chip card & security sle 88cf4000p 32-bit security controller optimized for multi-application ca rds with high level of security 400 kbytes flexible eeprom 16 kbytes ram common criteria eal5+ (high) certified short product information 12.2009
important : further information is confidential and on request. please contact: infineon technologies ag in munich, germany, chip card & security email: security.chipcard.ics@infineon.com www.infineon.com/security published by infineon technologies ag, 81726 munich, germany ? infineon technologies ag 2009 all rights reserved. attention please! the information herein is given to describe certain components and shall not be considered as warranted characteristics. terms of delivery and rights to technical change reserved. we hereby disclaim any and all warranties, including but not lim ited to warranties of non-infringement, regarding circuits, descriptions and charts stated herein. infineon technologies is an approved cecc manufacturer. information for further information on technology, delivery terms and conditions and prices please contact your nearest infineon technologies office in germany or our infineon technologies representatives world-wide (see address list). warnings due to technical requirements components may contain dangerous substances. for information on the types in question please contact your nearest infineon technologies office. infineon technologies components may only be used in life-support devices or systems with the express written approval of infineon technologies, if a failure of such components can reasonably be expected to cause the failure of that life-support device or system, or to affect the safety or effectiveness of that device or system. life support devices or systems are intended to be implanted in the human body, or to support and/or maintain and sustain and/or protect human life. if they fail, it is reasonable to assume that the health of the user or other persons may be endangered.
sle 88cf4000p short product information 3 / 9 12.2009 general features ? dedicated 32-bit smartcard core designed in cost-optimized 0.13 m technology ? pipelined 32-bit risc cpu with proprietary instruction set ? specific instructions for virtual machine implementation like java card ? ultra low power consumption design ? very fast task switching supported by hardware mechanism for pre-emptive multitasking support ? maximum performance ? cpu supplied by 2 cache memories for fast instruction fetch and data access ? internal clock generation up to 66 mhz ? intelligent power manager which adjusts automatically and efficiently the internal clock according to a dedicated power class ? secure multi-application with memory management and protection unit (mmu) ? 256 packages separated and secured by hardware firewalls ? data and code access controlled by hardware ? memory and peripherals access managed with hardware supervisor components memory ? 400 kbytes eeprom with flash functionality and free partitioning between code and data ? 16 kbytes ram for local variables, buffers, and stacks ? memories encrypted by med (memory encryption/decryption) device ? memories protected by hardware error correction code interfaces ? smartcard uart for handling serial interface in accordance with iso/iec 7816 part3 supporting transmission protocols t=1 and t=0, support of clock division factor of 16 (pps96)
sle 88cf4000p short product information 4 / 9 12.2009 eeprom technology ? very fast programming: ? write/erase time < 2,3 ms ? flash functionality with 4k sector flash and erase in one shot ? eeprom page programming: 1 to 128 byte ? very high endurance: ? min. 500,000 write/erase cycles per page ? max. 16,500,000 write/erase cycles per 4k sector ? data retention: min. 10 years @ 25c security features ? 32-bit proprietary instruction set ? memory and cpu error detection, memory-, bus- and sfr-encryption ? dpa / spa , dema / sema countermeasures incl. dual rail logic ? security sensors (voltage, frequency, light, temperature, glitch) ? active shield ? true rng according to ais31 ? memory management and protection unit with level concept ? chip id, unique chip identification number for each chip coprocessors and peripherals ? hardware des accelerator for des and triple des calculations ? true random number generator for true random number generation ? three 16-bit autoreload timers for protocol implementation, event monitoring
sle 88cf4000p short product information 5 / 9 12.2009 tools and support ? software development kit, sdk 88 ? bondout based emulator for real time debugging ? flash samples for immediate test and validation, enabling short time-to-market ? ready to use low level software drivers (platform support layer) for peripherals, smartcard and cryptographic software: t=0, t=1, des, aes,? ? worldwide application engineer team & customer dedicated field application engineers. ? regular customer trainings on hardware & software tools , on-site trainings available on request. document references ? hardware reference manual ? programmer?s reference manual with complete set of application notes and program examples ? production and pers onalization manual for flash loading and production optimization ? chip qualification report ? chip delivery specification for wafer with chip-layout (die size, orientation, step size) ? module specification containing description of package ? module qualification report electrical characteristics ? external clock frequency: 1 to 10 mhz ? supply voltage range: 1.62 v to 5.5 v ? temperature range: -25c to +85c ? esd protection > 6 kv (hbm) ? max. sleep mode current (typical) < 100 a in clock off mode supported standard ? iso/iec 7816 ? gsm 11.11, 11.12, 11.18 ? etsi ts 102 221
sle 88cf4000p short product information 6 / 9 12.2009 ordering information type package 1 voltage range temperature range frequency range (ext. clock frequency) sle 88cf4000p c die (sawn, unsawn) sle 88cf4000p mxxx m5.x mfcxxx sle 88cf4000p dso20 dso-20-2 sle 88cf4000p vqfn10 vqfn-10-2 sle 88cf4000p tssop20 tssop-20-4 1.62 v - 5.5 v ? 25c to + 85c 1 mhz - 10 mhz 1 available as flip chip module (mfc), wire-bonded module (m5) , die (c) for customer packaging flash initialization/personalization available upon request. for ordering information please contact your infineon local sales representative. pin description and packaging lectrlectrical characteristics pin symbol function vcc operating voltage rst reset input clk processor clock input gnd ground i/o iso7816-3 bi-directional data port vcc gnd clk i/o sle 88 cf4000p m5.1 mfc5.6 mfc5.8 rst dso-20 / tssop-20 vq fn-10
sle 88cf4000p short product information 7 / 9 12.2009 general description the sle 88 products family is the infineon?s state of the art 32-bit platform , designed in cost optimized 130nm technology, with: ? high security level enabling secure multi-application and multitasking ? high performance for sim/uicc applications with a fast internal frequency (33-66mhz) ? high quality eeprom with 500,000 cycles programming endurance ? high flexibility with a freely configurable memory in code and data the sle 88cxf4002p and this derivative were the first flash microcontrollers designed fully in 130nm, reaching the cc eal5+ high certificate. it was rewarded by the sesames award of the ?best hardware? at the cartes 2006 exhibition. with its flash capability, it offers a decisive time-to-market advantage to card vendors and service providers in the launch of gsm/uicc applications. technical description multistage 32-bit cpu caches sensors filters active shield intelligent power manager scalable clk des accelerator trng 3 2- b i t b us med memory management and protection unit ram eeprom three 16-bit timers uart
sle 88cf4000p short product information 8 / 9 12.2009 the sle 88 family fully meets the requirements for real multi-application operating systems . the advanced 0.13m technology, the integral security concept, the low power optimised 32-bit core supported by various powerful peripherals, and the possibility to adapt the performance to application requirements establish the foundation for a completely new chip card generation. the high performance is ensured by the 32-bit risc architecture that processes instructions and data 32-bit wise supplied by 2 dedicated caches. a very efficient context/application switching mechanism allows fast switching between multiple tasks. an integral security concept , based on the entire integration of security measures at each hardware and software design phase, has been used for the development of the sle 88 family. an interrupt control unit supports a programmable interrupt system with uart, timers, and the other peripherals as interrupt sources. a variety of different trap vectors informs the operating system about exceptions (e.g. access violation). the architecture allows the linear addressing of large memories for a more convenient code implementation. the memory management and protection unit (mmu) handles a virtual address range of 4 gbytes, and serves as a hardware firewall to enable secure separation of adjacent application codes and data. program and data modules are organised as packages. each package has a defined memory range of 16 mbytes with dedicated access rights for memories and peripherals. with the 0.13m process, the sle 88 family offers large on-chip memories (rom, eeprom, ram). the eeprom space is the basis of infineon technologies ?flash? concept where the entire eeprom is freely configurable in code and data sections , and so can be used to store an operating system, as well as application code and data. this customization provides added value to the system and the possibility to serve multiple projects with the same platform. this concept offers the flexibility and convenience of flash memory, but takes advantage of the eeprom cell quality (timing, cycling and endurance) . a number of powerful peripherals offer hardware support for time and code intensive operations. : ? des accelerator for symmetric crypto operations based on des and triple des ? true random number generator (trng) to supply the cpu with true random numbers whose quality is tested according to ais-31 strict evaluation guidelines ? intelligent power manager which automatically adjusts the internal frequency accordingly to the power classes a,b,c ? three 16-bit timers for protocol implementation, event monitoring, etc?
sle 88cf4000p short product information 9 / 9 12.2009 glossary ais-31 functionality classes and evaluation methodology guidelines for physical random number generators defined by the german institute for the security of the information technology. caches cache memories are fast ram memories integrated into the cpu (faster access than external ram) crc cyclic redundancy check cpu central processing unit cmos complementary metal-oxide semiconductor (tec hnology used to manufacture most of today's chips) des data encryption standard ec elliptic curves eeprom electrically erasable programmable read-only memory (equivalent to nvm) esd electrostatic discharge, release of static electricity that can damage a chip etsi european telecommunication standards institute gsm global system for mobile communication hbm human body model iso/iec international organization for standardization/international electrotechnical commission med memory encryption decryption unit mmu memory management unit nvm non volatile memory os operating system prng pseudo random number generator ram random access memory risc reduced instruction set computer rom read-only memory rsa rivest, shamir and adleman, inventors of the rsa cryptosystem t=0, t=1 communication protocols defined in iso 7816 standard trng true random number generator uart universal asynchronous receiver/transmitter uicc universal integrated circuit card sales code name for ordering information please contact your infineon local sales representative sle 88 c 400 0 .. sle: ifx name s: solitary digital circuits l: free selectable e: temperature range (-25c up to +85c) features: f: flash product l: contact-less interface u: usb interface n: swp interface ordinal number : e.g. : 0,2 chip famil y : 66: 8-bit/16-bit 76: 16-bit 78: dual 16-bit 88: 32-bit c: controller eeprom size: 256: 256 kbytes 400: 400 kbytes 1m: 1mb 1m5: 1.5mb add. features p: plus x ? x: crypto controller
|
