Silicon Laboratories Si4010 Series User manual

Silicon Laboratories
Brand
Silicon Laboratories
Model
Si4010 Series
Type
User manual

This manual is also suitable for

Rev 0.2 6/12 Copyright © 2012 by Silicon Laboratories Si4010 Keyfob AES DEMO
Si4010 Keyfob AES DEMO
Si4010 KEY FOB AES DEMO KIT WITH EZRADIO® LCD
B
ASE BOARD USER’S GUIDE
1. Purpose
This user’s guide describes the use of the Demo Kit and gives the user a brief introduction to the AES
encryption/decryption algorithm. The current version of the firmware does not support remote mode, so it can only
be used in standalone mode without the Wireless Development Suite (WDS).
2. Kit Contents
The kit contains the following items:
Figure 1. LCD Base Board
Qty Part Number Description
1 4010-KFOB-xxx Si4010 universal key fob for 316.66/433.92/868.3/917 MHz
1 MSC-LCDBB930-AES LCD Base Board with C8051F930 MCU
1 4355-PRXBxxxB RF Pico Board with EZRadio chip for 316.66/433.92/868.3/917 MHz
1 MSC-AT50-xxx Antenna for 316.66/433.92/868.3/917 MHz
1 MSC-PLPB_1/2/3 Key fob plastic case
1 CR2032 CR2032 Coin Cell battery
3 AA 1.5 V AA battery
1 USB USB mini-B cable
Si4010 Keyfob AES DEMO
2 Rev 0.2
Figure 2. RF Pico Board
Figure 3. Si4010 Key Fob
Si4010 Keyfob AES DEMO
Rev 0.2 3
3. Requirements
The following items are required to use the demo in standalone mode:
LCD Base Board
RF Pico Board with EZRadio Next Generation chip
3xAA batteries or USB Mini-B cable
Si4010 key fob on 316.66/433.9/868.30/917.00 MHz
4. Si4010 Key Fob Demo Description
The AES demo utilizes the capabilities of the Si4010 key fob transmitter and the Si4355 EZRadio receiver in order
to demonstrate a one-way secure link application.
The Si4010 key fob as the transmitter sends radio packets with partially encoded content. At the receiver side an
EZRadio receiver, the Si4355 chip receives the packet, then evaluates and decodes it.
The receiver can handle OOK or 2FSK modulated RF packets as well as the transmitter can set up to transmit
OOK or 2FSK modulated RF packets.
4.1. RF Parameters
The Si4010 AES Demo transmitter and receiver uses the following RF configuration:
Center frequencies: 316.66/433.92/868.3/917 MHz depending on RF Pico board and key fob
OOK/2FSK modulation (selectable)
9.6 kBaud
Manchester coding in OOK mode (results in 4.8 kbps data rate).
4.2. Selection of Si4010 Key Fob Modulation
The Si4010 key fob can modulate RF packets in OOK/2FSK. In order to select the appropriate modulation type,
follow the steps below:
1. Open the plastic case of the key fob.
2. Remove the battery and wait for 30 seconds to discharge capacitors.
3. For 2FSK modulation, place the battery back and make sure that no buttons are pressed during battery
insertion.
4. For OOK modulation, press and hold the center button on the key fob during the battery insertion process.
5. Fit the plastic case of the key fob.
4.3. RF Packet Formats
The packet format sent by the Si4010 is as follows:
Table 1. RF Packet Format
Preamble Sync Chip ID Status Counter CRC AES part CRC
13 byte 2 byte 4 byte 1 byte 2 byte 2 byte 16 byte 2 byte
Si4010 Keyfob AES DEMO
4 Rev 0.2
The fields other than AES part are not encoded. The AES encoded part of the RF packet contains the following
encoded fields:
Since the plain part and the AES encrypted part both contains the Chip ID, the decoding process is verified by
comparing the Chip ID field between the two parts of the RF packet. If the decryption fails, a notification screen
appears describing the AES decryption failure.
4.4. AES Encoding
The AES encryption/decryption algorithm is a symmetric algorithm because the same key is used for encryption
and decryption. The AES128 encoding/decoding process has been done using the SiLabs AES128 library. A
session key for each packet is generated based on the sender Chip ID field and the constant key for the given
packet type. There are two kinds of RF packets the key fob can send: an Association packet or a Message packet.
There are different keys stored in the flash for each kind of packet. The receiver determines which key should be
used by the Association flag in the plain Status byte.
Figure 4. AES Encoding
Decoding of AES encrypted data basically consists of the same steps as encoding except that the final AES cipher
is replaced with inverse-ciphering. The receiver generates the same session key from the constant key and the
sender Chip ID, and, since the AES is a symmetric algorithm, it can decrypt the data if the session key is valid.
Table 2. AES Encoded Fields
Temperature Battery Status Rolling Counter Button State PACap value Chip ID Reserved (0x00)
2 byte 1 byte 4 byte 1 byte 2 byte 4 byte 2 byte
AssociationKey/
MessageKey
Arraywith
ChipID
AES
Cipher
AES
Cipher
DataArray
SessionKey EncryptedData
Si4010 Keyfob AES DEMO
Rev 0.2 5
5. Demo Usage
Connect an appropriate RF Pico board to the LCD Base Board; then, set the SW1 switch on the LCD Base Board
according to the power source (battery or USB).
During startup, the RF parameters are automatically detected by the demo software based on the EBID
information. In this way, only the modulation type (OOK/FSK) should be selected manually.
Figure 5 shows the modulation selection screen.
Figure 5. Modulation Type Selection
To select the modulation type on the Si4010 key fob, refer to "4.2. Selection of Si4010 Key Fob Modulation" on
page 3. After the modulation has been chosen, the AES Demo main screen will display as shown in Figure 6.
Figure 6. Main Screen
Notification screens discussed below can pop up in the Main screen view and are caused by various events. The
notification screens disappear after a time-out of several seconds; they can also be eliminated by pressing any of
the push buttons.
After startup, no associated clients are registered. In order to associate a client, press the push-button under the
Asc
menu option. During association, there is a limited amount of time available to associate a client. The
remaining time is written to the screen as shown in Figure 7.
Figure 7. Association Timeout
The radio packets sent by the key fob are not like the association packets sent during normal use. To get an
association packet out from the key fob, press Button 1 and Button 3 at the same time. This causes the key fob to
generate an association plain text packet and then encrypt it with a different (association) AES key. Button 1 (right)
and Button 3 (left) on the key fob are identified by arrows in Figure 8.
Si4010 Keyfob AES DEMO
6 Rev 0.2
Figure 8. Key Fob Association
If the association timeout has not elapsed and an association request packet is received by the radio chip, the
encoded part of the packet will be decrypted using an Association Session Key based on an Association Key and
the sender ID. If decryption was successful, the client rolling counter is synchronized and registered to the clients
list. Figure 9 shows the case when a successful association process completed.
Figure 9. Association Success
When at least one client is associated, the Main screen displays the space used on the list as shown in Figure 10.
Figure 10. Main Screen with Associated Clients
If an AES encoded radio packet is received by the RF Pico board from an associated client (other than an
association request), the payload data is decrypted and displayed on the screen. The associated clients can also
send unencrypted packets, which do not need to be decrypted. The notification screen will be the same in both
cases, except the title, which shows if the packet was AES encrypted or is a Plain text packet.
The encrypted data contains the index from the list and the ID of the sender, the button number pressed on the key
fob, the rolling counter value, the key fob battery voltage, and, finally, the PACap value as shown in Figure 11.
Figure 11. AES Encoded Packet Received
Si4010 Keyfob AES DEMO
Rev 0.2 7
If an incoming packet rolling counter is greater than the last given rolling client counter value stored in the base
Board RAM by the predefined limit, the client will be removed from the registered list, and a notification screen will
be displayed as shown in Figure 12.
Figure 12. Rolling Counter Out of Limit
The list containing the associated clients can be erased by pressing the button under the Del menu option on the
Main screen. Deleting clients also resets their rolling counters. After a client is removed from the list, its packet is
neither received by the Base Board nor decrypted unless it is associated again. The Delete screen is shown in
Figure 13.
Figure 13. Delete Clients
The associated client list can be viewed by pressing the button under the List menu option on the Main screen. The
list view contains the indices and chip IDs of each associated client from the list. The list view is shown in
Figure 14.
Figure 14. List View of Clients
Si4010 Keyfob AES DEMO
8 Rev 0.2
6. Schematics
This section contains schematics of the RFPico, LCD Base Board, and Si4010 key fob boards included in the kit.
High-definition schematics and a complete manufacturing pack with CAD/CAM files and BOMs can be found at
www.silabs.com.
1V2
Apt/04/2012
MSC-LCDBB930
SHEET: OF
A3
Si ze
R
SILICON LABS
12
REV:DATE:
TITLE:
SILICON LABORATORIES
to USB Debug Interface section
To RF Pico Board
MCU Secti on
to LCD
to U2 MCU
C6
10uF
6.3V
C7
100nF
C8
100pF
1
GND/DC-
2
GND
3
VDD/DC+
4
DCEN
5
VBAT
6
RST/C2CK
7
P2.7/C2D
8
P2.6/WR
9
XTAL4
10
XTAL3
11
P2.5/RD
12
P2.4/ALE
13
P2.3/A11
14
P2.2/A10
15
P2.1/A9
16
P2.0/A8
17
P1.7/AD7
18
P1.6/AD6
19
P1.5/AD5
20
P1.4/AD4
21
P1.3/AD3
22
P1.2/AD2
23
P1.1/AD1
24
P1.0/AD0
25
P0.7/IREF0
26
P0.6/CNVSTR
27
P0.5/RX
28
P0.4/TX
29
P0.3/XTAL2
30
P0.2/XTAL1
31
P0.1/AGND
32
P0.0/VREF
U2
C8051F930
PB1
PB3
PB4
R5
4.7k
R6
N.F.
PB2
R9
1k
R10
1k
R11
1k
R12
1k
BZ1
R13
0R
R1
330R
R2
330R
R3
330R
R4
330R
LED1
Yellow
LED2
Green
LED3
Yellow
LED4
Red
Q3
32.768kHz
TZ1006A
12
34
56
78
910
11 12
13 14
15 16
17 18
19 20
RFP1
12
34
56
78
910
11 12
13 14
15 16
17 18
19 20
RFP2
RESET
12
JP3
N.F.
12
JP4
Jumper
12
JP5
Jumper
C13 1uF
C14 1uF
C15 1uF
C16
1uF
C17
1uF
C18
1uF
C19
1uF
C20
1uF
C21
1uF
R16 1k
C22 100nF
C23
1uF
R17
1k
1
A1
2
C1
19
C2
20
A2
21
V0
22
V1
23
V2
24
V3
25
V4
26
VSS
27
CAP2N
28
CAP2P
29
CAP1P
30
CAP1N
31
CAP3P
32
VOUT
33
VSS2
34
VDD2
35
VDD
36
SI
37
SCL
38
AO
39
/RST
40
/CS
LCD
EADOGM132L-5
R21
18R
1/4W
VDD
VDD
VDD
RF_GPIO_0
RF_GPIO_1
RF_GPIO_2
RF_GPIO_3
SCLK
MISO
MOSI
RF_NSEL
RF_NIRQ
RF_SDN
RF_GPIO_1
TS_RX
TS_TX
MCU_C2D
MCU_C2CK
VPP
SCL
LCD_NSEL
LCD_A0
SCLK
MOSI
RF_GPIO_0
RF_GPIO_2
RF_GPIO_3
VPP
MOSI
SDA
SCLK
MISO
RF_NSEL
RF_SDN
RF_GPIO_1
RF_GPIO_3
MOSI
SCLK
RF_NIRQ
RF_GPIO_0
RF_GPIO_2
VDD
VDD
LCD_NSEL
SCLK
MOSI
LCD_A0
SDA SCL
SCL
SDA
VDD
VDD
SDA
SCL
Figure 15. LCD Base Board Schematic 1
Si4010 Keyfob AES DEMO
Rev 0.2 9
Apt/04/2012
1V2
MSC-LCDBB930
A3
Si ze
R
SILICON LABS
22
REV:DATE:
TITLE:
SHEET: OF
SILICON LABORATORIES
USB Debug Interface Section
to MCU section
TDO_C2DATPS
TMS_C2CLKPS
GPIO1_CTS
EBID
1
P0.0
2
GND
3
D+
4
D-
5
VIO
6
VDD
7
REGIN
8
VBUS
9
C2CK/RST
10
P3.0/C2D
11
P2.3
12
P2.2
13
N/C
14
N/C
15
N/C
16
P2.5
17
P2.4
18
P2.1
19
P2.0
20
N/C
21
N/C
22
P0.7
23
P0.6
24
P0.5
25
P0.4
26
P0.3
27
P0.2
28
P0.1
U3
CF326-SX0261GM
1
VBUS
2
D-
3
D+
4
IO
5
GND
67
J7
USB_CONN_SMT_MINI
R7 FUSE_PTC
2
3
4
1
D1
DIODE-SP0503BAHTG
C3
100nF
C1
4.7uF
C2
100nF
R8
2k
R14
2k
R15
1k
LED5
Green
LED7
Yellow
LED6
Red
1
-
2
+
BAT
BATTERY_3XAA
1
C
2
A
D2
MBR0520L
1
2
3
SW1
SWI TCH-SSA12G
C4
1uF
C9
100pF
1
EN
2
GND
3
VIN
4
VOUT
5
NC
6
BYP
U1
MIC5353-33YMT
C5
1uF
C11
100nF
C12
100nF
C10
1uF
12
JP2
N.F.
JP1
1
2
3
4
J8
1
P0.1/AGND
2
P0.0/VREF
3
GND
4
VDD
5
C2CK/RST
6
P2.7/C2D
7
P1.7/XTAL4
8
P1.6/XTAL3
9
P1.5
10
P1.3
11
P1.2
12
GND
13
P1.1/CP0-
14
P1.0/CP0+
15
P0.7/IREF0
16
P0.6
17
P0.5/RX
18
P0.4/TX
19
P0.3/XTAL2
20
P0.2/XTAL1
U4
C8051F981-GM
1
Y1
2
GND
3
Y0
4
Z
5
VCC
6
S
U5
74LVC1G3157GW
1
Y1
2
GND
3
Y0
4
Z
5
VCC
6
S
U6
74LVC1G3157GW
R18
10k
R19
N.F.
R20
4.7k
C24
100nF
VDD
VDD
VDD
TS_TX
TS_RX
VBUS
VBUS
VDD
VPPVDD
VDD
VDD
VDD
VDD
MCU_C2D
MCU_C2CK
GPIO0_RTS
VDD
VDD
SDA
SCL
TDI_C2CLK
TCK_C2DAT
Figure 16. LCD Base Board Schematic 2
Si4010 Keyfob AES DEMO
10 Rev 0.2
4355-LED-434
Mar/13/2012
1V0
SHEET: OF
SILICON LABORATORIES
TITLE:
DATE: REV:
21
SILICON LABS
R
Si ze
A3
Antenna matching for 434MHz
with multilayer inductors
PCB antenna
RF Section
To MCU Section
RF EBID
C1
2.2uF
C2
100nF
C3
100pF
C4
33pF
C5
100nF
LR1
56nH
CR1
5.1pF
LR2
56nH
CR2
2.7pF
Q1
30MHz
CA
4.3pF
CC1
270pF
R7
4R7
1
GND
2
SDN
3
RXP
4
RXN
5
TX
6
GND
7
VDD
8
VDD
9
GND
10
GPIO_0
11
GPIO_1
12
NIRQ
13
SCLK
14
SDO
15
SDI
16
NSEL
17
XOUT
18
XIN
19
GPIO_2
20
GPIO_3
EP
EP
U1
Si4455
RX
12
34
56
78
910
11 12
13 14
15 16
17 18
19 20
21 22
23 24
25 26
27 28
29 30
J3
1
A0
2
A1
3
A2
4
VSS
5
SDA
6
SCL
7
WP
8
VCC
U3
24AA64T-I/MNY
C11 100nF
12
J2
12
34
56
78
910
11 12
13 14
15 16
17 18
19 20
RFP1
12
34
56
78
910
11 12
13 14
15 16
17 18
19 20
RFP2
12
J6
1
2
R18
0R
1
2
R19
N.F.
RFVDD
RF_SDN
RF_GPIO_3
RF_GPIO_2
RF_NSEL
RF_MOSI
RF_MISO
RF_SCLK
RF_NIRQ
RF_GPIO_1
RF_GPIO_0
RFVDD
GND
VDD
EBID_SCL
EBID_SDA
RF_MOSI RF_MISO
RF_SCLK RF_NSEL
RF_NIRQ RF_SDN
RF_GPIO_0 RF_GPIO_1
RF_GPIO_2 RF_GPIO_3
VDD
RFVDDRFVDD
EBID_SCL EBID_SDA
VPP
VPP
VPP
VPP
VPP
RF_SDN
RF_GPIO_3
RF_GPIO_2
RF_NSEL
RF_MOSI
RF_MISO
RF_SCLK
RF_NIRQ
RF_GPIO_1
RF_GPIO_0
MCU_SDN
MCU_GPIO_3
MCU_GPIO_2
MCU_NSEL
MCU_SDI
MCU_SDO
MCU_SCLK
MCU_NI RQ
MCU_GPIO_1
MCU_GPIO_0
MCU_SDA
MCU_SCL
EBID_SCL
EBID_SDA
Figure 17. RFPico Board Schematic
Si4010 Keyfob AES DEMO
Rev 0.2 11
04/27/2012
V1.1
4010-KFOB-434
SILICON LABORATORIES
SHEET: OF
TITLE:
DATE: REV:
11
SILICON LABS
R
Si ze
A4
Shortcircuit
For C2 debugging cut s.c. and use 470Ohms instead!
Printed
Capacitor
GPIO8 & GPIO9 NC =
434MHz FW setup
C3
1nF
C4
270pF
R1
LED
Red
SW4SW1
SW2
SW3
L1
220nH
C5
3.0pF
C2
2.2uF
SW0
C_TX
N.F.
1
GPI O9
2
GPI O0
3
GND
4
TXM
5
TXP
6
VDD
7
GPI O7
8
GPI O6
9
GPI O5
10
GPI O4
11
GPI O3
12
GPI O2
13
GPI O1
14
GPI O8
IC1
Si4010-C2-GS
3
1
2
BAT
CR2032
1
VPP
1
VCC
1
C2D
1
C2CK
1
GND
VDD
VDD
VDD
VDD
VDD
GPIO4
GPIO3
GPIO2
GPIO1
GPIO0
GPIO0
GPIO1 GPIO4GPIO3
GPIO2
Figure 18. Si4010-KFOB-434 Schematic
Si4010 Keyfob AES DEMO
12 Rev 0.2
DOCUMENT CHANGE LIST
Revision 0.1 to Revision 0.2
Added schematic diagrams.
Modified the purpose description.
Si4010 Keyfob AES DEMO
Rev 0.2 13
NOTES:
Disclaimer
Silicon Laboratories intends to provide customers with the latest, accurate, and in-depth documentation of all peripherals and modules available for system and software implementers
using or intending to use the Silicon Laboratories products. Characterization data, available modules and peripherals, memory sizes and memory addresses refer to each specific
device, and "Typical" parameters provided can and do vary in different applications. Application examples described herein are for illustrative purposes only. Silicon Laboratories
reserves the right to make changes without further notice and limitation to product information, specifications, and descriptions herein, and does not give warranties as to the accuracy
or completeness of the included information. Silicon Laboratories shall have no liability for the consequences of use of the information supplied herein. This document does not imply
or express copyright licenses granted hereunder to design or fabricate any integrated circuits. The products must not be used within any Life Support System without the specific
written consent of Silicon Laboratories. A "Life Support System" is any product or system intended to support or sustain life and/or health, which, if it fails, can be reasonably expected
to result in significant personal injury or death. Silicon Laboratories products are generally not intended for military applications. Silicon Laboratories products shall under no
circumstances be used in weapons of mass destruction including (but not limited to) nuclear, biological or chemical weapons, or missiles capable of delivering such weapons.
Trademark Information
Silicon Laboratories Inc., Silicon Laboratories, Silicon Labs, SiLabs and the Silicon Labs logo, CMEMS®, EFM, EFM32, EFR, Energy Micro, Energy Micro logo and combinations
thereof, "the world’s most energy friendly microcontrollers", Ember®, EZLink®, EZMac®, EZRadio®, EZRadioPRO®, DSPLL®, ISOmodem ®, Precision32®, ProSLIC®, SiPHY®,
USBXpress® and others are trademarks or registered trademarks of Silicon Laboratories Inc. ARM, CORTEX, Cortex-M3 and THUMB are trademarks or registered trademarks of
ARM Holdings. Keil is a registered trademark of ARM Limited. All other products or brand names mentioned herein are trademarks of their respective holders.
http://www.silabs.com
Silicon Laboratories Inc.
400 West Cesar Chavez
Austin, TX 78701
USA
Simplicity Studio
One-click access to MCU tools,
documentation, software, source
code libraries & more. Available
for Windows, Mac and Linux!
www.silabs.com/simplicity
MCU Portfolio
www.silabs.com/mcu
SW/HW
www.silabs.com/simplicity
Quality
www.silabs.com/quality
Support and Community
community.silabs.com
  • Page 1 1
  • Page 2 2
  • Page 3 3
  • Page 4 4
  • Page 5 5
  • Page 6 6
  • Page 7 7
  • Page 8 8
  • Page 9 9
  • Page 10 10
  • Page 11 11
  • Page 12 12
  • Page 13 13
  • Page 14 14

Silicon Laboratories Si4010 Series User manual

Silicon Laboratories
Brand
Silicon Laboratories
Model
Si4010 Series
Type
User manual
This manual is also suitable for
Download PDF
report

Ask a question and I''ll find the answer in the document

Finding information in a document is now easier with AI

Related papers

Other documents