MIFARE Plus

Migrate MIFARE Classic contactless smart card systems to the next security level.

MIFARE Plus brings benchmark security to mainstream contactless smart card applications. It is the only mainstream IC compatible with MIFARE Classic offering a seamless upgrade path, with minimal effort, for existing infrastructure and services. MIFARE Plus offers the possibility to issue cards seamlessly into existing MIFARE Classic applications, before the infrastructure is upgraded. Once the security upgrades are in place, MIFARE Plus cards can be switched to a more secure mode in the field with no customer interaction necessary. AES (advanced encryption standard) is then being used for authentication, encryption and data integrity.

MIFARE Plus is based on open global standards both for air interface and cryptographic methods. It is available in two versions: MIFARE Plus S, the Slim version, for straightforward migration of MIFARE Classic systems, and MIFARE Plus X, the eXpert version, which offers more flexibility to optimize the command flow for speed, privacy and confidentiality. MIFARE Plus X offers a rich feature set, including proximity checks against relay attacks.

MIFARE Plus supports high-speed communication between card and terminal at up to 848 kbps/s, for time critical services. The read range of up to 10 cm increases the convenience of the touch-and-go experience.

Key applications

  • Public Transportation
  • Access management, e.g. employee, school or campus cards
  • Electronic toll collection
  • Car parking
  • Loyalty programs

Independent Security Reviews

Security Levels

MIFARE Plus cards support one pre-personalization and 3 security levels. Cards operate in one security level at any given time and can only be switched to a higher level.

  • Security Level 0
    MIFARE Plus cards are pre-personalized with configuration keys, level switching keys, MIFARE Classic CRYPTO1 and AES keys for the memory.
  • Security Level 1
    In this level the cards are 100% functionally backwards compatible with MIFARE Classic 1K and MIFARE Classic 4K cards. Cards work seamlessly in existing MIFARE Classic infrastructure.
  • Security Level 2
    Mandatory AES authentication. MIFARE Classic CRYPTO1 for data confidentiality.
  • Security Level 3
    Mandatory AES for authentication, communication confidentiality and integrity. Optional proximity detection (MIFARE Plus X only).

An automatic anti-tear mechanism is available for secure deployment of rolling keys. If a card is removed from the field during a key update, it either concludes the update or automatically falls back to the previous key. NXP recommends 7Byte UID, but offers 4B UID versions of MIFARE Plus during migration. MIFARE Plus is available in the proven MOA4 module and as sawn bumped wafers, no changes for existing manufacturing processes necessary.

 

Product leaflet

You can download the product leaflet here.

MIFARE Plus introduction video