HID Mifare Desfire ev3

Key Features and Benefits:

• Enhanced Security:

  • AES-128 Encryption: Utilizes the Advanced Encryption Standard with 128-bit keys for robust data protection against sophisticated attacks.
  • Mutual Authentication: Ensures that both the card and the reader verify each other’s authenticity before any data exchange occurs, preventing unauthorized access.
  • Secure Messaging: Encrypts and authenticates communication between the card and reader, protecting data integrity and confidentiality.
  • Random UID (on HID’s Security Profile): Unlike some other DESFire implementations, HID’s high-security profile uses a random Unique Identifier (UID) to prevent the card from openly sharing information that could be used to track or associate it with a user, enhancing privacy.
  • Secure Channel-Based File Transfer: Protects data during transfer.
  • Proximity Check: Helps to prevent relay attacks.
  • Transaction Timer: Mitigates man-in-the-middle attacks by limiting the time validity of a transaction.
  • Secure Unique NFC (SUN) Messaging: Provides a more secure method for maintaining data confidentiality and integrity when the card is tapped with an NFC-enabled device. It generates a tap-unique authentication message and crypto-secure URL for server verification, making the tap unclonable.
  • Common Criteria EAL 5+ Certification: Both the hardware and software of the MIFARE DESFire EV3 chip are certified to this high security standard.
  • Secure Identity Object™ (SIO): HID adds a portable SIO data model for layered security, including key diversification, authentication signatures, and encryption.

• High Performance:

  • Fast Transaction Speeds: Optimized for quick authentication and data transfer, crucial for applications with high traffic.
  • High Data Transfer Rates: Supports rates up to 848 kbit/s for efficient data exchange.
  • Larger Memory Options: Available in various memory sizes (2KB, 4KB, 8KB, and 16KB) to accommodate multiple applications and data.

• Multi-Application Support:

  • Flexible File System: Allows for the creation of multiple independent applications on a single card, each with its own set of keys and access rights.
  • Up to 32 Files per Application: Supports various file types for different data storage needs.
  • Inter-App File Sharing: Enables secure data sharing between different applications on the card.
  • Delegated Application Management (DAM): Allows for post-issuance loading of new applications onto already deployed cards, often via NFC-enabled smartphones.

• Backward Compatibility:

  • Full Backward Compatibility: Ensures that HID MIFARE DESFire EV3 credentials are fully compatible with existing MIFARE DESFire EV1 and EV2 based solutions, protecting investments in legacy infrastructure.

• Flexibility:

  • Multiple Profiles: HID offers DESFire EV3 in different profiles (High Security, Compatibility, and Custom) to best suit various security requirements and existing infrastructures.
  • Compatibility Profile: Provides backward compatibility with iCLASS SE™ and multiCLASS® Rev E readers, facilitating migration from legacy iCLASS credentials.
  • Custom Profile: Can be customized to specific requirements or delivered unprogrammed for in-field personalization.
  • Integration with Mobile Services: Compatible with NXP’s MIFARE 2GO cloud service, enabling deployment of services to NFC-enabled mobile phones and wearables.

In the context of HID Global, their MIFARE DESFire EV3 cards often come with the added layer of their Secure Identity Object (SIO) for enhanced security and interoperability within the HID ecosystem, particularly with their Signo readers. They may also offer multi-technology cards that combine DESFire EV3 with other technologies like iCLASS and Prox for seamless migration scenarios.

• HID FlexSmart/MIFARE DESFire EV1 1450 Card