![]() |
|
If you can't view the Datasheet, Please click here to try to view without PDF Reader . |
|
Datasheet File OCR Text: |
e preliminary june 1999 order number: 290645-007 28f800c3, 28f160c3, 28F320C3 (x16) n flexible smartvoltage technology ? 2.7 v C3.6 v read/program/erase ? 12 v for fast production programming n high performance ? 2.7 v?3.6 v: 90 ns max access time ? 3.0 v?3.6 v: 80 ns max access time n optimized architecture for code plus data storage ? eight 4-kword blocks, top or bottom locations ? up to sixty-three 32-kword blocks ? fast program suspend capability ? fast erase suspend capability n flexible block locking ? lock/unlock any block ? full protection on power-up ? wp# pin for hardware block protection ? v pp = gnd option ? v cc lockout voltage n low power consumption ? 9 ma typical read power ? 10 a typical standby power with automatic power savings feature n extended temperature operation ? ?40 c to +85 c n improved 12 v production programming ? faster production programming ? no additional system logic n 128-bit protection register ? 64-bit unique device identifier ? 64-bit user programmable otp cells n extended cycling capability ? minimum 100,000 block erase cycles n supports flash data integrator software ? flash memory manager ? system interrupt manager ? supports parameter storage, streaming data (e.g., voice) n automated word/byte program and block erase ? command user interface ? status registers n cross-compatible command support ? intel basic command set ? common flash interface n x16 i/o for various applications ? 48-ball m bga* package ? 48-ball easy bga package ? 48-lead tsop package n 0.25 m etox? vi flash technology the 0.25 m 3 volt advanced+ boot block flash memory, manufactured on intels latest 0.25 technology, represents a feature-rich solution for low power applications. 3 volt advanced+ boot block flash memory devices incorporate low voltage capability (2.7 v read, program and erase) with high-speed, low-power operation. flexible block locking allows any block to be independently locked or unlocked. add to this the intel-developed flash data integrator (fdi) software and you have a cost-effective, flexible, monolithic code plus data storage solution. intel ? 3 volt advanced+ boot block products will be available in 48-lead tsop and 48-ball bga* and easy bga packages. additional information on this product family can be obtained by accessing intels flash website: http://www.intel.com/design/flash. note: this document formerly known as 3 volt advanced+ boot block 8-, 16-, 32-mbit flash memory family . 3 volt advanced+ boot block flash memory
information in this document is provided in connection with intel products. no license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted by this document. except as provided in intel's terms and conditions of sale for such products, intel assumes no liability whatsoever, and intel disclaims any express or implied warranty, relating to sale and/or use of intel products including liability or warranties relating to fitness for a particular purpose, merchantabili ty, or infringement of any patent, copyright or other intellectual property right. intel products are not intended for use in medical, life saving, or life sustaining applications. intel may make changes to specifications and product descriptions at any time, without notice. the 28f800c3, 28f160c3, 28F320C3 may contain design defects or errors known as errata which may cause the product to deviate from published specifications. current characterized errata are available on request. contact your local intel sales office or your distributor to obtain the latest specifications and before placing your product o rder. copies of documents which have an ordering number and are referenced in this document, or other intel literature, may be obtained from: intel corporation p.o. box 5937 denver, co 80217-9808 or call 1-800-548-4725 or visit intels website at http://www.intel.com copyright ? intel corporation 1998, 1999 *third-party brands and names are the property of their respective owners. e 28f800c3, 28f160c3, 28F320C3 3 preliminary contents page page 1.0 introduction..............................................5 1.1 3 volt advanced+ boot block flash memory enhancements ............................................5 1.2 product overview .........................................6 2.0 product description ..............................6 2.1 package pinouts ..........................................6 2.2 block organization .....................................10 2.2.1 parameter blocks ................................10 2.2.2 main blocks .........................................10 3.0 principles of operation .....................11 3.1 bus operation ............................................11 3.1.1 read....................................................11 3.1.2 output disable.....................................11 3.1.3 standby ...............................................11 3.1.4 reset...................................................12 3.1.5 write....................................................12 3.2 modes of operation....................................12 3.2.1 read array ..........................................12 3.2.2 read configuration..............................13 3.2.3 read status register...........................13 3.2.3.1 clearing the status register .........13 3.2.4 read query .........................................13 3.2.5 program mode.....................................14 3.2.5.1 suspending and resuming program .......................................14 3.2.6 erase mode .........................................14 3.2.6.1 suspending and resuming erase.15 3.3 flexible block locking................................19 3.3.1 locking operation ...............................19 3.3.2 locked state .......................................19 3.3.3 unlocked state ....................................19 3.3.4 lock-down state .................................19 3.3.5 reading a blocks lock status ............20 3.3.6 locking operations during erase suspend .............................................20 3.3.7 status register error checking ...........20 3.4 128-bit protection register........................ 21 3.4.1 reading the protection register ......... 21 3.4.2 programming the protection register . 21 3.4.3 locking the protection register .......... 22 3.5 v pp program and erase voltages.............. 22 3.5.1 improved 12 v production programming ..................................... 22 3.5.2 v pp v pplk for complete protection .. 22 3.6 power consumption .................................. 23 3.6.1 active power (program/erase/read) .. 23 3.6.2 automatic power savings (aps)......... 23 3.6.3 standby power ................................... 23 3.6.4 deep power-down mode .................... 24 3.7 power-up/down operation........................ 24 3.7.1 rp# connected to system reset ....... 24 3.7.2 v cc , v pp and rp# transitions ............ 24 3.8 power supply decoupling.......................... 24 4.0 electrical specifications............... 25 4.1 absolute maximum ratings ....................... 25 4.2 operating conditions................................. 25 4.3 capacitance .............................................. 26 4.4 dc characteristics..................................... 26 4.5 ac characteristicsread operations extended temperature ............................. 30 4.6 ac characteristicswrite operations extended temperature ............................. 33 4.7 erase and program timings ...................... 35 4.8 reset operations....................................... 37 5.0 ordering information......................... 38 6.0 additional information ...................... 39 appendix a: wsm current/next states ......... 40 appendix b: program/erase flowcharts ....... 42 appendix c: common flash interface query structure ..................................................... 48 28f800c3, 28f160c3, 28F320C3 e 4 preliminary appendix d: architecture block diagram ......55 appendix e: word-wide memory map diagrams .....................................................56 appendix f: device id table .......................... 58 appendix g: protection register addressing ................................................. 59 revision history date of revision version description 05/12/98 -001 original version 07/21/98 -002 48-lead tsop package diagram change m bga package diagrams change 32-mbit ordering information change (section 6) cfi query structure output table change (table c2) cfi primary-vendor specific extended query table change for optional features and command support change (table c8) protection register address change i ppd test conditions clarification (section 4.3) m bga package top side mark information clarification (section 6) 10/03/98 -003 byte-wide protection register address change v ih specification change (section 4.3) v il maximum specification change (section 4.3) i ccs test conditions clarification (section 4.3) added command sequence error note (table 7) datasheet renamed from 3 volt advanced boot block, 8-, 16-, 32-mbit flash memory family. 12/04/98 -004 added t bhwh /t bheh and t qvbl (section 4.6) programming the protection register clarification (section 3.4.2) 12/31/98 -005 removed all references to x8 configurations 02/24/99 -006 removed reference to 40-lead tsop from front page 06/10/99 -007 added easy bga package (section 1.2) removed 1.8 v i/o references locking operations flowchart changed (appendix b) added t whgl (section 4.6) cfi primary vendor-specific extended query changed (appendix c) e 28f800c3, 28f160c3, 28F320C3 5 preliminary 1.0 introduction this document contains the specifications for the 3 volt advanced+ boot block flash memory family. these flash memories add features which can be used to enhance the security of systems: instant block locking and a protection register. throughout this document, the term 2.7 v refers to the full voltage range 2.7 vC3.6 v (except where noted otherwise) and v pp = 12 v refers to 12 v 5%. sections 1 and 2 provide an overview of the flash memory family including applications, pinouts, pin descriptions and memory organization. section 3 describes the operation of these products. finally, section 4 contains the operating specifications. 1.1 3 volt advanced+ boot block flash memory enhancements the 3 volt advanced+ boot block flash memory features: zero-latency, flexible block locking 128-bit protection register simple system implementation for 12 v production programming with 2.7 v in-field programming ultra-low power operation at 2.7 v minimum 100,000 block erase cycles common flash interface for software query of device specs and features table 1. 3 volt advanced+ boot block feature summary feature 8 mbit (1) , 16 mbit, 32 mbit (2) reference v cc operating voltage 2.7 v C 3.6 v table 8 v pp voltage provides complete write protection with optional 12 v fast programming table 8 v ccq i/o voltage 2.7 vC 3.6 v bus width 16-bit table 2 speed (ns) 8/16 mbit: 90, 110 @ 2.7 v and 80, 100 @ 3.0 v 32 mbit: 100, 110 @ 2.7 v and 90, 100 @ 3.0 v section 4.4 blocking (top or bottom) 8 x 4-kword parameter 8-mb: 15 x 32-kword main 16-mb: 31 x 32-kword main 32-mb: 63 x 32-kword main section 2.2 appendix e operating temperature extended: C40 c to +85 c table 8 program/erase cycling 100,000 cycles table 8 packages 48-lead tsop 48-ball m bga* csp (1) , easy bga figures 1, 2 and 3 block locking flexible locking of any block with zero latency section 3.3 protection register 64-bit unique device number, 64-bit user programmable section 3.4 notes: 1. 8-mbit density not available in bga* csp. 2. see specification update for changes to 32-mbit devices (order 297938). 28f800c3, 28f160c3, 28F320C3 e 6 preliminary 1.2 product overview intel provides secure low voltage memory solutions with the advanced boot block family of products. a new block locking feature allows instant locking/unlocking of any block with zero-latency. a 128-bit protection register allows unique flash device identification. discrete supply pins provide single voltage read, program, and erase capability at 2.7 v while also allowing 12 v v pp for faster production programming. improved 12 v, a new feature designed to reduce external logic, simplifies board designs when combining 12 v production programming with 2.7 v in-field programming. the 3 volt advanced+ boot block flash memory products are available in x16 packages in the following densities: (see section 5, ordering information ) 8-mbit (8,388,608 bit) flash memories organized as either 512 kwords of 16 bits each. 16-mbit (16,777,216 bit) flash memories organized as either 1024 kwords of 16 bits each. 32-mbit (33,554,432 bit) flash memories organized as either 2048 kwords of 16 bits each. eight 4-kword parameter blocks are located at either the top (denoted by -t suffix) or the bottom (-b suffix) of the address map in order to accommodate different microprocessor protocols for kernel code location. the remaining memory is grouped into 64-kbyte main blo cks. (see a ppendix e.) all blocks can be locked or unlocked instantly to provide complete protection for code or data. (see section 3.3 for details). the command user interface (cui) serves as the interface between the microprocessor or microcontroller and the internal operation of the flash memory. the internal write state machine (wsm) automatically executes the algorithms and timings necessary for program and erase operations, including verification, thereby unburdening the microprocessor or microcontroller. the status register indicates the status of the wsm by signifying block erase or word program completion and status. program and erase automation allows program and erase operations to be executed using an industry- standard two-write command sequence to the cui. program operations are performed in word increments. erase operations erase all locations within a block simultaneously. both program and erase operations can be suspended by the system software in order to read from any other block. in addition, data can be programmed to another block during an erase suspend. the 3 volt advanced+ boot block flash memories offer two low power savings features: automatic power savings (aps) and standby mode. the device automatically enters aps mode following the completion of a read cycle. st andby mode is initiated when the system deselects the device by driving ce# inactive. combined, these two power savings features significantly reduce power consumption. the device can be reset by lowering rp# to gnd. this provides cpu-memory reset synchronization and additional protection against bus noise that may occur during system reset and power-up/down sequences (see section 3.5 and 3.6). refer to the dc characteristics section 4.3 for complete current and voltage specifications. refer to the ac characteristics sections 4.4 and 4.5, for read and write performance specifications. program and erase times and shown in section 4.6. 2.0 product description this section provides device pin descriptions and package pinouts for the 3 volt advanced+ boot block flash memory family, which is available in 48- lead tsop (x16) and 48-ball m bga and easy bga packages (figures 1, 2 and 3, respectively). 2.1 package pinouts e 28f800c3, 28f160c3, 28F320C3 7 preliminary 48-lead tsop 12 mm x 20 mm top view 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 24 23 22 21 20 19 17 18 1 2 3 4 5 6 7 8 9 10 11 12 13 14 16 15 25 26 27 28 29 30 31 32 16 15 7 14 6 13 5 12 4 a v ccq gnd dq dq dq dq dq dq dq dq dq v dq dq dq dq dq dq dq oe# gnd ce# a cc 11 3 10 2 9 1 8 0 0 a a a a a a a a we# rp# wp# a a a a a a a a 17 7 6 5 4 3 2 1 15 14 13 12 11 10 9 8 v pp a 19 a 20 a 18 32m 16m 8m nc 0645_02 note: lower densities will have nc on the upper address pins. for example, an 8-mbit device will have nc on pins 9 and 15. figure 1. 48-lead tsop package a 13 a 14 a 15 a 16 v ccq a 11 a 10 a 12 d 14 d 15 a 8 we# a 9 d 5 d 6 v pp rp# d 11 d 12 wp# a 18 a 20 d 2 d 3 a 19 a 17 a 6 d 8 d 9 a 7 a 5 a 3 ce# d 0 a 4 a 2 a 1 a 0 gnd gnd d 7 d 13 d 4 v cc d 10 d 1 oe# a b c d e f 13 25 47 68 16m 32m notes: 1. shaded connections indicate the upgrade address connections. lower density devices will not have the upper address solder balls. routing is not recommended in this area. a 19 is the upgrade address for the 16-mbit device. a 20 is the upgrade address for the 32-mbit device. 2. 8-mbit not available on m bga* csp. figure 2. 48-ball m bga* chip size package (top view, ball down) 28f800c3, 28f160c3, 28F320C3 e 8 preliminary 1 2 3 4 5 6 7 8 a b c d e f g h top view - ball side down bottom view - ball side up a 1 a 6 a 18 v pp v cc gnd a 10 a 15 a 2 a 17 a 19 (1) rp# du a 20 (1) a 11 a 14 a 3 a 7 wp# we# du a 21 (2) a 12 a 13 a 4 a 5 du dq 8 dq 1 dq 9 dq 3 dq 12 dq 6 du du ce# dq 0 dq 10 dq 11 dq 5 dq 14 du du a 0 v ssq dq 2 dq 4 dq 13 dq 15 gnd a 16 a 22 (2) oe# v ccq v cc v ssq dq 7 v ccq du du du du a 8 a 9 8 7 6 5 4 3 2 1 a b c d e f g h a 15 a 10 gnd v cc v pp a 18 a 6 a 1 a 14 a 11 a 20 (1) du rp# a 19 (1) a 17 a 2 a 13 a 12 a 21 (2) du we# wp# a 7 a 3 a 9 a 8 du du du dq 6 dq 12 dq 3 dq 9 dq 1 dq 8 du du dq 14 dq 5 dq 11 dq 10 dq 0 ce# a 16 gnd d 15 d 13 dq 4 dq 2 v ssq a 0 du v ccq d 7 v ssq v cc v ccq oe# a 22 (2) du du du a 5 a 4 16fast notes: 1. a 19 denotes 16 mbit; a 20 denotes 32 mbit 2. a 21 and a 22 indicate future density upgrade paths to 64 mbit and 128 mbit, respectively(not yet available). figure 3. 8 x 8 easy bga package e 28f800c3, 28f160c3, 28F320C3 9 preliminary table 2. 3 volt advanced+ boot block pin descriptions symbol type name and function a 0 Ca 21 input address inputs: memory addresses are internally latched during a program or erase cycle. 8-mbit: a[0-18], 16-mbit: a[0-19], 32-mbit: a[0-20] dq 0 Cdq 7 input/output data inputs/outputs: inputs array data on the second ce# and we# cycle during a program command. inputs commands to the command user interface when ce# and we# are active. data is internally latched. outputs array, configuration and status register data. the data pins float to tri-state when the chip is de-selected or the outputs are disabled. dq 8 Cdq 15 input/output data inputs/outputs: inputs array data on the second ce# and we# cycle during a program command. data is internally latched. outputs array and configuration data. the data pins float to tri-state when the chip is de-selected. ce# input chip enable: activates the internal control logic, input buffers, decoders and sense amplifiers. ce# is active low. ce# high de-selects the memory device and reduces power consumption to standby levels. oe# input output enable: enables the devices outputs through the data buffers during a read operation. oe# is active low. we# input write enable: controls writes to the command register and memory array. we# is active low. addresses and data are latched on the rising edge of the second we# pulse. rp# input reset/deep power-down: uses two voltage levels (v il , v ih ) to control reset/deep power-down mode. when rp# is at logic low, the device is in reset/deep power-down mode , which drives the outputs to high-z, resets the write state machine, and minimizes current levels (i ccd ). when rp# is at logic high, the device is in standard operation . when rp# transitions from logic-low to logic-high, the device resets all blocks to locked and defaults to the read array mode. wp# input write protect: controls the lock-down function of the flexible locking feature. when wp# is a logic low, the lock-down mechanism is enabled and blocks marked lock-down cannot be unlocked through software. when wp# is logic high, the lock-down mechanism is disabled and blocks previously locked-down are now locked and can be unlocked and locked through software. after wp# goes low, any blocks previously marked lock-down revert to that state. see section 3.3 for details on block locking. v cc supply device power supply: [2.7 vC3.6 v] supplies power for device operations. 28f800c3, 28f160c3, 28F320C3 e 10 preliminary table 2. 3 volt advanced+ boot block pin descriptions (continued) symbol type name and function v ccq input i/o power supply: supplies power for input/output buffers. [2.7 v C3.6 v] this input should be tied directly to v cc . v pp input/ supply program/erase power supply: [1.65 vC3.6 v or 11.4 vC12.6 v] operates as a input at logic levels to control complete device protection. supplies power for accelerated program and erase operations in 12 v 5% range. this pin cannot be left floating. lower v pp v pplk , to protect all contents against program and erase commands. set v pp = v cc for in-system read, program and erase operations . in this configuration, v pp can drop as low as 1.65 v to allow for resistor or diode drop from the system supply. note that if v pp is driven by a logic signal, v ih = 1.65. that is, v pp must remain above 1.65v to perform in- system flash modifications. raise v pp to 12 v 5% for faster program and erase in a production environment. applying 12 v 5% to v pp can only be done for a maximum of 1000 cycles on the main blocks and 2500 cycles on the parameter blocks. v pp may be connected to 12 v for a total of 80 hours maximum. see section 3.4 for details on v pp voltage configurations. gnd supply ground: for all internal circuitry. all ground inputs must be connected. nc no connect: pin may be driven or left floating. 2.2 block organization the 3 volt advanced+ boot block is an asymmetrically-blocked architecture that enables system integration of c ode and data within a single flash device. each block can be erased independently of the others up to 100,000 times. for the address locations of each block, see the memory maps in appendix e. 2.2.1 parameter blocks the 3 volt advanced+ boot block flash memory architecture includes parameter blo cks to facilitate storage of frequently updated small parameters (i.e., data that would normally be stored in an eeprom). each device contains eight parameter blocks of 4-kwords (4,096 words). 2.2.2 main blocks after the parameter blocks, the remai nder of the array is divided into 32-kword (32,768 words) main blocks for data or c ode storage. each 8-mbit, 16- mbit, or 32-mbit device contains 15, 31, or 63 main blocks, respectively. e 28f800c3, 28f160c3, 28F320C3 11 preliminary 3.0 principles of operation the 3 volt advanced+ boot block flash memory family utilizes a cui and automated algorithms to simplify program and erase operations. the cui allows for 100% cmos - level control inputs and fixed power supplies during erasure and programming. the internal wsm completely automates program and erase operations while the cui signals the start of an operation and the status register reports status. the cui handles the we# interface to the data and address latches, as well as system status requests during wsm operation. 3.1 bus operation the 3 volt advanced+ boot block flash memory devices read, program and erase in - system via the local cpu or microcontroller. all bus cycles to or from the flash memory conform to standard microcontroller bus cycles. four control pins dictate the data flow in and out of the flash component: ce#, oe#, we# and rp#. these bus operations are summarized in table 3. 3.1.1 read the flash memory has four read modes available: read array, read configuration, read status and read query. these modes are accessible independent of the v pp voltage. the appropriate read mode command must be issued to the cui to enter the corresponding mode. upon initial device power - up or after exit from reset, the device automatically defaults to read array mode. ce# and oe# must be driven active to obtain data at the outputs. ce# is the device selection control; when active it enables the flash memory device. oe# is the data output control and it drives the selected memory data onto the i/o bus. for all read modes, we# and rp# must be at v ih . figure 8 illustrates a read cycle. 3.1.2 output disable with oe# at a logic - high level (v ih ), the device outputs are disabled. output pins are placed in a high - impedance state. 3.1.3 standby deselecting the device by bringing ce# to a logic - high level (v ih ) places the device in standby mode, which substantially reduces device power consumption without any latency for subsequent read accesses. in standby, outputs are placed in a high-impedance state independent of oe#. if deselected during program or erase operation, the device continues to consume active power until the program or erase operation is complete. table 3. bus operations (1) mode notes rp# ce# oe# we# dq 0 C7 dq 8C15 read (array, status, configuration, or query) 2,3,4 v ih v il v il v ih d out d out output disable 2 v ih v il v ih v ih high z high z standby 2 v ih v ih x x high z high z reset 2,7 v il x x x high z high z write 2,5,6,7 v ih v il v ih v il d in d in notes: 1. 8-bit devices use only dq [0:7], 16-bit devices use dq [0:15] 2. x must be v il , v ih for control pins and addresses. 3. see dc characteristics for v pplk , v pp1 , v pp2 , v pp3 , voltages. 4. manufacturer and device codes may also be accessed in read configuration mode (a 1 Ca 20 = 0). see table 4. 5. refer to table 5 for valid d in during a write operation. 6. to program or erase the lockable blocks, hold wp# at v ih . 7. rp# must be at gnd 0.2 v to meet the maximum deep power-down current specified. 28f800c3, 28f160c3, 28F320C3 e 12 preliminary 3.1.4 reset from read mode, rp# at v il for time t plph deselects the memory, places output drivers in a high - impedance state, and turns off all internal circuits. after return from reset, a time t phqv is required until the initial read access outputs are valid. a delay (t phwl or t phel ) is required after return from reset before a write can be initiated. after this wake - up interval, normal operation is restored. the cui resets to read array mode, the status register is set to 80h, and all blo cks are locked. this case is shown infigure 10a if rp# is taken low for time t plph during a program or erase operation, the operation will be aborted and the memory contents at the aborted location (for a program) or block (for an erase) are no longer valid, since the data may be partially erased or written. the abort process goes through the following sequence: when rp# goes low, the device shuts down the operation in progress, a process which takes time t plrh to complete. after this time t plrh , the part will either reset to read array mode (if rp# has gone high during t plrh , figure 10b) or enter reset mode (if rp# is still logic low after t plrh , figure 10c). in both cases, after returning from an aborted operation, the relevant time t phqv or t phwl /t phel must be observed before a read or write operation is initiated, as discussed in the previous paragraph. however, in this case, these delays are referenced to the end of t plrh rather than when rp# goes high. similar to any automated device, it is important to assert rp# during system reset. when the system comes out of reset, the processor expects to read from the flash memory. automated flash memories provide status information when read during program or block erase operations. if a cpu reset occurs with no flash memory reset, proper cpu initialization may not occur because the flash memory may be providing status information instead of array data. intel ? flash memories allow proper cpu initialization following a system reset through the use of the rp# input. in this application, rp# is controlled by the same reset# signal that resets the system cpu. 3.1.5 write a write takes place when both ce# and we# are low and oe# is high. commands are written to the command user interface (cui) using standard microprocessor write timings to control flash operations. the cui does not occupy an addressable memory location. the address and data buses are latched on the rising edge of the second we# or ce# pulse, whichever occurs first. figure 9 illustrates a program and erase operation. the available commands are shown in table 6, and appendix a provides detailed information on moving between the different modes of operation using cui commands. there are two commands that modify array data: program (40h) and erase (20h). writing either of these commands to the internal command user interface (cui) initiates a sequence of internally - timed functions that culminate in the completion of the requested task (unless that operation is aborted by either rp# being driven to v il for t plrh or an appropriate suspend command). 3.2 modes of operation the flash memory has four read modes and two write modes. the read modes are read array, read configuration, read status, and read query. the write modes are program and erase. three additional modes (erase suspend to program, erase suspend to read and program suspend to read) are available only during suspended operations. these modes are reached using the commands summarized in tables 5 and 6. a comprehensive chart showing the state transitions is in appendix a. 3.2.1 read array when rp# transitions from v il (reset) to v ih , the device defaults to read array mode and will respond to the read control inputs (ce#, address inputs, and oe#) without any additional cui commands. when the device is in read array mode, four control signals control data output: we# must be logic high (v ih ) ce# must be logic low (v il ) oe# must be logic low (v il ) rp# must be logic high (v ih ) in addition, the address of the desired location must be applied to the address pins. if the device is not in read array mode, as would be the case after a program or erase operation, the read array command (ffh) must be written to the cui before array reads can take place. e 28f800c3, 28f160c3, 28F320C3 13 preliminary 3.2.2 read configuration the read configuration mode outputs three types of information: the manufacturer/device identifier, the block locking status, and the protection register. the device is switched to this mode by writing the read configuration command (90h). once in this mode, read cycles from addresses shown in table 4 retrieve the specified information. to return to read array mode, write the read array command (ffh). table 4. read configuration table item address data manufacturer code (x16) 00000 0089 device id (see appendix f) 00001 id block lock configuration 2 xx002 (1) lock block is unlocked dq 0 = 0 block is locked dq 0 = 1 block is locked-down dq 1 = 1 protection register lock 3 80 pr-lk protection register (x16) 81-88 pr notes: 1. xx specifies the block address of lock configuration being read. 2. see section 3.3.4 for valid lock status outputs. 3. see section 3.4 for protection register information. 4. other locations within the configuration address space are reserved by intel for future use. 3.2.3 read status register the status register indicates the status of device operations, and the success/failure of that operation. the read status register (70h) command causes subsequent reads to output data from the status register until another command is issued. to return to reading from the array, issue a read array (ffh) command. the status register bits are output on dq 0 Cdq 7 . the upper byte, dq 8 Cdq 15 , outputs 00h during a read status register command. the contents of the status register are latched on the falling edge of oe# or ce#, whichever occurs last. this prevents possible bus errors which might occur if status register contents change while being read. ce# or oe# must be toggled with each subsequent status read, or the status register will not indicate completion of a program or erase operation. when the wsm is active, sr.7 will indicate the status of the wsm; the remaining bits in the status register indicate whether the wsm was successful in performing the desired operation (see table 7). 3.2.3.1 clearing the status register the wsm sets status bits 1 through 7 to 1, and clears bits 2, 6 and 7 to 0, but cannot clear status bits 1 or 3 through 5 to 0. because bits 1, 3, 4 and 5 indicate various error conditions, these bits can only be cleared through the use of the clear status register (50h) command. by allowing the system software to control the resetting of these bits, several operations may be performed (such as cumulatively programming several addresses or erasing multiple blocks in s equence) before reading the status register to determine if an error occurred during that series. clear the status register before beginning another command or sequence. note that this is different from a burst device. the read array command must be issued before data can be read from the memory array. resetting the device also clears the status register. 3.2.4 read query the read query mode outputs common flash interface (cfi) data when the device is read. this can be accessed by writing the read query command (98h). the cfi data structure contains information such as block size, density, command set and electrical specifications. once in this mode, read cycles from addresses shown in appendix c retrieve the specified information. to return to read array mode, write the read array command (ffh). 28f800c3, 28f160c3, 28F320C3 e 14 preliminary 3.2.5 program mode programming is executed using a two - write sequence. the program setup command (40h) is written to the cui followed by a second write which specifies the address and data to be programmed. the wsm will execute a sequence of internally timed events to program desired bits of the addressed location, then verify the bits are sufficiently programmed. programming the memory results in specific bits within an address location being changed to a 0. if the user attempts to program 1s, the memory cell contents do not change and no error occurs. the status register indicates programming status: while the program sequence executes, status bit 7 is 0. the status register can be polled by toggling either ce# or oe#. while programming, the only valid commands are read status register, program suspend, and program resume. when programming is complete, the program status bits should be checked. if the programming operation was unsuccessful, bit sr.4 of the status register is set to indicate a program failure. if sr.3 is set then v pp was not within acceptable limits, and the wsm did not execute the program command. if sr.1 is set, a program operation was attempted on a locked block and the operation was aborted. the status register should be cleared before attempting the next operation. any cui instruction can follow after programming is completed; however, to prevent inadvertent status register reads, be sure to reset the cui to read array mode. 3.2.5.1 suspending and resuming program the program suspend command halts an in - progress program operation so that data can be read from other locations of memory. once the programming process starts, writing the program suspend command to the cui requests that the wsm suspend the program sequence (at predetermined points in the program algorithm). the device continues to output status register data after the program suspend command is written. polling status register bits sr.7 and sr.2 will determine when the program operation has been suspended (both will be set to 1). t whrh1 /t ehrh1 specify the program suspend latency. a read array command can now be written to the cui to read data from blo cks other t han that which is suspended. the only other valid commands while program is suspended are read status register, read configuration, read query, and program resume. after the program resume command is written to the flash memory, the wsm will continue with the programming process and status register bits sr.2 and sr.7 will automatically be cleared. the device automatically outputs status register data when read (see figure 12 in appendix b, program suspend/resume flowchart ) after the program resume command is written. v pp must remain at the same v pp level used for program while in program suspend mode. rp# must also remain at v ih . 3.2.6 erase mode to erase a block, write the erase set - up and erase confirm commands to the cui, along with an address identifying the block to be erased. this address is latched internally when the erase confirm command is issued. block erasure results in all bits within the block being set to 1. only one block can be erased at a time. the wsm will execute a sequence of internally timed events to program all bits within the block to 0, erase all bits within the block to 1, then verify that all bits within the block are sufficiently erased. while the erase executes, status bit 7 is a 0. when the status register indicates that erasure is complete, check the erase status bit to verify that the erase operation was successful. if the erase operation was unsuccessful, sr.5 of the status register will be set to a 1, indicating an erase failure. if v pp was not within acceptable limits after the erase confirm command was issued, the wsm will not execute the erase sequence; instead, sr.5 of the status register is set to indicate an erase error, and sr.3 is set to a 1 to identify that v pp supply voltage was not within acceptable limits. after an erase operation, clear the status register (50h) before attempting the next operation. any cui instruction can follow after erasure is completed; however, to prevent inadvertent status register reads, it is advisable to place the flash in read array mode after the erase is complete. e 28f800c3, 28f160c3, 28F320C3 15 preliminary 3.2.6.1 suspending and resuming erase since an erase operation requires on the order of seconds to complete, an erase suspend command is provided to allow erase - sequence interruption in order to read data from or program data to another block in memory. once the erase sequence is started, writing the erase suspend command to the cui suspends the erase sequence at a predetermined point in the erase algorithm. the status register will indicate if/when the erase operation has been suspended. erase suspend latency is specified by t whrh2 /t ehrh2 . a read array/program command can now be written to the cui to read/program data from/to blocks other t han that which is suspended. this nested program command can subsequently be suspended to read yet another location. the only valid commands while erase is suspended are read status register, read configuration, read query, program setup, program resume, erase resume, lock block, unlock block and lock-down block. during erase suspend mode, the chip can be placed in a pseudo - standby mode by taking ce# to v ih . this reduces active current consumption. erase resume continues the erase sequence when ce# = v il . similar to the end of a standard erase operation, the status register must be read and cleared before the next instruction is issued. table 5. command bus definitions first bus cycle second bus cycle command notes oper addr data oper addr data read array 4 write x ffh read configuration 2, 4 write x 90h read ia id read query 2, 4 write x 98h read qa qd read status register 4 write x 70h read x srd clear status register 4 write x 50h program 3,4 write x 40h/10h write pa pd block erase/confirm 4 write x 20h write ba d0h program/erase suspend 4 write x b0h program/erase resume 4 write x d0h lock block 4 write x 60h write ba 01h unlock block 4 write x 60h write ba d0h lock-down block 4 write x 60h write ba 2fh protection program 4 write x c0h write pa pd x = dont care pa = prog addr ba = block addr ia = identifier addr. qa = query addr. srd = status reg. data pd = prog data id = identifier data qd = query data notes: 1. bus operations are defined in table 3. 2. following the read configuration or read query commands, read operations output device configuration or cfi query information, respectively. see section 3.2.2 and 3.2.4. 3. either 40h or 10h command is valid, but the intel standard is 40h. 4. when writing commands, the upper data bus [dq 8 Cdq 15 ] should be either v il or v ih , to minimize current draw. 28f800c3, 28f160c3, 28F320C3 e 16 preliminary table 6. command codes and descriptions code device mode description ff read array this command places the device in read array mode which outputs array data on the data pins. 40 program set-up this is a two - cycle command. the first cycle prepares the cui for a program operation. the second cycle latches addresses and data information and initiates the wsm to execute the program algorithm. the flash outputs status register data when ce# or oe# is toggled. a read array command is required after programming to read array data. see section 3.2.5. 20 erase set-up prepares the cui for the erase confirm command. if the next command is not an erase confirm command, then the cui will (a) set both sr.4 and sr.5 of the status register to a 1, (b) place the device into the read status register mode, and (c) wait for another command. see section 3.2.6. d0 erase confirm program/erase resume unlock block if the previous command was an erase set-up command, then the cui will close the address and data latches and begin erasing the block indicated on the address pins. during program/erase, the device will respond only to the read status register, program suspend and erase suspend commands and will output status register data when ce# or oe# is toggled. if a program or erase operation was previously suspended, this command will resume that operation. if the previous command was configuration set-up, the cui will latch the address and unlock the block indicated on the address pins. if the block had been previously set to lock-down, this operation will have no effect. (sect. 3.3) b0 program suspend erase suspend issuing this command will begin to suspend the currently executing program/erase operation. the status register will indicate when the operation has been successfully suspended by setting either the program suspend (sr.2) or erase suspend (sr.6) and the wsm status bit (sr.7) to a 1 (ready). the wsm will continue to idle in the suspend state, regardless of the state of all input control pins except rp#, which will immediately shut down the wsm and the remainder of the chip if rp# is driven to v il . see sections 3.2.5.1 and 3.2.6.1. 70 read status register this command places the device into read status register mode. reading the device will output the contents of the status register, regardless of the address presented to the device. the device automatically enters this mode after a program or erase operation has been initiated. see section 3.2.3. 50 clear status register the wsm can set the block lock status (sr.1) , v pp status (sr.3), program status (sr.4), and erase status (sr.5) bits in the status register to 1, but it cannot clear them to 0. issuing this command clears those bits to 0. 90 read configuration puts the device into the read configuration mode so that reading the device will output the manufacturer/device codes or block lock status. section 3.2.2. 60 configuration set-up prepares the cui for changes to the device configuration, such as block locking changes. if the next command is not block unlock, block lock, or block lock- down, then the cui will set both the program and erase status register bits to indicate a command sequence error. see section 3.3. 01 lock-block if the previous command was configuration set-up, the cui will latch the address and lock the block indicated on the address pins. (section 3.3) e 28f800c3, 28f160c3, 28F320C3 17 preliminary table 6. command codes and descriptions (continued) code device mode description 2f lock-down if the previous command was a configuration set-up command, the cui will latch the address and lock-down the block indicated on the address pins. (section 3.3) 98 read query puts the device into the read query mode so that reading the device will output common flash interface information. see section 3.2.4 and appendix c. c0 protection program setup this is a two-cycle command. the first cycle prepares the cui for a program operation to the protection register. the second cycle latches addresses and data information and initiates the wsm to execute the protection program algorithm to the protection register. the flash outputs status register data when ce# or oe# is toggled. a read array command is required after programming to read array data. see section 3.4. 10 alt. prog set-up operates the same as program set - up command. (see 40h/program set-up) 00 invalid/ reserved unassigned commands that should not be used. intel reserves the right to redefine these codes for future functions. note: see appendix a for mode transition information. 28f800c3, 28f160c3, 28F320C3 e 18 preliminary table 7. status register bit definition wsms ess es ps vpps pss bls r 76543210 notes: sr.7 write state machine status (wsms) 1 = ready 0 = busy check write state machine bit first to determine word program or block erase completion, before checking program or erase status bits. sr.6 = erase - suspend status (ess) 1 = erase suspended 0 = erase in progress/completed when erase suspend is issued, wsm halts execution and sets both wsms and ess bits to 1. ess bit remains set to 1 until an erase resume command is issued. sr.5 = erase status (es) 1 = error in block erase 0 = successful block erase when this bit is set to 1, wsm has applied the max. number of erase pulses to the block and is still unable to verify successful block erasure. sr.4 = program status (ps) 1 = error in programming 0 = successful programming when this bit is set to 1, wsm has attempted but failed to program a word/byte. sr.3 = v pp status (vpps) 1 = v pp low detect, operation abort 0 = v pp ok the v pp status bit does not provide continuous indication of v pp level. the wsm interrogates v pp level only after the program or erase command sequences have been entered, and informs the system if v pp has not been switched on. the v pp is also checked before the operation is verified by the wsm. the v pp status bit is not guaranteed to report accurate feedback between v pplk and v pp1 min. sr.2 = program suspend status (pss) 1 = program suspended 0 = program in progress/completed when program suspend is issued, wsm halts execution and sets both wsms and pss bits to 1. pss bit remains set to 1 until a program resume command is issued. sr.1 = block lock status 1 = prog/erase attempted on a locked block; operation aborted. 0 = no operation to locked blocks if a program or erase operation is attempted to one of the locked blocks, this bit is set by the wsm. the operation specified is aborted and the device is returned to read status mode. sr.0 = reserved for future enhancements (r) this bit is reserved for future use and should be masked out when polling the status register. note: 1. a command sequence error is indicated when both sr.4, sr.5 and sr.7 are set. e 28f800c3, 28f160c3, 28F320C3 19 preliminary 3.3 flexible block locking intel 3 volt advanced+ boot block products offer an instant, individual block locking scheme that allows any block to be locked or unlocked with no latency, enabling instant code and data protection. this locking scheme offers two levels of protection. the first level allows software-only control of block locking (useful for data blocks that c hange frequently), while the second level requires hardware interaction before locking can be changed (useful for code blocks that change infrequently). the following sections will discuss the operation of the locking system. the term state [xyz] will be used to specify locking states; e.g., state [001], where x = value of wp#, y = bit dq 1 of the block lock status register, and z = bit dq 0 of the block lock status register. table 9 defines all of these possible locking states. 3.3.1 locking operation the following concisely summarizes the locking functionality. all blocks power-up locked, t hen can be unlocked or locked with the unlock and lock commands. the lock-down command lo cks a block and prevents it from being unlocked when wp# = 0. ? when wp# = 1, lock-down is overridden and commands can unlock/lock locked- down blocks. ? when wp# returns to 0, locked-down blocks return to lock-down. ? lock-down is cleared only when the device is reset or powered-down. the locking status of each block can be set to locked, unlocked, and lock-down, each of which will be described in the following sections. a comprehensive state table for the locking functions is shown in table 9, and a flowchart for locking operations is shown infigure 15. 3.3.2 locked state the default status of all blocks upon power-up or reset is locked (states [001] or [101]). locked blocks are fully protected from alteration. any program or erase operations attempted on a locked block will return an error on bit sr.1 of the status register. the status of a locked block can be changed to unlocked or lock-down using the appropriate software commands. an unlocked block can be locked by writing the lock command sequence, 60h followed by 01h. 3.3.3 unlocked state unlocked blocks (states [ 000], [100], [110]) can be programmed or erased. all unlocked blocks return to the locked state when the device is reset or powered down. the status of an unlocked block can be changed to locked or locked-down using the appropriate software commands. a locked block can be unlocked by writing the unlock command sequence, 60h followed by d0h. 3.3.4 lock-down state blocks that are locked-down (state [ 011]) are protected from program and erase operations (just like locked blocks), but their protection status cannot be changed using software commands alone. a locked or unlocked block can be locked- down by writing the lock-down command sequence, 60h followed by 2fh. locked-down blocks revert to the locked state w hen the device is reset or powered down. the lock-down function is dependent on the wp# input pin. when wp# = 0, blo cks in lock-down [011] are protected from program, erase, and lock status changes. when wp# = 1, the lock-down function is disabled ([111]) and locked-down blocks can be individually unlocked by software command to the [110] state, where they can be erased and programmed. these blocks can t hen be relocked [111] and unlocked [110] as desired while wp# remains high. when wp# goes low, blo cks that were previously locked-down return to the lock-down state [011] regardless of any changes made while wp# was high. device reset or power- down resets all blocks, including those in lock- down, to locked state. 28f800c3, 28f160c3, 28F320C3 e 20 preliminary 3.3.5 reading a blocks lock status the lock status of every block can be read in the configuration read mode of the device. to enter this mode, write 90h to the device. subsequent reads at block address + 00002 will output the lock status of that block. the lock status is represented by dq 0 and dq 1 . dq 0 indicates the block lock/unlock status and is set by the lock command and cleared by the unlock command. it is also automatically set when entering lock-down. dq 1 indicates lock- down status and is set by the lock-down command. it cannot be cleared by software, only by device reset or power-down. table 8. block lock status item address data block lock configuration xx002 lock block is unlocked dq 0 = 0 block is locked dq 0 = 1 block is locked-down dq 1 = 1 3.3.6 locking operations during erase suspend changes to block lock status can be performed during an erase suspend by using the standard locking command sequences to unlock, lock, or lock-down a block. this is useful in the case when another block needs to be updated while an erase operation is in progress. to change block locking during an erase operation, first write the erase suspend command (b0h), then check the status register until it indicates that the erase operation has been suspended. next write the desired lock command sequence to a block and the lock status will be changed. after completing any desired lock, read, or program operations, resume the erase operation with the erase resume command (d0h). if a block is locked or locked-down during a suspended erase of the same block, the locking status bits will be changed immediately, but when the erase is resumed, the erase operation will complete. locking operations cannot be performed during a program suspend. refer to appendix a for detailed information on which commands are valid during erase suspend. 3.3.7 status register error checking using nested locking or program command sequences during erase suspend can introduce ambiguity into status register results. since locking changes are performed using a two cycle comm and sequence, e.g., 60h followed by 01h to lock a block, following the configuration setup command (60h) with an invalid command will produce a lock command error (sr.4 and sr.5 will be set to 1) in the status register. if a lock command error occurs during an erase suspend, sr.4 and sr.5 will be set to 1 and will remain at 1 after the erase is resumed. when erase is complete, any possible error during the erase cannot be detected via the status register because of the previous locking command error. a similar situation happens if an error occurs during a program operation error nested within an erase suspend. e 28f800c3, 28f160c3, 28F320C3 21 preliminary table 9. block locking state transitions current state erase/prog lock command input result [next state] xyz wp# dq 1 dq 0 name allowed? lock unlock lock-down 000 unlocked yes goes to [001] no change goes to [011] 0 0 1 locked (default) no no change goes to [000] goes to [011] 0 1 1 locked-down no no change no change no change 1 0 0 unlocked yes goes to [101] no change goes to [111] 1 0 1 locked no no change goes to [100] goes to [111] 1 1 0 lock-down disabled yes goes to [111] no change goes to [111] 1 1 1 lock-down disabled no no change goes to [110] no change notes: 1. in this table, the notation [xyz] denotes the locking state of a block, where x = wp#, y = dq 1 , and z = dq 0 . the current locking state of a block is defined by the state of wp# and the two bits of the block lock status (dq 0 , dq 1 ). dq 0 indicates if a block is locked (1) or unlocked (0). dq 1 indicates if a block has been locked-down (1) or not (0). 2. at power-up or device reset, all blocks default to locked state [001] (if wp# = 0). holding wp# = 0 is the recommended default. 3. the erase/program allowed? column shows whether erase and program operations are enabled (yes) or disabled (no) in that blocks current locking state. 4. the lock command input result [next state] column shows the result of writing the three locking commands (lock, unlock, lock-down) in the current locking state. for example, goes to [001] would mean that writing the command to a block in the current locking state would change it to [001]. 3.4 128-bit protection register the 3 volt advanced+ boot block architecture includes a 128-bit protection register than can be used to increase the security of a system design. for example, the number contained in the protection register can be used to mate the flash component with other system com ponents such as the cpu or asic, preventing device substitution. additional application information can be found in intel application note ap-657 designing with the advanced+ boot block flash memory architecture . the 128-bits of the protection register are divided into two 64-bit segments. one of the segments is programmed at the intel factory with a unique 64-bit number, which is unchangeable. the other segment is left blank for customer designs to program as desired. once the customer segment is programmed, it can be locked to prevent reprogramming. 3.4.1 reading the protection register the protection register is read in the configuration read mode. the device is switched to this mode by writing the read configuration command (90h). once in this mode, read cycles from addresses shown in appendix g retrieve the specified information. to return to read array mode, write the read array command (ffh). 3.4.2 programming the protection register the protection register bits are programmed using the two-cycle protection program comm and. the 64-bit number is programmed 16 bits at a time for word-wide parts and eight bits at a time for byte- wide parts. first write the protection program setup command, c0h. the next write to the device will latch in address and data and program the specified location. the allowable addresses are shown in appendix g. see figure 16 for the protection register programming flowchart . 28f800c3, 28f160c3, 28F320C3 e 22 preliminary attempts to address protection program commands outside the defined protection register address space should not be attempted. this space is reserved for future use. attempting to program to a previously locked protection register segment will result in a status register error (program error bit sr.4 and lock error bit sr.1 will be set to 1). 3.4.3 locking the protection register the user-programmable segment of the protection register is lockable by programming bit 1 of the pr-lock location to 0. bit 0 of this location is programmed to 0 at the intel factory to protect the unique device number. this bit is set using the protection program command to program fffd to the pr-lock location. after these bits have been programmed, no further changes can be made to the values stored in the protection register. protection program commands to a locked section will result in a status register error (program error bit sr.4 and lock error bit sr.1 will be set to 1). protection register lockout state is not reversible. 4 words factory programmed 4 words user programmed pr-lock 88h 85h 84h 81h 80h 0645_05 figure 4. protection register memory map 3.5 v pp program and erase voltages intel 3 volt advanced+ boot block products provide in-system programming and erase in the 1.65 vC 3.6 v range. for fast production programming, it also includes a low-cost, backward-compatible 12 v programming feature. 3.5.1 improved 12 volt production programming when v pp is between 1.65 v and 3.6 v, all program and erase current is drawn through the v cc pin. note that if v pp is driven by a logic signal, v ih min = 1.65 v. that is, v pp must remain above 1.65 v to perform in-system flash modifications. when v pp is connected to a 12 v power supply, the device draws program and erase current directly from the v pp pin. this eliminates the need for an external switching transistor to control the voltage v pp . figure 5 shows examples of how the flash power supplies can be configured for various usage models. the 12 v v pp mode enhances programming performance during the short period of time typically found in manufacturing processes; however, it is not intended for extended use. 12 v may be applied to v pp during program and erase operations for a maximum of 1000 cycles on the main blocks and 2500 cycles on the parameter blocks. v pp may be connected to 12 v for a total of 80 hours maximum. stressing the device beyond these limits may cause permanent damage. 3.5.2 v pp v pplk for complete protection in addition to the flexible block locking, the v pp programming voltage can be held low for absolute hardware write protection of all blocks in the flash device. when v pp is below v pplk , any program or erase operation will result in a error, prompting the corresponding status register bit (sr.3) to be set. e 28f800c3, 28f160c3, 28F320C3 23 preliminary v cc v pp 12 v fast programming absolute write protection with v pp v pplk system supply 12 v supply 10 k w v cc v pp system supply 12 v supply low voltage and 12 v fast programming v cc v pp system supply prot# (logic signal) v cc v pp system supply low-voltage programming low-voltage programming absolute write protection via logic signal (note 1) 0645_06 note: 1. a resistor can be used if the v cc supply can sink adequate current based on resistor value. see ap-657 designing with the advanced+ boot block flash memory architecture for details. figure 5. example power supply configurations 3.6 power consumption intel flash devices have a tiered approach to power savings that can significantly reduce overall system power consumption. the automatic power savings (aps) feature reduces power consumption when the device is selected but idle. if the ce# is deasserted, the flash enters its standby mode, where current consumption is even lower. the combination of these features can minimize memory power consumption, and therefore, overall system power consumption. 3.6.1 active power (program/erase/read) with ce# at a logic - low level and rp# at a logic - high level, the device is in the active mode. refer to the dc characteristic tables for i cc current values. active power is the largest contributor to overall system power consumption. minimizing the active current could have a profound effect on system power consumption, especially for battery - operated devices. 3.6.2 automatic power savings (aps) automatic power savings provides low - power operation during read mode. after data is read from the memory array and the address lines are quiescent, aps circuitry places the device in a mode where typical current is comparable to i ccs . the flash stays in this static state with outputs valid until a new location is read. 3.6.3 standby power when ce# is at a logic - high level (v ih ) and the device is in read mode, the flash memory is in standby mode, which disables much of the devices circuitry and substantially reduces power consumption. outputs are placed in a high - impedance state independent of the status of the oe# signal. if ce# transitions to a logic - high level during erase or program operations, the device will continue to perform the operation and consume corresponding active power until the operation is completed. 28f800c3, 28f160c3, 28F320C3 e 24 preliminary system engineers should analyze the breakdown of standby time versus active time and quantify the respective power consumption in each mode for their specific application. this will provide a more accurate measure of application - specific power and energy requirements. 3.6.4 deep power-down mode the deep power-down mode is activated when rp# = v il (gnd 0.2 v). during read modes, rp# going low de-selects the memory and places the outputs in a high impedance state. recovery from deep power-down requires a minimum time of t phqv for read operations and t phwl /t phel for write operations. during program or erase modes, rp# transitioning low will abort the in-progress operation. the memory contents of the address being programmed or the block being erased are no longer valid as the data integrity has been compromised by the abort. during deep power-down, all internal circuits are switched to a low power savings mode (rp# transitioning to v il or turning off power to the device clears the status register). 3.7 power-up/down operation the device is protected against accidental block erasure or programming during power transitions. power supply sequencing is not required, since the device is indifferent as to which power supply, v pp or v cc , powers-up first. 3.7.1 rp# connected to system reset the use of rp# during system reset is important with automated program/erase devices since the system expects to r ead from the flash memory when it comes out of reset. if a cpu reset occurs without a flash memory reset, proper cpu initialization will not occur because the flash memory may be providing status information instead of array data. intel recommends connecting rp# to the system cpu reset# si gnal to allow proper cpu/flash initialization following system reset. system designers must guard against spurious writes when v cc voltages are above v lko . since both we# and ce# must be low for a command write, driving either signal to v ih will inhibit writes to the device. the cui architecture provides additional protection since alteration of memory contents can only occur after successful completion of the two- step command sequences. the device is also disabled until rp# is brought to v ih , regardless of the state of its control inputs. by holding the device in reset (rp# connected to system powerg ood) during power-up/down, invalid bus conditions during power-up can be masked, providing yet another level of memory protection. 3.7.2 v cc , v pp and rp# transitions the cui latches commands as issued by system software and is not altered by v pp or ce# transitions or wsm actions. its default state upon power-up, after exit from reset mode or after v cc transitions above v lko (lockout voltage), is read array mode. after any program or block erase operation is complete (even after v pp transitions down to v pplk ), the cui must be reset to read array mode via the read array command if access to the flash memory array is desired. 3.8 power supply decoupling flash memorys power switching characteristics require careful device decoupling. system designers should consider three supply current issues: 1. standby current levels (i ccs ) 2. read current levels (i ccr ) 3. transient peaks produced by falling and rising edges of ce#. transient current magnitudes depend on the device outputs capacitive and inductive loading. two-line control and proper decoupling capacitor selection will suppress these transient voltage peaks. each flash device should have a 0.1 f ceramic capacitor connected between each v cc and gnd, and between its v pp and gnd. these high- frequency, inherently low-inductance capacitors should be placed as close as possible to the package leads. e 28f800c3, 28f160c3, 28F320C3 25 preliminary 4.0 electrical specifications 4.1 absolute maximum ratings* extended operating temperature during read .......................... C40 c to +85 c during block erase and program.......................... C40 c to +85 c temperature under bias........ C40 c to +85 c storage temperature................. C65 c to +125 c voltage on any pin (except v cc and v pp ) with respect to gnd ............. C0.5 v to +3.7 v 1 v pp voltage (for block erase and program) with respect to gnd .......C0.5 v to +13.5 v 1,2,4 v cc and v ccq supply voltage with respect to gnd ............. C0.2 v to +3.6 v 1 output short circuit current...................... 100 ma 3 notice: this datasheet contains preliminary information on new products in production. do not finalize a design with this information. revised information will be published when the product is available. verify with your local intel sales office that you have the latest datasheet before finalizing a design. * warning: stressing the device beyond the "absolute maximum ratings" may cause permanent damage. these are stress ratings only. operation beyond the "operating conditions" is not recommended and extended exposure beyond the "operating conditions" may effect device reliability. notes: 1. minimum dc voltage is C0.5 v on input/output pins. during transitions, this level may undershoot to C2.0 v for periods < 20 ns. maximum dc voltage on input/output pins is v cc + 0.5 v which, during transitions, may overshoot to v cc + 2.0 v for periods < 20 ns. 2. maximum dc voltage on v pp may overshoot to +14.0 v for periods < 20 ns. 3. output shorted for no more than one second. no more than one output shorted at a time. 4. v pp voltage is normally 1.65 vC3.6 v. connection to supply of 11.4 vC12.6 v can only be done for 1000 cycles on the main blocks and 2500 cycles on the parameter blocks during program/erase. v pp may be connected to 12 v for a total of 80 hours maximum. see section 3.5 for details. 4.2 operating conditions table 10. temperature and voltage operating conditions symbol parameter notes min max units t a operating temperature C40 +85 c v cc1 v cc supply voltage 1 2.7 3.6 volts v cc2 1 3.0 3.6 v ccq1 i/o supply voltage 1 2.7 3.6 volts v pp1 supply voltage 1 1.65 3.6 volts v pp2 1, 2 11.4 12.6 volts cycling block erase cycling 2 100,000 cycles notes: 1. v cc and v ccq must share the same supply when they are in the v cc1 range. 2. applying v pp = 11.4 v C12.6 v during a program/erase can only be done for a maximum of 1000 cycles on the main blocks and 2500 cycles on the parameter blocks. v pp may be connected to 12 v for a total of 80 hours maximum. see section 3.5 for details . 28f800c3, 28f160c3, 28F320C3 e 26 preliminary 4.3 capacitance t a = 25 c, f = 1 mhz sym parameter notes typ max units conditions c in input capacitance 1 6 8 pf v in = 0 v c out output capacitance 1 10 12 pf v out = 0 v note: 1. sampled, not 100% tested. 4.4 dc characteristics v cc 2.7 v C3.6 v v ccq 2.7 vC3.6 v sym parameter note typ max unit test conditions i li input load current 1,7 1 a v cc = v cc max v ccq = v ccq max v in = v ccq or gnd i lo output leakage current 1,7 0.2 10 a v cc = v cc max v ccq = v ccq max v in = v ccq or gnd i ccs v cc standby current 1 10 25 a v cc = v cc max ce# = rp# = v ccq wp# = v ccq or gnd i ccd v cc deep power-down current 1,7 7 20 a v cc = v cc max v ccq = v ccq max v in = v ccq or gnd rp# = gnd 0.2 v i ccr v cc read current 1,5,7 9 18 ma v cc = v cc max v ccq = v ccq max oe# = v ih , ce# = v il f = 5 mhz, i out = 0 ma inputs = v il or v ih i ccw v cc program current 1,4 18 55 ma v pp = v pp1 program in progress 815ma v pp = v pp2 (12 v) program in progress i cce v cc erase current 1,4 16 45 ma v pp = v pp1 erase in progress 815ma v pp = v pp2 (12 v) erase in progress i cces v cc erase suspend current 1,2,4 10 25 a ce# = v ih , erase suspend in progress e 28f800c3, 28f160c3, 28F320C3 27 preliminary 4.4 dc characteristics, continued v cc 2.7 v C3.6 v v ccq 2.7 vC3.6 v sym parameter note typ max unit test conditions i ccws v cc program suspend current 1,2,4 10 25 a ce# = v ih , program suspend in progress i ppd v pp deep power-down current 1 0.2 5 a rp# = gnd 0.2 v v pp v cc i pps v pp standby current 1 0.2 5 a v pp v cc i ppr v pp read current 1 2 15 a v pp v cc 1,4 50 200 a v pp 3 v cc i ppw v pp program current 1,4 0.05 0.1 ma v pp =v pp1 program in progress 822ma v pp = v pp2 (12 v) program in progress i ppe v pp erase current 1,4 0.05 0.1 ma v pp = v pp1 program in progress 822ma v pp = v pp2 (12 v) program in progress i ppes v pp erase suspend current 1,4 0.2 5 a v pp = v pp1 erase suspend in progress 50 200 a v pp = v pp2 (12 v) erase suspend in progress i ppws v pp program suspend current 1,4 0.2 5 a v pp = v pp1 program suspend in progress 50 200 a v pp = v pp2 (12 v) program suspend in progress 28f800c3, 28f160c3, 28F320C3 e 28 preliminary 4.4 dc characteristics, continued v cc 2.7 v C3.6 v v ccq 2.7 vC3.6 v sym parameter note min max unit test conditions v il input low voltage C0.4 v cc *0.22 v v v ih input high voltage 2.0 v ccq +0.3 v v v ol output low voltage 7 C0.10 0.10 v v cc = v cc min v ccq = v ccq min i ol = 100 m a v oh output high voltage 7 v ccq C 0.1 v v v cc = v cc min v ccq = v ccq min i oh = C100 m a v pplk v pp lock-out voltage 3 1.0 v complete write protection v pp1 v pp during program / erase 3 1.65 3.6 v v pp2 operations 3,6 11.4 12.6 v lko v cc prog/erase lock voltage 1.5 v v lko2 v ccq prog/erase lock voltage 1.2 v notes: 1. all currents are in rms unless otherwise noted. typical values at nominal v cc , t a = +25 c. 2. i cces and i ccws are specified with device de-selected. if device is read while in erase suspend, current draw is sum of i cces and i ccr . if the device is read while in program suspend, current draw is the sum of i ccws and i ccr . 3. erase and program are inhibited when v pp < v pplk and not guaranteed outside the valid v pp ranges of v pp1 and v pp2 . 4. sampled, not 100% tested. 5. automatic power savings (aps) reduces i ccr to approximately standby levels in static operation (cmos inputs). 6. applying v pp = 11.4 vC12.6 v during program/erase can only be done for a maximum of 1000 cycles on the main blocks and 2500 cycles on the parameter blocks. v pp may be connected to 12 v for a total of 80 hours maximum. see section 3.4 for details. 7. the test conditions v cc max, v ccq max, v cc min, and v ccq min refer to the maximum or minimum v cc or v ccq voltage listed at the top of each column. e 28f800c3, 28f160c3, 28F320C3 29 preliminary input output test points v ccq 0.0 v ccq 2 v ccq 2 0645_07 figure 6. input/output reference waveform device under test out r 1 v ccq c l r 2 0645_08 figure 7. test configuration test configuration component values table test configuration c l (pf) r 1 ( w )r 2 ( w ) 2.7 v C3.6 v standard test 50 25k 25k note: c l includes jig capacitance. 28f800c3, 28f160c3, 28F320C3 e 30 preliminary 4.5 ac characteristics read operations (1, 4) extended temperature density 8/16 mbit 8/16 mbit product C90 C110 v cc 3.0 vC3.6 v 2.7 vC3.6 v 3.0 vC3.6 v 2.7 vC3.6 v # sym parameter note min max min max min max min max unit r1 t avav read cycle time 80 90 100 110 ns r2 t avqv address to output delay 80 90 100 110 ns r3 t elqv ce# to output delay 2 80 90 100 110 ns r4 t glqv oe# to output delay 2 30303030ns r5 t phqv rp# to output delay 150 150 150 150 ns r6 t elqx ce# to output in low z 30000ns r7 t glqx oe# to output in low z 30000ns r8 t ehqz ce# to output in high z 3 20202020ns r9 t ghqz oe# to output in high z 3 20202020ns r10 t oh output hold from address, ce#, or oe# change, whichever occurs first 30000ns notes: 1. see figure 8 ac waveform: read operations . 2. oe# may be delayed up to t elqv Ct glqv after the falling edge of ce# without impact on t elqv . 3. sampled, but not 100% tested. 4. see figure 6, input/output reference waveform for timing measurements and maximum allowable input slew rate. e 28f800c3, 28f160c3, 28F320C3 31 preliminary 4.5 ac characteristics read operations (1, 4) extended temperature, cont. density 32 mbit product C100 C110 v cc 3.0 vC3.6 v 2.7 vC3.6 v 3.0 vC3.6 v 2.7 vC3.6 v # sym parameter note min max min max min max min max unit r1 t avav read cycle time 90 100 100 110 ns r2 t avqv address to output delay 90 100 100 110 ns r3 t elqv ce# to output delay 2 90 100 100 110 ns r4 t glqv oe# to output delay 2 30303030ns r5 t phqv rp# to output delay 150 150 150 150 ns r6 t elqx ce# to output in low z 30000ns r7 t glqx oe# to output in low z 30000ns r8 t ehqz ce# to output in high z 3 20202020ns r9 t ghqz oe# to output in high z 3 20202020ns r10 t oh output hold from address, ce#, or oe# change, whichever occurs first 30000ns notes: 1. see figure 8 ac waveform: read operations . 2. oe# may be delayed up to t elqv Ct glqv after the falling edge of ce# without impact on t elqv . 3. sampled, but not 100% tested. 4. see figure 6, input/output reference waveform for timing measurements and maximum allowable input slew rate. 28f800c3, 28f160c3, 28F320C3 e 32 preliminary address stable device and address selection ih v il v addresses (a) ih v il v ih v il v ih v il v ce# (e) oe# (g) we# (w) data (d/q) ih v il v rp#(p) ol v oh v high z valid output data valid standby high z r1 r2 r3 r4 r5 r6 r7 r8 r9 r10 figure 8. ac waveform: read operations e 28f800c3, 28f160c3, 28F320C3 33 preliminary 4.6 ac characteristics write operations (1, 5, 6) extended temperature density 8/16 mbit 32 mbit product C90 C110 C100 C110 3.0 v C 3.6 v 80 100 90 100 2.7 v C 3.6 v 90 110 100 110 # sym parameter note min min min min min min min min unit w1 t phwl / t phel rp# high recovery to we# (ce#) going low 150 150 150 150 150 150 150 150 ns w2 t elwl / t wlel ce# (we#) setup to we# (ce#) going low 00000000ns w3 t wlwh / t eleh we# (ce#) pulse width 4 5060707060707070ns w4 t dvwh / t dveh data setup to we# (ce#) going high 2 5050606050606060ns w5 t avwh / t aveh address setup to we# (ce#) going high 2 5060707060707070ns w6 t wheh / t ehwh ce# (we#) hold time from we# (ce#) high 00000000ns w7 t whdx / t ehdx data hold time from we# (ce#) high 2 00000000ns w8 t whax / t ehax address hold time from we# (ce#) high 2 00000000ns 28f800c3, 28f160c3, 28F320C3 e 34 preliminary 4.6 ac characteristics write operations (1, 5, 6) extended temperature, cont. density 8/16 mbit 32 mbit product C90 C110 C100 C110 3.0 v C 3.6 v 80 100 90 100 2.7 v C 3.6 v 90 110 100 110 # sym parameter note min min min min min min min min unit w9 t whwl / t ehel we# (ce#) pulse width high 4 3030303030303030ns w10 t vpwh / t vpeh v pp setup to we# (ce#) going high 3 200 200 200 200 200 200 200 200 ns w11 t qvvl v pp hold from valid srd 3 00000000ns w12 t bhwh / t bheh wp# setup to we# (ce#) going high 3 00000000ns w13 t qvbl wp# hold from valid srd 3 00000000ns w14 t whgl we# high to oe# going low 3 3030303030303030ns notes: 1. write timing characteristics during erase suspend are the same as during write-only operations. 2. refer to table 5 for valid a in or d in . 3. sampled, but not 100% tested. 4. write pulse width (t wp ) is defined from ce# or we# going low (whichever goes low last) to ce# or we# going high (whichever goes high first). hence, t wp = t wlwh = t eleh = t wleh = t elwh . similarly, write pulse width high (t wph ) is defined from ce# or we# going high (whichever goes high first) to ce# or we# going low (whichever goes low first). hence, t wph = t whwl = t ehel = t whel = t ehwl . 5. see figure 6, input/output reference waveform for timing measurements and maximum allowable input slew rate. 6. see figure 8, ac waveform: program and erase operations. e 28f800c3, 28f160c3, 28F320C3 35 preliminary 4.7 erase and program timings (1) v pp 1.65 v C3.6 v 11.4 vC12.6 v symbol parameter note typ (1) max typ (1) max unit t bwpb 4-kw parameter block word program time 2, 3 0.10 0.30 0.03 0.12 s t bwmb 32-kw main block word program time 2, 3 0.8 2.4 0.24 1 s t whqv1 / t ehqv1 word program time 2, 3 22 200 8 185 s t whqv2 / t ehqv2 4-kw parameter block erase time 2, 3 0.5 4 0.4 4 s t whqv3 / t ehqv3 32-kw main block erase time 2, 3 1 5 0.6 5 s t whrh1 / t ehrh1 program suspend latency 3 5 10 5 10 s t whrh2 / t ehrh2 erase suspend latency 3 5 20 5 20 s notes: 1. typical values measured at t a = +25 c and nominal voltages. 2. excludes external system-level overhead. 3. sampled, but not 100% tested. 28f800c3, 28f160c3, 28F320C3 e 36 preliminary a in a in ab c d e f w11 d in w10 valid srd d in d in w7 w3 w4 high z w2 w9 w6 w5 w8 v ih v il addresses [a] v ih v il ce# (we#) [e(w)] v ih v il oe# [g] v ih v il we# (ce) [w(e)] v ih v il data [d/q] v ih v il wp# v pph 1 v il v pp [v] v pph 2 v ih v il rp# [p] (note 1) (note 1) w13 w12 w1 v pplk w14 notes: 1. ce# must be toggled low when reading status register data. we# must be inactive (high) when reading status register data. a. v cc power-up and standby. b. write program or erase setup command. c. write valid address and data (for program) or erase confirm command. d. automated program or erase delay. e. read status register data (srd): reflects completed program/erase operation. f. write read array command. figure 9. ac waveform: program and erase operations e 28f800c3, 28f160c3, 28F320C3 37 preliminary 4.8 reset operations ih v il v rp# (p) plph t ih v il v rp# (p) plph t (a) reset during read mode abort complete phqv t phwl t phel t phqv t phwl t phel t (b) reset during program or block erase, < plph t plrh t plrh t ih v il v rp# (p) plph t abort complete phqv t phwl t phel t plrh t deep power- down (c) reset program or block erase, > plph t plrh t figure 10. ac waveform: reset operation table 11. reset specifications (1) v cc 2.7 v C3.6 v symbol parameter notes min max unit t plph rp# low to reset during read (if rp# is tied to v cc , this specification is not applicable) 2,4 100 ns t plrh1 rp# low to reset during block erase 3,4 22 s t plrh2 rp# low to reset during program 3,4 12 s notes: 1. see section 3.1.4 for a full description of these conditions. 2. if t plph is < 100 ns the device may still reset but this is not guaranteed. 3. if rp# is asserted while a block erase or word program operation is not executing, the reset will complete within 100 ns. 4. sampled, but not 100% tested. 28f800c3, 28f160c3, 28F320C3 e 38 preliminary 5.0 ordering information t e 2 8 f 3 2 0 c 3 t 9 0 package te = 48-lead tsop gt = 48-ball bga* csp rc = easy bga product line designator for all intel ? flash products access speed (ns) 8/16 mbit = 90, 110 32 mbit = 100, 110 product family c3 = 3 v advanced+ boot block v cc = 2.7 v - 3.6 v v pp = 1.65 v - 3.6 v or 11.4 v - 12.6 v device density 320 = x16 (32 mbit) 160 = x16 (16 mbit) 800 = x16 (8 mbit) t = top blocking b = bottom blocking valid combinations (all extended temperature) 48-lead tsop 48-ball m bga* csp easy bga extended 32m te28F320C3ta100 gt28F320C3ta100 rc28F320C3ta100 te28F320C3ba100 gt28F320C3ba100 rc28F320C3ba100 te28F320C3ta110 gt28F320C3ta110 rc28F320C3ta110 te28F320C3ba110 gt28F320C3ba110 rc28F320C3ba110 extended 16m te28f160c3ta90 gt28f160c3ta90 rc28f160c3ta90 te28f160c3ba90 gt28f160c3ba90 rc28f160c3ba90 te28f160c3ta110 gt28f160c3ta110 rc28f160c3ta110 te28f160c3ba110 gt28f160c3ba110 rc28f160c3ba110 extended 8m te28f800c3ta90 rc28f800c3ta90 te28f800c3ba90 rc28f800c3ba90 te28f800c3ta110 rc28f800c3ta110 te28f800c3ba110 rc28f800c3ba110 note: 1. the second line of the 48-ball bga package top side mark specifies assembly codes. for samples only, the first character signifies either e for engineering samples or s for silicon daisy chain samples. all other assembly codes without an e or s as the first character are production units. e 28f800c3, 28f160c3, 28F320C3 39 preliminary 6.0 additional information (1,2) order number document/tool 297938 3 volt advanced+ boot block flash memory specification update 210830 flash memory databook 297647 2.4 volt advanced+ boot block flash memory; 28f800c2, 28f160c2, 28f320c2 datasheet 292216 ap-658 designing for upgrade to the advanced+ boot block flash memory 292215 ap-657 designing with the advanced+ boot block flash memory architecture contact your intel representative flash data integrator (fdi) software developers kit 297874 fdi interactive: play with intels flash data integrator on your pc notes: 1. please call the intel literature center at (800) 548-4725 to request intel documentation. international customers should contact their local intel or distribution sales office. 2. visit intels world wide web home page at http://www.intel.com or http://developer.intel.com for technical documentation and tools. 28f800c3, 28f160c3, 28F320C3 e 40 preliminary appendix a wsm current/next states command input (and next state) current state sr.7 data when read read array (ffh) program setup (10/40h) erase setup (20h) erase confirm (d0h) prog/ers suspend (b0h) prog/ers resume (d0) read status (70h) clear status (50h) read array 1 array read array program setup erase setup read array read status read array read status 1 status read array program setup erase setup read array read status read array read config. 1 config read array program setup erase setup read array read status read array read query 1 cfi read array program setup erase setup read array read status read array lock setup 1 status lock command error lock (done) lock cmd. error lock (done) lock cmd. error lock cmd. error 1 status read array program setup erase setup read array read status read array lock oper. (done) 1 status read array program setup erase setup read array read status read array prot. prog. setup 1 status protection register program prot. prog. (not done) 0 status protection register program (not done) prot. prog. (done) 1 status read array program setup erase setup read array read status read array prog. setup 1 status program program (not done) 0 status program (not done) prog. sus. status program (not done) prog. susp. status 1 status prog. sus. read array program suspend read array program (not done) prog. sus. rd. array program (not done) prog. sus. status prog. sus. rd. array prog. susp. read array 1 array prog. sus. read array program suspend read array program (not done) prog. sus. rd. array program (not done) prog. sus. status prog. sus. rd. array prog. susp. read config 1 config prog. sus. read array program suspend read array program (not done) prog. sus. rd. array program (not done) prog. sus. status prog. sus. rd. array prog. susp. read query 1 cfi prog. sus. read array program suspend read array program (not done) prog. sus. rd. array program (not done) prog. sus. status prog. sus. rd. array program (done) 1 status read array program setup erase setup read array read status read array erase setup 1 status erase command error erase (not done) erase cmd. error erase (not done) erase command error erase cmd. error 1 status read array program setup erase setup read array read status read array erase (not done) 0 status erase (not done) erase sus. status erase (not done) ers. susp. status 1 status erase sus. read array program setup ers. sus. rd. array erase ers. sus. rd. array erase erase sus. status ers. sus. rd. array erase susp. array 1 array erase sus. read array program setup ers. sus. rd. array erase ers. sus. rd. array erase erase sus. status ers. sus. rd. array ers. susp. read config 1 config erase sus. read array program setup ers. sus. rd. array erase ers. sus. rd. array erase erase sus. status ers. sus. rd. array ers. susp. read query 1 cfi erase sus. read array program setup ers. sus. rd. array erase ers. sus. rd. array erase erase sus. status ers. sus. rd. array erase (done) 1 status read array program setup erase setup read array read status read array e 28f800c3, 28f160c3, 28F320C3 41 preliminary appendix a wsm current/next states (continued) command input (and next state) current state read config (90h) read query (98h) lock setup (60h) prot. prog. setup (c0h) lock confirm (01h) lock down confirm (2fh) unlock confirm (d0h) read array read config. read query lock setup prot. prog. setup read array read status read config. read query lock setup prot. prog. setup read array read config. read config. read query lock setup prot. prog. setup read array read query read config. read query lock setup prot. prog. setup read array lock setup locking command error lock operation (done) lock cmd. error read config. read query lock setup prot. prog. setup read array lock operation (done) read config. read query lock setup prot. prog. setup read array prot. prog. setup protection register program prot. prog. (not done) protection register program (not done) prot. prog. (done) read config. read query lock setup prot. prog. setup read array prog. setup program program (not done) program (not done) prog. susp. status prog. susp. read config. prog. susp. read query program suspend read array program (not done) prog. susp. read array prog. susp. read config. prog. susp. read query program suspend read array program (not done) prog. susp. read config. prog. susp. read config. prog. susp. read query program suspend read array program (not done) prog. susp. read query. prog. susp. read config. prog. susp. read query program suspend read array program (not done) program (done) read config. read query lock setup prot. prog. setup read array erase setup erase command error erase (not done) erase cmd. error read config. read query lock setup prot. prog. setup read array erase (not done) erase (not done) erase suspend status erase suspend read config. erase suspend read query lock setup erase suspend read array erase (not done) erase suspend array erase suspend read config. erase suspend read query lock setup erase suspend read array erase (not done) eras sus. read config erase suspend read config. erase suspend read query lock setup erase suspend read array erase (not done) eras sus. read query erase suspend read config. erase suspend read query lock setup erase suspend read array erase (not done) ers.(done) read config. read query lock setup prot. prog. setup read array 28f800c3, 28f160c3, 28F320C3 e 42 preliminary appendix b program/erase flowcharts start write 40h program address/data read status register sr.7 = 1? full status check if desired program complete read status register data (see above) v pp range error programming error attempted program to locked block - aborted program successful sr.3 = sr.4 = sr.1 = full status check procedure bus operation write write standby repeat for subsequent programming operations. sr full status check can be done after each program or after a sequence of program operations. write ffh after the last program operation to reset device to read array mode. bus operation standby standby sr.3 must be cleared, if set during a program attempt, before further attempts are allowed by the write state machine. sr.1, sr.3 and sr.4 are only cleared by the clear staus register command, in cases where multiple bytes are programmed before full status is checked. if an error is detected, clear the status register before attempting retry or other error recovery. no yes 1 0 1 0 1 0 command program setup program comments data = 40h data = data to program addr = location to program check sr.7 1 = wsm ready 0 = wsm busy command comments check sr.3 1 = v pp low detect check sr.1 1 = attempted program to locked block - program aborted read status register data toggle ce# or oe# to update status register data standby check sr.4 1 = v pp program error figure 11. automated word programming flowchart e 28f800c3, 28f160c3, 28F320C3 43 preliminary start write b0h read status register no comments data = b0h addr = x data = ffh addr = x sr.7 = sr.2 = 1 write ffh read array data program completed done reading yes write ffh write d0h program resumed read array data 0 1 read array data from block other than the one being programmed. status register data toggle ce# or oe# to update status register data addr = x check sr.7 1 = wsm ready 0 = wsm busy check sr.2 1 = program suspended 0 = program completed data = d0h addr = x bus operation command 0 write 70h status register data toggle ce# or oe# to update status register data addr = x write write write read read standby standby write data=70h addr=x command program suspend read status read array program resume figure 12. program suspend/resume flowchart 28f800c3, 28f160c3, 28F320C3 e 44 preliminary start write 20h write d0h and block address read status register sr.7 = full status check if desired block erase complete full status check procedure bus operation write write standby repeat for subsequent block erasures. full status check can be done after each block erase or after a sequence of block erasures. write ffh after the last write operation to reset device to read array mode. bus operation standby sr. 1 and 3 must be cleared, if set during an erase attempt, before further attempts are allowed by the write state machine. sr.1, 3, 4, 5 are only cleared by the clear staus register command, in cases where multiple bytes are erased before full status is checked. if an error is detected, clear the status register before attempting retry or other error recovery. no yes suspend erase suspend erase loop 1 0 standby command erase setup erase confirm comments data = 20h addr = within block to be erased data = d0h addr = within block to be erased check sr.7 1 = wsm ready 0 = wsm busy command comments check sr.3 1 = v pp low detect check sr.4,5 both 1 = command sequence error read status register data (see above) v pp range error command sequence error block erase successful sr.3 = sr.4,5 = 1 0 1 0 block erase error sr.5 = 1 0 attempted erase of locked block - aborted sr.1 = 1 0 read status register data toggle ce# or oe# to update status register data standby check sr.5 1 = block erase error standby check sr.1 1 = attempted erase of locked block - erase aborted figure 13. automated block erase flowchart e 28f800c3, 28f160c3, 28F320C3 45 preliminary start write b0h read status register no comments data = b0h addr = x data = ffh addr = x sr.7 = sr.6 = 1 write ffh read array data erase completed done reading yes write ffh write d0h erase resumed read array data 0 1 read array data from block other than the one being erased. status register data toggle ce# or oe# to update status register data addr = x check sr.7 1 = wsm ready 0 = wsm busy check sr.6 1 = erase suspended 0 = erase completed data = d0h addr = x bus operation write standby write read standby read command 0 write 70h status register data toggle ce# or oe# to update status register data addr = x write write data=70h addr=x command erase suspend read status read array erase resume figure 14. erase suspend/resume flowchart 28f800c3, 28f160c3, 28F320C3 e 46 preliminary start write 60h (configuration setup) no comments data = 60h addr = x write 90h (read configuration) read block lock status locking change confirmed? locking change complete bus operation write command write 01h, d0h, or 2fh write write data= 01h (lock block) d0h (unlock block) 2fh (lockdown block) addr=within block to lock command config. setup lock, unlock, or lockdown data = 90h addr = x write (optional) read configuration block lock status data addr = second addr of block read (optional) block lock status confirm locking change on dq 1 , dq 0 . (see block locking state table for valid combinations.) standby (optional) optional write ffh (read array) figure 15. locking operations flowchart e 28f800c3, 28f160c3, 28F320C3 47 preliminary start write c0h (protection reg. program setup) write protect. register address/data read status register sr.7 = 1? full status check if desired program complete read status register data (see above) v pp range error protection register programming error attempted program to locked register - aborted program successful sr.3, sr.4 = sr.1, sr.4 = sr.1, sr.4 = full status check procedure bus operation write write standby protection program operations can only be addressed within the protection register address space. addresses outside the defined space will return an error. repeat for subsequent programming operations. sr full status check can be done after each program or after a sequence of program operations. write ffh after the last program operation to reset device to read array mode. bus operation standby standby sr.3 must be cleared, if set during a program attempt, before further attempts are allowed by the write state machine. sr.1, sr.3 and sr.4 are only cleared by the clear staus register command, in cases of multiple protection register program operations before full status is checked. if an error is detected, clear the status register before attempting retry or other error recovery. no yes 1, 1 0,1 1,1 command protection program setup protection program comments data = c0h data = data to program addr = location to program check sr.7 1 = wsm ready 0 = wsm busy command comments sr.1 sr.3 sr.4 0 1 1 v pp low 0 0 1 prot. reg. prog. error 1 0 1 register locked: aborted read status register data toggle ce# or oe# to update status register data standby figure 16. protection register programming flowchart 28f800c3, 28f160c3, 28F320C3 e 48 preliminary appendix c common flash interface query structure this appendix defines the data structure or database returned by the common flash interface (cfi) query command. system software should parse this structure to gain critical information such as block size, density, x8/x16, and electrical specifications. once this information has been obtained, the software will know which command sets to use to enable flash writes, block erases, and otherwise control the flash component. the query is part of an overall specification for multiple command set and control interface descriptions called common flash interface, or cfi. c.1 query structure output the query database allows system software to gain information for controlling the flash com ponent. this section describes the devices cfi-compliant interface that allows the host system to access query data. query data are always presented on the lowest-order data outputs (dq 0-7 ) only. the numerical offset value is the address relative to the maximum bus width supported by the device. on this family of devices, the query table device starting address is a 10h, which is a word address for x16 devices. for a word-wide (x16) device, the first two bytes of the query structure, q and r in ascii, appear on the low byte at word addresses 10h and 11h. this cfi-compliant device outputs 00h data on upper bytes. thus, the device outputs ascii q in the low byte (dq 0-7 ) and 00h in the high byte (dq 8-15 ). at query addresses containing two or more bytes of information, the least significant data byte is presented at the lower address, and the most significant data byte is presented at the higher address. in all of the following tables, addresses and data are represented in hexadecimal notation, so the h suffix has been dropped. in addition, since the upper byte of word-wide devices is always 00h, the leading 00 has been dropped from the table notation and only the lower byte value is shown. any x16 device outputs can be assumed to have 00h on the upper byte in this mode. table c1. summary of query structure output as a function of device and mode device hex offset code ascii value device addresses 10: 51 q 11: 52 r 12: 59 y e 28f800c3, 28f160c3, 28F320C3 49 preliminary table c2. example of query structure output of x16 and x8 devices word addressing byte addressing offset hex code value offset hex code value a 15 Ca 0 d 15 Cd 0 a 7 Ca 0 d 7 Cd 0 0010h 0051 q 10h 51 q 0011h 0052 r 11h 52 r 0012h 0059 y 12h 59 y 0013h p_id lo prvendor 13h p_id lo prvendor 0014h p_id hi id # 14h p_id lo id # 0015h p lo prvendor 15h p_id hi id # 0016h p hi tbladr 16h ... ... 0017h a_id lo altvendor 17h 0018h a_id hi id # 18h ... ... ... ... c.2 query structure overview the query command causes the flash component to display the common flash interface (cfi) query structure or database. the structure sub-sections and address locations are summarized below. table c3. query structure (1) offset sub-section name description 00h manufacturer code 01h device code (ba+2)h (2) block status register block-specific information 04-0fh reserved reserved for vendor-specific information 10h cfi query identification string command set id and vendor data offset 1bh system interface information device timing and voltage information 27h device geometry definition flash device layout p (3) primary intel - specific extended query table vendor - defined additional information specific to the primary vendor algorithm notes: 1. refer to the query structure output section and offset 28h for the detailed definition of offset address as a function of device bus width and mode. 2. ba = the beginning location of a block address (e.g., 08000h is the beginning location of block 1 when the block size is 32 kword). 3. offset 15 defines p which points to the primary intel - specific extended query table. 28f800c3, 28f160c3, 28F320C3 e 50 preliminary c.3 block lock status register the block status register indicates whether an erase operation completed successfully or whether a given block is locked or can be accessed for flash program/erase operations. block erase status (bsr.1) allows system software to determine the success of the last block erase operation. bsr.1 can be used just after power-up to verify that the v cc supply was not accidentally removed during an erase operation. this bit is only reset by issuing another erase operation to the block. the block status register is accessed from word address 02h within each block. table c4. block status register offset length description add. value (ba+2)h (1) 1 block lock status register ba+2: --00 or --01 bsr.0 block lock status 0 = unlocked 1 = locked ba+2: (bit 0): 0 or 1 bsr.1 block lock-down status 0 = not locked down 1 = locked down ba+2: (bit 1): 0 or 1 bsr 2 C7: reserved for future use ba+2: (bit 2C7): 0 note: 1. ba = the beginning location of a block address (i.e., 008000h is the beginning location of block 1 in word mode.) c.4 cfi query identification string the identification string provides verification that the component supports the common flash interface specification. it also indicates the specification version and supported vendor-specified command set(s). table 5. cfi identification offset length description add. hex code value 10h 3 query-unique ascii string qry 10 --51 q 11: --52 r 12: --59 y 13h 2 primary vendor command set and control interface id code. 13: --03 16-bit id code for vendor-specified algorithms 14: --00 15h 2 extended query table primary algorithm address 15: --35 16: --00 17h 2 alternate vendor command set and control interface id code. 17: --00 0000h means no second vendor-specified algorithm exists 18: --00 19h 2 secondary algorithm extended query table address. 19: --00 0000h means none exists 1a: --00 e 28f800c3, 28f160c3, 28F320C3 51 preliminary c.5 system interface information table 6. system interface information offset length description add. hex code value 1bh 1 v cc logic supply minimum program/erase voltage bits 0C3 bcd 100 mv bits 4C7 bcd volts 1b: --27 2.7 v 1ch 1 v cc logic supply maximum program/erase voltage bits 0C3 bcd 100 mv bits 4C7 bcd volts 1c: --36 3.6 v 1dh 1 v pp [programming] supply minimum program/erase voltage bits 0C3 bcd 100 mv bits 4C7 hex volts 1d: --b4 11.4 v 1eh 1 v pp [programming] supply maximum program/erase voltage bits 0C3 bcd 100 mv bits 4C7 hex volts 1e: --c6 12.6 v 1fh 1 n such that typical single word program time-out = 2 n s 1f: --05 32 s 20h 1 n such that typical max. buffer write time-out = 2 n s 20: --00 na 21h 1 n such that typical block erase time-out = 2 n ms 21: --0a 1 s 22h 1 n such that typical full chip erase time-out = 2 n ms 22: --00 na 23h 1 n such that maximum word program time-out = 2 n times typical 23: --04 512s 24h 1 n such that maximum buffer write time-out = 2 n times typical 24: --00 na 25h 1 n such that maximum block erase time-out = 2 n times typical 25: --03 8s 26h 1 n such that maximum chip erase time-out = 2 n times typical 26: --00 na 28f800c3, 28f160c3, 28F320C3 e 52 preliminary c.6 device geometry definition table 7. device geometry definition offset length description code see table below 27h 1 n such that device size = 2 n in number of bytes 27: 28h 2 flash device interface: x8 async x16 async x8/x16 async 28: --01 x16 28:00,29:00 28:01,29:00 28:02,29:00 29: --00 2ah 2 n such that maximum number of bytes in write buffer = 2 n 2a: --00 0 2b: --00 2ch 1 number of erase block regions within device: 1. x = 0 means no erase blocking; the device erases in bulk 2. x specifies the number of device or partition regions with one or more contiguous same-size erase blocks. 3. symmetrically blocked partitions have one blocking region 4. partition size = (total blocks) x (individual block size) 2c: --02 2 2dh 4 erase block region 1 information 2d: bits 0C15 = y, y+1 = number of identical-size erase blocks 2e: bits 16C31 = z, region erase block(s) size are z x 256 bytes 2f: 30: 31h 4 erase block region 2 information 31: bits 0C15 = y, y+1 = number of identical-size erase blocks 32: bits 16C31 = z, region erase block(s) size are z x 256 bytes 33: 34: device geometry definition address 8 mbit 16 mbit 32 mbit Cb Ct Cb Ct Cb Ct 27: --14 --14 --15 --15 --16 --16 28: --01 --01 --01 --01 --01 --01 29: --00 --00 --00 --00 --00 --00 2a: --00 --00 --00 --00 --00 --00 2b: --00 --00 --00 --00 --00 --00 2c: --02 --02 --02 --02 --02 --02 2d: --07 --0e --07 --1e --07 --3e 2e: --00 --00 --00 --00 --00 --00 2f: --20 --00 --20 --00 --20 --00 30: --00 --01 --00 --01 --00 --01 31: --0e --07 --1e --07 --3e --07 32: --00 --00 --00 --00 --00 --00 33: --00 --20 --00 --20 --00 --20 34: --01 --00 --01 --00 --01 --00 e 28f800c3, 28f160c3, 28F320C3 53 preliminary c.7 intel-specific extended query table certain flash features and commands are optional. the intel - specific extended query table specifies this and other similar types of information. table 8. primary-vendor specific extended query offset (1 p = 35h ) length description (optional flash features and commands) add. hex code value (p+0)h 3 primary extended query table 35: --50 p (p+1)h unique ascii string pri 36: --52 r (p+2)h 37: --49 i (p+3)h 1 major version number, ascii 38: --31 1 (p+4)h 1 minor version number, ascii 39: --30 0 (p+5)h 4 optional feature and command support (1=yes, 0=no) 3a: --66 (p+6)h bits 9 C31 are reserved; undefined bits are 0. if bit 31 is 3b: --00 (p+7)h 1 then another 31 bit field of optional features follows 3c: --00 (p+8)h at the end of the bit-30 field. 3d: --00 bit 0 chip erase supported bit 0 = 0 no bit 1 suspend erase supported bit 1 = 1 yes bit 2 suspend program supported bit 2 = 1 yes bit 3 legacy lock/unlock supported bit 3 = 0 no bit 4 queued erase supported bit 4 = 0 no bit 5 instant individual block locking supported bit 5 = 1 yes bit 6 protection bits supported bit 6 = 1 yes bit 7 page mode read supported bit 7 = 0 no bit 8 synchronous read supported bit 8 = 0 no (p+9)h 1 supported functions after suspend: read array, status, query other supported operations are: bits 1C7 reserved; undefined bits are 0 3e: --01 bit 0 program supported after erase suspend bit 0 = 1 yes (p+a)h 2 block status register mask 3f: --03 (p+b)h bits 2C15 are reserved; undefined bits are 0 40: --00 bit 0 block lock-bit status register active bit 0 = 1 yes bit 1 block lock-down bit status active bit 1 = 1 yes (p+c)h 1 v cc logic supply highest performance program/erase voltage bits 0 C3 bcd value in 100 mv bits 4C7 bcd value in volts 41: --33 3.3 v (p+d)h 1 v pp optimum program/erase supply voltage bits 0C3 bcd value in 100 mv bits 4C7 hex value in volts 42: --c0 12.0 v 28f800c3, 28f160c3, 28F320C3 e 54 preliminary table 9. protection register information offset (1) p = 35h length description (optional flash features and commands) add. hex code value (p+e)h 1 number of protection register fields in jedec id space. 00h, indicates that 256 protection bytes are available 43: --01 01 (p+f)h 4 44: --80 80h (p+10)h 45: --00 00h (p+11)h protection field 1: protection description 46: --03 8 byte (p+12)h this field describes user-available one time programmable (otp) protection register bytes. some are pre-programmed with device-unique serial numbers. others are user programmable. bits 0C15 point to the protection register lock byte, the sections first byte. the following bytes are factory pre-programmed and user- programmable. bits 0C7 = lock/bytes jedec-plane physical low address bits 8C15 = lock/bytes jedec -plane physical high address bits 16C23 = n such that 2 n = factory pre-programmed bytes bits 24C31 = n such that 2 n = user programmable bytes 47: --03 8 byte (p+13)h reserved for future use 48: notes: 1. the variable p is a pointer which is defined at cfi offset 15h. e 28f800c3, 28f160c3, 28F320C3 55 preliminary appendix d architecture block diagram output multiplexer 4-kword parameter block 32-kword main block 32-kword main block 4-kword parameter block y-gating/sensing write state machine program/erase voltage switch data comparator status register identifier register data register i/o logic address latch address counter x-decoder y-decoder power reduction control input buffer output buffer gnd v cc v pp ce# we# oe# rp# command user interface input buffer a 0 -a 19 dq 0 -dq 15 v ccq wp# 28f800c3, 28f160c3, 28F320C3 e 56 preliminary appendix e word-wide memory map diagrams 8-mbit, 16-mbit, and 32-mbit word-wide memory addressing top boot bottom boot size (kw) 8m 16m 32m size (kw) 8m 16m 32m 4 7f000-7ffff ff000-fffff 1ff000-1fffff 32 1f8000-1fffff 4 7e000-7efff fe000-fefff 1fe000-1fefff 32 1f0000-1f7fff 4 7d000-7dfff fd000-fdfff 1fd000-1fdfff 32 1e8000-1effff 4 7c000-7cfff fc000-fcfff 1fc000-1fcfff 32 1e0000-1e7fff 4 7b000-7bfff fb000-fbfff 1fb000-1fbfff 32 1d8000-1dffff 4 7a000-7afff fa000-fafff 1fa000-1fafff 32 1d0000-1d7fff 4 79000-79fff f9000-f9fff 1f9000-1f9fff 32 1c8000-1cffff 4 78000-78fff f8000-f8fff 1f8000-1f8fff 32 1c0000-1c7fff 32 70000-77fff f0000-f7fff 1f0000-1f7fff 32 1b8000-1bffff 32 68000-6ffff e8000-effff 1e8000-1effff 32 1b0000-1b7fff 32 60000-67fff e0000-e7fff 1e0000-1e7fff 32 1a8000-1affff 32 58000-5ffff d8000-dffff 1d8000-1dffff 32 1a0000-1a7fff 32 50000-57fff d0000-d7fff 1d0000-1d7fff 32 198000-19ffff 32 48000-4ffff c8000-cffff 1c8000-1cffff 32 190000-197fff 32 40000-47fff c0000-c7fff 1c0000-1c7fff 32 188000-18ffff 32 38000-3ffff b8000-bffff 1b8000-1bffff 32 180000-187fff 32 30000-37fff b0000-b7fff 1b0000-1b7fff 32 178000-17ffff 32 28000-2ffff a8000-affff 1a8000-1affff 32 170000-177fff 32 20000-27fff a0000-a7fff 1a0000-1a7fff 32 168000-16ffff 32 18000-1ffff 98000-9ffff 198000-19ffff 32 160000-167fff 32 10000-17fff 90000-97fff 190000-197fff 32 158000-15ffff 32 08000-0ffff 88000-8ffff 188000-18ffff 32 150000-157fff 32 00000-07fff 80000-87fff 180000-187fff 32 148000-14ffff 32 78000-7ffff 178000-17ffff 32 140000-147fff 32 70000-77fff 170000-177fff 32 138000-13ffff 32 68000-6ffff 168000-16ffff 32 130000-137fff 32 60000-67fff 160000-167fff 32 128000-12ffff 32 58000-5ffff 158000-15ffff 32 120000-127fff 32 50000-57fff 150000-157fff 32 118000-11ffff 32 48000-4ffff 148000-14ffff 32 110000-117fff 32 40000-47fff 140000-147fff 32 108000-10ffff 32 38000-3ffff 138000-13ffff 32 100000-107fff 32 30000-37fff 130000-137fff 32 f8000-fffff 0f8000-0fffff 32 28000-2ffff 128000-12ffff 32 f0000-f7fff 0f0000-0f7fff 32 20000-27fff 120000-127fff 32 e8000-effff 0e8000-0effff 32 18000-1ffff 118000-11ffff 32 e0000-e7fff 0e0000-0e7fff 32 10000-17fff 110000-117fff 32 d8000-dffff 0d8000-0dffff 32 08000-0ffff 108000-10ffff 32 d0000-d7fff 0d0000-0d7fff 32 00000-07fff 100000-107fff 32 c8000-cffff 0c8000-0cffff this column continues on next page this column continues on next page e 28f800c3, 28f160c3, 28F320C3 57 preliminary 8-mbit, 16-mbit, and 32-mbit word-wide memory addressing (continued) top boot bottom boot size (kw) 8m 16m 32m size (kw) 8m 16m 32m 32 0f8000-0fffff 32 c0000-c7fff 0c0000-0c7fff 32 0f0000-0f7fff 32 b8000-bffff 0b8000-0bffff 32 0e8000-0effff 32 b0000-b7fff 0b0000-0b7fff 32 0e0000-0e7fff 32 a8000-affff 0a8000-0affff 32 0d8000-0dffff 32 a0000-a7fff 0a0000-0a7fff 32 0d0000-0d7fff 32 98000-9ffff 098000-09ffff 32 0c8000-0cffff 32 90000-97fff 090000-097fff 32 0c0000-0c7fff 32 88000-8ffff 088000-08ffff 32 0b8000-0bffff 32 80000-87fff 080000-087fff 32 0b0000-0b7fff 32 78000-7ffff 78000-7ffff 78000-7ffff 32 0a8000-0affff 32 70000-77fff 70000-77fff 70000-77fff 32 0a0000-0a7fff 32 68000-6ffff 68000-6ffff 68000-6ffff 32 098000-09ffff 32 60000-67fff 60000-67fff 60000-67fff 32 090000-097fff 32 58000-5ffff 58000-5ffff 58000-5ffff 32 088000-08ffff 32 50000-57fff 50000-57fff 50000-57fff 32 080000-087fff 32 48000-4ffff 48000-4ffff 48000-4ffff 32 078000-07ffff 32 40000-47fff 40000-47fff 40000-47fff 32 070000-077fff 32 38000-3ffff 38000-3ffff 38000-3ffff 32 068000-06ffff 32 30000-37fff 30000-37fff 30000-37fff 32 060000-067fff 32 28000-2ffff 28000-2ffff 28000-2ffff 32 058000-05ffff 32 20000-27fff 20000-27fff 20000-27fff 32 050000-057fff 32 18000-1ffff 18000-1ffff 18000-1ffff 32 048000-04ffff 32 10000-17fff 10000-17fff 10000-17fff 32 040000-047fff 32 08000-0ffff 08000-0ffff 08000-0ffff 32 038000-03ffff 4 07000-07fff 07000-07fff 07000-07fff 32 030000-037fff 4 06000-06fff 06000-06fff 06000-06fff 32 028000-02ffff 4 05000-05fff 05000-05fff 05000-05fff 32 020000-027fff 4 04000-04fff 04000-04fff 04000-04fff 32 018000-01ffff 4 03000-03fff 03000-03fff 03000-03fff 32 010000-017fff 4 02000-02fff 02000-02fff 02000-02fff 32 008000-00ffff 4 01000-01fff 01000-01fff 01000-01fff 32 000000-007fff 4 00000-00fff 00000-00fff 00000-00fff 28f800c3, 28f160c3, 28F320C3 e 58 preliminary appendix f device id table read configuration addresses and data item address data manufacturer code x16 00000 0089 device code 8-mbit x 16-t x16 00001 88c0 8-mbit x 16-b x16 00001 88c1 16-mbit x 16-t x16 00001 88c2 16-mbit x 16-b x16 00001 88c3 32-mbit x 16-t x16 00001 88c4 32-mbit x 16-b x16 00001 88c5 note: other locations within the configuration address space are reserved by intel for future use. e 28f800c3, 28f160c3, 28F320C3 59 preliminary appendix g protection register addressing word-wide protection register addressing word use a7 a6 a5 a4 a3 a2 a1 a0 lock both 10000000 0 factory 10000001 1 factory 10000010 2 factory 10000011 3 factory 10000100 4 user 10000101 5 user 10000110 6 user 10000111 7 user 10001000 note: 1. all address lines not specified in the above table must be 0 when accessing the protection register, i.e., a 21 Ca 8 = 0. |
Price & Availability of 28F320C3
![]() |
|
|
All Rights Reserved © IC-ON-LINE 2003 - 2022 |
[Add Bookmark] [Contact Us] [Link exchange] [Privacy policy] |
Mirror Sites : [www.datasheet.hk]
[www.maxim4u.com] [www.ic-on-line.cn]
[www.ic-on-line.com] [www.ic-on-line.net]
[www.alldatasheet.com.cn]
[www.gdcy.com]
[www.gdcy.net] |