NXP Semiconductors

MF3D(H)x3

MIFARE DESFire EV3 contactless multi-application IC

MIFARE DESFire EV3 offers a transaction-oriented backup mechanism to prevent inconsistent updating of data

storage across multiple files during a tearing situation. When transaction tearing occurs, either all data fields are

updated or none is altered. MIFARE DESFire EV3 offers a new Transaction Timer feature which will prevent a

Man-in-the-Middle (MitM) attack where the attacker delays the conclusion of a transaction by keeping the card

powered after it left the legitimate reader device.

Besides the application file structure support, MIFARE DESFire EV3 offers many optional features such as

following:

• Delegated Application Management (MIsmartApp) for giving rights to third-party application creation and

management.

• Multiple key set within an application with key rolling mechanism and key migration supported.

• Shared files between two applications, supporting a single transaction over two applications at the same time.

• Multiple keys for each access right of files.

• Transaction MAC on application level, MACing the transacted data with a secret key on the card and served

as a proof of transaction to the backend system.

• Secure Dynamic Messaging (SDM) which is mirror as text into the NDEF message

• Virtual Card Architecture providing a privacy protecting mechanism during card selection.

• Proximity Check to prevent against relay attacks.

• Originality Check for verification of genuine MIFARE DESFire EV3 product from NXP or its licensees.

The following chapters provide basic description of some functionality on MIFARE DESFire EV3. For a more

detailed description of each functionality on MIFARE DESFire EV3, see [1].

7.2 Contactless energy and data transfer

In the MIFARE product-based system, the MIFARE DESFire EV3 is connected to a coil consisting of a few

turns embedded in a standard ISO/IEC smart card. A battery is not needed. When the card is positioned in the

proximity of the PCD antenna, the high-speed RF communication interface allows data to be transmitted up to

848 kbit/s.

7.3 Anti-collision

An intelligent anti-collision mechanism allows more than one MIFARE DESFire EV3 in the field to be handled

simultaneously. The anti-collision algorithm selects each MIFARE DESFire EV3 individually and ensures

that the execution of a transaction with a selected MIFARE DESFire EV3 is performed correctly without data

corruption resulting from other MIFARE DESFire EV3s in the field.

7.4 UID/serial number

The unique 7 byte (UID) is programmed into a locked part of the NV memory which is reserved for the

manufacturer. Due to security and system requirements these bytes are write-protected after being programmed

by the IC manufacturer at production time. According to ISO/IEC 14443-3 during the first anti-collision loop the

cascade tag returns a value of 88h and also the first 3 bytes of the UID, UID0 to UID2 and BCC. The second

anti-collision loop returns bytes UID3 to UID6 and BCC.

UID0 holds the manufacturer ID for NXP (04h) according to ISO/IEC 14443-3 and ISO/IEC 7816-6 AMD 1.

MIFARE DESFire EV3 also allows Random ID to be used. In this case, MIFARE DESFire EV3 only uses a

single anti-collision loop. The 3 byte random number is generated after RF reset of the MIFARE DESFire EV3.

MF3D_H_X3_SDS

All information provided in this document is subject to legal disclaimers.

© 2024 NXP B.V. All rights reserved.

Product short data sheet

Rev. 3.1 — 11 January 2024

12 / 29