M
FEATURES
Security
•
•
•
•
•
Secure storage of Manufacturer’s Code
Secure storage of transmitter’s keys
Up to four transmitters can be learned
K
EE
L
OQ
code hopping technology
Normal and secure learning mechanisms
PDIP, SOIC
LRNIN
LRNOUT
NC
MCLR
GND
S0
S1
S2
S3
1
2
3
4
5
6
7
8
9
HCS512
Code Hopping Decoder
PACKAGE TYPE
18
17
16
15
14
13
12
11
10
HCS512
RFIN
NC
OSCIN
OSC
OUT
V
DD
DATA
CLK
SLEEP
V
LOW
Operating
•
•
•
•
•
3.0V – 6.0V operation
4 MHz RC oscillator
Learning indication on LRNOUT
Auto baud rate detection
Power saving sleep mode
Other
•
•
•
•
Stand alone decoder
On-chip EEPROM for transmitter storage
Four binary function outputs–15 functions
18-pin DIP/SOIC package
BLOCK DIAGRAM
RFIN
67-Bit Reception Register
Typical Applications
•
•
•
•
•
•
•
Automotive remote entry systems
Automotive alarm systems
Automotive immobilizers
Gate and garage openers
Electronic door locks
Identity tokens
Burglar alarm systems
EEPROM
CONTROL
DECRYPTOR
DATA
CLK
LRNIN
SEL
MCLR
SLEEP
CONTROL
S3
V
LOW
LRNOUT
OSCIN OSCILLATOR
OUTPUT
S0
S1
S2
Compatible Encoders
• HCS200, HCS300, HCS301, HCS360, HCS361
• NTQ106
DESCRIPTION
The Microchip Technology Inc. HCS512 is a code hop-
ping decoder designed for secure Remote Keyless
Entry (RKE) systems. The HCS512 utilizes the pat-
ented K
EE
L
OQ
code hopping system and high security
learning mechanisms to make this a canned solution
when used with the HCS encoders to implement a uni-
directional remote keyless entry system.
The Manufacturer’s Code, transmitter keys, and syn-
chronization information are stored in protected on-chip
EEPROM. The HCS512 uses the DATA and CLK inputs
to load the Manufacturer’s Code which cannot be read
out of the device.
The HCS512 operates over a wide voltage range of
3.0 volts to 6.0 volts. The decoder employs automatic
baud rate detection which allows it to compensate for
wide variations in transmitter data rate. The decoder
contains sophisticated error checking algorithms to
ensure only valid codes are accepted.
©
1997 Microchip Technology Inc.
DS40151C-page 1
HCS512
1.0
1.1
K
EE
L
OQ
SYSTEM OVERVIEW
Key Terms
1.2
HCS Encoder Overview
• Manufacturer’s Code – a 64-bit word, unique to
each manufacturer, used to produce a unique
encoder key in each transmitter (encoder).
• Encoder Key – a 64-bit key, unique for each trans-
mitter. The encoder key controls the decryption
algorithm and is stored in EEPROM on the
decoder device.
• Learn – The receiver uses information that is
transmitted to derive the transmitter’s secret key,
decrypt the discrimination value and the synchro-
nization counter in learning mode. The encoder
key is a function of the Manufacturer’s Code and
the device serial number and/or seed value.
The HCS encoders and decoders employ the K
EE
L
OQ
code hopping technology and an encryption algorithm
to achieve a high level of security. Code hopping is a
method by which the code transmitted from the trans-
mitter to the receiver is different every time a button is
pushed. This method, coupled with a transmission
length of 66 bits, virtually eliminates the use of code
‘grabbing’ or code ‘scanning’.
The HCS encoders have a small EEPROM array which
must be loaded with several parameters before use.
The most important of these values are:
• A 28-bit serial number which is meant to be
unique for every encoder
• An encoder key that is generated at the time of
production
• A 16-bit synchronization value
The serial number for each encoder is programmed by
the manufacturer at the time of production. The
generation of the encoder key is done using a key gen-
eration algorithm (Figure 1-1). Typically, inputs to the
key generation algorithm are the serial number of the
encoder and a 64-bit manufacturer’s code. The manu-
facturer’s code is chosen by the system manufacturer
and must be carefully controlled. The manufacturer’s
code is a pivotal part of the overall system security.
FIGURE 1-1:
CREATION AND STORAGE OF ENCODER KEY DURING PRODUCTION
Transmitter
Serial Number or
Seed
HCSXXX EEPROM Array
Serial Number
Encoder Key
Sync Counter
Manufacturer’s
Code
Key
Generation
Algorithm
Encoder
Key
.
.
.
DS40151C-page 2
©
1997 Microchip Technology Inc.
HCS512
The 16-bit synchronization value is the basis for the
transmitted code changing for each transmission and is
updated each time a button is pressed. Because of the
complexity of the code hopping encryption algorithm, a
change in one bit of the synchronization value will result
in a large change in the actual transmitted code. There
is a relationship (Figure 1-3) between the key values in
EEPROM and how they are used in the encoder. Once
the encoder detects that a button has been pressed,
the encoder reads the button and updates the synchro-
nization counter. The synchronization value is then
combined with the encoder key in the encryption algo-
rithm, and the output is 32 bits of encrypted information.
This data will change with every button press, hence, it
is referred to as the hopping portion of the code word.
The 32-bit hopping code is combined with the button
information and the serial number to form the code
word transmitted to the receiver.
1.3
HCS Decoder Overview
Before a transmitter can be used with a particular
receiver, the transmitter must be ‘learned’ by the
receiver. Upon learning a transmitter, information is
stored by the receiver so that it may track the
transmitter, including the serial number of the
transmitter, the current synchronization value for that
transmitter, and the same encoder key that is used on
the transmitter. If a receiver receives a message of valid
format, the serial number is checked and, if it is from a
learned transmitter, the message is decrypted and the
decrypted synchronization counter is checked against
what is stored. If the synchronization value is verified,
then the button status is checked to see what operation
is needed. Figure 1-3 shows the relationship between
some of the values stored by the receiver and the val-
ues received from the transmitter.
FIGURE 1-2:
BASIC OPERATION OF TRANSMITTER (ENCODER)
Transmitted Information
K
EE
L
OQ
Encryption
Algorithm
32 Bits of
Encrypted Data
Button Press
Information
Serial Number
EEPROM Array
Encoder Key
Sync Counter
Serial Number
FIGURE 1-3:
BASIC OPERATION OF RECEIVER (DECODER)
Check for
Match
EEPROM Array
Encoder Key
Sync Counter
Serial Number
Manufacturer’s Code
Check for
Match
K
EE
L
OQ
Decryption
Algorithm
Decrypted
Synchronization
Counter
Button Press
Information
Serial Number
32-Bits of
Encrypted Data
Received Information
©
1997 Microchip Technology Inc.
DS40151C-page 3
HCS512
2.0
PIN
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
PIN ASSIGNMENT
Decoder
Function
LRNIN
LRNOUT
NC
MCLR
Ground
S0
S1
S2
S3
Vlow
SLEEP
CLK
DATA
V
DD
OSC
OUT
OSC
IN
(4 MHz)
NC
RFIN
I/O
(1)
I
O
—
I
P
O
O
O
O
O
I
I/O
I/O
P
—
I
—
I
Buffer
Type
(1)
TTL
TTL
TTL
ST
—
TTL
TTL
TTL
TTL
TTL
TTL
TTL/ST
(2)
TTL/ST
(2)
—
—
ST
—
TTL
RF input from receiver
Description
Learn input - initiates learning, 10K pull-up required on input
Learn output - indicates learning
Do not connect
Master clear input
Ground connection
Switch 0
Switch 1
Switch 2
Switch 3
Battery low indication output
Connect to RFIN to allow wake-up from sleep
Clock in programming mode and synchronous mode
Data in programming mode and synchronous mode
Power connection
Oscillator out – no connection
Oscillator in – recommended values 10 k
Ω
and 10pF
Note 1:
P = power, I = in, O = out, and ST = Schmitt Trigger input.
2:
Pin 12 and Pin 13 have a dual purpose. After reset, these pins are used to determine if programming mode
is selected in which case they are the clock and data lines. In normal operation, they are the clock and data
lines of the synchronous data output stream.
DS40151C-page 4
©
1997 Microchip Technology Inc.
HCS512
3.0
3.1
DESCRIPTION OF FUNCTIONS
Parallel Interface
3.2
Serial Interface
The HCS512 activates the S3, S2, S1 & S0 outputs
according to Table 3-1 when a new valid code is
received. The outputs will be activated for approxi-
mately 500 ms. If a repeated code is received during
this time, the output extends for approximately 500 ms.
TABLE 3-1:
Function
Code
0001
0010
0011
0100
0101
0110
0111
1000
1001
1010
1011
1100
1101
1110
1111
FUNCTION OUTPUT TABLE
S3
0
0
0
0
0
0
0
1
1
1
1
1
1
1
1
S2
0
0
0
1
1
1
1
0
0
0
0
1
1
1
1
S1
0
1
1
0
0
1
1
0
0
1
1
0
0
1
1
S0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
The decoder has a PWM/Synchronous interface con-
nection to microcontrollers with limited I/O. An output
data stream is generated when a valid transmission is
received. The data stream consists of one start bit, four
function bits, one bit for battery status, one bit to indi-
cate a repeated transmission, two status bits, and one
stop bit. (Table 3-1). The DATA and CLK lines are used
to send a synchronous event message.
A special status message is transmitted on the second
pass of learn. This allows the controlling microcontroller
to determine if the learn was successful (Result = 1)
and if a previous transmitter was overwritten (Overwrite
= 1). The status message is shown in Figure 3-2.
Table 3-2 show the values for TX1:0 and the number of
transmitters learned.
TABLE 3-2:
TX1
0
0
1
1
STATUS BITS
TX0
0
1
0
1
Number of Transmitters
One
Two
Three
Four
FIGURE 3-1:
START
DATA OUTPUT FORMAT
S3
S2
S1
S0
V
LOW
REPEAT
TX1
TX0
STOP
FIGURE 3-2:
START
STATUS MESSAGE FORMAT
0
0
0
0
RESULT
OVRWR
TX1
TX0
STOP
A 1-wire PWM or 2-wire synchronous interface can be used.
In 1-wire mode, the data is transmitted as a PWM signal with a basic pulse width of 400
µ
s.
In 2-wire mode, synchronous mode PWM bits start on the rising edge of the clock, and the bits must be sampled on the
falling edge. The start and stop bits are ‘1’.
FIGURE 3-3:
PWM TRANSMISSION FORMAT
600µs
CLK
DATA
Start
1200µs
S3
S2
“1”
S1
S0
“0”
V
LOW
RPT Reserved Reserved Stop
©
1997 Microchip Technology Inc.
DS40151C-page 5
Microcontroller MCU
京公网安备 11010802033920号
EEWORLD
