MF1PLUSX0Y1_SDS

All information provided in this document is subject to legal disclaimers.

© NXP B.V. 2011. All rights reserved.

Product short data sheet

PUBLIC

Rev. 3.2 — 21 February 2011

163532

11 of 20

NXP Semiconductors

MF1PLUSx0y1

Mainstream contactless smart card IC

These two session keys are used to secure the data which is exchanged on the interface

between the card and reader. One of the two keys is used to ensure the confidentiality of

the command and the response while the other key ensures the integrity of the command

and the response.

The reader can decide which security needs to be used in the communication between

PICC and reader. In the simplest case, all commands are secured by a MAC, such that

the PICC will only accept commands from the authenticated reader. Any message

tampering is detected by verifying the MAC. All responses are appended by a MAC to

prove to the reader that neither the command nor the response have been compromised.

If performance is the highest priority, the card can be configured to omit the MAC for read

commands. The card then accepts read commands without knowing whether they are

authentic. However, there is a mechanism to prove to the reader that the read response is

resulting from the unmodified read command that it sent.

Other commands, like write commands, always need to have a MAC appended to ensure

that no memory changes are carried out without proving the authenticity of the command.

The reader can decide for each command whether a MAC is included in the response.

When the appropriate MAC is received, due to linked MACs the reader knows that the

command and commands before it were properly executed.

All commands between two consecutive First Authenticate commands belong to one

transaction and the MACing mechanism assures integrity of the whole transaction.

If the MAC on read responses is omitted, the integrity of all read responses within one

session can still be verified by including a MAC on one read response before issuing the

next First or Following Authenticate command.

If performance matters more than confidentiality of the transaction, each data block in a

sector can be configured to allow or disallow sending/receiving plain data.

9.

Look-up tables

9.1 Security level 0, 1, 2, 3: ISO/IEC 14443-3

Table 4.

ISO/IEC 14443-3

Command

Description

REQA

the REQA and ATQA commands are fully implemented according to

ISO/IEC 14443-3

WUPA

the WAKE-UP command is fully implemented according to

ISO/IEC 14443-3

ANTICOLLISION/SELECT

cascade level 1

the ANTICOLLISION and SELECT commands are fully implemented

according to ISO/IEC 14443-3. The response is part 1 of the UID.

ANTICOLLISION/SELECT

cascade level 2 for 7 byte

UID version

the ANTICOLLISION and SELECT commands are fully implemented

according to ISO/IEC 14443-3. The response is part 2 of the UID.

HALT

the HALT command is fully implemented according to

ISO/IEC 14443-3