High-security RFID tags for offices, corporate facilities and sensitive environments
AES-128 encrypted credentials certified to Common Criteria EAL5+, in cards, key fobs and wristbands.
Available with 2K, 4K and 8K memory. Encryption keys programmed in Finland. Custom printing and numbering available.
Recommended for offices and higher-security environments where MIFARE Classic is not sufficient.
Description
What DESFire EV2/EV3 is good at
DESFire EV2 and EV3 are the appropriate credential where MIFARE Classic 1K is not a sufficient security level. AES-128 hardware encryption makes cloning practically infeasible with current technology, and the Common Criteria EAL5+ certification places these tags at the same security level as banking cards and electronic passports. EV3 is the current generation recommended for new installations, and is fully backwards compatible with EV2 and EV1 based systems. EV2 remains available for deployments where EV3 is not yet supported. Both versions support multiple independent applications on a single tag, which allows one credential to serve access control, cashless vending and other services simultaneously if the system supports it.
Compatibility & programming
DESFire tags require an access control system that supports the DESFire protocol, and the tags must be programmed with the correct encryption keys for that system. Not all access control systems support DESFire, and compatibility should be confirmed before ordering. Gatech programmes encryption keys in Finland, which means the key material does not leave the country. For systems that support both MIFARE Classic and DESFire, existing Classic-based installations can be migrated to DESFire without replacing the readers.
Security
DESFire EV2 and EV3 use AES-128 hardware encryption with mutual authentication between tag and reader on every transaction. Cloning is not a realistic attack vector with current technology. The EV3 generation adds a transaction timer that defends against relay and man-in-the-middle attacks. For offices, corporate facilities and any environment where a compromised access credential would have meaningful consequences, DESFire EV2/EV3 is the recommended choice over MIFARE Classic 1K.
Form factors & ordering
Available as cards, key fobs and wristbands in 2K, 4K and 8K memory configurations. Custom printing, logos and sequential numbering to your order specification. Encryption keys programmed in Finland on request. Supplied across the European region including the UK, Norway and Switzerland, and in larger quantities worldwide. Price is approximately double that of MIFARE Classic 1K tags depending on memory size and quantity.
Technical Specifications
