0, AC1)  
These inputs are used to connect the device to an external coil exclusively. It is advised not  
to connect any other DC or AC path to AC0 or AC1.  
When correctly tuned, the coil is used to power and access the device using the ISO 15693  
and ISO 18000-3 mode 1 protocols.  
2.5.1  
Device reset in RF mode  
To
e
nsure a proper reset of the RF circuitry, the RF field must be turned off (100%  
modulation) for a minimum t  
period of time.  
RF_OFF  
DocID022208 Rev 11  
15/146  
145  
 
 
 
 
 
 
 

Signal descriptions  
M24LR04E-R  
2.6  
V

SS

ground  
V
is the reference for the V
 
supply voltage and Vout analog output voltage.  
CC  
SS  
2.7  
Supply voltage (V

CC

)  
This pin can be connected to an external DC supply voltage.  
Note:  
An internal voltage regulator allows the external voltage applied on V
 
to supply the  
CC  
M24LR04E-R, while preventing the internal power supply (rectified RF waveforms) to output  
a DC voltage on the V
 
pin.  
CC  
2.7.1  
Operating supply voltage V  
CC  
Prior to selecting the memory and issuing instructions to it, a valid and stable V
 
voltage  
within the specified [V
 
(min), V
 
(max)] range must be applied (see

).
T
o  
CC  
CC  
maintain a stable DC supply voltage, it is recommended to decoup

ith a  
CC  
suitable capacitor (usually of the order of 10 nF) close to the V
 
/V package
 
pins.  
CC SS  
This voltage must remain stable and valid until the end of the transmission of the instruction  
and, for a Write instruction, until the completion of the internal I²C write cycle (t
 
).  
W
2.7.2  
2.7.3  
Power-up conditions  
When the power supply is turned on, V
 
rises from V
 
to V
 
. The V
 
rise time must not  
vary faster than 1V/µs.  
CC  
SS  
CC  
CC  
Device reset in I²C mode  
In order to prevent inadvertent write operations during power-up, a power-on reset (POR)  
circuit is included. At power-up (continuous rise of V
 
), the device does not respond to any  
CC  
I²C instruction until V
 
has reached the power-on reset threshold voltage (this threshold is  
CC  
lower than the minimum V
 
operating voltage defined in

). When V
 
passes  
CC  
CC  
over the POR threshold, the device is reset and enters th

wer mode. However,  
the device must not be accessed until V
 
has reached a valid and stable V
 
voltage  
CC  
CC  
within the specified [V
 
(min), V
 
(max)] range.  
CC  
CC  
In a similar way, during power-down (continuous decrease in V
 
), as soon as V
 
drops  
CC  
CC  
below the power-on reset threshold voltage, the device stops responding to any instruction  
sent to it.  
2.7.4  
Power-down conditions  
During power-down (continuous decay of V
 
), the device must be in Standby power mode  
CC  
(mode reached after decoding a Stop condition, assuming that there is no internal write  
cycle in progress).  
16/146  
DocID022208 Rev 11  
 
 
 
 
 
 

M24LR04E-R  
Signal descriptions  
2
Figure 3. I C Fast mode (
f
= 400 kHz): maximum R  
value vs. bus parasitic capacitance (C  
)
C
bus  
bus  
ꢀꢅꢅ  
4HE 2  
X #
 
TIME CONSTANT  
BUS  
BUS  
MUST BE BELOW THE ꢁꢅꢅ NS  
TIME CONSTANT LINE REPRESENTED  
ON THE LEFTꢌ  
6
##  
ꢀꢅ  
2
BUS  
(ERE 2  
BUS  
§ #
 
ꢊ ꢀꢉꢅ NS  
BUS  
ꢁ K
½
 
3#,  
3$!  
)£# BUS  
MASTER  
-ꢉꢁXXX  
ꢀ
ꢋꢅ P&  
#
BUS  
ꢀꢅ  
ꢀꢅꢅ  
“US LINE CAPACITOR ꢆP&ꢇ  
ꢀꢅꢅꢅ  
AIꢀꢁꢂꢃꢄB  
2
Figure 4. I
 
C bus protocol  
DocID022208 Rev 11  
17/146  
145  
 
 

Signal descriptions  
M24LR04E-R  
Table 2. Device select code  
Device type identifier

(1)  

Chip Enable address  
RW  
–
b7  
b6  
b5  
b4  
b3  
b2  
b1  
b0  
Device select code  
1
0
1
0
E2

(2)  

1
1
RW  
1. The
 
most significant bit, b7, is sent first.  
2. E2
 
is not connected to any external pin. It is however used to address the M24LR04E-R as described in  
Table 3. Address most significant byte  
b15  
b7  
b14  
b6  
b13  
b12  
b11  
b10  
b9  
b1  
b8  
b0  
Table 4. Address least significant byte  
b5 b4 b3 b2  
18/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
User memory organization  
3
User memory organization  
The M24LR04E-R is divided into four sectors of 32 blocks of 32 bits, as shown in

.  

Figure 6

shows the memory sector organization. Each sector can be individually read-  
and/or write-protected using a specific password command. Read and write operations are  
possible if the addressed data are not in a protected sector.  
The M24LR04E-R also has a 64-bit block that is used to store the 64-bit unique identifier  
(UID). The UID is compliant with the ISO 15963 description, and its value is used during the  
anticollision sequence (Inventory). This block is not accessible by the user in RF device  
operation and its value is written by ST on the production line.  
The M24LR04E-R includes an AFI register that stores the application family identifier, and a  
DSFID register that stores the data storage family identifier used in the anticollision  
algorithm.  
2
The M24LR04E-R has four 32-bit blocks that store an I
 
C password plus three RF password  
codes.  
Figure 5. Circuit diagram  
9

RXW
 

((3520
 
5)ꢇ:,3ꢈ%86<
 
/DWFK
 
/RJLF
 
$&ꢁ
 
$&ꢄ
 
6&/
 
6’$
 
5)
 
,

ꢅ

&
 
9

&&
 

9

66
 

5)ꢇ9

&&
 

3RZHUꢇPDQDJHPHQW
 
&RQWDFWꢇ9

&&
 

06ꢀꢁꢂꢁꢂ9ꢄ
 
DocID022208 Rev 11  
19/146  
145  
 
 

User memory organization  
M24LR04E-R  
Figure 6. Memory sector organization  
6HFWRUꢀVHFXULW  
6HFWRU  
$UHD  
VWDWXV  
ꢂꢇELWV
 
ꢁ
ꢄ
ꢅ
ꢃ
ꢄꢇ.ELWꢇ((3520ꢇVHFWRU
 
ꢄꢇ.ELWꢇ((3520ꢇVHFWRU
 
ꢄꢇ.ELWꢇ((3520ꢇVHFWRU
 
ꢄꢇ.ELWꢇ((3520ꢇVHFWRU
 
ꢂꢇELWV
 
ꢂꢇELWV
 
ꢂꢇELWV
 
,ð&ꢇSDVVZRUG
 
5)ꢇSDVVZRUGꢇꢄ
 
5)ꢇSDVVZRUGꢇꢅ
 
5)ꢇSDVVZRUGꢇꢃ
 
ꢋꢆELWꢇ’6),’
 
6VWHP
 
6VWHP
 
6VWHP
 
6VWHP
 
6VWHP
 
6VWHP
 
ꢋꢆELWꢇ$),
 
ꢌꢀꢆELWꢇ8,’
 
ꢋꢆELWꢇFRQILJXUDWLRQ
 
6VWHP
 
ꢄꢌꢆELWꢇꢇ,ð&ꢇ:ULWHꢇ/RFNBELW
 
ꢅꢁꢆELWꢇ666
 
6VWHP
 
6VWHP
 
06ꢄꢉꢊꢌꢌ9ꢄ
 
Sector details  
The M24LR04E-R user memory is divided into four sectors. Each sector contains 1024 bits.  
The protection scheme is described in

.  
In RF mode, a sector provides 32 blocks of 32 bits. Each read and write access is done by  
block. Read and write block accesses are controlled by a Sector Security Status byte that  
defines the access rights to the 32 blocks contained in the sector. If the sector is not  
protected, a Write command updates the complete 32 bits of the selected block.  
2
In I
 
C mode, a sector provides 128 bytes that can be individually accessed in Read and  
Write modes. When protected by the corresponding I2C_Write_Lock bit, the entire sector is  
2
write-protected.
T
o
a
ccess the user memory, the device select code used for any I
 
C  
command must have the E2 Chip Enable address at 0.  
20/146  
DocID022208 Rev 11  
 

M24LR04E-R  
User memory organization  
Table 5. Sector details  
I

2

C byte  
Sector  
number  
RF block  
address  
Bits [31:24]
 
Bits [23:16]  
Bits [15:8]  
Bits [7:0]  
address  
0
0
4
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
user  
1
2
8
3
12  
16  
20  
24  
28  
32  
36  
40  
44  
48  
52  
56  
60  
64  
68  
72  
76  
80  
84  
88  
92  
96  
100  
104  
108  
112  
116  
120  
124  
4
5
6
7
8
9
10  
11  
12  
13  
14  
15  
16  
17  
18  
19  
20  
21  
22  
23  
24  
25  
26  
27  
28  
29  
30  
31  
0
DocID022208 Rev 11  
21/146  
145  
 

User memory organization  
M24LR04E-R  
Bits [7:0]  
Table 5. Sector details (continued)  
Sector  
RF block  
I

2

C byte  
Bits [31:24]
 
Bits [23:16]  
address  
Bits [15:8]  
number  
address  
32  
33  
34  
35  
36  
37  
38  
39  
…  
128  
132  
136  
140  
144  
148  
152  
156  
…  
user  
user  
user  
user  
user  
user  
user  
user  
…  
user  
user  
user  
user  
user  
user  
user  
user  
…  
user  
user  
user  
user  
user  
user  
user  
user  
…  
user  
user  
user  
user  
user  
user  
user  
user  
…  
1
2
3
…  
…  
…  
…  
…  
…  
…  
…  
…  
…  
…  
…  
127  
508  
user  
user  
user  
user  
22/146  
DocID022208 Rev 11  

M24LR04E-R  
System memory area  
4
System memory area  
4.1  
M24LR04E-R block security in RF mode  
The M24LR04E-R provides a special protection mechanism based on passwords. In RF  
mode, each memory sector of the M24LR04E-R can be individually protected by one out of  
three available passwords, and each sector can also have Read/Write access conditions  
set.  
Each memory sector of the M24LR04E-R is assigned with a Sector security status byte  
including a Sector Lock bit, two Password Control bits and two Read/Write protection bits,  
as shown in

.  

T

describes the organization of the Sector security status byte, which can be read  
using the Read Single Block and Read Multiple Block commands with the Option_flag set  
to 1.  
On delivery, the default value of the SSS bytes is set to 00h.  
Table 6. Sector security status byte area  
I

2

C byte address  
Bits [31:24]  
Bits [23:16]  
Bits [15:8]  
Bits [7:0]  
E2 = 1  
0
SSS 3  
SSS 2  
SSS 1  
SSS 0  
Table 7. Sector security status byte organization  
b

7  

0
b

6  

0
b

5  

b

4  

b

3  

b

2  

b

1  

b

0  

Read / Write  
protection bits  
Sector  
Lock  
0
Password control bits  
When the Sector Lock bit is set to 1, for instance by issuing a Lock-sector command, the  
two Read/Write protection bits (b , b ) are used to set the Read/Write access of the sector  
1
2
as described in

.  
Table 8. Read / Write protection bit setting  
Sector  
b

2

, b

1  

Lock  
Sector access  
when password presented  
Sector access  
when password not presented  
0
1
1
1
1
xx  
00  
01  
10  
11  
Read  
Read  
Read  
Read  
Read  
Write  
Write  
Read  
Read  
Write  
No Write  
Write  
Write  
Read  
Write  
No Read  
No Read  
No Write  
No Write  
No Write  
The next two bits of the Sector security status byte (b , b ) are the password control bits.  
3
4
The value of these two bits is used to link a password to the sector, as defined in

.  
DocID022208 Rev 11  
23/146  
145  
 
 
 
 
 

System memory area  
M24LR04E-R  
Table 9. Password control bits  
Password  
b

4

, b

3  

00  
01  
10  
11  
The sector is not protected by a password.  
The sector is protected by password 1.  
The sector is protected by password 2.  
The sector is protected by password 3.  
The M24LR04E-R password protection is organized around a dedicated set of commands,  
plus a system area of three password blocks where the password values are stored. This  
system area is described in

.  
Table 10. Password system area  
Add  
1
2
3
Password 1  
Password 2  
Password 3  
The dedicated commands for protection in RF mode are:  
•
Write-sector password:  
The Write-sector password command is used to write a 32-bit block into the password  
system area. This command must be used to update password values. After the write  
cycle, the new password value is automatically activated. It is possible to modify a  
password value after issuing a valid Present-sector password command. On delivery,  
the three default password values are set to 0000 0000h and are activated.  
•
Lock-sector:  
The Lock-sector command is used to set the sector security status byte of the selected  
sector. Bits b
 
to b
 
of the sector security status byte are affected by the Lock-sector  
4
1
command. The sector lock bit, b , is set to 1 automatically. After issuing a Lock-sector  
0
command, the protection settings of the selected sector are activated. The protection of  
a locked block cannot be changed in RF mode. A Lock-sector command sent to a  
locked sector returns an error code.  
24/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
System memory area  
•
Present-sector password:  
The Present-sector password command is used to present one of the three passwords  
to the M24LR04E-R in order to modify the access rights of all the memory sectors  
linked to that password (

) including the password itself. If the presented  
password is correct, the access rights remain activated until the tag is powered off or  
until a new Present-sector password command is issued. If the presented password  
value is not correct, all the access rights of all the memory sectors are deactivated.  
•
Sector security status byte area access conditions in I2C mode:  
2
In I
 
C mode, read access to the sector security status byte area is always allowed.  
2
Write access depends on the correct presentation of the I C password (see  
2
To
a
ccess the Sector security status byte area, the device select code used for any I
 
C  
command must have the E2 Chip Enable address at 1.  
2
An I
 
C write access to a sector security status byte re-initializes the RF access  
condition to the given memory sector.  
4.1.1  
Example of the M24LR04E-R security protection in RF mode  

T

and

show the sector security protections before and after a valid  
Present-sector password command.

shows the sector access rights of an  
M24LR04E-R after power-up. After a valid Present-sector password command with  
password 1, the memory sector access is changed as shown in

.  
Table 11. M24LR04E-R sector security protection after power-up  
Sector security status byte  
b

7

b

6

b

5

b

4

b

3

b

2

b

1

b

0  

Sector  
address  
Protection  
0
1
2
3
4
Protection: standard  
Read  
No Write  
No Write  
Write  
xxx  
xxx  
xxx  
xxx  
xxx  
0
0
0
0
0
0
1
1
1
1
0
0
0
1
1
0
0
1
0
1
1
1
1
1
1
Protection: password 1
 
Read  
Protection: password 1
 
Read  
Protection: password 1
 
No Read  
Protection: password 1
 
No Read  
No Write  
No Write  
Table 12. M24LR04E-R sector security protection after a valid presentation of  
password 1  
Sector security status byte  
b

7

b

6

b

5

b

4

b

3

b

2

b

1

b

0  

Sector  
address  
Protection  
0
1
2
3
4
Protection: standard  
Read  
Read  
Read  
Read  
Read  
No Write  
Write  
xxx  
xxx  
xxx  
xxx  
xxx  
0
0
0
0
0
0
1
1
1
1
0
0
0
1
1
0
0
1
0
1
1
1
1
1
1
Protection: password 1  
Protection: password 1  
Protection: password 1  
Protection: password 1  
Write  
Write  
No Write  
DocID022208 Rev 11  
25/146  
145  
 
 
 

System memory area  
M24LR04E-R  
4.2  
M24LR04E-R block security in I²C mode (I2C_Write_Lock bit  
area)  
2
In the I
 
C mode only, it is possible to protect individual sectors against Write operations.  
This feature is controlled by the I2C_Write_Lock bits stored in the two bytes of the  
I2C_Write_Lock bit area. I2C_Write_Lock bit area starts from location 2048 (see

).  
2
To
a
ccess the I2C_Write_Lock bit area, the device select code used for any I
 
C command  
must have the E2 Chip Enable address at 1.  
Using these 16 bits, it is possible to write-protect all the four sectors of the M24LR04E-R  
2
memory. Each bit controls the I
 
C write access to a specific sector as shown in

. It  
2
is always possible to unprotect a sector in the I
 
C mode. When an I2C_Write_Lock bit is  
reset to 0, the corresponding sector is unprotected. When the bit is set to 1, the  
corresponding sector is write-protected.  
2
In I
 
C mode, read access to the I2C_Write_Lock bit area is always allowed. Write access  
2
depends on the correct presentation of the I C password.  
On delivery, the default value of the two bytes of the I2C_Write_Lock bit area is reset to 00h.  
Table 13. I2C_Write_Lock bit  
I

2

C byte address  
E2 = 1  
Bits [4:15]  
Bits [3:0]  
2048  
Don’t care  
Sectors 0-3  
4.3  
Configuration byte and Control register  
The M24LR04E-R offers an 8-bit non-volatile Configuration byte located at I²C location 2320  
of the system area used to store the RF WIP/BUSY pin and the energy harvesting  
configuration (see

).  
The M24LR04E-R also offers an 8-bit volatile Control register located at I²C location 2336 of  
the system area used to store the energy harvesting enable bit as well as a FIELD_ON bit  
indicator (see

).  
4.3.1  
RF WIP/BUSY pin configuration  
The M24LR04E-R features a configurable open drain output RF WIP/BUSY pin used to  
provide RF activity information to an external device.  
The RF WIP/BUSY pin functionality depends on the value of bit 3 of the Configuration byte.  
•
RF busy mode  
When bit 3 of the Configuration byte is set to 0, the RF WIP/BUSY pin is configured in RF  
busy mode.  
The purpose of this mode is to indicate to the I²C bus master whether the M24LR04E-R is  
busy in RF mode or not.  
In this mode, the RF WIP/BUSY pin is tied to 0 from the RF command Start Of Frame (SOF)  
until the end of the command execution.  
If a bad RF command is received, the RF WIP/BUSY pin is tied to 0 from the RF command  
SOF until the reception of the RF command CRC. Otherwise, the RF WIP/BUSY pin is in  
high-Z state.  
26/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
System memory area  
When tied to 0, the RF WIP/BUSY signal returns to high-Z state if the RF field is cut-off.  
During execution of I²C commands, the RF WIP/BUSY pin remains in high-Z state.  
•
RF Write in progress  
When bit 3 of the Configuration byte is set to 1, the RF WIP/BUSY pin is configured in RF  
Write in progress mode.  
The purpose of this mode is to indicate to the I²C bus master that some data have been  
changed in RF mode.  
In this mode, the RF WIP/BUSY pin is tied to 0 for the duration of an internal write operation  
(i.e. between the end of a valid RF write command and the beginning of the RF answer).  
During execution of I²C write operations, the RF WIP/BUSY pin remains in high-Z state.  
4.3.2  
Energy harvesting configuration  
The M24LR04E-R features an Energy harvesting mode on the Vout analog output.  
The general purpose of the Energy harvesting mode is to deliver a part of the non-  
necessary RF power received by the M24LR04E-R on the AC0-AC1 RF input in order to  
supply an external device. The current consumption on the analog voltage output Vout is  
limited to ensure that the M24LR04E-R is correctly supplied during the powering of the  
external device.  
When the Energy harvesting mode is enabled and the power delivered on the AC0-AC1 RF  
input exceeds the minimum required P  
, the M24LR04E-R is able to deliver a  
AC0-AC1_min  
limited and unregulated voltage on the Vout pin, assuming the current consumption on the  
Vout does not exceed the I
 
maximum value.  
sink_max  
If one of the condition above is not met, the analog voltage output pin Vout is set in high-Z  
state.  
For robust applications using the Energy harvesting mode, four current fan-out levels can be  
chosen.  
•
Vout sink current configuration  
The sink current level is chosen by programming EH_cfg1 and EH_cfg0 into the  
Configuration byte (see

).  
The minimum power level required on AC0-AC1 RF input P  
voltage Vout, as well as the maximum current consumption I  
, the delivered  
on the Vout pin  
AC0-AC1_min  
sink_max  
corresponding to the <EH_cfg1,EH_cfg0> bit values are described in

.  
Table 14. Configuration byte  
I

2

C byte address
 
Bit 7
 
Bit 6
 
Bit 5
 
Bit 4  
E2=1 2320  
X

(1)

X

(1)

X

(1)

X

(1)

RF WIP/BUSY  
Bit 3  
Bit 2  
BIT 1  
BIT 0  
EH_mode EH_cfg1 EH_cfg0  
1. Bit
 
7 to Bit 4 are don’t care bits.  
DocID022208 Rev 11  
27/146  
145  
 
 

System memory area  
M24LR04E-R  
•
Energy harvesting enable control  
Delivery of Energy harvesting analog output voltage on the Vout pin depends on the value of  
the EH_enable bit of the volatile Control register (see

).  
Table 15. Control register  
I

2

C byte address  
E2=1 2336  
Bit 7  
Bit 6
 
Bit 5
 
Bit 4
 
Bit 3
 
Bit 2  
0

(1)

0

(1)

0

(1)

0

(1)  

BIT 1  
BIT 0  
T-Prog

(1)

0

(1)  

FIELD_ON

(1)

EH_enable  
1. Bit
 
7 to Bit 1 are read-only bits.  
–
When set to 1, the EH_enable bit enables the Energy harvesting mode, meaning  
that the Vout analog output signal is delivered when the P
 
and I  
AC0-AC1_min  
sink_max  
conditions corresponding to the chosen sink current configuration bit are met (see  
–
–
When set to 0, the EH_enable bit disable the Energy harvesting mode and the  
analog output Vout remains in set in high-Z state.  
The T_Prog flag indicates a correct duration of the I²C write time (tw). This bit is  
reset to 0 after POR and at the beginning of each writing cycle; it is set to 1 only  
after a correct completion of the writing cycle.  
•
Energy harvesting default mode control  
At power-up, in I²C or RF mode, the EH_enable bit is updated according to the value of the  
EH_mode bit stored in the non-volatile Configuration byte (see

). In other words,  
the EH_mode bit is used to configure whether the Energy harvesting mode is enabled or not  
by default.  
Table 16. EH_enable bit value after power-up  
Energy harvesting  
EH_mode value  
EH_enable after power-up  
after power-up  
0
1
1
0
enabled  
disabled  
4.3.3  
FIELD_ON indicator bit  
The FIELD_ON bit indicator located as Bit 1 of the Control register is a read-only bit used to  
indicate when the RF power level delivered to the M24LR04E-R is sufficient to execute RF  
commands.  
•
•
When FIELD_ON = 0, the M24LR04E-R is not able to execute any RF commands.  
When FIELD_ON =1, the M24LR04E-R is able to execute any RF commands.  
Note:  
During read access to the Control register in RF mode, the FIELD_ON bit is always read  
at 1.  
28/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
System memory area  
4.3.4  
Configuration byte access in I²C and RF modes  
In I²C mode, read and write accesses to the non-volatile Configuration byte are always  
allowed.
T
o
a
ccess the Configuration byte, the device select code used for any I²C  
command must have the E2 Chip enable address at 1.  
The dedicated commands to access the Configuration byte in RF mode are:  
•
Read configuration byte command (ReadCfg):  
The ReadCfg command is used to read the eight bits of the Configuration byte.  
Write energy harvesting configuration command (WriteEHCfg):  
•
The WriteEHCfg command is used to write the EH_mode, EH_cfg1 and EH_cfg0 bits into  
the Configuration byte.  
•
Write RF WIP/BUSY pin configuration command (WriteDOCfg):  
The WriteDOCfg command is used to write the RF WIP/BUSY bit into the Configuration  
byte.  
After any write access to the Configuration byte, the new configuration is automatically  
applied.  
4.3.5  
Control register access in I²C or RF mode  
In I²C mode, read and write accesses to the volatile Control register are always allowed.
T
o  
access the Control register, the device select code used for any I²C command must have  
the E2 Chip enable address at 1.  
The dedicated commands to access the Control register in RF mode are:  
•
Check energy harvesting enable bit command (CheckEHEn):  
The CheckEHEn command is used to read the eight bits of the Control register. When it is  
run, the FIELD_ON bit is always read at 1.  
•
Set/reset energy harvesting enable bit command (SetRstEHEn):  
The SetRstEHEn command is used to set or reset the value of the EH_enable bit into the  
Control register.  
4.4  
ISO 15693 system parameters  
The M24LR04E-R provides the system area required by the ISO 15693 RF protocol, as  
shown in

.  
2
2
The first 32-bit block starting from I
 
C address 2304 stores the I
 
C password. This  
2
password is used to activate/deactivate the write protection of the protected sector in I
 
C  
mode. At power-on, all user memory sectors protected by the I2C_Write_Lock bits can be  
2
read but cannot be modified.
T
o
r
emove the write protection, it is necessary to use the I C  
present password described in

. When the password is correctly presented — that  
is, when all the presented bits correspond to the stored ones — it is also possible to modify  
2
the I C password using the I2C write password command described in

.  
The next three 32-bit blocks store the three RF passwords. These passwords are neither  
2
read- nor write- accessible in the I
 
C mode.  
DocID022208 Rev 11  
29/146  
145  
 
 
 

System memory area  
M24LR04E-R  
The next byte stores the Configuration byte, at I²C location 2320. This Control register is  
used to store the three energy harvesting configuration bits and the RF WIP/BUSY  
configuration bit.  
2
2
The next two bytes are used to store the AFI, at I
 
C location 2322, and the DSFID, at I C  
location 2323. These two values are used during the RF inventory sequence. They are  
read-only in the I
 
C mode.  
2
The next eight bytes, starting from location 2324, store the 64-bit UID programmed by ST on  
2
the production line. Bytes at I
 
C locations 2332 to 2335 store the IC Ref and the Mem_Size  
data used by the RF Get_System_Info command. The UID, Mem_Size and IC ref values are  
read-only data.  
Table 17. System parameter sector  
I

2

C byte address
 
Bits [31:24]
 
Bits [23:16]  
Bits [15:8]  
Bits [7:0]  
E2 = 1  
E2 = 1  
E2 = 1  
E2 = 1  
E2 = 1  
E2 = 1  
E2 = 1  
2304  
2308  
2312  
2316  
2320  
2324  
2328  
I

2

C password

(1)  

RF password 1

(1)  

RF password 2

(1)  

RF password 3

(1)  

DSFID (FFh)  
UID  
AFI (00h)  
UID  
ST reserved (Exh)

(2)

Configuration byte (F4h)  
UID  
UID  
UID  
UID  
UID (E0h)  
UID (02h)  
RFU  
Mem_Size  
(03 7F)  
E2 = 1  
E2 = 1  
2332  
2336  
–
–
IC Ref (5A)  
(FFh)  
Programming. completion  
and  
–
–
Energy harvesting status

(3)  

1. Delivery
 
state: I

2

C password= 0000 0000h, RF password = 0000 0000h, Configuration byte = F4h  
2. The
 
product revision is the Most significant nibble of the byte located at address 0x911 (2321 d) in the  
system area (Device select code E2 =1). From Rev 6, the product revision value is 0xE. The Least  
significant nibble is ST reserved.  
3. Address
 
system 2336 (920h, E2=1) is the control register.  
Bit 7 is T_Prog (refer to

). When accessed in R
F
,
t
his bit is not significant and set to 0.  
Bits 2-6 are RFU and se

Bit 1 is FIELD_ON (refer to

).  
Bit 0 is EH_enable (refer to

).  
30/146  
DocID022208 Rev 11  
 

2
M24LR04E-R  
I C device operation  
2
5
I C
 
device operation  
2
The device supports the I
 

. Any device that sends  
data to the bus is defined as a transmitter, and any device that reads data is defined as a  
receiver. The device that controls the data transfer is known as the bus master, and the  
other as the slave device. A data transfer can only be initiated by the bus master, which also  
provides the serial clock for synchronization. The M24LR04E-R device is a slave in all  
communications.  
5.1  
5.2  
Start condition  
Start is identified by a falling edge of serial data (SDA) while the serial clock (SCL) is stable  
in the high state. A Start condition must precede any data transfer command. The device  
continuously monitors (except during a write cycle) the SDA and the SCL for a Start  
condition, and does not respond unless one is given.  
Stop condition  
Stop is identified by a rising edge of serial data (SDA) while the serial clock (SCL) is stable  
and driven high. A Stop condition terminates communication between the device and the  
bus master. A Read command that is followed by NoAck can be followed by a Stop condition  
to force the device into the Standby mode. A Stop condition at the end of a Write command  
triggers the internal write cycle.  
5.3  
Acknowledge bit (ACK)  
The acknowledge bit is used to indicate a successful byte transfer. The bus transmitter,  
whether it be bus master or slave device, releases the serial data (SDA) after sending eight  
th  
bits of data. During the 9
 
clock pulse period, the receiver pulls the SDA low to  
acknowledge the receipt of the eight data bits.  
5.4  
5.5  
Data input  
During data input, the device samples serial data (SDA) on the rising edge of the serial clock  
(SCL). For correct device operation, the SDA must be stable during the rising edge of the  
SCL, and the SDA signal must change
only
when the SCL is driven low.  
I²C timeout  
During the execution of an I²C operation, RF communications are not possible.  
To
p
revent RF communication freezing due to inadvertent unterminated instructions sent to  
the I²C bus, the M24LR04E-R features a timeout mechanism that automatically resets the  
I²C logic block.  
DocID022208 Rev 11  
31/146  
145  
 
 
 
 
 
 

2
I C
 
device operation  
M24LR04E-R  
5.5.1  
I²C timeout on Start condition  
I²C communication with the M24LR04E-R starts with a valid Start condition, followed by a  
device select code.  
If the delay between the Start condition and the following rising edge of the Serial Clock  
(SCL) that samples the most significant of the Device Select exceeds the t  
time  
START_OUT  
(see

), the I²C logic block is reset and further incoming data transfer is ignored  
until the next valid Start Condition.  
Figure 7. I²C timeout on Start condition  
6&/
 
6’$
 
W

67$57B287
 

6WDUWꢇFRQGLWLRQ
 
06ꢀꢁꢂꢁꢁ9ꢄ
 
5.5.2  
I²C timeout on clock period  
During data transfer on the I²C bus, the serial clock high pulse width High (
t

) or serial  
clock pulse width Low (
t

CLCH

) exceeds the maximum value specified in

, the I²C  
logic block is reset and any further incoming data transfer is ignored un

Start  
condition.  
5.6  
Memory addressing  
To
s
tart communication between the bus master and the slave device, the bus master must  
initiate a Start condition. Following this, the bus master sends the device select code (shown  
in

) on SDA, most significant bit first).  
Only one memory device can be connected on a single I²C bus. In M24LR04E-R, E1 and E0  
are internally set to 1.  
The eighth bit is the Read/Write bit (RW). It is set to 1 for Read and to 0 for Write operations.  
If a match occurs on the device select code, the corresponding device gives an  
acknowledgment on serial data (SDA) during the ninth bit time. If the device does not match  
the device select code, it deselects itself from the bus, and goes into Standby mode.  
32/146  
DocID022208 Rev 11  
 
 
 
 

2
M24LR04E-R  
I C device operation  
Table 18. Operating modes  
Mode  
RW bit  
Bytes  
Initial sequence  
Current address read  
1
0
1
1
0
0
1
Start, device select, RW = 1  
Start, device select, RW = 0, address  
reStart, device select, RW = 1  
Similar to current or random address read  
Start, device select, RW = 0  
Random address read  
1
Sequential read  
Byte write  
≥
1  
1
Page write  
≤
4 bytes  
Start, device select, RW = 0  
Figure 8. Write mode sequences with I2C_Write_Lock bit = 1 (data write inhibited)  
%WHꢀ:ULWH  
$&.
 
$&.
 
$&.
 
12ꢇ$&.
 
‘HYꢇVHOHFW
 
%WHꢇDGGUHVV
 
%WHꢇDGGUHVV
 
‘DWDꢇLQ
 
5ꢈ:
 
3DJHꢀ:ULWH  
$&.
 
$&.
 
$&.
 
12ꢇ$&.
 
‘DWDꢇLQꢇꢅ
 
12ꢇ$&.
 
12ꢇ$&.
 
12ꢇ$&.
 
‘HYꢇVHOHFW
 
%WHꢇDGGUHVV
 
%WHꢇDGGUHVV
 
‘DWDꢇLQꢇꢄ
 
‘DWDꢇLQꢇ1
 
5ꢈ:
 
06ꢀꢊꢂꢁꢅ9ꢄ
 
DocID022208 Rev 11  
33/146  
145  
 
 

2
I C
 
device operation  
M24LR04E-R  
5.7  
Write operations  
Following a Start condition, the bus master sends a device select code with the Read/Write  
bit (RW) reset to 0. The device acknowledges this, as shown in

, and waits for two  
address bytes. The device responds to each address byte with an acknowledge bit, and  
then waits for the data byte.  
Writing to the memory may be inhibited if the I2C_Write_Lock bit = 1. A Write instruction  
issued with the I2C_Write_Lock bit = 1 and with no I2C_Password presented does not  
modify the memory contents, and the accompanying data bytes are
not
acknowledged, as  
shown in

.  
Each data byte in the memory has a 16-bit (two byte wide) address. The most significant  
byte (

) is sent first, followed by the least significant byte (

). Bits b15 to b0 form  
the address of the byte in memory.  
When the bus master generates a Stop condition immediately after the Ack bit (in the tenth-  
bit time slot), either at the end of a byte write or a page write, the internal write cycle is  
triggered. A Stop condition at any other time slot does not trigger the internal write cycle.  
After the Stop condition, the delay t
 
, and the successful completion of a Write operation,  
W
the device’s internal address counter is incremented automatically, to point to the next byte  
address after the last one that was modified.  
During the internal write cycle, the serial data (SDA) signal is disabled internally, and the  
device does not respond to any requests.  
5.8  
5.9  
Byte write  
After the device select code and the address bytes, the bus master sends one data byte. If  
the addressed location is write-protected by the I2C_Write_Lock bit (= 1), the device replies  
with NoAck, and the location is not modified. If the addressed location is not write-protected,  
the device replies with Ack. The bus master terminates the transfer by generating a Stop  
condition, as shown in

.  
Page write  
The Page write mode allows up to four bytes to be written in a single write cycle, provided  
that they are all located in the same “row” in the memory: that is, the most significant  
memory address bits (b12-b2) are the same. If more bytes are sent than fit up to the end of  
the row, a condition known as “roll-over” occurs. This should be avoided, as data starts to  
become overwritten in an implementation-dependent way.  
The bus master sends from one to four bytes of data, each of which is acknowledged by the  
device if the I2C_Write_Lock bit = 0 or the I2C_Password was correctly presented. If the  
I2C_Write_Lock_bit = 1 and the I2C_password are not presented, the contents of the  
addressed memory location are not modified, and each data byte is followed by a NoAck.  
After each byte is transferred, the internal byte address counter (inside the page) is  
incremented. The transfer is terminated by the bus master generating a Stop condition.  
34/146  
DocID022208 Rev 11  
 
 
 

2
M24LR04E-R  
I C device operation  
Figure 9. Write mode sequences with I2C_Write_Lock bit = 0 (data write enabled)  
!#+  
!#+  
!#+  
!#+  
“YTE 7RITE  
$EV 3ELECT  
“YTE ADDRESS  
“YTE ADDRESS  
$ATA IN  
2ꢎ7  
!#+  
!#+  
!#+  
!#+  
!#+  
!#+  
0AGE 7RITE  
$EV 3ELECT  
“YTE ADDRESS  
“YTE ADDRESS  
$ATA IN ꢀ  
$ATA IN ꢉ  
$ATA IN .  
2ꢎ7  
!)ꢀꢍꢀꢀꢄ  
Figure 10. Write cycle polling flowchart using Ack  
:ULWHꢇFFOHꢇLQꢇSURJUHVV
 
6WDUWꢇFRQGLWLRQ
 
‘HYLFHꢇVHOHFWꢇZLWKꢇ5:ꢇ ꢇꢁ
 
1R
 
$FNꢇUHWXUQHG
 
<
H
V
 
)LUVWꢇEWHꢇRIꢇLQVWUXFWLRQꢇ
 
ZLWKꢇ5:ꢇ ꢇꢁꢇDOUHDGꢇ
 
GHFRGHGꢇEꢇWKHꢇGHYLFH
 
1R
 
<
H
V
 
1R
 
1H[WꢇRSHUDWLRQꢇLV
 
DGGUHVVLQJꢇWKHꢇPHPRU
 
6HQGꢇDGGUHVV
 
DQGꢇ5HFHLYHꢇ$FN
 
5H6WDUW
 
6WRS
 
<
H
V
 
6WDUWꢇFRQGLWLRQ
 
‘DWDꢇIRUꢇWKHꢇ
 
:ULWHꢇRSHUDWLRQ
 
‘HYLFHꢇVHOHFWꢇ
 
ZLWKꢇ5:ꢇ ꢇꢄ
 
&RQWLQXHꢇWKHꢇ
 
:ULWHꢇRSHUDWLRQ
 
&RQWLQXHꢇWKH
 
5DQGRPꢇ5HDGꢇRSHUDWLRQ
 
06ꢀꢁꢂꢁꢌ9ꢄ
 
DocID022208 Rev 11  
35/146  
145  
 
 

2
I C
 
device operation  
M24LR04E-R  
5.10  
Minimizing system delays by polling on Ack  
During the internal write cycle, the device disconnects itself from the bus, and writes a copy  
of the data from its internal latches to the memory cells. The maximum I²C write time (t

w

) is  
shown in

, but the typical time is shorter.
T
o
m
ake use of this, a polling sequence  
can be used by the bus master.  
The sequence, as shown in

, is:  
1. Initial
 
condition: a write cycle is in progress.  
2. Step
 
1: the bus master issues a Start condition followed by a device select code (the  
first byte of the new instruction).  
3. Step
 
2: if the device is busy with the internal write cycle, no Ack is returned and the bus  
master goes back to Step 1. If the device has terminated the internal write cycle, it  
responds with an Ack, indicating that the device is ready to receive the second part of  
the instruction (the first byte of this instruction having been sent during Step 1).  
Figure 11. Read mode sequences  
$&.
 
12ꢇ$&.
 
‘DWDꢇRXW
 
&XUUHQWꢀ  
$GGUHVVꢀ  
5HDG  
‘HYꢇVHO
 
5ꢈ:
 
$&.
 
$&.
 
$&.
 
$&.
 
$&.
 
12ꢇ$&.
 
‘DWDꢇRXW
 
5DQGRPꢀ  
$GGUHVVꢀ  
5HDG  
‘HYꢇVHOꢇꢍ
 
%WHꢇDGGU
 
%WHꢇDGGU
 
‘HYꢇVHOꢇꢍ
 
5ꢈ:
 
5ꢈ:
 
$&.
 
$&.
 
12ꢇ$&.
 
‘DWDꢇRXWꢇ1
 
6HTXHQWLDOꢀ  
&XUUHQWꢀ  
5HDG  
‘HYꢇVHO
 
‘DWDꢇRXWꢇꢄ
 
5ꢈ:
 
$&.
 
5ꢈ:
 
$&.
 
$&.
 
$&.
 
5ꢈ:
 
$&.
 
‘DWDꢇRXWꢄ
 
$&.
 
12ꢇ$&.
 
‘DWDꢇRXWꢇ1
 
6HTXHQWLDOꢀ  
5DQGRPꢀ  
5HDG  
‘HYꢇVHOꢇꢍ
 
%WHꢇDGGU
 
%WHꢇDGGU
 
‘HYꢇVHOꢇꢍ
 
06ꢀꢊꢅꢅꢌ9ꢄ
 
1. The
 
seven most significant bits of the device select code of a random read (in the first and fourth bytes)  
must be identical.  
36/146  
DocID022208 Rev 11  
 
 

2
M24LR04E-R  
I C device operation  
5.11  
Read operations  
Read operations are performed independently of the state of the I2C_Write_Lock bit.  
After the successful completion of a read operation, the device’s internal address counter is  
incremented by one, to point to the next byte address.  
5.12  
Random Address Read  
A dummy write is first performed to load the address into this address counter (as shown in  

Figure 11

) but
without
sending a Stop condition. Then, the bus master sends another Start  
condition, and repeats the device select code, with the Read/Write bit (RW) set to 1. The  
device acknowledges this, and outputs the contents of the addressed byte. The bus master  
must
not
acknowledge the byte, and terminates the transfer with a Stop condition.  
5.13  
5.14  
Current Address Read  
For the Current Address Read operation, following a Start condition, the bus master only  
sends a device select code with the Read/Write bit (RW) set to 1. The device acknowledges  
this, and outputs the byte addressed by the internal address counter. The counter is then  
incremented. The bus master terminates the transfer with a Stop condition, as shown in  

Figure 11

,
without
acknowledging the byte.  
Sequential Read  
This operation can be used after a Current Address Read or a Random Address Read. The  
bus master
does
acknowledge the data byte output, and sends additional clock pulses so  
that the device continues to output the next byte in sequence.
T
o
t
erminate the stream of  
bytes, the bus master must
not
acknowledge the last byte, and
must
generate a Stop  
condition, as shown in

.  
The output data come from consecutive addresses, with the internal address counter  
automatically incremented after each byte output. After the last memory address, the  
address counter “rolls-over”, and the device continues to output data from memory  
address 00h.  
5.15  
Acknowledge in Read mode  
For all Read commands, the device waits, after each byte read, for an acknowledgment  
during the ninth bit time. If the bus master does not drive Serial Data (SDA) low during this  
time, the device terminates the data transfer and switches to its Standby mode.  
DocID022208 Rev 11  
37/146  
145  
 
 
 
 
 

2
I C
 
device operation  
M24LR04E-R  
5.16  
M24LR04E-R I

2

C password security  
2
2
The M24LR04E-R controls I
 
C sector write access using the 32-bit-long I C password and  
2
2
the 64-bit I2C_Write_Lock bit area. The I C password value is managed using two I
 
C  
commands: I C present password and I C write password.  
2
2
2
5.16.1  
I C present password command description  
2
2
The I
 
C present password command is used in I C mode to present the password to the  
M24LR04E-R in order to modify the write access rights of all the memory sectors protected  
by the I2C_Write_Lock bits, including the password itself. If the presented password is  
correct, the access rights remain activated until the M24LR04E-R is powered off or until a  
2
new I C present password command is issued.  
Following a Start condition, the bus master sends a device select code with the Read/Write  
bit (RW) reset to 0 and the Chip Enable bit E2 at 1. The device acknowledges this, as shown  
2
in

, and waits for two I C password address bytes 09h and 00h. The device  
responds to each address byte with an acknowledge bit, and then waits for the four  
password data bytes, the validation code, 09h, and a resend of the four password data  
bytes. The most significant byte of the password is sent first, followed by the least significant  
bytes.  
It is necessary to send the 32-bit password twice to prevent any data corruption during the  
sequence. If the two 32-bit passwords sent are not exactly the same, the M24LR04E-R  
does not start the internal comparison.  
When the bus master generates a Stop condition immediately after the Ack bit (during the  
tenth bit time slot), an internal delay equivalent to the write cycle time is triggered. A Stop  
condition at any other time does not trigger the internal delay. During that delay, the  
2
M24LR04E-R compares the 32 received data bits with the 32 bits of the stored I C  
password. If the values match, the write access rights to all protected sectors are modified  
after the internal delay. If the values do not match, the protected sectors remains protected.  
During the internal delay, the serial data (SDA) signal is disabled internally, and the device  
does not respond to any requests.  
2
Figure 12. I
 
C present password command  
!CK  
!CK  
!CK  
!CK  
!CK  
!CK  
!CK  
$EVICE SELECT  
CODE  
0ASSWORD  
0ASSWORD  
0ASSWORD  
;ꢋꢀꢏꢉꢁ=  
0ASSWORD  
;ꢉꢋꢏꢀꢄ=  
0ASSWORD  
;ꢀꢍꢏꢐ=  
0ASSWORD  
;ꢂꢏꢅ=  
ADDRESS ꢅꢃH  
ADDRESS ꢅꢅH  
2ꢎ7  
!CK  
!CK  
!CK  
!CK  
!CK  
0ASSWORD  
;ꢋꢀꢏꢉꢁ=  
0ASSWORD  
;ꢉꢋꢏꢀꢄ=  
0ASSWORD  
;ꢀꢍꢏꢐ=  
0ASSWORD  
;ꢂꢏꢅ=  
6ALIDATION  
CODE ꢅꢃH  
$EVICE SELECT CODE ꢊ ꢀꢅꢀꢅ ꢀ ꢀ ꢀ  
!CK GENERATED DURING
 
ꢃ

TH

BIT TIME SLOTꢌ  
AIꢀꢍꢀꢉꢍC  
38/146  
DocID022208 Rev 11  
 
 
 

2
M24LR04E-R  
I C device operation  
2
5.16.2  
I C
 
write password command description  
2
2
The I
 
C write password command is used to write a 32-bit block into the M24LR04E-R I C  
2
2
password system area. This command is used in I
 
C mode to update the I C password  
value. It cannot be used to update any of the RF passwords. After the write cycle, the new  
I C
 
password value is automatically activated. The I
 
C password value can only be modified  
2
2
2
after issuing a valid I C present password command.  
2
On delivery, the I
 
C default password value is set to 0000 0000h and is activated.  
Following a Start condition, the bus master sends a device select code with the Read/Write  
bit (RW) reset to 0 and the Chip Enable bit E2 at 1. The device acknowledges this, as shown  
2
in

, and waits for the two I C password address bytes, 09h and 00h. The device  
responds to each address byte with an acknowledge bit, and then waits for the four  
password data bytes, the validation code, 07h, and a resend of the four password data  
bytes. The most significant byte of the password is sent first, followed by the least significant  
bytes.  
It is necessary to send twice the 32-bit password to prevent any data corruption during the  
write sequence. If the two 32-bit passwords sent are not exactly the same, the  
2
M24LR04E-R does not modify the I
 
C password value.  
When the bus master generates a Stop condition immediately after the Ack bit (during the  
tenth bit time slot), the internal write cycle is triggered. A Stop condition at any other time  
does not trigger the internal write cycle.  
During the internal write cycle, the serial data (SDA) signal is disabled internally, and the  
device does not respond to any requests.  
2
Figure 13. I C write password command  
!CK  
!CK  
!CK  
!CK  
!CK  
!CK  
!CK  
$EVICE SELECT  
CODE  
0ASSWORD  
0ASSWORD  
.EW PASSWORD
 
.EW PASSWORD
 
.EW PASSWORD
 
.EW PASSWORD  
;ꢋꢀꢏꢉꢁ= ;ꢉꢋꢏꢀꢄ=
 
;ꢀꢍꢏꢐ= ;ꢂꢏꢅ=  
ADDRESS ꢅꢃH  
ADDRESS ꢅꢅH  
2ꢎ7  
!CK  
!CK  
!CK  
!CK  
!CK  
.EW PASSWORD
 
.EW PASSWORD
 
.EW PASSWORD
 
.EW PASSWORD  
6ALIDATION  
CODE ꢅꢂH  
;ꢋꢀꢏꢉꢁ=  
;ꢉꢋꢏꢀꢄ=  
;ꢀꢍꢏꢐ=  
;ꢂꢏꢅ=  
$EVICE SELECT CODE ꢊ ꢀꢅꢀꢅ ꢀ ꢀ ꢀ  
!CK GENERATED DURING
 
ꢃ

TH

BIT TIME SLOTꢌ  
AIꢀꢍꢀꢉꢄB  
DocID022208 Rev 11  
39/146  
145  
 
 

M24LR04E-R memory initial state  
M24LR04E-R  
6
M24LR04E-R memory initial state  
The device is delivered with all bits set to 1 in the user memory array.  
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
User Memory content: FFh  
System bits delivery  
I2C write lock bits: 00h  
Sector Security Status: 00h  
I2C Password: 0000 0000h  
RF Password:
 
0000 0000h  
IC ref:
 
5Ah  
UID: E0 02 xx xx xx xxh  
DSFID: FFh  
AFI: 00h  
Memory size: 03 7Fh  
Energy Harvesting Configuration byte: F4h  
Bit 7 to bit 4: all set to 1  
Bit 3: set to 0 (RF BUSY mode on RF WIP/BUSY pin)  
Bit 2: set to 1 (Energy harvesting not activated by default)  
Bit 1 and bit 0: set to 0 (fan-out setting)  
40/146  
DocID022208 Rev 11  
 

M24LR04E-R  
RF device operation  
7
RF device operation  
The M24LR04E-R is divided into four sectors of 32 blocks of 32 bits, as shown in

.  
Each sector can be individually read- and/or write-protected using a specific lock or  
password command.  
Read and Write operations are possible if the addressed block is not protected. During a  
Write, the 32 bits of the block are replaced by the new 32-bit value.  
The M24LR04E-R also has a 64-bit block that is used to store the 64-bit unique identifier  
(UID). The UID is compliant with the ISO 15963 description, and its value is used during the  
anticollision sequence (Inventory). This block is not accessible by the user in RF device  
operation and its value is written by ST on the production line.  
The M24LR04E-R also includes an AFI register in which the application family identifier is  
stored, and a DSFID register in which the data storage family identifier used in the  
anticollision algorithm is stored.  
The M24LR04E-R has three 32-bit blocks in which the password codes are stored and a 8-  
bit Configuration byte in which the Energy harvesting mode and RF WIP/BUSY pin  
configuration is stored.  
7.1  
RF communication and energy harvesting  
Because current consumption can affect the AC signal delivered by the antenna, RF  
communications with M24LR04E-R are not guaranteed during voltage delivery on the  
energy harvesting analog output Vout.  
RF communication can disturb and possibly stop Energy Harvesting mode.  
DocID022208 Rev 11  
41/146  
145  
 
 

RF device operation  
M24LR04E-R  
7.2  
Commands  
The M24LR04E-R supports the following commands:  
•
•
Inventory
, used to perform the anticollision sequence.  
Stay quiet
, used to put the M24LR04E-R in quiet mode, where it does not respond to  
any inventory command.  
•
Select
, used to select the M24LR04E-R. After this command, the M24LR04E-R  
processes all Read/Write commands with Select_flag set.  
•
•
•
Reset to ready
, used to put the M24LR04E-R in the ready state.  
Read block
, used to output the 32 bits of the selected block and its locking status.  
Write block
, used to write the 32-bit value in the selected block, provided that it is not  
locked.  
•
•
•
•
•
•
•
Read multiple blocks
, used to read the selected blocks and send back their value.  
Write AFI
, used to write the 8-bit value in the AFI register.  
Lock AFI
, used to lock the AFI register.  
Write DSFID
, used to write the 8-bit value in the DSFID register.  
Lock DSFID
, used to lock the DSFID register.  
Get system info
, used to provide the system information value  
Get multiple block security status
, used to send the security status of the selected  
block.  
•
•
Initiate
, used to trigger the tag response to the Inventory initiated sequence.  
Inventory initiated
, used to perform the anticollision sequence triggered by the Initiate  
command.  
•
•
•
Write-sector password
, used to write the 32 bits of the selected password.  
Lock-sector
, used to write the sector security status bits of the selected sector.  
Present-sector password
, enables the user to present a password to unprotect the  
user blocks linked to this password.  
•
•
Fast initiate
, used to trigger the tag response to the Inventory initiated sequence.  
Fast inventory initiated
, used to perform the anticollision sequence triggered by the  
Initiate command.  
•
•
Fast read single block
, used to output the 32 bits of the selected block and its locking  
status.  
Fast read multiple blocks
, used to read the selected blocks and send back their  
value.  
•
•
ReadCfg,
used to read the 8-bit Configuration byte and send back its value.  
WriteEHCfg
, used to write the energy harvesting configuration bits into the  
Configuration byte.  
•
WriteDOCfg
, used to write the RF WIP/BUSY pin configuration bit into the  
Configuration byte.  
•
•
SetRstEHEn
, used to set or reset the EH_enable bit into the volatile Control register.  
CheckEHEn
, used to send back the value of the volatile Control register.  
42/146  
DocID022208 Rev 11  
 

M24LR04E-R  
RF device operation  
7.3  
Initial dialog for vicinity cards  
The dialog between the vicinity coupling device or VCD (commonly the “RF reader”) and the  
vicinity integrated circuit card or VICC (M24LR04E-R) takes place as follows:  
•
•
•
activation of the M24LR04E-R by the RF operating field of the VCD,  
transmission of a command by the VCD,  
transmission of a response by the M24LR04E-R.  
These operations use the RF power transfer and communication signal interface described  
below (see

,

and

). This technique is called RTF  
(Reader talk first).  
7.3.1  
Power transfer  
Power is transferred to the M24LR04E-R by radio frequency at 13.56 MHz via coupling  
antennas in the M24LR04E-R and the VCD. The RF operating field of the VCD is  
transformed on the M24LR04E-R antenna to an AC voltage which is rectified, filtered and  
internally regulated.  
During communications, the amplitude modulation (ASK) on this received signal is  
demodulated by the ASK demodulator.  
7.3.2  
7.3.3  
Frequency  
The ISO 15693 standard defines the carrier frequency (
f
) of the operating field as  
13.56 MHz ±7 kHz.  
C
Operating field  
The M24LR04E-R operates continuously between the minimum and maximum values of the  
electromagnetic field H defined in

. The VCD has to generate a field within these  
limits.  
DocID022208 Rev 11  
43/146  
145  
 
 
 
 

Communication signal from VCD to M24LR04E-R  
M24LR04E-R  
8
Communication signal from VCD to M24LR04E-R  
Communications between the VCD and the M24LR04E-R takes place using the modulation  
principle of ASK (Amplitude shift keying). Two modulation indexes are used, 10% and  
100%. The M24LR04E-R decodes both. The VCD determines which index is used.  
The modulation index is defined as [a – b] / [a + b], where a and b are, respectively the peak  
signal amplitude and the minimum signal amplitude of the carrier frequency.  
Depending on the choice made by the VCD, a “pause” is created as shown in

and  
The M24LR04E-R is operational for the 100% modulation index or for any degree of  
modulation index between 10% and 30% (see

).  
Figure 14. 100% modulation waveform  
&DUULHUꢇ
 
DPSOLWXGH
 
W

ꢄ
 

W

ꢃ
 

W

ꢀ
 

ꢄꢁꢂꢏ
 
D
ꢉꢂꢏ
 
ꢌꢁꢏ
 
ƚ

Ϯ  

0LQ
 
0D[
 
W

ꢄ
 

W

ꢅ
 

W

ꢃ
 

ꢌꢎꢁꢇ—V
 
ꢉꢎꢀꢀꢇ—V
 
ꢂꢏ
 
E
ꢅꢎꢄꢇ—V
 
ꢁꢇ—V
 
W

ꢄ
 

ꢀꢎꢂꢇ—V
 
ꢁꢎꢋꢇ—V
 
W
W

ꢀ
 

ꢁꢇ—V
 
7KHꢇFORFNꢇUHFRYHUꢇVKDOOꢇEHꢇRSHUDWLRQDOꢇDIWHUꢇW

ꢀꢇ

PD[
 
06ꢀꢁꢂꢁꢀ9ꢄ
 
Table 19. 10% modulation parameters  
Symbol  
Parameter definition  
Value  
hr  
hf  
0.1 x (a – b)  
0.1 x (a – b)  
max  
max  
44/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Communication signal from VCD to M24LR04E-R  
Figure 15. 10% modulation waveform  
&DUULHUꢇDPSOLWXGH
 
W

ꢄ
 

W

ꢅ
 

W

ꢃ
 

KI
 
D
E
KU
 
W
0LQ
 
0D[
 
W

ꢄ
 

W

ꢅ
 

W

ꢃ
 

ꢌꢎꢁꢇ—V
 
ꢉꢎꢀꢀꢇ—V
 
ꢁꢎꢁꢂꢇꢐDꢆEꢑ
 
ꢃꢎꢁꢇ—V
 
ꢁ
W

ꢄ
 

KIꢒꢇKU
 
ꢁꢎꢄꢇꢐDꢆEꢑꢇPD[
 
ꢀꢎꢂꢇ—V
 
ꢃꢁꢏ
 
0RGXODWLRQꢇLQGH[
 
ꢄꢁꢏ
 
7KHꢇ9,&&ꢇVKDOOꢇEHꢇRSHUDWLRQDOꢇIRUꢇDQꢇYDOXHꢇRIꢇPRGXODWLRQꢇLQGH[ꢇEHWZHHQꢇꢄꢁꢇDQGꢇꢃꢁꢏꢎꢇꢇ
 
06ꢀꢁꢂꢁꢄ9ꢄ
 
DocID022208 Rev 11  
45/146  
145  
 

Data rate and data coding  
M24LR04E-R  
9
Data rate and data coding  
The data coding implemented in the M24LR04E-R uses pulse position modulation. Both  
data coding modes that are described in the ISO15693 are supported by the M24LR04E-R.  
The selection is made by the VCD and indicated to the M24LR04E-R within the start of  
frame (SOF).  
9.1  
Data coding mode: 1 out of 256  
The value of one single byte is represented by the position of one pause. The position of the  
pause on 1 of 256 successive time periods of 18.88 µs (256/
f
) determines the value of the  
C
byte. In this case, the transmission of one byte takes 4.833 ms and the resulting data rate is  
1.65 Kbits/s (
f
/8192).  
C

Figure 16

illustrates this pulse position modulation technique. In this figure, data E1h (225  
decimal) is sent by the VCD to the M24LR04E-R.  
The pause occurs during the second half of the position of the time period that determines  
the value, as shown in

.  
A pause during the first period transmits the data value 00h. A pause during the last period  
transmits the data value FFh (255 decimal).  
Figure 16. 1 out of 256 coding mode  
ꢃꢌꢁꢁ —S  
0ULSE  
-ODULATED  
#ARRIER  
ꢀꢐꢌꢐꢐ —S  
ꢅ
ꢀ
ꢉ
ꢋ
ꢌ  
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢉ
ꢉ
ꢍ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢉ
ꢍ
ꢉ
ꢉ
ꢍ
ꢋ
ꢉ
ꢍ
ꢁ
ꢉ
ꢍ
ꢍ
ꢌ
ꢌ
ꢁꢌꢐꢋꢋ MS  
!)ꢅꢄꢄꢍꢄ  
46/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Data rate and data coding  
Figure 17. Detail of a time period  
ꢃꢌꢁꢁ —S  
ꢀꢐꢌꢐꢐ —S  
0ULSE  
-ODULATED  
#ARRIER  
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢌ
ꢉ
ꢉ
ꢁ
ꢉ
ꢉ
ꢍ
ꢉ
ꢉ
ꢄ
4IME 0ERIOD  
ONE OF ꢉꢍꢄ  
!)ꢅꢄꢄꢍꢂ  
9.2  
Data coding mode: 1 out of 4  
The value of two bits is represented by the position of one pause. The position of the pause  
on 1 of 4 successive time periods of 18.88 µs (256/
f
) determines the value of the two bits.  
C
Four successive pairs of bits form a byte, where the least significant pair of bits is  
transmitted first.  
In this case, the transmission of one byte takes 302.08 µs and the resulting data rate is  
26.48 Kbits/s (
f
/512).

illustrates the 1 out of 4 pulse position technique and  
coding.

smission of E1h (225d – 1110 0001b) by the VCD.  
DocID022208 Rev 11  
47/146  
145  
 
 

Data rate and data coding  
M24LR04E-R  
Figure 18. 1 out of 4 coding mode  
0ULSE POSITION FOR ꢑꢅꢅꢑ  
ꢃꢌꢁꢁ —S  
ꢃꢌꢁꢁ —S  
ꢂꢍꢌꢍꢉ —S  
0ULSE POSITION FOR ꢑꢅꢀꢑ ꢆꢀꢊ,3″ꢇ  
ꢉꢐꢌꢋꢉ —S  
ꢃꢌꢁꢁ —S  
ꢂꢍꢌꢍꢉ —S  
0ULSE POSITION FOR ꢑꢀꢅꢑ ꢆꢅꢊ,3″ꢇ  
ꢁꢂꢌꢉꢅ—S  
ꢂꢍꢌꢍꢉ —S  
ꢃꢌꢁꢁ —S  
0ULSE POSITION FOR ꢑꢀꢀꢑ  
ꢄꢄꢌꢅꢐ —S  
ꢃꢌꢁꢁ —S  
ꢂꢍꢌꢍꢉ —S  
!)ꢅꢄꢄꢍꢐ  
Figure 19. 1 out of 4 coding example  
ꢌꢂ  
ꢂꢂ  
ꢂꢌ  
ꢌꢌ  
ꢆ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢆ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢆ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢆ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢁꢂ  
ꢃ
ꢃ
ꢄ
ꢅ
9.3  
VCD to M24LR04E-R frames  
Frames are delimited by a start of frame (SOF) and an end of frame (EOF). They are  
implemented using code violation. Unused options are reserved for future use.  
The M24LR04E-R is ready to receive a new command frame from the VCD 311.5 µs after  
sending a response frame to the VCD.  
The M24LR04E-R takes a power-up time of 0.1 ms after being activated by the powering  
field. After this delay, the M24LR04E-R is ready to receive a command frame from the VCD.  
48/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Data rate and data coding  
9.4  
Start of frame (SOF)  
The SOF defines the data coding mode the VCD is to use for the following command frame.  
The SOF sequence described in

selects the 1 out of 256 data coding mode. The  
SOF sequence described in

selects the 1 out of 4 data coding mode. The EOF  
sequence for either coding mode is described in

.  
Figure 20. SOF to select 1 out of 256 data coding mode  
ꢇ
ꢁ
ꢁ
ꢉ
ꢊ
ꢋ  
ꢇ
ꢁ
ꢁ
ꢉ
ꢊ
ꢋ  
ꢀ
ꢇ
ꢆ ꢉ
ꢊ
ꢋ  
ꢀ
ꢇ
ꢆ ꢉ
ꢊ
ꢋ  
ꢁꢂ  
ꢃ
ꢃ
ꢃ
ꢌ
Figure 21. SOF to select 1 out of 4 data coding mode  
ꢅ
ꢇ
ꢆ
ꢆ
ꢉ
ꢃ
ꢄ ꢅ
ꢇ
ꢆ
ꢆ
ꢉ
ꢃ
ꢄ  
ꢅ
ꢇ
ꢆ
ꢆ
ꢉ
ꢃ
ꢄ  
ꢁꢂ
ꢇ
ꢂ
ꢀ
ꢉ
ꢃ
ꢄ  
ꢁꢂ
ꢇ
ꢂ
ꢀ
ꢉ
ꢃ
ꢄ  
ꢃ
ꢂ  
ꢀ
ꢀ
ꢀ
ꢂ
Figure 22. EOF for either data coding mode  
ꢇ
ꢁ
ꢁ
ꢉ
ꢊ
ꢋ  
ꢇ
ꢁ
ꢁ
ꢉ
ꢊ
ꢋ  
ꢀ
ꢇ
ꢆ ꢉ
ꢊ
ꢋ  
ꢁꢂ  
ꢃ
ꢃ
ꢃ
ꢄ
DocID022208 Rev 11  
49/146  
145  
 
 
 
 

Communication signal from M24LR04E-R to VCD  
M24LR04E-R  
10  
Communication signal from M24LR04E-R to VCD  
The M24LR04E-R has several modes defined for some parameters, owing to which it can  
operate in various noise environments and meet various application requirements.  
10.1  
Load modulation  
The M24LR04E-R is capable of communication to the VCD via an inductive coupling area  
whereby the carrier is loaded to generate a subcarrier with frequency
f
. The subcarrier is  
S
generated by switching a load in the M24LR04E-R.  
The load-modulated amplitude received on the VCD antenna must be of at least 10 mV  
when measured as described in the test methods defined in International Standard  
ISO10373-7.  
10.2  
10.3  
Subcarrier  
The M24LR04E-R supports the one-subcarrier and two-subcarrier response formats. These  
formats are selected by the VCD using the first bit in the protocol header. When one  
subcarrier is used, the frequency
f
of the subcarrier load modulation is 423.75 kHz (
f
/32).  
S1  
C
When two subcarriers are used, the frequency
f
is 423.75 kHz (
f
/32), and frequency
f  
S1  
C
S2  
is 484.28 kHz (
f
/28). When using the two-subcarrier mode, the M24LR04E-R generates a  
C
continuous phase relationship between
f
and
f  
.
S1  
S2  
Data rates  
The M24LR04E-R can respond using the low or the high data rate format. The selection of  
the data rate is made by the VCD using the second bit in the protocol header. For fast  
commands, the selected data rate is multiplied by two.

shows the different data  
rates produced by the M24LR04E-R using the different response format combinations.  
Table 20. Response data rates  
Data rate  
One subcarrier  
Two subcarriers  
Standard commands  
Fast commands  
6.62 Kbit/s (
f

c

/2048)  
13.24 Kbit/s (
f

c

/1024)  
26.48 Kbit/s (
f

c

/512)  
52.97 Kbit/s (
f

c

/256)  
6.67 Kbit/s (
f

c

/2032)  
Not applicable  
Low  
Standard commands  
Fast commands  
26.69 Kbit/s (
f

c

/508)  
Not applicable  
High  
50/146  
DocID022208 Rev 11  
 
 
 
 
 

M24LR04E-R  
Bit representation and coding  
11  
Bit representation and coding  
Data bits are encoded using Manchester coding, according to the following schemes. For  
the low data rate, same subcarrier frequency or frequencies is/are used. In this case, the  
number of pulses is multiplied by four and all times increase by this factor. For the Fast  
commands using one subcarrier, all pulse numbers and times are divided by 2.  
11.1  
Bit coding using one subcarrier  
11.1.1  
High data rate  
A logic 0 starts with eight pulses at 423.75 kHz (
f
/32) followed by an unmodulated time of  
C
18.88 µs, as shown in

.  
Figure 23. Logic 0, high data rate  
ꢋꢂꢌꢂꢄ—S  
AIꢀꢉꢅꢂꢄ  
For the fast commands, a logic 0 starts with four pulses at 423.75 kHz (
f
/32) followed by an  
C
unmodulated time of 9.44 µs, as shown in

.  
Figure 24. Logic 0, high data rate, fast commands  
ꢀꢐꢌꢐꢐ—S  
AIꢀꢉꢅꢄꢄ  
A logic 1 starts with an unmodulated time of 18.88 µs followed by eight pulses at 423.75 kHz  
(
f
/32), as shown in

.  
C
Figure 25. Logic 1, high data rate  
ꢋꢂꢌꢂꢄ—S  
AIꢀꢉꢅꢂꢂ  
For the Fast commands, a logic 1 starts with an unmodulated time of 9.44 µs followed by  
four pulses of 423.75 kHz (
f
/32), as shown in

.  
C
Figure 26. Logic 1, high data rate, fast commands  
ꢀꢐꢌꢐꢐ—S  
AIꢀꢉꢅꢄꢂ  
DocID022208 Rev 11  
51/146  
145  
 
 
 
 
 
 
 

Bit representation and coding  
M24LR04E-R  
11.1.2  
Low data rate  
A logic 0 starts with 32 pulses at 423.75 kHz (
f
/32) followed by an unmodulated time of  
C
75.52 µs, as shown in

.  
Figure 27. Logic 0, low data rate  
ꢀꢍꢀꢌꢅꢁ—S  
AIꢀꢉꢅꢄꢐ  
For the Fast commands, a logic 0 starts with 16 pulses at 423.75 kHz (
f
/32) followed by an  
C
unmodulated time of 37.76 µs, as shown in

.  
Figure 28. Logic 0, low data rate, fast commands  
ꢂꢍꢌꢍꢉ—S  
AIꢀꢉꢅꢄꢃ  
A logic 1 starts with an unmodulated time of 75.52 µs followed by 32 pulses at 423.75 kHz  
(f /32),
 
as shown in

.  
C
Figure 29. Logic 1, low data rate  
ꢀꢍꢀꢌꢅꢁ—S  
AIꢀꢉꢅꢂꢅ  
For the Fast commands, a logic 1 starts with an unmodulated time of 37.76 µs followed by  
16 pulses at 423.75 kHz (
f
/32), as shown in

.  
C
Figure 30. Logic 1, low data rate, fast commands  
ꢂꢍꢌꢍꢉ—S  
AIꢀꢉꢅꢂꢀ  
52/146  
DocID022208 Rev 11  
 
 
 
 
 

M24LR04E-R  
Bit representation and coding  
11.2  
Bit coding using two subcarriers  
11.2.1  
High data rate  
A logic 0 starts with eight pulses at 423.75 kHz (
f
/32) followed by nine pulses at  
C
484.28 kHz (
f
/28), as shown in

. Bit coding using two subcarriers is not supported  
C
for the Fast commands.  
Figure 31. Logic 0, high data rate  
ϯϳ͘ϰϲꢀђƐ  
ĂŝϭϮϬϳϰ  
A logic 1 starts with nine pulses at 484.28 kHz (
f
/28) followed by eight pulses at  
C
423.75 kHz (
f
/32), as shown in

. Bit coding using two subcarriers is not supported  
C
for the Fast commands.  
Figure 32. Logic 1, high data rate  
ϯϳ͘ϰϲꢀђƐ  
ĂŝϭϮϬϳϯ  
11.2.2  
Low data rate  
A logic 0 starts with 32 pulses at 423.75 kHz (
f
/32) followed by 36 pulses at 484.28 kHz  
C
(
f
/28), as shown in

. Bit coding using two subcarriers is not supported for the Fast  
C
commands.  
Figure 33. Logic 0, low data rate  
ꢌ
ꢁ
ꢇ
ꢅ
ꢁ
ꢉ
ꢊ
ꢋ  
ꢇ
ꢆ
ꢌ
ꢈꢂ
ꢂ
ꢈ  
A logic 1 starts with 36 pulses at 484.28 kHz (
f
/28) followed by 32 pulses at 423.75 kHz  
C
(
f
/32) as shown in

. Bit coding using two subcarriers is not supported for the Fast  
C
commands.  
Figure 34. Logic 1, low data rate  
ꢌ
ꢁ
ꢀ
ꢇ
ꢁ
ꢂ
ꢉ
ꢍ
ꢃ  
ꢅ
ꢌ
ꢈꢂꢆ
ꢆ  
DocID022208 Rev 11  
53/146  
145  
 
 
 
 
 
 
 

M24LR04E-R to VCD frames  
M24LR04E-R  
12  
M24LR04E-R to VCD frames  
Frames are delimited by an SOF and an EO
F
.
T
hey are implemented using code violation.  
Unused options are reserved for future use. For the low data rate, the same subcarrier  
frequency or frequencies is/are used. In this case, the number of pulses is multiplied by 4.  
For the Fast commands using one subcarrier, all pulse numbers and times are divided by 2.  
12.1  
SOF when using one subcarrier  
12.1.1  
High data rate  
The SOF includes an unmodulated time of 56.64 µs, followed by 24 pulses at 423.75 kHz  
(f /32),
 
and a logic 1 that consists of an unmodulated time of 18.88 µs followed by eight  
C
pulses at 423.75 kHz, as shown in

.  
Figure 35. Start of frame, high data rate, one subcarrier  
ꢌꢌ
ꢀ
ꢇ
ꢈ
ꢁ
ꢉ
ꢂ
ꢃ  
ꢀꢁꢂꢁꢃꢄꢅꢆ  
ꢅ
ꢌ
ꢈꢂ
ꢆ
ꢁ  
For the Fast commands, the SOF comprises an unmodulated time of 28.32 µs, followed by  
12 pulses at 423.75 kHz (f
 
/32), and a logic 1 that consists of an unmodulated time of  
C
9.44 µs followed by four pulses at 423.75 kHz, as shown in

.  
Figure 36. Start of frame, high data rate, one subcarrier, fast commands  
ϱϲ͘ϲϰꢀђƐ  
ϭϴ͘ϴϴꢀђƐ  
ĂŝϭϮϬϳϵ  
12.1.2  
Low data rate  
The SOF comprises an unmodulated time of 226.56 µs, followed by 96 pulses at 423.75  
kHz (
f
/32), and a logic 1 that consists of an unmodulated time of 75.52 µs followed by 32  
C
pulses at 423.75 kHz, as shown in

.  
Figure 37. Start of frame, low data rate, one subcarrier  
ϰϱϯ͘ϭϮꢀђƐ  
ϭϱϭ͘ϬϰꢀђƐ  
ĂŝϭϮϬϴϬď  
54/146  
DocID022208 Rev 11  
 
 
 
 
 
 
 

M24LR04E-R  
M24LR04E-R to VCD frames  
For the Fast commands, the SOF comprises an unmodulated time of 113.28 µs, followed by  
48 pulses at 423.75 kHz (
f
/32), and a logic 1 that includes an unmodulated time of 37.76  
C
µs followed by 16 pulses at 423.75 kHz, as shown in

.  
Figure 38. Start of frame, low data rate, one subcarrier, fast commands  
ꢈꢈ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢆ
ꢇ
ꢄ ꢉ
ꢊ
ꢋ  
ꢇ
ꢆ
ꢌ
ꢈꢂ
ꢁ
ꢌ  
12.2  
SOF when using two subcarriers  
12.2.1  
High data rate  
The SOF comprises 27 pulses at 484.28 kHz (
f
/28), followed by 24 pulses at 423.75 kHz  
C
(
f
/32), and a logic 1 that includes nine pulses at 484.28 kHz followed by eight pulses at  
C
423.75 kHz, as shown in

.  
Bit coding using two subcarriers is not supported for the Fast commands.  
Figure 39. Start of frame, high data rate, two subcarriers  
ϭϭϮ͘ϯϵꢀђƐ  
ϯϳ͘ϰϲꢀђƐ  
ĂŝϭϮϬϴϮ  
12.2.2  
Low data rate  
The SOF comprises 108 pulses at 484.28 kHz (
f
/28), followed by 96 pulses at 423.75 kHz  
C
(
f
/32), and a logic 1 that includes 36 pulses at 484.28 kHz followed by 32 pulses at  
C
423.75 kHz, as shown in

.  
Bit coding using two subcarriers is not supported for the Fast commands.  
Figure 40. Start of frame, low data rate, two subcarriers  
ϰϰϵ͘ϱϲꢀђƐ  
ϭϰϵ͘ϴϰꢀђƐ  
ĂŝϭϮϬϴϯ  
DocID022208 Rev 11  
55/146  
145  
 
 
 
 
 
 

M24LR04E-R to VCD frames  
M24LR04E-R  
12.3  
EOF when using one subcarrier  
12.3.1  
High data rate  
The EOF comprises a logic 0 that includes eight pulses at 423.75 kHz and an unmodulated  
time of 18.88 µs, followed by 24 pulses at 423.75 kHz (
f
/32), and by an unmodulated time  
C
of 56.64 µs, as shown in

.  
Figure 41. End of frame, high data rate, one subcarrier  
ꢅꢆ
ꢇ
ꢆ
ꢇ
ꢉ
ꢍ
ꢁ  
ꢌꢌ
ꢀ
ꢇ
ꢈ
ꢀ
ꢉ
ꢍ
ꢁ  
ꢃ
ꢌ
ꢈꢂ
ꢀ
ꢄ  
For the Fast commands, the EOF comprises a logic 0 that includes four pulses at  
423.75 kHz and an unmodulated time of 9.44 µs, followed by 12 pulses at 423.75 kHz  
(
f
/32) and an unmodulated time of 37.76 µs, as shown in

.  
C
Figure 42. End of frame, high data rate, one subcarrier, fast commands  
ꢀ
ꢇꢂꢇ
ꢁ
ꢄꢈꢉ  
ꢂ
ꢌꢂꢌꢌꢄꢈꢉ  
ꢊꢋ
ꢂꢃꢄ
ꢌ
ꢀ  
12.3.2  
Low data rate  
The EOF comprises a logic 0 that includes 32 pulses at 423.75 kHz and an unmodulated  
time of 75.52 µs, followed by 96 pulses at 423.75 kHz (
f
/32) and an unmodulated time of  
C
226.56 µs, as shown in

.  
Figure 43. End of frame, low data rate, one subcarrier  
ꢀꢁꢂꢃꢄꢅꢆ—V
 
ꢄꢁꢄꢃꢈꢀꢆ—V
 
06ꢀꢇꢁꢈꢇ9ꢄ
 
For the Fast commands, the EOF comprises a logic 0 that includes 16 pulses at 423.75 kHz  
and an unmodulated time of 37.76 µs, followed by 48 pulses at 423.75 kHz (
f
/32) and an  
C
unmodulated time of 113.28 µs, as shown in

.  
Figure 44. End of frame, low data rate, one subcarrier, Fast commands  
ꢇꢁꢃꢁꢅꢆ—V
 
ꢅꢅꢉꢃꢁꢉꢆ—V
 
06ꢀꢇꢁꢄꢀ9ꢄ
 
56/146  
DocID022208 Rev 11  
 
 
 
 
 
 
 

M24LR04E-R  
M24LR04E-R to VCD frames  
12.4  
EOF when using two subcarriers  
12.4.1  
High data rate  
The EOF comprises a logic 0 that includes eight pulses at 423.75 kHz and nine pulses at  
484.28 kHz, followed by 24 pulses at 423.75 kHz (
f
/32) and 27 pulses at 484.28 kHz  
C
(
f
/28), as shown in

.  
C
Bit coding using two subcarriers is not supported for the Fast commands.  
Figure 45. End of frame, high data rate, two subcarriers  
ꢂꢇꢃꢀꢉꢆ—V
 
ꢄꢄꢅꢃꢂꢊꢆ—V
 
06ꢀꢇꢁꢄꢈ9ꢄ
 
12.4.2  
Low data rate  
The EOF comprises a logic 0 that includes 32 pulses at 423.75 kHz and 36 pulses at  
484.28 kHz, followed by 96 pulses at 423.75 kHz (
f
/32) and 108 pulses at 484.28 kHz  
C
(
f
/28), as shown in

.  
C
Bit coding using two subcarriers is not supported for the Fast commands.  
Figure 46. End of frame, low data rate, two subcarriers  
ϭϰϵ͘ϴϰꢀђƐ  
ϰϰϵ͘ϱϲꢀђƐ  
ĂŝϭϮϬϴϵ  
DocID022208 Rev 11  
57/146  
145  
 
 
 
 
 

Unique identifier (UID)  
M24LR04E-R  
13  
Unique identifier (UID)  
The M24LR04E-R is uniquely identified by a 64-bit unique identifier (UID). This UID  
complies with ISO/IEC 15963 and ISO/IEC 7816-6. The UID is a read-only code and  
comprises:  
•
•
•
eight MSBs with a value of E0h,  
the IC manufacturer code “ST 02h” on 8 bits (ISO/IEC 7816-6/AM1),  
a unique serial number on 48 bits.  
Table 21. UID format  
MSB  
63  
LSB  
0
56 55  
48 47  
0xE0  
0x02  
Unique serial number  
With the UID, each M24LR04E-R can be addressed uniquely and individually during the  
anticollision loop and for one-to-one exchanges between a VCD and an M24LR04E-R.  
58/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Application family identifier (AFI)  
14  
Application family identifier (AFI)  
The AFI (application family identifier) represents the type of application targeted by the VCD  
and is used to identify, among all the M24LR04E-Rs present, only the M24LR04E-Rs that  
meet the required application criteria.  
Figure 47. M24LR04E-R decision tree for AFI  
,QYHQWRUꢆUHTXHVWꢆUHFHLYHG
 
1R
 
$),ꢆIODJꢆVHW”
 
<
H
V
 
1R
 
$),ꢆYDOXHꢆ ꢆꢈ”
 
<
H
V
 
1R
 
$),ꢆYDOXHꢆ ꢆ
 
,QWHUQDOꢆYDOXH”
 
<
H
V
 
$QVZHUꢆJLYHQꢆEꢆWKHꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5
 
WRꢆWKHꢆ,QYHQWRUꢆUHTXHVW
 
1RꢆDQVZHU
 
06ꢀꢇꢅꢂꢁ9ꢄ
 
The AFI is programmed by the M24LR04E-R issuer (or purchaser) in the AFI register. Once  
programmed and locked, it cannot be modified any longer.  
The most significant nibble of the AFI is used to code one specific or all application families.  
The least significant nibble of the AFI is used to code one specific or all application  
subfamilies. Subfamily codes different from 0 are proprietary.  
See ISO 15693-3 documentation.  
DocID022208 Rev 11  
59/146  
145  
 
 

Data storage format identifier (DSFID)  
M24LR04E-R  
15  
Data storage format identifier (DSFID)  
The data storage format identifier indicates how the data is structured in the M24LR04E-R  
memory. The logical organization of data can be known instantly using the DSFID. It can be  
programmed and locked using the Write DSFID and Lock DSFID commands.  
15.1  
CRC  
The CRC used in the M24LR04E-R is calculated as per the definition in ISO/IEC 13239. The  
initial register contents are all ones: “FFFF”.  
The two-byte CRC is appended to each request and response, within each frame, before  
the EO
F
.
T
he CRC is calculated on all the bytes after the SOF up to the CRC field.  
Upon reception of a request from the VCD, the M24LR04E-R verifies that the CRC value is  
valid. If it is invalid, the M24LR04E-R discards the frame and does not answer to the VCD.  
Upon reception of a response from the M24LR04E-R, it is recommended that the VCD  
verifies whether the CRC value is valid. If it is invalid, actions to be performed are left to the  
discretion of the VCD designer.  
The CRC is transmitted least significant byte first. Each byte is transmitted least significant  
bit first.  
Table 22. CRC transmission rules  
LSByte  
MSByte  
LSBit  
MSBit  
LSBit  
MSBit  
CRC 16 (8 bits)  
CRC 16 (8 bits)  
60/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
M24LR04E-R protocol description  
16  
M24LR04E-R protocol description  
The transmission protocol (or simply “the protocol”) defines the mechanism used to  
exchange instructions and data between the VCD and the M24LR04E-R in both directions.  
It is based on the concept of “VCD talks first”.  
This means that an M24LR04E-R does not start transmitting unless it has received and  
properly decoded an instruction sent by the VCD. The protocol is based on an exchange of:  
•
•
a request from the VCD to the M24LR04E-R,  
a response from the M24LR04E-R to the VCD.  
Each request and each response are contained in a frame. The frame delimiters (SO
F
,  
EOF) are described in

.  
Each request consists of:  
•
•
•
•
•
•
•
a request SOF (see

and

),  
flags,  
a command code,  
parameters depending on the command,  
application data,  
a 2-byte CRC,  
a request EOF (see

).  
Each response consists of:  
•
•
•
•
•
•
an answer SOF (see

to

),  
flags,  
parameters depending on the command,  
application data,  
a 2-byte CRC,  
an answer EOF (see

to

).  
The protocol is bit-oriented. The number of bits transmitted in a frame is a multiple of eight  
(8), that is an integer number of bytes.  
A single-byte field is transmitted least significant bit (LSBit) first. A multiple-byte field is  
transmitted least significant byte (LSByte) first and each byte is transmitted least significant  
bit (LSBit) first.  
The setting of the flags indicates the presence of the optional fields. When the flag is set (to  
one), the field is present. When the flag is reset (to zero), the field is absent.  
Table 23. VCD request frame format  
Command  
code  
Request  
EOF  
Request SOF
 
Request_flags  
Parameters  
Data  
2-byte CRC  
Table 24. M24LR04E-R Response frame format  
Response  
SOF  
Response  
EOF  
Response_flags  
Parameters  
Data  
2-byte CRC  
DocID022208 Rev 11  
61/146  
145  
 
 
 

M24LR04E-R protocol description  
M24LR04E-R  
Figure 48. M24LR04E-R protocol timing  
Request  
frame  
Request  
frame  
VCD  
Response  
frame  
Response  
frame  
M24LR04E-R  
Timing  
<-t

1

->  
<-t

2

->  
<-t

1

->  
<-t

2

->  
62/146  
DocID022208 Rev 11  
 

M24LR04E-R  
M24LR04E-R states  
17  
M24LR04E-R states  
An M24LR04E-R can be in one of four states:  
•
•
•
•
Power-off  
Ready  
Quiet  
Selected  
Transitions between these states are specified in

and

.  
17.1  
17.2  
Power-off state  
The M24LR04E-R is in the Power-off state when it does not receive enough energy from the  
VCD.  
Ready state  
The M24LR04E-R is in the Ready state when it receives enough energy from the VCD.  
When in the Ready state, the M24LR04E-R answers any request where the Select_flag is  
not set.  
17.3  
17.4  
Quiet state  
When in the Quiet state, the M24LR04E-R answers any request except for Inventory  
requests with the Address_flag set.  
Selected state  
In the Selected state, the M24LR04E-R answers any request in all modes (see

):  
•
•
•
Request in Select mode with the Select_flag set  
Request in Addressed mode if the UID matches  
Request in Non-Addressed mode as it is the mode for general requests  
DocID022208 Rev 11  
63/146  
145  
 
 
 
 
 

M24LR04E-R states  
M24LR04E-R  
Table 25. M24LR04E-R response depending on Request_flags  
Address_flag Select_flag  
Flags  
1
0
1
0
Addressed Non
 
addressed  
Selected  
Non selected  
M24LR04E-R in Ready or Selected  
state (devices in Quiet state do not  
answer)  
–
–
X
X
–
–
X
–
X
–
M24LR04E-R in Selected state  
M24LR04E-R in Ready, Quiet or  
Selected state (the device that  
matches the UID)  
X
X
X
–
Error (03h)  
–
X
Figure 49. M24LR04E-R state transition diagram  
3RZHUꢋRII
 
,QꢆILHOG
 
2XW
 
RI
 
ILHOG
 
DIWHUꢆW

5)B2))
 

ꢆ
ꢆ
$QꢆRWKHUꢆ&RPPDQG
 
ZKHUHꢆ6HOHFWB)ODJ
 
LVꢆQRWꢆVHW
 
5HDG
 
2XWꢆRIꢆ5)ꢆILHOG
 
DIWHUꢆW

5)B2))
 

ꢆ
ꢆ
ꢆ
ꢆ
2XW
 
RI
 
5)
 
ILHOG
 
ꢆ
ꢆ
ꢆ
ꢆ
DIWHUꢆW
 
ꢆ

5)B2))
 

6HOHFWꢆꢍ8,’ꢎ
 
4XLHW
 
6HOHFWHG
 
6WDꢆTXLHWꢍ8,’ꢎ
 
$QꢆRWKHUꢆFRPPDQGꢆZKHUHꢆWKH
 
$GGUHVVB)ODJꢆLVꢆVHWꢆ$1′
 
ZKHUHꢆ,QYHQWRUB)ODJꢆLVꢆQRWꢆVHW
 
$QꢆRWKHUꢆFRPPDQG
 
$,ꢈꢉꢉꢌꢄE
 
1. The
 
M24LR04E-R returns to the Power Off state if the tag is out of the RF field for at least t

RF_OFF

. Refer to  
application note AN4125 for more information.  
2. The
 
intention of the state transition method is that only one M24LR04E-R should be in the Selected state at  
any given time.  
64/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Modes  
18  
Modes  
The term “mode” refers to the mechanism used in a request to specify the set of  
M24LR04E-Rs that answers the request.  
18.1  
Addressed mode  
When the Address_flag is set to 1 (Addressed mode), the request contains the Unique ID  
(UID) of the addressed M24LR04E-R.  
Any M24LR04E-R that receives a request with the Address_flag set to 1 compares the  
received Unique ID to its own. If it matches, then the M24LR04E-R executes the request (if  
possible) and returns a response to the VCD as specified in the command description.  
If the UID does not match, then it remains silent.  
18.2  
18.3  
Non-addressed mode (general request)  
When the Address_flag is cleared to 0 (Non-Addressed mode), the request does not contain  
a Unique ID. Any M24LR04E-R receiving a request with the Address_flag cleared to 0  
executes it and returns a response to the VCD as specified in the command description.  
Select mode  
When the Select_flag is set to 1 (Select mode), the request does not contain an  
M24LR04E-R Unique ID. The M24LR04E-R in the Selected state that receives a request  
with the Select_flag set to 1 executes it and returns a response to the VCD as specified in  
the command description.  
Only M24LR04E-Rs in the Selected state answer a request where the Select_flag set to 1.  
The system design ensures in theory that only one M24LR04E-R can be in the Select state  
at a time.  
DocID022208 Rev 11  
65/146  
145  
 
 
 
 

Request format  
M24LR04E-R  
19  
Request format  
The request consists of:  
•
•
•
•
•
•
an SOF  
flags  
a command code  
parameters and data  
a CRC  
an EOF  
Table 26. General request format  
Command code
 
Parameters  
S
O
F
E
O
F
Request_flags  
Data  
CRC  
19.1  
Request flags  
In a request, the “flags” field specifies the actions to be performed by the M24LR04E-R and  
whether corresponding fields are present or not.  
The flags field consists of eight bits. Bit 3 (Inventory_flag) of the request flag defines the  
contents of the four MSBs (bits 5 to 8). When bit 3 is reset (0), bits 5 to 8 define the  
M24LR04E-R selection criteria. When bit 3 is set (1), bits 5 to 8 define the M24LR04E-R  
Inventory parameters.  
Table 27. Definition of request flags 1 to 4  
Bit No.  
Flag  
Level  
Description  
A single subcarrier frequency is used by the  
M24LR04E-R  
0
Bit 1
 
Subcarrier_flag

(1)  

Bit 2
 
Data_rate_flag

(2)  

1
0
1
0
1
0
Two subcarrier are used by the M24LR04E-R  
Low data rate is used  
High data rate is used  
The meaning of flags 5 to 8 is described in

The meaning of flags 5 to 8 is described in

No Protocol format extension  
Bit 3
 
Inventory_flag  
Bit 4
 
Protocol_extension_flag

(3)  

1. Subcarrier_flag
 
refers to the M24LR04E-R-to-VCD communication.  
2. Data_rate_flag
 
refers to the M24LR04E-R-to-VCD communication.  
3. Protocol_extension_flag
 
must always be set to 0.  
66/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Request format  
.
Table 28. Request flags 5 to 8 when Bit 3 = 0  
Bit No.  
Flag  
Level  
Description  
Request is executed by any M24LR04E-R according to the setting  
of Address_flag  
0
1
0
Bit 5  
Select flag

(1)  

Request is executed only by the M24LR04E-R in Selected state  
Request is not addressed. UID field is not present. The request is  
executed by all M24LR04E-Rs.  
Bit 6  
Address flag

(1)  

Request is addressed. UID field is present. The request is  
executed only by the M24LR04E-R whose UID matches the UID  
specified in the request.  
1
0
1
0
Option not activated.  
Bit 7  
Bit 8  
Option flag  
RFU  
Option activated.  
–
1. If
 
the Select_flag is set to 1, the Address_flag is set to 0 and the UID field is not present in the request.  
Table 29. Request flags 5 to 8 when Bit 3 = 1  
Bit No.  
Flag  
Level  
Description  
0
1
0
1
0
0
AFI field is not present  
Bit 5  
AFI flag  
AFI field is present  
16 slots  
Bit 6  
Nb_slots flag  
1 slot  
Bit 7  
Bit 8  
Option flag  
RFU  
–
–
DocID022208 Rev 11  
67/146  
145  
 
 

Response format  
M24LR04E-R  
20  
Response format  
The response consists of:  
•
•
•
•
•
an SO
F
,  
flags,  
parameters and data,  
a CRC,  
an EO
F
.  
Table 30. General response format  
S
E
O
F
Response_flags  
Parameters  
Data  
CRC  
O
F
20.1  
Response flags  
In a response, the flags indicate how actions have been performed by the M24LR04E-R and  
whether corresponding fields are present or not. The response flags consist of eight bits.  
Table 31. Definitions of response flags 1 to 8  
Bit No.  
Flag  
Error_flag  
Level  
Description  
0
1
0
0
0
0
0
0
0
No error  
Bit 1  
Error detected. Error code is in the “Error” field.  
Bit 2  
Bit 3  
Bit 4  
Bit 5  
Bit 6  
Bit 7  
Bit 8  
RFU  
–
RFU  
–
Extension flag  
RFU  
No extension  
–
–
–
–
RFU  
RFU  
RFU  
68/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Response format  
20.2  
Response error code  
If the Error_flag is set by the M24LR04E-R in the response, the Error code field is present  
and provides information about the error that occurred.  
Error codes not specified in

are reserved for future use.  
Table 32. Response error code definition  
Error code  
Meaning  
03h  
0Fh  
10h  
11h  
12h  
13h  
14h  
15h  
The option is not supported.  
Error with no information given.  
The specified block is not available.  
The specified block is already locked and thus cannot be locked again.  
The specified block is locked and its contents cannot be changed.  
The specified block was not successfully programmed.  
The specified block was not successfully locked.  
The specified block is read-protected.  
DocID022208 Rev 11  
69/146  
145  
 
 

Anticollision  
M24LR04E-R  
21  
Anticollision  
The purpose of the anticollision sequence is to inventory the M24LR04E-Rs present in the  
VCD field using their unique ID (UID).  
The VCD is the master of communications with one or several M24LR04E-Rs. It initiates  
M24LR04E-R communication by issuing the Inventory request.  
The M24LR04E-R sends its response in the determined slot or does not respond.  
21.1  
Request parameters  
When issuing the Inventory Command, the VCD:  
•
•
•
•
sets the Nb_slots_flag as desired,  
adds the mask length and the mask value after the command field.  
The mask length is the number of significant bits of the mask value.  
The mask value is contained in an integer number of bytes. The mask length indicates  
the number of significant bits. LSB is transmitted first.  
•
•
If the mask length is not a multiple of 8 (bits), as many 0-bits as required are added to  
the mask value MSB so that the mask value is contained in an integer number of bytes.  
The next field starts at the next byte boundary.  
Table 33. Inventory request format  
MSB  
SOF  
LSB  
EOF  
Request_flags Command
 
Optional AFI
 
Mask length  
8 bits
 
8 bits
 
8 bits
 
8 bits  
Mask value  
0 to 8 bytes  
CRC  
16 bits  
In the example provided in

and

, the mask length is 11 bits. Five 0-bits  
are added to the mask value MSB. The 11-bit mask and the current slot number are  
compared to the UID.  
Table 34. Example of the addition of 0-bits to an 11-bit mask value  
(b

15

) MSB  
LSB (b

0

)  
0000 0  
100 1100 1111  
0-bits added  
11-bit mask value  
70/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Anticollision  
Figure 50. Principle of comparison between the mask, the slot number and the UID  
-3″  
,3″  
-ASK VALUE RECEIVED IN THE )NVENTORY COMMAND  
ꢀꢀꢀꢀ ꢀꢄꢀꢀ
 
ꢄꢄꢀꢀ ꢄꢄꢄꢄ  
ꢄꢁ BITS  
B
-3″  
,3″  
4HE -ASK VALUE LESS THE PADDING ꢀS IS LOADED  
INTO THE 4AG COMPARATOR  
ꢄꢀꢀ ꢄꢄꢀꢀ
 
ꢄꢄꢄꢄ ꢄꢄ
 
BITS  
B
-3
“
,
3″  
4HE 3LOT COUNTER IS CALCULATED  
.B?SLOTS?FLAGS ꢅ ꢀ ꢆꢄꢁ SLOTSꢇꢈ 3LOT #OUNTER IS ꢉ BITS  
XXXX  
ꢉ BITS  
4HE 3LOT COUNTER IS CONCATENED TO THE -ASK VALUE  
.B?SLOTS?FLAGS ꢅ ꢀ  
-3″  
,3″  
XXXX ꢄꢀꢀ
 
ꢄꢄꢀꢀ ꢄꢄꢄꢄ
 
ꢄꢊ BITS  
B
5)$  
Bꢁꢌ  
Bꢀ  
4HE CONCATENATED RESULT IS COMPARED WITH  
THE LEAST SIGNIFICANT BITS OF THE
4
A G
5
)$ꢋ  
XXXX XXXX ꢋꢋꢋꢋꢋ XXXX XXXX
 
X XXX XXXX
 
XXXX XXXX  
ꢁꢉ BITS  
B
“ITS IGNORED  
#OMPARE  
!)ꢀꢁꢁꢂꢃ  
The AFI field is present if the AFI_flag is set.  
The pulse is generated according to the definition of the EOF in ISO/IEC 15693-2.  
The first slot starts immediately after the request EOF is received.
T
o
s
witch to the next slot,  
the VCD sends an EO
F
.  
The following rules and restrictions apply:  
•
If no M24LR04E-R answer is detected, the VCD may switch to the next slot by sending  
an EO
F
.  
•
If one or more M24LR04E-R answers are detected, the VCD waits until the complete  
frame has been received before sending an EOF for switching to the next slot.  
DocID022208 Rev 11  
71/146  
145  
 

Request processing by the M24LR04E-R  
M24LR04E-R  
22  
Request processing by the M24LR04E-R  
Upon reception of a valid request, the M24LR04E-R performs the following algorithm:  
•
•
•
•
•
•
NbS is the total number of slots (1 or 16)  
SN is the current slot number (0 to 15)  
LSB (value, n) function returns the n Less Significant Bits of value  
MSB (value, n) function returns the n Most Significant Bits of value  
“&” is the concatenation operator  
Slot_Frame is either an SOF or an EOF  
SN = 0  
if (Nb_slots_flag)  
then NbS = 1  
SN_length = 0  
endif  
else NbS = 16  
SN_length = 4  
endif  
label1:  
if LSB(UID, SN_length + Mask_length) =  
LSB(SN,SN_length)&LSB(Mask,Mask_length)  
then answer to inventory request  
endif  
wait (Slot_Frame)  
if Slot_Frame = SOF  
then Stop Anticollision  
decode/process request  
exit  
endif  
if Slot_Frame = EOF  
if SN < NbS-1  
then SN = SN + 1  
goto label1  
exit  
endif  
endif  
72/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Explanation of the possible cases  
23  
Explanation of the possible cases  

Figure 51

summarizes the main possible cases that can occur during an anticollision  
sequence when the number of slots is 16.  
The sequence of steps is as follows:  
•
The VCD sends an Inventory request, in a frame terminated by an EO
F
.
T
he number of  
slots is 16.  
•
M24LR04E-R_1 transmits its response in Slot 0. It is the only one to do so, therefore no  
collision occurs and its UID is received and registered by the VCD.  
•
•
The VCD sends an EOF in order to switch to the next slot.  
In Slot 1, two M24LR04E-Rs, M24LR04E-R_2 and M24LR04E-R_3 transmit a  
response, thus generating a collision. The VCD records the event and registers that a  
collision was detected in Slot 1.  
•
•
The VCD sends an EOF in order to switch to the next slot.  
In Slot 2, no M24LR04E-R transmits a response. Therefore the VCD does not detect  
any M24LR04E-R SOF and switches to the next slot by sending an EO
F
.  
•
•
•
In Slot 3, another collision occurs due to responses from M24LR04E-R_4 and  
M24LR04E-R_5.  
The VCD sends a request (for instance a Read Block) to M24LR04E-R_1 whose UID  
has already been correctly received.  
All M24LR04E-Rs detect an SOF and exit the anticollision sequence. They process this  
request and since the request is addressed to M24LR04E-R_1, only M24LR04E-R_1  
transmits a response.  
•
All M24LR04E-Rs are ready to receive another request. If it is an Inventory command,  
the slot numbering sequence restarts from 0.  
Note:  
The decision to interrupt the anticollision sequence is made by the VCD. It could have  
continued to send EOFs until Slot 16 and only then sent the request to M24LR04E-R.  
DocID022208 Rev 11  
73/146  
145  
 

Figure 51. Description of a possible anticollision sequence  
6ORWꢆꢈ
 
6ORWꢆꢄ
 
6ORWꢆꢅ
 
6ORWꢆꢂ
 
6
2
)
(
2
)
(
2
)
(
2
)
(
2
)
6
2
)
(
2
)
,QYHQWRUꢆ
 
5HTXHVW
 
5HTXHVWꢆWRꢆ
 
-ꢀꢁ,2ꢂꢁ%ꢃ2?ꢄ  
9&’  
5HVSRQVHꢆ
 
ꢅ
5HVSRQVHꢆ
 
ꢀ
5HVSRQVHꢆIURPꢆ
 
-ꢀꢁ,2ꢂꢁ%ꢃ2?ꢄ  
0ꢁꢂ/5ꢃꢂ(ꢄ5V  
5HVSRQVHꢆ
 
ꢄ
5HVSRQVHꢆ
 
ꢂ
5HVSRQVHꢆ
 
ꢁ
7LPLQJ  
W

ꢄ
 

W

ꢅ
 

W

ꢄ
 

W

ꢅ
 

W

ꢄ
 

W

ꢅ
 

W

ꢄ
 

1Rꢆ
 
FROOLVLRQ
 
1Rꢆ
 
UHVSRQVHꢆꢆ
 
&RPPHQW  
&ROOLVLRQ
 
&ROOLVLRQ
 
7LPHꢀꢀ  
06ꢀꢄꢀꢅꢂ9ꢄ
 
 

M24LR04E-R  
Inventory Initiated command  
24  
Inventory Initiated command  
The M24LR04E-R provides a special feature to improve the inventory time response of  
moving tags using the Initiate_flag value. This flag, controlled by the Initiate command,  
allows tags to answer to Inventory Initiated commands.  
For applications in which multiple tags are moving in front of a reader, it is possible to miss  
tags using the standard inventory command. The reason is that the inventory sequence has  
to be performed on a global tree search. For example, a tag with a particular UID value may  
have to wait the run of a long tree search before being inventoried. If the delay is too long,  
the tag may be out of the field before it has been detected.  
Using the Initiate command, the inventory sequence is optimized. When multiple tags are  
moving in front of a reader, the ones which are within the reader field are initiated by the  
Initiate command. In this case, a small batch of tags answers to the Inventory Initiated  
command, which optimizes the time necessary to identify all the tags. When finished, the  
reader has to issue a new Initiate command in order to initiate a new small batch of tags  
which are new inside the reader field.  
It is also possible to reduce the inventory sequence time using the Fast Initiate and Fast  
Inventory Initiated commands. These commands allow the M24LR04E-Rs to increase their  
response data rate by a factor of 2, up to 53 Kbit/s.  
DocID022208 Rev 11  
75/146  
145  
 

Timing definition  
M24LR04E-R  
25  
Timing definition  
25.1  
t

1

: M24LR04E-R response delay  
Upon detection of the rising edge of the EOF received from the VCD, the M24LR04E-R  
waits for a time t
 
before transmitting its response to a VCD request or switching to the  
1nom  
next slot during an inventory process. Values of t
 
are given in

. The EOF is defined  
1
in

.  
25.2  
t

2

: VCD new request delay  
t is
 
the time after which the VCD may send an EOF to switch to the next slot when one or  
2
more M24LR04E-R responses have been received during an Inventory command. It starts  
from the reception of the EOF from the M24LR04E-Rs.  
The EOF sent by the VCD may be either 10% or 100% modulated regardless of the  
modulation index used for transmitting the VCD request to the M24LR04E-R.  
t is
 
also the time after which the VCD may send a new request to the M24LR04E-R, as  
2
described in

.  
Values of t
 
are given in

.  
2
25.3  
t

3

: VCD new request delay when no response is received  
from the M24LR04E-R  
t is
 
the time after which the VCD may send an EOF to switch to the next slot when no  
3
M24LR04E-R response has been received.  
The EOF sent by the VCD may be either 10% or 100% modulated regardless of the  
modulation index used for transmitting the VCD request to the M24LR04E-R.  
From the time the VCD has generated the rising edge of an EOF:  
•
If this EOF is 100% modulated, the VCD waits for a time at least equal to t  
sending a new EO
F
.  
before  
3min  
•
If this EOF is 10% modulated, the VCD waits for a time at least equal to the sum of  
+ the M24LR04E-R nominal response time (which depends on the M24LR04E-R  
t
3min  
data rate and subcarrier modulation mode) before sending a new EO
F
.  
(1)  
Table 35. Timing values  
Minimum (min) values  
Nominal (nom) values  
Maximum (max) values  
t

1  

t

2  

t

3  

318.6 µs  
309.2 µs  
320.9 µs  
No t

nom  

No t

nom  

323.3 µs  
No t

max  

No t

max  

t

1max

(2)

+ t

SOF  

(3)  
1. The
 
tolerance of specific timings is ± 32/fC.  
2.

1max

does not apply for write-alike requests. Timing conditions for write-alike requests are defined in the  
t
command description.  
3. t

SOF

is the time taken by the M24LR04E-R to transmit an SOF to the VCD. t

SOF

depends on the current  
data rate: High data rate or Low data rate.  
76/146  
DocID022208 Rev 11  
 
 
 
 
 

M24LR04E-R  
Command codes  
26  
Command codes  
The M24LR04E-R supports the commands described in this section. Their codes are given  
in

.  
Table 36. Command codes  
Command code  
standard  
Command code  
custom  
Function  
Function  
01h  
02h  
20h  
21h  
23h  
25h  
26h  
27h  
28h  
29h  
2Ah  
2Bh  
–
Inventory  
2Ch  
B1h  
B2h  
B3h  
C0h  
C1h  
C2h  
C3h  
D1h  
D2h  
A0h  
A1h  
A2h  
A3h  
A4h  
Get Multiple Block Security Status  
Write-sector Password  
Lock-sector  
Stay Quiet  
Read Single Block  
Write Single Block  
Read Multiple Block  
Select  
Present-sector Password  
Fast Read Single Block  
Fast Inventory Initiated  
Fast Initiate  
Reset to Ready  
Write AFI  
Fast Read Multiple Block  
Inventory Initiated  
Initiate  
Lock AFI  
Write DSFID  
Lock DSFID  
Get System Info  
–
ReadCfg  
WriteEHCfg  
SetRstEHEn  
–
–
CheckEHEn  
–
–
WriteDOCfg  
DocID022208 Rev 11  
77/146  
145  
 
 

Command codes  
M24LR04E-R  
26.1  
Inventory  
When receiving the Inventory request, the M24LR04E-R runs the anticollision sequence.  
The Inventory_flag is set to 1. The meaning of flags 5 to 8 is shown in

.  
The request contains:  
•
•
•
•
•
•
the flags,  
the Inventory command code (see

),  
the AFI if the AFI flag is set,  
the mask length,  
the mask value,  
the CRC.  
The M24LR04E-R does not generate any answer in case of error.  
Table 37. Inventory request format  
Request  
SOF  
Optional  
AFI  
Mask  
length  
Mask  
value  
Request  
EOF  
Request_flags Inventory  
8 bits
 
01h  
CRC16  
–
8 bits  
8 bits  
0 – 64 bits  
16 bits  
–
The response contains:  
•
•
the flags,  
the Unique ID.  
Table 38. Inventory response format  
Response  
Response  
EOF  
Response_flags DSFID  
8 bits
 
8 bits  
UID  
CRC16  
16 bits  
SOF  
–
64 bits  
–
During an Inventory process, if the VCD does not receive an RF M24LR04E-R response, it  
waits for a time t
 
before sending an EOF to switch to the next slot. t
 
starts from the rising  
3
3
edge of the request EOF sent by the VCD.  
•
If the VCD sends a 100% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C SOF  
•
If the VCD sends a 10% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C NRT  
where:  
•
•
t
t
is the time required by the M24LR04E-R to transmit an SOF to the VCD,  
is the nominal response time of the M24LR04E-R.  
SOF  
NRT  
t
and t  
are dependent on the M24LR04E-R-to-VCD data rate and subcarrier  
SOF  
NRT  
modulation mode.  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF  
starting the inventory command to the end of the M24LR04E-R response. If the M24LR04E-  
R does not receive the corresponding slot marker, the RF WIP/BUSY pin remains at 0 until  
the next RF power-off.  
78/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
Figure 52. M24LR04E-R RF-Busy management following Inventory command  
ꢄꢎꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHSOLHVꢆLQꢆVORWꢆQꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVHꢃ
 
6ORWꢆꢄ
 
6ORWꢆQ
 
6
2
)
(
2
)
(
2
)
(
2
)
(
2
)
,QYHQWRU
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B%XV
 
ꢅꢎꢆ6ORWꢆQꢆQHYHUꢆRFFXUVꢃꢆ5)B%XVꢆLVꢆRQOꢆUHOHDVHGꢆEꢆ3RZHUꢋRIIꢃ
 
6ORWꢆꢄ
 
3RZHUꢋRII
 
6ORWꢆQ
 
6
2
)
(
2
)
(
2
)
(
2
)
,QYHQWRU
 
FRPPDQG
 
5)B%XV
 
ꢂꢎꢆ9&’ꢆVHQGVꢆDꢆ9DOLGꢆFRPPDQGꢆEHIRUHꢆVORWꢆQꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVH
 
ꢃ
6ORWꢆꢄ
 
6
2
)
(
2
)
(
2
)
6
2
)
(
2
)
,QYHQWRU
 
FRPPDQG
 
,1HZ
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B%XV
 
ꢀꢎꢆ9&’ꢆVHQGVꢆDꢆ%DGꢆFRPPDQGꢆꢍXQNQRZQꢆFRPPDQGꢆFRGHꢏꢆIDOVHꢆ&5&ꢃꢃꢃꢎꢆEHIRUHꢆVORWꢆQꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ9&’ꢆFRPPDQGꢃ
 
6ORWꢆꢄ
 
6
2
)
(
2
)
(
2
)
6
2
)
(
2
)
,QYHQWRU
 
FRPPDQG
 
,%DG
 
FRPPDQG
 
5)B%XV
 
06ꢄꢊꢇꢉꢇ9ꢂ
 
26.2  
Stay Quiet  
Command code = 0x02  
On receiving the Stay Quiet command, the M24LR04E-R enters the Quiet State if no error  
occurs, and does NOT send back a response. There is NO response to the Stay Quiet  
command even if an error occurs.  
DocID022208 Rev 11  
79/146  
145  
 
 

Command codes  
M24LR04E-R  
When in the Quiet state:  
•
•
the M24LR04E-R does not process any request if the Inventory_flag is set,  
the M24LR04E-R processes any Addressed request.  
The M24LR04E-R exits the Quiet State when:  
•
•
•
it is reset (power off),  
receiving a Select request. It then goes to the Selected state,  
receiving a Reset to Ready request. It then goes to the Ready state.  
Table 39. Stay Quiet request format  
Request  
SOF  
Request  
EOF  
Request_flags  
Stay Quiet  
UID  
CRC16  
–
8 bits  
02h  
64 bits  
16 bits  
–
The Stay Quiet command must always be executed in Addressed mode (Select_flag is reset  
to 0 and Address_flag is set to 1).  
Figure 53. Stay Quiet frame exchange between VCD and M24LR04E-R  
Stay Quiet  
request  
VCD  
SOF  
EOF  
M24LR04E-R  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 during the Stay  
Quiet command.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
80/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Command codes  
26.3  
Read Single Block  
On receiving the Read Single Block command, the M24LR04E-R reads the requested block  
and sends back its 32-bit value in the response. The Protocol_extension_flag should be set  
to 0 for the M24LR04E-R to operate correctly.  
Table 40. Read Single Block request format  
Request Request_ Read
 
Single  
Block  
number  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
flags  
Block  
–
8 bits  
20h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
Request flags  
UID (optional)  
Block number  
Table 41. Read Single Block response format when Error_flag is NOT set  
Sector  
Response  
SOF  
Response  
EOF  
Response_flags  
security  
Data  
CRC16  
status

(1)  

–
8 bits  
8 bits  
32 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Response parameters:  
•
•
Sector security status if Option_flag is set (see

)  
Four bytes of block data  
Table 42. Sector security status  
b

7  

b

6  

b

5  

b

4  

b

3  

b

2  

b

1  

b

0  

0: Current sector not locked  
1: Current sector locked  
Reserved for future  
use. All at 0.  
Password  
control bits  
Read / Write  
protection bits  
Table 43. Read Single Block response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
–
10h: the specified block is not available  
15h: the specified block is read-protected  
DocID022208 Rev 11  
81/146  
145  
 
 
 
 
 

Command codes  
M24LR04E-R  
Figure 54. Read Single Block frame exchange between VCD and M24LR04E-R  
Read Single Block  
request  
VCD  
SOF  
EOF  
Read Single Block  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Read Single Block command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.4  
Write Single Block  
On receiving the Write Single Block command, the M24LR04E-R writes the data contained  
in the request to the requested block and reports whether the write operation was  
successful in the response. The Protocol_extension_flag should be set to 0 for the  
M24LR04E-R to operate correctly.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not program correctly the data into the memory. The W  
t
time is equal to t  
+ 18 × 302 µs.  
1nom  
Table 44. Write Single Block request format  
Write  
Single  
Block  
Request Request_  
Block  
number  
Request  
EOF  
UID

(1)  

Data  
CRC16  
SOF  
flags  
–
8 bits  
21h  
64 bits  
8 bits  
32 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
•
Request flags  
UID (optional)  
Block number  
Data  
Table 45. Write Single Block response format when Error_flag is NOT set  
Response SOF
 
Response_flags  
8 bits  
CRC16  
Response EOF  
–
16 bits  
–
Response parameter:  
•
No parameter. The response is send back after the writing cycle.  
DocID022208 Rev 11  
82/146  
 
 
 
 

M24LR04E-R  
Command codes  
Table 46. Write Single Block response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
–
–
0Fh: error with no information given  
10h: the specified block is not available  
12h: the specified block is locked and its contents cannot be changed  
13h: the specified block was not successfully programmed  
Figure 55. Write Single Block frame exchange between VCD and M24LR04E-R  
Write Single  
Block request  
VCD  
SOF  
EOF  
Write Single  
Block response  
Write sequence when  
error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Write Single  
EOF  
M24LR04E-R  
<——————- W

t

—————> SOF  
Block response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Write Single Block command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid write single block command to the  
beginning of the M24LR04E-R response).  
DocID022208 Rev 11  
83/146  
145  
 
 

Command codes  
M24LR04E-R  
Figure 56. M24LR04E-R RF_Busy management following Write command  
ꢄꢎꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHSOLHVꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVHꢃ
 
:W
 
6
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B%XV
 
ꢅꢎꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHSOLHVꢆZKHQꢆ2SWLRQꢆIODJꢆLVꢆVHWꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVHꢃ
 
:W
 
6
2
)
(
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
Wꢄ
 
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B%XV
 
ꢂꢎꢆ9&’ꢆVHQGVꢆDꢆIRUELGGHQꢆ:ULWHꢆꢍVHFWRUꢆORFNꢏꢆSDVVZRUGꢋSURWHFWHGꢎꢃꢆ5)B%XVꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆFRPPDQGꢃ
 
ꢃ
Wꢄ
 
6
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B%XV
 
06ꢄꢊꢇꢉꢌ9ꢂ
 
When configuring in the RF Write in progress mode, the RF WIP/BUSY pin is tied to 0  
during the Write & verify sequence, as shown in

.  
84/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Command codes  
Figure 57. M24LR04E RF_Wip management following Write command  
ꢄꢎꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHSOLHVꢃꢆ5)B:LSꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVHꢃ
 
:W
 
6
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B:LS
 
ꢅꢎꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHSOLHVꢆZKHQꢆ2SWLRQꢆIODJꢆLVꢆVHWꢃꢆ5)B:LSꢆLVꢆUHOHDVHGꢆDIWHUꢆ0ꢅꢀ/5ꢈꢀ(ꢋ5ꢆUHVSRQVHꢃ
 
:W
 
6
2
)
(
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
Wꢄ
 
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B:LS
 
ꢂꢎꢆ9&’ꢆVHQGVꢆDꢆIRUELGGHQꢆ:ULWHꢆꢍVHFWRUꢆORFNꢏꢆSDVVZRUGꢋSURWHFWHGꢎꢃꢆ5)B:LSꢆUHPDLQVꢆDWꢆDꢆKLJKꢆLPSHGDQFHꢃ
 
ꢃ
Wꢄ
 
6
2
)
(
2
)
:ULWH
 
FRPPDQG
 
6
2
)
(
2
)
,UHSO
 
0ꢅꢀ/5ꢈꢀ(ꢋ5
 
5)B:LS
 
06ꢄꢊꢇꢉꢊ9ꢂ
 
DocID022208 Rev 11  
85/146  
145  
 

Command codes  
M24LR04E-R  
26.5  
Read Multiple Block  
When receiving the Read Multiple Block command, the M24LR04E-R reads the selected  
blocks and sends back their value in multiples of 32 bits in the response. The blocks are  
numbered from 00h to 1FFh in the request and the value is minus one (–1) in the field. For  
example, if the “Number of blocks” field contains the value 06h, seven blocks are read. The  
maximum number of blocks is fixed at 32 assuming that they are all located in the same  
sector. If the number of blocks overlaps sectors, the M24LR04E-R returns an error code.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.  
Table 47. Read Multiple Block request format  
Read  
Multiple  
Block  
First  
block  
number  
Request Request_  
Number  
of blocks  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
flags  
–
8 bits  
23h  
64 bits  
8 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
•
Request flags  
UID (optional)  
First block number  
Number of blocks  
Table 48. Read Multiple Block response format when Error_flag is NOT set  
Sector  
Response Response_  
Response  
security  
Data  
CRC16  
SOF  
flags  
EOF  
status

(1)  

–
8 bits  
8 bits

(2)  

32 bits

(2)  

16 bits  
–
1. Gray
 
means that the field is optional.  
2. Repeated
 
as needed.  
Response parameters:  
•
•
Sector security status if Option_flag is set (see

)  
N blocks of data  
Table 49. Sector security status  
b

7  

b

6  

b

5  

b

4  

b

3  

b

2  

b

1  

b

0  

Reserved for future  
use. All at 0.  
Password  
control bits  
Read / Write  
protection bits  
0: Current sector not locked  
1: Current sector locked  
Table 50. Read Multiple Block response format when Error_flag is set  
Response SOF
 
Response_flags  
8 bits  
Error code  
CRC16  
Response EOF  
–
8 bits  
16 bits  
–
86/146  
DocID022208 Rev 11  
 
 
 
 
 

M24LR04E-R  
Command codes  
Response parameter:  
Error code as Error_flag is set:  
•
–
–
–
0Fh: error with no information given  
10h: the specified block is not available  
15h: the specified block is read-protected  
Figure 58. Read Multiple Block frame exchange between VCD and M24LR04E-R  
Read Multiple  
Block request  
VCD  
SOF  
EOF  
Read Multiple  
Block response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Read Multiple Block command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.6  
Select  
When receiving the Select command:  
•
If the UID is equal to its own UID, the M24LR04E-R enters or stays in the Selected  
state and sends a response.  
•
If the UID does not match its own, the selected M24LR04E-R returns to the Ready  
state and does not send a response.  
The M24LR04E-R answers an error code only if the UID is equal to its own UID. If not, no  
response is generated. If an error occurs, the M24LR04E-R remains in its current state.  
Table 51. Select request format  
Request Request_  
Request  
EOF  
Select  
UID  
CRC16  
SOF  
flags  
–
8 bits  
25h  
64 bits  
16 bits  
–
Request parameter:  
UID  
•
Table 52. Select Block response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
DocID022208 Rev 11  
87/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Response parameter:  
No parameter  
•
Table 53. Select response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
03h: the option is not supported  
•
–
Figure 59. Select frame exchange between VCD and M24LR04E-R  
Select  
request  
VCD  
SOF  
EOF  
Select  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Select command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
88/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Command codes  
26.7  
Reset to Ready  
On receiving a Reset to Ready command, the M24LR04E-R returns to the Ready state if no  
error occurs. In the Addressed mode, the M24LR04E-R answers an error code only if the  
UID is equal to its own UID. If not, no response is generated.  
Table 54. Reset to Ready request format  
Request Request_ Reset
 
to  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
flags  
Ready  
–
8 bits  
26h  
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
UID (optional)  
Table 55. Reset to Ready response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter  
•
Table 56. Reset to ready response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags  
Error code  
CRC16  
SOF  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
03h: the option is not supported  
•
–
Figure 60. Reset to Ready frame exchange between VCD and M24LR04E-R  
Reset to  
VCD  
SOF  
Ready  
EOF  
request  
Reset to  
Ready  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
response  
DocID022208 Rev 11  
89/146  
145  
 
 
 
 
 

Command codes  
M24LR04E-R  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Reset to ready command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.8  
Write AFI  
On receiving the Write AFI request, the M24LR04E-R programs the 8-bit AFI value to its  
memory. The Option_flag is supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not write correctly the AFI value into the memory. The W  
t
time is equal to t  
+ 18 × 302 µs.  
1nom  
Table 57. Write AFI request format  
UID

(1)  

Request Request Write  
Request  
EOF  
AFI  
CRC16  
SOF  
_flags  
AFI  
–
8 bits  
27h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
•
Request flags  
UID (optional)  
AFI  
Table 58. Write AFI response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter  
•
Table 59. Write AFI response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
–
12h: the specified block is locked and its contents cannot be changed  
13h: the specified block was not successfully programmed  
90/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Figure 61. Write AFI frame exchange between VCD and M24LR04E-R  
Write AFI  
request  
VCD  
SOF  
EOF  
Write AFI  
response  
Write sequence  
when error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Write AFI  
<—————— W

t

————–> SOF
 
EOF  
M24LR04E-R  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Write AFI command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid Write AFI command to the  
beginning of the M24LR04E-R response).  
26.9  
Lock AFI  
On receiving the Lock AFI request, the M24LR04E-R locks the AFI value permanently. The  
Option_flag is supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not Lock correctly the AFI value in memory. The W
 
time is  
t
equal to t  
+ 18 × 302 µs.  
1nom  
Table 60. Lock AFI request format  
Request  
SOF  
Request  
EOF  
Request_flags Lock
 
AFI  
8 bits
 
28h  
UID

(1)  

CRC16  
–
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
Request Flags  
UID (optional)  
Table 61. Lock AFI response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter  
•
DocID022208 Rev 11  
91/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Table 62. Lock AFI response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags  
Error code  
CRC16  
SOF  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
–
11h: the specified block is already locked and thus cannot be locked again  
14h: the specified block was not successfully locked  
Figure 62. Lock AFI frame exchange between VCD and M24LR04E-R  
Lock AFI  
request  
VCD  
SOF  
EOF  
Lock AFI  
response  
Lock sequence  
when error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Lock AFI  
response  
M24LR04E-R  
<—————– W

t

———–> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Lock AFI command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
entire duration of the internal write cycle (from the end of valid Lock AFI command to the  
beginning of the M24LR04E-R response).  
92/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Command codes  
26.10  
Write DSFID  
On receiving the Write DSFID request, the M24LR04E-R programs the 8-bit DSFID value to  
its memory. The Option_flag is supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not write correctly the DSFID value in memory. The W  
t
time is equal to t  
+ 18 × 302 µs.  
1nom  
Table 63. Write DSFID request format  
Request Request_
 
Write  
Request  
EOF  
UID

(1)  

DSFID  
CRC16  
SOF  
flags  
DSFID  
–
8 bits  
29h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
•
Request flags  
UID (optional)  
DSFID  
Table 64. Write DSFID response format when Error_flag is NOT set  
Response  
Response  
EOF  
Response_flags  
CRC16  
SOF  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter  
•
Table 65. Write DSFID response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags  
Error code  
CRC16  
SOF  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
–
12h: the specified block is locked and its contents cannot be changed  
13h: the specified block was not successfully programmed  
DocID022208 Rev 11  
93/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Figure 63. Write DSFID frame exchange between VCD and M24LR04E-R  
Writ
e
D
SFID EO  
VCD  
SOF  
request  
F
SO Write
 
DSFID EO  
Write sequence  
when error  
M24LR04E-R  
<-t

1

->  
F
response  
F
SO Writ
e
D
SFID  
M24LR04E-R  
<—————- W

t

———->  
EOF  
F
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Write DSFID command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid Write DSFID command to  
beginning of the M24LR04E-R response).  
26.11  
Lock DSFID  
On receiving the Lock DSFID request, the M24LR04E-R locks the DSFID value  
permanently. The Option_flag is supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not lock correctly the DSFID value in memory. The W  
t
time is equal to t  
+ 18 × 302 µs.  
1nom  
Table 66. Lock DSFID request format  
Request Request_
 
Lock  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
flags  
DSFID  
–
8 bits  
2Ah  
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
Request flags  
UID (optional)  
Table 67. Lock DSFID response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter.  
•
94/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Table 68. Lock DSFID response format when Error_flag is set  
Response  
SOF  
Response  
EOF  
Response_flags  
Error code  
CRC16  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
11h: the specified block is already locked and thus cannot be locked again  
14h: the specified block was not successfully locked  
.
Figure 64. Lock DSFID frame exchange between VCD and M24LR04E-R  
Lock  
VCD  
SOF  
DSFID  
EOF  
request  
Lock DSFID  
response  
Lock sequence  
when error  
M24LR04E-R  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Lock  
<—————– W

t

————> SOF  
DSFID  
EOF  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Lock DSFID command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid Lock DSFID command to the  
beginning of the M24LR04E-R response).  
DocID022208 Rev 11  
95/146  
145  
 
 

Command codes  
M24LR04E-R  
26.12  
Get System Info  
When receiving the Get System Info command, the M24LR04E-R sends back its  
information data in the response.The Option_flag is not supported. The Get System Info can  
be issued in both Addressed and Non Addressed modes.  
The Protocol_extension_flag must be set to 0.

shows the M24LR04E-R response  
to the Get System Info command depending on the value of the Protocol_extension_flag.  
Table 69. Get System Info request format  
Request Request  
Request  
EOF  
Get System Info  
UID

(1)  

CRC16  
SOF  
_flags  
–
8 bits  
2Bh  
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
Request flags  
UID (optional)  
Table 70. Get System Info response format when Protocol_extension_flag = 0 and  
Error_flag is NOT set  
Response Response Information  
Memory  
size  
IC  
ref.  
CRC Response  
UID DSFID AFI  
SOF  
_flags  
flags  
16  
EOF  
64  
16  
bits  
–
00h  
0Fh  
8 bits
 
8 bits  
bits  
037F  
5A  
–
Response parameters:  
•
Information flags set to 0Fh. DSFID, AFI, Memory Size and IC reference fields are  
present.  
•
•
•
•
•
UID code on 64 bits  
DSFID value  
AFI value  
Memory size. The M24LR04E-R provides 128 blocks (7Fh) of four bytes (03h)  
IC reference: the 8 bits are significant.  
Table 71. Get System Info response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags Error
 
code  
01h 8
 
bits  
CRC16  
SOF  
–
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
03h: Option not supported  
•
–
96/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Figure 65. Get System Info frame exchange between VCD and M24LR04E-R  
Get System Info  
request  
VCD  
SOF  
EOF  
Get System Info  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Get System Info command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
DocID022208 Rev 11  
97/146  
145  
 

Command codes  
M24LR04E-R  
26.13  
Get Multiple Block Security Status  
When receiving the Get Multiple Block Security Status command, the M24LR04E-R sends  
back the sector security status. The blocks are numbered from 00h to 01FFh in the request  
and the value is minus one (–1) in the field. For example, a value of ’06’ in the “Number of  
blocks” field requests to return the security status of seven blocks.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.  
During the M24LR04E-R response, if the internal block address counter reaches 01FFh, it  
rolls over to 0000h and the Sector Security Status bytes for that location are sent back to the  
reader.  
Table 72. Get Multiple Block Security Status request format  
Get  
Multiple  
Block  
Security  
Status  
First  
block  
number  
Request Request  
Number  
of blocks  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
_flags  
–
8 bits  
2Ch  
64 bits  
8 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
•
•
Request flags  
UID (optional)  
First block number  
Number of blocks  
Table 73. Get Multiple Block Security Status response format when Error_flag is NOT  
set  
Response  
SOF  
Response_  
flags  
Sector security  
status  
Response  
EOF  
CRC16  
–
8 bits  
8 bits

(1)  

16 bits  
–
1. Repeated
 
as needed.  
Response parameters:  
•
Sector security status (see

)  
Table 74. Sector security status  
b

4

b

3

b

2

b

1  

b

7  

b

6  

b

5  

b

0  

0: Current sector not locked  
1: Current sector locked  
Reserved for future use.  
All at 0.  
Password control  
bits  
Read / Write  
protection bits  
98/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Table 75. Get Multiple Block Security Status response format when Error_flag is set  
Response  
SOF  
Response_  
flags  
Response  
EOF  
Error code  
CRC16  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
03h: the option is not supported  
10h: the specified block is not available  
Figure 66. Get Multiple Block Security Status frame exchange between VCD and  
M24LR04E-R  
Get Multiple Block  
Security Status  
VCD  
SOF  
EOF  
Get Multiple Block  
Security Status  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Get Multiple Block Security Status command to the end of the M24LR04E-R  
response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.14  
Write-sector Password  
On receiving the Write-sector Password command, the M24LR04E-R uses the data  
contained in the request to write the password and reports whether the operation was  
successful in the response. The Option_flag is supported.  
During the RF write cycle time, W , there must be no modulation at all (neither 100% nor  
t
10%), otherwise, the M24LR04E-R may not correctly program the data into the memory.  
The W
 
time is equal to t  
+ 18 × 302 µs. After a successful write, the new value of the  
1nom  
t
selected password is automatically activated. It is not required to present the new password  
value until M24LR04E-R power-down.  
Table 76. Write-sector Password request format  
Write-  
Request Request  
IC Mfg  
code  
Password  
number  
Request  
EOF  
sector  
UID

(1)  

Data  
CRC16  
SOF  
_flags  
password  
–
8 bits  
B1h  
02h  
64 bits  
8 bits  
32 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
DocID022208 Rev 11  
99/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Request parameter:  
•
•
•
•
Request flags  
UID (optional)  
Password number (01h = Pswd1, 02h = Pswd2, 03h = Pswd3, other = Error)  
Data  
Table 77. Write-sector Password response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
no parameter.  
•
Table 78. Write-sector Password response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
–
–
10h: the password number is incorrect  
12h: the session was not opened before the password update  
13h: the specified block was not successfully programmed  
0Fh: the presented password is incorrect  
Figure 67. Write-sector Password frame exchange between VCD and M24LR04E-R  
Write-  
sector  
Password  
request  
VCD  
SOF  
EOF  
Write-sector  
Password  
response  
Write sequence  
when error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Write-  
sector  
Password  
M24LR04E-R  
<—————- W

t

————-> SOF  
EOF  
response  
100/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Write-sector Password command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid Write sector password command  
to the beginning of the M24LR04E-R response).  
26.15  
Lock-sector  
On receiving the Lock-sector command, the M24LR04E-R sets the access rights and  
permanently locks the selected sector. The Option_flag is supported.  
A sector is selected by giving the address of one of its blocks in the Lock-sector request  
(Sector number field). For example, addresses 0 to 31 are used to select sector 0 and  
addresses 32 to 63 are used to select sector 1. Care must be taken when issuing the Lock-  
sector command as all the blocks belonging to the same sector are automatically locked by  
a single command.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not correctly lock the memory block. The W
 
time is equal  
t
to t  
+ 18 × 302 µs.  
1nom  
Table 79. Lock-sector request format  
IC  
Mfg  
code  
Sector  
security CRC16  
status  
Request Request  
Lock-  
sector  
Sector  
number  
Request  
EOF  
UID

(1)  

SOF  
_flags  
–
8 bits  
B2h  
02h  
64 bits  
8 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
•
Request flags  
(optional) UID  
Sector number  
Sector security status (refer to

)  
Table 80. Sector security status  
b

7  

0
b

6  

0
b

5  

0
b

4  

b

3  

b

2  

b

1  

b

0  

1
Read / Write protection  
bits  
password control bits  
Table 81. Lock-sector response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
DocID022208 Rev 11  
101/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Response parameter:  
No parameter  
•
Table 82. Lock-sector response format when Error_flag is set  
Response  
Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
–
10h: the specified block is not available  
11h: the specified block is already locked and thus cannot be locked again  
14h: the specified block was not successfully locked  
Figure 68. Lock-sector frame exchange between VCD and M24LR04E-R  
Lock-sector  
request  
VCD  
SOF  
EOF  
Lock-sector  
response  
Lock sequence when  
error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
Lock-sector  
EOF  
M24LR04E-R  
<————— W

t

———–> SOF  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Lock-sector command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
duration of the internal write cycle (from the end of a valid Lock sector command to the  
beginning of the M24LR04E-R response).  
26.16  
Present-sector Password  
On receiving the Present-sector Password command, the M24LR04E-R compares the  
requested password with the data contained in the request and reports whether the  
operation has been successful in the response. The Option_flag is supported.  
During the comparison cycle equal to W , there should be no modulation (neither 100% nor  
t
10%), otherwise, the M24LR04E-R the Password value may not be correctly compared. The  
W time
 
is equal to t  
+ 18 × 302 µs.  
t
1nom  
After a successful command, the access to all the memory blocks linked to the password is  
changed as described in

.  
102/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
Table 83. Present-sector Password request format  
Present-  
sector  
Password code  
IC  
Mfg  
Request Request  
Password  
number  
Request  
CRC16  
UID

(1)  

Password  
SOF  
_flags  
EOF  
–
8 bits  
B3h 02h  
64 bits  
8 bits  
32 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameter:  
•
•
•
•
Request flags  
UID (optional)  
Password Number (0x01 = Pswd1, 0x02 = Pswd2, 0x03 = Pswd3, other = Error)  
Password  
Table 84. Present-sector Password response format when Error_flag is NOT set  
Response  
SOF  
Response  
EOF  
Response_flags  
CRC16  
–
8 bits  
16 bits  
–
Response parameter:  
No parameter. The response is send back after the write cycle.  
•
Table 85. Present-sector Password response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags  
Error code  
CRC16  
SOF  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
10h: the password number is incorrect  
0Fh: the present password is incorrect  
DocID022208 Rev 11  
103/146  
145  
 
 
 

Command codes  
M24LR04E-R  
Figure 69. Present-sector Password frame exchange between VCD and M24LR04E-R  
Present-  
sector  
password  
VCD  
SOF response EOF  
OR error  
0F (bad  
password)  
Present-sector  
password EOF  
sequence when  
error  
M24LR04E-R  
<-t

1

-> SOF  
response  
Present-  
sector  
password  
M24LR04E-R  
<—————- W

t

————> SOF  
EOF  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Present Sector Password command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY remains in high-Z  
state.  
104/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Command codes  
26.17  
Fast Read Single Block  
On receiving the Fast Read Single Block command, the M24LR04E-R reads the requested  
block and sends back its 32-bit value in the response. The Option_flag is supported. The  
data rate of the response is multiplied by 2.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.  
The subcarrier_flag should be set to 0, otherwise the M24LR04E-R answers with an error  
code.  
Table 86. Fast Read Single Block request format  
Fas
t
R
ead  
Request Request_  
I
C
M
fg  
code  
Block  
Request  
EOF  
Single  
Block  
UID

(1)  

CRC16  
SOF  
flags  
number  
–
8 bits  
C0h  
02h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
Request flags  
UID (optional)  
Block number  
Table 87. Fast Read Single Block response format when Error_flag is NOT set  
Sector  
Response Response  
Response  
EOF  
security  
Data  
CRC16  
SOF  
_flags  
status

(1)  

–
8 bits  
8 bits  
32 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Response parameters:  
•
•
Sector security status if Option_flag is set (see

)  
Four bytes of block data  
Table 88. Sector security status  
b

7  

b

6  

b

5  

b

4  

b

3  

b

2  

b

1  

b

0  

0: Current sector not locked  
1: Current sector locked  
Reserved for future used.  
All at 0.  
Password control  
bits  
Read / Write  
protection bits  
Table 89. Fast Read Single Block response format when Error_flag is set  
Response  
Response  
EOF  
Response_flags  
Error code  
CRC16  
SOF  
–
8 bits  
8 bits  
16 bits  
–
DocID022208 Rev 11  
105/146  
145  
 
 
 
 
 

Command codes  
M24LR04E-R  
Response parameter:  
Error code as Error_flag is set:  
•
–
–
10h: the specified block is not available  
15h: the specified block is read protected  
Figure 70. Fast Read Single Block frame exchange between VCD and M24LR04E-R  
Fast Read Single  
Block request  
VCD  
SOF  
EOF  
Fast Read Single  
Block response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Fast Read Single block command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.18  
Fast Inventory Initiated  
Before receiving the Fast Inventory Initiated command, the M24LR04E-R must have  
received an Initiate or a Fast Initiate command in order to set the Initiate_ flag. If not, the  
M24LR04E-R does not answer to the Fast Inventory Initiated command.  
The subcarrier_flag should be set to 0, otherwise the M24LR04E-R answers with an error  
code.  
On receiving the Fast Inventory Initiated request, the M24LR04E-R runs the anticollision  
sequence. The Inventory_flag must be set to 1. The meaning of flags 5 to 8 is shown in  

T

. The data rate of the response is multiplied by 2.  
The request contains:  
•
•
•
•
•
•
the flags,  
the Inventory command code,  
the AFI if the AFI flag is set,  
the mask length,  
the mask value,  
the CRC.  
The M24LR04E-R does not generate any answer in case of error.  
Table 90. Fast Inventory Initiated request format  
Fast  
Request Request  
IC Mfg
 
Optional Mask  
Request  
EOF  
Inventory  
Initiated  
Mask value  
CRC16  
SOF  
_flags  
code  
AFI  
length  
–
8 bits  
C1h  
02h  
8 bits  
8 bits  
0 – 64 bits  
16 bits  
–
106/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
The Response contains:  
•
•
the flags,  
the Unique ID.  
Table 91. Fast Inventory Initiated response format  
Response Response  
Response  
DSFID  
UID  
CRC16  
16 bits  
SOF  
_flags  
EOF  
–
8 bits  
8 bits  
64 bits  
–
During an Inventory process, if the VCD does not receive an RF M24LR04E-R response, it  
waits for a time t
 
before sending an EOF to switch to the next slot. t
 
starts from the rising  
3
3
edge of the request EOF sent by the VCD.  
•
If the VCD sends a 100% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C SOF  
•
If the VCD sends a 10% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C NRT  
where:  
•
•
t
t
is the time required by the M24LR04E-R to transmit an SOF to the VCD  
is the nominal response time of the M24LR04E-R  
SOF  
NRT  
t
and t  
are dependent on the M24LR04E-R-to-VCD data rate and subcarrier  
SOF  
NRT  
modulation mode.  
When configured in the RF busy mode, the RF WIP/BUSY pin is driven to 0 from the SOF  
starting the inventory command to the end of the M24LR04E-R response.If the M24LR04E-  
R does not receive the corresponding slot marker, the RF WIP/BUSY pin remains at 0 till the  
next RF power-off.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
DocID022208 Rev 11  
107/146  
145  
 

Command codes  
M24LR04E-R  
26.19  
Fast Initiate  
On receiving the Fast Initiate command, the M24LR04E-R sets the internal Initiate_flag and  
sends back a response only if it is in the Ready state. The command has to be issued in the  
Non Addressed mode only (Select_flag is reset to 0 and Address_flag is reset to 0). If an  
error occurs, the M24LR04E-R does not generate any answer. The Initiate_flag is reset after  
a power-off of the M24LR04E-R. The data rate of the response is multiplied by 2.  
The subcarrier_flag should be set to 0, otherwise the M24LR04E-R answers with an error  
code.  
The request contains:  
•
No data  
Table 92. Fast Initiate request format  
Request  
SOF  
Fast  
Initiate  
IC Mfg  
Code  
Request  
EOF  
Request_flags  
CRC16  
–
8 bits  
C2h  
02h  
16 bits  
–
The response contains:  
•
•
the flags,  
the Unique ID.  
Table 93. Fast Initiate response format  
Response Response  
Response  
EOF  
DSFID  
UID  
CRC16  
SOF  
_flags  
–
8 bits  
8 bits  
64 bits  
16 bits  
–
Figure 71. Fast Initiate frame exchange between VCD and M24LR04E-R  
Fast Initiate  
request  
VCD  
SOF  
EOF  
Fast Initiate  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Fast Initiate command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
108/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
26.20  
Fast Read Multiple Block  
On receiving the Fast Read Multiple Block command, the M24LR04E-R reads the selected  
blocks and sends back their value in multiples of 32 bits in the response. The blocks are  
numbered from 00h to 1FFh in the request and the value is minus one (–1) in the field. For  
example, if the “Number of blocks” field contains the value 06h, seven blocks are read. The  
maximum number of blocks is fixed to 32 assuming that they are all located in the same  
sector. If the number of blocks overlaps sectors, the M24LR04E-R returns an error code.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly.  
The Option_flag is supported. The data rate of the response is multiplied by 2.  
The subcarrier_flag should be set to 0, otherwise the M24LR04E-R answers with an error  
code.  
Table 94. Fast Read Multiple Block request format  
Fast  
First  
block  
number blocks  
Number  
of  
Request Request_  
Read  
Multiple code  
Block  
I
C
M
fg  
Request  
EOF  
UID

(1)  

CRC16  
SOF  
flags  
–
8 bits  
C3h  
02h  
64 bits  
8 bits
 
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
•
Request flag  
UID (Optional)  
First block number  
Number of blocks  
Table 95. Fast Read Multiple Block response format when Error_flag is NOT set  
Sector  
Response Response_  
Response  
EOF  
security  
Data  
CRC16  
SOF  
flags  
status

(1)  

–
8 bits  
8 bits

(2)  

32 bits

(2)  

16 bits  
–
1. Gray
 
means that the field is optional.  
2. Repeated
 
as needed.  
Response parameters:  
•
•
Sector security status if Option_flag is set (see

)  
N block of data  
Table 96. Sector security status if Option_flag is set  
b

5

b

4

b

3

b

2

b

1

b

0  

b

7  

b

6  

Reserved for future use.  
All at 0.  
Password  
control bits  
Read / Write
 
0: Current sector not locked  
protection bits
 
1: Current sector locked  
DocID022208 Rev 11  
109/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Table 97. Fast Read Multiple Block response format when Error_flag is set  
Response SOF
 
Response_flags  
8 bits  
Error code  
CRC16  
Response EOF  
–
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
–
–
03h: the option is not supported  
10h: block address not available  
15h: block read-protected  
Figure 72. Fast Read Multiple Block frame exchange between VCD and M24LR04E-R  
Fast Read  
VCD  
SOF Multiple
 
Block EOF  
request  
Fast Read  
<-t

1

-> SOF
 
Multiple Block
 
EOF  
response  
M24LR04E-R  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Fast Read Multiple Block command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.21  
Inventory Initiated  
Before receiving the Inventory Initiated command, the M24LR04E-R must have received an  
Initiate or a Fast Initiate command in order to set the Initiate_ flag. If not, the M24LR04E-R  
does not answer to the Inventory Initiated command.  
On receiving the Inventory Initiated request, the M24LR04E-R runs the anticollision  
sequence. The Inventory_flag must be set to 1. The meaning of flags 5 to 8 is given in  
The request contains:  
•
•
•
•
•
•
the flags,  
the Inventory Command code,  
the AFI if the AFI flag is set,  
the mask length,  
the mask value,  
the CRC.  
The M24LR04E-R does not generate any answer in case of error.  
110/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
Table 98. Inventory Initiated request format  
IC  
Request Request Inventory  
Optional Mask  
Request  
CRC16  
Mfg  
Mask value  
SOF  
_flags  
Initiated  
AFI  
length  
EOF  
code  
–
8 bits  
D1h  
02h  
8 bits  
8 bits  
0 – 64 bits  
16 bits  
–
The response contains:  
•
•
the flags,  
the Unique ID.  
Table 99. Inventory Initiated response format  
Response Response  
Response  
EOF  
DSFID  
UID  
CRC16  
16 bits  
SOF  
_flags  
–
8 bits  
8 bits  
64 bits  
–
During an Inventory process, if the VCD does not receive an RF M24LR04E-R response, it  
waits for a time t
 
before sending an EOF to switch to the next slot. t
 
starts from the rising  
3
3
edge of the request EOF sent by the VCD.  
•
If the VCD sends a 100% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C SOF  
•
If the VCD sends a 10% modulated EO
F
,
t
he minimum value of t
 
is:  
3
t
= 4384/f
 
(323.3µs) + t  
3min  
C NRT  
where:  
•
•
t
t
is the time required by the M24LR04E-R to transmit an SOF to the VCD  
is the nominal response time of the M24LR04E-R  
SOF  
NRT  
t
and t  
are dependent on the M24LR04E-R-to-VCD data rate and subcarrier  
SOF  
NRT  
modulation mode.  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF  
starting the inventory command to the end of the M24LR04E-R response. If the M24LR04E-  
R does not receive the corresponding slot marker, the RF WIP/BUSY pin remains at 0 till the  
next RF power-off.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
DocID022208 Rev 11  
111/146  
145  
 
 

Command codes  
M24LR04E-R  
26.22  
Initiate  
On receiving the Initiate command, the M24LR04E-R sets the internal Initiate_flag and  
sends back a response only if it is in the ready state. The command has to be issued in the  
Non Addressed mode only (Select_flag is reset to 0 and Address_flag is reset to 0). If an  
error occurs, the M24LR04E-R does not generate any answer. The Initiate_flag is reset after  
a power-off of the M24LR04E-R.  
The request contains:  
•
No data  
Table 100. Initiate request format  
IC Mfg  
Request  
SOF  
Request  
EOF  
Request_flags  
Initiate  
CRC16  
code  
–
8 bits  
D2h  
02h  
16 bits  
–
The response contains:  
•
•
the flags,  
the Unique ID.  
.
Table 101. Initiate Initiated response format  
Response Response  
Response  
EOF  
DSFID  
UID  
CRC16  
SOF  
_flags  
–
8 bits  
8 bits  
64 bits  
16 bits  
–
Figure 73. Initiate frame exchange between VCD and M24LR04E-R  
Initiate  
request  
VCD  
SOF  
EOF  
Initiate  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the Initiate command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
112/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
26.23  
ReadCfg  
On receiving the ReadCfg command, the M24LR04E-R reads the Configuration byte and  
sends back its 8-bit value in the response.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly. If  
the Protocol_extension_flag is at 1, the M24LR04E-R answers with an error code. The  
Option_flag is not supported. The Inventory_flag must be set to 0.  
Table 102. ReadCfg request format  
Request Request_  
Request  
EOF  
ReadCfg  
IC Mfg code  
UID

(1)  

CRC16  
SOF  
flags  
–
8 bits  
A0h  
02h  
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
UID (optional)  
Table 103. ReadCfg response format when Error_flag is NOT set  
Response  
EOF  
Response SOF  
Response_flags  
Data  
CRC16  
–
8 bits  
8 bits  
16 bits  
–
Response parameters:  
One byte of data: Configuration byte  
•
Table 104. ReadCfg response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
–
03h: the option is not supported  
0Fh: error with no information given  
Figure 74. ReadCfg frame exchange between VCD and M24LR04E-R  
VCD  
SOF  
ReadCfg request  
EOF  
M24LR04E-R  
<-t

1

-> SOF ReadCfg
 
response EOF  
DocID022208 Rev 11  
113/146  
145  
 
 
 
 
 

Command codes  
M24LR04E-R  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the ReadCfg command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.24  
WriteEHCfg  
On receiving the WriteEHCfg command, the M24LR04E-R writes the data contained in the  
request to the Configuration byte and reports whether the write operation was successful in  
the response. The Protocol_extension_flag should be set to 0 for the M24LR04E-R to  
operate correctly. If the Protocol_extension_flag is at 1, the M24LR04E-R answers with an  
error code.  
The Option_flag is supported, the Inventory_flag is not supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not program correctly the data into the Configuration byte.  
The W
 
time is equal to t  
+ 18 × 302 µs.  
t
1nom  
Table 105. WriteEHCfg request format  
IC Mfg  
Request Request_  
Request  
EOF  
WriteEHCfg  
UID

(1)  

Data  
CRC16  
SOF  
flags  
code  
–
8 bits  
A1h  
02h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
Request flags  
UID (optional)  
Data: during WriteEHCfg command, bit 3 of the data is ignored (see

).  
Table 106. WriteEHCfg response format when Error_flag is NOT set  
Response SOF
 
Response_flags  
8 bits  
CRC16  
Response EOF  
–
16 bits  
–
Response parameter:  
No parameter. The response is send back after the writing cycle.  
•
Table 107. WriteEHCfg response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
•
–
13h: the specified block was not successfully programmed  
114/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Figure 75. WriteEHCfg frame exchange between VCD and M24LR04E-R  
WriteEHCfg  
request  
VCD  
SOF  
EOF  
WriteEHCfg  
response  
WriteEHCfg sequence  
when error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
WriteEHCfg  
EOF  
M24LR04E-R  
<——————- W

t

————–> SOF  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the WriteEHCfg command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
entire duration of the internal write cycle (from the end of a valid WriteEHCfg command to  
the beginning of the M24LR04E-R response).  
26.25  
WriteDOCfg  
On receiving the WriteDOCfg command, the M24LR04E-R writes the data contained in the  
request to the Configuration byte and reports whether the write operation was successful in  
the response. The Protocol_extension_flag should be set to 0 for the M24LR04E-R to  
operate correctly. If the Protocol_extension_flag is at 1, the M24LR04E-R answers with an  
error code.  
The Option_flag is supported, the Inventory_flag is not supported.  
During the RF write cycle W , there should be no modulation (neither 100% nor 10%),  
t
otherwise, the M24LR04E-R may not program correctly the data into the Configuration byte.  
The W
 
time is equal to t  
+ 18 × 302 µs.  
t
1nom  
Table 108. WriteDOCfg request format  
IC Mfg  
Request  
SOF  
Request_  
flags  
Request  
EOF  
WriteDOCfg  
UID

(1)  

Data  
CRC16  
code  
–
8 bits  
A4h  
02h  
64 bits  
8 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
Request flag  
UID (optional)  
Data: during a WriteDOCfg command, bits 2 to 0 of the data are ignored (see

).  
DocID022208 Rev 11  
115/146  
145  
 
 
 

Command codes  
M24LR04E-R  
Table 109. WriteDOCfg response format when Error_flag is NOT set  
Response SOF
 
Response_flags  
8 bits  
CRC16  
Response EOF  
–
16 bits  
–
Response parameter:  
No parameter. The response is sent back after the writing cycle.  
•
Table 110. WriteDOCfg response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
13h: the specified block was not successfully programmed  
•
–
Figure 76. WriteDOCfg frame exchange between VCD and M24LR04E-R  
WriteDOCfg  
request  
VCD  
SOF  
EOF  
WriteDOCfg  
response  
WriteDOCfg sequence  
when error  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
WriteDOCfg  
EOF  
M24LR04E-R  
<—————– W

t

————–> SOF  
response  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the WriteEHCfg command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin is tied to 0 for the  
entire duration of the internal write cycle (from the end of a valid WriteDOCfg command to  
the beginning of the M24LR04E-R response).  
116/146  
DocID022208 Rev 11  
 
 
 

M24LR04E-R  
Command codes  
26.26  
SetRstEHEn  
On receiving the SetRstEHEn command, the M24LR04E-R sets or resets the EH_enable bit  
in the volatile Control register. The Protocol_extension_flag should be set to 0 for the  
M24LR04E-R to operate correctly. If the Protocol_extension_flag is at 1, the M24LR04E-R  
answers with an error code. The Option_flag and the Inventory_flag are not supported.  
Table 111. SetRstEHEn request format  
Request Request_  
IC Mfg  
code  
Request  
EOF  
SetRstEHEn  
UID

(1)  

Data CRC16  
SOF  
flags  
–
8 bits  
A2h  
02h  
64 bits  
8 bits
 
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
•
•
Request flags  
UID (optional)  
Data: during a SetRstEHEn command, bits 7 to 1 are ignored. Bit 0 is the EH_enable  
bit.  
Table 112. SetRstEHEn response format when Error_flag is NOT set  
Response SOF
 
Response_flags  
8 bits  
CRC16  
Response EOF  
–
16 bits  
–
Response parameter:  
No parameter. The response is sent back after t .  
•
1
Table 113. SetRstEHEn response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set:  
03h: the option is not supported  
•
–
DocID022208 Rev 11  
117/146  
145  
 
 
 
 

Command codes  
M24LR04E-R  
Figure 77. SetRstEHEn frame exchange between VCD and M24LR04E-R  
SetRstEHEn  
request  
VCD  
SOF  
EOF  
SetRstEHEn  
response  
WriteEHCfg sequence  
when no error  
M24LR04E-R  
<-t

1

-> SOF  
<-t

1

-> SOF  
EOF  
EOF  
SetRstEHEn  
response  
WriteEHCfg sequence  
when error  
M24LR04E-R  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the SetRstEHEn command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
26.27  
CheckEHEn  
On receiving the CheckEHEn command, the M24LR04E-R reads the Control register and  
sends back its 8-bit value in the response.  
The Protocol_extension_flag should be set to 0 for the M24LR04E-R to operate correctly. If  
the Protocol_extension_flag is at 1, the M24LR04E-R answers with an error code. The  
Option_flag is not supported. The Inventory_flag must be set to 0.  
Table 114. CheckEHEn request format  
Request Request_  
Request  
EOF  
CheckEHEn IC
 
Mfg code  
A3h 02h  
UID

(1)  

CRC16  
SOF  
flags  
–
8 bits  
64 bits  
16 bits  
–
1. Gray
 
means that the field is optional.  
Request parameters:  
•
UID (optional)  
Table 115. CheckEHEn response format when Error_flag is NOT set  
Response  
EOF  
Response SOF  
Response_flags  
Data  
CRC16  
–
8 bits  
8 bits  
16 bits  
–
Response parameters:  
•
One byte of data: volatile Control register (see

)  
118/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Command codes  
Table 116. CheckEHEn response format when Error_flag is set  
Response Response_  
Response  
EOF  
Error code  
CRC16  
SOF  
flags  
–
8 bits  
8 bits  
16 bits  
–
Response parameter:  
Error code as Error_flag is set  
•
–
03h: the option is not supported  
Figure 78. CheckEHEn frame exchange between VCD and M24LR04E-R  
VCD  
SOF CheckEHEn
 
request EOF  
CheckEHEn  
response  
M24LR04E-R  
<-t

1

-> SOF  
EOF  
When configured in the RF busy mode, the RF WIP/BUSY pin is tied to 0 from the SOF that  
starts the CheckEHEn command to the end of the M24LR04E-R response.  
When configured in the RF write in progress mode, the RF WIP/BUSY pin remains in high-Z  
state.  
DocID022208 Rev 11  
119/146  
145  
 
 

Maximum ratings  
M24LR04E-R  
27  
Maximum ratings  
Stressing the device above the rating listed in

may cause permanent damage to  
the device. These are stress ratings only and operation of the device at these or any other  
conditions above those indicated in the operating sections of this specification is not implied.  
Exposure to absolute maximum rating conditions for extended periods may affect the device  
reliability.  
Table 117. Absolute maximum ratings  
Symbol  
Parameter  
Min.  
Max.  
Unit  
T

A  

Ambient operating temperature  
-40  
15  
–
85  
25  
°C  
°C  
9

(1)  

months  
T

STG  

h

ST
G

, t

STG  

,
Sawn wafer  
on UV tape  
Storage conditions  
Kept in its original  
packing form  
UFDFPN8 (MLP8),  
SO8, TSSOP8  
T

STG  

Storage temperature  
-65  
150  
°C  
°C  
Lead temperature during  
soldering  
UFDFPN8 (MLP8),  
SO8, TSSOP8  
T

LEAD  

See note

(2)  

V

IO  

I

2

C input or output range  
I

2

C supply voltage  
-0.50  
-0.50  
6.5  
6.5  
V
V
V

CC  

DC output current on pin SDA or  
RF WIP/BUSY (when equal to 0)  
I

OL_MAX  

–
–
–
–
5
mA  
mA  
(3)  
I

CC  

RF supply current AC0 – AC1  
50  
RF input voltage amplitude peak  
to peak between AC0 and AC1,  
GND pad left floating  
(3)  
V

MAX_1  

VAC0-VAC1  
–
27  
11  
V
V
AC voltage between AC0 and  
GND, or AC1 and GND  
VAC0-GND, or  
VAC1-GND  
(3)  
V

MAX_2  

-1  
AC0, AC1  
–
–
–
1000  
3500  
400  
Electrostatic discharge voltage  
(human body model)

(4)  

Other pads  
V

ESD  

V
Electrostatic discharge voltage (Machine model)  
Electrostatic discharge voltage on  
AC0, AC1  
–
4000  
antenna

(5)  

1. Counted
 
from ST shipment date.  
2. Compliant
 
with JEDEC Std J-STD-020C (for small body, Sn-Pb or Pb assembly), the ST ECOPACK

®  

7191395 specification, and the European directive on Restrictions on Hazardous Substances (RoHS)  
2002/95/EU.  
3. Based
 
on characterization, not tested in production.  
4. AEC-Q100-002
 
(compliant with JEDEC Std JESD22-A114A, C1 = 100 p
F
,
R
1 = 1500
Ω
, R2 = 500
Ω
)  
5. Compliant
 
with IEC 61000-4-3 method. (M24LRxxE packaged in S08N is mounted on ST’s reference  
antenna ANT1- M24LRxxE)  
120/146  
DocID022208 Rev 11  
 
 

2
M24LR04E-R  
I C DC and AC parameters  
2
28  
I C
 
DC and AC parameters  
This section summarizes the operating and measurement conditions, and the DC and AC  
2
characteristics of the device in I
 
C mode. The parameters in the DC and AC characteristic  
tables that follow are derived from tests performed under the measurement conditions  
summarized in the relevant tables. Designers should check that the operating conditions in  
their circuit match the measurement conditions when relying on the quoted parameters.  
2
Table 118. I
 
C operating conditions  
Symbol  
Parameter  
Min.  
Max.  
Unit  
V

CC  

T

A  

Supply voltage  
Ambient operating temperature  
1.8  
-40  
5.5  
85  
V
°C  
Table 119. AC test measurement conditions  
Symbol  
Parameter  
Min.  
Max.  
Unit  
C

L  

Load capacitance  
100  
pF  
ns  
V
t

r

, t

f  

Input rise and fall times  
Input levels  
–
50  
V

hi-lo  

V

ref(t)  

0.2 V

CC

to 0.8 V

CC  

0.3 V

CC

to 0.7 V

CC  

Input and output timing reference levels  
V
Figure 79. AC test measurement I/O waveform  
)NPUT ,EVELS  
)NPUT AND /UTPUT  
4IMING 2EFERENCE ,EVELS  
ꢀꢋꢂ6  
##  
ꢀꢋꢍ6  
##  
ꢀꢋꢌ6  
##  
ꢀꢋꢃ6  
##  
!)ꢀꢀꢂꢃꢊ”  
Table 120. Input parameters  
Parameter  
Symbol  
Min.  
Max.  
Unit  
C

IN  

C

IN  

Input capacitance (SDA)  
–
–
–
8
6
pF  
pF  
ns  
Input capacitance (other pins)  
(1)  
t

NS  

Pulse width ignored (Input filter on SCL and SDA)  
80  
1. Characterized
 
only.  
DocID022208 Rev 11  
121/146  
145  
 
 
 
 
 

2
I C
 
DC and AC parameters  
M24LR04E-R  
2
Table 121. I
 
C DC characteristics  
Symbol  
Parameter  
Test condition  
Min.  
Max.  
Unit  
Input leakage current  
(SCL, SDA)  
V

IN

= V

SS

or V

CC  

device in Standby mode  
I

LI  

–
± 2  
µA  
external voltage applied on  
Vout: V

SS

or V

CC  

I

LO_Vout

Vout output leakage current  
–
–
–
–
–
± 5  
± 2  
50  
µA  
µA  
SDA in Hi-Z, external voltage  
applied on SDA: V

SS

or V

CC  

I

LO  

Output leakage current  
Supply current (Read)

(1)  

V

CC

= 1.8
V
,
f

c

= 100 kHz  
(rise/fall time < 50 ns)  
V

CC

= 1.8
V
,
f

c

= 400 kHz  
(rise/fall time < 50 ns)  
100  
200  
I

CC  

µA  
V

CC

= 2.5
V
,
f

c

= 400 kHz  
(rise/fall time < 50 ns)  
V

CC

= 5.5
V
,
f

c

= 400 kHz  
(rise/fall time < 50 ns)  
–
–
–
400  
220  
30  
I

CC0  

Supply current (Write)

(1)  

Standby supply current  
V

CC

= 1.8 – 5.5 V  
µA  
µA  
V

IN

= V

SS

or V

CC  

V

CC

= 1.8 V  
V

IN

= V

SS

or V

CC  

V

CC

= 2.5 V  
I

CC1  

–
–
30  
V

IN

= V

SS

or V

CC  

V

CC

= 5.5 V  
100  
V

CC

= 1.8 V  
V

CC

= 2.5 V  
V

CC

= 5.5 V  
-0.45  
-0.45  
-0.45  
0.25V

CC  

0.25V

CC  

0.3V

CC  

Input low voltage  
(SDA, SCL)  
V

IL  

V
V

CC

= 1.8 V  
V

CC

= 2.5 V  

CC

= 5.5 V  
0.75V

CC

V

CC

+1  
0.75V

CC

V

CC

+1  
Input high voltage  
(SDA, SCL)  
V

IH  

V
V
V
0.7V

CC  

–
V

CC

+1  
0.4  
I

OL

= 2.1 mA, V

CC

= 1.8 V or  
I

OL

= 3 mA, V

CC

= 5.5 V  
V

OL  

Output low voltage  
1. SCL,
 
SDA connected to Ground or V

CC.

SDA connected to V

CC

through a pull-up resistor.  
122/146  
DocID022208 Rev 11  
 

2
M24LR04E-R  
I C DC and AC parameters  
2
Table 122. I
 
C AC characteristics  
Test conditions specified in

Symbol  
Alt.  
Parameter  
Min.  
Max.  
Unit  
f

C  

t

CHCL  

f

SCL

Clock frequency  
25  
0.6  
1.3  
40  
400  
kHz  
t

HIGH

Clock pulse width high  
t

LOW

Clock pulse width low  
20000

(1)

µs  
20000

(2)

µs  
t

CLCH  

t

START_OUT  

–
I²C timeout on Start condition  
Input signal rise time  
Input signal fall time  
–
300  
300  
100  
–
ms  
ns  
ns  
ns  
ns  
ns  
ns  
ns  
ns  
(3)  
t

XH1XH2  

t

R  

t

F  

t

F  

20  
(3)  
t

XL1XL2  

20  
t

DL1DL2  

t

DXCX  

t

CLDX  

t

CLQX  

SDA (out) fall time  
20  
t

SU:DAT

Data in set up time  
t

HD:DAT

Data in hold time  
100  
0
–
t

DH  

t

AA  

Data out hold time  
100  
100  
600  
0.6  
600  
–
(4)(5)  
t

CLQV  

Clock low to next data valid (access time)  
900  
(6)  
t

CHDX  

t

SU:STA

Start condition set up time  
t

HD:STA

Start condition hold time  
t

SU:STO

Stop condition set up time  
–
t

DLCL  

35000

(7)

µs  
t

CHDH  

–
–
ns  
ns  
Time between Stop condition and next Start  
condition  
t

DHDL  

t

W  

t

BUF  

–
1300  
–
I²C write time  
5
ms  
1. t

CHCL

timeout  
2. t

CLCH

timeout  
3. Values
 
recommended by the I²C-bus Fast-Mode specification.  
4.
T
o
 
a
void spurious Start and Stop conditions, a minimum delay is placed between SCL=1 and the falling or  
rising edge of SDA.  
5. t

CLQV

is the time (from the falling edge of SCL) required by the SDA bus line to reach 0.8V

CC

in a  
compatible way with the I

2

C specification (which specifies t

(min) = 100 ns), assuming that the R

bus  

× C

bus

time constant is less than 500 ns (as specified in

).  
6. For
 
a reStart condition, or following a write cycle.  
7. t

DLCL

timeout  
DocID022208 Rev 11  
123/146  
145  
 

2
I C
 
DC and AC parameters  
M24LR04E-R  
2
Figure 80. I C AC waveforms  
T8,ꢄ8,ꢃ  
T#(#,  
T#,#(  
T8(ꢄ8(ꢃ  
3#,  
T$,#,  
T8,ꢄ8,ꢃ  
3$! )N  
T#($8  
3TART  
CONDITION  
T#,$8  
T$8#8  
3$!  
#HANGE  
T8(ꢄ8(ꢃ  
T#($( T$($,  
3TART  
3$!  
)NPUT  
3TOP  
CONDITION  
CONDITION  
3#,  
3$! )N  
T7  
7RITE CYCLE  
T#($(  
T#($8  
3TOP  
CONDITION  
3TART  
CONDITION  
T#(#,  
3#,  
T#,16  
T#,18  
$ATA VALID  
T$,ꢄ$,ꢃ  
$ATA VALID  
3$! /UT  
!)ꢀꢀꢍꢎꢊE  
124/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Write cycle definition  
29  
Write cycle definition  
(1)  
Table 123. Write cycle endurance  
Test conditions  
Symbol  
Parameter  
Min  
Max  
Unit  
T

A

≤
+ 25 °C  
V

CC(min)

< V

CC

< V

CC(max)  

–
–
1000000  
Write cycle  
(2)  
N

cycle  

Write cycle  
endurance

(3)  

T

A

≤
+ 85 °C  
V

CC(min)

< V

CC

< V

CC(max)  

150000  
1. A
 
write cycle means the simultaneous writing of one byte, two bytes, three bytes or four bytes (one page).  
2. Indicates
 
the total number of write/erase cycles for one memory cell or the overall number of write/erase  
cycles decoded by the whole memory.  
3. Write
 
cycle endurance is defined by characterization and qualification.  
DocID022208 Rev 11  
125/146  
145  
 
 

RF electrical parameters  
M24LR04E-R  
30  
RF electrical parameters  
This section summarizes the operating and measurement conditions, and the DC and AC  
characteristics of the device in RF mode.  
The parameters in the DC and AC Characteristic tables that follow are derived from tests  
performed under the Measurement Conditions summarized in the relevant tables.  
Designers should check that the operating conditions in their circuit match the measurement  
conditions when relying on the quoted parameters.  
(1) (2)  
Table 124. RF characteristics  
Symbol  
Parameter  
Condition  
Min  
Typ  
Max  
Unit  
f

CC  

External RF signal frequency  
–
13.553 13.56 13.567 MHz  
H_ISO  
Operating field according to ISO  
T

A

= -40 °C to 85 °C  
150  
15  
–
–
5000 mA/m  
150 mA/m > H_ISO > 1000  
mA/m  
10% carrier modulation index

(3)  

MI=(A-B)/(A+B)  
30  
%
MI

CARRIER  

H_ISO > 1000 mA/m  
10  
0.5  
7.1  
95  
0.5  
7
–
–
–
–
–
–
30  
t

RFR

, t

RFF

10% rise and fall time  
–
3.0  
9.44  
100  
3.5  
µs  
µs  
%
t

RFSBL  

10% minimum pulse width for bit  
–
MI

CARRIER

100% carrier modulation index  
t

RFR

, t

RFF

100% rise and fall time  
MI=(A-B)/(A+B)

(4)  

–
–
µs  
µs  
t

RFSBL  

t

MIN CD  

100% minimum pulse width for bit  
9.44  
Minimum time from carrier  
generation to first data  
From H-field min  
–
–
1
ms  
f

SH  

f

SL  

t

1  

Subcarrier frequency high  
Subcarrier frequency low  
Time for M24LR04E-R response  
Time between commands  
f

CC

/32  
f

CC

/28  
–
–
423.75  
484.28  
–
–
kHz  
kHz  
µs  
4224/f

S  

4224/f

S  

318.6 320.9 323.3  
t

2  

309  
–
311.5  
5.75  
314  
–
µs  
RF write time  
(including internal Verify)  
W

t  

–
ms  
I

CC_RF  

C

TUN  

Operating current (Read)

(5)  

VAC0-VAC1 (4 V peak to peak)  
f = 13.56 MHz  
–
20  
–
µA  
pF  
Internal tuning capacitor in SO8

(6)  

24.8  
27.5  
30.2  
Backscattered level  
as defined by ISO test  
V

BACK  

ISO10373-7  
10  
–
–
–
–
mV  
RF input voltage amplitude  
between AC0 and AC1,  
GND pad left floating,  
(3)  
V

MAX_1  

–
–
–
20  
8.5  
V
VAC0-VAC1 peak to peak

(7)  

AC voltage between AC0 and  
GND or between AC1 and GND  
(3)  
V

MAX_2  

-1  
V
126/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
Symbol  
RF electrical parameters  
(1) (2)  
Table 124. RF characteristics  
(continued)  
Parameter  
Condition  
Min  
Typ  
Max  
Unit  
RF input voltage amplitude  
between AC0 and AC1, GND pad  
left floating, VAC0-VAC1 peak to  
peak

(7)  

Inventory and Read operations  
Write operations  
–
4
4.5  
V
(3)  
V

MIN_1  

–
4.5  
5
V
Inventory and Read operations  
Write operations  
–
–
1.8  
2
2
2.2  
–
V
V
AC voltage between AC0 and  
GND or between AC1 and GND  
(3)  
V

MIN_2  

t

RF_OFF  

RF OFF time  
Chip reset  
2
–
ms  
1. T

A

= –40 to 85 °C. Characterized only.  
2. All
 
timing characterizations were performed on a reference antenna with the following characteristics:  
External size: 75 mm x 48 mm  
Number of turns: 5  
Width of conductor: 0.5 mm  
Space between two conductors: 0.3 mm  
Value of the tuning capacitor in SO8: 27.5 pF (M24LR04E-R)  
Value of the coil: 5 µH  
Tuning frequency: 13.56 MHz.  
3. 15%
 
(or more) carrier modulation index offers a better signal/noise ratio and therefore a wider operating range with a better  
noise immunity.  
4.
T
e
mperature
 
range 0 °C to 90 °C  
5. Characterized
 
on bench.  
6. Characterized
 
only, at room temperature only, measured at VAC0-VAC1 = 1 V peak to peak.  
7. Characterized
 
only, at room temperature only.  
Table 125. Operating conditions  
Symbol  
Parameter  
Min.  
Max.  
Unit  
T

A  

Ambient operating temperature  
–40  
85  
°C  

Figure 81

shows an ASK modulated signal from the VCD to the M24LR04E-R. The test  
condition for the AC/DC parameters are:  
•
•
•
Close coupling condition with tester antenna (1 mm)  
M24LR04E-R performance measured at the tag antenna  
M24LR04E-R synchronous timing, transmit and receive  
DocID022208 Rev 11  
127/146  
145  
 

RF electrical parameters  
M24LR04E-R  
Figure 81. ASK modulated signal  
W
5))
 
$
%
W
5)5
 
I
&&
 
W
5)6%/
 
W
0,1ꢆ&’
 
-3ꢄꢎꢍꢂꢉ6ꢄ  

T

summarizes respectively the minimum AC0-AC1 input power level P  
AC0-AC1_min  

required for

the Energy harvesting mode, the corresponding maximum current consumption  
, and variation of the analog voltage V
 
for the various Energy harvesting fan-out  
I
sink_max  
out  
configurations defined by bits b0 and b1 of the Configuration byte.  
(1) (2)  
Table 126. Energy harvesting  
(3)  
(4)  
Range  
H

min  

P

min  

V

out

@I=0  
V

out

@I

sink_max  

I

sink_max

@P

min  

2.7 V min  
4.5 V max  
00  
3.5 A/m  
2.4 A/m  
1.6 A/m  
1.0 A/m  
100 mW  
60 mW  
30 mW  
16 mW  
1.7 V  
6 mA  
2.7 V min  
4.5 V max  
01  
10  
11  
1.9 V  
2.1 V  
2.3 V  
3 mA  
1 mA  
2.7 V min  
4.5 V max  
2.7 V min  
4.5 V max  
300 µA  
1. Characterized
 
only  
2. Valid
 
from -40 °C to +85 °C  
3. H

min

characterized according to ISO10373-7 test method  
4. P

min

calculated from DC measurements  
Note:  
It is recommended to choose the Energy Harvesting Range in respect with the maximum  
current requested by the application to avoid any disabling of Energy Harvesting mode (for  
example, choose Range 01 for a max consumption of 2 mA).  
128/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
RF electrical parameters  
Figure 82. Vout vs. Isink  
7PVU  
ꢀꢁꢂꢃ7  
ꢀꢁꢄꢃ7  
ꢀꢁꢅꢃ7  
ꢅꢁꢆꢃ7  
ꢅꢁꢂꢃ7  
ꢈꢃN”  
ꢅꢃN”  
ꢇꢁꢄꢃN”  
ꢄꢃN”  
*TJOL  
-3ꢄꢎꢍꢍꢍ6ꢄ  
Figure 83. Range 11 domain  
)DQꢀRXW  
ꢅ$ꢆ  
ꢉꢆP$
 
:RUNLQJꢆGRPDLQꢆZKHQ
 
5DQJHꢆꢄꢄꢆLVꢆVHOHFWHG
 
ꢂꢆP$
 
ꢄꢆP$
 
ꢈꢃꢂꢆP$
 
)LHOG  
ꢅ+UPVꢆ  
ꢄꢆ$ꢐP
 
ꢄꢃꢉꢆ$ꢐP
 
ꢅꢃꢀꢆ$ꢐP
 
ꢂꢃꢁꢆ$ꢐP
 
ꢁꢆ$ꢐP
 
06ꢄꢊꢇꢊꢈ9ꢄ
 
DocID022208 Rev 11  
129/146  
145  
 
 

RF electrical parameters  
M24LR04E-R  
Figure 84. Range 10 domain  
)DQꢀRXW  
ꢅ$ꢆ  
ꢉꢆP$
 
ꢂꢆP$
 
:RUNLQJꢆGRPDLQꢆZKHQ
 
5DQJHꢆꢄꢈꢆLVꢆVHOHFWHG
 
ꢄꢆP$
 
ꢈꢃꢂꢆP$
 
)LHOG  
ꢅ+UPVꢆ  
ꢄꢆ$ꢐP
 
ꢄꢃꢉꢆ$ꢐP
 
ꢅꢃꢀꢆ$ꢐP
 
ꢂꢃꢁꢆ$ꢐP
 
ꢁꢆ$ꢐP
 
06ꢄꢊꢇꢊꢄ9ꢄ
 
Figure 85. Range 01 domain  
)DQꢀRXW  
ꢅ$ꢆ  
ꢉꢆP$
 
:RUNLQJꢆGRPDLQꢆZKHQ
 
5DQJHꢆꢈꢄꢆLVꢆVHOHFWHG
 
ꢂꢆP$
 
ꢄꢆP$
 
ꢈꢃꢂꢆP$
 
)LHOG  
ꢅ+UPVꢆ  
ꢄꢆ$ꢐP
 
ꢄꢃꢉꢆ$ꢐP
 
ꢅꢃꢀꢆ$ꢐP
 
ꢂꢃꢁꢆ$ꢐP
 
ꢁꢆ$ꢐP
 
06ꢄꢊꢇꢊꢅ9ꢄ
 
130/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
RF electrical parameters  
Figure 86. Range 00 domain  
)DQꢀRXW  
ꢅ$ꢆ  
:RUNLQJꢆGRPDLQꢆZKHQ
 
5DQJHꢆꢈꢈꢆLVꢆVHOHFWHG
 
ꢉꢆP$
 
ꢂꢆP$
 
ꢄꢆP$
 
ꢈꢃꢂꢆP$
 
)LHOG  
ꢅ+UPVꢆ  
ꢄꢆ$ꢐP
 
ꢄꢃꢉꢆ$ꢐP
 
ꢅꢃꢀꢆ$ꢐP
 
ꢂꢃꢁꢆ$ꢐP
 
ꢁꢆ$ꢐP
 
06ꢄꢊꢇꢊꢂ9ꢄ
 
DocID022208 Rev 11  
131/146  
145  
 

Package information  
M24LR04E-R  
31  
Package information  
In order to meet environmental requirements, ST offers these devices in different grades of  
®
®
ECOPACK packages,
 
depending on their level of environmental compliance. ECOPACK  
specifications, grade definitions and product status are available at:

.  
®
ECOPACK is
 
an ST trademark.  
31.1  
SO8N package information  
Figure 87. SO8N – 8-lead plastic small outline, 150 mils body width, package outline  
H X
ꢁ
ꢆƒ  
!ꢀ  
!
C
CCC  
B
E
ꢀꢁꢂꢃꢄPP  
*$8*(ꢄ3/$1(  
$
K
ꢅ
%ꢄ  
%
,
ꢄ
!ꢄ  
,ꢄ  
62ꢋ$B9ꢅ
 
1. Drawing
 
is not to scale.  
Table 127. SO8N – 8-lead plastic small outline, 150 mils body width,  
package mechanical data  
millimeters  
Typ.  
inches

(1)  

Symbol  
Min.  
Max.  
Min.  
Typ.  
Max.  
A
A1  
A2  
b
–
–
1.750  
0.250  
–
–
–
0.0689  
0.0098  
–
0.100  
1.250  
0.280  
0.170  
4.800  
5.800  
3.800  
–
–
0.0039  
0.0492  
0.0110  
0.0067  
0.1890  
0.2283  
0.1496  
–
–
–
–
–
0.480  
0.230  
5.000  
6.200  
4.000  
–
–
0.0189  
0.0091  
0.1969  
0.2441  
0.1575  
–
c
–
4.900  
6.000  
3.900  
1.270  
–
–
D
E
0.1929  
0.2362  
E1  
e
0.1535  
0.0500  
h
0.250  
0°  
0.500  
8°  
0.0098  
0°  
–
–
–
0.0197  
8°  
k
–
L
0.400  
–
1.270  
0.0157  
0.0500  
132/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Package information  
Table 127. SO8N – 8-lead plastic small outline, 150 mils body width,  
package mechanical data (continued)  
millimeters  
inches

(1)  

Typ.  
Symbol  
Min.  
Typ.  
Max.  
Min.  
Max.  
L1  
–
–
1.040  
–
–
–
–
0.0409  
–
–
ccc  
0.100  
0.0039  
1. Values
 
in inches are converted from mm and rounded to four decimal digits.  
Figure 88. SO8N – 8-lead plastic small outline, 150 mils body width,  
package recommended footprint  
ꢈꢃꢉꢆꢍ[ꢌꢎ
 
ꢄꢃꢅꢇ
 
2ꢇB62ꢌ1B)3B9ꢄ
 
1. Dimensions
 
are expressed in millimeters.  
DocID022208 Rev 11  
133/146  
145  
 

Package information  
M24LR04E-R  
31.2  
UFDFN8 package information  
Figure 89. UFDFN8 – 8-lead, 2 × 3 mm, 0.5 mm pitch ultra thin profile fine pitch  
dual flat package outline  
$
‘
%
1
$
$ꢄ
 
FFF
 
ꢁ
3LQꢆꢑꢄꢆ
 
,’ꢆPDUNLQJ
 
&
(
HHH
 
&
 
6HDWLQJꢆSODQH
 
$ꢂ
 
6LGHꢆYLHZ
 
DDD
 
&
ꢅ[
 
ꢄ
ꢅ
ꢅ[
 
DDD
 
&
 
7
R
SꢆYLHZ
 
‘ꢅ
 
H
‘DWXPꢆ$
 
E
ꢄ
ꢅ
/ꢄ
 
/ꢂ
 
3LQꢆꢑꢄꢆ
 
/
/ꢂ
 
(ꢅ
 
.
,’ꢆPDUNLQJ
 
Hꢐꢅ
 
/ꢄ
 
7
H
UPLQDOꢆWLS
 
H
‘HWDLOꢆ³$´
 
/
(YHQꢆWHUPLQDO
 
1’ꢋꢄꢆ
[
H
 
%RWWRPꢆYLHZ
 
6HHꢆ’HWDLOꢆ³$´
 
=:EB0(B9ꢄ
 
1. Max.
 
package warpage is 0.05 mm.  
2. Exposed
 
copper is not systematic and can appear partially or totally according to the cross section.  
3. Drawing
 
is not to scale.  
4. The
 
central pad (E2 by D2 in the above illustration) is internally pulled to V

SS

. It must not be connected to  
any other voltage or signal line on the PCB, for example during the soldering process.  
Table 128. UFDFN8 – 8-lead, 2 × 3 mm, 0.5 mm pitch ultra thin profile fine pitch  
dual flat package mechanical data  
millimeters  
Typ  
inches

(1)  

Symbol  
Min  
Max  
Min  
Typ  
Max  
A
0.450  
0.000  
0.200  
1.900  
1.200  
2.900  
0.550  
0.020  
0.250  
2.000  
–
0.600  
0.050  
0.300  
2.100  
1.600  
3.100  
0.0177  
0.0000  
0.0079  
0.0748  
0.0472  
0.1142  
0.0217  
0.0008  
0.0098  
0.0787  
–
0.0236  
0.0020  
0.0118  
0.0827  
0.0630  
0.1220  
A1  
b

(2)  

D
D2  
E
3.000  
0.1181  
134/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
Package information  
Table 128. UFDFN8 – 8-lead, 2 × 3 mm, 0.5 mm pitch ultra thin profile fine pitch  
dual flat package mechanical data (continued)  
millimeters  
Typ  
inches

(1)  

Symbol  
Min  
Max  
Min  
Typ  
Max  
E2  
1.200  
–
1.600  
–
0.0472  
–
0.0630  
e
–
0.500  
0.0197  
K
0.300  
–
–
–
–
–
–
–
–
–
–
0.0118  
–
–
–
–
–
–
–
–
–
–
L
0.300  
0.500  
0.150  
–
0.0118  
0.0197  
0.0059  
–
L1  
–
–
L3  
0.300  
0.0118  
aaa  
bbb  
ccc  
ddd  
eee

(3)  

–
–
–
–
–
0.150  
0.100  
0.100  
0.050  
0.080  
–
–
–
–
–
0.0059  
0.0039  
0.0039  
0.0020  
0.0031  
1. Values
 
in inches are converted from mm and rounded to four decimal digits.  
2. Dimension
 
b applies to plated terminal and is measured between 0.15 and 0.30 mm from the terminal tip.  
3. Applied
 
for exposed die paddle and terminals. Exclude embedding part of exposed die paddle from  
measuring.  
31.3  
TSSOP8 package information  
Figure 90.TSSOP8 – 8-lead thin shrink small outline, 3 x 6.4 mm, 0.65 mm pitch,  
package outline  
ꢃ
ϴ
ϱ
Đ
ꢂϭ  
ꢂ
ϭ
ϰ
ɲ
>
ꢄϭ  
ꢄϮ  
ꢄ
>ϭ  
ꢁW  
ď
Ğ
76623ꢌ$0B9ꢅ
 
1. Drawing
 
is not to scale.  
DocID022208 Rev 11  
135/146  
145  
 
 

Package information  
M24LR04E-R  
Table 129. TSSOP8 – 8-lead thin shrink small outline, 3 x 6.4 mm, 0.65 mm pitch,  
package mechanical data  
millimeters  
Typ.  
inches

(1)  

Symbol  
Min.  
Max.  
Min.  
Typ.  
Max.  
A
A1  
A2  
b
–
–
1.200  
0.150  
1.050  
0.300  
0.200  
0.100  
3.100  
–
–
–
0.0472  
0.0059  
0.0413  
0.0118  
0.0079  
0.0039  
0.1220  
–
0.050  
0.800  
0.190  
0.090  
–
–
0.0020  
0.0315  
0.0075  
0.0035  
–
–
1.000  
–
0.0394  
–
c
–
–
CP  
D
–
–
2.900  
–
3.000  
0.650  
6.400  
4.400  
0.600  
1.000  
–
0.1142  
–
0.1181  
0.0256  
0.2520  
0.1732  
0.0236  
0.0394  
–
e
E
6.200  
4.300  
0.450  
–
6.600  
4.500  
0.750  
–
0.2441  
0.1693  
0.0177  
–
0.2598  
0.1772  
0.0295  
–
E1  
L
L1  
α
0°  
8°  
0°  
8°  
1. Values
 
in inches are converted from mm and rounded to four decimal digits.  
136/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Ordering information  
32  
Ordering information  
Table 130. Ordering information scheme for bare die devices or packaged devices  
Example:  
M24LR04E-R  
MN  
6
T
/2  
Device type  
M24LR = dynamic NFC/RFID tag IC  
04 = memory size in Kbit  
E = support for energy harvesting  
Operating voltage  
R = V

CC

= 1.8 to 5.5 V  
Package  
MN = SO8N (150 mils width)  
MC
= UFDFPN8
(MLP8)  
DW = TSSOP8  
UW20 = inkless, unsawn wafer, with no backgrinding

(1)  

SB12I = 120 µm ± 15 µm bumped and sawn  
inkless wafer on 8-inch frame  
Device grade

(2)  

6 = industrial: device tested with standard  
test flow over –40 to 85 °C  
Option

(2)  

T =
T
a
pe and reel packing  
Capacitance  
/2 = 27.5 pF  
1. Delivery
 
type: wafer tested, unsawn, without backgrinding. Wafer thickness: 725 µm ±20 µm.  
Bad chip identification by STIF wafer maps provided by STMicroelectronics.  
2. For
 
packaged devices only.  
Note:  
Parts marked as “ES”, “E” or accompanied by an Engineering Sample notification letter, are  
not yet qualified and therefore not approved for use in production. ST is not responsible for  
any consequences resulting from such use. In no event will ST be liable for the customer  
using any of these engineering samples in production. ST’s Quality department must be  
contacted prior to any decision to use these engineering samples to run a qualification  
activity.  
DocID022208 Rev 11  
137/146  
145  
 
 
 

Ordering information  
M24LR04E-R  
Table 131. Ordering and marking information  
First line marking  
Reference  
Package  
Ordering code  
Initial  
revision 0xF  
Actual revision  
0xE and below  
TSSOP08  
MLP  
M24LR04E-RDW6T/2  
M24LR04E-RMC6T/2  
M24LR04E-RMN6T/2  
M24LR04E-RUW20/2  
404EU  
404E  
4BEUB  
4BEB  
M24LR04E-R  
SO8N  
24L04ER  
Not applicable  
24LBERB  
Not applicable  
Bare die  
138/146  
DocID022208 Rev 11  
 

M24LR04E-R  
Anticollision algorithm (informative)  
Appendix A
 
Anticollision algorithm (informative)  
The following pseudocode describes how anticollision could be implemented on the VCD,  
using recursivity.  
A.1  
Algorithm for pulsed slots  
function push (mask, address); pushes on private stack  
function pop (mask, address); pops from private stack  
function pulse_next_pause; generates a power pulse  
function store(M24LR04E-R_UID); stores M24LR04E-R_UID  
function poll_loop (sub_address_size as integer)  
pop (mask, address)  
mask = address & mask; generates new mask  
; send the request  
mode = anticollision  
send_Request (Request_cmd, mode, mask length, mask value)  
for sub_address = 0 to (2^sub_address_size – 1)  
pulse_next_pause  
if no_collision_is_detected ; M24LR04E-R is inventoried  
then  
store (M24LR04E-R_UID)  
else ; remember a collision was detected  
push(mask,address)  
endif  
next sub_address  
if stack_not_empty ; if some collisions have been detected and  
then  
poll_loop (sub_address_size); recursively to process the last  
stored collision  
; not yet processed, the function calls itself  
endif  
end poll_loop  
main_cycle:  
mask = null  
address = null  
push (mask, address)  
poll_loop(sub_address_size)  
end_main_cycle  
DocID022208 Rev 11  
139/146  
145  
 
 

CRC (informative)  
M24LR04E-R  
Appendix B
 
CRC (informative)  
B.1  
CRC error detection method  
The cyclic redundancy check (CRC) is calculated on all data contained in a message, from  
the start of the flags through to the end of Data. The CRC is used from VCD to M24LR04E-  
R and from M24LR04E-R to VCD.  
Table 132. CRC definition  
CRC definition  
CRC type  
Length  
Polynomial  
Direction  
Preset  
Residue  
ISO/IEC 13239
 
16 bits  
X

16

+ X

12

+ X

5

+ 1 = 8408h  
Backward  
FFFFh  
F0B8h  
To
a
dd extra protection against shifting errors, a further transformation on the calculated  
CRC is made. The one’s complement of the calculated CRC is the value attached to the  
message for transmission.  
To
c
heck received messages, the two CRC bytes are often also included in the re-  
calculation, for ease of use. In this case, the expected value for the generated CRC is the  
residue F0B8h.  
B.2  
CRC calculation example  
This example in C language illustrates one method of calculating the CRC on a given set of  
bytes comprising a message.  
C-example to calculate or check the CRC16 according to ISO/IEC 13239  
#define POLYNOMIAL0x8408// x^16
 
+ x^12 + x^5 + 1  
#define PRESET_VALUE0xFFFF  
#define CHECK_VALUE0xF0B8  
#define NUMBER_OF_BYTES4//
 
Example: 4 data bytes  
#define CALC_CRC1  
#define CHECK_CRC0  
void main()  
{
unsigned int
 
current_crc_value;  
unsigned char array_of_databytes[NUMBER_OF_BYTES + 2] = {1, 2, 3, 4, 0x91,  
0x39};  
int  
int  
int  
number_of_databytes = NUMBER_OF_BYTES;  
calculate_or_check_crc;  
i, j;  
calculate_or_check_crc = CALC_CRC;  
// calculate_or_check_crc = CHECK_CRC;// This could be an other example  
140/146  
DocID022208 Rev 11  
 
 
 
 

M24LR04E-R  
CRC (informative)  
if (calculate_or_check_crc == CALC_CRC)  
{
number_of_databytes = NUMBER_OF_BYTES;  
}
else  
{
// check CRC  
number_of_databytes = NUMBER_OF_BYTES + 2;  
}
current_crc_value = PRESET_VALUE;  
for (i = 0; i < number_of_databytes; i++)  
{
current_crc_value = current_crc_value ^ ((unsigned  
int)array_of_databytes[i]);  
for (j = 0; j < 8; j++)  
{
if (current_crc_value & 0x0001)  
{
current_crc_value = (current_crc_value >> 1) ^ POLYNOMIAL;  
current_crc_value = (current_crc_value >> 1);  
}
else  
{
}
}
}
if (calculate_or_check_crc == CALC_CRC)  
{
current_crc_value = ~current_crc_value;  
printf (“Generated CRC is 0x%04Xn”, current_crc_value);  
// current_crc_value is now ready to be appended to the data stream  
// (first LSByte, then MSByte)  
}
else  
{
// check CRC  
if (current_crc_value == CHECK_VALUE)  
{
printf (“Checked CRC is ok (0x%04X)n”, current_crc_value);  
}
else  
DocID022208 Rev 11  
141/146  
145  

CRC (informative)  
M24LR04E-R  
{
}
printf (“Checked CRC is NOT ok (0x%04X)n”, current_crc_value);  
}
}
142/146  
DocID022208 Rev 11  

M24LR04E-R  
Application family identifier (AFI) (informative)  
Appendix C
 
Application family identifier (AFI)  
(informative)  
The AFI (application family identifier) represents the type of application targeted by the VCD  
and is used to extract from all the M24LR04E-Rs present only the M24LR04E-R meeting the  
required application criteria.  
It is programmed by the M24LR04E-R issuer (the purchaser of the M24LR04E-R). Once  
locked, it cannot be modified.  
The most significant nibble of the AFI is used to code one specific or all application families,  
as defined in

.  
The least significant nibble of the AFI is used to code one specific or all application  
subfamilies. Subfamily codes different from 0 are proprietary.  
(1)  
Table 133. AFI coding  
AFI  
AFI  
Meaning  
most  
significant  
nibble  
least  
significant  
nibble  
Examples / Note  
VICCs respond from  
‘0’  
‘X’  
‘X  
‘0’  
‘1  
‘0’  
All families and subfamilies  
All subfamilies of family X  
Only the Y

th

subfamily of family X  
Proprietary subfamily Y only  
Transport  
No applicative preselection  
‘0  
Wide applicative preselection  
‘‘Y’  
–
‘Y’  
–
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘‘0’, ‘Y’  
‘0’, ‘Y’  
Mass transit, bus, airline,…  
‘2  
Financial  
IE
P
,
b
anking, retail,…  
‘3  
Identification  
Access control,…  
‘4  
T
e
lecommunication  
Medical  
Public telephony, GSM,…  
‘5’  
‘6  
–
Multimedia  
Internet services….  
‘7  
Gaming  
–
8
Data Storage  
Portable files,…  
‘9  
Item management  
Express parcels  
Postal services  
Airline bags  
–
–
–
–
–
–
–
‘A  
‘B  
‘C  
‘D  
‘E  
‘F’  
RFU  
RFU  
RFU  
1. X
 
= ‘1’ to ‘F’, Y = ‘1’ to ‘F’  
DocID022208 Rev 11  
143/146  
145  
 
 

Revision history  
M24LR04E-R  
Revision history  
Table 134. Document revision history  
Changes  
Date  
Revision  
06-Dec-2011  
1
Initial release.  
Updated

and added note under the table.  
Replaced figures

to

.  
06-Feb-2012  
21-Feb-2012  
21-May-2012  
12-Jun-2012  
2
3
4
5
Changed datasheet status to “Full datasheet”.  
21-Feb-2013  
07-Mar-2013  
6
7
Added “Dynamic NFC/RFID tag IC” to the title,

,  
Updated wafer legend on cover page.  
12-Jun-2013  
8
Updated V

ESD

and Note 5 in

.  
Removed MB package from
Figure 88: UFDFPN8 (MLP8) – 8-lead ultra  
thin fine pitch dual flat package no lead 2 × 3mm, package outline
.  
Updated figure on Cover page with wafer code SB12I.  
04-Nov-2015  
9
Updated

and its subsections.  
144/146  
DocID022208 Rev 11  
 
 

M24LR04E-R  
IMPORTANT NOTICE – PLEASE READ CAREFULLY  
STMicroelectronics NV and its subsidiaries (“ST”) reserve the right to make changes, corrections, enhancements, modifications, and  
improvements to ST products and/or to this document at any time without notice. Purchasers should obtain the latest relevant information on  
ST products before placing orders. ST products are sold pursuant to ST’s terms and conditions of sale in place at the time of order  
acknowledgement.  
Purchasers are solely responsible for the choice, selection, and use of ST products and ST assumes no liability for application assistance or  
the design of Purchasers’ products.  
No license, express or implied, to any intellectual property right is granted by ST herein.  
Resale of ST products with provisions different from the information set forth herein shall void any warranty granted by ST for such product.  
ST and the ST logo are trademarks of S
T
.
A
ll other product or service names are the property of their respective owners.  
Information in this document supersedes and replaces information previously supplied in any prior versions of this document.  
© 2017 STMicroelectronics – All rights reserved  
146/146  
DocID022208 Rev 11