MIFARE: Difference between revisions
Austinveigas (talk | contribs) m Commas and spelling mistakes |
→MIFARE Ultralight EV1: Shirriff link |
||
(19 intermediate revisions by 15 users not shown) | |||
Line 1: | Line 1: | ||
{{Short description|Brand of smart and proximity cards}} |
{{Short description|Brand of smart and proximity cards}} |
||
{{Advert|date=March 2023}} |
{{Advert|date=March 2023}} |
||
{{Use dmy dates|date= |
{{Use dmy dates|date=April 2024}} |
||
[[File:Mifare logo rgb.svg|thumb|MIFARE Logo]] |
[[File:Mifare logo rgb.svg|thumb|MIFARE Logo]] |
||
'''MIFARE''' is a series of [[Integrated Circuit|integrated circuit (IC)]] chips used in [[contactless smart card]]s and [[proximity card]]s. |
'''MIFARE''' is a series of [[Integrated Circuit|integrated circuit (IC)]] chips used in [[contactless smart card]]s and [[proximity card]]s. |
||
Line 12: | Line 12: | ||
| date = 1 December 2009}}</ref> |
| date = 1 December 2009}}</ref> |
||
The MIFARE trademark is owned by [[NXP Semiconductors]], which was [[Corporate spin-off|spun off]] from [[Philips Electronics]] in 2006.{{ |
The MIFARE trademark is owned by [[NXP Semiconductors]], which was [[Corporate spin-off|spun off]] from [[Philips Electronics]] in 2006.<ref>{{Cite web |title=MIFARE Trademark of NXP B.V. - Registration Number 4661504 - Serial Number 79142259 :: Justia Trademarks |url=http://trademarks.justia.com/791/42/mifare-79142259.html |access-date=2023-12-16 |website=trademarks.justia.com}}</ref><ref>{{Cite web |date=31 August 2006 |title=Philips Semiconductors to become NXP |url=https://www.eetimes.com/Philips-Semiconductors-to-become-NXP/ |website=EE Times}}</ref> |
||
==Variants== |
==Variants== |
||
MIFARE products are embedded in [[Contactless smart card|contactless]] and contact smart cards, smart paper tickets, [[Wearable computer|wearables]] and phones.<ref>{{Cite web |date=2016-08-18 |title=NXP and RioCard Launch New MIFARE® Wearable for Multimodal Transport in Rio {{!}} MIFARE |url=https://www.mifare.net/nxp-and-riocard-launch-new-mifare-wearable-for-multimodal-transportation-in-rio/ |access-date=2023-09-22 |website=MIFARE {{!}} The leading brand of contactless IC products |
MIFARE products are embedded in [[Contactless smart card|contactless]] and contact smart cards, smart paper tickets, [[Wearable computer|wearables]] and phones.<ref>{{Cite web |date=2016-08-18 |title=NXP and RioCard Launch New MIFARE® Wearable for Multimodal Transport in Rio {{!}} MIFARE |url=https://www.mifare.net/nxp-and-riocard-launch-new-mifare-wearable-for-multimodal-transportation-in-rio/ |access-date=2023-09-22 |website=MIFARE {{!}} The leading brand of contactless IC products}}</ref><ref>{{Cite web |title=NXP Advances Security for Contactless Single Use Applications with MIFARE Ultralight AES |url=https://www.nxp.com/pages/:NW-NXP-ADVANCES-SECURITY-FOR-CONTACTLESS |access-date=2023-09-22 |website=nxp.com}}</ref> |
||
The MIFARE brand name (derived from the term MIKRON FARE collection and created by the company [[NXP Semiconductors|Mikron]]) covers four families of contactless cards: |
The MIFARE brand name (derived from the term MIKRON FARE collection and created by the company [[NXP Semiconductors|Mikron]]) covers four families of contactless cards: |
||
; MIFARE Classic: Employs a proprietary protocol compliant with parts 1–3 of ISO/IEC 14443 Type A, with an NXP proprietary security protocol for authentication and ciphering.{{Citation needed|date=April 2023}} |
; MIFARE Classic: Employs a proprietary protocol compliant with parts 1–3 of [[ISO/IEC 14443 Type A]], with an NXP proprietary security protocol for authentication and ciphering.{{Citation needed|date=April 2023}} |
||
Subtypes: MIFARE Classic EV1 (other subtypes are no longer in use). |
Subtypes: MIFARE Classic EV1 (other subtypes are no longer in use). |
||
Line 47: | Line 47: | ||
====MIFARE Plus==== |
====MIFARE Plus==== |
||
MIFARE Plus is a replacement IC solution for the MIFARE Classic. |
MIFARE Plus is a replacement IC solution for the MIFARE Classic. |
||
Key applications: |
|||
* Public transportation |
|||
* Access management; e.g., employee, school, or [[campus card]]s |
|||
* Electronic toll collection |
|||
* Car parking |
|||
* Loyalty programs |
|||
It is less flexible than a MIFARE DESFire EV1 contactless IC. |
It is less flexible than a MIFARE DESFire EV1 contactless IC. |
||
Line 110: | Line 103: | ||
====MIFARE Ultralight EV1==== |
====MIFARE Ultralight EV1==== |
||
MIFARE Ultralight EV1<ref>[http://www.mifare.net/files/8413/5167/2490/MIFARE_Ultralight_EV1_.pdf] {{dead link|date=February 2016}}</ref> introduced in November 2012 the next generation of paper ticketing smart card ICs for limited-use applications for ticketing schemes and additional security options. It comes with several enhancements above the original MIFARE Ultralight: |
MIFARE Ultralight EV1<ref>[http://www.mifare.net/files/8413/5167/2490/MIFARE_Ultralight_EV1_.pdf] {{dead link|date=February 2016}}</ref> introduced in November 2012 the next generation of paper ticketing smart card ICs for limited-use applications for ticketing schemes and additional security options.<ref>{{cite web |first=Ken |last=Shirriff |title=Inside the tiny chip that powers Montreal subway tickets |date=June 2024 |url=http://www.righto.com/2024/06/montreal-mifare-ultralight-nfc.html}}</ref> It comes with several enhancements above the original MIFARE Ultralight: |
||
* 384 and 1024 bits user memory product variants |
* 384 and 1024 bits user memory product variants |
||
* OTP, lock bits, configurable counters for improved security |
* OTP, lock bits, configurable counters for improved security |
||
Line 116: | Line 109: | ||
* Protected data access through 32-bit password |
* Protected data access through 32-bit password |
||
* NXP Semiconductors originality signature function, this is an integrated originality checker and is effective cloning protection that helps to prevent counterfeit of tickets. However, this protection is applicable only to "mass penetration of non NXP originated chips and does not prevent hardware copy or emulation of a single existing valid chip"<ref>{{cite web |url=http://www.nxp.com/documents/application_note/AN11340.pdf |title=AN11340 : MIFARE Ultralight and MIFARE Ultralight EV1 Features and Hints |date=1 March 2013 |website=Nxp.com |access-date=9 February 2016 |archive-date=3 March 2016 |archive-url=https://web.archive.org/web/20160303223754/http://www.nxp.com/documents/application_note/AN11340.pdf |url-status=dead }}</ref> |
* NXP Semiconductors originality signature function, this is an integrated originality checker and is effective cloning protection that helps to prevent counterfeit of tickets. However, this protection is applicable only to "mass penetration of non NXP originated chips and does not prevent hardware copy or emulation of a single existing valid chip"<ref>{{cite web |url=http://www.nxp.com/documents/application_note/AN11340.pdf |title=AN11340 : MIFARE Ultralight and MIFARE Ultralight EV1 Features and Hints |date=1 March 2013 |website=Nxp.com |access-date=9 February 2016 |archive-date=3 March 2016 |archive-url=https://web.archive.org/web/20160303223754/http://www.nxp.com/documents/application_note/AN11340.pdf |url-status=dead }}</ref> |
||
Applications: |
|||
* Limited-use tickets in public transport |
|||
* Event ticketing (stadiums, exhibitions, leisure parks) |
|||
* Loyalty |
|||
====MIFARE Ultralight C==== |
====MIFARE Ultralight C==== |
||
Line 154: | Line 142: | ||
====MIFARE DESFire EV1==== |
====MIFARE DESFire EV1==== |
||
First evolution of MIFARE DESFire contactless IC, broadly backwards compatible. Available with 2 KiB, 4 KiB, and 8 KiB non-volatile memory. Other features include:<ref>{{Cite web|url=https://www.thalesgroup.com/en/markets/digital-identity-and-security/gemalto-website-has-moved-thales|title=Gemalto's web site has moved (May 2020)|website= |
First evolution of MIFARE DESFire contactless IC, broadly backwards compatible. Available with 2 KiB, 4 KiB, and 8 KiB non-volatile memory. Other features include:<ref>{{Cite web|url=https://www.thalesgroup.com/en/markets/digital-identity-and-security/gemalto-website-has-moved-thales|title=Gemalto's web site has moved (May 2020)|website=thalesgroup.com}}</ref> |
||
* Support for random ID. |
* Support for random ID. |
||
* Support for 128-bit [[Advanced Encryption Standard|AES]] |
* Support for 128-bit [[Advanced Encryption Standard|AES]] |
||
Line 160: | Line 148: | ||
MIFARE DESFire EV1 was publicly announced in November 2006.{{citation needed|date=November 2011}} |
MIFARE DESFire EV1 was publicly announced in November 2006.{{citation needed|date=November 2011}} |
||
Key applications: |
|||
* Advanced public transportation |
|||
* Access management |
|||
* Loyalty |
|||
* Micropayment |
|||
====MIFARE DESFire EV2==== |
====MIFARE DESFire EV2==== |
||
Line 187: | Line 169: | ||
* SUN message authentication for advanced data protection within standard NDEF read operation |
* SUN message authentication for advanced data protection within standard NDEF read operation |
||
* Choice of open DES/2K3DES/3K3DES/AES crypto algorithms |
* Choice of open DES/2K3DES/3K3DES/AES crypto algorithms |
||
* Flexible file structure hosts as many applications as the memory size supports |
* Flexible file structure: hosts as many applications as the memory size supports |
||
* Proof of transaction with card generated MAC |
* Proof of transaction with card generated [[Message authentication code|MAC]] |
||
* Transaction Timer mitigates risk of man-in-the-middle attacks |
* Transaction Timer mitigates risk of man-in-the-middle attacks |
||
Line 237: | Line 219: | ||
* 2016 – MIFARE SDK is rebranded to TapLinx, with additional supported products. |
* 2016 – MIFARE SDK is rebranded to TapLinx, with additional supported products. |
||
* 2018 – MIFARE 2GO cloud service was introduced, allows to manage MIFARE DESFire and MIFARE Plus (in SL3) product-based credentials onto NFC-enabled mobile and wearable devices. |
* 2018 – MIFARE 2GO cloud service was introduced, allows to manage MIFARE DESFire and MIFARE Plus (in SL3) product-based credentials onto NFC-enabled mobile and wearable devices. |
||
*2020 – MIFARE DESFire EV3 is announced<ref name=":0">{{Cite web|title=NXP Introduces MIFARE DESFire EV3 IC, Ushers |
*2020 – MIFARE DESFire EV3 is announced<ref name=":0">{{Cite web|title=NXP Introduces MIFARE DESFire EV3 IC, Ushers in New Era of Security and Connectivity for Contactless Smart City Services {{!}} NXP Semiconductors – Newsroom|url=https://media.nxp.com/news-releases/news-release-details/nxp-introduces-mifare-desfire-ev3-ic-ushers-new-era-security-and/|access-date=3 June 2020|website=media.nxp.com}}</ref> |
||
*2020 – MIFARE Plus EV2 was introduced, adding SL3 to support MIFARE 2GO, EAL5+ certification & Transaction Timer to help mitigate man-in-the-middle attacks. |
*2020 – MIFARE Plus EV2 was introduced, adding SL3 to support MIFARE 2GO, EAL5+ certification & Transaction Timer to help mitigate man-in-the-middle attacks. |
||
*2022 – MIFARE Ultralight AES was introduced. |
*2022 – MIFARE Ultralight AES was introduced. |
||
Line 256: | Line 238: | ||
The deal with Hitachi was upgraded in 2008 by NXP (by then no longer part of Philips) to include MIFARE Plus and MIFARE DESFire to the renamed semiconductor division of Hitachi [[Renesas Technology]].<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2008/11/renesas-and-nxp-announce-licensing-agreement-on-mifare-contactless-technology.html |title=NXP Semiconductors :: Media Center |website=Nxp.com |access-date=9 February 2016}}</ref> |
The deal with Hitachi was upgraded in 2008 by NXP (by then no longer part of Philips) to include MIFARE Plus and MIFARE DESFire to the renamed semiconductor division of Hitachi [[Renesas Technology]].<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2008/11/renesas-and-nxp-announce-licensing-agreement-on-mifare-contactless-technology.html |title=NXP Semiconductors :: Media Center |website=Nxp.com |access-date=9 February 2016}}</ref> |
||
In 2010 NXP licensed MIFARE products to [[Gemalto]]. In 2011 NXP licensed [[Oberthur Technologies|Oberthur]] to use MIFARE products on SIM cards. In 2012 NXP signed an agreement with [[Giesecke & Devrient]] to integrate MIFARE product-based applications on their secure SIM products. These licensees are developing [[Near Field Communication]] products<ref>{{Cite web|url=https://www.thalesgroup.com/en/markets/digital-identity-and-security/gemalto-website-has-moved-thales|archive-url=https://web.archive.org/web/20101206130027/http://www.gemalto.com/press/archives/2010/2010-11-25_NXP_Gemalto_MIFARE_License_en.pdf|url-status=dead|title=Gemalto's web site has moved (May 2020)|archive-date=6 December 2010|website= |
In 2010 NXP licensed MIFARE products to [[Gemalto]]. In 2011 NXP licensed [[Oberthur Technologies|Oberthur]] to use MIFARE products on SIM cards. In 2012 NXP signed an agreement with [[Giesecke & Devrient]] to integrate MIFARE product-based applications on their secure SIM products. These licensees are developing [[Near Field Communication]] products<ref>{{Cite web|url=https://www.thalesgroup.com/en/markets/digital-identity-and-security/gemalto-website-has-moved-thales|archive-url=https://web.archive.org/web/20101206130027/http://www.gemalto.com/press/archives/2010/2010-11-25_NXP_Gemalto_MIFARE_License_en.pdf|url-status=dead|title=Gemalto's web site has moved (May 2020)|archive-date=6 December 2010|website=thalesgroup.com}}</ref><ref>{{cite web|url=http://www.nxp.com/news/content/file_1818.html |title=NXP Semiconductors :: Media Center |website=Nxp.com |access-date=9 February 2016}}</ref> |
||
==Security== |
==Security== |
||
Line 289: | Line 271: | ||
| archive-url = https://web.archive.org/web/20210513153719/https://www.cs.ru.nl/~flaviog/publications/Security_Flaw_in_MIFARE_Classic.pdf |
| archive-url = https://web.archive.org/web/20210513153719/https://www.cs.ru.nl/~flaviog/publications/Security_Flaw_in_MIFARE_Classic.pdf |
||
| url-status = dead |
| url-status = dead |
||
}}</ref> For demonstration they used the [[Proxmark3]] device, a 125 |
}}</ref> For demonstration they used the [[Proxmark3]] device, a 125 kHz / 13.56 MHz research instrument.<ref>{{cite web | url = http://www.proxmark.org | title = Proxmark | access-date = 25 January 2011}}</ref> The schematics and software are released under the free [[GNU General Public License]] by Jonathan Westhues in 2007. They demonstrate it is even possible to perform card-only attacks using just an ordinary stock-commercial NFC reader in combination with the libnfc library. |
||
The Radboud University published four scientific papers concerning the security of the MIFARE Classic: |
The Radboud University published four scientific papers concerning the security of the MIFARE Classic: |
||
Line 295: | Line 277: | ||
* Dismantling MIFARE Classic<ref>{{cite web|url=https://www.cs.ru.nl/~flaviog/publications/Dismantling.Mifare.pdf|title=Dismantling MIFARE Classic|website=RU.nl|access-date=6 July 2017|archive-date=8 August 2017|archive-url=https://web.archive.org/web/20170808204848/http://www.cs.ru.nl/~flaviog/publications/Dismantling.Mifare.pdf|url-status=dead}}</ref> |
* Dismantling MIFARE Classic<ref>{{cite web|url=https://www.cs.ru.nl/~flaviog/publications/Dismantling.Mifare.pdf|title=Dismantling MIFARE Classic|website=RU.nl|access-date=6 July 2017|archive-date=8 August 2017|archive-url=https://web.archive.org/web/20170808204848/http://www.cs.ru.nl/~flaviog/publications/Dismantling.Mifare.pdf|url-status=dead}}</ref> |
||
* Wirelessly Pickpocketing a MIFARE Classic Card<ref>{{cite web|url=https://www.cs.ru.nl/~flaviog/publications/Pickpocketing.Mifare.pdf|title=Wirelessly Pickpocketing a MIFARE Classic Card|website=RU.nl|access-date=6 July 2017|archive-date=2 January 2022|archive-url=https://web.archive.org/web/20220102193453/http://www.cs.ru.nl/~flaviog/publications/Pickpocketing.Mifare.pdf|url-status=dead}}</ref> |
* Wirelessly Pickpocketing a MIFARE Classic Card<ref>{{cite web|url=https://www.cs.ru.nl/~flaviog/publications/Pickpocketing.Mifare.pdf|title=Wirelessly Pickpocketing a MIFARE Classic Card|website=RU.nl|access-date=6 July 2017|archive-date=2 January 2022|archive-url=https://web.archive.org/web/20220102193453/http://www.cs.ru.nl/~flaviog/publications/Pickpocketing.Mifare.pdf|url-status=dead}}</ref> |
||
* Ciphertext-only Cryptanalysis on Hardened MIFARE Classic Cards<ref>{{cite web|url=http://cs.ru.nl/~rverdult/Ciphertext-only_Cryptanalysis_on_Hardened_Mifare_Classic_Cards-CCS_2015.pdf|title=Ciphertext-only Cryptanalysis on Hardened Mifare Classic Cards|website=RU.nl|access-date=25 September 2017}}</ref> |
* Ciphertext-only [[Cryptanalysis]] on Hardened MIFARE Classic Cards<ref>{{cite web|url=http://cs.ru.nl/~rverdult/Ciphertext-only_Cryptanalysis_on_Hardened_Mifare_Classic_Cards-CCS_2015.pdf|title=Ciphertext-only Cryptanalysis on Hardened Mifare Classic Cards|website=RU.nl|access-date=25 September 2017}}</ref> |
||
In response to these attacks, the Dutch [[Ministry of the Interior and Kingdom Relations|Minister of the Interior and Kingdom Relations]] stated that they would investigate whether the introduction of the Dutch Rijkspas could be brought forward from Q4 of 2008.<ref>{{cite web | url = http://www.rijksoverheid.nl/documenten-en-publicaties/kamerstukken/2008/10/31/antwoord-op-kamervragen-over-de-beveiliging-van-de-chip-pas.html | title = Dutch Page | access-date = 24 March 2012 | archive-url = https://web.archive.org/web/20131102125151/http://www.rijksoverheid.nl/documenten-en-publicaties/kamerstukken/2008/10/31/antwoord-op-kamervragen-over-de-beveiliging-van-de-chip-pas.html | archive-date = 2 November 2013 | url-status = dead }}</ref> |
In response to these attacks, the Dutch [[Ministry of the Interior and Kingdom Relations|Minister of the Interior and Kingdom Relations]] stated that they would investigate whether the introduction of the Dutch Rijkspas could be brought forward from Q4 of 2008.<ref>{{cite web | url = http://www.rijksoverheid.nl/documenten-en-publicaties/kamerstukken/2008/10/31/antwoord-op-kamervragen-over-de-beveiliging-van-de-chip-pas.html | title = Dutch Page | access-date = 24 March 2012 | archive-url = https://web.archive.org/web/20131102125151/http://www.rijksoverheid.nl/documenten-en-publicaties/kamerstukken/2008/10/31/antwoord-op-kamervragen-over-de-beveiliging-van-de-chip-pas.html | archive-date = 2 November 2013 | url-status = dead }}</ref> |
||
Line 309: | Line 291: | ||
| archive-url = https://web.archive.org/web/20120215225402/http://zoeken.rechtspraak.nl/ResultPage.aspx?snelzoeken=t&searchtype=ljn&ljn=BD7578 |
| archive-url = https://web.archive.org/web/20120215225402/http://zoeken.rechtspraak.nl/ResultPage.aspx?snelzoeken=t&searchtype=ljn&ljn=BD7578 |
||
| url-status = dead |
| url-status = dead |
||
}}</ref><ref>{{cite news|url=http://www.thestandard.com/news/2008/07/18/judge-denies-nxps-injunction-against-security-researchers |title=Judge denies NXP's injunction against security researchers |access-date=13 February 2010 |date=1 July 2008| |
}}</ref><ref>{{cite news|url=http://www.thestandard.com/news/2008/07/18/judge-denies-nxps-injunction-against-security-researchers |title=Judge denies NXP's injunction against security researchers |access-date=13 February 2010 |date=1 July 2008|work=The Standard|url-status=dead |archive-url=https://web.archive.org/web/20090105205323/http://www.thestandard.com/news/2008/07/18/judge-denies-nxps-injunction-against-security-researchers |archive-date=5 January 2009 }}</ref> |
||
Both independent research results are confirmed by the manufacturer NXP.<ref name='mifare security'>{{cite web | url = http://www.mifare.net/technology/security/ | title = mifare.net :: Security | access-date = 25 January 2011}}</ref> These attacks on the cards didn't stop the further introduction of the card as the only accepted card for all Dutch public transport the [[OV-chipkaart]] continued as nothing happened<ref>[http://www.id-nee.nl/03-7%20OVchipkaart%20hoofdtekst.htm#voorbereidinggaatgewoondoor] {{webarchive|url=https://web.archive.org/web/20120608164142/http://www.id-nee.nl/03-7%20OVchipkaart%20hoofdtekst.htm#voorbereidinggaatgewoondoor|date=8 June 2012}}</ref> but in October 2011 the company [[Trans Link Systems|TLS]], responsible for the OV-Chipkaart announced that the new version of the card will be better protected against fraud.<ref>{{cite web|url=http://webwereld.nl/nieuws/108161/nieuwe-ov-chip-gaat-fraude-tegen.html |title=Nieuwe OV-chip gaat fraude tegen – Webwereld |website=Webwereld.nl |access-date=9 February 2016}}</ref> |
Both independent research results are confirmed by the manufacturer NXP.<ref name='mifare security'>{{cite web | url = http://www.mifare.net/technology/security/ | title = mifare.net :: Security | access-date = 25 January 2011}}</ref> These attacks on the cards didn't stop the further introduction of the card as the only accepted card for all Dutch public transport the [[OV-chipkaart]] continued as nothing happened<ref>[http://www.id-nee.nl/03-7%20OVchipkaart%20hoofdtekst.htm#voorbereidinggaatgewoondoor] {{webarchive|url=https://web.archive.org/web/20120608164142/http://www.id-nee.nl/03-7%20OVchipkaart%20hoofdtekst.htm#voorbereidinggaatgewoondoor|date=8 June 2012}}</ref> but in October 2011 the company [[Trans Link Systems|TLS]], responsible for the OV-Chipkaart announced that the new version of the card will be better protected against fraud.<ref>{{cite web|url=http://webwereld.nl/nieuws/108161/nieuwe-ov-chip-gaat-fraude-tegen.html |title=Nieuwe OV-chip gaat fraude tegen – Webwereld |website=Webwereld.nl |access-date=9 February 2016}}</ref> |
||
Line 347: | Line 329: | ||
In November 2010, security researchers from the Ruhr University released a paper detailing a [[side-channel attack]] against MIFARE product-based cards.<ref>{{cite web|url=http://www.proxmark.org/files/Documents/13.56%20MHz%20-%20MIFARE%20DESFire/Cloning_Cryptographic_RFID_Cards_for_25USD-WISSEC_2010.pdf |title=Cloning Cryptographic RFID Cards for 25$ ? |author1=Timo Kasper |author2=Ingo von Maurich |author3=David Oswald |author4=Christof Paar |website=Proxmark.org |access-date=9 February 2016}}</ref> The paper demonstrated that MIFARE DESFire product-based cards could be easily emulated at a cost of approximately $25 in [[Commodity hardware|"off the shelf" hardware]]. The authors asserted that this side-channel attack allowed cards to be cloned in approximately 100 ms. Furthermore, the paper's authors included hardware schematics for their original cloning device, and have since made corresponding software, firmware and improved hardware schematics publicly available on GitHub.<ref>{{cite web|url=https://github.com/emsec/ChameleonMini |title=emsec/ChameleonMini: The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC, ISO 14443 and ISO 15693. It has been designed and maintained by the Chair for Embedded Security of the Ruhr-University in Bochum. The freely programmable platform can be used to emulate and virtualize cards (perfect clones including the UID), for practical penetration tests in RFID environments, or serve as a passively operated NFC device, e.g., as an NFC door lock |publisher=GitHub |access-date=9 February 2016}}</ref> |
In November 2010, security researchers from the Ruhr University released a paper detailing a [[side-channel attack]] against MIFARE product-based cards.<ref>{{cite web|url=http://www.proxmark.org/files/Documents/13.56%20MHz%20-%20MIFARE%20DESFire/Cloning_Cryptographic_RFID_Cards_for_25USD-WISSEC_2010.pdf |title=Cloning Cryptographic RFID Cards for 25$ ? |author1=Timo Kasper |author2=Ingo von Maurich |author3=David Oswald |author4=Christof Paar |website=Proxmark.org |access-date=9 February 2016}}</ref> The paper demonstrated that MIFARE DESFire product-based cards could be easily emulated at a cost of approximately $25 in [[Commodity hardware|"off the shelf" hardware]]. The authors asserted that this side-channel attack allowed cards to be cloned in approximately 100 ms. Furthermore, the paper's authors included hardware schematics for their original cloning device, and have since made corresponding software, firmware and improved hardware schematics publicly available on GitHub.<ref>{{cite web|url=https://github.com/emsec/ChameleonMini |title=emsec/ChameleonMini: The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC, ISO 14443 and ISO 15693. It has been designed and maintained by the Chair for Embedded Security of the Ruhr-University in Bochum. The freely programmable platform can be used to emulate and virtualize cards (perfect clones including the UID), for practical penetration tests in RFID environments, or serve as a passively operated NFC device, e.g., as an NFC door lock |publisher=GitHub |access-date=9 February 2016}}</ref> |
||
In October 2011 David Oswald and Christof Paar of Ruhr-University in Bochum, Germany, detailed how they were able to conduct a successful "side-channel" attack against the card using equipment that can be built for nearly $3,000. Called "Breaking MIFARE DESFire MF3ICD40: Power Analysis and Templates in the Real World",<ref>{{cite web|url=https://www.iacr.org/workshops/ches/ches2011/presentations/Session%205/CHES2011_Session5_1.pdf |title=Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World |website=Iacr.org |access-date=9 February 2016}}</ref> they stated that system integrators should be aware of the new security risks that arise from the presented attacks and can no longer rely on the mathematical security of the used 3DES cipher. Hence, to avoid, e.g. manipulation or cloning of smart cards used in payment or access control solutions, proper actions have to be taken: on the one hand, multi-level countermeasures in the back end allow to minimize the threat even if the underlying RFID platform is insecure," In a statement<ref>{{Cite web|url=https://www.mifare.net/en/login/?msg=2&al=/developer/news/|archive-url=https://archive.today/20130221194445/http://www.mifare.net/overview/news/|archive-date=21 February 2013|url-status=dead|title=Login | MIFARE|website= |
In October 2011 David Oswald and Christof Paar of Ruhr-University in Bochum, Germany, detailed how they were able to conduct a successful "side-channel" attack against the card using equipment that can be built for nearly $3,000. Called "Breaking MIFARE DESFire MF3ICD40: Power Analysis and Templates in the Real World",<ref>{{cite web|url=https://www.iacr.org/workshops/ches/ches2011/presentations/Session%205/CHES2011_Session5_1.pdf |title=Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World |website=Iacr.org |access-date=9 February 2016}}</ref> they stated that system integrators should be aware of the new security risks that arise from the presented attacks and can no longer rely on the mathematical security of the used 3DES cipher. Hence, to avoid, e.g. manipulation or cloning of smart cards used in payment or access control solutions, proper actions have to be taken: on the one hand, multi-level countermeasures in the back end allow to minimize the threat even if the underlying RFID platform is insecure," In a statement<ref>{{Cite web|url=https://www.mifare.net/en/login/?msg=2&al=/developer/news/|archive-url=https://archive.today/20130221194445/http://www.mifare.net/overview/news/|archive-date=21 February 2013|url-status=dead|title=Login | MIFARE|website=mifare.net|access-date=22 January 2022}}</ref> NXP said that the attack would be difficult to replicate and that they had already planned to discontinue the product at the end of 2011. NXP also stated "Also, the impact of a successful attack depends on the end-to-end system security design of each individual infrastructure and whether diversified keys – recommended by NXP – are being used. If this is the case, a stolen or lost card can be disabled simply by the operator detecting the fraud and blacklisting the card, however, this operation assumes that the operator has those mechanisms implemented. This will make it even harder to replicate the attack with a commercial purpose." |
||
===MIFARE Ultralight=== |
===MIFARE Ultralight=== |
||
In September 2012 a security consultancy Intrepidus<ref>{{Cite web|url=http://intrepidusgroup.com/|archive-url=https://web.archive.org/web/20121206021831/http://intrepidusgroup.com/|url-status=dead|title=Site not found · DreamHost|archive-date=6 December 2012|website=intrepidusgroup.com}}</ref> demonstrated at the EU SecWest event in Amsterdam,<ref>{{cite web |url=http://eusecwest.com/agenda.html |title=EUSecWest Applied Security Conference: Amsterdam, NL |website=Eusecwest.com |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20160305144652/https://eusecwest.com/agenda.html |archive-date=5 March 2016 |url-status=dead }}</ref> that MIFARE Ultralight product-based fare cards in the New Jersey and San Francisco transit systems can be manipulated using an Android application, enabling travelers to reset their card balance and travel for free in a talk entitled "NFC For Free Rides and Rooms (on your phone)".<ref>{{cite web|url=https://www.youtube.com/watch?v=-uvvVMHnC3c |title=NFC subway hack | |
In September 2012 a security consultancy Intrepidus<ref>{{Cite web|url=http://intrepidusgroup.com/|archive-url=https://web.archive.org/web/20121206021831/http://intrepidusgroup.com/|url-status=dead|title=Site not found · DreamHost|archive-date=6 December 2012|website=intrepidusgroup.com}}</ref> demonstrated at the EU SecWest event in Amsterdam,<ref>{{cite web |url=http://eusecwest.com/agenda.html |title=EUSecWest Applied Security Conference: Amsterdam, NL |website=Eusecwest.com |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20160305144652/https://eusecwest.com/agenda.html |archive-date=5 March 2016 |url-status=dead }}</ref> that MIFARE Ultralight product-based fare cards in the New Jersey and San Francisco transit systems can be manipulated using an Android application, enabling travelers to reset their card balance and travel for free in a talk entitled "NFC For Free Rides and Rooms (on your phone)".<ref>{{cite web|url=https://www.youtube.com/watch?v=-uvvVMHnC3c |title=NFC subway hack |via=YouTube |date=2 September 2012|access-date=9 February 2016}}</ref> Although not a direct attack on the chip but rather the reloading of an unprotected register on the device, it allows hackers to replace value and show that the card is valid for use. This can be overcome by having a copy of the register online so that values can be analyzed and suspect cards hot-listed. NXP has responded by pointing out that they had introduced the MIFARE Ultralight C in 2008 with 3DES protection and in November 2012 introduced the MIFARE Ultralight EV1<ref>{{cite web|url=http://www.mifare.net/products/mifare-smartticket-ics/mifare-ultralight-ev1/|archive-url=https://archive.today/20130221235449/http://www.mifare.net/products/mifare-smartticket-ics/mifare-ultralight-ev1/|url-status=dead|title=mifare.net :: MIFARE Ultralight EV1|date=21 February 2013|archive-date=21 February 2013|website=MIFARE.net|access-date=6 July 2017}}</ref> with three decrement only counters to foil such reloading attacks. |
||
==Considerations for systems integration== |
==Considerations for systems integration== |
||
Line 368: | Line 350: | ||
! Type |
! Type |
||
! class="unsortable" | Details |
! class="unsortable" | Details |
||
|- |
|||
| [[:es:Urbana (tarjeta)|EYCON e-Bus]] |
|||
| [[Argentina]] (Bahía Blanca) |
|||
| MIFARE Classic 1K |
|||
| Initially for use in the local public transport for short and medium distances. However it is expected that in the card will be used for taxis, and furthermore purchase items in shops. |
|||
|- |
|- |
||
| [[SUBE card]] |
| [[SUBE card]] |
||
Line 379: | Line 355: | ||
| MIFARE Classic 1K |
| MIFARE Classic 1K |
||
| Used for public transport, such as Metro, trains and buses<ref>{{cite web|url=http://www.sube.gob.ar/ |title=SUBE |website=Sube.gob.ar |access-date=9 February 2016}}</ref> |
| Used for public transport, such as Metro, trains and buses<ref>{{cite web|url=http://www.sube.gob.ar/ |title=SUBE |website=Sube.gob.ar |access-date=9 February 2016}}</ref> |
||
|- |
|||
|Pase Metro |
|||
|Dominican Republic (Santo Domingo) |
|||
|MIFARE Classic 1K |
|||
|Used for public transportation (Metro, Bus and Cableway). |
|||
|- |
|||
| [[Red Bus (Mendoza)|Red Bus]] |
|||
| [[Argentina]] ([[Córdoba, Argentina|Córdoba]], [[Mendoza, Argentina|Mendoza]], [[Salta]]) |
|||
| MIFARE Classic 1K |
|||
| For payment of public transport. |
|||
|- |
|- |
||
| [[Tarjeta Sin Contacto MOVI]] |
| [[Tarjeta Sin Contacto MOVI]] |
||
Line 408: | Line 374: | ||
| [[#MIFARE DESFire EV1|MIFARE DESFire EV1]] |
| [[#MIFARE DESFire EV1|MIFARE DESFire EV1]] |
||
| Adelaide Metro network (Bus, Train and Tram)<ref>[http://www.adelaidemetro.com.au/ticketing/metrocard] {{webarchive|url=https://web.archive.org/web/20120704235802/http://www.adelaidemetro.com.au/ticketing/metrocard|date=4 July 2012}}</ref> |
| Adelaide Metro network (Bus, Train and Tram)<ref>[http://www.adelaidemetro.com.au/ticketing/metrocard] {{webarchive|url=https://web.archive.org/web/20120704235802/http://www.adelaidemetro.com.au/ticketing/metrocard|date=4 July 2012}}</ref> |
||
|- |
|||
| [[TransLink Go card]] |
|||
| Australia ([[Brisbane]]) |
|||
| MIFARE Classic 1K |
|||
| Used on the TransLink public transport network. |
|||
|- |
|||
| [[MyWay (ticketing system)|ACTION MyWay]] |
|||
| Australia ([[Canberra, Australian Capital Territory|Canberra]]) |
|||
| MIFARE Classic 1K |
|||
| Form of electronic ticketing used on public transport services within Canberra |
|||
|- |
|||
| [[Green Card (Australia)|Metro Green Card]] |
|||
| Australia ([[Hobart]]) |
|||
| MIFARE Classic 4K |
|||
| Greencard simplifies public transport by acting like a digital wallet. Used on buses and the metro. |
|||
|- |
|||
| [[SmartRider]] |
|||
| Australia ([[Perth, Western Australia|Perth]]) |
|||
| MIFARE Classic 1K |
|||
| Widely used across the Transperth public transport in metropolitan Perth, as well as the regional town bus services. Used for public bus, train and ferry services. |
|||
|- |
|||
| [[Opal card]] |
|||
| Australia (Sydney) |
|||
| [[#MIFARE DESFire EV1|MIFARE DESFire EV1]], MIFARE Ultralight (Single use) |
|||
| Is valid on all bus, rail, light rail and government ferry services in Sydney and surrounding areas such as Central Coast. |
|||
|- |
|||
| [[Myki]] |
|||
| Australia ([[Victoria, Australia|Victoria]]) |
|||
| MIFARE DESFire |
|||
| Used on public transport such as, trains, buses, trams and coaches in Victoria |
|||
|- |
|- |
||
| Baku metrocard |
| Baku metrocard |
||
Line 448: | Line 384: | ||
|access-date=9 February 2016 |
|access-date=9 February 2016 |
||
}}</ref> |
}}</ref> |
||
| For use on the subway rides on the Baku Metro. |
| For use on the subway rides on the Baku Metro. |
||
|- |
|||
| TRI |
|||
| Brazil ([[Porto Alegre]]) |
|||
| MIFARE Classic 1K |
|||
| Used for the buses and trains in Porto Alegre. |
|||
|- |
|||
| BHTrans |
|||
| Brazil ([[Belo Horizonte]]) |
|||
| MIFARE Classic 1K |
|||
| |
|||
|- |
|||
|Brasilia +Cidadã |
|||
|Brazil (Brasilia) |
|||
|MIFARE Classic 1K |
|||
|Used for the buses and subway in Brasilia. |
|||
|- |
|||
| [[RioCard]] |
|||
| Brazil (Rio de Janeiro) |
|||
| MIFARE Classic 1K |
|||
| The RioCard can be used on all modes of public transport within Rio- bus, ferry, subway and train. However it can only be used a maximum of eight times a day |
|||
|- |
|||
| [[Bilhete Único]] |
|||
| Brazil ([[São Paulo]]) |
|||
| MIFARE Classic 1K, MIFARE Plus X, MIFARE Plus EV1 |
|||
| Can be used on buses, bus rapid transit, Metrô and CPTM trains. |
|||
|- |
|||
| [[Orovale]] |
|||
| Brazil ([[Teresopolis]]) |
|||
| {{dunno}} |
|||
| Can be used on the buses for this area. |
|||
|- |
|||
| Carte Occasionnelle ([[Société de transport de Montréal|STM]], [[Réseau de transport de la Capitale|RTC]]), [[Agence métropolitaine de transport|Carte Solo]] |
|||
| Canada ([[Montréal]], [[Québec]] and [[Quebec City|Québec]], [[Québec]]) |
|||
| MIFARE Ultralight |
|||
| SMT- Used on the bus, rapid transit, [[share taxi|taxibus]] and paratransit in Montreal. RTC- used for bus services, bus rapid transit and paratransit in Quebec. Carte Solo- used for the commuter rail and express bus service in Greater Montreal. |
|||
|- |
|- |
||
| M-Card |
| M-Card |
||
| Canada ([[St. John's, Newfoundland and Labrador|St. John's]]) |
| Canada ([[St. John's, Newfoundland and Labrador|St. John's]]) |
||
| MIFARE Classic 1K |
| MIFARE Classic 1K |
||
| Used on the [[Metrobus Transit]] system.<ref>{{Cite web|url=https://www.metrobus.com/mcard.asp|archive-url=https://web.archive.org/web/20120306144707/http://www.metrobus.com/mcard.asp|title=Metrobus |url-status=dead|archive-date=6 March 2012|website= |
| Used on the [[Metrobus Transit]] system.<ref>{{Cite web|url=https://www.metrobus.com/mcard.asp|archive-url=https://web.archive.org/web/20120306144707/http://www.metrobus.com/mcard.asp|title=Metrobus |url-status=dead|archive-date=6 March 2012|website=metrobus.com}}</ref> |
||
|- |
|||
| [[Presto Card]] |
|||
| Canada ([[Toronto]], Ottawa and [[Hamilton, Ontario]]) |
|||
| [[#MIFARE DESFire EV1|MIFARE DESFire]] |
|||
| Used on various public transport systems in the greater Toronto and Hamilton Area and Ottawa. Buses, trains, rapid transit and streetcars |
|||
|- |
|- |
||
|| [[Compass Card (TransLink)|Compass Card]] |
|| [[Compass Card (TransLink)|Compass Card]] |
||
| Canada ([[Metro Vancouver]]) |
| Canada ([[Metro Vancouver]]) |
||
| MIFARE DESFire EV1 4K, MIFARE Ultralight (single use)<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2013/01/nxps-mifare-deafire-selected-to-support-vancouvers-green-city-plan.html |title=NXP Semiconductors :: Media Center |website=NXP.com |access-date=9 February 2016}}</ref> |
| MIFARE DESFire EV1 4K, MIFARE Ultralight (single use)<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2013/01/nxps-mifare-deafire-selected-to-support-vancouvers-green-city-plan.html |title=NXP Semiconductors :: Media Center |website=NXP.com |access-date=9 February 2016}}</ref> |
||
| Used for public transit ([[TransLink (British Columbia)|TransLink]]). $6 refundable deposit.<ref>{{cite web|url=http://www.translink.ca/en/Fares-and-Passes/Compass-Card.aspx |
| Used for public transit ([[TransLink (British Columbia)|TransLink]]). $6 refundable deposit.<ref>{{cite web|url=http://www.translink.ca/en/Fares-and-Passes/Compass-Card.aspx |title=TransLink : If you like FareSavers, you'll love Compass Card |website=TransLink.ca |access-date=9 February 2016}}</ref> |
||
|- |
|||
|Peggo Card |
|||
|Canada ([[Winnipeg]]) |
|||
|MIFARE DESFire EV1 4K |
|||
|Used on the [[Winnipeg Transit]] system. |
|||
|- |
|- |
||
| Tarjeta Metroval<ref>{{cite web |url=http://www.metro-valparaiso.cl/viaje-en-metro/medios-de-pago |title=Metro Valparaiso Medios de pago |website=Metro-Valparaiso.cl |date=2 June 2014|access-date=9 February 2016 |url-status=dead |archive-url=https://web.archive.org/web/20131102114608/http://www.metro-valparaiso.cl/viaje-en-metro/medios-de-pago |archive-date=2 November 2013 }}</ref> |
| Tarjeta Metroval<ref>{{cite web |url=http://www.metro-valparaiso.cl/viaje-en-metro/medios-de-pago |title=Metro Valparaiso Medios de pago |website=Metro-Valparaiso.cl |date=2 June 2014|access-date=9 February 2016 |url-status=dead |archive-url=https://web.archive.org/web/20131102114608/http://www.metro-valparaiso.cl/viaje-en-metro/medios-de-pago |archive-date=2 November 2013 }}</ref> |
||
Line 514: | Line 405: | ||
| MIFARE Classic 1K and 4K (if bank bip or university bip are used) |
| MIFARE Classic 1K and 4K (if bank bip or university bip are used) |
||
| Metro de Santiago, Transantiago<ref>{{cite web|url=http://www.tarjetabip.cl |title=Tarjeta bip! |website=TarjetaBip.cl |access-date=9 February 2016}}</ref> |
| Metro de Santiago, Transantiago<ref>{{cite web|url=http://www.tarjetabip.cl |title=Tarjeta bip! |website=TarjetaBip.cl |access-date=9 February 2016}}</ref> |
||
|- |
|||
| [[StrongLink]] |
|||
| China (Beijing) |
|||
| {{dunno}} |
|||
| |
|||
|- |
|||
| [[Yikatong]] |
|||
| China (Beijing) |
|||
| {{dunno}} |
|||
| Can be used on the subway, buses, taxis and in some cooperating retailers and restaurants. The card can also be used for Beijing's [[bicycle-sharing system]] |
|||
|- |
|||
| [[Yang Cheng Tong]] |
|||
| China (Guangzhou) |
|||
| {{dunno}} |
|||
| Used on the metro, buses, taxis and ferries in Guangzhou and the surrounding areas. |
|||
|- |
|||
| [[Cívica]] |
|||
| [[Colombia]] ([[Medellin]]) |
|||
| {{dunno}} |
|||
| Can be used for travel on the subway, cable cars, some bus routes and in the near future for the tram |
|||
|- |
|||
| [[BusCARD]] |
|||
| [[Croatia]] ([[Split, Croatia|Split]]) |
|||
| MIFARE Classic 1K |
|||
| Used for public transport |
|||
|- |
|||
| [[BuTra]] |
|||
| [[Croatia]] ([[Osijek]]) |
|||
| MIFARE Classic 1K |
|||
| Used by trams & buses and social ID identification |
|||
|- |
|||
| [[Rijeka City Card]] |
|||
| [[Croatia]] ([[Rijeka]]) |
|||
| MIFARE Classic 1K, MIFARE Ultralight |
|||
| Used by buses, parking spaces, libraries, museums... |
|||
|- |
|||
| [[ZET Card]] |
|||
| [[Croatia]] ([[Zagreb]]) |
|||
| MIFARE Classic 1K |
|||
| Can be used for travel on all public transport networks in Zagreb. Also entitles you to get discounts at over 150 locations such as the museum and zoo. |
|||
|- |
|- |
||
| [[In Karta]] |
| [[In Karta]] |
||
Line 559: | Line 410: | ||
| MIFARE DESFire, MIFARE DESFire EV1 |
| MIFARE DESFire, MIFARE DESFire EV1 |
||
|,<ref>{{cite web|url=http://www.cd.cz/ |title=České dráhy, a.s. | Úvodní stránka |website=Cd.cz |access-date=9 February 2016}}</ref> Used for transport on trains, aimed at regular train users. Using the card enables 25% discount on fares. |
|,<ref>{{cite web|url=http://www.cd.cz/ |title=České dráhy, a.s. | Úvodní stránka |website=Cd.cz |access-date=9 February 2016}}</ref> Used for transport on trains, aimed at regular train users. Using the card enables 25% discount on fares. |
||
|- |
|||
| [[Opencard]] |
|||
| [[Czech Republic]] (Prague) |
|||
| MIFARE DESFire EV1 |
|||
| Used for travel on the public transport in Prague. As well as paid parking and libraries. |
|||
|- |
|||
| Lítačka |
|||
| [[Czech Republic]] (Prague) |
|||
| MIFARE DESFire EV1 |
|||
| Successor of Opencard, used mostly for public transport in Prague, can be also used in municipal libraries. It cannot be used as electronic wallet – for parking – as its predecessor. |
|||
|- |
|- |
||
|Hradecká karta |
|Hradecká karta |
||
|[[Czech Republic]] (Hradec Králové) |
|[[Czech Republic]] (Hradec Králové) |
||
|MIFARE Classic 4K |
|MIFARE Classic 4K |
||
|Card is issued by DPMHK a.s. (Transport company of Hradec Králové), no longer compatible with Pardubická karta.<ref>{{Cite web|title=Používání Městské karty v Pardubicích {{!}} Dopravní podnik města Hradce Králové|url=https://www.dpmhk.cz/146/Pouzivani_Mestske_karty_v_Pardubicich/|access-date=2020-07-13|website= |
|Card is issued by DPMHK a.s. (Transport company of Hradec Králové), no longer compatible with Pardubická karta.<ref>{{Cite web|title=Používání Městské karty v Pardubicích {{!}} Dopravní podnik města Hradce Králové|url=https://www.dpmhk.cz/146/Pouzivani_Mestske_karty_v_Pardubicich/|access-date=2020-07-13|website=dpmhk.cz}}</ref> |
||
|- |
|||
| [[Pardubicka karta]] |
|||
| [[Czech Republic]] (Pardubice) |
|||
| MIFARE Classic 4K |
|||
| Card is issued by DPMP a.s. (Transport company of Pardubice), can also be used as a ticket to local theatre, and used by many schools in Pardubice for student IDs. |
|||
|- |
|||
| [[Rejsekort]] |
|||
| Denmark |
|||
| MIFARE Classic 4K and MIFARE DESFire EV2 |
|||
| Can be used for travel on trains, buses and metro in Copenhagen and nearly whole of Denmark. |
|||
|- |
|||
| [[Ühiskaart]] |
|||
| [[Estonia]] ([[Tallinn]]) |
|||
| MIFARE Classic |
|||
| Can be used for travel on trams, buses, trolleybuses in Tallinn, as well as other towns inside the country. |
|||
|- |
|||
| [[Bussikaart]] |
|||
| [[Estonia]] ([[Tartu]]) |
|||
| MIFARE Ultralight C |
|||
| Used for bus travel in Tartu. Works also in other locations around the country. |
|||
|- |
|- |
||
| [[Matkakortti]] |
| [[Matkakortti]] |
||
Line 599: | Line 420: | ||
| MIFARE DESFire |
| MIFARE DESFire |
||
| Can be used with all forms of public transport systems within Helsinki Metropolitan Area.<ref>[http://www.hsl.fi/EN/ticketsandfares/ticketsontravelcard/Pages/default.aspx] {{webarchive|url=https://web.archive.org/web/20111229063900/http://www.hsl.fi/EN/ticketsandfares/ticketsontravelcard/Pages/default.aspx|date=29 December 2011}}</ref> |
| Can be used with all forms of public transport systems within Helsinki Metropolitan Area.<ref>[http://www.hsl.fi/EN/ticketsandfares/ticketsontravelcard/Pages/default.aspx] {{webarchive|url=https://web.archive.org/web/20111229063900/http://www.hsl.fi/EN/ticketsandfares/ticketsontravelcard/Pages/default.aspx|date=29 December 2011}}</ref> |
||
|- |
|||
| [[:de:Aachener Straßenbahn und Energieversorgungs-AG|ASEAG]] |
|||
| Germany ([[Aachen]]) |
|||
| MIFARE DESFire EV1 |
|||
| Can be used with all forms of public transport systems within NordRhein Westfalen (NRW) Area. Readers in all buses of Aachen and Deutsche Bahn staff. |
|||
|- |
|- |
||
|[[Metromoney]] |
|[[Metromoney]] |
||
Line 609: | Line 425: | ||
| MIFARE Classic 1K |
| MIFARE Classic 1K |
||
|Used in municipal transport (metro, bus) and while traveling by [[Rike-Narikala ropeway]].<ref>{{cite web|url=http://ttc.com.ge/?lang_id=ENG&sec_id=155 |title=Metromoney card – Tbilisi Transport Company |website=Ttc.com.ge |date=3 June 2012|access-date=9 February 2016}}</ref> |
|Used in municipal transport (metro, bus) and while traveling by [[Rike-Narikala ropeway]].<ref>{{cite web|url=http://ttc.com.ge/?lang_id=ENG&sec_id=155 |title=Metromoney card – Tbilisi Transport Company |website=Ttc.com.ge |date=3 June 2012|access-date=9 February 2016}}</ref> |
||
|- |
|||
|[[ATH.ENA CARD]] / [[ATH.ENA TICKET]] |
|||
|[[Greece]] ([[Athens]]) |
|||
| MIFARE DESFire / MIFARE Ultralight |
|||
|Used on the Athens metro, buses and trams. |
|||
|- |
|||
| [[MTR]] City Saver |
|||
| Hong Kong |
|||
| MIFARE Ultralight C |
|||
| Older cards only. New cards use Sony FeliCa Lite-S. |
|||
|- |
|||
| [[Indian Railways]] |
|||
| India |
|||
| MIFARE DESFire |
|||
| Indian railways (five major cities) |
|||
|- |
|- |
||
|[[Delhi Metro Rail Corporation]] |
|[[Delhi Metro Rail Corporation]] |
||
|[[India]] |
|[[India]] |
||
|[[#MIFARE Ultralight family|MIFARE Ultralight]] |
|[[#MIFARE Ultralight family|MIFARE Ultralight]] |
||
|Used in Metro transit system and for paying fares in DTC and cluster buses.<ref>{{Cite web|url=https://www.dnaindia.com/delhi/report-now-delhi-metro-card-valid-for-travel-in-dtc-buses-2654321|title=Now, Delhi Metro card valid for travel in DTC buses|date=2 August 2018|website=dna |
|Used in Metro transit system and for paying fares in DTC and cluster buses.<ref>{{Cite web|url=https://www.dnaindia.com/delhi/report-now-delhi-metro-card-valid-for-travel-in-dtc-buses-2654321|title=Now, Delhi Metro card valid for travel in DTC buses|date=2 August 2018|website=dna|access-date=28 December 2018}}</ref> |
||
|- |
|- |
||
| Namma Metro Smart Card |
| Namma Metro Smart Card |
||
| India (Bengaluru) |
| India (Bengaluru) |
||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Can be used to travel in [[Namma Metro]] in Bengaluru<ref>{{Cite web|url=https://www.mifare.net/bengaluru-metro-system-adopts-nxps-mifare-technology/|title=Bengaluru Metro System Adopts NXP's MIFARE Technology | MIFARE|website= |
| Can be used to travel in [[Namma Metro]] in Bengaluru<ref>{{Cite web|url=https://www.mifare.net/bengaluru-metro-system-adopts-nxps-mifare-technology/|title=Bengaluru Metro System Adopts NXP's MIFARE Technology | MIFARE|website=mifare.net|date=22 January 2012}}</ref> |
||
|- |
|||
| [[Cardz Me]] |
|||
| India (Karnataka) |
|||
| {{dunno}} |
|||
| Issued to students in the Indian state of Karnataka by [[Cardz Middle East]] |
|||
|- |
|||
| Metro/Bus Card |
|||
| [[Iran]] ([[Tehran]]) |
|||
| MIFARE Classic 1K |
|||
| Used for public transport, Metro and Bus – ([[Tehran Metro]]) |
|||
|- |
|||
| Esfahan Card |
|||
| [[Iran]] ([[Isfahan]]) |
|||
| MIFARE Classic 1K |
|||
| Used for public transport, Metro and Bus – Municipality Fun Places ([[Esfahan Metro]]) |
|||
|- |
|||
| Man Card |
|||
| [[Iran]] ([[Mashhad]]) |
|||
| MIFARE DESFire EV1 |
|||
| Used for public transport (Metro and Bus) and low value payments (such as bakeries) – ([[Mashhad Metro]]) |
|||
|- |
|||
| SmartCard |
|||
| Ireland ([[Dublin]]) |
|||
| MIFARE Classic 1K |
|||
| Used for train transport for [[Iarnród Éireann]] |
|||
|- |
|- |
||
| [[TFI Leap Card]] |
| [[TFI Leap Card]] |
||
Line 664: | Line 440: | ||
| [[#MIFARE DESFire EV1|MIFARE DESFire EV1]]<ref name="cardinfo">{{cite web|url=https://docs.google.com/document/pub?id=1b4kr7Z8N2jQ6xqSWUVBtDDsOVpSyj8o7fyL2vuLKYtQ |title=Triple RFID cardscan |website=Docs.Google.com |date=1 September 2012|access-date=9 February 2016}}</ref> |
| [[#MIFARE DESFire EV1|MIFARE DESFire EV1]]<ref name="cardinfo">{{cite web|url=https://docs.google.com/document/pub?id=1b4kr7Z8N2jQ6xqSWUVBtDDsOVpSyj8o7fyL2vuLKYtQ |title=Triple RFID cardscan |website=Docs.Google.com |date=1 September 2012|access-date=9 February 2016}}</ref> |
||
| replaces the individual Luas, Dart and Dublin Bus smartcards |
| replaces the individual Luas, Dart and Dublin Bus smartcards |
||
|- |
|||
| [[Luas]] smart-card |
|||
| Ireland ([[Dublin]]) |
|||
| [[#MIFARE Classic|MIFARE Classic]] |
|||
| being replaced by the [[TFI Leap Card]] |
|||
|- |
|||
| [[Dublin Bus]] smart-card |
|||
| Ireland ([[Dublin]]) |
|||
| [[#MIFARE Classic|MIFARE Classic]] |
|||
| being replaced by the [[TFI Leap Card]] |
|||
|- |
|||
| [[Dublin Area Rapid Transit|DART]] smart-card |
|||
| Ireland ([[Dublin]]) |
|||
| [[#MIFARE Classic|MIFARE Classic]] |
|||
| being replaced by the [[TFI Leap Card]] |
|||
|- |
|- |
||
| AltoAdige/Südtirol Pass |
| AltoAdige/Südtirol Pass |
||
Line 684: | Line 445: | ||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Southern Tirol network (Bus, Train and Cable-cars)<ref>{{cite web|url=https://www.sii.bz.it |title=Südtirol Mobil | Mobilità Alto Adige |language=it|website=Sii.bz.it |access-date=9 February 2016}}</ref> |
| Southern Tirol network (Bus, Train and Cable-cars)<ref>{{cite web|url=https://www.sii.bz.it |title=Südtirol Mobil | Mobilità Alto Adige |language=it|website=Sii.bz.it |access-date=9 February 2016}}</ref> |
||
|- |
|||
| [[Etalons]] |
|||
| [[Latvia]] |
|||
| MIFARE Ultralight |
|||
| Can be used to pay fare for buses, trams and trolleybus. |
|||
|- |
|||
| [[Travel card]] |
|||
| [[Lithuania]] |
|||
| [[#MIFARE Classic|MIFARE Classic]] |
|||
| Introduced in summer of 2013 |
|||
|- |
|||
| [[Touch 'n Go|Touch N Go]] |
|||
| [[Malaysia]] |
|||
| {{dunno}} |
|||
| Used for paying road tolls on the Expressway, fare of public transport, electronics parking and retail payments. |
|||
|- |
|- |
||
|[[Tallinja Card]] |
|[[Tallinja Card]] |
||
Line 704: | Line 450: | ||
|MIFARE Plus X 2K |
|MIFARE Plus X 2K |
||
|Used by [[Malta Public Transport]] (buses); https://www.publictransport.com.mt/en/tallinja-card |
|Used by [[Malta Public Transport]] (buses); https://www.publictransport.com.mt/en/tallinja-card |
||
|- |
|||
| [[OV-chipkaart]] |
|||
| [[Netherlands]] |
|||
| MIFARE Classic 4K |
|||
| MIFARE Classic 4K and MIFARE Ultralight (for disposable cards) used for all public transport until it was [[#Security_of_MIFARE_Classic,_MIFARE_DESFire_and_MIFARE_Ultralight|cracked]]. In 2011 a switch was made to cards based on [[Infineon Technologies|Infineon]] microcontrollers. |
|||
|- |
|- |
||
| AT [[HOP card]] |
| AT [[HOP card]] |
||
Line 714: | Line 455: | ||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Introduced as the regional [[integrated ticketing]] card. The previous branded [[HOP card]] aka "Snapper/HOP" uses the [[JCOP]] standard and was phased out of use in Auckland in 2013.<ref name="Snapper AT Hop transition">[https://www.snapper.co.nz/newsroom/2013/11/20/snapper-continues-to-focus-on-the-customer-during-at-hop-transition] {{webarchive|url=https://web.archive.org/web/20140221084837/https://www.snapper.co.nz/newsroom/2013/11/20/snapper-continues-to-focus-on-the-customer-during-at-hop-transition|date=21 February 2014}}</ref> |
| Introduced as the regional [[integrated ticketing]] card. The previous branded [[HOP card]] aka "Snapper/HOP" uses the [[JCOP]] standard and was phased out of use in Auckland in 2013.<ref name="Snapper AT Hop transition">[https://www.snapper.co.nz/newsroom/2013/11/20/snapper-continues-to-focus-on-the-customer-during-at-hop-transition] {{webarchive|url=https://web.archive.org/web/20140221084837/https://www.snapper.co.nz/newsroom/2013/11/20/snapper-continues-to-focus-on-the-customer-during-at-hop-transition|date=21 February 2014}}</ref> |
||
|- |
|||
| Metlink [[Snapper Card]] |
|||
| New Zealand ([[Wellington]]) |
|||
| MIFARE Plus |
|||
| |
|||
|- |
|||
| [[Kolumbuskort]] |
|||
| Norway ([[Rogaland]]) |
|||
| MIFARE DESFire EV1 |
|||
| Bus, Boat. http://www.kolumbus.no |
|||
|- |
|||
| [[Ruter reisekort]] |
|||
| Norway ([[Oslo]] and [[Akershus]]) |
|||
| MIFARE DESFire EV1 (MF3ICD41) |
|||
| Bus, boat, tram, subway and trains. Ruter and [https://web.archive.org/web/20130209104135/https://www.nsb.no/ NSB] |
|||
|- |
|||
| [[Białostocka Karta Miejska]] |
|||
| [[Poland]] ([[Białystok]]) |
|||
| MIFARE Classic 1K |
|||
| Used on buses |
|||
|- |
|||
| [[Krakowska Karta Miejska]] |
|||
| [[Poland]] ([[Kraków]]) |
|||
| MIFARE Classic 1K / MIFARE Plus 2K |
|||
| Used on trams and buses and as ID for Kraków City Bike system |
|||
|- |
|||
| [[Warszawska Karta Miejska]] |
|||
| [[Poland]] ([[Warsaw]]) |
|||
| MIFARE Classic 1K |
|||
| Used on buses, trams, subway and railroad |
|||
|- |
|- |
||
|[[SmartTech Production]] |
|[[SmartTech Production]] |
||
Line 753: | Line 464: | ||
}}</ref> |
}}</ref> |
||
| |
| |
||
|- |
|||
| [[eBilet]] |
|||
| [[Poland]] ([[Gdynia]]) |
|||
| MIFARE Classic 1K |
|||
| Used on [[trolleybus]]es and buses |
|||
|- |
|||
| [[Beep (smart card)]] |
|||
| [[Philippines]] ([[Metro Manila]]) |
|||
| MIFARE DESFire EV2 |
|||
| Used on [[Manila Light Rail Transit System]], [[Manila Metro Rail Transit System]], [[FamilyMart]], [[North Luzon Expressway]], Robinsons' Movieworld, and Some City Buses (BGC Bus, Frölich Tours P2P, RRCG Transport P2P, HM Transport, Inc., and CityLink) |
|||
|- |
|||
| [[RATB Activ]] |
|||
| [[Romania]] (Bucharest) |
|||
| MIFARE Classic 1K |
|||
| Used on all public surface transportation and also available for subway |
|||
|- |
|||
| [[Moscow Metro]] |
|||
| Russia (Moscow) |
|||
| MIFARE Ultralight, MIFARE Plus X |
|||
| Disposable ticket, eWallet "TROIKA" |
|||
|- |
|- |
||
| [[TransCard]] |
| [[TransCard]] |
||
Line 783: | Line 474: | ||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Used by buses, parking spaces, libraries, museums, the [[Ljubljana Castle funicular]], sports institutes and cultural events.<ref>[http://www.jhl.si/holding/urbana] {{webarchive|url=https://web.archive.org/web/20120628213622/http://www.jhl.si/holding/urbana|date=28 June 2012}}</ref> |
| Used by buses, parking spaces, libraries, museums, the [[Ljubljana Castle funicular]], sports institutes and cultural events.<ref>[http://www.jhl.si/holding/urbana] {{webarchive|url=https://web.archive.org/web/20120628213622/http://www.jhl.si/holding/urbana|date=28 June 2012}}</ref> |
||
|- |
|||
| [[Upass]] |
|||
| [[South Korea]] ([[Seoul]]/[[Seoul Capital Area|Metropolitan]]) |
|||
| MIFARE Classic |
|||
| Used by [[Seoul Metropolitan Subway|Metro]], bus, light metro, and [[AREX|airport link]]. Discontinued in 2014, replaced by [[T-money]]. |
|||
|- |
|||
| [[Daekyung Transport Card]] |
|||
| [[South Korea]] ([[Daegu]]) |
|||
| MIFARE Classic |
|||
| Mainly used by [[Daegu Metro]], Daegu bus and Gyeongsan bus. Discontinued in 2014 (except several Daegu Bank BC debit cards), replaced by Toppass/Onepass. |
|||
|- |
|||
| [[Consorcio de Transportes de Madrid]] |
|||
| Spain (Madrid) |
|||
| MIFARE DESFire EV1 |
|||
| Metro, trains and buses |
|||
|- |
|||
|Consorcio de Transportes de Asturias |
|||
|Spain (Asturias) |
|||
|MIFARE Classic 1K |
|||
|Buses and trains. |
|||
|- |
|- |
||
| [[T-mobilitat]] |
| [[T-mobilitat]] |
||
Line 815: | Line 486: | ||
}}</ref> |
}}</ref> |
||
| Metro, trains and buses, with compatibility with Bicing bike rentals, car parks. |
| Metro, trains and buses, with compatibility with Bicing bike rentals, car parks. |
||
|- |
|||
| [[Barik card|Barik]] |
|||
| Spain ([[Biscay]]) |
|||
| MIFARE DESFire |
|||
| Used for public transport, such as Metro, trains and buses of the province of Biscay. Managed by [[Biscay Transport Consortium]]. |
|||
|- |
|- |
||
| [[Resekortet]] |
| [[Resekortet]] |
||
Line 834: | Line 500: | ||
}}</ref> |
}}</ref> |
||
| Travel ticket for buses and trains. |
| Travel ticket for buses and trains. |
||
|- |
|||
| [[Skånetrafiken JoJo]] |
|||
| Sweden |
|||
| MIFARE Classic 1K |
|||
| Used for public transport in Skåne |
|||
|- |
|||
| [[Karlstadsbuss]] |
|||
| Sweden |
|||
| MIFARE Classic 4K |
|||
| Karlstadsbuss Resekort |
|||
|- |
|||
| [[Storstockholms Lokaltrafik|SL Access]] |
|||
| Sweden |
|||
| MIFARE Classic 4K |
|||
| Stockholms lokaltrafik (Stockholm public transit) |
|||
|- |
|||
| [[Västtrafik]] |
|||
| Sweden |
|||
| MIFARE Classic 1K/4K, MIFARE Plus, MIFARE Ultralight |
|||
| Västtrafikkortet |
|||
|- |
|- |
||
| [[EasyCard]] |
| [[EasyCard]] |
||
Line 859: | Line 505: | ||
| MIFARE Classic, MIFARE Plus<ref>{{cite web |url=http://www.iis.sinica.edu.tw/page/aboutus/FILE/2012iisupdate-E2-project.pdf |title=Contactless Smartcard Technology Needs More Security |website=Iis.sinica.edu.tw |access-date=9 February 2016 |archive-date=24 September 2015 |archive-url=https://web.archive.org/web/20150924033428/http://www.iis.sinica.edu.tw/page/aboutus/FILE/2012iisupdate-E2-project.pdf |url-status=dead }}</ref> |
| MIFARE Classic, MIFARE Plus<ref>{{cite web |url=http://www.iis.sinica.edu.tw/page/aboutus/FILE/2012iisupdate-E2-project.pdf |title=Contactless Smartcard Technology Needs More Security |website=Iis.sinica.edu.tw |access-date=9 February 2016 |archive-date=24 September 2015 |archive-url=https://web.archive.org/web/20150924033428/http://www.iis.sinica.edu.tw/page/aboutus/FILE/2012iisupdate-E2-project.pdf |url-status=dead }}</ref> |
||
| |
| |
||
|- |
|||
|[[Rabbit Card]] |
|||
|[[Thailand]] |
|||
|MIFARE DESFire EV1 |
|||
|Used on [[BTS Skytrain]], [[Bangkok BRT]], restaurants, shops and cinemas that accept [[Rabbit Card]] |
|||
|- |
|||
|[[Smart Purse]] |
|||
|[[Thailand]] |
|||
|MIFARE Classic 1K |
|||
|Used on Metrobus (buses), [[7-Eleven]], shops and restaurants that accept Smart Purse |
|||
|- |
|||
|[[MRT (Bangkok)|Bangkok Metro Smart card]] |
|||
|[[Thailand]] |
|||
|MIFARE Classic 1K |
|||
|[[MRT (Bangkok)|Bangkok Metro]] |
|||
|- |
|||
| [[KGS Card]] |
|||
| [[Turkey]] |
|||
| MIFARE Classic 1K, MIFARE Plus 2K (in Classic compatibility mode) |
|||
| Toll Highways, KGS (acronym for Contactless Card Toll System) |
|||
|- |
|||
| [[Muzekart]] |
|||
| [[Turkey]] |
|||
| MIFARE Classic 1K, MIFARE Plus 2K |
|||
| Used as a museum pass for all museums in Turkiye |
|||
|- |
|||
| Istanbulkart |
|||
| [[Turkey]] ([[Istanbul]]) |
|||
| MIFARE DESFire EV1 |
|||
| Buses, ferry boats, metro, light metro, trams and overground trains |
|||
|- |
|||
| İzmirimKart(2015) |
|||
| [[Turkey]] ([[Izmir]]) |
|||
| MIFARE Plus & custom card securing |
|||
| Metro, bus, passenger ship |
|||
|- |
|||
| [[Iff card]] |
|||
| United Kingdom ([[Cardiff]]) |
|||
| MIFARE DESFire EV1 |
|||
| Used on [[Cardiff Bus]] services. |
|||
|- |
|||
|Walrus Card |
|||
|United Kingdom (Liverpool) |
|||
|MIFARE DESFire EV1 |
|||
|Public transport within Merseyside. |
|||
|- |
|- |
||
| [[Oyster card]] |
| [[Oyster card]] |
||
Line 909: | Line 510: | ||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Migrated from MIFARE Classic to MIFARE DESFire EV1 in 2011<ref>{{cite web|author=Dan Balaban |url=http://www.nfctimes.com/news/transport-london-discard-mifare-classic-seeks-desfire-sims |title=Transport for London to Discard Mifare Classic | NFC Times – Near Field Communication and all contactless technology |website=NFCtimes.com |access-date=9 February 2016}}</ref> |
| Migrated from MIFARE Classic to MIFARE DESFire EV1 in 2011<ref>{{cite web|author=Dan Balaban |url=http://www.nfctimes.com/news/transport-london-discard-mifare-classic-seeks-desfire-sims |title=Transport for London to Discard Mifare Classic | NFC Times – Near Field Communication and all contactless technology |website=NFCtimes.com |access-date=9 February 2016}}</ref> |
||
|- |
|||
| [[EasyRider]] |
|||
| United Kingdom (Nottingham) |
|||
| {{dunno}} |
|||
| Can be used as payment for buses or the tram on [[Nottingham City Transport]] |
|||
|- |
|||
|[https://www.m-card.co.uk/ MCard] |
|||
|United Kingdom (Yorkshire) |
|||
|MIFARE DESFire EV1 |
|||
|Can be topped-up and used at: local train stations, bus stations, PayZones and more. |
|||
|- |
|||
|[[Greater Anglia (train operating company)|Greater Anglia]] Smart Card |
|||
|United Kingdom ([[East of England]]) |
|||
|MIFARE DESFire |
|||
|Used as electronic ticketing at Greater Anglia train stations. |
|||
|- |
|||
| [[Breeze Card]] |
|||
| United States ([[Atlanta]], Georgia) |
|||
| MIFARE Classic, MIFARE Ultralight |
|||
| Can be used as payment for MATRA Rapid Rail and MARTA Bus. |
|||
|- |
|||
| CharmCard |
|||
| United States ([[Baltimore]], Maryland) |
|||
| MIFARE Plus X |
|||
| Used on the [[Maryland Transit Administration]]; accepted in Washington, D.C. systems |
|||
|- |
|||
| [[CharlieCard]] |
|||
| United States (Boston, Massachusetts) |
|||
| MIFARE Classic 1K |
|||
| ''[[MBTA v. Anderson]]'' – Civil case related to the [[responsible disclosure]] of flaws in the system |
|||
|- |
|||
| [[Ventra]] |
|||
| United States (Chicago, Illinois) |
|||
| MIFARE DESFire EV1 256B |
|||
| Used for payments with [[Chicago Transit Authority|CTA]] and [[Pace (transit)|Pace]]. |
|||
|- |
|||
| [[Regional Transportation District#Fares|MyRide]] |
|||
| United States (Denver, Colorado) |
|||
| MIFARE DESFire EV2 4K |
|||
| Used for payments with [[Regional Transportation District|RTD]]. |
|||
|- |
|||
| Wave Card |
|||
| United States ([[Grand Rapids]], Michigan) |
|||
| MIFARE DESFire EV1 256b |
|||
| Used on [[Interurban Transit Partnership|The Rapid]] public transit system |
|||
|- |
|||
| [[METRO Q Card]] |
|||
| United States ([[Houston]], Texas) |
|||
| MIFARE Classic 1K |
|||
| Used for payment of the METRORail, METROBus and METROLift. |
|||
|- |
|- |
||
| [[Transit Access Pass]] |
| [[Transit Access Pass]] |
||
| United States (Los Angeles, California) |
| United States (Los Angeles, California) |
||
| MIFARE Classic 1K / MIFARE Plus<ref>{{cite web|url=http://www.eetimes.com/document.asp?doc_id=1276540 |title=L.A. Metro Taps NXP's MIFARE Plus for Contactless TAP Ticketing | |
| MIFARE Classic 1K / MIFARE Plus<ref>{{cite web|url=http://www.eetimes.com/document.asp?doc_id=1276540 |title=L.A. Metro Taps NXP's MIFARE Plus for Contactless TAP Ticketing |work=EE Times|access-date=9 February 2016}}</ref> |
||
| Used as electronic ticketing for most public transport within Los Angeles County. |
| Used as electronic ticketing for most public transport within Los Angeles County. |
||
|- |
|||
| M•CARD |
|||
| United States ([[Milwaukee]], Wisconsin) |
|||
| MIFARE Classic 1K |
|||
| Currently used on [[Milwaukee County Transit System]], to be phased out in September 2023, replaced by WisGo. WisGo will utilize Umo, an app-based fare collection system, and new WisGo cards. |
|||
|- |
|||
| [[Go-To Card]] |
|||
| United States ([[Minneapolis]], Minnesota) |
|||
| MIFARE Classic 1K |
|||
| Used on [[Metro Transit (Minnesota)|Metro Transit]] and other transit agencies in the [[Minneapolis-St. Paul|Twin Cities]] area |
|||
|- |
|||
| PATH [[SmartLink (smart card)|SmartLink]] |
|||
| United States (New York and [[New Jersey]]) |
|||
| MIFARE DESFire EV1 4K |
|||
| Used as a fare payment method on the PATH transit system in Newark. |
|||
|- |
|||
| [[HOLO card]] |
|||
| United States (Island of [[Oahu|O'ahu]], Hawai'i) |
|||
| MIFARE DESFire EV1 256b |
|||
| Used on [[TheBus (Honolulu)|TheBus]], [[Skyline (Honolulu)|Skyline]], and TheHandi-Van services |
|||
|- |
|||
| Paradise Pass |
|||
| United States ([[Palm Beach County]], Florida) |
|||
| MIFARE DESFire EV1 4K |
|||
| Used on [[Palm Tran]] |
|||
|- |
|||
| [[Freedom Card]] |
|||
| United States ([[Philadelphia]], Pennsylvania) |
|||
| MIFARE DESFire EV1 |
|||
| Used for travel between Philadelphia, Pennsylvania and Southern New Jersey on the [[PATCO Speedline]] |
|||
|- |
|||
| [[ConnectCard]] |
|||
| United States ([[Pittsburgh]], Pennsylvania) |
|||
| [[#MIFARE Classic|MIFARE Classic]] |
|||
| |
|||
|- |
|- |
||
| [[Hop Fastpass]] |
| [[Hop Fastpass]] |
||
Line 1,008: | Line 524: | ||
| date = 9 October 2017 |
| date = 9 October 2017 |
||
| access-date = 16 June 2018 }}</ref> |
| access-date = 16 June 2018 }}</ref> |
||
| |
|||
|- |
|- |
||
| [[ |
| [[Breeze Card]] |
||
| United States ([[ |
| United States ([[Atlanta Metropolitan Area]], Georgia) |
||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1, MIFARE Ultralight (Breeze Ticket) |
||
| Used on transport in the Greater Atlanta area on systems such as [[MARTA]], [[CobbLinc]], [[Ride Gwinnett]], and [[GRTA Xpress]] regional busses.<ref>{{cite web|url=https://www.breezecard.com/ |title=Page Redirection |website=breezecard.com |access-date=11 April 2024}}</ref> |
|||
| |
|||
|- |
|||
| Connect Transit Card |
|||
| United States ([[Sacramento metropolitan area]], California) |
|||
| MIFARE DESFire |
|||
| Used on [[Sacramento Regional Transit]], [[El Dorado Transit]], [[e-tran|E-Tran]], [[Folsom Stage Line]], [[Roseville Transit]], [[Yolobus]], and [[Yuba-Sutter Transit]] |
|||
|- |
|||
| [[Pronto (smart card)|PRONTO Card]] |
|||
| United States ([[San Diego]]) |
|||
| MIFARE DESFire EV1 256B |
|||
| Replaced the [[Compass Card (San Diego)|Compass Card]]. Used on buses, trolleys, [Coaster (rail service)|Coaster]] and [[Sprinter (rail service)|Sprinter]] trains in [[San Diego Metropolitan Transit System|SDMTS]] and [[North County Transit District|NCTD]] |
|||
|- |
|- |
||
| [[Clipper card|Clipper Card]] |
| [[Clipper card|Clipper Card]] |
||
Line 1,030: | Line 535: | ||
| Replacing TransLink, which used a Motorola Card.<ref>{{cite web|url=http://clippercard.com/ |title=Page Redirection |website=Clippercard.com |access-date=9 February 2016}}</ref> |
| Replacing TransLink, which used a Motorola Card.<ref>{{cite web|url=http://clippercard.com/ |title=Page Redirection |website=Clippercard.com |access-date=9 February 2016}}</ref> |
||
|- |
|- |
||
| [[ |
| [[Kennesaw State University|Talon Card]] |
||
| United States ( |
| United States (Kennesaw State University) |
||
| MIFARE |
| MIFARE Classic 4K |
||
| Used for door access and on campus payments |
|||
| Used on [[Miami-Dade Transit#Metrobus|Metrobus]], [[Metrorail (Miami)|Metrorail]], [[Tri-Rail]], City of Hialeah Transit, and Conchita Transit Express. |
|||
|- |
|||
| Smart Ride Card |
|||
| United States ([[St. Cloud, Minnesota|St. Cloud]], Minnesota) |
|||
| MIFARE DESFire EV1 4K |
|||
| Used on [[St. Cloud Metropolitan Transit Commission|St. Cloud Metro Bus]] and Northstar Link Commuter Buses |
|||
|- |
|- |
||
| [[SmarTrip]] |
| [[SmarTrip]] |
||
Line 1,044: | Line 544: | ||
| MIFARE Plus X 2K |
| MIFARE Plus X 2K |
||
| Used on the [[Washington Metropolitan Area Transit Authority]] and neighbouring transit systems; accepted on systems in Baltimore, Maryland |
| Used on the [[Washington Metropolitan Area Transit Authority]] and neighbouring transit systems; accepted on systems in Baltimore, Maryland |
||
|- |
|||
|[[Metrorrey]] |
|||
|[[Mexico|México]]([[Monterrey]]) |
|||
|MIFARE Classic 1K |
|||
|Used in public transport like, metro, metrobus, and the new generation of metropolitan bus [[Muevo leon|Muevo Leon]] |
|||
|- |
|||
|[[Beep (smart card)]] |
|||
|[[Philippines]] ([[Metro Manila]]) |
|||
|MIFARE Classic, MIFARE DESFire EV1<ref>{{Cite web |date=2024-01-09 |title=Faq's – beep™ |url=https://beep.com.ph/faqs/ |access-date=2024-01-09 |archive-url=https://web.archive.org/web/20240109174212/https://beep.com.ph/faqs/ |archive-date=9 January 2024 }}</ref> |
|||
|Used on the [[LRT Line 1 (Metro Manila)]], [[LRT Line 2]], [[MRT Line 3 (Metro Manila)]],<ref>{{Cite web |date=2015-10-07 |title=Beep cards can now be used on MRT 3, LRT 1, 2 {{!}} Inquirer News |url=https://newsinfo.inquirer.net/727979/beep-cards-can-now-be-used-on-mrt-3-lrt-12 |access-date=2024-01-09 |archive-url=https://web.archive.org/web/20151007201229/https://newsinfo.inquirer.net/727979/beep-cards-can-now-be-used-on-mrt-3-lrt-12 |archive-date=7 October 2015 }}</ref> [[BGC Bus]]<ref>{{Cite web |date=2022-07-14 |title=Tap-and-go beep cards now accepted on BGC buses |url=https://www.rappler.com/business/industries/136587-beep-cards-bgc-bus/ |access-date=2024-01-09 |archive-url=https://web.archive.org/web/20220714163707/https://www.rappler.com/business/industries/136587-beep-cards-bgc-bus/ |archive-date=14 July 2022 }}</ref> |
|||
|} |
|} |
||
Line 1,064: | Line 574: | ||
| MIFARE Ultralight |
| MIFARE Ultralight |
||
| Contactless smartcards for payment in the AFC System of the Moscow Metro<ref name="smartek.ru">{{cite web|url=http://www.smartek.ru/en/solutions/afcs/afcsprojets/mosmetroafcs.aspx |title=SMART TECHNOLOGIES GROUP – Moscow Metro, AFC, contactless smart cards |website=Smartek.ru |access-date=9 February 2016}}</ref> |
| Contactless smartcards for payment in the AFC System of the Moscow Metro<ref name="smartek.ru">{{cite web|url=http://www.smartek.ru/en/solutions/afcs/afcsprojets/mosmetroafcs.aspx |title=SMART TECHNOLOGIES GROUP – Moscow Metro, AFC, contactless smart cards |website=Smartek.ru |access-date=9 February 2016}}</ref> |
||
|- |
|||
| Automatic fare collection |
|||
| Smart mobility |
|||
| [[Touch n go]] |
|||
| |
|||
| Kuala Lumpur |
|||
| |
|||
| Malaysian toll expressway and highway operators payment system |
|||
|- |
|||
| Campus card |
|||
| Multiapplication including access |
|||
| Ege Üniversitesi |
|||
| |
|||
| İzmir |
|||
| MIFARE Classic |
|||
| Controlled-access campus entrance by these cards |
|||
|- |
|||
| Parking |
|||
| Smart mobility |
|||
| NOL |
|||
| RTA |
|||
| Dubai |
|||
| MIFARE DESFire EV1 |
|||
| Multiapplication card inter alia used for parking<ref>{{cite web|url=http://www.mifare.net/en/aboutmifare/news/multi-application-mobile-ticketing-based-mifare-technolo/ |title=Multi-application and mobile ticketing based on MIFARE DESFire™ EV1 |website=Mifare.net |date=2 June 2014|access-date=9 February 2016}}</ref> |
|||
|- |
|- |
||
| Parking |
| Parking |
||
Line 1,103: | Line 589: | ||
| |
| |
||
| MIFARE on SmartMX |
| MIFARE on SmartMX |
||
| Access to buildings through smartphone<ref>{{cite web|url=http://nxp-rfid.com/nxp-enables-mobile-ticketing-for-smart-mobile-devices/ |
| Access to buildings through smartphone<ref>{{cite web|url=http://nxp-rfid.com/nxp-enables-mobile-ticketing-for-smart-mobile-devices/ |title=NXP Enables Mobile Ticketing for Smart Mobile Devices |website=Nxp-rfid.com |access-date=9 February 2016}}</ref> |
||
|- |
|- |
||
| Tourist card |
| Tourist card |
||
Line 1,111: | Line 597: | ||
| Valencia |
| Valencia |
||
| MIFARE on SmartMX |
| MIFARE on SmartMX |
||
| Tourist card, bike rental, electric car rental, transport ticketing, taxi card, access management and payment function<ref>{{cite web |url=http://www.avmm.es/c/document_library/get_file?uuid=ec899839-1020-4680-955d-cb7d9d1c1e46&groupId=16203 |archive-url=https://web.archive.org/web/20150923180840/http://www.avmm.es/c/document_library/get_file?uuid=ec899839-1020-4680-955d-cb7d9d1c1e46&groupId=16203 |url-status=dead |archive-date=23 September 2015 |
| Tourist card, bike rental, electric car rental, transport ticketing, taxi card, access management and payment function<ref>{{cite web |url=http://www.avmm.es/c/document_library/get_file?uuid=ec899839-1020-4680-955d-cb7d9d1c1e46&groupId=16203 |archive-url=https://web.archive.org/web/20150923180840/http://www.avmm.es/c/document_library/get_file?uuid=ec899839-1020-4680-955d-cb7d9d1c1e46&groupId=16203 |url-status=dead |archive-date=23 September 2015 |title=The secret of Valencia's cutting edge contactless ticketing system |website=Avmm.es |access-date=9 February 2016 }}</ref> |
||
|- |
|- |
||
| Tourist card |
| Tourist card |
||
| Smart mobility |
| Smart mobility |
||
| [[Oyster |
| [[Oyster card]] |
||
| |
| |
||
| London |
| London |
||
Line 1,168: | Line 654: | ||
| MIFARE DESFire EV1 |
| MIFARE DESFire EV1 |
||
| Used for car sharing<ref>{{cite web |url=http://www.nfc.cc/tag/car2go/ |title=Car2Go | NFC Development & Consulting |website=Nfc.cc |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20140724055736/http://www.nfc.cc/tag/car2go/ |archive-date=24 July 2014 |url-status=dead }}</ref> |
| Used for car sharing<ref>{{cite web |url=http://www.nfc.cc/tag/car2go/ |title=Car2Go | NFC Development & Consulting |website=Nfc.cc |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20140724055736/http://www.nfc.cc/tag/car2go/ |archive-date=24 July 2014 |url-status=dead }}</ref> |
||
|- |
|||
| Bike rental |
|||
| Smart mobility |
|||
| OV-fiets |
|||
| |
|||
| Netherlands |
|||
| |
|||
| Bike rental smartcard <!--<ref> |
|||
Download.aspx%3Fkind%3DOther%26id%3D29&ei=ebFsU6XYA8X50gXK94DQDw&usg=AFQjCNGYhdlnmcPvAiVw42nLch3Wfm5uOA&sig2=oolm6NS7EYfIR4mf4qJcUQ&bvm=bv.66330100,d.d2k |
|||
</ref> --> |
|||
|- |
|- |
||
| Bike rental |
| Bike rental |
||
Line 1,225: | Line 701: | ||
| |
| |
||
| |
| |
||
| Hotel access card<ref>{{cite web|url=http://www.rfidjournal.com/articles/view?10036/2 |title=RFID News Roundup |publisher=RFID Journal |access-date=9 February 2016}}</ref> |
| Hotel access card<ref>{{cite web|url=http://www.rfidjournal.com/articles/view?10036/2 |archive-url=https://web.archive.org/web/20140527230057/http://www.rfidjournal.com/articles/view?10036/2 |url-status=dead |archive-date=27 May 2014 |title=RFID News Roundup |publisher=RFID Journal |access-date=9 February 2016}}</ref> |
||
|- |
|- |
||
| [[Campus card]] |
| [[Campus card]] |
||
Line 1,258: | Line 734: | ||
| |
| |
||
| Event ticketing for soccer WM<ref>{{cite web |url=http://www.siemens.com/innovation/apps/pof_microsite/_pof-spring-2014/_html_en/sports-facilities.html |title=Archive – Pictures of the Future – Innovation – Home – Siemens Global Website |website=Siemens.com |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20140527220415/http://www.siemens.com/innovation/apps/pof_microsite/_pof-spring-2014/_html_en/sports-facilities.html |archive-date=27 May 2014 |url-status=dead }}</ref> |
| Event ticketing for soccer WM<ref>{{cite web |url=http://www.siemens.com/innovation/apps/pof_microsite/_pof-spring-2014/_html_en/sports-facilities.html |title=Archive – Pictures of the Future – Innovation – Home – Siemens Global Website |website=Siemens.com |access-date=9 February 2016 |archive-url=https://web.archive.org/web/20140527220415/http://www.siemens.com/innovation/apps/pof_microsite/_pof-spring-2014/_html_en/sports-facilities.html |archive-date=27 May 2014 |url-status=dead }}</ref> |
||
|- |
|||
| Citizen card |
|||
| Access |
|||
| National Entitlement Card (NEC) |
|||
| |
|||
| Scotland, UK |
|||
| MIFARE on SmartMX |
|||
| 30 different services (identity, transport, financial and health-related services...)<ref>{{cite web|url=http://www.mifare.net/en/aboutmifare/news/new-smart-card-solution-scotland/ |title=New smart card solution for Scotland |publisher=MIFARE |date=2 June 2014|access-date=9 February 2016}}</ref> |
|||
|- |
|||
| Library card |
|||
| Access |
|||
| Berlin Dietrich-Bonhoeffer library |
|||
| Bibliotheca |
|||
| Berlin, Germany |
|||
| MIFARE DESFire EV1 |
|||
| Library ID<ref>{{cite web|url=http://www.mifare.net/en/aboutmifare/news/berlins-libraries-implement-rfid-modernization/ |title=Berlin´s libraries implement RFID modernization |publisher=MIFARE |date=2 June 2014|access-date=9 February 2016}}</ref> |
|||
|- |
|||
| Library card |
|||
| Access |
|||
| City Library Reutlingen |
|||
| |
|||
| Germany |
|||
| MIFARE DESFire EV1 |
|||
| Cashless payment for library fees<ref name="calllock.com"/> |
|||
|- |
|||
| Amusement park |
|||
| Access |
|||
| Transdev Studio |
|||
| Bank Mega |
|||
| Makassar |
|||
| MIFARE DESFire EV1 |
|||
| Access, loyalty & micropayments<ref>{{cite web|url=http://www.mifare.net/en/aboutmifare/news/nxp-and-bank-mega-enhance-customer-experience-with-multi-applica/ |title=NXP and Bank Mega enhance customer experience with multi-application smart card solution for in-door theme parks |publisher=MIFARE |date=1 December 2011|access-date=9 February 2016}}</ref> |
|||
|- |
|- |
||
| Museum card |
| Museum card |
||
Line 1,305: | Line 749: | ||
| Manchester |
| Manchester |
||
| |
| |
||
| Access, loyalty, membership, payment function<ref>{{cite web|url=http://www.rfidjournal.com/articles/view?3985 |title=Soccer Fans Use RFID Cards to Gain Admission and Buy Food |publisher=RFID Journal |access-date=9 February 2016}}</ref> |
| Access, loyalty, membership, payment function<ref>{{cite web|url=http://www.rfidjournal.com/articles/view?3985 |archive-url=https://web.archive.org/web/20140326074856/http://www.rfidjournal.com/articles/view?3985 |url-status=dead |archive-date=26 March 2014 |title=Soccer Fans Use RFID Cards to Gain Admission and Buy Food |publisher=RFID Journal |access-date=9 February 2016}}</ref> |
||
|- |
|- |
||
| Loyalty card |
| Loyalty card |
||
Line 1,330: | Line 774: | ||
| |
| |
||
| NFC enabled smartphones<ref>[http://www.nfctags.com/nfc-applications-which-tag] {{webarchive|url=https://web.archive.org/web/20140330235143/http://www.nfctags.com/nfc-applications-which-tag|date=30 March 2014}}</ref> |
| NFC enabled smartphones<ref>[http://www.nfctags.com/nfc-applications-which-tag] {{webarchive|url=https://web.archive.org/web/20140330235143/http://www.nfctags.com/nfc-applications-which-tag|date=30 March 2014}}</ref> |
||
|- |
|||
| Health card |
|||
| Identification |
|||
| European health insurance card |
|||
| |
|||
| Europe |
|||
| JCOP |
|||
| Health and identification card<ref>[http://www.mifare.net/files/7113/4978/9303/NXP_JCOP.pdf] {{dead link|date=February 2016}}</ref> |
|||
|- |
|- |
||
| Health card |
| Health card |
||
Line 1,376: | Line 812: | ||
| E-Kart, E-Kent, Aktifbank |
| E-Kart, E-Kent, Aktifbank |
||
| Turkey |
| Turkey |
||
| |
| MIFARE DESFire EV1 ; JCOP |
||
| Stadium access – ticketing, micropayments, payments, transport<ref>{{cite web |author=E-Bilet Süresini Uzat |url=http://www.passolig.com.tr/ |title=Spor ve Eğlence Dünyasının Anahtarı |website=Passolig.com.tr |access-date=9 February 2016 |archive-date=20 April 2014 |archive-url=https://web.archive.org/web/20140420041708/http://www.passolig.com.tr/ |url-status=dead }}</ref> |
| Stadium access – ticketing, micropayments, payments, transport<ref>{{cite web |author=E-Bilet Süresini Uzat |url=http://www.passolig.com.tr/ |title=Spor ve Eğlence Dünyasının Anahtarı |website=Passolig.com.tr |access-date=9 February 2016 |archive-date=20 April 2014 |archive-url=https://web.archive.org/web/20140420041708/http://www.passolig.com.tr/ |url-status=dead }}</ref> |
||
|- |
|- |
||
Line 1,386: | Line 822: | ||
| MIFARE Ultralight |
| MIFARE Ultralight |
||
| Used for electronic smart paper ticketing in public transport<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2009/01/moscow-metro-the-world-s-first-major-transport-system-to-operate-fully-contactless-with-nxp-s-mifare-technology.html |title=NXP Semiconductors :: Media Center |website=Nxp.com |access-date=9 February 2016}}</ref> |
| Used for electronic smart paper ticketing in public transport<ref>{{cite web|url=http://www.nxp.com/news/press-releases/2009/01/moscow-metro-the-world-s-first-major-transport-system-to-operate-fully-contactless-with-nxp-s-mifare-technology.html |title=NXP Semiconductors :: Media Center |website=Nxp.com |access-date=9 February 2016}}</ref> |
||
|- |
|||
| Banking |
|||
| Banking |
|||
| Touch Travel Card |
|||
| Dialog Axiata, Silverleap Technology |
|||
| Sri Lanka |
|||
| MIFARE DESFire EV1 |
|||
|Payment solution<ref>{{cite web|url=http://www.mifare.net/index.php?cID=3180 |title=Mifare |publisher=Mifare |date=2 June 2014|access-date=9 February 2016}}</ref> |
|||
|- |
|||
| Automatic fare collection |
|||
| Smart mobility |
|||
| [[Минсктранс]] |
|||
| |
|||
| Minsk, Belarus |
|||
| MIFARE DESFire EV1 |
|||
| Contactless smartcards for payment in the city public transport Minsktrans<ref name="minsktrans.by">{{cite web|url=http://www.minsktrans.by/en/ |title=MINSKTRANS |website=minsktrans.by |access-date=25 December 2019}}</ref> |
|||
|} |
|} |
||
===Institutions=== |
===Institutions=== |
||
* Northwest University, South Africa – Student/staff ID, access control, library, student meals, sport applications, payments<ref>{{cite web|url=http://www.nwu.ac.za/ |title=North-West University |publisher=NWU |date=2 January 2016|access-date=9 February 2016}}</ref> |
* Northwest University, South Africa – Student/staff ID, access control, library, student meals, sport applications, payments<ref>{{cite web|url=http://www.nwu.ac.za/ |title=North-West University |publisher=NWU |date=2 January 2016|access-date=9 February 2016}}</ref> |
||
* [[Cambridge University]]<ref>{{cite web |url=http://www.cl.cam.ac.uk/local/wgb/securityaccess.html |title=Computer Laboratory: Access and security |website=Cl.cam.ac.uk |access-date=9 February 2016 |archive-date=3 March 2016 |archive-url=https://web.archive.org/web/20160303232336/http://www.cl.cam.ac.uk/local/wgb/securityaccess.html |url-status=dead }}</ref> – Student/Staff ID and access card, library card, canteen payments in some colleges<ref>{{cite web|url=http://www.clare.cam.ac.uk/academic/handbook/food-drink.html |title=Welcome to Clare College – Clare College Cambridge |website=Clare.cam.ac.uk |access-date=9 February 2016}}</ref> |
* [[Cambridge University]]<ref>{{cite web |url=http://www.cl.cam.ac.uk/local/wgb/securityaccess.html |title=Computer Laboratory: Access and security |website=Cl.cam.ac.uk |access-date=9 February 2016 |archive-date=3 March 2016 |archive-url=https://web.archive.org/web/20160303232336/http://www.cl.cam.ac.uk/local/wgb/securityaccess.html |url-status=dead }}</ref> – Student/Staff ID and access card, library card, canteen payments in some colleges<ref>{{cite web |url=http://www.clare.cam.ac.uk/academic/handbook/food-drink.html |title=Welcome to Clare College – Clare College Cambridge |website=Clare.cam.ac.uk |access-date=9 February 2016 |archive-date=17 March 2011 |archive-url=https://web.archive.org/web/20110317025217/http://www.clare.cam.ac.uk/academic/handbook/food-drink.html |url-status=dead }}</ref> |
||
* [[University of Queensland|The University of Queensland]] – Staff and student ID, access control, library, copy/print, building access (MIFARE DESFire EV1)<ref>{{Cite web|url=https://www.pf.uq.edu.au/idcards/index.html|title=** UQ ID Cards are the responsibility of Property and Facilities Division|website= |
* [[University of Queensland|The University of Queensland]] – Staff and student ID, access control, library, copy/print, building access (MIFARE DESFire EV1)<ref>{{Cite web|url=https://www.pf.uq.edu.au/idcards/index.html|title=** UQ ID Cards are the responsibility of Property and Facilities Division|website=pf.uq.edu.au|access-date=3 June 2018}}</ref> |
||
==See also== |
==See also== |
||
Line 1,417: | Line 837: | ||
==References== |
==References== |
||
{{Reflist |
{{Reflist}} |
||
==Further reading== |
==Further reading== |
Latest revision as of 05:47, 24 June 2024
![]() | This article contains content that is written like an advertisement. (March 2023) |
![](http://upload.wikimedia.org/wikipedia/commons/thumb/3/34/Mifare_logo_rgb.svg/220px-Mifare_logo_rgb.svg.png)
MIFARE is a series of integrated circuit (IC) chips used in contactless smart cards and proximity cards.
The brand includes proprietary solutions based on various levels of the ISO/IEC 14443 Type-A 13.56 MHz contactless smart card standard. It uses AES and DES/Triple-DES encryption standards, as well as an older proprietary encryption algorithm, Crypto-1. According to NXP, 10 billion of their smart card chips and over 150 million reader modules have been sold.[1]
The MIFARE trademark is owned by NXP Semiconductors, which was spun off from Philips Electronics in 2006.[2][3]
Variants
[edit]MIFARE products are embedded in contactless and contact smart cards, smart paper tickets, wearables and phones.[4][5]
The MIFARE brand name (derived from the term MIKRON FARE collection and created by the company Mikron) covers four families of contactless cards:
- MIFARE Classic
- Employs a proprietary protocol compliant with parts 1–3 of ISO/IEC 14443 Type A, with an NXP proprietary security protocol for authentication and ciphering.[citation needed]
Subtypes: MIFARE Classic EV1 (other subtypes are no longer in use).
- MIFARE Plus
- Drop-in replacement for MIFARE Classic with certified security level (AES-128 based) and is fully backwards compatible with MIFARE Classic.[citation needed]
Subtypes: MIFARE Plus S, MIFARE Plus X, MIFARE Plus SE and MIFARE Plus EV2.
- MIFARE Ultralight
- Low-cost ICs that are useful for high volume applications such as public transport, loyalty cards and event ticketing.
Subtypes: MIFARE Ultralight C, MIFARE Ultralight EV1, MIFARE Ultralight Nano and MIFARE Ultralight AES.
- MIFARE DESFire
- Contactless ICs that comply with parts 3 and 4 of ISO/IEC 14443-4 Type A with a mask-ROM operating system from NXP. The DES in the name refers to the use of a DES, two-key 3DES, three-key 3DES and AES encryption; while Fire is an acronym for Fast, innovative, reliable, and enhanced.
Subtypes: MIFARE DESFire EV1, MIFARE DESFire EV2, MIFARE DESFire EV3 and MIFARE DESFire Light.
There is also the MIFARE SAM AV2 contact smart card. This can be used to handle the encryption in communicating with the contactless cards. The SAM (Secure Access Module) provides the secure storage of cryptographic keys and cryptographic functions.
MIFARE Classic family
[edit]The MIFARE Classic IC is just a memory storage device, where the memory is divided into segments and blocks with simple security mechanisms for access control. They are ASIC-based and have limited computational power. Due to their reliability and low cost, those cards are widely used for electronic wallets, access control, corporate ID cards, transportation or stadium ticketing. It uses an NXP proprietary security protocol (Crypto-1) for authentication and ciphering.[citation needed]
MIFARE Classic encryption has been compromised; see below for details.[citation needed]
The MIFARE Classic with 1K memory offers 1,024 bytes of data storage, split into 16 sectors; each sector is protected by two different keys, called A and B. Each key can be programmed to allow operations such as reading, writing, increasing value blocks, etc. MIFARE Classic with 4K memory offers 4,096 bytes split into forty sectors, of which 32 are the same size as in the 1K with eight more that are quadruple size sectors. MIFARE Classic Mini offers 320 bytes split into five sectors. For each of these IC types, 16 bytes per sector are reserved for the keys and access conditions and can not normally be used for user data. Also, the very first 16 bytes contain the serial number of the card and certain other manufacturer data and are read-only. That brings the net storage capacity of these cards down to 752 bytes for MIFARE Classic with 1K memory, 3,440 bytes for MIFARE Classic with 4K memory, and 224 bytes for MIFARE Mini.[citation needed]
![]() | Parts of this article (those related to smartphone types) need to be updated.(December 2013) |
The Samsung TecTile NFC tag stickers use MIFARE Classic chips. This means only devices with an NXP NFC controller chip can read or write these tags. At the moment BlackBerry phones, the Nokia Lumia 610 (August 2012[6]), the Google Nexus 4, Google Nexus 7 LTE and Nexus 10 (October 2013[7]) can't read/write TecTile stickers.[citation needed]
MIFARE Plus family
[edit]MIFARE Plus
[edit]MIFARE Plus is a replacement IC solution for the MIFARE Classic.
It is less flexible than a MIFARE DESFire EV1 contactless IC.
MIFARE Plus was publicly announced in March 2008 with first samples in Q1 2009.[8]
MIFARE Plus, when used in older transportation systems that do not yet support AES on the reader side, still leaves an open door to attacks. Though it helps to mitigate threats from attacks that broke the Crypto-1 cipher through the weak random number generator, it does not help against brute force attacks and crypto analytic attacks.[9]
During the transition period from MIFARE Classic to MIFARE Plus where only a few readers might support AES in the first place, it offers an optional AES authentication in Security Level 1 (which is in fact MIFARE Classic operation). This does not prevent the attacks mentioned above but enables a secure mutual authentication between the reader and the card to prove that the card belongs to the system and is not fake.
In its highest security level SL3, using 128-bit AES encryption, MIFARE Plus is secured from attacks.[citation needed]
MIFARE Plus EV1
[edit]MIFARE Plus EV1 was announced in April 2016.[10]
New features compared to MIFARE Plus X include:
- Sector-wise security-level switching
- The choice of crypto algorithm used in the authentication protocol can be set separately for each sector. This makes it possible to use the same card with both readers that can read MIFARE Classic products (with sectors protected by 48-bit CRYPTO1 keys, "Security Level 1") and readers that can read MIFARE Plus products (with sectors protected by 128-bit AES keys, "Security Level 3"). This feature is intended to make it easier to gradually migrate existing MIFARE Classic product-based installations to MIFARE Plus, without having to replace all readers at the same time.
- ISO 7816-4 wrapping
- The card can now be accessed in either the protocol for MIFARE (which is not compliant with the ISO 7816-4 APDU format), or using a new protocol variant that runs on top of ISO 7816-4. This way the cards become compatible with NFC reader APIs that can only exchange messages in ISO 7816-4 APDU format, with a maximum transfer data buffer size of 256 bytes.
- Proximity check
- While the protocol for MIFARE Classic tolerated message delays of several seconds, and was therefore vulnerable to relay attacks, MIFARE Plus EV1 now implements a basic "ISO compliant" distance-bounding protocol. This puts tighter timing constraints on the permitted round-trip delay during authentication, to make it harder to forward messages to far-away cards or readers via computer networks.
- Secure end-2-end channel
- Permits AES-protected over-the-air updates even to Crypto1 application sectors (SL1SL3 mix mode).
- Transaction MAC
- The card can produce an additional message-authentication code over a transaction that can be verified by a remote clearing service, independent of the keys used by the local reader during the transaction.
MIFARE Plus EV2
[edit]The MIFARE Plus EV2 was introduced to the market on 23 June 2020.[11] It comes with an enhanced read performance and transaction speed compared to MIFARE Plus EV1.[12]
New features compared to MIFARE Plus EV1 include:
- Transaction Timer
- To help mitigate man-in-the-middle attacks, the Transaction Timer feature, which is also available on NXP's MIFARE DESFire EV3 IC, makes it possible to set a maximum time per transaction, so it's harder for an attacker to interfere with the transaction.
MIFARE Ultralight family
[edit]MIFARE Ultralight
[edit]The MIFARE Ultralight has only 512 bits of memory (i.e. 64 bytes), without cryptographic security. The memory is provided in 16 pages of 4 bytes. Cards based on these chips are so inexpensive that they are often used for disposable tickets for events such as the 2006 FIFA World Cup. It provides only basic security features such as one-time-programmable (OTP) bits and a write-lock feature to prevent re-writing of memory pages but does not include cryptography as applied in other MIFARE product-based cards.
MIFARE Ultralight EV1
[edit]MIFARE Ultralight EV1[13] introduced in November 2012 the next generation of paper ticketing smart card ICs for limited-use applications for ticketing schemes and additional security options.[14] It comes with several enhancements above the original MIFARE Ultralight:
- 384 and 1024 bits user memory product variants
- OTP, lock bits, configurable counters for improved security
- Three independent 24-bit one-way counters to stop reloading
- Protected data access through 32-bit password
- NXP Semiconductors originality signature function, this is an integrated originality checker and is effective cloning protection that helps to prevent counterfeit of tickets. However, this protection is applicable only to "mass penetration of non NXP originated chips and does not prevent hardware copy or emulation of a single existing valid chip"[15]
MIFARE Ultralight C
[edit]Introduced at the Cartes industry trade show in 2008, the MIFARE Ultralight C IC is part of NXP's low-cost MIFARE product offering (disposable ticket). With Triple DES, MIFARE Ultralight C uses a widely adopted standard, enabling easy integration in existing infrastructures. The integrated Triple DES authentication provides an effective countermeasure against cloning.[citation needed]
Key applications for MIFARE Ultralight C are public transportation, event ticketing, loyalty and NFC Forum tag type 2.
MIFARE Ultralight AES
[edit]It was introduced in 2022.
MIFARE DESFire family
[edit]MIFARE DESFire
[edit]The MIFARE DESFire (MF3ICD40) was introduced in 2002 and is based on a core similar to SmartMX, with more hardware and software security features than MIFARE Classic. It comes pre-programmed with the general-purpose MIFARE DESFire operating system which offers a simple directory structure and files. They are sold in four variants: One with Triple-DES only and 4 KiB of storage, and three with AES (2, 4, or 8 kiB; see MIFARE DESFire EV1). The AES variants have additional security features; e.g., CMAC. MIFARE DESFire uses a protocol compliant with ISO/IEC 14443-4.[16] The contactless IC is based on an 8051 processor with 3DES/AES cryptographic accelerator, making very fast transactions possible.
The maximal read/write distance between card and reader is 10 centimetres (3.9 in), but the actual distance depends on the field power generated by the reader and its antenna size.
In 2010, NXP announced the discontinuation of the MIFARE DESFire (MF3ICD40) after it had introduced its successor MIFARE DESFire EV1 (MF3ICD41) in late 2008. In October 2011 researchers of Ruhr University Bochum[17] announced that they had broken the security of MIFARE DESFire (MF3ICD40), which was acknowledged by NXP[18] (see MIFARE DESFire security).
MIFARE DESFire EV1
[edit]First evolution of MIFARE DESFire contactless IC, broadly backwards compatible. Available with 2 KiB, 4 KiB, and 8 KiB non-volatile memory. Other features include:[19]
- Support for random ID.
- Support for 128-bit AES
- Hardware and operating system are Common Criteria certified at level EAL 4+
MIFARE DESFire EV1 was publicly announced in November 2006.[citation needed]
MIFARE DESFire EV2
[edit]The second evolution of the MIFARE DESFire contactless IC family, broadly backwards compatible.[20] New features include:
- MI smart App enabling to offer or sell memory space for additional applications of 3rd parties without the need to share secret keys
- Transaction MAC to authenticate transactions by 3rd parties
- Virtual Card Architecture for privacy protection
- Proximity check against relay attacks
MIFARE DESFire EV2 was publicly announced in March 2016 at the IT-TRANS event in Karlsruhe, Germany
MIFARE DESFire EV3
[edit]The latest evolution of the MIFARE DESFire contactless IC family, broadly backward compatible. New features include:
- ISO/IEC 14443 A 1–4 and ISO/IEC 7816-4 compliant
- Common Criteria EAL5+ certified for IC hardware and software
- NFC Forum Tag Type 4 compliant
- SUN message authentication for advanced data protection within standard NDEF read operation
- Choice of open DES/2K3DES/3K3DES/AES crypto algorithms
- Flexible file structure: hosts as many applications as the memory size supports
- Proof of transaction with card generated MAC
- Transaction Timer mitigates risk of man-in-the-middle attacks
MIFARE DESFire EV3 was publicly announced on 2 June 2020.[21]
MIFARE SAM AV2
[edit]MIFARE SAMs are not contactless smart cards. They are secure access modules designed to provide the secure storage of cryptographic keys and cryptographic functions for terminals to access the MIFARE products securely and to enable secure communication between terminals and host (backend). MIFARE SAMs are available from NXP in the contact-only module (PCM 1.1) as defined in ISO/IEC 7816-2 and the HVQFN32 format.[citation needed]
Integrating a MIFARE SAM AV2 in a contactless smart card reader enables a design that integrates high-end cryptography features and the support of cryptographic authentication and data encryption/decryption.[citation needed] Like any SAM, it offers functionality to store keys securely and perform authentication and encryption of data between the contactless card and the SAM and the SAM towards the backend. Next to a classical SAM architecture, the MIFARE SAM AV2 supports the X-mode which allows a fast and convenient contactless terminal development by connecting the SAM to the microcontroller and reader IC simultaneously.[citation needed]
MIFARE SAM AV2 offers AV1 mode and AV2 mode where in comparison to the SAM AV1 the AV2 version includes public key infrastructure (PKI), hash functions like SHA-1, SHA-224, and SHA-256. It supports MIFARE Plus and secure host communication. Both modes provide the same communication interfaces, cryptographic algorithms (Triple-DES 112-bit and 168-bit key, MIFARE products using Crypto1, AES-128 and AES-192, RSA with up to 2048-bit keys), and X-mode functionalities.[citation needed] The MIFARE SAM AV3 is the third generation of NXP's Secure Access Module, and it supports MIFARE ICs as well as NXP's UCODE DNA, ICODE DNA and NTAG DNA ICs.[22]
MIFARE 2GO
[edit]A cloud-based platform that digitizes MIFARE product-based smart cards and makes them available on NFC-enabled smartphones and wearables. With this, new Smart City use cases such as mobile transit ticketing, mobile access and mobile micropayments are being enabled.[23]
Byte layout
[edit]![](http://upload.wikimedia.org/wikipedia/commons/thumb/3/39/MiFare_Byte_Layout.png/220px-MiFare_Byte_Layout.png)
History
[edit]- 1994 – MIFARE Classic IC with 1K user memory introduced.
- 1996 – First transport scheme in Seoul using MIFARE Classic with 1K memory.
- 1997 – MIFARE PRO with Triple DES coprocessor introduced.
- 1999 – MIFARE PROX with PKI coprocessor introduced.
- 2001 – MIFARE Ultralight introduced.
- 2002 – MIFARE DESFire introduced, microprocessor based product.
- 2004 – MIFARE SAM introduced, secure infrastructure counterpart of MIFARE DESFire.
- 2006 – MIFARE DESFire EV1 is announced as the first product to support 128-bit AES.
- 2008 – MIFARE4Mobile industry Group is created, consisting of leading players in the Near Field Communication (NFC) ecosystem.
- 2008 – MIFARE Plus is announced as a drop-in replacement for MIFARE Classic based on 128-bit AES.
- 2008 – MIFARE Ultralight C is introduced as a smart paper ticketing IC featuring Triple DES Authentication.
- 2010 – MIFARE SAM AV2 is introduced as secure key storage for readers AES, Triple DES, PKI Authentication.
- 2012 – MIFARE Ultralight EV1 introduced, backward compatible to MIFARE Ultralight but with extra security.
- 2014 – MIFARE SDK was introduced, allowing developers to create and develop their own NFC Android applications.
- 2014 – NXP Smart MX2 the world's first secure smart card platform supporting MIFARE Plus and MIFARE DESFire EV1 with EAL 50 was released.
- 2015 – MIFARE Plus SE, the entry-level version of NXP's proven and reliable MIFARE Plus product family, was introduced.
- 2016 – MIFARE Plus EV1 was introduced, the proven mainstream smart card product compatible with MIFARE Classic in its backward compatible security level.
- 2016 – MIFARE DESFire EV2 is announced with improved performance, security, privacy and multi-application support.
- 2016 – MIFARE SDK is rebranded to TapLinx, with additional supported products.
- 2018 – MIFARE 2GO cloud service was introduced, allows to manage MIFARE DESFire and MIFARE Plus (in SL3) product-based credentials onto NFC-enabled mobile and wearable devices.
- 2020 – MIFARE DESFire EV3 is announced[21]
- 2020 – MIFARE Plus EV2 was introduced, adding SL3 to support MIFARE 2GO, EAL5+ certification & Transaction Timer to help mitigate man-in-the-middle attacks.
- 2022 – MIFARE Ultralight AES was introduced.
The MIFARE product portfolio was originally developed by Mikron in Gratkorn, Austria. Mikron was acquired by Philips in 1995.[24] Mikron sourced silicon from Atmel in the US, Philips in the Netherlands, and Siemens in Germany.[citation needed]
Infineon Technologies (then Siemens) licensed MIFARE Classic from Mikron in 1994[25] and developed both stand alone and integrated designs with MIFARE product functions. Infineon currently produces various derivatives based on MIFARE Classic including 1K memory (SLE66R35) and various microcontrollers (8 bit (SLE66 series), 16 bit (SLE7x series), and 32 bit (SLE97 series) with MIFARE implementations, including devices for use in USIM with Near Field Communication.[26]
Motorola tried to develop MIFARE product-like chips for the wired-logic version but finally gave up. The project expected one million cards per month for start, but that fell to 100,000 per month just before they gave up the project.[27]
In 1998 Philips licensed MIFARE Classic to Hitachi[28] Hitachi licensed MIFARE products for the development of the contactless smart card solution for NTT's IC telephone card which started in 1999 and finished in 2006.[citation needed] In the NTT contactless IC telephone card project, three parties joined: Tokin-Tamura-Siemens, Hitachi (Philips-contract for technical support), and Denso (Motorola-only production).[citation needed] NTT asked for two versions of chip, i.e. wired-logic chip (like MIFARE Classic) with small memory and big memory capacity. Hitachi developed only big memory version and cut part of the memory to fit for the small memory version.
The deal with Hitachi was upgraded in 2008 by NXP (by then no longer part of Philips) to include MIFARE Plus and MIFARE DESFire to the renamed semiconductor division of Hitachi Renesas Technology.[29]
In 2010 NXP licensed MIFARE products to Gemalto. In 2011 NXP licensed Oberthur to use MIFARE products on SIM cards. In 2012 NXP signed an agreement with Giesecke & Devrient to integrate MIFARE product-based applications on their secure SIM products. These licensees are developing Near Field Communication products[30][31]
Sicherheit
[edit]MIFARE Classic
[edit]The encryption used by the MIFARE Classic IC uses a 48-bit key.[32]
A presentation by Henryk Plötz and Karsten Nohl[33] at the Chaos Communication Congress in December 2007 described a partial reverse-engineering of the algorithm used in the MIFARE Classic chip. Abstract and slides[34] are available online. A paper that describes the process of reverse engineering this chip was published at the August 2008 USENIX security conference.[35]
In March 2008 the Digital Security[36] research group of the Radboud University Nijmegen made public that they performed a complete reverse-engineering and were able to clone and manipulate the contents of an OV-Chipkaart which is using MIFARE Classic chip.[37] For demonstration they used the Proxmark3 device, a 125 kHz / 13.56 MHz research instrument.[38] The schematics and software are released under the free GNU General Public License by Jonathan Westhues in 2007. They demonstrate it is even possible to perform card-only attacks using just an ordinary stock-commercial NFC reader in combination with the libnfc library.
The Radboud University published four scientific papers concerning the security of the MIFARE Classic:
- A Practical Attack on the MIFARE Classic[39]
- Dismantling MIFARE Classic[40]
- Wirelessly Pickpocketing a MIFARE Classic Card[41]
- Ciphertext-only Cryptanalysis on Hardened MIFARE Classic Cards[42]
In response to these attacks, the Dutch Minister of the Interior and Kingdom Relations stated that they would investigate whether the introduction of the Dutch Rijkspas could be brought forward from Q4 of 2008.[43]
NXP tried to stop the publication of the second article by requesting a preliminary injunction. However, the injunction was denied, with the court noting that, "It should be considered that the publication of scientific studies carries a lot of weight in a democratic society, as does inform society about serious issues in the chip because it allows for mitigating of the risks."[44][45]
Both independent research results are confirmed by the manufacturer NXP.[46] These attacks on the cards didn't stop the further introduction of the card as the only accepted card for all Dutch public transport the OV-chipkaart continued as nothing happened[47] but in October 2011 the company TLS, responsible for the OV-Chipkaart announced that the new version of the card will be better protected against fraud.[48]
The MIFARE Classic encryption Crypto-1 can be broken in about 200 seconds on a laptop from 2008,[49] if approx. 50 bits of known (or chosen) keystream are available. This attack reveals the key from sniffed transactions under certain (common) circumstances and/or allows an attacker to learn the key by challenging the reader device.
The attack proposed in[50] recovers the secret key in about 40 ms on a laptop. This attack requires just one (partial) authentication attempt with a legitimate reader.
Additionally, there are a number of attacks that work directly on a card and without the help of a valid reader device.[51] These attacks have been acknowledged by NXP.[52] In April 2009 new and better card-only attack on MIFARE Classic has been found. It was first announced at the rump session of Eurocrypt 2009.[53] This attack was presented at SECRYPT 2009.[54] The full description of this latest and fastest attack to date can also be found in the IACR preprint archive.[55] The new attack improves by a factor of more than 10 all previous card-only attacks on MIFARE Classic, has instant running time, and does not require a costly precomputation. The new attack allows recovering the secret key of any sector of the MIFARE Classic card via wireless interaction, within about 300 queries to the card. It can then be combined with the nested authentication attack in the Nijmegen Oakland paper to recover subsequent keys almost instantly. Both attacks combined and with the right hardware equipment such as Proxmark3, one should be able to clone any MIFARE Classic card in 10 seconds or less. This is much faster than previously thought.
In an attempt to counter these card-only attacks, new "hardened" cards have been released in and around 2011, such as the MIFARE Classic EV1.[56] These variants are insusceptible for all card-only attacks publicly known until then, while remaining backward compatible with the original MIFARE Classic. In 2015, a new card-only attack was discovered that is also able to recover the secret keys from such hardened variants.[57] Since the discovery of this attack, NXP is officially recommending to migrate from MIFARE Classic product-based systems to higher security products.[58]
MIFARE DESFire
[edit]In November 2010, security researchers from the Ruhr University released a paper detailing a side-channel attack against MIFARE product-based cards.[59] The paper demonstrated that MIFARE DESFire product-based cards could be easily emulated at a cost of approximately $25 in "off the shelf" hardware. The authors asserted that this side-channel attack allowed cards to be cloned in approximately 100 ms. Furthermore, the paper's authors included hardware schematics for their original cloning device, and have since made corresponding software, firmware and improved hardware schematics publicly available on GitHub.[60]
In October 2011 David Oswald and Christof Paar of Ruhr-University in Bochum, Germany, detailed how they were able to conduct a successful "side-channel" attack against the card using equipment that can be built for nearly $3,000. Called "Breaking MIFARE DESFire MF3ICD40: Power Analysis and Templates in the Real World",[61] they stated that system integrators should be aware of the new security risks that arise from the presented attacks and can no longer rely on the mathematical security of the used 3DES cipher. Hence, to avoid, e.g. manipulation or cloning of smart cards used in payment or access control solutions, proper actions have to be taken: on the one hand, multi-level countermeasures in the back end allow to minimize the threat even if the underlying RFID platform is insecure," In a statement[62] NXP said that the attack would be difficult to replicate and that they had already planned to discontinue the product at the end of 2011. NXP also stated "Also, the impact of a successful attack depends on the end-to-end system security design of each individual infrastructure and whether diversified keys – recommended by NXP – are being used. If this is the case, a stolen or lost card can be disabled simply by the operator detecting the fraud and blacklisting the card, however, this operation assumes that the operator has those mechanisms implemented. This will make it even harder to replicate the attack with a commercial purpose."
MIFARE Ultralight
[edit]In September 2012 a security consultancy Intrepidus[63] demonstrated at the EU SecWest event in Amsterdam,[64] that MIFARE Ultralight product-based fare cards in the New Jersey and San Francisco transit systems can be manipulated using an Android application, enabling travelers to reset their card balance and travel for free in a talk entitled "NFC For Free Rides and Rooms (on your phone)".[65] Although not a direct attack on the chip but rather the reloading of an unprotected register on the device, it allows hackers to replace value and show that the card is valid for use. This can be overcome by having a copy of the register online so that values can be analyzed and suspect cards hot-listed. NXP has responded by pointing out that they had introduced the MIFARE Ultralight C in 2008 with 3DES protection and in November 2012 introduced the MIFARE Ultralight EV1[66] with three decrement only counters to foil such reloading attacks.
Considerations for systems integration
[edit]For systems based on contactless smartcards (e.g. public transportation), security against fraud relies on many components, of which the card is just one. Typically, to minimize costs, systems integrators will choose a relatively cheap card such as a MIFARE Classic and concentrate security efforts in the back office. Additional encryption on the card, transaction counters, and other methods known in cryptography are then employed to make cloned cards useless, or at least to enable the back office to detect a fraudulent card, and put it on a blacklist. Systems that work with online readers only (i.e., readers with a permanent link to the back office) are easier to protect than systems that have offline readers as well, for which real-time checks are not possible and blacklists cannot be updated as frequently.
Certification
[edit]Another aspect of fraud prevention and compatibility guarantee is to obtain certification called to live in 1998 ensuring the compatibility of several certified MIFARE product-based cards with multiple readers. With this certification, the main focus was placed on the contactless communication of the wireless interface, as well as to ensure proper implementation of all the commands of MIFARE product-based cards. The certification process was developed and carried out by the Austrian laboratory called Arsenal Research. Today, independent test houses such as Arsenal Testhouse, UL and LSI-TEC, perform the certification tests and provide the certified products in an online database.[67]
Places that use MIFARE products
[edit]Transport
[edit]Card name | Locality | Typ | Details |
---|---|---|---|
SUBE card | Argentina (Buenos Aires) | MIFARE Classic 1K | Used for public transport, such as Metro, trains and buses[68] |
Tarjeta Sin Contacto MOVI | Argentina (Rosario) | MIFARE DESFire EV1 SAM V2[69] | Means of payment for urban transport and as of 2015 payment for public bicycles and parking meters. |
Adelaide Metro metroCard | Australia (Adelaide) | MIFARE DESFire EV1 | Adelaide Metro network (Bus, Train and Tram)[70] |
Baku metrocard | Azerbaijan (Baku) | MIFARE Classic 1K, MIFARE Plus S 1K[71] | For use on the subway rides on the Baku Metro. |
M-Card | Canada (St. John's) | MIFARE Classic 1K | Used on the Metrobus Transit system.[72] |
Compass Card | Canada (Metro Vancouver) | MIFARE DESFire EV1 4K, MIFARE Ultralight (single use)[73] | Used for public transit (TransLink). $6 refundable deposit.[74] |
Tarjeta Metroval[75] | Chile (Valparaíso) | MIFARE Classic 1K | Valparaíso Metro uses this card as a unique payment method |
Tarjeta Bip! | Chile (Santiago de Chile) | MIFARE Classic 1K and 4K (if bank bip or university bip are used) | Metro de Santiago, Transantiago[76] |
In Karta | Czech Republic (nationwide) | MIFARE DESFire, MIFARE DESFire EV1 | ,[77] Used for transport on trains, aimed at regular train users. Using the card enables 25% discount on fares. |
Hradecká karta | Czech Republic (Hradec Králové) | MIFARE Classic 4K | Card is issued by DPMHK a.s. (Transport company of Hradec Králové), no longer compatible with Pardubická karta.[78] |
Matkakortti | Finland (Helsinki) | MIFARE DESFire | Can be used with all forms of public transport systems within Helsinki Metropolitan Area.[79] |
Metromoney | Georgia (Tbilisi) | MIFARE Classic 1K | Used in municipal transport (metro, bus) and while traveling by Rike-Narikala ropeway.[80] |
Delhi Metro Rail Corporation | Indien | MIFARE Ultralight | Used in Metro transit system and for paying fares in DTC and cluster buses.[81] |
Namma Metro Smart Card | India (Bengaluru) | MIFARE DESFire EV1 | Can be used to travel in Namma Metro in Bengaluru[82] |
TFI Leap Card | Ireland (Dublin) | MIFARE DESFire EV1[83] | replaces the individual Luas, Dart and Dublin Bus smartcards |
AltoAdige/Südtirol Pass | Italy (Trentino-Alto Adige/Südtirol) | MIFARE DESFire EV1 | Southern Tirol network (Bus, Train and Cable-cars)[84] |
Tallinja Card | Malta | MIFARE Plus X 2K | Used by Malta Public Transport (buses); https://www.publictransport.com.mt/en/tallinja-card |
AT HOP card | New Zealand (Auckland) | MIFARE DESFire EV1 | Introduced as the regional integrated ticketing card. The previous branded HOP card aka "Snapper/HOP" uses the JCOP standard and was phased out of use in Auckland in 2013.[85] |
SmartTech Production | Hongkong | MIFARE Golden Partner[86] | |
TransCard | Slowakei | MIFARE DESFire EV1 | Used by almost every public transport system in Slovakia. In most cases only referred to as BČK – Bezkontaktná čipová karta (contactless smart card). Managed by Zväz autobusovej dopravy (Association of bus transport) as Slovenský dopravný pas (Slovak transport pass).[87] |
Urbana | Slovenia (Ljubljana) | MIFARE DESFire EV1 | Used by buses, parking spaces, libraries, museums, the Ljubljana Castle funicular, sports institutes and cultural events.[88] |
T-mobilitat | Spain (Barcelona) | MIFARE DESFire[89] | Metro, trains and buses, with compatibility with Bicing bike rentals, car parks. |
Resekortet | Schweden | MIFARE Classic 1K[90] | Travel ticket for buses and trains. |
EasyCard | Taiwan | MIFARE Classic, MIFARE Plus[91] | |
Oyster card | United Kingdom (London) | MIFARE DESFire EV1 | Migrated from MIFARE Classic to MIFARE DESFire EV1 in 2011[92] |
Transit Access Pass | United States (Los Angeles, California) | MIFARE Classic 1K / MIFARE Plus[93] | Used as electronic ticketing for most public transport within Los Angeles County. |
Hop Fastpass | United States (Portland, Oregon) | MIFARE DESFire EV1 256B[94] | |
Breeze Card | United States (Atlanta Metropolitan Area, Georgia) | MIFARE DESFire EV1, MIFARE Ultralight (Breeze Ticket) | Used on transport in the Greater Atlanta area on systems such as MARTA, CobbLinc, Ride Gwinnett, and GRTA Xpress regional busses.[95] |
Clipper Card | United States (San Francisco Bay Area, California) | MIFARE DESFire EV1 4K | Replacing TransLink, which used a Motorola Card.[96] |
Talon Card | United States (Kennesaw State University) | MIFARE Classic 4K | Used for door access and on campus payments |
SmarTrip | United States (Washington Metropolitan Area, Washington, D.C.) | MIFARE Plus X 2K | Used on the Washington Metropolitan Area Transit Authority and neighbouring transit systems; accepted on systems in Baltimore, Maryland |
Metrorrey | México(Monterrey) | MIFARE Classic 1K | Used in public transport like, metro, metrobus, and the new generation of metropolitan bus Muevo Leon |
Beep (smart card) | Philippines (Metro Manila) | MIFARE Classic, MIFARE DESFire EV1[97] | Used on the LRT Line 1 (Metro Manila), LRT Line 2, MRT Line 3 (Metro Manila),[98] BGC Bus[99] |
Application references
[edit]Application | Application category | Project | NXP partner | Locality | Product used | Usecase |
---|---|---|---|---|---|---|
Automatic fare collection | Smart mobility | Moscow Metro | Smart Technologies Group | Moscow | MIFARE Ultralight | Contactless smartcards for payment in the AFC System of the Moscow Metro[100] |
Parking | Smart mobility | Pay on Foot system | Skidata | Irland | Used for cashless vending applications for parking[101] | |
Mobile ticketing | Access | MIFARE4Mobile | Gemalto, Giesecke & Devrient, Oberthur Technologies, STMicroelectronics | MIFARE on SmartMX | Access to buildings through smartphone[102] | |
Tourist card | Smart mobility | Mobilis Card | Agencia Valenciana de Mobilidad (aVM) | Valencia | MIFARE on SmartMX | Tourist card, bike rental, electric car rental, transport ticketing, taxi card, access management and payment function[103] |
Tourist card | Smart mobility | Oyster card | London | MIFARE Classic 1K | Used for public transport[100] | |
Fuel card | Smart mobility | Shell | Plastkart | Türkei | MIFARE Classic 1K | Loyalty programs at petrol stations[104] |
Fuel card | Smart mobility | Petrol Ofisi | Plastkart | Türkei | MIFARE Classic 1K | Loyalty programs at petrol stations[105] |
Taxi card | Smart mobility | Touch Travel Card | Dialog Axiata, Silverleap Technology | Sri Lanka | MIFARE DESFire EV1 | Payment solution in taxis[106] |
Taxi card | Smart mobility | NOL | RTA | Dubai | Muliapplication card also used for taxi payment[107] | |
Ferry card | Smart mobility | Opal card | Sydney | MIFARE DESFire EV1 | Card for transport and ferry services[100] | |
Car sharing | Smart mobility | Car2Go | Daimler | MIFARE DESFire EV1 | Used for car sharing[108] | |
Bike rental | Smart mobility | Callock | Bike rental[109] | |||
Corporate access | Access | Nestlé | KABA | MIFARE DESFire EV1 | Access Security Solution[110] | |
Bike rental | Smart mobility | Callock | Bike rental[109] | |||
Home access | Access | AirKey | EVVA | MIFARE on SmartMX | Mobile access[109] | |
Home access | Access | Immobilienfirma Top-Invest sárl | Salto | Luxemburg | MIFARE DESFire EV1 | Smart lock for home access[111] |
Hotel access | Access | Marriott Hotel Card | KABA | Hotel access card[112] | ||
Campus card | Access | Campus Card University of Cambridge | Salto | Cambridge, UK | MIFARE DESFire EV1 | Multiapplication campus card[113] |
Campus Card | Access | Campus Card University of Oxford | Oxford, UK | MIFARE DESFire EV2 8K | Multiapplication campus card[114] | |
Event ticketing | Access | FC Köln | Payment Solutions | Köln, Germany | MIFARE DESFire EV1 | Event ticketing application for soccer games[115] |
Event ticketing | Access | Ticket FIFA 2014 | Brasilien | Event ticketing for soccer WM[116] | ||
Museum card | Access | Müze Kart | Mapikart, Türsab | Istanbul, Turkey | MIFARE Classic 1K | Access to museum[117] |
Membership card | Loyalty | Manchester City Football Club – Stadium Membership Card | Gemalto | Manchester | Access, loyalty, membership, payment function[118] | |
Loyalty card | Loyalty | Rabbit Card – Carrot Rewards | Bangkok, Thailand | MIFARE DESFire EV1 | Used for transport, shops, restaurants, identification, access control, security and Carrot Reward[119][120] | |
Loyalty card | Loyalty | Trans Studio Amusement Park | Bank Mega | Indonesien | MIFARE DESFire EV1 | Trans Studio Amusement Park[121] |
NFC tags | NFC | NFC tag | SMARTRAC | NFC enabled smartphones[122] | ||
Health card | Identification | Sesam-Vitale card | Frankreich | MIFARE on SmartMX | Health and identification card[123] | |
Digital signature | Identification | Vingcard | Assa Abloy | Digital signature used for access[124] | ||
Micropayment | Micropayment | Yeldi | Identiv | Indien | MIFARE DESFire EV1 | Cashless payments via mobile phones[125] |
Multiapplication card | Multiapplication | Touch travel card | Dialog Axiata, Silverleap Technology | Sri Lanka | MIFARE DESFire EV1 ; MIFARE SAM AV2 | Transport, micropayments, payment for shops or taxis, NFC mobile ticketing[106] |
Multiapplication card | Multiapplication | Passolig (TFF) | E-Kart, E-Kent, Aktifbank | Türkei | MIFARE DESFire EV1 ; JCOP | Stadium access – ticketing, micropayments, payments, transport[126] |
Smart paper ticket | Moscow Metropolitan Card | Smart Technologies Group | Moscow, Russia | MIFARE Ultralight | Used for electronic smart paper ticketing in public transport[127] |
Institutions
[edit]- Northwest University, South Africa – Student/staff ID, access control, library, student meals, sport applications, payments[128]
- Cambridge University[129] – Student/Staff ID and access card, library card, canteen payments in some colleges[130]
- The University of Queensland – Staff and student ID, access control, library, copy/print, building access (MIFARE DESFire EV1)[131]
See also
[edit]References
[edit]- ^ MIFARE (1 December 2009). "The success of MIFARE". Mifare.net.
- ^ "MIFARE Trademark of NXP B.V. - Registration Number 4661504 - Serial Number 79142259 :: Justia Trademarks". trademarks.justia.com. Retrieved 16 December 2023.
- ^ "Philips Semiconductors to become NXP". EE Times. 31 August 2006.
- ^ "NXP and RioCard Launch New MIFARE® Wearable for Multimodal Transport in Rio | MIFARE". MIFARE | The leading brand of contactless IC products. 18 August 2016. Retrieved 22 September 2023.
- ^ "NXP Advances Security for Contactless Single Use Applications with MIFARE Ultralight AES". nxp.com. Retrieved 22 September 2023.
- ^ "nfc tags". Nfc-phones.org. Archived from the original on 5 August 2012. Retrieved 5 August 2012.
- ^ "nfc tags". Nfcbrief.com. Archived from the original on 21 August 2013. Retrieved 11 August 2013.
- ^ "NXP introduces new security and performance benchmark with MIFARE Plus" (Press release). NXP. 1 March 2008.
- ^ "BlackHat '08 : MIFARE – Little Security, despite Obscurity" (PDF). Blackhat.com. Retrieved 9 February 2016.
- ^ NXP MIFARE Plus EV1 (PDF), NXP
- ^ NXP MIFARE Plus EV2, NXP, 23 June 2020
- ^ NXP MIFARE Plus EV2, NXP
- ^ [1] [dead link]
- ^ Shirriff, Ken (June 2024). "Inside the tiny chip that powers Montreal subway tickets".
- ^ "AN11340 : MIFARE Ultralight and MIFARE Ultralight EV1 Features and Hints" (PDF). Nxp.com. 1 March 2013. Archived from the original (PDF) on 3 March 2016. Retrieved 9 February 2016.
- ^ Some ISO/IEC 7816-4 commands are used by MIFARE DESFire EV1, including a proprietary method to wrap native MIFARE DESFire commands into an ISO/IEC 7816 APDU.
- ^ "German Researchers Crack Mifare RFID Encryption". Slashdot. 10 October 2011. Retrieved 9 February 2016.
- ^ "Security of MF3ICD40". Mifare.net. Archived from the original on 21 February 2013. Retrieved 9 February 2016.
- ^ "Gemalto's web site has moved (May 2020)". thalesgroup.com.
- ^ "Mifare". Mifare. 2 June 2014. Retrieved 9 February 2016.
- ^ a b "NXP Introduces MIFARE DESFire EV3 IC, Ushers in New Era of Security and Connectivity for Contactless Smart City Services | NXP Semiconductors – Newsroom". media.nxp.com. Retrieved 3 June 2020.
- ^ NXP MIFARE SAM AV3, NXP
- ^ NXP MIFARE 2GO, NXP
- ^ "Philips Semiconductors Acquires Mikron". Telecompaper.com. 2 June 1995. Retrieved 17 February 2017.
- ^ "Siemens And Mikron Agree Licensing Deal". Telecompaper.com. 7 April 1994. Retrieved 9 February 2016.
- ^ "Infineon Adds Security and Convenience to SIM Cards for NFC Applications – Infineon Technologies". Infineon.com. 1 November 2007. Retrieved 9 February 2016.
- ^ "Motorola sets smart card targets – CNET". News.cnet.com. 1 October 1997. Retrieved 9 February 2016.
- ^ "Smart Card News" (PDF). Smartcard.co.uk. 1 February 1998. Archived from the original (PDF) on 2 November 2013. Retrieved 9 February 2016.
- ^ "NXP Semiconductors :: Media Center". Nxp.com. Retrieved 9 February 2016.
- ^ "Gemalto's web site has moved (May 2020)" (PDF). thalesgroup.com. Archived from the original on 6 December 2010.
- ^ "NXP Semiconductors :: Media Center". Nxp.com. Retrieved 9 February 2016.
- ^ "MIFARE Classic 1K specification". 2 February 2009.[permanent dead link]
- ^ Karsten Nohl. "Karsten Nohl, PhD: University of Virginia, C.S. Dept". Cs.virginia.edu. Archived from the original on 4 February 2020. Retrieved 9 February 2016.
- ^ Nohl, Karsten; Henryk Plötz (10 January 2008). "Mifare: Little Security, Despite Obscurity". Chaos Communication Congress.
- ^ Nohl, Karsten; David Evans (1 August 2008). "Reverse-Engineering a Cryptographic RFID Tag". Proceedings of the 17th USENIX Security Symposium.
- ^ "Digital security – Digital Security". Ru.nl. 8 July 2015. Retrieved 9 February 2016.
- ^ Digital Security Group (1 March 2008). "Security Flaw in Mifare Classic" (PDF). Radboud University Nijmegen. Archived from the original (PDF) on 13 May 2021. Retrieved 19 July 2020.
- ^ "Proxmark". Retrieved 25 January 2011.
- ^ "A Practical Attack on the MIFARE Classic" (PDF). RU.nl. Archived from the original (PDF) on 22 April 2022. Retrieved 6 July 2017.
- ^ "Dismantling MIFARE Classic" (PDF). RU.nl. Archived from the original (PDF) on 8 August 2017. Retrieved 6 July 2017.
- ^ "Wirelessly Pickpocketing a MIFARE Classic Card" (PDF). RU.nl. Archived from the original (PDF) on 2 January 2022. Retrieved 6 July 2017.
- ^ "Ciphertext-only Cryptanalysis on Hardened Mifare Classic Cards" (PDF). RU.nl. Retrieved 25 September 2017.
- ^ "Dutch Page". Archived from the original on 2 November 2013. Retrieved 24 March 2012.
- ^ Arnhem Court Judge Services (18 July 2008). "Pronunciation, Primary Claim". Rechtbank Arnhem. Archived from the original on 15 February 2012. Retrieved 13 January 2009.
- ^ "Judge denies NXP's injunction against security researchers". The Standard. 1 July 2008. Archived from the original on 5 January 2009. Retrieved 13 February 2010.
- ^ "mifare.net :: Security". Retrieved 25 January 2011.
- ^ [2] Archived 8 June 2012 at the Wayback Machine
- ^ "Nieuwe OV-chip gaat fraude tegen – Webwereld". Webwereld.nl. Retrieved 9 February 2016.
- ^ Courtois, Nicolas T.; Karsten Nohl; Sean O'Neil (1 April 2008). "Algebraic Attacks on the Crypto-1 Stream Cipher in MiFare Classic and Oyster Cards". Cryptology ePrint Archive.
- ^ Garcia, Flavio D.; de Koning Gans, Gerhard; Muijrers, Ruben; van Rossum, Peter; Verdult, Roel; Schreur, Ronny Wichers; Jacobs, Bart (4 October 2008). "Dismantling MIFARE Classic" (PDF). 13th European Symposium on Research in Computer Security (ESORICS 2008), LNCS, Springer. Archived from the original (PDF) on 23 February 2021. Retrieved 19 July 2020.
- ^ Garcia, Flavio D.; Peter van Rossum; Roel Verdult; Ronny Wichers Schreur (1 March 2009). "Wirelessly Pickpocketing a Mifare Classic Card" (PDF). 30th IEEE Symposium on Security and Privacy (S&P 2009), IEEE. Archived from the original (PDF) on 2 January 2022. Retrieved 19 July 2020.
- ^ [3][dead link]
- ^ Courtois, Nicolas T. (2 April 2009). "Conditional Multiple Differential Attack on MIFARE Classic" (PDF). Slides presented at the rump session of Eurocrypt 2009 conference.
- ^ Courtois, Nicolas T. (7 July 2009). "The Dark Side of Security by Obscurity and Cloning MiFare Classic Rail and Building Passes Anywhere, Anytime". In SECRYPT 2009 – International Conference on Security and Cryptography, to appear.
- ^ Courtois, Nicolas T. (4 May 2009). "The Dark Side of Security by Obscurity and Cloning MiFare Classic Rail and Building Passes Anywhere, Anytime". IACR Cryptology Preprint Archive.
- ^ "MIFARE Classic EV1" (PDF). Retrieved 25 September 2017.
- ^ Carlo Meijer; Roel Verdult (1 October 2015). "Ciphertext-only Cryptanalysis on Hardened Mifare Classic Cards" (PDF). 22nd ACM Conference on Computer and Communications Security (CCS 2015), ACM.
- ^ "Security Statement on Crypto1 Implementations". 12 October 2015. Retrieved 25 September 2017.
- ^ Timo Kasper; Ingo von Maurich; David Oswald; Christof Paar. "Cloning Cryptographic RFID Cards for 25$ ?" (PDF). Proxmark.org. Retrieved 9 February 2016.
- ^ "emsec/ChameleonMini: The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC, ISO 14443 and ISO 15693. It has been designed and maintained by the Chair for Embedded Security of the Ruhr-University in Bochum. The freely programmable platform can be used to emulate and virtualize cards (perfect clones including the UID), for practical penetration tests in RFID environments, or serve as a passively operated NFC device, e.g., as an NFC door lock". GitHub. Retrieved 9 February 2016.
- ^ "Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World" (PDF). Iacr.org. Retrieved 9 February 2016.
- ^ "Login | MIFARE". mifare.net. Archived from the original on 21 February 2013. Retrieved 22 January 2022.
- ^ "Site not found · DreamHost". intrepidusgroup.com. Archived from the original on 6 December 2012.
- ^ "EUSecWest Applied Security Conference: Amsterdam, NL". Eusecwest.com. Archived from the original on 5 March 2016. Retrieved 9 February 2016.
- ^ "NFC subway hack". 2 September 2012. Retrieved 9 February 2016 – via YouTube.
- ^ "mifare.net :: MIFARE Ultralight EV1". MIFARE.net. 21 February 2013. Archived from the original on 21 February 2013. Retrieved 6 July 2017.
- ^ "Certified Mifare Products – Arsenal Testhouse". Arsenal-Testhouse.com. Retrieved 6 July 2017.
- ^ "SUBE". Sube.gob.ar. Retrieved 9 February 2016.
- ^ "Adquisición de un Sistema de Bicicletas Públicas para Rosario" (PDF). Proyecto de Transporte Sostenible y Calidad del Aire – Secretaría de Transporte del Ministerio del Interior y Transporte a través de la Unidad Ejecutora de Proyecto (UEP). 2013. Archived from the original (PDF) on 2 November 2013.
- ^ [4] Archived 4 July 2012 at the Wayback Machine
- ^ LOT ltd. "Integrator's web site (subway solutions)". Lotgate.com. Retrieved 9 February 2016.
- ^ "Metrobus". metrobus.com. Archived from the original on 6 March 2012.
- ^ "NXP Semiconductors :: Media Center". NXP.com. Retrieved 9 February 2016.
- ^ "TransLink : If you like FareSavers, you'll love Compass Card". TransLink.ca. Retrieved 9 February 2016.
- ^ "Metro Valparaiso Medios de pago". Metro-Valparaiso.cl. 2 June 2014. Archived from the original on 2 November 2013. Retrieved 9 February 2016.
- ^ "Tarjeta bip!". TarjetaBip.cl. Retrieved 9 February 2016.
- ^ "České dráhy, a.s. | Úvodní stránka". Cd.cz. Retrieved 9 February 2016.
- ^ "Používání Městské karty v Pardubicích | Dopravní podnik města Hradce Králové". dpmhk.cz. Retrieved 13 July 2020.
- ^ [5] Archived 29 December 2011 at the Wayback Machine
- ^ "Metromoney card – Tbilisi Transport Company". Ttc.com.ge. 3 June 2012. Retrieved 9 February 2016.
- ^ "Now, Delhi Metro card valid for travel in DTC buses". dna. 2 August 2018. Retrieved 28 December 2018.
- ^ "Bengaluru Metro System Adopts NXP's MIFARE Technology | MIFARE". mifare.net. 22 January 2012.
- ^ "Triple RFID cardscan". Docs.Google.com. 1 September 2012. Retrieved 9 February 2016.
- ^ "Südtirol Mobil | Mobilità Alto Adige". Sii.bz.it (in Italian). Retrieved 9 February 2016.
- ^ [6] Archived 21 February 2014 at the Wayback Machine
- ^ SmartTech Production. "Card Manufacturer – NXP Mifare Golden Partner".
- ^ "Slovenský dopravný pas". dopravnypas.sk. Retrieved 29 March 2022.
- ^ [7] Archived 28 June 2012 at the Wayback Machine
- ^ MIFARE (4 March 2015). "NXP´s MIFARE DESFire drives smart mobility in Barcelona". Mifare.net. Retrieved 12 April 2018.
- ^ Resekortet i Sverige AB. "RKF-specifikationen – Svensk Kollektivtrafik". Sevenskkollektivtrafik.se. Archived from the original on 29 May 2015. Retrieved 9 February 2016.
- ^ "Contactless Smartcard Technology Needs More Security" (PDF). Iis.sinica.edu.tw. Archived from the original (PDF) on 24 September 2015. Retrieved 9 February 2016.
- ^ Dan Balaban. "Transport for London to Discard Mifare Classic | NFC Times – Near Field Communication and all contactless technology". NFCtimes.com. Retrieved 9 February 2016.
- ^ "L.A. Metro Taps NXP's MIFARE Plus for Contactless TAP Ticketing". EE Times. Retrieved 9 February 2016.
- ^ "NXP helps the Portland-Vancouver Metro region move intelligence to the cloud with the new Hop Fastpass™ Transit Card used on Buses, the Light Rail and Streetcars" (Press release). MIFARE. 9 October 2017. Retrieved 16 June 2018.
- ^ "Page Redirection". breezecard.com. Retrieved 11 April 2024.
- ^ "Page Redirection". Clippercard.com. Retrieved 9 February 2016.
- ^ "Faq's – beep™". 9 January 2024. Archived from the original on 9 January 2024. Retrieved 9 January 2024.
- ^ "Beep cards can now be used on MRT 3, LRT 1, 2 | Inquirer News". 7 October 2015. Archived from the original on 7 October 2015. Retrieved 9 January 2024.
- ^ "Tap-and-go beep cards now accepted on BGC buses". 14 July 2022. Archived from the original on 14 July 2022. Retrieved 9 January 2024.
- ^ a b c "SMART TECHNOLOGIES GROUP – Moscow Metro, AFC, contactless smart cards". Smartek.ru. Retrieved 9 February 2016.
- ^ "Cork University Hospital". Apsparking.com. Archived from the original on 3 March 2016. Retrieved 9 February 2016.
- ^ "NXP Enables Mobile Ticketing for Smart Mobile Devices". Nxp-rfid.com. Retrieved 9 February 2016.
- ^ "The secret of Valencia's cutting edge contactless ticketing system". Avmm.es. Archived from the original on 23 September 2015. Retrieved 9 February 2016.
- ^ "Petrol Loyalty Card – Fuel Rewards – Shell Drivers' Club UK". Shellsmart.com. Retrieved 9 February 2016.
- ^ "Positive Card". PositiveCard.com.tr. Retrieved 9 February 2016.
- ^ a b "Orik : News and Press releases". Orik.lk. Archived from the original on 27 May 2014. Retrieved 9 February 2016.
- ^ "Dubai, ASK renews agreement for city's multimodal ticketing system". SecureIDNews. Retrieved 9 February 2016.
- ^ "Car2Go | NFC Development & Consulting". Nfc.cc. Archived from the original on 24 July 2014. Retrieved 9 February 2016.
- ^ a b c [8] Archived 28 May 2014 at the Wayback Machine
- ^ "Techpro – Nestlé Completes Electronic Security Installation". Techpro.vn. 1 September 2013. Archived from the original on 4 March 2016. Retrieved 9 February 2016.
- ^ "SALTO Networked Locking System - SALTO Systems stattet Premium-Appartements in Luxemburg mit elektronischem Schließsystem aus". 28 May 2014. Archived from the original on 28 May 2014.
- ^ "RFID News Roundup". RFID Journal. Archived from the original on 27 May 2014. Retrieved 9 February 2016.
- ^ "SALTO secures the University of Cambridge" (PDF). Godrejlocks.com. Archived from the original (PDF) on 1 September 2013. Retrieved 9 February 2016.
- ^ [9] Archived 28 May 2014 at the Wayback Machine
- ^ "1. FC Köln Implements Philips Chip Technology For Contactless Ticketing". Rfidsolutionsonline.com. 1 January 2005. Retrieved 9 February 2016.
- ^ "Archive – Pictures of the Future – Innovation – Home – Siemens Global Website". Siemens.com. Archived from the original on 27 May 2014. Retrieved 9 February 2016.
- ^ "Müzekart". Muzekart.com. Archived from the original on 21 February 2016. Retrieved 9 February 2016.
- ^ "Soccer Fans Use RFID Cards to Gain Admission and Buy Food". RFID Journal. Archived from the original on 26 March 2014. Retrieved 9 February 2016.
- ^ "แครอท รีวอร์ดส". Carrotrewards.co.th. Archived from the original on 6 February 2016. Retrieved 9 February 2016.
- ^ "Culture shock News: New œRabbit Card Brings e-Money System to Bangkok". Free-press-release.com. Retrieved 9 February 2016.
- ^ "NXP Semiconductors :: Media Center". Nxp.com. Retrieved 9 February 2016.
- ^ [10] Archived 30 March 2014 at the Wayback Machine
- ^ [11] Archived 27 May 2014 at the Wayback Machine
- ^ "VingCard Signature RFID – ASSA ABLOY Hospitality (VingCard Elsafe) – Electronic hotel locks". VingCard Elsafe. Archived from the original on 25 May 2015. Retrieved 9 February 2016.
- ^ "Yeldi selects Identive and NXP for NFC cashless payment solution in India | 2012-10-15". Microwave Journal. 1 October 2012. Retrieved 9 February 2016.
- ^ E-Bilet Süresini Uzat. "Spor ve Eğlence Dünyasının Anahtarı". Passolig.com.tr. Archived from the original on 20 April 2014. Retrieved 9 February 2016.
- ^ "NXP Semiconductors :: Media Center". Nxp.com. Retrieved 9 February 2016.
- ^ "North-West University". NWU. 2 January 2016. Retrieved 9 February 2016.
- ^ "Computer Laboratory: Access and security". Cl.cam.ac.uk. Archived from the original on 3 March 2016. Retrieved 9 February 2016.
- ^ "Welcome to Clare College – Clare College Cambridge". Clare.cam.ac.uk. Archived from the original on 17 March 2011. Retrieved 9 February 2016.
- ^ "** UQ ID Cards are the responsibility of Property and Facilities Division". pf.uq.edu.au. Retrieved 3 June 2018.
Further reading
[edit]- Dayal, Geeta, "How they hacked it: The MiFare RFID crack explained; A look at the research behind the chip compromise, Computerworld, 19 March 2008.
External links
[edit]- Official website
- Comparison Table MIFARE DESFire EV1 / EV2 / EV3
- NXP in eGovernment
- 24C3 Talk about MIFARE Classic Video of the 24C3 Talk presenting the results of reverse engineering the MIFARE Classic family, raising serious security concerns
- Presentation of 24th Chaos Computer Congress in Berlin Claiming that the MIFARE classic chip is possibly not safe
- Demonstration of an actual attack on MIFARE Classic (a building access control system) by the Radboud University Nijmegen.https://www.mersinliakaryakit.com/