DS1963S
10 of 37
address, the master may send 16 read time slots and will receive the CRC generated by the DS1963S. The
data bytes are used in the CRC calculation but are not actually written to the scratchpad.
Read Scratchpad Command [AAh]
HIDE = 0:
The Read Scratchpad command allows verifying the target address, ending offset and the integrity of the
scratchpad data. After issuing the command code the master begins reading. The first 2 bytes will be the
target address. The next byte will be the ending offset/data status byte (E/S) followed by the scratchpad
data beginning at the byte offset (T4: T0). The master may read data until the end of the scratchpad after
which it will receive the inverted CRC generated by the DS1963S. If the master continues reading after
the CRC all data will be logic 1’s.
HIDE = 1:
The function of the command is limited to reading the target address and ending offset. Instead of
scratchpad data the master will read logic 1’s until, based on the target address read, the end of the
scratchpad is reached, at which point the master will receive the CRC generated by the DS1963S. If the
master continues reading all data will be logic 1’s.
Copy Scratchpad [55h]
HIDE = 0, Target Address range 0000h to 01FFh only
The Copy Scratchpad command is used to copy data from the scratchpad to a memory page. After issuing
the command, the master must provide a 3-byte authorization pattern, which should have been obtained
by an immediately preceding Read Scratchpad command. This 3-byte pattern must exactly match the data
contained in the three address registers (TA1, TA2, E/S, in that order). If the pattern matches, the AA
(Authorization Accepted) flag will be set and the copy will begin. While the data is being copied the
master will read logic 1’s. A pattern of alternating 1’s and 0’s will be transmitted after the data has been
copied until the master issues a reset pulse. Any attempt to reset the part will be ignored while the copy is
in progress. The copy operation typically takes 30 s. The master must read at least 8 bits of this
alternating pattern. Otherwise the device might not properly respond to a subsequent Reset Pulse.
The data to be copied is determined by the three address registers. The scratchpad data from the
beginning offset through the ending offset will be copied to memory, starting at the target address.
Anywhere from 1 to 32 bytes may be copied to memory with this command. Only executing a write
scratchpad command will clear the AA flag.
HIDE = 1: Target Address range 0200h to 023Fh only
The function follows the regular flow as described above if the target address and ending offset match the
address of a secret. If the target address points to a location within the main memory address range but
the HIDE-flag is set (due to a power-on reset of the parasite-powered circuit, for example) no scratchpad
data will be copied. Conversely, one can copy known data (“password”) to a secret by writing data to the
scratchpad, setting the HIDE flag, issuing a Write Scratchpad command to select a secret and then issuing
a Copy Scratchpad command. This procedure, however, is not recommended since it compromises the
achievable level of security.
Read Memory [F0h]
The read memory command may be used to read memory pages 0 to 15, the write cycle counters located
in pages 19 and 20 and the PRNG counter at the beginning of page 21. Trying to read the secrets that are
located in pages 16 and 17 will not reveal any data. Attempts to read page 18 will return the scratchpad
data if HIDE flag is cleared (HIDE=0) and FFh values if the flag is set (HIDE=1). After issuing the