Training
NFC Reader Design: How to build your own reader
Public
MobileKnowledge
February 2015
Agenda
Introduction to RFID and NFC
Contactless reader design:
Initial considerations and architecture
Illustrative contactless reader schematics:
RFID Elektor schematic Todays session
CLRC663 Point of Sales schematic
NXP portfolio
NFC Reader IC overview
LPC microcontrollers overview
NFC Reader Antenna design
Antenna principles
Antenna design steps Next session
Environmental influences
Testing & antenna qualification
Training
2
Introduction to RFID and NFC
RFID applications, NFC operation and communication modes
3
Introduction to RFID
RFID is an abbreviation, consisting of two distinct concepts: Radio
Frequency (RF) and Identification (ID)
RFID technology is used to identify objects, operations or people by
means of wireless transmission of data (and energy)
RFID systems may be sorted by operating frequency, operating LF HF UHF
range, data rates, energy usage and security. (~120 turns) (~8 turns) (~1 turn for the loop)
Frequency/ Technology Operating distance Main applications Tag chip family
LF (125 134 KHz) Up to 1 m Animal ID, industrial, track & trace HITAG
HF vicinity (13.56 MHz) Up to 1 m Libraries, Ski ticketing, item level ID ICODE
Public transport, eGov, Banking,
HF proximity /NFC (13.56 MHz) Up to 10 cm MIFARE, NTAG
access, NFC phones
UHF (860 960 MHz) Up to 10 m Logistics, inventory management UCODE
Training
4
NFC Technology
Modes of operation NFC device
Card emulation Like Like Read/write
Payments, Transit, ISO/IEC14443 PICC ISO/IEC14443 PCD
Product Authentication, Smart
Access, Identity, ... Advertising, Pairing, ....
Contactless readers NFC tags
Active P2P Passive P2P
Both devices generate RF field Extended ISO/IEC14443 PCD/PICC
Peer-to-peer
Automotive, Social media,
data exchange, games ...
Other NFC devices
Training
5
NFC communication modes
Reader/Card communication mode
1. Power
The RF field oscillates at 13,56MHz.
The card is powered through the
electromagnetic coupling
2. The Reader sends commands Card
Host NFC The Reader modulates its RF field to send
Device commands C
(Reader)
3. Answering to the Reader
By modifying its consumption, the chip
modifies the RF field, which the Reader
detects (Load Modulation)
Training
6
NFC communication modes
P2P passive communication mode
1. The Initiator generates an RF field
This field is used to exchange the data. Both
Initiator and Target are powered internally
NFC 2. The Initiator sends commands NFC
Host The Initiator modulates its RF field to send Host
Device Device
commands
INITIATOR TARGET
Powered to Powered for
generate RF field digital processing
3. The Target responds
The target uses backward modulation to
transmit the response (Load Modulation)
Training
7
NFC communication modes
P2P active communication mode
1. The Initiator sends commands
The Initiator generates an RF field, sends
commands by modulating its field and then
cuts the field
Host NFC NFC
Device Device
Host
INITIATOR TARGET
2. The Target responds
Once the Initiator cuts its RF field, the target
Powered to generates its own field and uses it to transmit Powered to
generate RF field responses. generate RF field
Training
8
Contactless reader design
Initial considerations & architecture
9
Basic contactless reader architecture
e.g. LCD I/O I2 C Embedded reader module
Firmware
Backend
Host / C Contactless
System Reader IC
object
RFID card, NFC
Tag, NFC phone,
or any other NFC
Generic Ex: CLRC663, Analog matching 13MHz loop object
embedded PN512, network Antenna
Controller
Training
10
Steps to design a contactless reader
Selection of contactless reader IC
1 Which transponder do we need to communicate with?
Selection of Host
2 The brain and heart of our contactless reader
Selection of security architecture
3 SAM or Host for key storage
Next
4 Antenna design session
5 GO!
Training
11
Basic contactless reader architecture
e.g. LCD I/O I2 C Embedded reader module
Firmware
Backend
Host / C Contactless
System Reader IC
object
RFID card, NFC
Tag, NFC phone,
or any other NFC
Generic Ex: CLRC663, Analog matching 13MHz loop object
embedded PN512, network Antenna
Controller
Training
12
Contactless reader design
Step 1: Selection of contactless reader IC
Support of various RF standards
Dedicated use case & application may support only ISO/IEC 14443-A
Open application needs to support various RF standards such as
ISO/IEC14443 A&B, ISO/IEC 15693
Application specific requirements
EMVCo -> payments
NFC Forum -> Full NFC support on P2P and R&W
Power consumption
Handheld contactless reader will require low energy consumption
Security handling
Some applications will require SAM support (integrated/external)
Selection of the host interface
SPI, I2C, RS232, UART ..
Specific features
Specific data rates, timing and reading distance
Training
13
Reader IC module
e.g. CLRC663 reader IC
Analog frontend
The analog interface handles the modulation
and demodulation of the antenna signals for the
contactless interface.
Analog test signals (pin AUX1 and AUX2)
For optimizing / debugging hardware in terms of
performance and noise (AN11019)
Clock signal (pin XTAL1 and XTAL2)
Act as time basis for generation of the carrier sent
out as well as for the coder and decoder
synchronous system.
Clock jitter must be as small as possible.
IntegerN PLL clock line
It can serve as a clock source to a MCU, which
avoids the need for a second crystal oscillator in
the reader system. (pin CLKOUT)
Training
14
Reader IC module
e.g. CLRC663 reader IC
Power management
Supply concept
Three supply pins VDD, PVDD and TVDD. Can be
supplied in range from 3.3V to 5V.
Pin TVDD can be supplied by 3.3V or 5V (for
higher field strength)
Pin PVDD and VDD should be supplied at 3.3V
to operate with a 3.3 V supplied MCU.
Independent of the voltage, it is recommended to
buffer these supplies with blocking capacitors (VDD
and PVDD min 100 nF; TVDD min 100 nF parallel
to 1 uF)
Power-down (8nA-40nA), standby mode (3-6A)
and modem off (0.45 0.5 mA) energy saving
options
Low Power Card Detection (LPCD):
Energy saving mode in which the reader IC is not
fully powered permanently
Training
15
Reader IC module
e.g. CLRC663 reader IC
Interrupt controller
Handles the enabling / disabling of interrupt
requests.
All of the interrupts can be configured by
firmware.
Indicates certain events by setting bit IRQ in the
appropriate register and if activated, by pin IRQ.
The signal on pin IRQ may be used to interrupt the
host. Allows the implementation of efficient host
software.
Timer module
The external host may use these timers to
manage timing relevant tasks such as time-out
counter, watch-dog counter or periodical
triggers.
Training
16
Reader IC module
e.g. CLRC663 reader IC
Boundary scan interface
Interface according to IEEE 1149,1
Implements a four line interface between the
chip and the environment ( Test Clock, Test
Mode Select, Test Data Input and Test Data
Output).
Allows testing interconnections without using
physical test probes.
It uses its own description language ( BSDL =
Boundary Scan Description Language)
Training
17
Reader IC module
e.g. CLRC663 reader IC
Host interface selection
Support direct interfacing of various hosts (SPI,
I2C, UART) interface type.
Host interface type is selected by means of the
logic levels on the control pins after Reset
Phase (pin IFSEL0, IFSEL1)
NXP reader ICs implement a dedicated I2C
interface to integrate MIFARE SAM (SAM X-
interface, will be explained later).
Training
18
Reader IC module
e.g. CLRC663 reader IC
Register bank
The register bank contains the settings for the
analog and digital functionality.
Recommended protocol settings (AN11022)
Integrated EEPROM
Register settings of the device can be
preconfigured in the EEPROM.
Load protocol: A single host command allows
loading the register settings for another
contactless protocol.
FIFO
Buffer that handles 512 byte send and receive
Training
19
Basic contactless reader architecture
e.g. LCD I/O I2 C Embedded reader module
Firmware
Backend
Host / C Contactless
System Reader IC
object
RFID card, NFC
Tag, NFC phone,
or any other NFC
Generic Ex: CLRC663, Analog matching 13MHz loop object
embedded PN512, network Antenna
Controller
Training
20
Contactless reader design
Step 2: Selection of Host
External interfaces
Serial, USB, Ethernet
RF connectivity (BL, Wifi, Zigbee,)
SW architecture
How heavy or light are the processing power requirements (MCU clock)
Host architecture
Impact on development environment and source code libraries
Memory requirements
Flash, RAM, ROM
Power requirements
Specific requirements
Secure EEPROM to store keys?
Crypto accelerators?
Manufacturer support
Training
21
Contactless reader design
Step 3: Selection of security architecture (Host)
Microcontrollers are not designed and developed to securely store and maintain cryptographic keys since they dont offer
reliable protection and security mechanisms
Embedded reader module
Auth Cmd
MIFARE
Backend Rnd Challenge
card
System Host / C Reader IC
Response + Challenge
Crypto
keys Response
Training
22
Contactless reader design
Step 3: Selection of security architecture (SAM S-interface)
SAM device carries HW based cryptography that allows one to perform complex cryptographic operations efficiently and to
securely store and protect keys
Embedded reader module
Success!
SAM
Backend MIFARE
Auth Cmd
System Host/ C card
Reader IC
Rnd Challenge
Response + Challenge
Response
Training
23
Contactless reader design
Step 3: Selection of security architecture (SAM X-interface)
SAM device carries HW based cryptography that allows one to perform complex cryptographic operations efficiently and to
securely store and protect keys
Embedded reader module
Auth Cmd
Rnd Challenge
Backend MIFARE
System Host / C SAM card
Reader
Response IC
+ Challenge
Response
Success!
T=1 I2 C
Training
24
Contactless reader
e.g. RFID Elektor reader schematic
25
Elektor RFID reader
Elektor RFID reader is compatible with MIFARE and
ISO/IEC 14443-A international standard.
It was designed to make the device as universal as
possible.
Features:
Compatible with MIFARE and ISO/IEC14443-A cards
USB interface for PC connection
MFRC522 reader IC (NXP)
P89LPC936 microcontroller (NXP 8051-based MCU)
I2C and SPI interfaces
Available 8-bit I/O output
Programming tools available
Training
26
Elektor RFID Reader Voltage P89LPC936 MFRC522
Schematic regulator microcontroller reader IC
Power supply by
mini USB connector
RS-232 to USB
converter
LCD display
Training
27
Elektor RFID Reader
Serial I2 C Interrupt
Schematic interface interface controller
Antenna
matching
network
LCD
interface
Clock
Source
Training
28
Contactless reader
e.g. CLRC663 POS schematic
29
Point of sales
Based on CLRC663 reader IC
OM5597/RD2663 is a development kit of a cost effective
EMV compliant Point of Sales Terminal based on NXP
components.
It provides an EMV Level 1 compliant software stack for
contactless as well as contact payment based on
CLRC663 and TDA8026.
The user interface is composed of an LCD screen and a
keyboard.
http://www.nxp.com/demoboard/OM5597.html
Training
30
Point of sales Power
Mgmt
Schematic: CLRC663 reader IC module
Antenna matching
network and Rx circuit
Host
interfaces
IRQ
pin
Clock
Source
Training
31
Point of sales
Schematic: LPC1768 microcontroller SPI interface I2C interface to Keypad
to CLRC663 TDA8026 connection
JTAG /SWD
interface
Training
32
Point of sales
Schematic: TDA8026 and SAM
The TDA8026 can handle up to 5 SAM modules and is
connected via I2C to the LPC1768 I2C interface to
LPC1768
SAM slot #1
Training
33
NXP Portfolio
NFC Readers
34
NFC Readers IC portfolio
Overview
NFC Tag ISO 18092 ISO 18092 Reader/ Writer RF Power Embedded
Target Initiator FW
Active & Active & ISO14443
PN512 Type 2, 3 & 4 Medium
Passive Passive Felica
ISO14443
CLRC663 Passive ISO15693 High
Felica
SLRC610 ISO15693 High
ISO14443 ISO15693
PR601 Passive High
Felica HITAG
Active & Active & ISO14443
PN7120 Type 2, 3 & 4 ISO15693 High Yes
Passive Passive Felica
Card
emulation Peer-to-Peer Read & Write
Training
35
NFC Readers IC portfolio
Hardware support: Evaluation boards
Product Board Photo Description More info
A two-board combination that stacks a PN512 board on an
PN512 PNEV512B LPC-Link prototyping board, for use with NXPs LPC www.nxp.com/demoboard/PNEV512B.html
microcontrollers. NFC Forum-compliant reader IC.
An expansion board, designed for use with Raspberry Pi,
PN512 PNEV512R which is a card-sized ARM-based, computer-running www.nxp.com/demoboard/PNEV512R.html
Linux.
Evaluation board for multi-protocol CLRC663. Testing
CLRC663 CLEV663 www.nxp.com/demoboard/CLEV663.html
reader IC functionalities.
A two-board combination, with a CLRC663 board stacked
CLRC663 CLEV663B on an LPC-Link prototyping board for use with NXPs LPC www.nxp.com/demoboard/CLEV663B.html
microcontrollers
Microboard with PR601 and 13,56MHz antenna. Powered
PR601 PREV601M by a single battery, and supported by the NFC Reader www.nxp.com/demoboard/PREV601M.html
Library
In NFC Forum-compliant development board with Raspberry
PN7120 - Available in 2015
development Pi interface
Training
36
NFC Readers IC portfolio
SW support: NFC Reader Library
The NFC Reader Library is a modular software library
written in C language
Components can be added / subtracted without disturbing the
rest of the stack.
Provides an API which makes it easy to create a software
stack and applications for an NFC IC.
Implement all the lower-layer functions
SPI, I2C
Implement the drivers for NFC ICs
Implement the contactless protocol
Implement APIs to operate with MIFARE and NFC Forum tags.
All components needed for communication in P2P
The application and protocol layers operate independently
of the microcontroller
These layers are not bound to or dependent on any specific
hardware.
Training
37
NXP Portfolio
LPC microcontrollers
38
LPC microcontrollers portfolio
Overview
Entry-level LPC microcontrollers
High performance LPC microcontrollers
Training
39
LPC microcontrollers portfolio
Developer ecosystem
SW development tools
LPCXpresso IDE and mbed IDE.
Popular tool chains from IAR, Keil and other
vendors provide support for LPC products.
Debug and trace probes
ARM MCUs provide either JTAG and / or SWD
ports.
Evaluation and development boards
LPCXpresso boards, mbed boards, Full-featured
develop. Boards (Embedded Artists, Keil, IAR
and NGX)
RTOS, middleware and drivers
Free chip and board-level drivers, middleware
such as TCP/IP stacks, graphic libraries, USB
drivers, etc.
Training
40
Further information
NFC Reader Design: How to build your own reader
NFC Everywhere
www.nxp.com/nfc
NFC controller and frontend solutions
http://www.nxp.com/products/identification_and_security/nfc_and_reader_ics/
RFID: MIFARE and Contactless Cards in Application
www.amazon.com/RFID-MIFARE-Contactless-Cards-Application/dp/1907920145
LPC microcontrollers
http://www.nxp.com/products/microcontrollers
LPC Zone
www.nxp.com/lpczone
LPCXpresso
www.nxp.com/lpcxpresso
LPCWare
www.lpcware.com
Trainings & webinars:
http://www.nxp.com/products/related/customer-training.html
Training
41
MobileKnowledge
Thank you for your attention
www.themobileknowledge.com
We are a global competence team of hardware and software
technical experts in all areas related to contactless technologies
and applications.
Our services include:
Application and system Design Engineering support
Project Management
Technological Consulting
Advanced Technical Training services
We address all the exploding identification technologies that
include NFC, secure micro-controllers for smart cards and mobile
applications, reader ICs, smart tags and labels, MIFARE family
and authentication devices.
For more information
Eric Leroux
[email protected]
+34 629 54 45 52
Training
42