WS064J0PBAW01

S29WS-J SPANSION | Alldatasheet

Document overview

• Manufacturer or author: Provided By ALLDATASHEET.COM(FREE DATASHEET DOWNLOAD SITE)
• PDF pages: 97

Technical content

This document states the current technical specifications regarding the Spansion product(s) described herein. Spansion LLC deems the products to have been in sufficient production volume such that subsequent versions of this document are not expected to change. However, typographical or specific ation corrections, or modifications to the valid combinations offered may occur. Publication Number S29WS-J_00 Revision A Amendment 6 Issue Date May 11, 2006 Distinctive Characteristics Architectural Advantages „ Single 1.8 volt read, program and erase (1.65 to 1.95 volt) „ Manufactured on 0.11 µm process technology „ Simultaneous Read/Write operation — Data can be continuously read from one bank while executing erase/program functions in other bank — Zero latency between read and write operations — Four bank architecture: WS128J: 16Mb/48Mb/48Mb/ 16Mb, WS064J: 8Mb/24Mb/24Mb/8Mb „ Programable Burst Interface — 2 Modes of Burst Read Operation — Linear Burst: 8, 16, and 32 words with wrap-around — Continuous Sequential Burst „ Secured Silicon Sector region — 128 words accessible through a command sequence, 64words for the Factory Secured Silicon Sector and 64words for the Customer Secured Silicon Sector. „ Sector Architecture

4 Kword x 16 boot sectors, eight at the top of the address

range, and eight at the bottom of the address range — WS128J: 4 Kword X 16, 32 Kword x 254 sectors Bank A : 4 Kword x 8, 32 Kword x 31 sectors Bank B : 32 Kword x 96 sectors Bank C : 32 Kword x 96 sectors Bank D : 4 Kword x 8, 32 Kword x 31 sectors — WS064J: 4 Kword x 16, 32 Kword x 126 sectors. Bank A : 4 Kword x 8, 32 Kword x 15 sectors Bank B : 32 Kword x 48 sectors Bank C : 32 Kword x 48 sectors Bank D : 4 Kword x 8, 32 Kword x 15 sectors „ WS128J : 84-ball (8 mm x 11.6 mm) FBGA package, WS064J : 80-ball (7 mm x 9 mm) FBGA package „ Cyclling Endurance : 1,000,000 cycles per sector typical „ Data retention : 20-years typical Performance Characteristics „ Read access times at 80/66 MHz — Synchronous latency of 71/56 ns (at 30 pF) — Asynchronous random access times of 55/55 ns (at 30 pF) „ Power dissipation (typical values, C L = 30 pF) — Burst Mode Read: 18 mA @ 80Mhz — Simultaneous Operation: 60 mA @ 80Mhz — Program/Erase: 15 mA — Standby mode: 0.2 µA Hardware Features „ Handshaking feature available — Provides host system with minimum possible latency by monitoring RDY „ Hardware reset input (RESET#) — Hardware method to reset the device for reading array data „ WP# input — Write protect (WP#) function allows protection of four outermost boot sectors, regardless of sector protect status „ Persistent Sector Protection — A command sector protection method to lock combinations of individual sectors and sector groups to prevent program or erase operations within that sector — Sectors can be locked and unlocked in-system at V CC level „ Password Sector Protection — A sophisticated sector protection method to lock combinations of individual sectors and sector groups to prevent program or erase operations within that sector using a user-defined 64-bit password „ ACC input: Acceleration function reduces programming time; all sectors locked when ACC = V IL „ CMOS compatible inputs, CMOS compatible outputs „ Low VCC write inhibit Software Features „ Supports Common Flash Memory Interface (CFI) „ Software command set compatible with JEDEC 42.4 standards — Backwards compatible with Am29BDS, Am29BDD, Am29BL, and MBM29BS families „ Data# Polling and toggle bits — Provides a software method of detecting program and erase operation completion „ Erase Suspend/Resume — Suspends an erase operation to read data from, or program data to, a sector that is not being erased, then resumes the erase operation „ Unlock Bypass Program command — Reduces overall programming time when issuing multiple program command sequences S29WS128J/064J 128/64 Megabit (8/4 M x 16-Bit) CMOS 1.8 Volt-only Simultaneous Read/Write, Burst Mode Flash Memory Data Sheet

2S 2 9 W S 1 2 8 J / 0 6 4 J S29WS-J_00_A6 May 11, 2006 Data Sheet General Description The S29WS128J/064J/S29WS064J is a 128/64 Mbit, 1.8 Volt-only, simultaneous Read/Write, Burst Mode Flash memory device, organized as 8,388,608/4,194,304 words of 16 bits each. This device uses a single V CC of 1.65 to 1.95 V to read, program, and erase the memory array. A 12.0- volt VHH on ACC may be used for faster program performance if desired. The device can also be programmed in standard EPROM programmers. At 80 MHz, the device provides a burst access of 9.1 ns at 30 pF with a latency of 46 ns at 30 pF. At 66 MHz, the device provides a burst access of 11.2 ns at 30 pF with a latency of 56 ns at 30 pF. The device operates within the wireless temperature range of -25°C to +85°C, and is offered in Various FBGA packages. The Simultaneous Read/Write architecture provides simultaneous operation by dividing the memory space into four banks. The device can improve overall system performance by allowing a host system to program or erase in one bank, then immediately and simultaneously read from another bank, with zero latency. This releases the system from waiting for the completion of pro gram or erase operations. The device is divided as shown in the following table: The device uses Chip Enable (CE#), Write Enable (WE#), Address Valid (AVD#) and Output En- able (OE#) to control asynchronous read and write operations. For burst operations, the device additionally requires Ready (RDY), and Clock (CLK). This implementation allows easy interface with minimal glue logic to a wide range of microprocessors/microcontrollers for high performance read operations. The burst read mode feature gives system designers flexibility in the interface to the device. The user can preset the burst length and wrap through the same memory space, or read the flash array in continuous mode. The clock polarity feature provides system designers a choice of active clock edges, either rising or falling. The active clock edge initiates burst accesses and determines when data will be output. The device is entirely command set compatible with the JEDEC 42.4 single-power-supply Flash standard. Commands are written to the command register using standard microprocessor write timing. Register contents serve as inputs to an internal state-machine that controls the erase and programming circuitry. Write cycles also internally latch addresses and data needed for the programming and erase operations. Reading data out of the device is similar to reading from other Flash or EPROM devices. The Erase Suspend/Erase Resume feature enables the user to put erase or program on hold for any period of time to read data from, or program data to, any sector that is not selected for erasure. True background erase can thus be achieved. If a read is needed from the Secured Silicon Sector area (One Time Program area) after an erase suspend, then the user must use the proper command sequence to enter and exit this region. Program suspend is also offered. Bank Quantity Size128Mb 64 Mb A 8 8 4 Kwords 31 15 32 Kwords B 96 48 32 Kwords C 96 48 32 Kwords D 31 15 32 Kwords 8 8 4 Kwords

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 3 Data Sheet The hardware RESET# pin terminates any operation in progress and resets the internal state machine to reading array data. The RESET# pin may be tied to the system reset circuitry. A sys- tem reset would thus also reset the device, enabling the system microprocessor to read boot-up firmware from the Flash memory device. The host system can detect whether a program or erase operation is complete by using the device status bit DQ7 (Data# Polling) and DQ6/DQ2 (toggle bits). After a program or erase cycle has been completed, the device automatically returns to reading array data. The sector erase architecture allows memory sectors to be erased and reprogrammed without affecting the data contents of other sectors. The device is fully erased when shipped from the factory. Hardware data protection measures include a low VCC detector that automatically inhibits write operations during power transitions. The device also offers two types of data protection at the sector level. When at V IL, WP# locks the four outermost boot sectors. The device offers two power-saving features. When addresses have been stable for a specified amount of time, the device enters the automatic sleep mode. The system can also place the device into the standby mode. Power consumption is greatly reduced in both modes. Spansion™ Flash memory products combine years of Flash memory manufacturing experience to produce the highest levels of quality, reliability and cost effectiveness. The device electrically erases all bits within a sector simultaneously via Fowler-Nordheim tunnelling. The data is pro grammed using hot electron injection.

6S 2 9 W S 1 2 8 J / 0 6 4 J S29WS-J_00_A6 May 11, 2006 Data Sheet Product Selector Guide Note: 80 MHz option is available for S29WS064J only. Block Diagram Synchronous/Burst Asynchronous Speed Option 66 MHz 80 MHz (Note) Speed Option 66 MHz 80 MHz (Note) Max Latency, ns (tIACC) 56 71 Max Access Time, ns (tACC) 55 55 Max Burst Access Time, ns (tBACC) 11.2 9.1 Max CE# Access, ns (tCE) 55 55 Max OE# Access, ns (tOE) 11.2 9.1 Max OE# Access, ns (tOE) 11.2 9.1 Input/Output Buffers X-Decoder Y-Decoder Chip Enable Output Enable Logic Erase Voltage Generator PGM Voltage Generator TimerVCC Detector State Control Command Register VCC VSS VSSIO WE# RESET# WP# ACC CE# OE# DQ15–DQ0 Data Latch Y-Gating Cell Matrix Address Latch Amax–A0 RDY Buffer RDY Burst State Control Burst Address Counter AVD# CLK Amax: WS064J (A21), WS128J (A22)

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 7 Data Sheet Block Diagram of Simultaneous Operation Circuit Note: Amax: WS064J (A21), WS128J (A22) VSS VCC VSSIO Bank B Address RESET# ACC WE# CE# AVD# RDY DQ15–DQ0 WP# STATE CONTROL COMMAND REGISTER Bank B X-Decoder Y-Decoder Latches and Control Logic Bank A X-Decoder Y-Decoder Latches and Control Logic DQ15–DQ0 DQ15–DQ0 DQ15–DQ0 DQ15–DQ0 DQ15–DQ0 Bank C Y-Decoder X-Decoder Latches and Control Logic Bank D Y-Decoder X-Decoder Latches and Control Logic OE# Status Control Amax–A0 Amax–A0 Amax–A0 Amax–A0 Amax–A0 Bank C Address Bank D Address Bank A Address

8S 2 9 W S 1 2 8 J / 0 6 4 J S29WS-J_00_A6 May 11, 2006 Data Sheet Connection Diagram Special Handling Instructions for FBGA Package Special handling is required for Flash Memory products in FBGA packages. Flash memory devices in FBGA packages may be damaged if exposed to ultrasonic cleaning meth- ods. The package and/or data integrity may be compromised if the package body is exposed to temperatures above 150°C for prolonged periods of time. DQ8 DQ14 RFU RFU ACC WE# A8 A11 B2 B3 B4 B5 B6 B7 A6 RFU RESET# RFU A19 A12 A15 C1 C2 C3 C4 C5 C6 C7 C8 A5 A18 RDY A20 A9 A13 A21 D1 D2 D3 D4 D5 D6 D7 D8 A1 A4 A17 A10 A14 RFU E1 E2 E3 E6 E7 E8 VSS DQ1A0 DQ6 RFU A16 F2 F3F1 F6 F7 F8 CE#f1 DQ0 OE# DQ9 DQ3 DQ4 DQ13 DQ15 RFU G1 G2 G3 G4 G5 G6 G7 G8 DQ10 VCC RFU DQ12 DQ7 V SS H1 H2 H3 H4 H5 H6 H7 H8 DQ2 DQ11 RFU DQ5 J2 J7J3 J4 J5 J6 RFU RFU RFU RFU RFU CLK RFU RFU RFU RFU A2 A3 A4 A5 A6 A7 RFU RFU V CC RFU RFU RFU K2 K3 K4 K5 K6 K7 A1 A8 B8B1 J1 J8 K8K1 AVD# RFU RFU RFU RFU WP# RFU RFU S29WS064J 80-ball Fine-Pitch Ball Grid Array (Top View, Balls Facing Down)

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 9 Data Sheet Connection Diagram DQ8 DQ14 RFU RFU ACC WE# A8 A11 C3 C4 C5 C6 C7 C8 A6 RFU RESET# RFU A19 A12 A15 D2 D3 D4 D5 D6 D7 D8 D9 A5 A18 RDY A20 A9 A13 A21 E2 E3 E4 E5 E6 E7 E8 E9 A1 A4 A17 A10 A14 A22 F2 F3 F4 F7 F8 F9 VSS DQ1A0 DQ6 RFU A16 G3 G4G2 G7 G8 G9 CE#f1 DQ0 OE# DQ9 DQ3 DQ4 DQ13 DQ15 RFU H2 H3 H4 H5 H6 H7 H8 H9 DQ10 VCC RFU DQ12 DQ7 V SS J2 J3 J4 J5 J6 J7 J8 J9 DQ2 DQ11 RFU DQ5 K3 K8K4 K5 K6 K7 RFU RFU RFU RFU RFU CLK RFU RFU RFU RFU B3 B4 B5 B6 B7 B8 RFU RFU V CC RFU RFU RFU L3 L4 L5 L6 L7 L8 B2 B9 C9C2 K2 K9 L9L2 AVD# RFU RFU RFU RFU WP# RFU RFU A1 A10 M1 M10 NCNC NCNC S29WS128J-MCP Compatible 84-ball Fine-Pitch Ball Grid Array (Top View, Balls Facing Down)

10 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Amax-A0 = Address inputs DQ15-DQ0 = Data input/output CE# = Chip Enable input. Asynchronous relative to CLK for the Burst mode. OE# = Output Enable input. Asynchronous relative to CLK for the Burst mode. WE# = Write Enable input. VCC = Device Power Supply (1.65 – 1.95 V). VSS = Ground NC = No Connect; not connected internally RDY = Ready output; In Synchronous Mode, indicates the status of the Burst read. Low = data not valid at expected time. High = data valid. In Asynchronous Mode, indicates the status of the internal program and erase function. Low = program/erase in progress. High Impedance = program/erase completed. CLK = CLK is not required in asynchronous mode. In burst mode, after the initial word is output, subsequent active edges of CLK increment the internal address counter. AVD# = Address Valid input. Indicates to device that the valid address is present on the address inputs (Amax-A0). Low = for asynchronous mode, indicates valid address; for burst mode, causes starting address to be latched. High = device ignores address inputs RESET# = Hardware reset input. Low = device resets and returns to reading array data WP# = Hardware write protect input. At V IL, disables program and erase functions in the four outermost sectors. Should be at V IH for all other conditions. ACC = At V HH, accelerates programming; automatically places device in unlock bypass mode. At VIL, locks all sectors. Should be at VIH for all other conditions. Note: 1. Amax = A22 (WS128J), A21 (WS064J).

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 11 Data Sheet Logic Symbol max*+1 DQ15–DQ0 Amax–A0 CE# OE# WE# RESET# CLK RDY AVD# WP# ACC *Max = 22 for the WS128J and 21 for the WS064J.

12 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Ordering Information

The order number (Valid Combination) is formed by the following: Packing Type 0 =T r a y 2 =7 ” T a p e & R e e l 3 = 13” Tape & Ree Additional Ordering Options 00 : Die Revision 0, Dual Boot Protection 01 : Die Revision 0, None Boot Protection 10 : Die Revision 1, Dual Boot Protection 11 : Die Revision 1, None Boot Protection Temperature Grade W = Wireless (-25 to + 85 °C) I = Industrial (-40 to + 85 °C) Package Material Set (BGA Package Type) A = Lead (Pb)-Free Compliant Package F = Standard Lead (Pb)-Free Package Package Type B = BGA Package Speed Option 0S = 80 MHz (WS064J only) 0P = 66 MHz Process Technology J = 110 nm Floating Gate Technology Density Flash density 128 = 128 Mb 064 = 64 Mb Core Voltage S = 1.8-volt VCC Flash Interface and Simultaneous Read/Write W = Burst, Simultaneous Read/Write Product Series 29 = Sector Erase NOR Flash memory Prefix S = Spansion™

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 13 Data Sheet

128 Mb Products based on 110 nm Floating Gate T echnology

64 Mb Products based on 110 nm Floating Gate T echnology

Valid Combination configuration planned to be supported for this device. Notes: 1.80 MHz operation has a different Vcc(+1.70V to 1.95V). Valid Combinations for FBGA Packages Package Marking Te m p e r a t u r eBurst Speed Boot Protect Package Material Set Package Type S29WS128J0PBAW00 WS128J0PBAW00 (-25 - +85 °C)

66 MHz

Lead (Pb)- Free Compliant Package 84 - ball 8mm x 11.6mm MCP Compatible S29WS128J0PBAW01 WS128J0PBAW01 None S29WS128J0PBAW10 WS128J0PBAW10 Dual S29WS128J0PBAW11 WS128J0PBAW11 None S29WS128J0PBAI10 WS128J0PBAI10 (-40 - +85 °C) Dual S29WS128J0PBAI11 WS128J0PBAI11 None S29WS128J0PBFW00 WS128J0PBFW00 (-25 - +85 °C) Dual Standard Lead (Pb)- Free Package S29WS128J0PBFW01 WS128J0PBFW01 None S29WS128J0PBFW10 WS128J0PBFW10 Dual S29WS128J0PBFW11 WS128J0PBFW11 None S29WS128J0PBFI10 WS128J0PBFI10 (-40 - +85 °C) Dual S29WS128J0PBFI11 WS128J0PBFI11 None Valid Combinations for FBGA Packages Package Marking Te m p e r a t u r e Burst Speed Boot Protect Package Material Set Package Type S29WS064J0PBAW00 WS064J0PBAW00 (-25 - +85 °C) 66 MHz Dual Lead (Pb)- Free Compliant Package 80 - ball 7mm x 9mm MCP Compatible S29WS064J0SBAW00 WS064J0SBAW00 (-25 - +85 °C) 80 MHz S29WS064J0PBAW01 WS064J0PBAW01 (-25 - +85 °C) 66 MHz NoneS29WS064J0SBAW01 WS064J0SBAW01 (-25 - +85 °C) 80 MHz S29WS064J0PBFW00 WS064J0PBFW00 (-25 - +85 °C) 66 MHz Dual Standard Lead (Pb)- Free Package S29WS064J0SBFW00 WS064J0SBFW00 (-25 - +85 °C) 80 MHz S29WS064J0PBFW01 WS064J0PBFW01 (-25 - +85 °C) 66 MHz NoneS29WS064J0SBFW01 WS064J0SBFW01 (-25 - +85 °C) 80 MHz

14 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

This section describes the requirements and use of the device bus operations, which are initiated through the internal command register. The command register itself does not occupy any addres- sable memory location. The register is composed of latches that store the commands, along with the address and data information needed to execute the command. The contents of the register serve as inputs to the internal state machine. The state machine outputs dictate the function of the device. Table 1 lists the device bus operations, the inputs and control levels they require, and the resulting output. The following subsections describe each of these operations in further detail. Ta bl e 1. Device Bus Operations Legend: L = Logic 0, H = Logic 1, X = Don’t Care Note: Default active edge of CLK is the rising edge. Requirements for Asynchronous ReadOperation (Non-Burst) To read data from the memory array, the system must first assert a valid address on Amax– A0(A22-A0 for WS128J and A21-A0 for WS064J), while driving AVD# and CE# to VIL. WE# should remain at VIH. The rising edge of AVD# latches the address. The data will appear on DQ15–DQ0. Since the memory array is divided into four banks, each bank remains enabled for read access until the command register contents are altered. Address access time (tACC) is equal to the delay from stable addresses to valid output data. The chip enable access time (tCE) is the delay from the stable addresses and stable CE# to valid data at the outputs. The output enable access time (tOE) is the delay from the falling edge of OE# to valid data at the output. The internal state machine is set for reading array data in asynchronous mode upon device power-up, or after a hardware reset. This ensures that no spurious alteration of the memory con tent occurs during the power transition. Requirements for Synchronous (Burst) Read Operation The device is capable of continuous sequential burst operation and linear burst operation of a pre- set length. When the device first powers up, it is enabled for asynchronous read operation. Operation CE# OE# WE# A22–0 DQ15–0 RESET# CLK (See Note) AVD# Asynchronous Read - Addresses Latched L L H Addr In I/O H X Asynchronous Read - Addresses Steady State L L H Addr In I/O H X L Asynchronous Write L H L Addr In I/O H X L Synchronous Write L H L Addr In I/O H Standby (CE#) HXX H I G H Z H I G H Z H X X Hardware Reset XXX H I G H Z H I G H Z L X X Burst Read Operations Load Starting Burst Address L X H Addr In X H Advance Burst to next address with appropriate Data presented on the Data Bus LLH H I G H Z Burst Data Out HH Terminate current Burst read cycle HXH H I G H Z H I G H Z H X Terminate current Burst read cycle via RESET# XXH H I G H Z H I G H Z L X X Terminate current Burst read cycle and start new Burst read cycle LXH H I G H Z I / O H

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 15 Data Sheet Prior to entering burst mode, the system should determine how many wait states are desired for the initial word (tIACC) of each burst access, what mode of burst operation is desired, which edge of the clock will be the active clock edge, and how the RDY signal will transition with valid data. The system would then write the configuration register command sequence. See “Set Configura- tion Register Command Sequence” section on page 47 and “Command Definitions” section on page 46 for further details. Once the system has written the “Set Configuration Register” command sequence, the device is enabled for synchronous reads only. The initial word is output tIACC after the active edge of the first CLK cycle. Subsequent words are output tBACC after the active edge of each successive clock cycle, which automatically increments the internal address counter. Note that the device has a fixed internal address boundary that oc- curs every 64 words, starting at address 00003Fh. During the time the device is outputting data at this fixed internal address boundary (address 00003Fh, 00007Fh, 0000BFh, etc.), a two cycle latency (WS128J/064J model numbers 00 and 01) or a three cycle latency (WS128J model numbers 10 and 11) occurs before data appears for the next address (address 000040h, 000080h, 0000C0h, etc.). Additionally, when the device is read from an o dd address, one wait state is inserted when the address pointer crosses the first boundary that occurs every 16 words. For instance, if the device is read from 000011h, 000013h, … ,00001Fh (odd), one wait state is inserted before the data of 000020h is output. This wait is inserted only at the boundary of the first 16 words. Then, if the device is read from the odd address within the last 16 words of 64 word boundary (address 000031h,000033h, … , 00003Fh), a three-cycle latency occurs before data appears for the next address (address 000040h). During the boundary crossing condition, the system must assert an additional wait state for WS128J model numbers 10 and 11. The RDY output indicates this condition to the system by pulsing deactive (low). See Figure 35, “Latency with Boundary Crossing,” on page 89. The device will continue to output sequential burst data, wrapping around to address 000000h after it reaches the highest addressable memory location, until the system drives CE# high, RE SET# low, or AVD# low in conjunction with a new address. See Table 1, “Device Bus Operations,” on page 14. If the host system crosses the bank boundary while reading in burst mode, and the device is not programming or erasing, a two-cycle latency will occur as described above in the subsequent bank. If the host system crosses the bank boundary while the device is programming or erasing, the device will provide read status information. The clock will be ignored. After the host has com pleted status reads, or the device has completed the program or erase operation, the host can restart a burst operation using a new address and AVD# pulse. 8-, 16-, and 32-Word Linear Burst with Wrap Around The remaining three burst read modes are of the linear wrap around design, in which a fixed num- ber of words are read from consecutive addresses. In each of these modes, the burst addresses read are determined by the group within which the starting address falls. The groups are sized according to the number of words read in a single burst sequence for a given mode (see Table 2.) Ta bl e 2 . Burst Address Groups Mode Group Size Group Address Ranges 8-word 8 words 0-7h, 8-Fh, 10-17h,... 16-word 16 words 0-Fh, 10-1Fh, 20-2Fh,... 32-word 32 words 00-1Fh, 20-3Fh, 40-5Fh,...

16 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

As an example: if the starting address in the 8-word mode is 39h, the address range to be read would be 38-3Fh, and the burst sequence would be 39-3A-3B-3C-3D-3E-3F-38h-etc. The burst sequence begins with the starting address written to the device, but wraps back to the first ad dress in the selected group. In a similar fashion, the 16-word and 32-word Linear Wrap modes begin their burst sequence on the starting address written to the device, and then wrap back to the first address in the selected address group. Note that in these three burst read modes the address pointer does not cross the boundary that occurs every 128 or 64 words; thus, no wait states are inserted (except during the initial access). The RDY pin indicates when data is valid on the bus. Configuration Register The device uses a configuration register to set the various burst parameters: number of wait states, burst read mode, active clock edge, RDY configuration, and synchronous mode active. Handshaking The device is equipped with a handshaking feature that allows the host system to simply monitor the RDY signal from the device to determine when the initial word of burst data is ready to be read. The host system should use the programmable wait state configuration to set the number of wait states for optimal burst mode operation. The initial word of burst data is indicated by the active edge of RDY after OE# goes low. For optimal burst mode performance, the host system must set the appropriate number of wait states in the flash device depending on clock frequency. See “Set Configuration Register Com- mand Sequence” section on page 47 for more information. Simultaneous Read/Write Operations with Zero Latency This device is capable of reading data from one bank of memory while programming or erasing in another bank of memory. An erase operation may also be suspended to read from or program to another location within the same bank (except the sector being erased). Figure 38, “Back-to- Back Read/Write Cycle Timings,” on page 92 shows how read and write cycles may be initiated for simultaneous operation with zero latency. Refer to the DC Characteristics table for read-while- program and read-while-erase current specifications. Writing Commands/Command Sequences The device has the capability of performing an asynchronous or synchronous write operation. While the device is configured in Asynchronous read mode, it is able to perform Asynchronous write operations only. CLK is ignored in the Asynchronous programming mode. When in the Syn chronous read mode configuration, the device is able to perform both Asynchronous and Synchronous write operations. CLK and WE# address latch is supported in the Synchronous pro- gramming mode. During a synchronous write operation, to write a command or command sequence (which includes programming data to the device and erasing sectors of memory), the system must drive AVD# and CE# to V IL, and OE# to VIH when providing an address to the de- vice, and drive WE# and CE# to VIL, and OE# to VIH. when writing commands or data. During an asynchronous write operation, the system must drive CE# and WE# to VIL and OE# to VIH when providing an address, command, and data. Addresses are latched on the last falling edge of WE# or CE#, while data is latched on the 1st rising edge of WE# or CE#. The asynchronous and syn chronous programing operation is independent of the Set Device Read Mode bit in the Configuration Register (see Table 17, “Configuration Register,” on page 51). The device features an Unlock Bypass mode to facilitate faster programming. Once the device en- ters the Unlock Bypass mode, only two write cycl es are required to program a word, instead of four.

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 17 Data Sheet An erase operation can erase one sector, multiple sectors, or the entire device. Table 12, “WS128J Sector Address Table,” on page 33 and Table 13, “WS064J Sector Address Table,” on page 41 in- dicate the address space that each sector occupies. The device address space is divided into four banks. A “bank address” is the address bits required to uniquely select a bank. Similarly, a “sector address” is the address bits required to uniquely select a sector. ICC2 in the “DC Characteristics” section on page 70 represents the active current specification for the write mode. The AC Characteristics section contains timing specification tables and timing di- agrams for write operations. Accelerated Program Operation The device offers accelerated program operations through the ACC function. ACC is primarily in- tended to allow faster manufacturing throughput at the factory. If the system asserts VHH on this input, the device automatically enters the aforementioned Un- lock Bypass mode and uses the higher voltage on the input to reduce the time required for program operations. The system would use a two-cycle program command sequence as required by the Unlock Bypass mode. Removing V HH from the ACC input returns the device to normal op- eration. Note that sectors must be unlocked prior to raising ACC to V HH. Note that the ACC pin must not be at VHH for operations other than accelerated programming, or device damage may result. In addition, the ACC pin must not be left floating or unconnected; inconsistent behavior of the device may result. When at VIL, ACC locks all sectors. ACC should be at VIH for all other conditions. Autoselect Mode The autoselect mode provides manufacturer and device identification, and sector protection ver- ification, through identifier codes output from the internal register (which is separate from the memory array) on DQ15–DQ0. This mode is pr imarily intended for programming equipment to automatically match a device to be programmed with its corresponding programming algorithm. However, the autoselect codes can also be accessed in-system through the command register. When using programming equipment, the autoselect mode requires V ID on address pin A9. Ad - dress pins must be as shown in Table 3, “Autoselect Codes (High Voltage Method),” on page 18. In addition, when verifying sector protection, the sector address must appear on the appropriate highest order address bits (see Table , “,” on page 18 and Table , “,” on page 21). Table 3 shows the remaining address bits that are don’t care. When all necessary bits have been set as re - quired, the programming equipment may then read the corresponding identifier code on DQ15– DQ0. However, the autoselect codes can also be accessed in-system through the command reg ister, for instances when the device is erased or programmed in a system without access to high voltage on the A9 pin. The command sequence is illustrated in Table 18, “Command Definitions,” on page 60. Note that if a Bank Address (BA) on address bits A22, A21, and A20 for the WS128J (A21:A19 for the WS064J) is asserted during the third write cycle of the autoselect command, the host system can read autoselect data that bank and then immediately read array data from the other bank, without exiting the autoselect mode. To access the autoselect codes in-system, the host system can issue the autoselect command via the command register, as shown in Table 18, “Command Definitions,” on page 60. This method does not require VID. Autoselect mode may only be entered and used when in the asyn- chronous read mode. Refer to the “Autoselect Command Sequence” section on page 51 for more information.

18 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Ta b le 3 . Autoselect Codes (High Voltage Method) Legend: L = Logic Low = VIL, H = Logic High = VIH, BA = Bank Address, SA = Sector Address, X = Don’t care. Notes: 1. The autoselect codes may also be accessed in-system via command sequences. 2. PPB Protection Status is shown on the data bus Sector/Sector Block Protection and Unprotection The hardware sector protection feature disables both programming and erase operations in any sector. The hardware sector unprotection feature re-enables both program and erase operations in previously protected sectors. Sector protection/unprotection can be implemented via two methods. (Note: For the following discussion, the term “sector” applies to both sectors and sector blocks. A sector block consists of two or more adjacent sectors that are protected or unprotected at the same time (see Table , “,” on page 18 and Table , “,” on page 21).) Description CE# OE# WE# RESET# Amax to A12 A11 to A10 A9 A8 A7 A6 to A4 A3 A2 A1 A0 DQ15 to DQ0 Manufacturer ID: Spansion L L H H X X VID X X L X L L L L 0001h Device ID Read Cycle 1 L L H H X X VID X L L L L L L H 227Eh Read Cycle 2 H H H L 2218h (WS128J) 221Eh (WS064J) Read Cycle 3 H H H H 2200h (WS128J) 2201h (WS064J) Sector Protection Verification L L H H SA X VID X L L L L L H L 0001h (protected), 0000h (unprotected) Indicator Bits L L H H X X VID X X L X L L H H DQ15 - DQ8 = 0 DQ7 - Factory Lock Bit 1 = Locked, 0 = Not Locked DQ6 -Customer Lock Bit 1 = Locked, 0 = Not Locked DQ5 = Handshake Bit 1 = Reserved, 0 = Standard Handshake DQ4 & DQ3 - Boot Code DQ2 - DQ0 = 001 Hardware Sector Group Protection L L H H SA X VID X X X L L L H L 0001h (protected), 0000h (unprotected) Ta bl e 4 . S29WS128J/064J Boot Sector/Sector Bloc k Addresses for Protection/Unprotection (Sheet 1 of 3) Sector A22–A12 Sector/ Sector Block Size SA0 00000000000 4 Kwords SA1 00000000001 4 Kwords SA2 00000000010 4 Kwords SA3 00000000011 4 Kwords SA4 00000000100 4 Kwords SA5 00000000101 4 Kwords SA6 00000000110 4 Kwords SA7 00000000111 4 Kwords SA8 00000001XXX, 32 Kwords SA9 00000010XXX, 32 Kwords SA10 00000011XXX, 32 Kwords

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 19 Data Sheet SA11–SA14 000001XXXXX 128 (4x32) Kwords SA15–SA18 000010XXXXX 128 (4x32) Kwords SA19–SA22 000011XXXXX 128 (4x32) Kwords SA23-SA26 000100XXXXX 128 (4x32) Kwords SA27-SA30 000101XXXXX 128 (4x32) Kwords SA31-SA34 000110XXXXX 128 (4x32) Kwords SA35-SA38 000111XXXXX 128 (4x32) Kwords SA39-SA42 001000XXXXX 128 (4x32) Kwords SA43-SA46 001001XXXXX 128 (4x32) Kwords SA47-SA50 001010XXXXX 128 (4x32) Kwords SA51–SA54 001011XXXXX 128 (4x32) Kwords SA55–SA58 001100XXXXX 128 (4x32) Kwords SA59–SA62 001101XXXXX 128 (4x32) Kwords SA63–SA66 001110XXXXX 128 (4x32) Kwords SA67–SA70 001111XXXXX 128 (4x32) Kwords SA71–SA74 010000XXXXX 128 (4x32) Kwords SA75–SA78 010001XXXXX 128 (4x32) Kwords SA79–SA82 010010XXXXX 128 (4x32) Kwords SA83–SA86 010011XXXXX 128 (4x32) Kwords SA87–SA90 010100XXXXX 128 (4x32) Kwords SA91–SA94 010101XXXXX 128 (4x32) Kwords SA95–SA98 010110XXXXX 128 (4x32) Kwords SA99–SA102 010111XXXXX 128 (4x32) Kwords SA103–SA106 011000XXXXX 128 (4x32) Kwords SA107–SA110 011001XXXXX 128 (4x32) Kwords SA111–SA114 011010XXXXX 128 (4x32) Kwords SA115–SA118 011011XXXXX 128 (4x32) Kwords SA119–SA122 011100XXXXX 128 (4x32) Kwords SA123–SA126 011101XXXXX 128 (4x32) Kwords SA127–SA130 011110XXXXX 128 (4x32) Kwords SA131-SA134 011111XXXXX 128 (4x32) Kwords SA135-SA138 100000XXXXX 128 (4x32) Kwords SA139-SA142 100001XXXXX 128 (4x32) Kwords SA143-SA146 100010XXXXX 128 (4x32) Kwords SA147-SA150 100011XXXXX 128 (4x32) Kwords SA151–SA154 100100XXXXX 128 (4x32) Kwords SA155–SA158 100101XXXXX 128 (4x32) Kwords SA159–SA162 100110XXXXX 128 (4x32) Kwords SA163–SA166 100111XXXXX 128 (4x32) Kwords T able 4. S29WS128J/064J Boot Sector/Sector Block Ad dresses for Protection/Unprotection (Sheet 2 of 3) Sector A22–A12 Sector/ Sector Block Size

20 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA167–SA170 101000XXXXX 128 (4x32) Kwords SA171–SA174 101001XXXXX 128 (4x32) Kwords SA175–SA178 101010XXXXX 128 (4x32) Kwords SA179–SA182 101011XXXXX 128 (4x32) Kwords SA183–SA186 101100XXXXX 128 (4x32) Kwords SA187–SA190 101101XXXXX 128 (4x32) Kwords SA191–SA194 101110XXXXX 128 (4x32) Kwords SA195–SA198 101111XXXXX 128 (4x32) Kwords SA199–SA202 110000XXXXX 128 (4x32) Kwords SA203–SA206 110001XXXXX 128 (4x32) Kwords SA207–SA210 110010XXXXX 128 (4x32) Kwords SA211–SA214 110011XXXXX 128 (4x32) Kwords SA215–SA218 110100XXXXX 128 (4x32) Kwords SA219–SA222 110101XXXXX 128 (4x32) Kwords SA223–SA226 110110XXXXX 128 (4x32) Kwords SA227–SA230 110111XXXXX 128 (4x32) Kwords SA231–SA234 111000XXXXX 128 (4x32) Kwords SA235–SA238 111001XXXXX 128 (4x32) Kwords SA239–SA242 111010XXXXX 128 (4x32) Kwords SA243–SA246 111011XXXXX 128 (4x32) Kwords SA247–SA250 111100XXXXX 128 (4x32) Kwords SA251–SA254 111101XXXXX 128 (4x32) Kwords SA255–SA258 111110XXXXX 128 (4x32) Kwords SA259 11111100XXX 32 Kwords SA260 11111101XXX 32 Kwords SA261 11111110XXX 32 Kwords SA262 11111111000 4 Kwords SA263 11111111001 4 Kwords SA264 11111111010 4 Kwords SA265 11111111011 4 Kwords SA266 11111111100 4 Kwords SA267 11111111101 4 Kwords SA268 11111111110 4 Kwords SA269 11111111111 4 Kwords T able 4. S29WS128J/064J Boot Sector/Sector Block Ad dresses for Protection/Unprotection (Sheet 3 of 3) Sector A22–A12 Sector/ Sector Block Size

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 21 Data Sheet Ta bl e 5 . S29WS064J Boot Sector/Sector Block Addresses for Protection/Unprotection (Sheet 1 of 2) Sector A21–A12 Sector/ Sector Block Size SA0 0000000000 4 Kwords SA1 0000000001 4 Kwords SA2 0000000010 4 Kwords SA3 0000000011 4 Kwords SA4 0000000100 4 Kwords SA5 0000000101 4 Kwords SA6 0000000110 4 Kwords SA7 0000000111 4 Kwords SA8 0000001XXX 32 Kwords SA9 0000010XXX 32 Kwords SA10 0000011XXX 32 Kwords SA11–SA14 00001XXXXX 128 (4x32) Kwords SA15–SA18 00010XXXXX 128 (4x32) Kwords SA19–SA22 00011XXXXX 128 (4x32) Kwords SA23-SA26 00100XXXXX 128 (4x32) Kwords SA27-SA30 00101XXXXX 128 (4x32) Kwords SA31-SA34 00110XXXXX 128 (4x32) Kwords SA35-SA38 00111XXXXX 128 (4x32) Kwords SA39-SA42 01000XXXXX 128 (4x32) Kwords SA43-SA46 01001XXXXX 128 (4x32) Kwords SA47-SA50 01010XXXXX 128 (4x32) Kwords SA51–SA54 01011XXXXX 128 (4x32) Kwords SA55–SA58 01100XXXXX 128 (4x32) Kwords SA59–SA62 01101XXXXX 128 (4x32) Kwords SA63–SA66 01110XXXXX 128 (4x32) Kwords SA67–SA70 01111XXXXX 128 (4x32) Kwords SA71–SA74 10000XXXXX 128 (4x32) Kwords SA75–SA78 10001XXXXX 128 (4x32) Kwords SA79–SA82 10010XXXXX 128 (4x32) Kwords SA83–SA86 10011XXXXX 128 (4x32) Kwords SA87–SA90 10100XXXXX 128 (4x32) Kwords SA91–SA94 10101XXXXX 128 (4x32) Kwords SA95–SA98 10110XXXXX 128 (4x32) Kwords SA99–SA102 10111XXXXX 128 (4x32) Kwords SA103–SA106 11000XXXXX 128 (4x32) Kwords SA107–SA110 11001XXXXX 128 (4x32) Kwords SA111–SA114 11010XXXXX 128 (4x32) Kwords SA115–SA118 11011XXXXX 128 (4x32) Kwords SA119–SA122 11100XXXXX 128 (4x32) Kwords

22 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA123–SA126 11101XXXXX 128 (4x32) Kwords SA127–SA130 11110XXXXX 128 (4x32) Kwords SA131 1111100XXX 32 Kwords SA132 1111101XXX 32 Kwords SA133 1111110XXX 32 Kwords SA134 1111111000 4 Kwords SA135 1111111001 4 Kwords SA136 1111111010 4 Kwords SA137 1111111011 4 Kwords SA138 1111111100 4 Kwords SA139 1111111101 4 Kwords SA140 1111111110 4 Kwords SA141 1111111111 4 Kwords T able 5. S29WS064J Boot Sector/Sector Block Addres ses for Protection/Unprotection (Sheet 2 of 2) Sector A21–A12 Sector/ Sector Block Size

24 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

As shipped from the factory, all devices default to the persistent mode when power is applied, and all sectors are unprotected, unless otherwise chosen through the DYB ordering option. The device programmer or host system must then choose which sector protection method to use. Program ming (setting to “0”) any one of the following two one-time programmable, non-volatile bits locks the part permanently in that mode: „ Lock Register Persistent Protection Mode Lock Bit (DQ1) „ Lock Register Password Protection Mode Lock Bit (DQ2) Ta b l e 6 . Lock Register Notes 1. If the password mode is chosen, the password must be programmed before setting the cor- responding lock register bit. 2. After the Lock Register Bits Command Set Entry command sequence is written, reads and writes for Bank 0 are disabled, while reads from other banks are allowed until exiting this mode. 3. If both lock bits are selected to be programmed (to zeros) at the same time, the operation aborts. 4. Once the Password Mode Lock Bit is programmed, the Persistent Mode Lock Bit is permanently disabled, and no changes to the protection scheme are allowed. Similarly, if the Persistent Mode Lock Bit is programmed, the Password Mode is permanently disabled. After selecting a sector protection method, each sector can operate in any of the following three states: 1. Constantly locked. The selected sectors are protected and can not be reprogrammed unless PPB lock bit is cleared via a password, hardware reset, or power cycle. 2. Dynamically locked. The selected sectors are protected and can be altered via software com- mands. 3. Unlocked. The sectors are unprotected and can be erased and/or programmed. These states are controlled by the bit types described in Sections –. Persistent Protection Bits The Persistent Protection Bits are unique and nonvolatile for each sector and have the same en- durances as the Flash memory. Preprogramming and verification prior to erasure are handled by the device, and therefore do not require system monitoring. Notes 1. Each PPB is individually programmed and all are erased in parallel. 2. While programming PPB for a sector, array data can be read from any other bank, except Bank 0 (used for Data# Polling) and the bank in which sector PPB is being programmed. 3. Entry command disables reads and writes for the bank selected. 4. Reads within that bank return the PPB status for that sector. 5. Reads from other banks are allowed while writes are not allowed. Device DQ15-05 DQ4 DQ3 DQ2 DQ1 DQ0 S29WS256N 1 1 1 Password Protection Mode Lock Bit Persistent Protection Mode Lock Bit Customer SecSi Sector Protection Bit S29WS128N/ S29WS064N Undefined DYB Lock Boot Bit 0 = sectors power up protected 1 = sectors power up unprotected PPB One-Time Programmable Bit 0 = All PPB erase command disabled 1 = All PPB Erase command enabled Password Protection Mode Lock Bit Persistent Protection Mode Lock Bit SecSi Sector Protection Bit

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 25 Data Sheet 6. All Reads must be performed using the Asynchronous mode. 7. The specific sector address (A23-A14 WS256N, A22-A14 WS128N, A21-A14 WS064N) are written at the same time as the program command. 8. If the PPB Lock Bit is set, the PPB Program or erase command does not execute and times- out without programming or erasing the PPB. 9. There are no means for individually erasing a specific PPB and no specific sector address is required for this operation. 10.Exit command must be issued after the execution which resets the device to read mode and re-enables reads and writes for Bank 0 11.The programming state of the PPB for a given sector can be verified by writing a PPB Status Read Command to the device as described by the flow chart shown in Figure 2.

26 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Figure 2. PPB Program/Erase Algorithm Dynamic Protection Bits are volatile and unique for each sector and can be individually modified.

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 27 Data Sheet Notes 1. The DYBs can be set (programmed to “0”) or cleared (erased to “1”) as often as needed. When the parts are first shipped, the PPBs are cleared (erased to “1”) and upon power up or reset, the DYBs can be set or cleared depending upon the ordering option chosen. 2. If the option to clear the DYBs after power up is chosen, (erased to “1”), then the sectorsmay be modified depending upon the PPB state of that sector (see Table 7). 3. The sectors would be in the protected state If the option to set the DYBs after power up is chosen (programmed to “0”). 4. It is possible to have sectors that are persistently locked with sectors that are left in the dy- namic state. 5. The DYB Set or Clear commands for the dynamic sectors signify protected or unprotected state of the sectors respectively. However, if there is a need to change the status of the per- sistently locked sectors, a few more steps are required. First, the PPB Lock Bit must be cleared by either putting the device through a power-cycle, or hardware reset. The PPBs can then be changed to reflect the desired settings. Setting the PPB Lock Bit once again locks the PPBs, and the device operates normally again. 6. To achieve the best protection, it is recommended to execute the PPB Lock Bit Set command early in the boot code and protect the boot code by holding WP# = V IL. Note that the PPB and DYB bits have the same function when ACC = V HH as they do when ACC =VIH. Persistent Protection Bit Lock Bit The Persistent Protection Bit Lock Bit is a global volatile bit for all sectors. When set (programmed to “0”), it locks all PPBs and when cleared (programmed to “1”), allows the PPBs to be changed. There is only one PPB Lock Bit per device. Notes 1. No software command sequence unlocks this bit unless the device is in the password protec- tion mode; only a hardware reset or a power-up clears this bit. 2. The PPB Lock Bit must be set (programmed to “0”) only after all PPBs are configured to the desired settings. Password Protection Method The Password Protection Method allows an even higher level of security than the Persistent Sector Protection Mode by requiring a 64 bit password for unlocking the device PPB Lock Bit. In addition to this password requirement, after power up and reset, the PPB Lock Bit is set “0” to maintain the password mode of operation. Successful execution of the Password Unlock command by en tering the entire password clears the PPB Lock Bit, allowing for sector PPBs modifications. Notes 1. There is no special addressing order requir ed for programming the password. Once the Pass- word is written and verified, the Password Mode Locking Bit must be set in order to prevent access. 2. The Password Program Command is only capable of programming “0”s. Programming a “1” after a cell is programmed as a “0” results in a time-out with the cell as a “0”. 3. The password is all “1”s when shipped from the factory. 4. All 64-bit password combinations are valid as a password. 5. There is no means to verify what the password is after it is set. 6. The Password Mode Lock Bit, once set, prevents reading the 64-bit password on the data bus and further password programming. 7. The Password Mode Lock Bit is not erasable. 8. The lower two address bits (A1–A0) are valid during the Password Read, Password Program, and Password Unlock. 9. The exact password must be entered in order for the unlocking function to occur.

28 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

12.Password verification is only allowed during the password programming operation. 13.All further commands to the password region are disabled and all operations are ignored. and writes for Bank 0. Reads and writes for other banks excluding Bank 0 are allowed. mode without having modified the contents of the protected sector. individual status read commands DYB Status, PPB Status, and PPB Lock Status to the device. Figure 3. Lock Register Program Algorithm Device returns to reading array.

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 29 Data Sheet Advanced Sector Protection Software Examples Table 7 contains all possible combinations of the DYB, PPB, and PPB Lock Bit relating to the status of the sector. In summary, if the PPB Lock Bit is locked (set to “0”), no changes to the PPBs are allowed. The PPB Lock Bit can only be unlocked (reset to “1”) through a hardware reset or power cycle. See also Figure 1 for an overview of the Advanced Sector Protection feature. Hardware Data Protection Methods The device offers two main types of data protection at the sector level via hardware control: „ When WP# is at VIL, the four outermost sectors are locked (device specific). „ When ACC is at VIL, all sectors are locked. There are additional methods by which intended or accidental erasure of any sectors can be pre- vented via hardware means. The following subsections describes these methods: WP# Method The Write Protect feature provides a hardware method of protecting the four outermost sectors. This function is provided by the WP# pin and overrides the previously discussed Sector Protec - tion/Unprotection method. If the system asserts VIL on the WP# pin, the device disables program and erase functions in the “outermost” boot sectors. The outermost boot sectors are the sectors containing both the lower and upper set of sectors in a dual-boot-configured device. If the system asserts V IH on the WP# pin, the device reverts to whether the boot sectors were last set to be protected or unprotected. That is, sector protection or unprotection for these sectors depends on whether they were last protected or unprotected. Note that the WP# pin must not be left floating or unconnected as inconsistent behavior of the device may result. The WP# pin must be held stable during a command sequence execution ACC Method This method is similar to above, except it protects all sectors. Once ACC input is set to V IL, all program and erase functions are disabled and hence all sectors are protected. Low VCC Write Inhibit When VCC is less than VLKO, the device does not accept any write cycles. This protects data during VCC power-up and power-down. Ta bl e 7 . Sector Protection Schemes Unique Device PPB Lock Bit 0 = locked 1 = unlocked Sector PPB 0 = protected 1 = unprotected Sector DYB 0 = protected 1 = unprotected Sector Protection Status Any Sector 0 0 x Protected through PPB Any Sector 0 0 x Protected through PPB Any Sector 0 1 1 Unprotected Any Sector 0 1 0 Protected through DYB Any Sector 1 0 x Protected through PPB Any Sector 1 0 x Protected through PPB Any Sector 1 1 0 Protected through DYB Any Sector 1 1 1 Unprotected

30 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

The command register and all internal program/erase circuits are disabled, and the device resets to reading array data. Subsequent writes are ignored until VCC is greater than VLKO. The system must provide the proper signals to the control inputs to prevent unintentional writes when VCC is greater than VLKO. Write Pulse “Glitch Protection” Noise pulses of less than 3 ns (typical) on OE#, CE# or WE# do not initiate a write cycle. Power-Up Write Inhibit If WE# = CE# = RESET# = VIL and OE# = VIH during power up, the device does not accept com- mands on the rising edge of WE#. The internal state machine is automatically reset to the read mode on power-up. Common Flash Memory Interface (CFI) The Common Flash Interface (CFI) specification outlines device and host system software inter- rogation handshake, which allows specific vendor-specified software algorithms to be used for entire families of devices. Software support can then be device-independent, JEDEC ID-indepen dent, and forward- and backward-compatible for the specified flash device families. Flash vendors can standardize their existing interfaces for long-term compatibility. This device enters the CFI Query mode when the system writes the CFI Query command, 98h, to address 55h any time the device is ready to read array data. The system can read CFI information at the addresses given in Tables 8-11. To terminate reading CFI data, the system must write the reset command. The system can also write the CFI query command when the device is in the autoselect mode. The device enters the CFI query mode, and the system can read CFI data at the addresses given in Tables 8-11. The system must write the reset command to return the device to the autoselect mode. Ta bl e 8 . CFI Query Identification String Addresses Data Description 10h 11h 12h 0051h 0052h 0059h Query Unique ASCII string “QRY” 13h 14h 0002h 0000h Primary OEM Command Set 15h 16h 0040h 0000h Address for Primary Extended Table 17h 18h 0000h 0000h Alternate OEM Command Set (00h = none exists) 19h 1Ah 0000h 0000h Address for Alternate OEM Extended Table (00h = none exists)

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 31 Data Sheet Ta b l e 9 . System Interface String Ta bl e 1 0. Device Geometry Definition Addresses Data Description 1Bh 0017h VCC Min. (write/erase) D7–D4: volt, D3–D0: 100 millivolt 1Ch 0019h VCC Max. (write/erase) D7–D4: volt, D3–D0: 100 millivolt 1Dh 0000h VPP Min. voltage (00h = no VPP pin present) 1Eh 0000h VPP Max. voltage (00h = no VPP pin present) 1Fh 0003h Typical timeout per single byte/word write 2 N µs 20h 0000h Typical timeout for Min. size buffer write 2 N µs (00h = not supported) 21h 0009h Typical timeout per individual block erase 2 N ms 22h 0000h Typical timeout for full chip erase 2 N ms (00h = not supported) 23h 0004h Max. timeout for byte/word write 2 N times typical 24h 0000h Max. timeout for buffer write 2 N times typical 25h 0004h Max. timeout per individual block erase 2 N times typical 26h 0000h Max. timeout for full chip erase 2 N times typical (00h = not supported) Addresses Data Description 27h 0018h (WS128J) 0017h (WS064J) Device Size = 2 N byte 28h 29h 0001h 0000h Flash Device Interface description (refer to CFI publication 100) 2Ah 2Bh 0000h 0000h Max. number of bytes in multi-byte write = 2 N (00h = not supported) 2Ch 0003h Number of Erase Block Regions within device 2Dh 2Eh 2Fh 30h 0007h 0000h 0020h 0000h Erase Block Region 1 Information (refer to the CFI specification or CFI publication 100) 31h 00FDh (WS128J) 007Dh (WS064J) Erase Block Region 2 Information32h 33h 34h 0000h 0000h 0001h 35h 36h 37h 38h 0007h 0000h 0020h 0000h Erase Block Region 3 Information 39h 3Ah 3Bh 3Ch 0000h 0000h 0000h 0000h Erase Block Region 4 Information

32 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Ta bl e 11 . Primary Vendor-Specific Extended Query Addresses Data Description 40h 41h 42h 0050h 0052h 0049h Query-unique ASCII string “PRI” 43h 0031h Major version number, ASCII 44h 0033h Minor version number, ASCII 45h 000Ch Address Sensitive Unlock (Bits 1-0) 0 = Required, 1 = Not Required Silicon Technology (Bits 5-2) 0011 = 0.13 µm 46h 0002h Erase Suspend 0 = Not Supported, 1 = To Read Only, 2 = To Read & Write 47h 0001h Sector Protect 0 = Not Supported, X = Number of sectors in per group 48h 0001h Sector Temporary Unprotect 00 = Not Supported, 01 = Supported 49h 0007h Sector Protect/Unprotect scheme 07 = Advanced Sector Protection 4Ah 00E7h (WS128J) 0077h (WS064J) Simultaneous Operation Number of Sectors in all banks except boot block 4Bh 0001h Burst Mode Type 00 = Not Supported, 01 = Supported 4Ch 0000h Page Mode Type 00 = Not Supported, 01 = 4 Word Page, 02 = 8 Word Page, 04 = 16 Word Page 4Dh 00B5h ACC (Acceleration) Supply Minimum 00h = Not Supported, D7-D4: Volt, D3-D0: 100 mV 4Eh 00C5h ACC (Acceleration) Supply Maximum 00h = Not Supported, D7-D4: Volt, D3-D0: 100 mV 4Fh 0001h Top/Bottom Boot Sector Flag 01h = Dual Boot Device, 02h = Bottom Boot Device, 03h = Top Boot Device 50h 0000h Program Suspend. 00h = not supported 57h 0004h Bank Organization: X = Number of banks 58h 0027h (WS128J) 0017h (WS064J) Bank A Region Information. X = Number of sectors in bank 59h 0060h (WS128J) 0030h (WS064J) Bank B Region Information. X = Number of sectors in bank 5Ah 0060h (WS128J) 0030h (WS064J) Bank C Region Information. X = Number of sectors in bank 5Bh 0027h (WS128J) 0017h (WS064J) Bank D Region Information. X = Number of sectors in bank

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 33 Data Sheet Ta bl e 12 . WS128J Sector Address T able (Sheet 1 of 8) Bank Sector Sector Size (x16) Address Range Bank D SA0 4 Kwords 000000h-000FFFh SA1 4 Kwords 001000h-001FFFh SA2 4 Kwords 002000h-002FFFh SA3 4 Kwords 003000h-003FFFh SA4 4 Kwords 004000h-004FFFh SA5 4 Kwords 005000h-005FFFh SA6 4 Kwords 006000h-006FFFh SA7 4 Kwords 007000h-007FFFh SA8 32 Kwords 008000h-00FFFFh SA9 32 Kwords 010000h-017FFFh SA10 32 Kwords 018000h-01FFFFh SA11 32 Kwords 020000h-027FFFh SA12 32 Kwords 028000h-02FFFFh SA13 32 Kwords 030000h-037FFFh SA14 32 Kwords 038000h-03FFFFh SA15 32 Kwords 040000h-047FFFh SA16 32 Kwords 048000h-04FFFFh SA17 32 Kwords 050000h-057FFFh SA18 32 Kwords 058000h-05FFFFh SA19 32 Kwords 060000h-067FFFh SA20 32 Kwords 068000h-06FFFFh SA21 32 Kwords 070000h-077FFFh SA22 32 Kwords 078000h-07FFFFh SA23 32 Kwords 080000h-087FFFh SA24 32 Kwords 088000h-08FFFFh SA25 32 Kwords 090000h-097FFFh SA26 32 Kwords 098000h-09FFFFh SA27 32 Kwords 0A0000h-0A7FFFh SA28 32 Kwords 0A8000h-0AFFFFh SA29 32 Kwords 0B0000h-0B7FFFh SA30 32 Kwords 0B8000h-0BFFFFh SA31 32 Kwords 0C0000h-0C7FFFh SA32 32 Kwords 0C8000h-0CFFFFh SA33 32 Kwords 0D0000h-0D7FFFh SA34 32 Kwords 0D8000h-0DFFFFh SA35 32 Kwords 0E0000h-0E7FFFh SA36 32 Kwords 0E8000h-0EFFFFh SA37 32 Kwords 0F0000h-0F7FFFh SA38 32 Kwords 0F8000h-0FFFFFh

34 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA39 32 Kwords 100000h-107FFFh SA40 32 Kwords 108000h-10FFFFh SA41 32 Kwords 110000h-117FFFh SA42 32 Kwords 118000h-11FFFFh SA43 32 Kwords 120000h-127FFFh SA44 32 Kwords 128000h-12FFFFh SA45 32 Kwords 130000h-137FFFh SA46 32 Kwords 138000h-13FFFFh SA47 32 Kwords 140000h-147FFFh SA48 32 Kwords 148000h-14FFFFh SA49 32 Kwords 150000h-157FFFh SA50 32 Kwords 158000h-15FFFFh SA51 32 Kwords 160000h-167FFFh SA52 32 Kwords 168000h-16FFFFh SA53 32 Kwords 170000h-177FFFh SA54 32 Kwords 178000h-17FFFFh SA55 32 Kwords 180000h-187FFFh SA56 32 Kwords 188000h-18FFFFh SA57 32 Kwords 190000h-197FFFh SA58 32 Kwords 198000h-19FFFFh SA59 32 Kwords 1A0000h-1A7FFFh SA60 32 Kwords 1A8000h-1AFFFFh SA61 32 Kwords 1B0000h-1B7FFFh SA62 32 Kwords 1B8000h-1BFFFFh SA63 32 Kwords 1C0000h-1C7FFFh SA64 32 Kwords 1C8000h-1CFFFFh SA65 32 Kwords 1D0000h-1D7FFFh SA66 32 Kwords 1D8000h-1DFFFFh SA67 32 Kwords 1E0000h-1E7FFFh SA68 32 Kwords 1E8000h-1EFFFFh SA69 32 Kwords 1F0000h-1F7FFFh SA70 32 Kwords 1F8000h-1FFFFFh T able 12. WS128J Sector Address T able (Sheet 2 of 8) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 35 Data Sheet Bank C SA71 32 Kwords 200000h-207FFFh SA72 32 Kwords 208000h-20FFFFh SA73 32 Kwords 210000h-217FFFh SA74 32 Kwords 218000h-21FFFFh SA75 32 Kwords 220000h-227FFFh SA76 32 Kwords 228000h-22FFFFh SA77 32 Kwords 230000h-237FFFh SA78 32 Kwords 238000h-23FFFFh SA79 32 Kwords 240000h-247FFFh SA80 32 Kwords 248000h-24FFFFh SA81 32 Kwords 250000h-257FFFh SA82 32 Kwords 258000h-25FFFFh SA83 32 Kwords 260000h-267FFFh SA84 32 Kwords 268000h-26FFFFh SA85 32 Kwords 270000h-277FFFh SA86 32 Kwords 278000h-27FFFFh SA87 32 Kwords 280000h-287FFFh SA88 32 Kwords 288000h-28FFFFh SA89 32 Kwords 290000h-297FFFh SA90 32 Kwords 298000h-29FFFFh SA91 32 Kwords 2A0000h-2A7FFFh SA92 32 Kwords 2A8000h-2AFFFFh SA93 32 Kwords 2B0000h-2B7FFFh SA94 32 Kwords 2B8000h-2BFFFFh SA95 32 Kwords 2C0000h-2C7FFFh SA96 32 Kwords 2C8000h-2CFFFFh SA97 32 Kwords 2D0000h-2D7FFFh SA98 32 Kwords 2D8000h-2DFFFFh SA99 32 Kwords 2E0000h-2E7FFFh SA100 32 Kwords 2E8000h-2EFFFFh SA101 32 Kwords 2F0000h-2F7FFFh SA102 32 Kwords 2F8000h-2FFFFFh T able 12. WS128J Sector Address T able (Sheet 3 of 8) Bank Sector Sector Size (x16) Address Range

36 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA103 32 Kwords 300000h-307FFFh SA104 32 Kwords 308000h-30FFFFh SA105 32 Kwords 310000h-317FFFh SA106 32 Kwords 318000h-31FFFFh SA107 32 Kwords 320000h-327FFFh SA108 32 Kwords 328000h-32FFFFh SA109 32 Kwords 330000h-337FFFh SA110 32 Kwords 338000h-33FFFFh SA111 32 Kwords 340000h-347FFFh SA112 32 Kwords 348000h-34FFFFh SA113 32 Kwords 350000h-357FFFh SA114 32 Kwords 358000h-35FFFFh SA115 32 Kwords 360000h-367FFFh SA116 32 Kwords 368000h-36FFFFh SA117 32 Kwords 370000h-377FFFh SA118 32 Kwords 378000h-37FFFFh SA119 32 Kwords 380000h-387FFFh SA120 32 Kwords 388000h-38FFFFh SA121 32 Kwords 390000h-397FFFh SA122 32 Kwords 398000h-39FFFFh SA123 32 Kwords 3A0000h-3A7FFFh SA124 32 Kwords 3A8000h-3AFFFFh SA125 32 Kwords 3B0000h-3B7FFFh SA126 32 Kwords 3B8000h-3BFFFFh SA127 32 Kwords 3C0000h-3C7FFFh SA128 32 Kwords 3C8000h-3CFFFFh SA129 32 Kwords 3D0000h-3D7FFFh SA130 32 Kwords 3D8000h-3DFFFFh SA131 32 Kwords 3E0000h-3E7FFFh SA132 32 Kwords 3E8000h-3EFFFFh SA133 32 Kwords 3F0000h-3F7FFFh SA134 32 Kwords 3F8000h-3FFFFFh T able 12. WS128J Sector Address T able (Sheet 4 of 8) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 37 Data Sheet Bank B SA135 32 Kwords 400000h-407FFFh SA136 32 Kwords 408000h-40FFFFh SA137 32 Kwords 410000h-417FFFh SA138 32 Kwords 418000h-41FFFFh SA139 32 Kwords 420000h-427FFFh SA140 32 Kwords 428000h-42FFFFh SA141 32 Kwords 430000h-437FFFh SA142 32 Kwords 438000h-43FFFFh SA143 32 Kwords 440000h-447FFFh SA144 32 Kwords 448000h-44FFFFh SA145 32 Kwords 450000h-457FFFh SA146 32 Kwords 458000h-45FFFFh SA147 32 Kwords 460000h-467FFFh SA148 32 Kwords 468000h-46FFFFh SA149 32 Kwords 470000h-477FFFh SA150 32 Kwords 478000h-47FFFFh SA151 32 Kwords 480000h-487FFFh SA152 32 Kwords 488000h-48FFFFh SA153 32 Kwords 490000h-497FFFh SA154 32 Kwords 498000h-49FFFFh SA155 32 Kwords 4A0000h-4A7FFFh SA156 32 Kwords 4A8000h-4AFFFFh SA157 32 Kwords 4B0000h-4B7FFFh SA158 32 Kwords 4B8000h-4BFFFFh SA159 32 Kwords 4C0000h-4C7FFFh SA160 32 Kwords 4C8000h-4CFFFFh SA161 32 Kwords 4D0000h-4D7FFFh SA162 32 Kwords 4D8000h-4DFFFFh SA163 32 Kwords 4E0000h-4E7FFFh SA164 32 Kwords 4E8000h-4EFFFFh SA165 32 Kwords 4F0000h-4F7FFFh SA166 32 Kwords 4F8000h-4FFFFFh T able 12. WS128J Sector Address T able (Sheet 5 of 8) Bank Sector Sector Size (x16) Address Range

38 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA167 32 Kwords 500000h-507FFFh SA168 32 Kwords 508000h-50FFFFh SA169 32 Kwords 510000h-517FFFh SA170 32 Kwords 518000h-51FFFFh SA171 32 Kwords 520000h-527FFFh SA172 32 Kwords 528000h-52FFFFh SA173 32 Kwords 530000h-537FFFh SA174 32 Kwords 538000h-53FFFFh SA175 32 Kwords 540000h-547FFFh SA176 32 Kwords 548000h-54FFFFh SA177 32 Kwords 550000h-557FFFh SA178 32 Kwords 558000h-55FFFFh SA179 32 Kwords 560000h-567FFFh SA180 32 Kwords 568000h-56FFFFh SA181 32 Kwords 570000h-577FFFh SA182 32 Kwords 578000h-57FFFFh SA183 32 Kwords 580000h-587FFFh SA184 32 Kwords 588000h-58FFFFh SA185 32 Kwords 590000h-597FFFh SA186 32 Kwords 598000h-59FFFFh SA187 32 Kwords 5A0000h-5A7FFFh SA188 32 Kwords 5A8000h-5AFFFFh SA189 32 Kwords 5B0000h-5B7FFFh SA190 32 Kwords 5B8000h-5BFFFFh SA191 32 Kwords 5C0000h-5C7FFFh SA192 32 Kwords 5C8000h-5CFFFFh SA193 32 Kwords 5D0000h-5D7FFFh SA194 32 Kwords 5D8000h-5DFFFFh SA195 32 Kwords 5E0000h-5E7FFFh SA196 32 Kwords 5E8000h-5EFFFFh SA197 32 Kwords 5F0000h-5F7FFFh SA198 32 Kwords 5F8000h-5FFFFFh T able 12. WS128J Sector Address T able (Sheet 6 of 8) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 39 Data Sheet Bank B SA199 32 Kwords 600000h-607FFFh SA200 32 Kwords 608000h-60FFFFh SA201 32 Kwords 610000h-617FFFh SA202 32 Kwords 618000h-61FFFFh SA203 32 Kwords 620000h-627FFFh SA204 32 Kwords 628000h-62FFFFh SA205 32 Kwords 630000h-637FFFh SA206 32 Kwords 638000h-63FFFFh SA207 32 Kwords 640000h-647FFFh SA208 32 Kwords 648000h-64FFFFh SA209 32 Kwords 650000h-657FFFh SA210 32 Kwords 658000h-65FFFFh SA211 32 Kwords 660000h-667FFFh SA212 32 Kwords 668000h-66FFFFh SA213 32 Kwords 670000h-677FFFh SA214 32 Kwords 678000h-67FFFFh SA215 32 Kwords 680000h-687FFFh SA216 32 Kwords 688000h-68FFFFh SA217 32 Kwords 690000h-697FFFh SA218 32 Kwords 698000h-69FFFFh SA219 32 Kwords 6A0000h-6A7FFFh SA220 32 Kwords 6A8000h-6AFFFFh SA221 32 Kwords 6B0000h-6B7FFFh SA222 32 Kwords 6B8000h-6BFFFFh SA223 32 Kwords 6C0000h-6C7FFFh SA224 32 Kwords 6C8000h-6CFFFFh SA225 32 Kwords 6D0000h-6D7FFFh SA226 32 Kwords 6D8000h-6DFFFFh SA227 32 Kwords 6E0000h-6E7FFFh SA228 32 Kwords 6E8000h-6EFFFFh SA229 32 Kwords 6F0000h-6F7FFFh SA230 32 Kwords 6F8000h-6FFFFFh T able 12. WS128J Sector Address T able (Sheet 7 of 8) Bank Sector Sector Size (x16) Address Range

40 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA231 32 Kwords 700000h-707FFFh SA232 32 Kwords 708000h-70FFFFh SA233 32 Kwords 710000h-717FFFh SA234 32 Kwords 718000h-71FFFFh SA235 32 Kwords 720000h-727FFFh SA236 32 Kwords 728000h-72FFFFh SA237 32 Kwords 730000h-737FFFh SA238 32 Kwords 738000h-73FFFFh SA239 32 Kwords 740000h-747FFFh SA240 32 Kwords 748000h-74FFFFh SA241 32 Kwords 750000h-757FFFh SA242 32 Kwords 758000h-75FFFFh SA243 32 Kwords 760000h-767FFFh SA244 32 Kwords 768000h-76FFFFh SA245 32 Kwords 770000h-777FFFh SA246 32 Kwords 778000h-77FFFFh SA247 32 Kwords 780000h-787FFFh SA248 32 Kwords 788000h-78FFFFh SA249 32 Kwords 790000h-797FFFh SA250 32 Kwords 798000h-79FFFFh SA251 32 Kwords 7A0000h-7A7FFFh SA252 32 Kwords 7A8000h-7AFFFFh SA253 32 Kwords 7B0000h-7B7FFFh SA254 32 Kwords 7B8000h-7BFFFFh SA255 32 Kwords 7C0000h-7C7FFFh SA256 32 Kwords 7C8000h-7CFFFFh SA257 32 Kwords 7D0000h-7D7FFFh SA258 32 Kwords 7D8000h-7DFFFFh SA259 32 Kwords 7E0000h-7E7FFFh SA260 32 Kwords 7E8000h-7EFFFFh SA261 32 Kwords 7F0000h-7F7FFFh SA262 4 Kwords 7F8000h-7F8FFFh SA263 4 Kwords 7F9000h-7F9FFFh SA264 4 Kwords 7FA000h-7FAFFFh SA265 4 Kwords 7FB000h-7FBFFFh SA266 4 Kwords 7FC000h-7FCFFFh SA267 4 Kwords 7FD000h-7FDFFFh SA268 4 Kwords 7FE000h-7FEFFFh SA269 4 Kwords 7FF000h-7FFFFFh T able 12. WS128J Sector Address T able (Sheet 8 of 8) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 41 Data Sheet Ta bl e 1 3 . WS064J Sector Address Table (Sheet 1 of 6) Bank Sector Sector Size (x16) Address Range Bank D SA0 4 Kwords 000000h-000FFFh SA1 4 Kwords 001000h-001FFFh SA2 4 Kwords 002000h-002FFFh SA3 4 Kwords 003000h-003FFFh SA4 4 Kwords 004000h-004FFFh SA5 4 Kwords 005000h-005FFFh SA6 4 Kwords 006000h-006FFFh SA7 4 Kwords 007000h-007FFFh SA8 32 Kwords 008000h-00FFFFh SA9 32 Kwords 010000h-017FFFh SA10 32 Kwords 018000h-01FFFFh SA11 32 Kwords 020000h-027FFFh SA12 32 Kwords 028000h-02FFFFh SA13 32 Kwords 030000h-037FFFh SA14 32 Kwords 038000h-03FFFFh SA15 32 Kwords 040000h-047FFFh SA16 32 Kwords 048000h-04FFFFh SA17 32 Kwords 050000h-057FFFh SA18 32 Kwords 058000h-05FFFFh SA19 32 Kwords 060000h-067FFFh SA20 32 Kwords 068000h-06FFFFh SA21 32 Kwords 070000h-077FFFh SA22 32 Kwords 078000h-07FFFFh

42 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA23 32 Kwords 080000h-087FFFh SA24 32 Kwords 088000h-08FFFFh SA25 32 Kwords 090000h-097FFFh SA26 32 Kwords 098000h-09FFFFh SA27 32 Kwords 0A0000h-0A7FFFh SA28 32 Kwords 0A8000h-0AFFFFh SA29 32 Kwords 0B0000h-0B7FFFh SA30 32 Kwords 0B8000h-0BFFFFh SA31 32 Kwords 0C0000h-0C7FFFh SA32 32 Kwords 0C8000h-0CFFFFh SA33 32 Kwords 0D0000h-0D7FFFh SA34 32 Kwords 0D8000h-0DFFFFh SA35 32 Kwords 0E0000h-0E7FFFh SA36 32 Kwords 0E8000h-0EFFFFh SA37 32 Kwords 0F0000h-0F7FFFh SA38 32 Kwords 0F8000h-0FFFFFh SA39 32 Kwords 100000h-107FFFh SA40 32 Kwords 108000h-10FFFFh SA41 32 Kwords 110000h-117FFFh SA42 32 Kwords 118000h-11FFFFh SA43 32 Kwords 120000h-127FFFh SA44 32 Kwords 128000h-12FFFFh SA45 32 Kwords 130000h-137FFFh SA46 32 Kwords 138000h-13FFFFh T able 13. WS064J Sector Address T able (Sheet 2 of 6) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 43 Data Sheet Bank C SA47 32 Kwords 140000h-147FFFh SA48 32 Kwords 148000h-14FFFFh SA49 32 Kwords 150000h-157FFFh SA50 32 Kwords 158000h-15FFFFh SA51 32 Kwords 160000h-167FFFh SA52 32 Kwords 168000h-16FFFFh SA53 32 Kwords 170000h-177FFFh SA54 32 Kwords 178000h-17FFFFh SA55 32 Kwords 180000h-187FFFh SA56 32 Kwords 188000h-18FFFFh SA57 32 Kwords 190000h-197FFFh SA58 32 Kwords 198000h-19FFFFh SA59 32 Kwords 1A0000h-1A7FFFh SA60 32 Kwords 1A8000h-1AFFFFh SA61 32 Kwords 1B0000h-1B7FFFh SA62 32 Kwords 1B8000h-1BFFFFh SA63 32 Kwords 1C0000h-1C7FFFh SA64 32 Kwords 1C8000h-1CFFFFh SA65 32 Kwords 1D0000h-1D7FFFh SA66 32 Kwords 1D8000h-1DFFFFh SA67 32 Kwords 1E0000h-1E7FFFh SA68 32 Kwords 1E8000h-1EFFFFh SA69 32 Kwords 1F0000h-1F7FFFh SA70 32 Kwords 1F8000h-1FFFFFh T able 13. WS064J Sector Address T able (Sheet 3 of 6) Bank Sector Sector Size (x16) Address Range

44 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

SA71 32 Kwords 200000h-207FFFh SA72 32 Kwords 208000h-20FFFFh SA73 32 Kwords 210000h-217FFFh SA74 32 Kwords 218000h-21FFFFh SA75 32 Kwords 220000h-227FFFh SA76 32 Kwords 228000h-22FFFFh SA77 32 Kwords 230000h-237FFFh SA78 32 Kwords 238000h-23FFFFh SA79 32 Kwords 240000h-247FFFh SA80 32 Kwords 248000h-24FFFFh SA81 32 Kwords 250000h-257FFFh SA82 32 Kwords 258000h-25FFFFh SA83 32 Kwords 260000h-267FFFh SA84 32 Kwords 268000h-26FFFFh SA85 32 Kwords 270000h-277FFFh SA86 32 Kwords 278000h-27FFFFh SA87 32 Kwords 280000h-287FFFh SA88 32 Kwords 288000h-28FFFFh SA89 32 Kwords 290000h-297FFFh SA90 32 Kwords 298000h-29FFFFh SA91 32 Kwords 2A0000h-2A7FFFh SA92 32 Kwords 2A8000h-2AFFFFh SA93 32 Kwords 2B0000h-2B7FFFh SA94 32 Kwords 2B8000h-2BFFFFh T able 13. WS064J Sector Address T able (Sheet 4 of 6) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 45 Data Sheet Bank B SA95 32 Kwords 2C0000h-2C7FFFh SA96 32 Kwords 2C8000h-2CFFFFh SA97 32 Kwords 2D0000h-2D7FFFh SA98 32 Kwords 2D8000h-2DFFFFh SA99 32 Kwords 2E0000h-2E7FFFh SA100 32 Kwords 2E8000h-2EFFFFh SA101 32 Kwords 2F0000h-2F7FFFh SA102 32 Kwords 2F8000h-2FFFFFh SA103 32 Kwords 300000h-307FFFh SA104 32 Kwords 308000h-30FFFFh SA105 32 Kwords 310000h-317FFFh SA106 32 Kwords 318000h-31FFFFh SA107 32 Kwords 320000h-327FFFh SA108 32 Kwords 328000h-32FFFFh SA109 32 Kwords 330000h-337FFFh SA110 32 Kwords 338000h-33FFFFh SA111 32 Kwords 340000h-347FFFh SA112 32 Kwords 348000h-34FFFFh SA113 32 Kwords 350000h-357FFFh SA114 32 Kwords 358000h-35FFFFh SA115 32 Kwords 360000h-367FFFh SA116 32 Kwords 368000h-36FFFFh SA117 32 Kwords 370000h-377FFFh SA118 32 Kwords 378000h-37FFFFh T able 13. WS064J Sector Address T able (Sheet 5 of 6) Bank Sector Sector Size (x16) Address Range

46 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Writing specific address and data commands or sequences into the command register initiates device operations. Table 18, “Command Definitions,” on page 60 defines the valid register com- mand sequences. Writing incorrect address and data values or writing them in the improper sequence may place the device in an unknown state. The system must write the reset command to return the device to reading array data. Refer to the AC Characteristics section for timing diagrams. Reading Array Data The device is automatically set to reading array data after device power-up. No commands are required to retrieve data in asynchronous mode. Each bank is ready to read array data after com pleting an Embedded Program or Embedded Erase algorithm. After the device accepts an Erase Suspend command, the corresponding bank enters the erase- suspend-read mode, after which the system can read data from any non-erase-suspended sector within the same bank. After completing a programming operation in the Erase Suspend mode, the system may once again read array data from any non-erase-suspended sector within the same bank. See the “Erase Suspend/Erase Resume Commands” section on page 55 for more information. The system must issue the reset command to return a bank to the read (or erase-suspend-read) mode if DQ5 goes high during an active program or erase operation, or if the bank is in the au toselect mode. See the “Reset Command” section on page 51 for more information. Bank A SA119 32 Kwords 380000h-387FFFh SA120 32 Kwords 388000h-38FFFFh SA121 32 Kwords 390000h-397FFFh SA122 32 Kwords 398000h-39FFFFh SA123 32 Kwords 3A0000h-3A7FFFh SA124 32 Kwords 3A8000h-3AFFFFh SA125 32 Kwords 3B0000h-3B7FFFh SA126 32 Kwords 3B8000h-3BFFFFh SA127 32 Kwords 3C0000h-3C7FFFh SA128 32 Kwords 3C8000h-3CFFFFh SA129 32 Kwords 3D0000h-3D7FFFh SA130 32 Kwords 3D8000h-3DFFFFh SA131 32 Kwords 3E0000h-3E7FFFh SA132 32 Kwords 3E8000h-3EFFFFh SA133 32 Kwords 3F0000h-3F7FFFh SA134 4 Kwords 3F8000h-3F8FFFh SA135 4 Kwords 3F9000h-3F9FFFh SA136 4 Kwords 3FA000h-3FAFFFh SA137 4 Kwords 3FB000h-3FBFFFh SA138 4 Kwords 3FC000h-3FCFFFh SA139 4 Kwords 3FD000h-3FDFFFh SA140 4 Kwords 3FE000h-3FEFFFh SA141 4 Kwords 3FF000h-3FFFFFh T able 13. WS064J Sector Address T able (Sheet 6 of 6) Bank Sector Sector Size (x16) Address Range

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 47 Data Sheet See also “Requirements for Asynchronous ReadOperation (Non-Burst)” section on page 14 and “Requirements for Synchronous (Burst) Read Operation” section on page 14 for more information. The Asynchronous Read and Synchronous/Burst Read tables provide the read parameters, and Figure 15, “CLK Synchronous Burst Mode Read (rising active CLK),” on page 74, Figure 17, “Syn- chronous Burst Mode Read,” on page 75, and Figure 20, “Asynchronous Mode Read with Latched Addresses,” on page 77 show the timings. Set Configuration Register Command Sequence The device uses a configuration register to set the various burst parameters: number of wait states, burst read mode, active clock edge, RDY configuration, and synchronous mode active. The configuration register must be set before the device will enter burst mode. The configuration register is loaded with a three-cycle command sequence. The first two cycles are standard unlock sequences. On the third cycle, the data should be C0h, address bits A11–A0 should be 555h, and address bits A19–A12 set the code to be latched. The device will power up or after a hardware reset with the default setting, which is in asynchronous mode. The register must be set before the device can enter synchr onous mode. The configuration register can not be changed during device operations (program, erase, or sector lock).

48 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Figure 4. Synchronous/Asynchronous State Diagram mines this setting: “1” for asynchronous mode, “0” for synchronous mode. grammable Wait State Settings,” on page 49). the device is directly related to the clock frequency.

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 49 Data Sheet Ta b l e 1 4 . Programmable Wait State Settings Notes: 1. Upon power-up or hardware reset, the default setting is seven wait states. 2. RDY will default to being active with data when the Wait State Setting is set to a total initial access cycle of 2. It is recommended that the wait state command sequence be written, even if the default wait state value is desired, to ensure the device is set as expected. A hardware reset will set the wait state to the default setting. Standard wait-state Handshaking Option The host system must set the appropriate number of wait states in the flash device depending upon the clock frequency. The host system should set address bits A14–A12 to 010 for a clock frequency of 66/80 MHz for the system/device to execute at maximum speed. Table 15 describes the recommended number of clock cycles (wait states) for various conditions. Ta bl e 1 5 . Wait States for Standard wait-state Handshaking Notes: 1. In the 8-, 16- and 32-word burst read modes, the address pointer does not cross 64-word boundaries (addresses which are multiples of 3Fh). 2. For WS128J model numbers 10 and 11, an additional clock cycle is required for boundary crossings while in Continuous read mode. The host system must set the appropriate number of wait states in the flash device depending upon the clock frequency. Note that the host system must set again the number of wait state when the host system change the clock frequency. For example, the host system must set from 6 or 7 wait state to less than 5 wait states when the host system change the clock frequency from 80MHz to less than 80MHz. The autoselect function allows the host system to determine whether the flash device is enabled for handshaking. See the “Autoselect Command Sequence” section on page 51 for more information. A14 A13 A12 T otal Initial Access Cycles 0 0 0 2 0 0 1 3 0 1 0 4 0 1 1 5 1 0 0 6 1 0 1 7 (default) 1 1 0 Reserved 1 1 1 Reserved Burst Mode T ypical No. of Clock Cycles after AVD# Low

66 MHz 80 MHz

8-Word or 16-Word or Continuous 4 6 or 7 32-Word 5 7

50 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

The device supports four different read modes: continuous mode, and 8, 16, and 32 word linear wrap around modes. A continuous sequence begins at the starting address and advances the ad- dress pointer until the burst operation is complete. If the highest address in the device is reached during the continuous burst read mode, the address pointer wraps around to the lowest address. For example, an eight-word linear read with wrap around begins on the starting address written to the device and then advances to the next 8 word boundary. The address pointer then returns to the 1st word after the previous eight word boundary, wrapping through the starting location. The sixteen- and thirty-two linear wrap around modes operate in a fashion similar to the eight- word mode. Table 16 shows the address bits and settings for the four read modes. Ta b le 1 6 . Read Mode Settings Note: Upon power-up or hardware reset the default setting is continuous. Burst Active Clock Edge Configuration By default, the device will deliver data on the rising edge of the clock after the initial synchronous access time. Subsequent outputs will also be on the following rising edges, barring any delays. The device can be set so that the falling clock edge is active for all synchronous accesses. Address bit A17 determines this setting; “1” for rising active, “0” for falling active. RDY Configuration By default, the device is set so that the RDY pin will output VOH whenever there is valid data on the outputs. The device can be set so that RDY goes active one data cycle before active data. Address bit A18 determines this setting; “1” for RDY active with data, “0” for RDY active one clock cycle before valid data. Only the combination of wait state 2 and RDY active one clock cycle before data is not supported. In asynchronous mode, RDY is an open-drain output. Configuration Register Table 17 shows the address bits that determine the configuration register settings for various de- vice functions. Burst Modes Address Bits A16 A15 Continuous 0 0 8-word linear wrap around 0 1 16-word linear wrap around 1 0 32-word linear wrap around 1 1

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 51 Data Sheet Ta b l e 1 7 . Configuration Register Note: Device is in the default state upon power-up or hardware reset. Reset Command Writing the reset command resets the banks to the read or erase-suspend-read mode. Address bits are don’t cares for this command. The reset command may be written between the sequence cycles in an erase command sequence before erasing begins. This resets the bank to which the system was writing to the read mode. Once erasure begins, however, the device ignores reset commands until the operation is complete. The reset command may be written between the sequence cycles in a program command se - quence before programming begins (prior to the third cycle). This resets the bank to which the system was writing to the read mode. If the program command sequence is written to a bank that is in the Erase Suspend mode, writing the reset command returns that bank to the erase-sus pend-read mode. Once programming begins, however, the device ignores reset commands until the operation is complete. The reset command may be written between the sequence cycles in an autoselect command se- quence. Once in the autoselect mode, the reset command must be written to return to the read mode. If a bank entered the autoselect mode while in the Erase Suspend mode, writing the reset command returns that bank to the erase-suspend-read mode. If DQ5 goes high during a program or erase operation, writing the reset command returns the banks to the read mode (or erase-suspend-read mode if that bank was in Erase Suspend). Autoselect Command Sequence The autoselect command sequence allows the host system to access the manufacturer and device codes, and determine whether or not a sector is protected. Table 18, “Command Definitions,” on page 60 shows the address and data requirements. The autoselect command sequence may be Address Bit Function Settings (Binary) A19 Set Device Read Mode 0 = Synchronous Read (Burst Mode) Enabled 1 = Asynchronous Mode (default) A18 RDY 0 = RDY active one clock cycle before data 1 = RDY active with data (default) A17 Clock 0 = Burst starts and data is output on the falling edge of CLK 1 = Burst starts and data is output on the rising edge of CLK (default) A16 Read Mode Synchronous Mode 00 = Continuous (default) 01 = 8-word linear with wrap around 10 = 16-word linear with wrap around 11 = 32-word linear with wrap around A15 A14 Programmable Wait State 000 = Data is valid on the 2nd active CLK edge after AVD# transition to VIH 001 = Data is valid on the 3rd active CLK edge after AVD# transition to VIH 010 = Data is valid on the 4th active CLK edge after AVD# transition to VIH 011 = Data is valid on the 5th active CLK edge after AVD# transition to VIH 100 = Data is valid on the 6th active CLK edge after AVD# transition to VIH 101 = Data is valid on the 7th active CLK edge after AVD# transition to VIH (default) 110 = Reserved 111 = Reserved A13 A12

52 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

written to an address within a bank that is eith er in the read or erase-suspend-read mode. The autoselect command may not be written while the device is actively programming or erasing in the other bank. The autoselect command sequence is initiated by first writing two unlock cycles. This is followed by a third write cycle that contains the bank address and the autoselect command. The bank then enters the autoselect mode. No subsequent data will be made available if the autoselect data is read in synchronous mode. The system may read at any address within the same bank any num ber of times without initiating another autoselect command sequence. Read commands to other banks will return data from the array. The following table describes the address requirements for the various autoselect functions, and the resulting data. BA represents the bank address, and SA represents the sector address. The device ID is read in three cycles. The system must write the reset command to return to the read mode (or erase-suspend-read mode if the bank was previously in Erase Suspend). Enter Secured Silicon Sector/Exit Secured Silicon Sector Command Sequence The Secured Silicon Sector region provides a secured data area containing a random, eight word electronic serial number (ESN). The system can access the Secured Silicon Sector region by is - suing the three-cycle Enter Secured Silicon Sector command sequence. The device continues to access the Secured Silicon Sector region until the system issues the four-cycle Exit Secured Sili con Sector command sequence. The Exit Secured Silicon Sector command sequence returns the device to normal operation. The Secured Silicon Sector is not accessible when the device is exe cuting an Embedded Program or embedded Erase algorithm. Table 18, “Command Definitions,” on page 60 shows the address and data requirements for both command sequences. Description Address Read Data Manufacturer ID (BA) + 00h 0001h Device ID, Word 1 (BA) + 01h 227Eh Device ID, Word 2 (BA) + 0Eh 2218h (WS128J) 221Eh (WS064J) Device ID, Word 3 (BA) + 0Fh 2200h (WS128J) 2201h (WS064J) Sector Protection Verification (SA) + 02h 0001 (locked), 0000 (unlocked) Indicator Bits (BA) + 03h DQ15 - DQ8 = 0 DQ7 - Factory Lock Bit 1 = Locked, 0 = Not Locked DQ6 -Customer Lock Bit 1 = Locked, 0 = Not Locked DQ5 - Handshake Bit 1 = Reserved, 0 = Standard Handshake DQ4 & DQ3 - Boot Code 00 = Dual Boot Sector, 01 = Top Boot Sector, 10 = Bottom Boot Sector DQ2 - DQ0 = 001

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 53 Data Sheet The following commands are not allowed when the Secured Silicon is accessible. „ CFI „ Unlock Bypass Entry „ Unlock Bypass Program „ Unlock Bypass Reset „ Erase Suspend/Resume „ Chip Erase Program Command Sequence Programming is a four-bus-cycle operation. The program command sequence is initiated by writ- ing two unlock write cycles, followed by the program set-up command. The program address and data are written next, which in turn initiate the Embedded Program algorithm. The system is not required to provide further controls or timings. The device automatically provides internally gen erated program pulses and verifies the programmed cell margin. Table 18, “Command Definitions,” on page 60 shows the address and data requirements for the program command sequence. When the Embedded Program algorithm is complete, that bank then returns to the read mode and addresses are no longer latched. The system can determine the status of the program oper ation by monitoring DQ7 or DQ6/DQ2. Refer to the “Write Operation Status” section on page 62 for information on these status bits. Any commands written to the device during the Embedded Program Algorithm are ignored. Note that a hardware reset immediately terminates the program operation. The program command se quence should be reinitiated once that bank has returned to the read mode, to ensure data integrity. Programming is allowed in any sequence and across sector boundaries. A bit cannot be pro - grammed from “0” back to a “1.” Attempting to do so may cause that bank to set DQ5 = 1, or cause the DQ7 and DQ6 status bit to indicate the operation was successful. However, a succeeding read will show that the data is still “0.” Only erase operations can convert a “0” to a “1.” Unlock Bypass Command Sequence The unlock bypass feature allows the system to primarily program to a array faster than using the standard program command sequence. The unlock bypass command sequence is initiated by first writing two unlock cycles. This is followed by a third write cycle containing the unlock bypass command, 20h. The device then enters the unlock bypass mode. A two-cycle unlock bypass pro gram command sequence is all that is required to program in this mode. The first cycle in this sequence contains the unlock bypass program command, A0h; the second cycle contains the pro gram address and data. Additional data is programmed in the same manner. This mode dispenses with the initial two unlock cycles required in the standard program command sequence, resulting in faster total programming time. The host system may also initiate the chip erase and sector erase sequences in the unlock bypass mode. Th e erase command sequences are four cycles in length instead of six cycles. Table 18, “Command Definitions,” on page 60 shows the require - ments for the unlock bypass command sequences. During the unlock bypass mode, only the Read, Unlock Bypass Program, Unlock Bypass Sector Erase, Unlock Bypass Chip Erase, and Unlock Bypass Reset commands are valid. To exit the unlock bypass mode, the system must issue the two-cycle unlock bypass reset command sequence. The first cycle must contain the bank address and the data 90h. The second cycle need only contain the data 00h. The array then returns to the read mode. The device offers accelerated program operations through the ACC input. When the system as - serts VHH on this input, the device automatically enters the Unlock Bypass mode. The system may then write the two-cycle Unlock Bypass program command sequence. The device uses the higher voltage on the ACC input to accelerate the operation.

54 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Figure 5, “Program Operation,” on page 54 illustrates the algorithm for the program operation. Note: See Table 18 for program command sequence. Figure 5. Program Operation for the chip erase command sequence.

56 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

time-out period and suspends the erase operation. After the erase operation has been suspended, the bank enters the erase-suspend-read mode. Figure , “Write Operation Status,” on page 62 for information on these status bits. tion on page 62 for more information. In the erase-suspend-read mode, the system can also issue the autoselect command sequence.

1. See Table 18 for erase command sequence.
2. See the section on DQ3 for information on the sector erase timer

Figure 6. Erase Operation

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 57 Data Sheet Password Program Command The Password Program Command permits programming the password that is used as part of the hardware protection scheme. The actual password is 64-bits long. 4 Password Program com - mands are required to program the password. The user must enter the unlock cycle, password program command (38h) and the program address/data for each portion of the password when programming. There are no provisions for entering the 2-cycle unlock cycle, the password pro gram command, and all the password data. There is no special addressing order required for programming the password. Also, when the password is undergoing programming, Simultaneous Operation is disabled. Read operations to any memory location will return the programming status except DQ7. Once programming is complete, the user must issue a Read/Reset command to the device to normal operation. Once the Password is written and verified, the Password Mode Locking Bit must be set in order to prevent verification. The Password Program Command is only capable of programming “0”s. Programming a “1” after a cell is programmed as a “0” results in a time- out by the Embedded Program Algorithm™ with the cell remaining as a “0”. The password is all F’s when shipped from the factory. All 64-bit password combinations are valid as a password. Password Verify Command The Password Verify Command is used to verify the Password. The Password is verifiable only when the Password Mode Locking Bit is not programmed. If the Password Mode Locking Bit is pro grammed and the user attempts to verify the Password, the device will always drive all F’s onto the DQ data bus. Also, the device will not operate in Simultaneous Operation when the Password Verify command is executed. Only the password is returned regardless of the bank address. The lower two address bits (A1–A0) are valid during the Password Verify. Writing the Secured Silicon Exit command re- turns the device back to normal operation. Password Protection Mode Locking Bit Program Command The Password Protection Mode Locking Bit Program Command programs the Password Protection Mode Locking Bit, which prevents further verifies or updates to the password. Once programmed, the Password Protection Mode Locking Bit cannot be erased and the Persistent Protection Mode Locking Bit program circuitry is disabled, thereby forcing the device to remain in the Password Protection Mode. After issuing “PL/68h” at the fourth bus cycle, the device requires a time out period of approximately 150 µs for programming the Password Protection Mode Locking Bit. Then by writing “PL/48h” at the fifth bus cycle, the device outputs verify data at DQ0. If DQ0 = 1, then the Password Protection Mode Locking Bit is programmed. If not, the system must repeat this program sequence from the fourth cycle of “PL/68h”. Exiting the Password Protection Mode Lock ing Bit Program command is accomplished by writing the Secured Silicon Sector Exit command or Read/Reset command. Persistent Sector Protection Mode Locking Bit Program Command The Persistent Sector Protection Mode Locking Bit Program Command programs the Persistent Sector Protection Mode Locking Bit, which prevents the Password Mode Locking Bit from ever being programmed. By disabling the program circuitry of the Password Mode Locking Bit, the de vice is forced to remain in the Persistent Sector Protection mode of operation, once this bit is set. After issuing “SL/68h” at the fourth bus cycle, the device requires a time out period of approxi mately 150 µs for programming the Persistent Protect io n Mode Locking Bit. Then by writ ing “SMPL/48h” at the fifth bus cycle, the device outputs verify data at DQ0. If DQ0 = 1, then the Persistent Protection Mode Locking Bit is programmed. If not, the system must repeat this pro gram sequence from the fourth cycle of “PL/68h”. Exiting the Persistent Protection Mode Locking Bit Program command is accomplished by writing the Secured Silicon Sector Exit command or Read/Reset command.

58 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Secured Silicon Sector Protection Bit Program Command To protect the Secured Silicon Sector, write the Secured Silicon Sector Protect command sequence while in the Secured Silicon Sector mode. After issuing “OW/48h” at the fourth bus cycle, the de- vice requires a time out period of approximately 150 µs to protect the Secured Silicon Sector. Then, by writing “OPBP/48” at the fifth bus cycle, the device outputs verify data at DQ0. If DQ0 = 1, then the Secured Silicon Sector is protected. If not, then the system must repeat this pro - gram sequence from the fourth cycle of “OPBP/48h”. Exiting the Secured Silicon Sector Protection Mode Locking Bit Program command is accomplished by writing the Secured Silicon Sector Exit command or Read/Reset command. PPB Lock Bit Set Command The PPB Lock Bit Set command is used to set the PPB Lock bit if it is cleared either at reset or if the Password Unlock command was successfully executed. There is no PPB Lock Bit Clear com mand. Once the PPB Lock Bit is set, it cannot be cleared unless the device is taken through a power-on clear or the Password Unlock command is executed. Upon setting the PPB Lock Bit, the PPBs are latched. If the Password Mode Locking Bit is set, the PPB Lock Bit status is reflected as set, even after a power-on reset cycle. Exiting the PPB Lock Bit Set command is accomplished by writing the Secured Silicon Exit command, only while in the Persistent Sector Protection Mode. DPB Write/Erase/Status Command The DPB Write command is used to set or clear a DPB for a given sector. The high order address bits (Amax–A11) are issued at the same time as the code 01h or 00h on DQ7-DQ0. All other DQ data bus pins are ignored during the data write cycle. The DPBs are modifiable at any time, re gardless of the state of the PPB or PPB Lock Bit. If the PPB is set, the sector is protected regardless of the value of the DPB. If the PPB is cleared, setting the DPB to a 1 protects the sector from programs or erases. Since this is a volatile bit, removing power or resetting the device will clear the DPBs. The programming of the DPB for a given sector can be verified by writing a DPB Status command to the device. Exiting the DPB Write/Erase command is accomplished by writing the Read/Reset command. Exiting the DPB Status command is accomplished by writting the Secured Silicon Sector Exit command Password Unlock Command The Password Unlock command is used to clear the PPB Lock Bit so that the PPBs can be unlocked for modification, thereby allowing the PPBs to become accessible for modification. The exact pass word must be entered in order for the unlocking function to occur. This command cannot be issued any faster than 2 µs at a time to prevent a hacker from running through the all 64-bit combina tions in an attempt to correctly match a password. If the command is issued before the 2 µs execution window for each portion of the unlock, the command will be ignored. The Password Unlock function is accomplished by writing Password Unlock command and data to the device to perform the clearing of the PPB Lock Bit. The password is 64 bits long, so the user must write the Password Unlock command 4 times. A1 and A0 are used for matching. Writing the Password Unlock command is not address order specific. The lower address A1–A0= 00, the next Password Unlock command is to A1–A0= 01, then to A1–A0= 10, and finally to A1–A0= 11. Once the Password Unlock command is entered for all four words, the RDY pin goes LOW indicat- ing that the device is busy. Also, reading the Bank D results in the DQ6 pin toggling, indicating that the Password Unlock function is in progress. Reading the other bank returns actual array data. Approximately 1µs is required for each portion of the unlock. Once the first portion of the password unlock completes (RDY is not driven and DQ6 does not toggle when read), the Password Unlock command is issued again, only this time with the next part of the password. Four Password Unlock commands are required to successfully clear the PPB Lock Bit. As with the first Password Unlock command, the RDY signal goes LOW and reading the device results in the DQ6 pin toggling on successive read operations until complete. It is the responsibility of the microprocessor to keep

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 59 Data Sheet track of the number of Password Unlock commands, the order, and when to read the PPB Lock bit to confirm successful password unlock. In order to relock the device into the Password Mode, the PPB Lock Bit Set command can be re-issued. Exiting the Password Unlock command is accom plished by writing the Secured Silicon Sector Exit command. PPB Program Command The PPB Program command is used to program, or set, a given PPB. Each PPB is individually pro- grammed (but is bulk erased with the other PPBs). The specific sector address (Amax–A12) are written at the same time as the program command 60h with A6 = 0. If the PPB Lock Bit is set and the corresponding PPB is set for the sector, the PPB Program command will not execute and the command will time-out without programming the PPB. After programming a PPB, two additional cycles are needed to determine whether the PPB has been programmed with margin. After 4th cycle, the device requires approximately 150 µs time out period for programming the PPB. And then after 5th cycle, the device outputs verify data at DQ0. The PPB Program command does not follow the Embedded Program algorithm. Writing the Se - cured Silicon Sector Exit command or Read/Reset command return the device back to normal operation. All PPB Erase Command The All PPB Erase command is used to erase all PPBs in bulk. There is no means for individually erasing a specific PPB. Unlike the PPB program, no specific sector address is required. However, when the PPB erase command is written (60h) and A6 = 1, all Sector PPBs are erased in parallel. If the PPB Lock Bit is set the ALL PPB Erase command will not execute and the command will time- out without erasing the PPBs. After erasing the PPBs, two additional cycles are needed to determine whether the PPB has been erased with margin. After 4th cycle, the device requires approximately 1.5 ms time out period for erasing the PPB. And then after 5th cycle, the device outputs verify data at DQ0. It is the responsibility of the user to preprogram all PPBs prior to issuing the All PPB Erase com- mand. If the user attempts to erase a cleared PPB, over-erasure may occur making it difficult to program the PPB at a later time. Also note that the total number of PPB program/erase cycles is limited to 100 cycles. Cycling the PPBs beyond 100 cycles is not guaranteed. Writing the Secured Silicon Sector Exit command or Read/Reset command return the device back to normal operation. PPB Status Command The programming of the PPB for a given sector can be verified by writing a PPB status verify com- mand to the device. Writing the Secured Silicon Sector Exit command or Read/Reset command return the device back to normal operation. PPB Lock Bit Status Command The programming of the PPB Lock Bit for a given sector can be verified by writing a PPB Lock Bit status verify command to the device. Writing the Secured Silicon Sector Exit command or Read/ Reset command return the device back to normal operation.

60 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Ta bl e 18 . Command Definitions Command Sequence (Note 1) Cycles Bus Cycles (Notes 1–6) First Second Third Fourth Fifth Sixth Seventh Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data Asynchronous Read (Note 7) 1R A R D Reset (Note 8) 1 XXX F0 Autoselect (Note 9) Manufacturer ID 4 555 AA 2AA 55 (BA) 555 90 (BA) X00 0001 Device ID (Note 10) 6 555 AA 2AA 55 (BA) 555 90 (BA) X01 227E (BA)X (Note 10) (BA) X0F (Not e 10) Sector Lock Verify (Note 11) 4 555 AA 2AA 55 (SA) 555 90 (SA) X02 0000/ 0001 Indicator Bits 4 555 AA 2AA 55 (BA) 555 90 (BA) X03 (Note 12) Program 4 555 AA 2AA 55 555 A0 PA Data Chip Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 555 10 Sector Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 SA 30 Erase Suspend (Note 15) 1B A B 0 Erase Resume (Note 16) 1B A 3 0 Set Configuration Register (Note 17) 3 555 AA 2AA 55 (CR) 555 C0 CFI Query (Note 18) 15 5 9 8 Unlock Bypass Mode Unlock Bypass Entry 3 555 AA 2AA 55 555 20 Unlock Bypass Program (Notes 13, 14) 2X X A 0 P AP D Unlock Bypass Sector Erase (Notes 13, 14) 2X X 8 0 S A3 0 Unlock Bypass Erase (Notes 13, 14) 2X X 8 0X X X 1 0 Unlock Bypass Reset (Notes 13, 14) 2X X 9 0X X X 0 0 Sector Protection Command Definitions Secured Silicon Sector Secured Silicon Sector Entry 3 555 AA 2AA 55 555 88 Secured Silicon Sector Exit 4 555 AA 2AA 55 555 90 XX 00 Secured Silicon Protection Bit Program (Notes 19, 21) 6 555 AA 2AA 55 555 60 OW 68 OW 48 OW RD (0) Password Protection Password Program (Notes 23) 4 555 AA 2AA 55 555 38 XX0 PD0 XX1 PD1 XX2 PD2 XX3 PD3 Password Verify 4 555 AA 2AA 55 555 C8 XX0 PD0 XX1 PD1 XX2 PD2 XX3 PD3 Password Unlock (Note 23) 7 555 AA 2AA 55 555 28 XX0 PD0 XX1 PD1 XX2 PD2 XX3 PD3

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 61 Data Sheet Legend: X = Don’t care RA = Address of the memory location to be read. RD = Data read from location RA during read operation. PA = Address of the memory location to be programmed. Addresses latch on the rising edge of the AVD# pulse or active edge of CLK which ever comes first. PD = Data to be programmed at location PA. Data latches on the rising edge of WE# or CE# pulse, whichever happens first. SA = Address of the sector to be verified (in autoselect mode) or erased. Address bits Amax–A12 uniquely select any sector. BA = Address of the bank (WS128J: A22, A21, A20, WS064J: A21, A20, A19) that is being switched to autoselect mode, is in bypass mode, or is being erased. SLA = Address of the sector to be locked. Set sector address (SA) and either A6 = 1 for unlocked or A6 = 0 for locked. SBA = sector address block to be protected. CR = Configuration Register address bits A19–A12. OW = Address (A7–A0) is (00011010). PD3–PD0 = Password Data. PD3–PD0 present four 16 bit combinations that represent the 64-bit Password PWA = Password Address. Address bits A1 and A0 are used to select each 16-bit portion of the 64-bit entity. PWD = Password Data. PL = Address (A7-A0) is (00001010) RD(0) = DQ0 protection indicator bit. If protected, DQ0 = 1, if unprotected, DQ0 = 0. RD(1) = DQ1 protection indicator bit. If protected, DQ1 = 1, if unprotected, DQ1 = 0. SL = Address (A7-A0) is (00010010) WD= Write Data. See “Configuration Register” definition for specific write data WP = Address (A7-A0) is (00000010) WPE = address(A7-A0) is (01000010) Notes: 1. See Table 1 for description of bus operations. 2. All values are in hexadecimal. 3. Except for the following, all bus cycles are write cycle: read cycle, fourth through sixth cycles of the Autoselect commands, fourth cycle of the configuration register verify and password verify commands, and any cycle reading at RD(0) and RD(1). 4. Data bits DQ15–DQ8 are don’t care in command sequences, except for RD, PD, WD, PWD, and PD3-PD0. 5. Unless otherwise noted, address bits Amax–A12 are don’t cares. 6. Writing incorrect address and data values or writing them in the improper sequence may place the device in an unknown state. The system must write the reset command to return the device to reading array data. 7. No unlock or command cycles required when bank is reading array data. 8. The Reset command is required to return to reading array data (or to the erase-suspend-read mode if previously in Erase Suspe nd) when a bank is in the autoselect mode, or if DQ5 goes high (while the bank is providing status information) or performing sector lock/ unlock. 9. The fourth cycle of the autoselect command sequence is a read cycle. The system must provide the bank address. See the Autoselect Command Sequence section for more information. 10. (BA)X0Fh = 2200h (WS128J), (BA)X0Eh = 2218h (WS128J) , (BA)X0Fh = 221Eh (WS064J), (BA)X0Eh = 2201h (WS064J) 11. The data is 0000h for an unlocked sector and 0001h for a locked sector 12. DQ15 - DQ8 = 0, DQ7 - Factory Lock Bit (1 = Locked, 0 = Not Locked), DQ6 -Customer Lock Bit (1 = Locked, 0 = Not Locked), DQ 5 = Handshake Bit (1 = Reserved, 0 = Standard Handshake)8, DQ4 & DQ3 - Boot Code (00= Dual Boot Sector, 01= Top Boot Sector, 10= Bottom Boot Sector, 11=No Boot Sector), DQ2 - DQ0 = 001 13. The Unlock Bypass command sequence is required prior to this command sequence. PPB Commands PPB Program (Notes 21) 6 555 AA 2AA 55 555 60 SBA + WP 68 SBA + WP 48 XX RD (0) All PPB Erase (Notes 22, 24) 6 555 AA 2AA 55 555 60 WPE 60 SBA WPE

40 XX RD

(0) PPB Status (Note 25) 4 555 AA 2AA 55 SBA 555 90 SBA +WP RD (0) PPB Lock Bit PPB Lock Bit Set 3 555 AA 2AA 55 555 78 PPB Lock Bit Status 4 555 AA 2AA 55 (BA) 555 58 BA RD (1) DPB DPB Write 4 555 AA 2AA 55 555 48 SA X1 DPB Erase 4 555 AA 2AA 55 555 48 SA X0 DPB Status 4 555 AA 2AA 55 (BA) 555 58 SA RD (0) Password Protection Mode Locking Bit Program (Notes 21) 6 555 AA 2AA 55 555 60 PL 68 PL 48 PL RD (0) Persistent Protection Mode Locking Bit Program (Notes 21) 6 555 AA 2AA 55 555 60 SL 68 SL 48 SL RD (0) Command Sequence (Note 1) Cycles Bus Cycles (Notes 1–6) First Second Third Fourth Fifth Sixth Seventh Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data Addr Data

62 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. The Unlock Bypass Reset command is required to return to reading array data. 15. The system may read and program in non-erasing sectors, or enter the autoselect mode, when in the Erase Suspend mode. The Er ase Suspend command is valid only during a sector erase operation, and requires the bank address. 16. The Erase Resume command is valid only during the Erase Suspend mode, and requires the bank address. 17. See “Set Configuration Register Command Sequence” for details. 18.Command is valid when device is ready to read array data or when device is in autoselect mode. 19. Regardless of CLK and AVD# interaction or Control Register bit 15 setting, command mode verifies are always asynchronous rea d operations. 20. ACC must be at VHH during the entire operation of this command 21. The fourth cycle programs the addressed locking bit. The fifth and sixth cycles are used to validate whether the bit has bee n fully programmed. If DQ0 (in the sixth cycle) reads 0, the program command must be issued and verified again. 22. The fourth cycle erases all PPBs. The fifth and sixth cycles are used to validate whether the bits have been fully erased. If DQ0 (in the sixth cycle) reads 1, the erase command must be issued and verified again. 23. The entire four bus-cycle sequence must be entered for each portion of the password. 24. Before issuing the erase command, all PPBs should be programmed in order to prevent over-erasure of PPBs. 25. In the fourth cycle, 01h indicates PPB set; 00h indicates PPB not set. Write Operation Status The device provides several bits to determine the status of a program or erase operation: DQ2, DQ3, DQ5, DQ6, and DQ7. Table 20, “Write Operation Status,” on page 67 and the following sub- sections describe the function of these bits. DQ7 and DQ6 each offers a method for determining whether a program or erase operation is complete or in progress. DQ7: Data# Polling The Data# Polling bit, DQ7, indicates to the host system whether an Embedded Program or Erase algorithm is in progress or completed, or whether a bank is in Erase Suspend. Data# Polling is valid after the rising edge of the final WE# pulse in the command sequence. During the Embedded Program algorithm, the device outputs on DQ7 the complement of the datum programmed to DQ7. This DQ7 status also applies to programming during Erase Suspend. When the Embedded Program algorithm is complete, the device outputs the datum programmed to DQ7. The system must provide the program address to read valid status information on DQ7. If a program address falls within a protected sector, Data# Polling on DQ7 is active for approxi mately 1 µs, then that bank returns to the read mode. During the Embedded Erase algorithm, Data# Polling produces a “0” on DQ7. When the Embed- ded Erase algorithm is complete, or if the bank enters the Erase Suspend mode, Data# Polling produces a “1” on DQ7. The system must provide an address within any of the sectors selected for erasure to read valid status information on DQ7. After an erase command sequence is written, if all sectors selected for erasing are protected, Data# Polling on DQ7 is active for approximately 100 µs, then the bank returns to the read mode. If not all selected sectors are protected, the Embedded Erase algorithm erases the unprotected sectors, and ignores the selected sectors that are protected. However, if the system reads DQ7 at an address within a protected sector, the status may not be valid. Just prior to the completion of an Embedded Program or Erase operation, DQ7 may change asyn- chronously with DQ6–DQ0 while Output Enable (OE#) is asserted low. That is, the device may change from providing status information to valid data on DQ7. Depending on when the system samples the DQ7 output, it may read the status or valid data. Even if the device has completed the program or erase operation and DQ7 has valid data, the data outputs on DQ6-DQ0 may be still invalid. Valid data on DQ7-D00 will appear on successive read cycles. Table 20, “Write Operation Status,” on page 67 shows the outputs for Data# Polling on DQ7. Figure 7, “Data# Polling Algorithm,” on page 63 shows the Data# Polling algorithm. Figure 29, “Data# Polling Timings (During Embedded Algorithm),” on page 86 in the AC Characteristics sec- tion shows the Data# Polling timing diagram.

1. VA = Valid address for programming. During a sector erase operation, a valid

a valid address is any non-protected sector address.

1. DQ7 should be rechecked even if DQ5 = “1” because DQ7 may change

Figure 7. Data# Polling Algorithm and after the boundary that occurs every 64 words beginning with the 64th address, 3Fh. after the rising edge of the final WE# pulse in the command sequence.

64 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

If the output is low (Busy), the device is actively erasing or programming. (This includes program- ming in the Erase Suspend mode.) If the output is in high impedance (Ready), the device is in the read mode, the standby mode, or in the erase-suspend-read mode. Table 20, “Write Opera- tion Status,” on page 67 shows the outputs for RDY. DQ6: T oggle Bit I Toggle Bit I on DQ6 indicates whether an Embedded Program or Erase algorithm is in progress or complete, or whether the device has entered the Erase Suspend mode. Toggle Bit I may be read at any address in the same bank, and is valid after the rising edge of the final WE# pulse in the command sequence (prior to the program or erase operation), and during the sector erase time- out. During an Embedded Program or Erase algorithm operation, successive read cycles to any ad - dress cause DQ6 to toggle. When the operation is complete, DQ6 stops toggling. After an erase command sequence is written, if all sectors selected for erasing are protected, DQ6 toggles for approximately 100 µs, then returns to reading array data. If not all selected sectors are protected, the Embedded Erase algorithm erases the unprotected sectors, and ignores the selected sectors that are protected. The system can use DQ6 and DQ2 together to determine whether a sector is actively erasing or is erase-suspended. When the device is actively erasing (that is, the Embedded Erase algorithm is in progress), DQ6 toggles. When the device enters the Erase Suspend mode, DQ6 stops tog gling. However, the system must also use DQ2 to determine which sectors are erasing or erase- suspended. Alternatively, the system can use DQ7 (see the subsection on DQ7: Data# Polling). If a program address falls within a protected sector, DQ6 toggles for approximately 1 ms after the program command sequence is written, then returns to reading array data. DQ6 also toggles during the erase-suspend-program mode, and stops toggling once the Embed- ded Program algorithm is complete. See the following for additional information: Figure 8, “Toggle Bit Algorithm,” on page 65, DQ6: Toggle Bit I on page 64, Figure 30, “Toggle Bit Timings (During Embedded Algorithm),” on page 87 (toggle bit timing diagram), and Table 19, “DQ6 and DQ2 Indications,” on page 66. Toggle Bit I on DQ6 requires either OE# or CE# to be deasserteed and reasserted to show the change in state.

changes to “1.” See the subsections on DQ6 and DQ2 for more information. Figure 8. T oggle Bit Algorithm

66 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Suspend, but cannot distinguish which sectors are selected for erasure. Thus, both status bits are required for sector and mode information. Refer to Table 19, “DQ6 and DQ2 Indications,” on page 66 to compare outputs for DQ2 and DQ6. See the following for additional information: Figure 8, “Toggle Bit Algorithm,” on page 65, See DQ6: Toggle Bit I on page 64, Figure 30, “Toggle Bit Timings (During Embedded Algorithm),” on page 87, and Table 19, “DQ6 and DQ2 Indications,” on page 66. Ta b l e 1 9 . DQ6 and DQ2 Indications Reading T oggle Bits DQ6/DQ2 Refer to Figure 8, “Toggle Bit Algorithm,” on page 65 for the following discussion. Whenever the system initially begins reading toggle bit status, it must read DQ7–DQ0 at least twice in a row to determine whether a toggle bit is toggling. Typically, the system would note and store the value of the toggle bit after the first read. After the second read, the system would compare the new value of the toggle bit with the first. If the toggle bit is not toggling, the device has completed the program or erase operation. The system can read array data on DQ7–DQ0 on the following read cycle. However, if after the initial two read cycles, the system determines that the toggle bit is still tog- gling, the system also should note whether the value of DQ5 is high (see the section on DQ5). If it is, the system should then determine again whether the toggle bit is toggling, since the toggle bit may have stopped toggling just as DQ5 went high. If the toggle bit is no longer toggling, the device has successfully completed the program or erase operation. If it is still toggling, the device did not completed the operation successfully, and the system must write the reset command to return to reading array data. The remaining scenario is that the system initially determines that the toggle bit is toggling and DQ5 has not gone high. The system may continue to monitor the toggle bit and DQ5 through suc cessive read cycles, determining the status as described in the previous paragraph. Alternatively, it may choose to perform other system tasks. In this case, the system must start at the beginning of the algorithm when it returns to determine the status of the operation ( Figure 8, “Toggle Bit Algorithm,” on page 65). DQ5: Exceeded Timing Limits DQ5 indicates whether the program or erase time has exceeded a specified internal pulse count limit. Under these conditions DQ5 produces a “1,” indicating that the program or erase cycle was not successfully completed. If device is and the system reads then DQ6 and DQ2 programming, at any address, toggles, does not toggle. actively erasing, at an address within a sector selected for erasure, toggles, also toggles. at an address within sectors not selected for erasure, toggles, does not toggle. erase suspended, at an address within a sector selected for erasure, does not toggle, toggles. at an address within sectors not selected for erasure, returns array data, returns array data. The system can read from any sector not selected for erasure. programming in erase suspend at any address, toggles, is not applicable.

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 67 Data Sheet The device may output a “1” on DQ5 if the system tries to program a “1” to a location that was previously programmed to “0.” Only an erase operation can change a “0” back to a “1.” Under this condition, the device halts the operation, and when the timing limit has been exceeded, DQ5 pro- duces a “1.” Under both these conditions, the system must write the reset command to return to the read mode (or to the erase-suspend-read mode if a bank was previously in the erase-suspend-program mode). DQ3: Sector Erase Timer After writing a sector erase command sequence, the system may read DQ3 to determine whether or not erasure has begun. (The sector erase timer does not apply to the chip erase command.) If additional sectors are selected for erasure, the entire time-out also applies after each additional sector erase command. When the time-out period is complete, DQ3 switches from a “0” to a “1.” If the time between additional sector erase commands from the system can be assumed to be less than 50 µs, the system need not monitor DQ3. See also Sector Erase Command Sequence on page 55. After the sector erase command is written, the system should read the status of DQ7 (Data# Poll- ing) or DQ6 (Toggle Bit I) to ensure that the device has accepted the command sequence, and then read DQ3. If DQ3 is “1,” the Embedded Erase algorithm has begun; all further commands (except Erase Suspend) are ignored until the erase operation is complete. If DQ3 is “0,” the device will accept additional sector erase commands. To ensure the command has been accepted, the system software should check the status of DQ3 prior to and following each subsequent sector erase command. If DQ3 is high on the second status check, the last command might not have been accepted. Table 20 shows the status of DQ3 relative to the other status bits. Notes: 1. DQ5 switches to ‘1’ when an Embedded Program or Embedded Erase operation has exceeded the maximum timing limits. Refer to the section on DQ5 for more information. 2. DQ7 and DQ2 require a valid address when reading status information. Refer to the appropriate subsection for further details. 3. When reading write operation status bits, the system must always provide the bank address where the Embedded Algorithm is in progress. The device outputs array data if the system addresses a non-busy bank. 4. The system may read either asynchronously or synchronously (burst) while in erase suspend. 5. The RDY pin acts a dedicated output to indicate the status of an embedded erase or program operation is in progress. This is available in the Asynchronous mode only. 6. When the device is set to Asynchronous mode, these status flags should be read by CE# toggle. Ta bl e 2 0 . Write Operation Status Status DQ7 (Note 2) DQ6 DQ5 (Note 1) DQ3 DQ2 (Note 2) RDY (Note 5) Standard Mode Embedded Program Algorithm DQ7# Toggle 0 N/A No toggle (Note 6) 0 Embedded Erase Algorithm 0 Toggle 0 1 Toggle 0 Erase Suspend Mode Erase-Suspend- Read (Note 4) Erase Suspended Sector 1 No toggle (Note 6) 0 N/A Toggle High Impedance Non-Erase Suspended Sector Data Data Data Data Data High Impedance Erase-Suspend-Program DQ7# Toggle 0 N/A N/A 0

68 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. Minimum DC voltage on input or I/Os is –0.5 V. During voltage transitions, inputs

or I/Os may undershoot VSS to –2.0 V for periods of up to 20 ns. See Figure 9. outputs may overshoot to VCC + 2.0 V for periods up to 20 ns. See Figure 10.

1. No more than one output may be shorted to ground at a time. Duration of the

short circuit should not be greater than one second.

1. Stresses above those listed under “Absolute Maximum Ratings” may cause

Figure 9. Maximum Negative Overshoot Waveform Figure 10. Maximum Positive Overshoot Waveform

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 69 Data Sheet Operating Ranges Wireless (W) Devices Industrial (I) Devices Supply Voltages Note: Operating ranges define those limits between which the functionality of the de- vice is guaranteed.

70 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Notes: 1. Maximum I CC specifications are tested with VCC = VCCmax. 2. The I CC current listed is typically less than 2 mA/MHz, with OE# at V IH. 3. I CC active while Embedded Erase or Embedded Program is in progress. 4. Device enters automatic sleep mode when addresses are stable for tACC + 60 ns. Typical sleep mode current is equal to ICC3. 5. Total current during accelerated programming is the sum of V ACC and VCC currents. 6. 80 MHz applies only to the WS064J. Parameter Description T est Conditions Notes: 1 Min Ty p Max Unit ILI Input Load Current VIN = VSS to VCC, VCC = VCCmax ±1 µA ILO Output Leakage Current VOUT = VSS to VCC, VCC = VCCmax ±1 µA ICCB VCC Active burst Read Current CE# = VIL, OE# = VIH, WE# = VIH, burst length = 8

66 MHz 15 30 mA

80 MHz 18 36 mA

CE# = VIL, OE# = VIH, WE# = VIH, burst length = 16 CE# = VIL, OE# = VIH, WE# = VIH, burst length = Continuous IIO1 VCC Non-active Output OE# = VIH 0.2 10 µA ICC1 VCC Active Asynchronous Read Current (Note 2) CE# = VIL, OE# = VIH, WE# = VIH

10 MHz 20 30 mA

5 MHz 12 16 mA

1 MHz 3.5 5 mA ICC2 VCC Active Write Current (Note 3) CE# = VIL, OE# = VIH, ACC = VIH 15 40 mA ICC3 VCC Standby Current (Note 4) CE# = RESET# = VCC ± 0.2 V 0.2 50 µA ICC4 VCC Reset Current RESET# = VIL, CLK = VIL 0.2 50 µA ICC5 VCC Active Current (Read While Write) CE# = VIL, OE# = VIH

66 MHz 22 54 mA

80 MHz 25 60 mA

ICC6 VCC Sleep Current CE# = VIL, OE# = VIH 0.2 50 µA IACC Accelerated Program Current (Note 5) CE# = VIL, OE# = VIH, VACC = 12.0 ± 0.5 V VACC 7 15 mA VCC 5 10 mA VIL Input Low Voltage –0.5 0.4 V VIH Input High Voltage VCC – 0.4 VCC + 0.4 VOL Output Low Voltage IOL = 100 µA, VCC = VCC min = VIO 0.1 V VOH Output High Voltage IOH = –100 µA, VCC = VCC min VCC – 0.1 V VID Voltage for Autoselect and Temporary Sector Unprotect VCC = 1.8 V 11.5 12.5 V VHH Voltage for Accelerated Program 11.5 12.5 V VLKO Low VCC Lock-out Voltage 1.0 1.4 V

72 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. V CC ramp rate is > 1V / 100µs
2. V CC ramp rate <1V / 100µs, a Hardware Reset will be required.

Figure 13. VCC Power-up Diagram Note: 80 MHz applies only to the WS064J. Figure 14. CLK Characterization

80 MHz

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 73 Data Sheet Synchronous/Burst Read Notes: 1. Addresses are latched on the first of either the active edge of CLK or the rising edge of AVD#. Parameter Description 66 MHz 80 MHz (WS064J only) Unit JEDEC Standard tIACC Latency (Standard wait-state Handshake mode) for 8-Word and and Continuous 16-Word Burst Max 56 71 ns tIACC Latency (Standard wait-state Handshake mode) for 32-Word Burst Max 71 84 ns tBACC Burst Access Time Valid Clock to Output Delay Max 11.2 9.1 ns tACS Address Setup Time to CLK (Note 1) Min 4 ns tACH Address Hold Time from CLK (Note 1) Min 5.5 ns tBDH Data Hold Time from Next Clock Cycle Min 2 ns tCR Chip Enable to RDY Valid Max 11.2 9.1 ns tOE Output Enable to Output Valid Max 11.2 9.1 ns tCEZ Chip Enable to High Z Max 8 ns tOEZ Output Enable to High Z Max 8 ns tCES CE# Setup Time to CLK Min 4 ns tRDYS RDY Setup Time to CLK Min 4 ns tRACC Ready Access Time from CLK Max 11.2 9.1 ns tAAS Address Setup Time to AVD# (Note 1) Min 4 ns tAAH Address Hold Time to AVD# (Note 1) Min 5.5 ns tCAS CE# Setup Time to AVD# Min 0 ns tAVC AVD# Low to CLK Min 4 ns tAVD AVD# Pulse Min 10 ns tACC Access Time Max 55 55 ns tCKA CLK to access resume Max 11.2 9.1 ns tCKZ CLK to High Z Max 8 ns tOES Output Enable Setup Time Min 4 ns

74 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. Figure shows total number of wait states set to seven cycles. The total number of wait states can be programmed from
2. If any burst address occurs at a 64-word boundary, two additional clock cycle when wait state is set to less than 5 or

three additional clock cycle when wait state is set to 6 & 7 are inserted, and is indicated by RDY.

1. The device is in synchronous mode.

Figure 15. CLK Synchronous Burst Mode Read (rising active CLK) 7 cycles for initial access shown.

76 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. Figure shows total number of wait states set to seven cycles. The total number of wait states can be programmed from

two cycles to seven cycles. Clock is set for active rising edge.

1. If any burst address occurs at a 64-word boundary, two additional clock cycle are inserted, and is indicated by RDY.
2. The device is in synchronous mode with wrap around.
3. D0-D7 in data waveform indicates the order the data within a given 8-word address range, from lowest to highest.

Figure 18. 8-word Linear Burst with Wrap Around

1. Figure assumes 6 wait states for initial access and synchronous read.
2. The Set Configuration Register command sequence has been wr itten with A18=0; device will output RDY one cycle before

Figure 19. Linear Burst with RDY Set One Cycle Before Data 7 cycles for initial access shown. 6 wait cycles for initial access shown.

Note: RA = Read Address, RD = Read Data. Figure 20. Asynchronous Mode Read with Latched Addresses

78 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Note: RA = Read Address, RD = Read Data. Figure 21. Asynchronous Mode Read

Figure 22. Reset Timings

80 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Notes: 1. Not 100% tested. 2. Asynchronous mode allows both Asynchronous and Synchronous program operation. Synchronous mode allows both Asynchronous and Synchronous program operation. 3. In asynchronous program operation timing, addresses are latched on the falling edge of WE# or rising edge of AVD#. In synchronous program operation timing, addresses are latched on the first of either the rising edge of AVD# or the active edge of CLK. 4. See the Erase and Programming Performance section for more information. 5. Does not include the preprogramming time. Parameter Description 66 MHz 80 MHz (WS064J only) Unit JEDEC Standard tAVAV tWC Write Cycle Time (Note 1) Min 45 ns tAVWL tAS Address Setup Time (Notes 2, Synchronous Min ns Asynchronous 0 tWLAX tAH Address Hold Time (Notes 2, 3) Synchronous Min 5.5 ns Asynchronous 20 tAVDP AVD# Low Time Min 10 ns tDVWH tDS Data Setup Time Min 20 ns tWHDX tDH Data Hold Time Min 0 ns tGHWL tGHWL Read Recovery Time Before Write Min 0 ns tCAS CE# Setup Time to AVD# Min 0 ns tWHEH tCH CE# Hold Time Min 0 ns tWLWH tWP Write Pulse Width Min 20 ns tWHWL tWPH Write Pulse Width High Min 20 ns tSR/W Latency Between Read and Write Operations Min 0 ns tWHWH1 tWHWH1 Programming Operation (Note 4) Typ <7 µs tWHWH1 tWHWH1 Accelerated Programming Operation (Note 4) Typ <4 µs tWHWH2 tWHWH2 Sector Erase Operation (Notes 4, 5) Typ <0.2 sec Chip Erase Operation (Notes 4, 5) <104 tVID VACC Rise and Fall Time Min 500 ns tVIDS VACC Setup Time (During Accelerated Programming) Min 1 µs tVCS VCC Setup Time Min 50 µs tELWL tCS CE# Setup Time to WE# Min 0 ns tAVSW AVD# Setup Time to WE# Min 4 ns tAVHW AVD# Hold Time to WE# Min 4 ns tAVHC AVD# Hold Time to CLK Min 4 ns tCSW Clock Setup Time to WE# Min 5 ns

1. PA = Program Address, PD = Program Data, VA = Valid Address for reading status bits.
2. “In progress” and “complete” refer to status of program operation.
3. A22–A12 are don’t care during command sequence unlock cycles.
4. The Asynchronous programming operation is independent of the Set Device Read Mode bit in the Configuration Register.

Figure 23. Asynchronous Program Operation Timings: AVD# Latched Addresses

82 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. PA = Program Address, PD = Program Data, VA = Valid Address for reading status bits.
2. “In progress” and “complete” refer to status of program operation.
3. A22–A12 are don’t care during command sequence unlock cycles.
4. The Asynchronous programming operation is independent of the Set Device Read Mode bit in the Configuration Register.

Figure 24. Asynchronous Program Operation Timings: WE# Latched Addresses

1. PA = Program Address, PD = Program Data, VA = Valid Address for reading status bits.
2. “In progress” and “complete” refer to status of program operation.
3. A22–A12 are don’t care during command sequence unlock cycles.
4. Addresses are latched on the first of either the rising edge of AVD# or the active edge of CLK.
5. Either CE# or AVD# is required to go from low to high in between programming command sequences.
6. The Synchronous programming operation is dependent of the Set Device Read Mode bit in the Configuration Register. The

Configuration Register must be set to the Synchronous Read Mode. Figure 25. Synchronous Program Operation Timings: WE# Latched Addresses

84 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. PA = Program Address, PD = Program Data, VA = Valid Address for reading status bits.
2. “In progress” and “complete” refer to status of program operation.
3. A22–A12 are don’t care during command sequence unlock cycles.
4. Addresses are latched on the first of either the rising edge of AVD# or the active edge of CLK.
5. Either CE# or AVD# is required to go from low to high in between programming command sequences.
6. The Synchronous programming operation is dependent of the Set Device Read Mode bit in the Configuration Register. The

Configuration Register must be set to the Synchronous Read Mode. Figure 26. Synchronous Program Operation Timings: CLK Latched Addresses

1. SA is the sector address for Sector Erase.
2. Address bits A22–A12 are don’t cares during unlock cycles in the command sequence.

Figure 27. Chip/Sector Erase Command Sequence

86 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Note: Use setup and hold times from conventional program operation. Figure 28. Accelerated Unlock Bypass Programming Timing

1. Status reads in figure are shown as asynchronous.
2. VA = Valid Address. Two read cycles are required to determine status. When the Embedded Algorithm operation is

complete, and Data# Polling will output true data.

1. While in Asynchronous mode, RDY will be low while the device is in embedded erase or programming mode.

Figure 29. Data# Polling Timings (During Embedded Algorithm)

88 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Figure 32. DQ2 vs. DQ6 Figure 33. T emporary Sector Unprotect Timing Diagram

90 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

1. RDY active with data (A18 = 0 in the Configuration Register).
2. RDY active one clock cycle before data (A18 = 1 in the Configuration Register).
3. Cxx indicates the clock that triggers Dxx on the outputs; for example, C60 triggers D60. Figure shows the device crossing

a bank in the process of performing an erase or program. Figure 36. Latency with Boundary Crossing into Program/Erase Bank 00003Fh: (00007Fh, 0000BFh, etc.) Address 000000h is also a boundary crossing.

Note: Figure assumes address D0 is not at an address boundary, active clock edge is rising, and wait state is set to “101”. Figure 37. Example of Wait States Insertion

92 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Figure 38. Back-to-Back Read/Write Cycle Timings

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 93 Data Sheet Erase and Programming Performance Notes: 1. Typical program and erase times assume the following conditions: 25 °C, 1.8 V VCC, 100K cycles. Additionally, programming typicals assumes a checkerboard pattern. 2. Under worst case conditions of 90°C, V CC = 1.65 V, 1,000,000 cycles. 3. The typical chip programming time is considerably less than the maximum chip programming time listed. 4. In the pre-programming step of the Embedded Erase algorithm, all words are programmed to 00h before erasure. 5. System-level overhead is the time required to execute the two- or four-bus-cycle sequence for the program command. See Table 18, “Command Definitions,” on page 60 for further information on command definitions. 6. The device has a minimum erase and program cycle endurance of 100,000 cycles. Parameter Ty p (Note 1) Max (Note 2) Unit Comments Sector Erase Time 32 Kword <0.4 <2 s Excludes 00h programming prior to erasure (Note 4) 4 Kword <0.2 <2 Chip Erase Time 128J <103 s 064J <53 Word Programming Time <6 <100 µs Excludes system level overhead (Note 5) Accelerated Word Programming Time <4 <67 µs Chip Programming Time (Note 3) 128J <50.4 s Excludes system level overhead (Note 5)064J <25.2 Accelerated Chip Programming Time 128J <33 s 064J <17

94 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

VBH084 - 84-ball Fine-Pitch Ball Grid Array (FBGA) 8x11.6 mm MCP Compatible Package (128Mb) Note: BSC is an ANSI standard for Basic Space Centering 3339 \\ 16-038.25b NOTES: 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. 2. ALL DIMENSIONS ARE IN MILLIMETERS. 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010 (EXCEPT AS NOTED). 4. e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF SOLDER BALLS.

6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL

DIAMETER IN A PLANE PARALLEL TO DATUM C.

7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS

A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS.

10 A1 CORNER TO BE IDENTIFIED BY CHAMFER, LASER OR INK

MARK, METALLIZED MARK INDENTATION OR OTHER MEANS. PACKAGE VBH 084 JEDEC N/A 11.60 mm x 8.00 mm NOM PACKAGE SYMBOL MIN NOM MAX NOTE A --- --- 1.00 OVERALL THICKNESS A1 0.18 --- --- BALL HEIGHT A2 0.62 --- 0.76 BODY THICKNESS D 11.60 BSC. BODY SIZE E 8.00 BSC. BODY SIZE D1 8.80 BSC. BALL FOOTPRINT E1 7.20 BSC. BALL FOOTPRINT MD 12 ROW MATRIX SIZE D DIRECTION ME 10 ROW MATRIX SIZE E DIRECTION N 84 TOTAL BALL COUNT φb 0.33 --- 0.43 BALL DIAMETER e 0.80 BSC. BALL PITCH SD / SE 0.40 BSC. SOLDER BALL PLACEMENT (A2-A9, B10-L10, DEPOPULATED SOLDER BALLS M2-M9, B1-L1) BOTTOM VIEW TOP VIEW SIDE VIEW A1 CORNER A2A ML J K e C0.05 (2X) (2X) C0.05 E D BACEDFHG e SE BCA C Mφ 0.15 φ 0.08 M 0.10 C C0.08 NXφb SD A B C SEATING PLANE A1 CORNER INDEX MARK

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 95 Data Sheet VBR080 - 80-ball Fine-Pitch Ball Grid Array (FBGA) 7 x 9 mm (64Mb) Note: BSC is an ANSI standard for Basic Space Centering 3366 \\ 16-038.25d1 NOTES: 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. 2. ALL DIMENSIONS ARE IN MILLIMETERS. 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010 (EXCEPT AS NOTED). 4. e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF SOLDER BALLS. DIAMETER IN A PLANE PARALLEL TO DATUM C. A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. MARK, METALLIZED MARK INDENTATION OR OTHER MEANS. PACKAGE VBR 080 JEDEC N/A 9.00 mm x 7.00 mm NOM PACKAGE SYMBOL MIN NOM MAX NOTE A --- --- 1.00 OVERALL THICKNESS A1 0.17 - -- --- BALL HEIGHT A2 0.62 --- 0.73 BODY THICKNESS D 9.00 BSC. BODY SIZE E 7.00 BSC. BODY SIZE D1 7.20 BSC. BALL FOOTPRINT E1 5.60 BSC. BALL FOOTPRINT MD 10 ROW MATRIX SIZE D DIRECTION ME 8 ROW MATRIX SIZE E DIRECTION N 80 TOTAL BALL COUNT φb 0.35 --- 0.45 BALL DIAMETER e 0.80 BSC. BALL PITCH SD / SE 0.40 BSC. SOLDER BALL PLACEMENT NONE DEPOPULATED SOLDER BALLS BOTTOM VIEW A1 CORNER JK e BACEDFHG e SE BCA C Mφ 0.15 φ 0.08 M NXφb SD SIDE VIEW A2A 0.20 C C0.08C SEATING PLANE TOP VIEW C0.15 (2X) (2X) C0.15 E D A BA1 CORNER INDEX MARK

96 S29WS128J/064J S29WS-J_00_A6 May 11, 2006

Revision A0 (July 22, 2004) Initial release. Revision A1 (October 6, 2004) Add ‘BF’ parts on Valid Combination table. Revision A2 (December 10, 2004) Remove all in terms of 104MHz speed bin. Change statement of command during time-out period of sector erase. Change exit command statement about password program command Change exit command statement about password protection mode locking bit program command Change exit command statement about persistentsector protection mode locking bit program command Change exit command statement about Secured Silicon sector protection bit program command Change exit command statement about PPB program command Change exit command statement about All PPB erase command Change exit command statement about PPB/PPB lock bit status command Change PPB command table. Remove note 19 in command table. Change waveform about boundary crossing. Remove DC spec output disable status in synchronous read mode. Change the word from SMPL to PL , from OPBP to OW. Change the statement PPB Lock Bit Set Command. Delete VIO pin Added description at “RDY Configuration” in page56 Modified tAH in Asynchronous mode to 20ns in page89 Revision A3 (February 19, 2005) Change "Secsi" to "Secured Silicon" Add migration statement. Modify "Sync Latency", "Asyn Access time" @80MHz Update "Product Selector Guide" on tACC, tCE, tIACC@80MHz Modify Table 15( "Wait States for Standard Wait-state Handshaking") Change "Supply Voltage" to "1.70V to 1.95V for 80MHz parts Modify "CLK Characterization" table Revision A4 (June 24, 2005) Added information for "Revision 1" for boundary crossing while in Continuous read mode Removed all references to WS128J 80 MHz and WS064J Industrial grades Revision A5 (March 31, 2006) Updated the Valid Combinations table for the 128 Mb device

May 11, 2006 S29WS-J_00_A6 S29WS128J/064J 97 Data Sheet Revision A6 (May 11, 2006) Add new OPNs, supporting Industrial temperature Colophon The products described in this document are designed, developed and manufactured as contemplated for general use, including wit hout limitation, ordinary industrial use, general office use, personal use, and household use, but are not designed, developed and manufactured as contem plated (1) for any use that includes fatal risks or dangers that, unless extremely high safety is secured, could have a serious effect to the public, and could lead directly to death, personal injury, severe physical damage or other loss (i.e., nuclear reaction control in nuclear facility, aircraft flight control, air traffic control, mass transport control, medical life support system, missile launch control in weapon system), or (2) for any use where chance of failure is intolerable (i.e., submersible repeater and artificial satellite). Please note that Spansion will not be liable to you and/or any third party for any claims or damages ari sing in connection with above-men- tioned uses of the products. Any semiconductor device has an inherent chance of failure. Y ou must protect against injury, damage or loss from such failures by incorporating safety design measures into your facility and equipment such as redundancy, fire protection, and prevention of over-current levels and other abnormal operating conditions. If any products described in this document represent goods or technologies subject to certain re strictions on export under the Foreign Exchange and Foreign Trade Law of Japan, the US Export Administration Regulations or the applicable laws of any oth er country, the prior au- thorization by the respective government entity will be required for export of those products. Trademarks and Notice The contents of this document are subject to change without notice. This document may contain information on a Spansion product under development by Spansion. Spansion reserves the right to change or discontinue work on any product without notice. The information in this document is provided as is with- out warranty or guarantee of any kind as to its accuracy, completeness, operability, fitness for particular purpose, merchantability, non-infringement of third- party rights, or any other warranty, express, implied, or statutory. Spansion assumes no liability for any damages of any kind arising out of the use of the information in this document. Copyright © 2005-2006 Spansion LLC. All Rights Reserved. Spansion, the Spansion logo, MirrorBit, ORNAND, and combinations thereof are trademarks of Spansion LLC. Other names are for informational purposes only and may be trademarks of their respective owners.