Secure credentials are a critical component of a modern physical access control program. Not only do new credential technologies, including DESFire EV3, offer a higher level of protection against threats like spoofing and hacking, they also deliver support for a range of applications beyond physical access control.

DESFire EV3 is the latest addition to the MIFARE DESFire family of smart card chipsets from NXP. This latest evolution introduces the option of even more features for implementation, and HID has taken full advantage.

DESFire EV3 + iCLASS + prox, multi-technology credentials maintain interoperability with legacy iCLASS and 125 kHz readers and are designed to enable security system owners with a smooth migration path from legacy low-frequency 125 kHz-based systems and legacy iCLASS  to a modern and secure credential technology.  All readers do not immediately need to be upgraded when starting a migration. For enterprise clients with a wide mix of technologies, this allows for a smooth implementation of the reader upgrade as costs can be budgeted over an ideal timeframe.

HID DESFire EV3 cards leverage security features including AES128 encryption, secure channel-based file transfer and proximity checks to protect card data from attack. Furthermore, unlike many other DESFire solutions available on the market, random UID has also been introduced to our security profile to restrict the card from openly sharing any information that could be associated with the user.

DESFire EV3 credentials from HID also offer layered security with the addition of a Secure Identity Object™ (SIO™) data model for added key diversification, authentication signatures and encryption.

Key Features

• Feature-rich security — Secure card data with the best implementation of the DESFire EV3 toolbox including AES128 encryption, secure channel-based file transfer and proximity check to protect against man-in-the-middle attacks
• Added assurance — Available with the portable Secure Identity Object (SIO) data model for added key diversification, authentication signatures and encryption
• User privacy — By implementing a random UID, the card will never openly share any information that could be associated with the user
• Fully backwards compatibility — Ensure your investment in legacy DESFire credentials and readers is protected; DESFire EV3 credentials offer fully backwards compatibility with EV1 and EV2 based solutions
• Flexibility — Available in three profiles to ensure the best fit for your access control system: high security, compatibility and custom
• Simplified, cost-effective migrations — Support for 125 kHz prox contactless technology  and iCLASS 13.56mhz to enable migration from legacy credentials

Available in three profiles to ensure the best fit for your site and existing infrastructure allowing you to step up the security.

High Security Profile

Best in class security and privacy on EV3, programmed with an enhanced application that leverages the new features of EV3 plus a Secure Identity Object (SIO).

HID’s new DESFire EV3 Secure Identity Object (SIO) application leverages the best possible security settings and features of EV3 combined with NIST based open standards for key diversification.

Compatibility: Supported by HID Signo readers with firmware 10.0.2.4 or higher.

Compatibility Profile

Offers the flexibility of DESFire EV3 backwards compatibility with iCLASS SE, multiCLASS® Rev E readers and third-party applications that rely on static UID, reading DESFire EV1 or EV2 Secure Identity Object (SIO) cards.

This is achieved through the provision of both applications onto the DESFire EV3 credential. iCLASS SE and multiCLASS SE Rev E readers can continue to read the EV1 compatible Secure Identity Object (SIO) application while the latest Signo reader firmware selects the new higher security Secure Identity Object (SIO) application, leveraging the latest security features.

Compatibility: EV1 SIO application supported by HID Signo™, iCLASS® SE™ and multiCLASS SE readers. HID Signo reader with firmware 10.0.2.4 or greater supports the higher security EV3 application.

Custom Profile

Available customized to bespoke specifications, or unprogrammed for full in-field personalization compatible with EV1, EV2, or EV3 compliant solutions.

Compatibility: Supported by custom profile HID Signo, iCLASS SE and multiCLASS Rev E readers.