MIFARE PLUS brings benchmark security to mainstream contactless smart card applications. It is the only mainstream technology compatible with MIFARE 1 K / 4 K / Mini offering a seamless upgrade path, with minimal effort, for existing infrastructure and services.
Key features
> 2- or 4-KB EEPROM
> Simple fixed memory structure compatible with MIFARE Mini (MF1ICS20), MIFARE 1 K (MF1ICS50), MIFARE 4 K (MF1ICS70)
> Access conditions freely configurable
> Smooth migration from Classic to Plus security level supported
> Open standard AES crypto for authentication, integrity and encryption
> Composite Common Criteria Certification: EAL4+
> ISO/IEC 14443-A unique serial number, 4 or 7 byte and random IDs
> Multi-sector authentication, multi-block read and write
> Anti-tear function for writing AES keys
> Keys can be stored as MIFARE CRYPTO1 keys (2 x 48 bit per sector) or as AES keys (2 x 128 bit sector)
> Supports virtual card concept
> High data rates up to 848 kbit/s
Security levels
MIFARE Plus cards support four security levels (0 through 3) as described below. Cards operate in one security level at any given time and can only be switched to a higher level.
An automatic anti-tear mechanism is available for secure deployment of rolling keys. If a card is removed from the field during a key update, it either concludes the update or automatically falls back to the previous key.
MIFARE Plus is available in the proven MOA4 module and as sawn bumped wafers, so no changes need to be made to existing manufacturing processes. For benchmark security on the reader side, the MIFARE SAM AV2 (secure application module) is available. The Common Criteria 5+ certified IC includes all MIFARE Plus commands, secure key storage and AES calculation for a reader device.
To support the design-in process for reader manufacturers and solutions developers, NXP has MIFARE Plus documentation, application notes, and software toolkits available.
Many small chip card businesses have traditionally found the overheads of taking card payments prohibitive however, this model provides them with use of card payments which can have a significant positive relation to their own flow. The opportunity to take card payments in a location removes the reliance upon customers having cash or cheques. In addition, it removes the overhead in following up on unpaid invoices, itself a high priced exercise for many small business owners.