Gallagher MIFARE DESFire EV3 Smart Card IC
Users of secure credential technologies want choices to meet the needs of a variety of applications. Gallagher’s mifare desfire ev3 credentials offer a range of security features including AES128 encryption, a secure channel and proximity control to prevent man-in-the-middle attacks.
The mifare ev3 2K is Common Criteria EAL5+ security certified – the same level demanded for smart card IC products. It offers a cost-effective migration path from legacy 125 kHz proximity technology.
High-performance
The MIFARE DESFire EV3 IC enables high-performance, advanced security and seamless integration of mobile services for Smart City applications. The IC offers enhanced performance with greater operating distance and improved transaction speed compared to previous generations, enabling users to access transit tickets, pay for parking and use other essential city services touch-free.
Designed with layered security in mind, the EV3 chip has the latest options for implementation, including AES128 encryption, secure channel-based file transfer and proximity check to protect card data from attack. It also includes a random UID that ensures the card will never openly share any information that could be associated with the smart card supplier user. Additionally, HID DESFire EV3 cards leverage the Secure Identity Object (SIO) data model for additional protection of a credential’s identity through key diversification, authentication signature and encryption.
The EV3 IC is backwards compatible with MIFARE DESFire EV2 and MIFARE Classic products, allowing system integrators to upgrade to higher security without changing their infrastructure. The IC also features an on-chip backup management system, mutual three-pass authentication and automatic anti-tear mechanism that guarantee the integrity of the stored data. In addition, it is pre-configured with keys to enable delegated application management and allows for over-the-air updates from a mobile device. This allows for new services to be added to existing smart card holders, making them more useful to their owners.
Interoperability
The mifare desfire ev3 is the latest in NXP’s contactless smart card technology. It offers enhanced performance and advanced security to support the secure delivery of Smart City services. Featuring greater operating distance and transaction speed compared to previous generations, this IC can enable new mobile services such as payments and access control, as well as help reduce operational costs by making systems more efficient. The extensive list of security features provides additional ways to protect data and ensure privacy. For example, a tap-unique authentication message and crypto-secure URL can be sent to a server for verification, helping to prevent man-in-the-middle attacks. The IC hardware and software are certified to Common Criteria EAL 5+, and it supports a choice of open crypto algorithms based on DES, 2K3DES, 3K3DES or AES.
NXP’s mifare desfire EV3 also includes a new feature known as SUN messaging. This function, which is also available on NXP’s DNA-type chips such as the NTAG 424, generates a unique and authenticated message each time the chip is tapped to make cloning more difficult.
In addition to SUN messaging, Mifare DESFire EV3 cards have a Delegated Application Management system that allows applications to be added on the fly without sharing a master key. This makes it easier to expand a solution as requirements evolve. Moreover, it is backwards compatible, so solutions developed for older MIFARE cards can be easily upgraded to the Mifare DESFire EV3 chip.
Multi-application support
MIFARE DESFire EV3 is NXP’s third evolution of the proven contactless MIFARE IC family, offering increased operating distance and transaction speed compared to previous generations. It also features enhanced security capabilities such as AES128 encryption, secure channel, proximity check and a random unique ID. Aside from this, it complies with Common Criteria EAL5+, the highest level of security certification demanded for smart card IC products. Aside from access control, this IC can be used for applications such as cashless vending, cafeteria services, transportation and more.
This IC is backward compatible with MIFARE DESFire EV2 and EV1, making it easier to upgrade a system. It’s also integrated with NXP’s MIFARE 2GO cloud service, which manages digitized credentials and helps mifare desfire ev3 streamline mobile integration via NFC-enabled smartphones and wearables. It’s also compatible with HID’s iCLASS Seos and Signo readers.
Dual technology credentials allow facility owners to economically improve site security by upgrading MIFARE DESFire + Prox systems to a more modern and robust technology at their own pace. It offers increased reading range and performance compared to other NXP ICs, and it can be enhanced with an optional 70pF for read range optimization in small form factor designs. The DESFire EV3 IC also maintains interoperability with legacy low-frequency 125 kHz readers, providing a seamless migration path from iCLASS and other legacy technologies.
Security
NXP’s DESFire EV3 IC brings next-generation performance, advanced security and seamless integration of mobile services for a new generation of smart city applications. The chip provides a secure platform that is ideal for a range of public transport schemes, access management, and e-payment applications.
It features a fast transaction speed, customizable access permissions, and tamper-proof design, making it an excellent choice for public transportation tickets, security badges, and other contactless applications. It also supports over-the-air updates for added functionality, ensuring that the device stays current with the latest applications and security enhancements. Its powerful encryption and cryptographic methods ensure that data is secure, even in the event of a compromise or attack on the chip itself.
The DESFire EV3 IC is Common Criteria EAL5+ certified and supports a wide choice of open crypto algorithms, including DES, 2K3DES, 3K3DES, and AES. It also provides a function called SUN message that can be used to verify that the reader is actually interacting with the chip and not a remote data stream from an attacker’s device.
HID’s credential option based on MIFARE DESFire EV3 joins the company’s Seos credential technology to provide robust choices that meet the diverse needs of users moving from legacy, low-frequency 125 kHz proximity technologies to high-frequency MIFARE solutions. The multi-technology card allows for a gradual upgrade of site security, providing a migration path while enabling the same card to work with both MIFARE and other readers onsite that require conventional 125 kHz technology.