The security features of Atmel’s AT88SC101/102 include:

data access only after validation of the security code

permanent invalidation of device upon four consecutive

false security code presentations

read/write protection of certain memory zones

device reset if power drops

secure transport of devices using transport code compare

sequence

The AT88SC101/102 is manufactured using low-power

CMOS technology and features its own internal high-volt-

age pump for single voltage supply operation. The de-

vices are guaranteed to 100,000 erase/write cycles and

100 year data retention. Endurance up to one-million

AT88SC101 and AT88SC102 Memory Map

Memory Partitions

AT88SC101

AT88SC102

Address

Bits

Address

Bits

Fabrication Zone (FZ)

0 - 15

16

0 - 15

16

Issuer Zone (IZ)

16 - 79

64

16 - 79

64

Security Code (SC)

80 - 95

16

80 - 95

16

Security Code Attempts Counter (SCAC)

96 - 111

16

96 - 111

16

Code Protected Zone (CPZ)

112 - 175

64

112 - 175

64

Application Zone 1 (AZ1)

176 - 1199

1024

176 - 687

512

Application Zone 1 Erase Key (EZ1)

1200 - 1231

32

688 - 735

48

Application Zone 2 (AZ2)

—

—

736 - 1247

512

Application Zone 2 Erase Key (EZ2)

—

—

1248 - 1279

32

Erase Counter (EC)

1232 - 1359

128

1280 - 1407

128

Memory Test Zone (MTZ)

1360 - 1375

16

1408 - 1423

16

TOTAL BITS

1376

1424

Definition of AT88SC101/102 Memory Partitions

FABRICATION ZONE (16 bits):

Programmed by the

manufacturer with a specific identifier for each customer.

FUSE1 is blown by the manufacturer after programming

the fabrication code, which makes the fabrication zone

unalterable.

ISSUER ZONE (64 bits):

Programmed by the issuer be-

fore finalizing personalization. The data stored in the is-

suer zone is unalterable after FUSE2 is blown.

SECURITY CODE (16 bits):

Must be presented by the

issuer to access circuit memory and personalize device

before blowing FUSE2. This secures transportation be-

tween the manufacturer and the issuer. After the device is

personalized and FUSE2 is blown, this code protects the

access to the application zone(s) of the card.

SECURITY CODE ATTEMPTS COUNTER (16 bits):

Counts the number of incorrect security code attempts.

The device is locked after 4 false presentations.

USER PROTECTED ZONE (64 bits):

Writing and eras-

ing this zone is protected. The number of program/erase

cycles is guaranteed up to 100,000.

APPLICATION ZONE(S) (1024 or 512 bits):

Reading

and programming the application zone(s) are controlled by

the first 2 bits of the zone (PR, RD) and by the security

code (Tables 1 and 2). The erasure of each zone is pro-

tected by an erase key specific to each zone.

APPLICATION ZONE ERASE KEY (32 or 48 bits):

Must

be presented to authorize the erasure of the application

zone(s). The key(s) must be programmed during the per-

sonalization of the circuit.

ERASE COUNTER (128 bits):

Limits the number of era-

sures of the last zone to 128 or less.

MEMORY TEST ZONE (16 bits):

Allows pattern testing

at this memory location.

2

AT88SC101/102