MIFARE DESFire EV1 – New Functions for Better Interoperability

New Functions for Better Interoperability

The MIFARE DESFire chip from NXP is one of the most advanced radio-frequency chips in terms of security. Using DES, 2K3DES and AES hardware encryption it meets all known standards for securing data transmissions.

It features mutual three-pass authentication, on-chip backup management and a unique key management system. These features provide an excellent solution for the contactless proximity transaction market, including public transportation schemes, access control or closed loop e-payment applications.

Faster Transactions

Featuring a MIFARE DESFire EV1 NFC Type 4 multi-application chip, the flexDF is an ultra-thin, semi-flexible transponder that can be installed on just about any surface. It is coated in a USP Class VI, ISO 10993 tested biopolymer for hygienic wear and tear resistance and provides an excellent level of security thanks to the use of hardware-based DES, 2K3DES and AES cryptographic encryption algorithms.

Designed for multi-application, flexDF has a number of features to make it easy to integrate it in different ticketing forms like keyfobs, tickets and smart paper tickets as well as physical access control and e-government systems. Its advanced security includes on-chip backup management system and triple DES authentication, making it one of the most secure chips available.

As a follow-up generation to the original MIFARE DESFire IC, the new DESFire EV1 improves data encryption by using the latest AES cryptographic algorithm. This significantly increases security of crypto operations against side-channel attacks. In addition, it also adds support for a new command set that can be used to identify the DESFire EV1 IC version.

NXP’s MIFARE DESFire EV2 is an upgrade of the MIFARE DESFire IC that offers a number of advantages over EV1. The most noticeable advantage is the longer read range that is possible with this technology, depending on the reader power and antenna design.

Higher Transfer Rates

As the industry moves towards EV2, NXP has developed MIFARE DESFire ICs to meet those needs. The latest generation EV2 chip offers a higher number of read/write cycles, improved security against side-channel attacks, and is backwards compatible with the older MIFARE Classic chips.

A MIFARE DESFire card can hold up to 28 different applications with 32 files per application, and is capable of transferring data at speeds of up to 848 Kbit/s. Its open concept design allows future seamless integration of alternate smart card ticketing media, including key fobs and mobile ticketing based on Near Field Communication technology.

It supports a variety of NFC reader hardware platforms and is fully ISO 14443A compliant. Featuring a 4Kbyte non-volatile memory and a high speed triple-DES data encryption co-processor, MIFARE DESFire is the perfect choice for advanced public transportation, access control, E-Government, closed-loop micropayment, and loyalty cards.

It enables system developers and operators to develop interoperable, scalable contactless solutions for their customers. It uses a DES, 2K3DES or 3K3DES hardware cryptographic engine for enciphering transmission data and is Common Criteria EAL5+ certified, making it ideal for transport schemes. MIFARE DESFire also has an on-chip backup management system and mutual three-pass authentication, so data is protected against loss. It is also able to support an anti-tear mechanism, providing additional protection against damage. These cards are available in a range of different colours and finishes to suit your brand or identity requirements.

Stronger Security

The newest chip in the DESFire family is based on NXP’s MF3D(H)x3 integrated circuit and offers significantly higher security levels compared to its predecessors. Its hardware security includes AES data encryption on the chip as well as during communication with a reader. The MF3D(H)x3 also supports a transaction timer to mitigate man-in-the-middle attacks and a secure key management system with rolling key sets.

With a wide range of security features, Genuine HID DESFire EV1 cards are the perfect choice for applications that require a high level of security like access control and biometric identification, cashless vending, public transportation, ticketing and customer loyalty cards. The cards offer a great balance of speed, performance and cost efficiency. The open concept allows seamless integration of alternate media such as smart paper tickets and key fobs using Near Field Communication (NFC) technology.

Designed to provide more flexibility for users who want to add multiple applications to a single card, these cards can be used in a converged environment with Proximity and magnetic stripe technologies. They feature a 70pF option that enables read range optimization for small antenna form factors and support up to 848 Kbit/s. Its DES, 2K3DES and 3K3DES data encryption protects personal information against cyberattacks. Its proximity identification confirms the card is close to a reader and eliminates the possibility of data theft by hackers and fraudsters.

More Interoperability

MIFARE DESFire EV1 cards can be used in access control, loyalty and closed-loop e-payment applications, making it an ideal solution for service providers wanting to use multi-application smart cards in transport schemes, eGovernment or desfire ev1 identity applications. It fully complies with the requirements for fast and highly secure data transmission, flexible memory organization and interoperability with existing infrastructures.

It features an on-chip backup management system and mutual three pass authentication, allowing a card to hold up to 28 different applications with 32 files per application – the size of these files can be defined when the product is initially designed, providing a truly flexible and convenient product. All file types also feature an automatic anti-tear mechanism to guarantee transaction-oriented data integrity.

This chip supports the use of a range of APDU commands which makes it compatible with many systems, including NXP’s own DESFire-based products. It is also backwards compatible with older generations, allowing the same solution developed for one generation of DESFire to continue working without the need to upgrade.

For enhanced security, it uses a hardware cryptographic engine based on 3DES or AES to encrypt transmission data. The crypto operations are protected against side-channel attacks that may be launched against the implementation of these algorithms on previous generations of NXP DESFire chips. Its 512 bit key is generated on the chip for secure communication.