MIFARE Plus

MIFARE Plus
Name	MIFARE Plus
Developer	NXP Semiconductors
Type	Contactless smart card
Introduced	2008
Operating system	Proprietary
Website	NXP Semiconductors

MIFARE Plus is a family of contactless smart card ICs developed by NXP Semiconductors designed for secure proximity transactions and identification. It builds on earlier smart card lines and targets transportation, access control, loyalty programs, and cashless payment applications by offering enhanced cryptographic security and backwards-compatible operation modes. The product line emphasizes migration paths from legacy systems while supporting modern standards for interoperability in large-scale deployments.

Overview

MIFARE Plus was introduced by NXP Semiconductors as part of a product roadmap addressing security concerns associated with predecessors produced by NXP and its antecedent companies. It positions itself alongside other contactless solutions from industry participants such as Infineon Technologies, STMicroelectronics, Sony Corporation, Samsung Electronics, and Texas Instruments in markets served by integrators like Thales Group, Giesecke+Devrient, Cubic Corporation, and Assa Abloy. The family targets urban mobility programs exemplified by implementations in cities comparable to London, New York City, Paris, Berlin, and Tokyo where card-based fare collection and secure facility access are critical.

Architecture and Features

The architecture of these ICs comprises a contactless radio-frequency interface, on-chip non-volatile memory, cryptographic hardware, and a lightweight operating environment. It supports deployment architectures similar to those used with chip families from HID Global, Entrust, Diebold Nixdorf, Schlumberger, and Oberthur Technologies. Typical device features mirror capabilities found in products from Axalto and Gemplus prior to consolidation in the industry. Memory organization, sector-based access control, and vendor-defined application areas enable integration with back-end systems from vendors such as IBM, Oracle Corporation, Microsoft, SAP SE, and Siemens AG.

Security Mechanisms

Security mechanisms include standardized symmetric-key cryptography, hardware-based random number generation, and support for secure mutual authentication protocols. Cryptographic primitives relate to algorithms and implementations scrutinized by security researchers in academic institutions like Massachusetts Institute of Technology, Stanford University, ETH Zurich, Ecole Polytechnique Fédérale de Lausanne, and Tsinghua University. Threat models considered by NXP and auditors from firms such as Kudelski Security, NCC Group, Kaspersky Lab, Trend Micro, and FireEye informed design choices. Countermeasures address side-channel analysis and protocol downgrade risks highlighted in vulnerability reports involving entities like ENISA, National Institute of Standards and Technology, European Central Bank, and standards bodies including ISO/IEC JTC 1, CEN, and CEN/TC 225.

Product Variants and Models

The family comprises multiple device variants with differing memory sizes, performance grades, and security levels intended for segmentation comparable to product lines from Mitsubishi Electric, Panasonic Corporation, Honeywell, and Canon Inc.. Model naming and differentiation reflect market needs served by card manufacturers such as NXP Semiconductors partners and commercial issuers like Mastercard, Visa, American Express, Discover Financial Services, and regional transit authorities like Transport for London and Metropolitan Transportation Authority.

Use Cases and Applications

Primary applications include transit fare collection, corporate and governmental access control, student identification for universities like Harvard University, University of Cambridge, University of Oxford, University of California, Berkeley, and University of Tokyo, cashless vending in arenas and venues managed by organizations such as Madison Square Garden, Wembley Stadium, Toyota Motor Corporation employee campuses, and campus card systems deployed at institutions comparable to Massachusetts Institute of Technology. Additional deployments occur in ticketing for events organized by entities such as Live Nation and membership programs run by retailers like Walmart, Costco, Tesco, and Carrefour.

Certification and Compliance

Certification and compliance activities involve evaluation against standards and schemes maintained by bodies like ISO/IEC, Common Criteria, PCI Security Standards Council, EMVCo, FIDO Alliance, and regional certification authorities including Bureau Veritas and TÜV SÜD. Evaluations may reference testing laboratories such as UL LLC, SGS S.A., and Intertek Group to validate electromagnetic compatibility and environmental tolerance comparable to requirements imposed on contactless devices used by governmental agencies like U.S. Department of Transportation and European Commission projects.

Migration and Compatibility

A key design goal is migration compatibility with earlier contactless products from the same vendor to facilitate upgrades in large-scale infrastructures operated by transit agencies and institutions like Transport for London, Metropolitan Transportation Authority, RATP Group, Deutsche Bahn, and JR East. Migration strategies parallel those used when transitioning deployments between generations of silicon from manufacturers such as NXP Semiconductors, Infineon Technologies, and STMicroelectronics, and involve coordination with ecosystem participants including card personalizers, system integrators like Accenture, Capgemini, and Atos, and standards bodies to minimize service disruption.

Category:Smart cards