MIFARE DESFire EV3 Chip From NXP

The MIFARE DESFire EV3 chip offers the most comprehensive range of security features to help protect your data and privacy. It has a Card Generated MAC and Transaction Timer function to counter man-in-the-middle attacks.

It supports Smart City services that combine security and convenience – for accessing offices or campuses, or paying for parking and other essential city services touch-free.

Faster transaction speed

DESFire EV3 is the next generation of NXP’s proven contactless MIFARE ® IC portfolio. It delivers enhanced performance, higher-level security and seamless integration of mobile services in smart city applications.

The IC uses the NXP MF3D(H)x3 crypto engine with three-key 3DES and AES hardware encryption to protect transmission data. The result is a contactless IC that offers high data transfer speed and greater operating distance when compared to previous generations of MIFARE cards.

Its vast set of security features gives it more methods of protecting and ensuring privacy, with both hardware and software certified Common Criteria EAL 5+. A card generated MAC helps to securely authenticate transactions while a new Transaction Timer feature mitigates man-in-the-middle attacks by setting a maximum time per transaction.

A new Secure Unique NFC (SUN) messaging feature helps maintain data integrity and confidentiality by sending a tap-unique authentication message and crypto-secure URL to the reader. Then, once verified, the card is allowed to complete a transaction.

Featuring the latest MIFARE technology, DESFire EV3 enables access control system owners to migrate smoothly from legacy low-frequency 125 kHz and iCLASS technologies to a multitechnology contactless desfire ev3 credential using a phased migration approach. During this time, DESFire EV3 cards can be read as either Classic or DESFire allowing users to move between systems without having to upgrade all their readers at the same time.

More secure transactions

The MIFARE DESFire EV3 contactless chip from NXP features an extensive set of security features, providing multiple methods to protect data and ensure privacy. The IC’s hardware and software are Common Criteria EAL 5+ certified, while a card generated MAC securely authenticates transactions. A new Transaction Timer feature mitigates man-in-the-middle attacks by limiting the time during which an attacker can interfere with a transaction. And the new Secure Unique NFC (SUN) messaging function ensures that a tap is a distinct event by generating a different tap-unique authentication code each time the IC is read.

The DESFire EV3 chip is one of the most secure radio-frequency chips available. It uses a variety of encryption methods, including AES128 encryption and secure channel-based file transfer to prevent attacks against the card’s desfire ev3 data. It also utilizes proximity check to verify that the POS reader is genuine before sending any sensitive information to the chip.

HID’s DESFire EV3 + Prox card is designed to provide system owners with a smooth migration path from vulnerable legacy, low-frequency 125 kHz-based systems to modern and secure credential technology. It enables a wide range of applications, including access control (even in military environments), identification, loyalty and micropayments. It works with a range of readers, including HID’s Signo and multiCLASS SE readers and is compatible with NXP’s DESFire EV1 and EV2 products. It is also interoperable with most other NDEF-based credentials.

Multi-application support

The MIFARE DESFire family offers state of the art security and privacy along with multi-application support. It allows developers to induce MIFARE DESFire chip-based credentials into smartphones, wearables & wristbands, smart cards, paper tickets and more for contactless applications such as access control, point of sale, public transportation and city services.

The DESFire EV3 IC sets new bars in terms of security levels with both hardware and software being Common Criteria EAL5+ certified and supporting open crypto algorithms. Its security features include a card generated MAC to securely authenticate transactions and a Transaction Timer feature to help mitigate man-in-the-middle attacks by making it harder for attackers to interfere during a transaction.

In addition, DESFire EV3 is equipped with a secure unique NFC (SUN) message authentication feature which delivers high-level data integrity and confidentiality by generating a tap-unique cipher-based, crypto-secure SUN code every time the IC is tapped. This makes it virtually impossible for counterfeiters to clone or modify any tap made on a MIFARE DESFire-enabled card, ticket or mobile device.

The DESFire EV3 is also pre-configured with delegated management keys to support over-the-air (OTA) updates to existing applications. This capability is key for universities, as it reduces the cost of re-badging students with new credentials and keeps their current applications intact. This makes DESFire a very popular choice for many student IDs, which are also used to access campus facilities and pay for food, laundry and parking services.

Easy integration

DESfire EV3 is compatible with the existing contactless infrastructure so it can be easily integrated into existing applications. It also features the latest security technologies to protect users against counterfeit and malicious cards such as a card generated MAC that makes it harder for attackers to impersonate legitimate transactions. Additionally, a new transaction timer feature mitigates man-in-the-middle attacks.

The DESfire EV3 IC reflects NXP’s commitment to secure, connected and convenient contactless Smart City services. This latest evolution of NXP’s secure memory RFID smart chip offers enhanced performance, greater operating distance and improved transaction speeds compared to its predecessors. Its extensive list of security features provides more ways to protect data and help ensure privacy, including hardware and software that are Common Criteria EAL 5+ certified and support a broad choice of open crypto algorithms such as DES, 2K3DES, 3K3DES and AES.

The DESfire EV3 is a versatile IC that supports multiple applications and has a predefined file system with total available memory of 640 bytes. It is ideal for projects that require a single application across a variety of sectors such as public transport, car or bike sharing, closed-loop e-payment, city tours or membership cards. It also allows for easy integration with NXP’s AppXplorer cloud service to create an ‘App Store-like’ experience for the issuance of these services.