nxp mifare webinar: enhanced user experience through active application management
TRANSCRIPT
EXTERNAL USE
CHRISTOPH ZWAHLEN
JUNE 8TH, 2016
PRESENT IMPROVED - FUTURE
INSIDE
ENHANCED USER EXPERIENCE
THROUGH ACTIVE
APPLICATION MANAGEMENT
• Urbanization is a major challenges for societies
around the globe.• WHO expects 6 out of 10 peoples living in a urban area by
2030
• Efficient and effective usage of available
services required to maintain quality of life in
urban areas
• Convergence of applications across
organizational boarders to improve user
convenience and adoption of services
Powering a Smarter WorldConvergence of applications powering Smart Cities
June 8, 20162.
Agenda
1. Role of Access Management in a Smart City
2. Convergence of applications on contactless
smartcards
3. Practical implementation
• MIFARE DESFire EV2
Christoph ZwahlenMarketing Manager
Access Management
• Access applications in a urban environment• Enterprises
• Higher educations
• Hospitality industry
• Events and attractions
• Residential
• Contactless smart cards are commonly used in
access management applications
• Integration of 3rd party applications enhances user
experience
• Private and public organizations can significantly
contribute to smart cities
Access Management in a Smart City
June 8, 20164.
Use Cases: Higher EducationConvergence – enhancing user experience
June 8, 20165.
• Student cards are commonly used in various on-
campus activities • Student identification and attendance control
• Access management
• Logical Access and IT Services
• Payment
• Library services
• Integration of off-campus applications
addressing enhancing user benefits• Smart mobility
• Loyalty programs
• Events
Use Cases: Higher EducationUser Requirements
• Convenient solution – not an other card!
• Flexible access to off-campus application
• Single provider and central point of
service
• Controllable cost structure
• Contracts in line with academic calendar
June 8, 20166.
Application convergence
June 8, 20167.
Contactless Smart Card
• High acceptance in
various applications
• User convenience
Secure Multi-application
• Sovereignty of
individual applications
• Simple integration into
one card
Flexible solutions
• Seamless integration
into mobile devices and
banking cards
• Flexible deployment
Shared platform Service ownership Extendibility
• Card owner• Control of card management and owned applications
with specific keys
• Sharing of card specific keys takes ownership of card
• Application owner• Controls own application with specific keys
• Sharing of application specific keys takes ownership
of application
• Flexible application management over
organizational barriers increases card
management complexity significantly
Challenges of multi-application systemsCard / Application ownership dilemma
June 8, 20168.
Root directoryPICC Level
Files5 standard file types
KeysCard Specific keys
ApplicationApplication ID
KeysApplication specific keys
Current workflows
3rd party application is installed during card
manufacturing
Activation done through card management
office or dedicated point of service
Enhanced future workflows
Delegated application management
simplifies deployment workflow
Secure workflow maintaining sovereignty of
both card owner and application owner
Integration of applications to smart cardWorkflows for solution convergence
June 8, 20169.
MIFARE DESFire® generation benefitsMIFARE DESFire® EV2
June 8, 201610.
2002MIFARE DESFire
2008MIFARE DESFire EV1
2015
MIFARE DESFire EV1 256B
2016MIFARE DESFire EV2
MIFARE
DESFire EV1
MIFARE
DESFire EV2
ISO/IEC 14443 A 1-4
ISO/IEC 7816-4 support extended extended
EEPROM data memory 2/4/8KB 2/4/8KB
Flexible file structure
NFC Forum Tag Type 4
Secure, high-speed cmd
Unique ID 7BUID or 4B RID 7BUID or 4B RID
Number of applications 28 unlimited
Number of files per app 32 32
High data rates support up to 848 Kbit/s up to 848 Kbit/s
Crypto algorithms supportDES/2K3DES/
3K3DES/AES
DES/2K3DES/
3K3DES/AES
CC certification (HW + SW) EAL 4+ EAL 5+
MIsmartApp feature -
Transaction MAC per app -
Multiple keysets per app - Up to 16 keysets
Multiple file access rights - Up to 8 keys
Inter-app files sharing -
Virtual Card Architecture -
Proximity Check -
Delivery typesWafer, MOA4 &
MOA8
Wafer, MOA4 &
MOB6
• Allowing secure application creation in already
deployed cards – facilitating multi-application use
cases beyond organization barriers
• Simplified management of ownership and
responsibilities
• Interoperability with one card in many separate
system environments
• MIsmartApp enabling new business models
through seamless integration of additional services
in the field
MIsmartApp – Convergence redefinedEnhanced multi-application capabilities in MIFARE DESFire EV2
June 8, 201611.
MIsmartApp – example Campus Card
June 8, 201612.
University Card(MIFARE DESFire EV2)
Concerts
Bike sharing
Retail shops
Public Transport
Coffee shops RestaurantsRestaurants
Upgrade
Book stores
Cinemas Theater Sporting EventsGym
University Card(MIFARE DESFire EV1)
Pick the applications you want
and add them to your card
MIsmartApp – WorkflowsEnhanced multi-application capabilities in MIFARE DESFire EV2
June 8, 201613.
Transport
Card
eMoney Card
Gift Card
Transport
Operator
eMoney Provider
Gift Card
Provider
Agreement & Token
delivery
Agreement & Token
delivery
• Verify backwards compatibility of MIFARE DESFire EV2
in existing applications
• Integration of MIsmartApp in card/application
management workflows
• Commercial agreements between card owner and 3rd
party application provider
• Converged solution roll-out
MIsmartApp Integration Enabling smart solutions
June 8, 201614.
Thank you
Visit us at http://MIFARE.net
Follow us:
https://twitter.com/nxp_mifare https://at.linkedin.com/in/nxpmifarewww.youtube.com/user/nxpsemiconductorshttp://blog.nxp.com/ https://www.facebook.com/nxpsemi
Q&A
Webinar SeriesOutlookDate Title
May 24th 2016 MIFARE Innovation Roadmap – present improved, future inside
June 1st 2016 How to protect contactless systems today and tomorrow
June 8th 2016 Enhanced user experience through active application management
June 15th 2016 Streamlined user management for multi-vendor installations
June 22nd 2016 Secure closed loop payments in an open environment
June 29th 2016 Introduce the future in your today’s system – how to ensure smooth system upgrades
July 6th 2016 Added value to card based environments through NFC and cloud – when IoT
becomes reality
July 13th 2016 Complement use cases with mobiles and wearables