Top Banner
“Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact that the EPC Gen2 protocol is available publicly, but the ISO-18000 documents are not. The tutorial is “mostly correct” technically; however, the audience was expected to be mostly RF/Radar people, the talk is very light on the circuit details. There are several errors on the OTA slides due to poor copying; so, caveat lector, if it the schematic looks wrong: it is. The table for the 130 process also has “um” where I should have had “nm”. 03 MAY 2016 Brian Degnan http://users.ece.gatech.edu/~degs
51

“Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Jul 25, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

“Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact that the EPC Gen2 protocol is available publicly, but the ISO-18000 documents are not. The tutorial is “mostly correct” technically; however, the audience was expected to be mostly RF/Radar people, the talk is very light on the circuit details.

There are several errors on the OTA slides due to poor copying; so, caveat lector, if it the schematic looks wrong: it is. The table for the 130 process also has “um” where I should have had “nm”.

03 MAY 2016Brian Degnanhttp://users.ece.gatech.edu/~degs

Page 2: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

ReverseEngineeringapassiveUHFRFIDTag

Whynot?

BrianDegnan,Ph.D.

Page 3: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

What’sthisabout?

• AparAalimplem

entaAonGen2forUHFRFID

• Whytheelectronicsideisrelevant.

• Components(sam

ebutdifferent)• System

componentsandbounding

theproblem

• CircuitintuiAon

Page 4: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

TheTagSystem

• Gen2:860MHz-960M

Hzsub40kHz-640kHz• PassivelyPow

ered~20ktransistors

Page 5: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

gSystematalink

Page 6: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Why

other?• IhaveW

ISPs!• Icanjustputaba\eryonit.• IcannottaketheAm

etodesignfrom

scratch• Rem

ovalofconstraintsopensinnovaAon

Page 7: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

EnergyStorage• 1000J~1m

^2sunlightsecondsecond

• 100Jreleasedfrom

ahuman

persecond• U

SAuses4W

EIRP

Page 8: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

MooreM

oreMooreLess

AssumpAons:

--Transistorsscaling--Processingpow

ercorrelatestotransistors

Moore’soriginalgraph.

Page 9: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Degnanetal,AssessingTrendsinPerform

anceperWa\forSignalProcessingApplicaAons

TVLSI2014

Page 10: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Howthingsusedtobe.

Page 11: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 12: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Advantages

• SuperiorPowerPerform

ance• SuperiorProcessingPow

er

Page 13: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

A130nmProcess

Page 14: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

eviceReview:

ransistor

• MOSFETisoneofm

anydevices.• Voltagecontrolledcurrentsource• Theinputlookslikeacapacitor• M

ulApleoperaAngregimes

• Mathem

aAcsandphysicsaresimple,but

realityisterrible.

Page 15: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

TransistorSymbols

Page 16: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

nFET@130nm

Page 17: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

• SubVth

• AboveVthGraph:65nmnFETgatesw

eepfromIBM

’s65nmadverAsem

ents.

Page 18: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

CompactEKVM

odel

Page 19: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Boundingaprocess

Page 20: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Diodes

Page 21: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 22: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 23: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

DiodeConnectedMOSFET

Page 24: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

LinearCapacitor

• Linearityisexcellent• Frequencyresponseisexcellent• ChargeDensityisLow

Page 25: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

DepleAonCapacitor

• Linearityisvariable• Frequencyresponseisvariable• ChargeDensityisexcellent

Page 26: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

(n)MOSC-Vcurveox

C

depC

Depletion

oxC

Inversion

max

,m

in,

min

, min

,m

in

w

here

d

Sidep

depox

depox

XC

CC

CC

C

ε≡

+=

ox oxox

tC

ε≡

d Sidep

XC

ε≡

Page 27: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 28: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Systemesign

• HarvestEnergy• Createastablepow

ersupply• ResettheSystem

• Decodetheincom

ingdatastream

• Respondtothedecodeddata

Page 29: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Gen2Protocol

Page 30: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Gen2Waveform

Page 31: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Exam

ple Tag 0.5mm

2Tag:Digital~30%

EEPRO

M~20%

RF+DCreg~20%

Others(RN

G,ChargePum

p,supportfuncAons):30%

Barnetetal,APassiveU

HFRFIDtransponderforEPCGen2in0.13umCM

OS(TI

sgen2tag)ISSCC2007

Page 32: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

EnergyHarvesAng

Page 33: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

nergyarvesAng

• Num

berofstages• ReceivedEnergy• CurrentLoad• EtCetera

Page 34: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 35: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

Wuetal,

MOSChargePum

psforLow-VoltageO

peraAonJSSCC1998

Page 36: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

owerRegulator

Page 37: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 38: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 39: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

DigitalPOR

Page 40: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 41: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

emodulaAon

Page 42: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 43: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

DataExtracAon

Page 44: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 45: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 46: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 47: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

PRNG

• SRAMIniAalState

• ThermalN

oise• O

scillatorSampling

Page 48: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

OscillatorSam

pling

Page 49: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

ModulatedResponse

Page 50: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact
Page 51: “Reverse Engineering a passive UHF RFID Tag” was a · “Reverse Engineering a passive UHF RFID Tag” was a tutorial given at IEEE RFID 2016. The talk was motivated by the fact

QuesAons?


Related Documents
A foveated passive UHF RFID system for mobile manipulation

A foveated passive UHF RFID system for mobile manipulation

Category: Documents
Performance Benchmarks for Passive UHF RFID Tags · 2005-11-18 · Performance Benchmarks for Passive UHF RFID Tags by Karthik Narayanan Moncombu Ramakrishnan B.E., Electronics and

Performance Benchmarks for Passive UHF RFID Tags ·...

Category: Documents
On-Metal UHF-RFID Passive Tags based on Complementary Split- … · 2018-03-13 · 1 On-Metal UHF-RFID Passive Tags based on Complementary Split-Ring Resonators Simone Zuffanelli1*,

On-Metal UHF-RFID Passive Tags based on Complementary Split-...

Category: Documents
Passive RFID Market—Focus UHF - ChainLink Research · passive ISO 18000-6C (UHF) EPC Gen 2 RFID tags for the purpose of toll collection. Four U.S. tolling agencies that have already

Passive RFID Market—Focus UHF - ChainLink Research ·...

Category: Documents
An Ultra-Low-Power Oscillator with Temperature and Process Compensation for UHF RFID ... · 2013-05-28 · compensation, RFID. 1. Introduction The passive ultra-high-frequency (UHF)

An Ultra-Low-Power Oscillator with Temperature and Process.....

Category: Documents
A Passive UHF RFID System over Ethernet Cable for Long ...

A Passive UHF RFID System over Ethernet Cable for Long ...

Category: Documents
PLANAR ANTENNAS FOR PASSIVE UHF RFID TAG … In Electromagnetics Research B, Vol. 19, 305{327, 2010 PLANAR ANTENNAS FOR PASSIVE UHF RFID TAG A. Kumar and D. Parkash Department of Electronics

PLANAR ANTENNAS FOR PASSIVE UHF RFID TAG … In...

Category: Documents
Development of a UHF Passive RFID System

Development of a UHF Passive RFID System

Category: Documents
Passive UHF RFID Road Tag Antenna

Passive UHF RFID Road Tag Antenna

Category: Documents
vehicleaccess - rfid-access.comrfid-access.com/documents/Vehicle Access Control.pdf · Tag Functionality: • Uses Passive UHF RFID Technology • Low cost disposable tags or rugged

vehicleaccess -...

Category: Documents
UHF RFID Reader

UHF RFID Reader

Category: Documents
Tracking Blood Units in Medical Centers Using Passive UHF ... · TRACKING BLOOD UNITS IN MEDICAL CENTERS USING PASSIVE UHF RFID SYSTEMS Dr. Ghassan T Ibrahim, Bloomsburg University

Tracking Blood Units in Medical Centers Using Passive UHF...

Category: Documents