Specify the allowed key combinations before freezing the pin map

Membrane Switch Matrix Ghosting: Define Multi-Key Inputs

Specify which membrane-switch keys may be pressed together, how the controller scans them and what events the equipment must accept or reject. A correct single-key continuity result does not establish multi-key recognition. In a matrix, different physical closures can produce the same raw observation. Check the actual circuit and scan method, then verify required combinations and release sequences on the controlled assembly.

Executive answer

Three decisions behind a multi-key requirement

  • A multi-key claim needs a defined scan method and an explicit list of required combinations, not only a key count.
  • Suppressing an ambiguous key can prevent a false event while also losing a required real press.
  • Keep physical closures, raw scanner observations and application commands separate in the acceptance record.

Current guidance context

What OEM engineers and sourcing teams should decide first

A keypad can pass every individual contact check and still fail a required shortcut. The missing requirement may be concurrent-key recognition rather than a faulty switch. Before releasing the tail pinout, list the operations that require one key to remain held while another is pressed. Include foreseeable accidental overlaps, not just the intended demonstration sequence.

For purchasing, ask each supplier to identify the boundary of its offer. A passive membrane circuit does not include host scanning or firmware merely because the quotation says keypad. If electronics are included, identify their exact revision and the event behavior being accepted. This keeps two visually identical panels from being treated as functionally interchangeable without evidence.

01

Name the scan method before counting simultaneous keys

In a passive matrix, a closed key connects its assigned row and column. The controller must interpret those connections. Microchip's AN3407 distinguishes a simple whole-axis scan from reading one driven line at a time; its whole-axis example can confuse two concurrent presses. Therefore, a statement that ghosting starts only with three keys is not a safe specification for every scanner.

Keep two documents aligned: the switch connection map and the receiver's observation rule. A drawing showing four keys in a rectangle does not tell you whether the firmware records individual row samples, only summarizes active rows and columns, or uses a dedicated controller with its own suppression rules. The same contact map can produce different reported events under those methods.

Microchip AN3407: compare the scan methods on pages 4–6
02

Worked example: identical key maps, different observations

This hypothetical example is HYR editorial synthesis, not a customer circuit or measured specimen. Define A at R1–C1, B at R1–C2, C at R2–C1 and D at R2–C2. Assume ideal passive contacts without isolation diodes. All keys remain stable throughout each scan; resistance, leakage, settling and contact bounce are outside this logical model.

Model S keeps only the set of active rows and the set of active columns, then treats every intersection of those sets as pressed. With only A and D closed, both rows and both columns are present. This rule produces A, B, C and D even though only two contacts are closed. The ambiguity comes from losing the pairing information.

Model R drives one row low at a time, leaves the other row high impedance and reads pulled-up columns. With A and D closed, the separate row samples identify those two positions. But with A, B and C closed, driving R2 low creates a path through C, A and B to C2. The raw sample therefore also indicates D, which was not pressed.

Under Model R, those three closures and all four closures produce the same stable raw result. The comparison table turns that observation into a purchasing decision: the required command must not depend on guessing which physical state occurred. These outputs apply only to the defined ideal models; an actual controller may suppress, filter or otherwise report them differently.

03

Anti-ghosting can reject a real key instead of recognizing it

Analog Devices' MAX7360 data sheet provides a concrete distinction: its ghost-key handling can withhold the additional key that creates an ambiguous rectangle. That prevents a ghost event but does not promise acceptance of every three-key combination. This is a documented behavior of that component, not a statement that HYR uses it or that its ratings apply to a membrane panel.

Translate terms such as anti-ghosting or multi-key support into an event requirement. For a required chord, state exactly which keys must be reported while held together. For a prohibited overlap, state whether the application ignores the extra input, inhibits a command or waits for release. The equipment owner must choose the response; the supplier should not infer it from marketing terminology.

Debounce addresses changes over time. Taking more samples of the same ambiguous stable observation does not, by itself, recover the missing physical distinction in the example. History-based firmware can enforce a rejection policy, but that is different from proving arbitrary concurrent-key recognition. Validate the policy with both press order and release order.

MAX7360 data sheet: ghost-key handling on page 18
04

Convert the required chord into an acceptance record

For the hypothetical A–D panel, suppose A and D must work together but any three-key overlap must be rejected. Model S already misses the required two-key distinction. Model R passes that ideal static pair check, but its raw three-key result still needs a controlled rejection rule. Neither statement approves a complete design: first choose a circuit and receiver that can meet the required behavior, then verify the actual implementation.

Write each test row as an ordered sequence: initial released state; keys applied and their order; held state; keys released and their order; final recovery. Record the intended application command alongside the observed raw scanner state and accepted events. For near-simultaneous inputs, define the test timing relative to the real scan and debounce settings rather than assuming both contacts close at the same instant.

Include startup with a held key, an extra held key during a required chord, and recovery after the rejected combination is removed when those conditions are relevant to the equipment. Decide whether recovery requires all keys released or another explicit action. These are proposed acceptance fields, not a universal safety procedure or a prescribed timing limit.

Keep circuit resistance and voltage margin in a separate but linked record. Correct logical mapping cannot compensate for an input that never reaches a valid level. Conversely, valid voltage on every tested pin does not prove that the application interprets concurrent states correctly.

Define the separate electrical resistance and input budget
05

Five acceptance gaps that a single-key test can miss

Use these review scenarios to locate the missing requirement. They are not reported HYR failures.

  • Wrong observation model: a quote assumes individual-row scanning while the host software keeps only active row and column sets.
  • Required key suppressed: the controller avoids a ghost event but drops a real key needed for the intended command.
  • Order-dependent acceptance: the demonstration passes in one press order, while a different order or release sequence produces another event.
  • Recovery left undefined: a rejected overlap clears, but the equipment accepts a remaining held key as an unintended new action.
  • Uncontrolled substitution: a pin-map, receiver or firmware change alters combination behavior even though each individual contact still passes inspection.
06

Release a testable RFQ, not a universal rollover claim

Issue one controlled package linking the named keys, matrix coordinates, tail contacts and mating connector view to the allowed-combination list. Add the host circuit and scan description, event acceptance record and responsibility for assembled testing. When comparing quotations, flag any supplier assumption that changes this interface or moves controller validation outside the quoted scope.

A useful supplier response identifies the circuit revision, continuity and isolation checks included, any supplied electronics, and exclusions. The OEM's system record should identify firmware, configuration, test sequences and accepted application actions. Retain a representative approved assembly and its configuration so later changes can be compared against the same behavior.

For an HYR engineering review, send the controlled matrix and combination requirements through the secure RFQ. Identify unresolved cases before fixing artwork and connector allocation. If a required state cannot be distinguished with the proposed interface, return the architecture decision to the electronics owner instead of relaxing the inspection wording.

Send the matrix and event requirements for review

Decision matrix

Four-key worksheet: raw observations are not accepted commands

Original hypothetical model: A=R1–C1, B=R1–C2, C=R2–C1, D=R2–C2; stable ideal contacts, no isolation diodes. S combines active row and column sets. R scans one low row at a time with other rows high impedance and columns pulled up.

Decision factorModel S raw resultModel R raw resultRequirement decision
A aloneAAA passing individual-key check does not test any overlap.
A and B: shared rowA, BA, BThis pair does not establish recognition of a diagonal pair.
A and D: opposite cornersA, B, C, DA, DIf this pair is required, S loses the distinction even with only two keys.
A, B and C: three cornersA, B, C, DA, B, C, DD is an extra raw indication. Do not equate suppression with accepting all three real keys.
A, B, C and D: all closedA, B, C, DA, B, C, DThe same raw result can describe a different physical state; define architecture and rejection policy.

The results are independently calculated logical examples, not MAX7360 output predictions or HYR test results. They omit electrical thresholds and time behavior. Test the selected hardware and firmware, including press/release order and recovery, before approving a combination requirement.

Before the RFQ

Frequently asked questions

Scan method

Does membrane-keypad ghosting always require three pressed keys?

No. The count depends on the observation method and circuit. In the defined whole-axis summary model, two opposite-corner keys already lose their pairing information. In the defined individual-row model, the three-corner example creates an extra raw indication. Specify the actual scanner instead of applying one universal threshold.

Debounce

Can a longer debounce interval solve matrix ghosting?

Not by itself when different stable physical states produce the same raw observation. More repeated samples do not restore that missing distinction. Firmware may reject ambiguous states, but the required accepted and rejected events still need to be defined and tested.

Rollover

Does anti-ghosting mean every required key combination will work?

No. An implementation may suppress an ambiguous additional key. That can avoid a false event while losing a real key needed for a command. Ask which exact combinations and ordered press/release sequences the selected implementation accepts.

Inspection

Is testing every key individually enough for a multi-key RFQ?

No. Individual checks verify only their specified contact and mapping conditions. Multi-key acceptance also needs the required overlaps, rejected cases and recovery behavior tested with the controlled controller and firmware, with component and system responsibilities identified.

A useful fit when

Who this guide helps

  • OEM teams specifying passive membrane-keypad matrices and the boundary between the supplied switch circuit and host electronics.
  • Replacement or new-control reviews involving modifier keys, overlapping presses, shortcuts or single-key lockout requirements.

Limits to resolve

Scope and limitations

  • The four-key example is an ideal logical model without isolation diodes, electrical tolerances or timing. It is not a tested HYR product or a controller recommendation.
  • This worksheet does not establish emergency-stop, two-hand control or other safety-function suitability. The responsible equipment designer retains system validation.

Prepare the RFQ

What to send for a useful review

  1. 01

    Controlled key names, row/column assignments, tail pin numbers and connector viewing direction.

  2. 02

    Required simultaneous combinations, forbidden overlaps and behavior for an extra or stuck key.

  3. 03

    Actual scanner or controller identity, schematic, inactive-line states and relevant firmware revision.

  4. 04

    Expected press, hold, repeat, release, lockout and recovery events for each accepted or rejected sequence.

  5. 05

    Supplier component-test boundary versus OEM assembled-controller test boundary, with an owner for each record.

Evidence boundary

Evidence and editorial method

The four-key table is original HYR editorial synthesis using two explicitly defined ideal scan models and source-led interpretation. It demonstrates ambiguous observations, not measured keypad behavior. No HYR multi-key, timing, safety or controller-compatibility test result is supplied. The parent-owned photograph illustrates printed contact routes; it is not the four-key example or evidence of rollover performance.

Publication approval: Owner-approved scheduled editorial publication under standing authorization recorded 5 September 2026; editorial verification 16 September 2026.

Technical reference basis

Sources and applicability

  1. Microchip TechnologyAN3407: Using Matrix Keypad with AVR Devices
    Source date: DS00003407A, 2020; official landing page dated 22 June 2020 · Accessed 16 September 2026

    Pages 4–6 distinguish whole-axis and individual-line scanning. Used for scan-method boundaries, not a general rollover guarantee or an HYR implementation claim.

  2. Analog Devices / Maxim IntegratedMAX7360 key-switch controller data sheet
    Source date: Revision 3, July 2019 · Accessed 16 September 2026

    Page 18 documents component-specific ghost-key suppression and combination restrictions. No voltage, resistance, ESD, timing or other component rating is transferred to HYR products.