flexDF2 - Mifare DESFire implant (EV2 8kB NFC)

The flexDF2 is a high-performance, RFID and NFC-compatible transponder of the next generation.

Especially in companies or areas where a high level of security is required, Mifare Desfire is used. This would also allow "payment" in closed systems (cafeterias, etc.).

Many companies and organizations use Mifare Desfire chips in their employee cards. These currently offer the highest level of performance, data protection, and security. Accordingly, the chips or cards are used in various applications, such as identification, access control, student IDs, customer or loyalty cards, citizen cards, parking cards, and toll cards.

These chips are used in countless smart cards. With them, office doors can be opened, coffee in the cafeteria can be paid for, or a car rented through car sharing can be used.

Our flexDF2 implant has an 8kB memory size. This allows unlimited applications to be installed (until the memory is full). Additional applications can be added to the implant even if it is already in use. This is made possible by MIsmartApp technology, which allows applications to be loaded onto a defined area of the implant without needing the so-called "master key."

The DF2 offers various security features and is ideal for use in environments with high security requirements.

• Encryption: The chip supports DES, 2K3DES, 3K3DES, and AES for hardware encryption.
• Common Criteria: The international standard Common Criteria (German: General Criteria for the Evaluation of Information Technology Security) assesses the trustworthiness of IT products. The DESFire EV1 is certified at EAL4+, while the DESFire EV2 smart card meets the EAL5+ level requirements.

The DESFire EV2 chip offers additional security features compared to its predecessor (EV1), such as authenticity verification, detection of "break-in attempts," or the ability to protect transactions using a Transaction-MAC file.

The DESFire EV2 chip supports rolling key sets. This so-called Key Set Rolling allows the complete keys of an application to be exchanged. However, once a key set is activated, it cannot be reactivated. This also applies to key sets with a lower encryption method and for the key set version number, which must always be larger than the previous one.

The flexDF2 implant is a USP Class VI, ISO 10993 tested biopolymer-coated, extremely thin flexible implant. It can theoretically be installed anywhere in the body. It is simply pushed under the first layer of skin. This is easiest with the included needle. You will receive detailed instructions with the delivery.

Contents:

• flexDF2
• Innovative needle for inserting the flexDF2
• Lubricating Jelly

flexDF2 DESFire EV2 8kB NFC

• 13.56MHz ISO14443A & NFC Type 4 DESFire EV2 chip
• Large 8kB multi-application memory space
• 7mm x 32mm x 0.5mm flexible biopolymer

Mifare Desfire is the successor to Mifare Classic. Currently, the Mifare Desfire chip is considered the most secure, and it is still uncracked. The Mifare Desfire EV2 uses the AES (Advanced Encryption Standard) encryption method. Mifare Desfire EV2 chips are available in 2k, 4k, and 8k variants. The chip is not pre-configured into a fixed number of segments, as was the case with Mifare Classic. Instead, the chip can be configured using a flexible file system. Thus, many applications can be supported as long as there is enough memory.

In short, the flexDF has a much more powerful chip that can be used for many applications that the xNT or xEM simply cannot handle, but explaining the differences in terms of applications is quite difficult. The simplest aspect is the memory space... You could assign all 8 KB of the flexDF to the NFC Type 4 memory and have enough space to store a vCard contact card record, including a small photo and your contact details!

For an overview of implants, click here

The DESFire EV2 Chip

• 13.56MHz ISO14443A & NFC Type 4 DESFire EV2 RFID chipset
• Full datasheet for the NXP DESFire EV2 RFID/NFC chip
• 7-byte UID and 8K bytes of user read/write memory
• 25 years of data retention. Rated for 500k writes per memory block.
• Encased in 3mm by 13mm bioglass with non-toxic epoxy
• Pre-tested and pre-loaded into sterile injection assembly
• No “anti-migration” coating means easy removal/replacement

DESFire EV2 chip specifications include:

• Common Criteria certification: EAL5+ (Hardware and Software)
• Optional RANDOM UID for enhanced security and privacy
• Mutual three-pass authentication
• Mutual authentication according to ISO/IEC 7816-4
• Flexible keys: 1 card master key and up to 14 keys per application
• Hardware DES using 56/112/168 bit keys featuring key version
• Hardware AES using 128-bit keys featuring key version
• Data authenticity by 8-byte CMAC
• Data encryption on RF channel
• Authentication on application level
• Hardware exception sensors
• Self-securing file system
• Backward compatibility to MF3ICD40: 4 byte MAC, CRC 16

ISO/IEC 7816 features:

• File structure (selection by File ID or DF name)
• APDU message structure
• APDU wrapper for MIFARE DESFire native commands
• INS code ‘A4’ for SELECT FILE
• INS code ‘B0’ for READ BINARY
• INS code ‘D6’ for UPDATE BINARY
• INS code ‘B2’ for READ RECORDS
• INS code ‘E2’ for APPEND RECORD
• INS code ‘84’ for GET CHALLENGE
• INS code ‘88’ for INTERNAL AUTHENTICATE
• INS code ‘82’ for EXTERNAL AUTHENTICATE

DESFire
MIFARE DESFire (MF3ICD (H) 21/41/81), a product certified with EAL4+, is ideal for service providers needing secure multi-application smart cards for public transport, access management, or closed-loop prepayment systems. It fully meets the requirements for fast and highly secure data transmission, flexible memory organization, and interoperability with existing infrastructure. MIFARE DESFire is based on open global standards for air interface and cryptographic methods. It complies with all four levels of ISO / IEC 14443A and uses optional ISO / IEC 7816-4 commands. The MIFARE DESFire chip has an on-chip backup management system and mutual three-pass authentication and can store up to 28 different applications and 32 files per application. The size of each file is set at creation, making MIFARE DESFire EV2 a truly flexible and practical product. Additionally, an automatic anti-tear mechanism is available for all file types, guaranteeing transaction-oriented data integrity. With MIFARE DESFire EV2, data transmission rates of up to 848 kbit/s can be achieved, enabling fast data transfers.

The main features of this device are referred to by the name "DESFire": DES indicates the high security with a cryptographic 3DES or AES encryption engine to encrypt transmission data, and Fire refers to its outstanding position as a fast, innovative, reliable, and secure IC in the contactless proximity transaction market. Therefore, MIFARE DESFire EV2 offers many benefits to end users. Cardholders can enjoy convenient contactless ticketing while also using the same device for related applications such as vending machine payments, access control, or event tickets. In other words, the MIFARE DESFire EV2 silicon solution provides an enhanced user-friendly system design combined with security and reliability.