Access control transponder card MIFARE DESFire series

Overview
The MIFARE DESFire badge provides high-security contactless access for corporate and institutional environments. It operates at 13.56 MHz, complies with ISO/IEC 14443 A (1-4) and is available in DESFire memory variants (2K / 4K / 8K) and generations D40 / EV1 / EV2 / EV3.

Security
Ciphering options (DES/3DES/3K3DES/AES) protect against unauthorized reading and writing. The card supports anti-collision and each badge includes a unique 7‑byte UID. Advanced generations (EV2/EV3) provide enhanced privacy, rolling keys and additional secure services when used with compatible readers and software.

Memory and versions
Memory variants: DESFire 2K, 4K and 8K EEPROM. The 4K version is widely used and can store biometric templates for 1:1 identification on compatible readers. Choose the memory size according to multi-application requirements.

Multi-application
DESFire is designed for multi-application use: the card can host access control, vending, canteen, parking, transport ticketing and other services on a single badge. EV3 removes many historical limits on the number of applications when supported by the ecosystem.

Evolutions and compatibility
Generational progress from D40 → EV1 → EV2 → EV3 brings improvements in cryptography, transaction speed and read range. EV2 and EV3 add features such as configurable ATS, larger RF buffers and enhanced command sets; backwards compatibility depends on reader firmware.

Advanced functions

• Key rotation (rolling keys) to limit exposure without reissuing media
• Per-application key management for delegated services
• Delegated application provisioning to enable integrators to add services without disclosing master keys

Specifications summary
Compatible with ISO/IEC 14443-1 to -4; communication at 13.56 MHz; data rates up to 848 kbit/s (ISO/IEC 14443-4). UID: 7 bytes. Supported cryptography: DES, 3DES, 3K3DES, AES (depending on generation).

Key differences between generations

• D40: legacy DES support and basic feature set
• EV1: AES support, improved command set and anti-collision
• EV2: larger buffers, enhanced privacy features and new services
• EV3: further security improvements, configurable ATS, rolling keys and extended application management

Uses and integration
Typical applications: corporate access control, employee ID, parking, canteen and vending, transport tickets, secure subscriptions and device authentication. To leverage EV2/EV3 features, deploy compatible readers and middleware.

Technical documentation
Datasheets and application notes (MIFARE DESFire EV3 specification) are available for integration and certification. Check reader compatibility and firmware requirements before deployment.

Technical characteristics

• Technology: HF RFID 13.56 MHz, ISO/IEC 14443 A (1-4) compatible
• Memory: 2K / 4K / 8K EEPROM variants
• UID: unique 7 bytes
• Cryptography: DES, 3DES, 3K3DES, AES (by version)
• Data rate: up to 848 kbit/s (ISO/IEC 14443-4)
• Multi-application: flexible file system and per-application keying (EV2/EV3 extended)
• Anti-collision: yes