A7001CMHN1/T1AGCEL Datasheet A7001CMHN1/T1AGCEL, A7002CMHN1/T1AGBEL, A7001AGHN1/T1AG315 | P1-P3

1. General description

1.1 Overview

The A700x family is a tamper resistant secure Micro Controller Unit (MCU) family using a

dedicated security hardened MX51CPU. NXP Semiconductors has a long track record in

security MCUs. NXP ICs have been used in all types of security applications such as bank

cards, health insurance cards, electronic passports, and pay-TV cards. They have also

been used as embedded secure element in mobile phones. The A700x family features a

significantly enhanced secure microcontroller architecture. Extended instructions for Java

and C code, linear addressing and high speed at low power are among many other

improvements added to the classic 80C51 core architecture.

The A700x family supports the following features:

• Dedicated MX51 security CPU

• 100 kbit/s I

C slave interface

• ISO/IEC 7816 interface (optional)

• ISO/IEC14443 interface (optional)

• 40 C to +90 C operational ambient temperature (optional)

• On-chip operating system firmware: JCOP 2.4.2

• X.509 certificate-based client authentication application pre-installed

• Secure generation and insertion of key and certificate data, individualized

for each die (optional)

• NXP glue logic

• NXP secure fetch technology

• Active shielding technology

• Asynchronous self-timed Handshake Technology

• Up to 76 kB EEPROM for application-code and data

• 40 A typical sleep mode current with I

C pads operated in weak pull-up mode, do not

obstruct the bus lines

• High-performance secured Public Key Infrastructure (PKI) coprocessor (RSA up to

2048-bit keys, ECC over GF(p) up to 320-bit keys)

• Secured 2-key/3-key triple-DES coprocessor

• Secured AES coprocessor (128-, 192- and 256-bit keys)

• Compliant to Java Card specification V3.0.1 classic as defined in Ref. 1

• Compliant to Global Platform specification as defined in Ref. 2 and Ref. 3

A700x family

Secure authentication microcontroller

Rev. 3.1 — 5 July 2013

202031 Product short data sheet

Product short data sheet

Rev. 3.1 — 5 July 2013

202031 2 of 18

NXP Semiconductors

A700x family

Secure authentication microcontroller

The A700x family runs a Java Card Open Platform operating system named JCOP. It is

based on independent, third-party specifications such as Oracle, Global Platform

consortium, International Organization for Standards (ISO), and EMV (Europay,

MasterCard and VISA). The Java Card and Global Platform industry standards combined

ensure ease of application development and application interoperability for developers.

The A700x family key benefits are:

• Complete security platform enabling customized solutions.

• Field and silicon proven solutions- deployed in numerous devices and environments.

• Ensures trust to drive applications in open and closed systems where a high level of

security is needed.

• Full solution, ease to integrate, ensuring lower total cost of ownership.

• Robust cryptographic core, countermeasures and protection of device assets.

• Powerful cryptographic coprocessors for public and secret key encryption within a low

power, performance optimized design based on NXP Semiconductors handshaking

technology.

For more detailed information refer to following document

ation

• User manual JCOP 2.4.2 R1 for A7 family, JCOP V2.4.2 Revision 1.0 secure

embedded MCU operating system, Document Number 2318xx

(see Ref. 16).

The User manual describes JCOP for the applet

developer. It outlines the features

available through the Java Card API. Also it explains any additional functionality at the

Java layer. Also, this User manual contains the information on how to order A700x

family products.

• Admin manual JCOP 2.4.2 R1 for A7 family, JCOP V2.4.2 Revision 1.0 secure

embedded MCU operating system, Document Number 2319xx2 (see Ref.

17). The

Administrator manual describes JCOP for the ad

ministrator of a JCOP operating

system. This manual explains the pre-personalization process and its specific

commands.

• Full data sheet, A700x family, secure authentication microcontroller, Document

Number 2066xx

(see Ref. 15).

The Full data sheet explains the details of the A7

00x family product from a hardware

point of view. It outlines figures like pinning diagram and power consumption.

• Application note, Device Authentication APDU Specification, Document Number

2118xx

(see Ref. 18).

The applet user manual contains a detailed de

scription of the authentication

application on the A700x family product. It outlines the interface description including

the APDU description and a description how to use the applet.

1. These documents are available under NDA

2. where XX refers to the last version; e.g. 10 refers to version 1.0

Product short data sheet

Rev. 3.1 — 5 July 2013

202031 3 of 18

NXP Semiconductors

A700x family

Secure authentication microcontroller

1.2 A700x family naming conventions

The following table explains the naming conventions of the commercial product name of

the A700x family products. Every A700x family product gets assigned such a commercial

name, which includes also customer and application-specific data.

The A700x family commercial names have the following format.

A700xagpp(p)/mvsrrff

The ‘A700’

is a const

ant, all other letters are variables, which are explained in Table 1.

1.3 X509 certificate-based client authentication

In addition to the A700x family secure MCU and the Java Card Open Platform operating

system, the total solution includes an X.509 certificate-based client authentication

application.

1.4 Trust provisioning service

The A700x family is delivered with pre-programmed, die-specific keys and certificates

which are being generated and programmed in a certified (Common Criteria) secure NXP

internal environment. The master keys are securely stored in HSMs (Hardware Secure

Modules). Additional authentication software for the host (host-MCU or remote server)

can also be included as part of the solution.

NXP Semiconductors offers a pre-personalizations serv

ice where customer-specific

initialization data can be preprogrammed. This data can be die-individual card manager

keys, symmetric DES-or AES keys, random data, X509 certificates, RSA signing keys or

any other constant data like application code.

Table 1. JCOP V2.4.2 commercial name format

Variable Meaning Values Description

IC hardware specification

code

see Table

a embedded operating

system code

A JCOP V2.4.2 R0.9

C JCOP V2.4.2 R1

g embedded application

rmw

are (applet) code

G Generic, no application layer firmware (i.e.

JCOP applets) pre-installed

C Customized, customer Applet pre-installed

in ROM or EEPROM

A Application firmware implementing generic

X50

9 based client authentication

pp(p) package type code see Table

m Manufacturing Site Code T

v Silicon Version Code 0

s Silicon Version Subcode B

rr ROM Code ID

ff FabKey ID

P1-P3 P4-P6 P7-P9 P10-P12 P13-P15 P16-P18

A7001CMHN1/T1AGCEL

Mfr. #:

Buy A7001CMHN1/T1AGCEL

Manufacturer:

NXP Semiconductors

Description:

Security ICs / Authentication ICs SecureAuthentication microcontroller

Lifecycle:

New from this manufacturer.

Delivery:

DHL FedEx Ups TNT EMS

Payment:

T/T Paypal Visa MoneyGram Western Union

A7001CMHN1/T1AGCEL

A7001CMHN1/T1AGCEL

Products related to this Datasheet