FCC ID: 2AYHQ-IS-4500-C1 RFID Reader

RF Protocol Document No.: XCT-RFP-EV100 Revision No.: 1 Date of revision: 2020-11-06 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Contents Specification 3 Configuration of IS-4500C1 3 2.1 Connect 3 2.2 USB Driver 4 Operation method of IS-4500C1 RFID 5 Usage of ISReaderPro V3.0 6 Protocol Format 8 5.1 Request (Target , PC IS-4500C1) 8 5.2 Request (Target , PC IS-4500C1) 8 Check Sum Calculation method 9 Protocol (NTAG) 10 7.1 NTAG Active Request (Target , PC IS-4500C1) 10 7.2 NTAG Active Response (IS-4500C1 Target , PC) 10 7.3 NTAG Authenticate Request (Target , PC IS-4500C1) 11 7.4 NTAG Authenticate Response (IS-4500C1 Target , PC) 11 7.5 NTAG Authenticate Key Value Change Request (Target , PC IS-4500C1) 12 7.6 NTAG Authenticate Key Value Change Response (IS-4500C1 Target , PC) 12 7.7 NTAG Block Read 16 Byte Request (Target , PC IS-4500C1) 13 7.8 NTAG Block Read 16 Byte Response (IS-4500C1 Target , PC) 13 7.9 NTAG Block Read 4 Byte Request (Target , PC IS-4500C1) 14 7.10 NTAG Block Read 4 Byte Response (IS-4500C1 Target , PC) 14 7.11 NTAG Block Write 4 Byte Request (Target , PC IS-4500C1) 15 7.12 NTAG Block Write 4 Byte Response (IS-4500C1 Target , PC) 15 7.13 NTAG Block Write 16 Byte Request (Target , PC IS-4500C1) 16 7.14 NTAG Block Write 16 Byte Response (IS-4500C1 Target , PC) 16 7.15 Version Read Request (Target , PC IS-4500C1) 17 7.16 NTAG Version Read Response (IS-4500C1 Target , PC) 17 7.17 Sign ECC Read Request (Target , PC IS-4500C1) 18 7.18 NTAG Sign ECC Read Response (IS-4500C1 Target , PC) 18 7.19 AUTH0 Write Request (Target , PC IS-4500C1) 19 7.20 NTAG AUTH0 Write Response (IS-4500C1 Target , PC) 19 7.21 Access Protect Write Request (Target , PC IS-4500C1) 20 7.22 NTAG Access Protect Write Response (IS-4500C1 Target , PC) 20 7.23 AUTH0, Access Protect State Request (Target , PC IS-4500C1) 21 7.24 NTAG AUTH0, Access Protect State Response (IS-4500C1 Target , PC) 21 7.25 24Bit Read Request (Target , PC IS-4500C1) 22 7.26 NTAG 24Bit Counter Read Response (IS-4500C1 Target , PC) 22 7.27 24bit Enable Request (Target , PC IS-4500C1) 23 7.28 NTAG 24bit Counter Enable Response (IS-4500C1 Target , PC) 23 7.29 24bit Protect Request (Target , PC IS-4500C1) 24 7.30 NTAG 24bit Counter Protect Response (IS-4500C1 Target , PC) 24 7.31 NTAG 24bit Counter Enable, Protect State Request (Target , PC IS-4500C1) 25 7.32 NTAG 24bit Counter Enable, Protect State Response (IS-4500C1 Target , PC) 25

[CONFIDENTIAL]

Page 1 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Related Document 26

[CONFIDENTIAL]

Page 2 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Specification Category RF Frequency Power Supply Supply Current Dimensions RF Protocol Host Interface Antenna RF Power Read Range Anticollision Contents 13.56MHz 4.5 to 5.5V DV Operation 40mA @ 5V 43*35*6 mm ISO 14443-A TTL232, USB To Serial(FTDI USB Chip) 50-ohm Internal antenna 150mW @ 5V 50mm internal ant Support(1tags) Configuration of IS-4500C1 2.1 Connect PCB Top The RFID Reader is used after being mounted inside the equipment.

[CONFIDENTIAL]

Page 3 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) PCB Bottom 2.2 USB Driver HID USB KeyBoard USB To Serial Driver o Automatically recognized without the need for driver installation. o USB Chip : FTDI230x o Download site : http://www.ftdichip.com/Drivers/VCP.htm

[CONFIDENTIAL]

Page 4 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Operation method of IS-4500C1 RFID Dummy RFID Reader Support Auto Polling RFID Reader Support

[CONFIDENTIAL]

Page 5 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Usage of ISReaderPro V3.0 Enable NTAG. Authenticate NTAG. Change the value of the authentication key for the NTAG. Retrieves block data from NTAG (16 bytes) Write block data from NTAG. (4Byte) Write the 16 Byte size to the NTAG at once. Check the version and type of NTAG. Reads the Sign ECC value of the NTAG.

[CONFIDENTIAL]

Page 6 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) You can view the current AUTH0 block address and Write/Read Protect settings Enter the block address to set up protection.

- Available after authentication processing. You can set the AUTH0 block data Write/Read Protect.

- (2) Can be used after authentication processing

- See the NTAG datasheet for more information. information.

- Available after authentication processing. Reads the 24 Bit Counter value. processing. use it in general.

- (2) Can be used after authentication processing 24 Bit Counter Reads the current setup state. Reads blocks in 4 bytes. You can enable and disable the 24 Bit Counter. It can be used after authentication You can decide whether to use it after authentication processing with 24 Bit Counter, or to

[CONFIDENTIAL]

Page 7 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Protocol Format 5.1 Request (Target , PC IS-4500C1) BYTE DESC REMARK 0x01 Hex Start Data Command Hex High rang command Command Hex Low rank command Hi Byte Low Byte Packet Lens Hex Request Data Hex Hex Hex See Check Sum calculation method 03 Hex End Data A buzzer beep command when successful after Command2 is performed. Command2 top-level bit to 1 will be beep, no beep if top-level bit is zero

[ Exmaple ] Card Serial Num , Beep sound generated Command Command = 0x20 | 0x80;

BIT 6 0 BIT 5 1 BIT 4 0 BIT 3 0 BIT 2 0 BIT 1 0 BIT 0 0 Command 5.2 Request (Target , PC IS-4500C1) BYTE DESC REMARK 1 1 1 2 N 1 1 1 1 1 1 2 N ITEM STX Command1 Command2 Data Length Data Length Check Sum Data ETX BIT 7 1 Beep sound generated ITEM STX Command1 Command2 State Data Length Data Length Data 0x01 Hex Start Data Command Hex High rang command Command Hex Low rank command Hi Byte Low Byte Response state 0x01 : normal, 0xFF: error Hex Hex Hex Packet Lens Hex Request Data

[CONFIDENTIAL]

Page 8 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Check Sum ETX 1 1 03 Hex See Check Sum calculation method Hex End Data Check Sum Calculation method Check Sum = (BYTE)(Command1 + Command2 + Length(0) + Length(1) + Data(0) +

Data(1) + Data(n) ) Example 1:

0x01 0x00 0x16 0x00 0x00 0x16 0x03 CMD1 CMD2 Length(0) Length(1) Check Sum 0x00 + 0x16 + 0x00 + 0x00 0x16 0x16 = 0x00 + 0x16 + 0x00 + 0x00 Excluding Stx, Etx, CheckSum Check Sum = (BYTE)(Command1 + Command2 + STATE + Length(0) + Length(1) +

Data(0) + Data(1) + Data(n) ) Example 1:

0x01 0x00 0x16 0x01 0x00 0x00 0x16 0x03 CMD1 CMD2 STATE Length(0) Length(1) Check Sum 0x00 + 0x16 + 0x01 + 0x00 + 0x00 0x17 0x17 = 0x00 + 0x16 + 0x01 + 0x00 + 0x00 Excluding Stx, Etx, CheckSum

[CONFIDENTIAL]

Page 9 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Protocol (NTAG) 7.1 NTAG Active Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.2 NTAG Active Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens See Check Sum calculation method End Data 1 1 1 2 1 1 1 1 1 1 2 1 1 0x01 0x05 0x20 0x00 0x00 03 0x01 0x05 0x20 0x00 4, 7 03 0x01, 0xFF Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex

[CONFIDENTIAL]

Page 10 of 26 Data 4, 7 UID Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.3 NTAG Authenticate Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK Hex Authenticate Key Value Hex See Check Sum calculation method 03 Hex End Data 7.4 NTAG Authenticate Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK 1 1 1 2 4 1 1 1 1 1 1 2 1 1 0x01 0x05 0x30 0x00 0x04 0x01 0x05 0x30 0x00 0x00 03 0x01, 0xFF Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 0x05 : NTAG, Ultralight Command Start Data Packet Lens 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method STX Command 1 Command 2 Data Length Data Length Data Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX

[CONFIDENTIAL]

Page 11 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.5 NTAG Authenticate Key Value Change Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.6 NTAG Authenticate Key Value Change Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Data Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX 1 1 1 2 4 1 1 1 1 1 1 2 1 1 0x01 0x05 0x3B 0x00 0x04 03 0x01 0x05 0x3B 0x00 0x00 03 0x01, 0xFF Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Start Data 0x05 : NTAG, Ultralight Command Packet Lens Hex Authenticate Key Value Hex See Check Sum calculation method Hex End Data Start Data 0x05 : NTAG, Ultralight Command 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method

[CONFIDENTIAL]

Page 12 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.7 NTAG Block Read 16 Byte Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.8 NTAG Block Read 16 Byte Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data ETX Check Sum 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens Block Data 16 Byte See Check Sum calculation method End Data 1 1 1 2 1 1 1 1 1 1 2 16 1 1 0x01 0x05 0x22 0x00 0x00 03 0x01 0x05 0x22 0x00 0x10 03 0x01, 0xFF Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex

[CONFIDENTIAL]

Page 13 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.9 NTAG Block Read 4 Byte Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 03 Hex End Data 7.10 NTAG Block Read 4 Byte Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Data Data Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data ETX Check Sum Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 1 1 2 N 1 1 0x01 0x05 0x22 0x00 0x02 0x01 0x05 0x22 0x00 N 03 0x01, 0xFF 0x05 : NTAG, Ultralight Command Start Data Packet Lens Start Block Address Hex End Block Address Hex See Check Sum calculation method 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens Block Data End Data See Check Sum calculation method

[CONFIDENTIAL]

Page 14 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.11 NTAG Block Write 4 Byte Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK Check Sum Hex See Check Sum calculation method 03 Hex End Data 7.12 NTAG Block Write 4 Byte Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex Block Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 4 1 1 1 1 1 1 2 1 1 0x01 0x05 0x23 0x00 0x04 0x01 0x05 0x23 0x00 0x00 03 0x01, 0xFF STX Command 1 Command 2 Data Length Data Length Data ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX

[CONFIDENTIAL]

Page 15 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.13 NTAG Block Write 16 Byte Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK Hex Block Data Hex See Check Sum calculation method 03 Hex End Data 7.14 NTAG Block Write 16 Byte Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 16 1 1 1 1 1 1 2 1 1 0x01 0x05 0x23 0x00 0x10 0x01 0x05 0x23 0x00 0x00 03 0x01, 0xFF 0x05 : NTAG, Ultralight Command Start Data Packet Lens 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method STX Command 1 Command 2 Data Length Data Length Data ETX Check Sum STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX

[CONFIDENTIAL]

Page 16 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.15 Version Read Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.16 NTAG Version Read Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data ETX Check Sum 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens NTAG Version information See Check Sum calculation method End Data Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 2 N 1 1 0x01 0x05 0x32 0x00 0x00 03 0x01 0x05 0x32 0x00 N 03 0x01, 0xFF

[CONFIDENTIAL]

Page 17 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.17 Sign ECC Read Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.18 NTAG Sign ECC Read Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data ETX Check Sum 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens Sign ECC Data End Data See Check Sum calculation method Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 2 N 1 1 0x01 0x05 0x33 0x00 0x00 03 0x01 0x05 0x33 0x00 N 03 0x01, 0xFF

[CONFIDENTIAL]

Page 18 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.19 AUTH0 Write Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.20 NTAG AUTH0 Write Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Data Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex AUTH0 Data Hex See Check Sum calculation method 03 Hex End Data Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 1 2 1 1 0x01 0x05 0x35 0x00 0x01 0x01 0x05 0x35 0x00 0x00 03 0x01, 0xFF 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method

[CONFIDENTIAL]

Page 19 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.21 Access Protect Write Request (Target , PC IS-4500C1) BYTE DESC 7.22 NTAG Access Protect Write Response (IS-4500C1 Target , PC) BYTE DESC 0x05 : NTAG, Ultralight Command See Check Sum calculation method REMARK Start Data 0x01 : success 0xFF : failure Packet Lens End Data REMARK Start Data 0x05 : NTAG, Ultralight Command Packet Lens 0x00 : Write Protect 0x01 : Read/Write Protect See Check Sum calculation method End Data Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 1 2 1 1 1 1 1 2 1 1 1 0x01, 0xFF 0x01 0x05 0x35 0x00 0x00 03 0x01 0x05 0x35 0x00 0x01 03 0x00, 0x01 Hex ITEM STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX ITEM STX Command 1 Command 2 Data Length Data Length Data ETX Check Sum

[CONFIDENTIAL]

Page 20 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.23 AUTH0, Access Protect State Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.24 NTAG AUTH0, Access Protect State Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data Data Check Sum ETX 0x01 0x05 0x37 0x00 0x00 03 0x01 0x05 0x37 0x00 0x02 0x01, 0xFF 0x00, 0x01 1 1 1 2 1 1 1 1 1 1 2 1 1 1 1 Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens AUTH0 Data Access Protect 0x00 : Write Protect 0x01 : Read/Write Protect See Check Sum calculation method 03 End Data

[CONFIDENTIAL]

Page 21 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.25 24Bit Read Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.26 NTAG 24Bit Counter Read Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Check Sum Data ETX 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens 24Bit Counter Data See Check Sum calculation method End Data Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 2 3 1 1 0x01 0x05 0x31 0x00 0x00 03 0x01 0x05 0x31 0x00 0x03 03 0x01, 0xFF

[CONFIDENTIAL]

Page 22 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.27 24bit Enable Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.28 NTAG 24bit Counter Enable Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Data ETX Check Sum STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Start Data 0x05 : NTAG, Ultralight Command Packet Lens 0x00 : Disable 0x01 : Enable End Data See Check Sum calculation method Start Data 0x05 : NTAG, Ultralight Command 0x01 : success 0xFF : failure Packet Lens End Data See Check Sum calculation method 0x00, 0x01 Hex 1 1 1 2 1 1 1 1 1 1 1 2 1 1 0x01 0x05 0x38 0x00 0x01 03 0x01 0x05 0x38 0x00 0x00 03 0x01, 0xFF

[CONFIDENTIAL]

Page 23 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.29 24bit Protect Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.30 NTAG 24bit Counter Protect Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Data ETX Check Sum STX Command 1 Command 2 STATE Data Length Data Length Check Sum ETX Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Start Data 0x05 : NTAG, Ultralight Command Packet Lens 0x00 : Protect Disable 0x01 : Protect Enable See Check Sum calculation method End Data Start Data 0x01 : success 0xFF : failure Packet Lens End Data 0x05 : NTAG, Ultralight Command See Check Sum calculation method 0x00, 0x01 Hex 1 1 1 2 1 1 1 1 1 1 1 2 1 1 0x01 0x05 0x38 0x00 0x01 03 0x01 0x05 0x38 0x00 0x00 03 0x01, 0xFF

[CONFIDENTIAL]

Page 24 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) 7.31 NTAG 24bit Counter Enable, Protect State Request (Target , PC IS-4500C1) ITEM BYTE DESC REMARK 7.32 NTAG 24bit Counter Enable, Protect State Response (IS-4500C1 Target , PC) ITEM BYTE DESC REMARK STX Command 1 Command 2 Data Length Data Length Check Sum ETX STX Command 1 Command 2 STATE Data Length Data Length Data Data Check Sum ETX 0x05 : NTAG, Ultralight Command Start Data Packet Lens Hex See Check Sum calculation method Hex End Data 0x05 : NTAG, Ultralight Command Start Data 0x01 : success 0xFF : failure Packet Lens 0x00 : 24Bit Counter Disable 0x01 : 24Bit Counter Enable 24Bit Counter 0x01 : Protect Enable See Check Sum calculation method End Data Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex Hex 1 1 1 2 1 1 1 1 1 1 2 1 1 1 1 0x01 0x05 0x3A 0x00 0x00 03 0x01 0x05 0x3A 0x00 0x02 0x01, 0xFF 0x00, 0x00 03 0x00, 0x01 Hex 0x00 : Protect Disable

[CONFIDENTIAL]

Page 25 of 26 Title: RF Protocol Doc.#: XCT-RFP-EV100 (Rev. 1) Related Document IS-4500C1-Reader-NTAG_Manual (IKSUNG ELECTRONICS) 9. FCC Statement and User Information This module satisfies the Part15C rule, and when integrated into the host, it must be verified that it meets the Part 15B standard. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and

(2) this device must accept any interference received, including interference that may cause undesired operation. Changes or modifications not expressly approved by the manufacturer (or party responsible) for compliance could void the users authority to operate the equipment The satisfy FCC exterior labeling requirements, the following text must be placed on the exterior of the end product.

- Contains Transmitter module FCC ID: 2AYHQ-IS-4500-C1 This device complies with FCC radiation exposure limits set forth for an uncontrolled environment. This device must not be co-located or operating in conjunction with any other antenna or transmitter. This device is intended only for OEM integrators and following statements shall be included to host user manual: This module may not be co-located with any other transmitters or antennas. This module uses an integrated PCB loop antenna, and only this antenna should be used. As long as conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their end-product for any additional compliance requirements with this module installed. In the event that this condition cannot be met, then the FCC authorizations are no longer considered valid and the FCC ID cannot be used on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product including this module and obtaining separate FCC authorizations.

[CONFIDENTIAL]

Page 26 of 26

Label and Location FCC ID: 2AYHQ-IS-4500-C1 Label Location

* This lable is attached to the front of the product and not easily removed.

CONFIDENTIALITY REQUEST Federal Communication Commission Equipment Authorization Division, Application Processing Branch 7435 Oakland Mills Road Columbia, MD 21048 December 23*, 2020 TO WHOM IT MAY CONCERN Pursuant to Paragraphs 0.457 and 0.459 of the Commissions Rules (47 C.F.R.) and Section 552(b)(4) of the Freedom of Information Act, XCATH, Ine requests confidentiality for the following products:

FCC ID Number Product Title/Model 2AYHQ-IS-4500-C1 IS-4500-C1 The following exhibits contain trade secrets and proprietary information that could be of benefit to our competitors regarding the design of our product. This material is not customarily available to the general public and we request that it be withheld from public inspection. We request that the following information submitted be held permanent confidential treatment. Permanent Confidential Request

- Schematics

- Block diagram

- Part List

- Operational description We request that the following information submitted be held short-term confidential treatment for 180 days. Short- term Confidential Request

- Internal photo

- External photo

- Users manual

- Setup photo If you have any questions, please feel free to contact me at the address shown below. Best regards, Type Name: Tae Woo Kwag Title: CEO E-mail:

Company name: XCATH, Inc

SUOISIAIC UOHeoIZHIE9 oy} Aq poutnbal se S}USWINOOP UOHwoTT}J09 AuB UINJOI pu OJOIOY] eoUDIEJOI AUB SUIEIUOD JU) Jae Bustoape |e JO asn snuAUOdsIp uoIBOYyNIIA9 Jo UOHe]JOIUvO 10 UOISsUedsns Uodn peziioyyneun 40 Surpea|s!wi Jopisuos Avw UOISIAIG UONBOY IAD ay) YoY UOHROI9 yonpoud ino Surpredas juowioyeys Aue oyeut jou pue oyndaisip oyu! UOISIAIG YoRBOIIED oy} Sulzg 0} se JoUUeU & YoNs UL UOHBoYNIE9 yonposd sno asn Jou op Spoqursd usaq sey UONeoIpI1199 Yyorya 10} odoos ayy Jo yoodso ur A[Uo uoLeoyn109 SurpreSor suejo oyeuL syufe[dwios Jo uoLNJosai pue (JUdLUISsassvad souRTIIOAINS GuOLUssasse uoHoadsut Burjsoq *3'9) UoTJenjeAs Jo sosodind ay Joy ;ouUossed pue (syodas qipne [eusojur SUIPN[OU!) Spsoded sare [[B 0} SsoooR pue UOTe}USWUNIOp SUIUIWeXe JOJ UOTSTAOId Sulpnjour uonenjeas ay Jo ionpuoo oy} Joy sjUoWIOSUBLIE AressoooU [|v oyeU sureaZoid UoHed1413190 oY} JO suOIsTAOsd yuBAdTAI aU} YIM ATduI0d q

(e 10] o]q!suodsay axe OM Jey} 9Z1USOOAA |[}s OM UOTE INO se YT) SuizisoUpNe Uy E58 O'S'N IZ 8861 JO IOV Osnqy BrIq-HUY at Jo [OE YONag o1 JUENsind syyouaq QO_ sepnjout yey} siyousg Jelapay Jo [eluep vB 0} Joolgns jou axe aM JeYY AJIIOD Aqazay poudisiopun ayy ]

UMO INO JO S}oR Sv JOaTJo OWES oY] OALY, Tleys J[eYaq Ino Uo va1oy~T7] Aq INO poled syor [Je pue UY sJa}eUT osoy} 0} SuNeIOI sjuauNOOP Tle Jo Suusis Suipnjour uopeztoyine yuowdinbe soy uoeodde 0} Suyejar srouueW [[e ur Jyeyoq INO UO JOB 0} YT Se 0} pauayos JOYRIDY pUk ROIOY-TA ozlJOyINe AqoJoy poudisiopun ou J ruJ990U09 ABUT JT WOYM OF, VSN 8ES76 WO Juoulsly PONS BINS ELI LY UOISIAIG UONBOTpIVAD

(SOO TN Apeunog) our saoateg uoneoyLIOA 1], x) 9PO1T CIN BIQuinjo) PeOe STTHAL PUBPIEO SePL UOISSILIOD SuOJBoTUNUIWIOD [eIOpo.]

0Z0Z OQuId9aq Jo WIEZ seq aseqelep DOJ Ul JoBIUOS poo aoquRIT YIM JUSWIOOI3e UI oq JsnUI oANJeUSIS pozLioyINY SN 0} [BUISLI puds pur peayione| Aueduiod uo q! odd} pur yeULIO} dy) MOT]O OseaIq %

UOISIAIG UOTIBOLHIOD, ou) YM Buy voy uoneorydde nok yim Suoje ques oq |]IM Joye] UOHeZLOYINE sIY, |

ORivAg oul FLLVOX soureu Kuedwiog PEO O90 RL SemMy OOM OB], :oueN odd], sino X AJaJOOUIS queorfdde oy) woy so0Uu UaTLIM JoyLNy [HUN pyeA st UONRZLOyINE sty Udye} SUO!JOR BY) JUSUNDOp Q SuoneoryqI00 Joy sJuoWoINbas oy} YIM souLT[dwod yoajye JeY} SodIAJas 10 s}onpo.d UI punoy sojoualoljap Aue pur sjurejdwioo yons 0} Joodsas yum UONe ayeLidosdde oye) cf paysonbas usyM UOISIAIG UOTBOIJIIE_ OY) 0} d1qQEI[TEAR SpJO9eI aSoy} SYBUI 0} PUL PLPULIS JURAPTAI oY) JO SJUaATINbaI YM soueI|duI09 Sjonpoad oy} 01 Sunejas sn ay} 0} UMOUY opeut syute|dwto |e Jo ps0daI v dosy G SUOISIAIG UONBaIHIED oy}

Jo squawiarnbor ay} YIM saljduioo Buistoape 10 soanyooug sjuswndop se yons PIPSW UONBOIUNWLOS UI UONeIZI1199 Jonpoad no 0} douarago Aue yey} onsus (y rouueul Suripeostur B UI pasn SI Joosoy} Wed Aue Jou yoda Jo ayvoyI1100 OU yey oNSUA 0} JOABapUDd (3 isprepurys parroads yim AMUWUOJUOS UI Bulag se poiji.199 o1e sjonposd oy oyeo!pul 0} ATU UOOII}100 osN Gg