1 General description

NTAG 224 DNA is an innovative security IC solution, compliant with NFC Type 2 Tag with 208 bytes of user memory. The technology uses multi-layered protection to support a broad range of NFC-based applications that can be trusted to protect products, services and IoT-driven user experiences. NTAG 224 DNA IC comes with a Secure Unique NFC (SUN) message authentication. The IC can automatically add its UID and incremental tap counter to the programmed NDEF (NFC Data Exchange Format) message through ASCII mirroring, and uses an AES-128 key to secure the message with a cryptographic message authentication code (CMAC ). The SUN functionality supports advanced protection to verify a tag’s authenticity and integrity, whilst also enabling secured unique user experiences served in real time. The IC uses AES-128 cryptography and is Common Criteria EAL3+ (AVA.VAN.2) targeted. NTAG 224 DNA also offers a 3-pass Mutual authentication with an AES-128 key, ensuring that only an authorized reader can access tag data. This advanced two-way authentication scheme can protect sensitive data against unauthorized access and/or a malicious change attempt. NTAG 224 DNA offers in addition an ECC-based originality signature to assure tag origin. The originality signature can be further customized and permanently locked during tag initialization. The NTAG 224 DNA is compliant with NFC Forum Type 2 Tag ([1]) and ISO/IEC14443 Type A part 1 to 3 ([2]).

2 Features and benefits

• Contactless transmission of data and supply energy

• Operating frequency of 13.56 MHz

• Data transfer of 106 kbit/s

• Data integrity of 16-bit CRC, parity, bit coding, bit counting

• Operating distance up to 100 mm (depending on various parameters as e.g. field strength and antenna

geometry)

• 7-byte serial number (cascade level 2 according to ISO/IEC 14443-3)

• Automatic NFC counter triggered at the first read command after a reset

• Secure Unique NFC (SUN) message authentication feature implemented via ASCII mirroring of the UID, NFC

counter and CMAC into the NDEF message in the user memory, which changes on every readout after a

reset

• 3-pass mutual Authentication with AES-128 with 128-bit key length

• ECC-based originality signature, offering the option to customize and permanently lock the signature

• Fast read command

• True anti-collision

• 50 pF input capacitance

2.1 EEPROM

• 304 bytes organized in 76 pages with 4 bytes per page

• 208 bytes freely available user Read/Write area (52 pages)

• 4 bytes initialized capability container with one time programmable access bits

• Field programmable read-only locking function per page for the first 16 pages

• Field programmable read-only locking function above the first 16 pages per 4 pages

• Configurable memory access authentication protection with optional limit of unsuccessful attempts

• Anti-tearing support for capability container (CC), lock bits and NFC counter

• Pre-programmed ECC-based originality signature, offering the possibility for customizing and permanently

locking the signature

• Setting for galvanic or capacitive tag tamper and sensing

• Data retention time of 10 years

• Write endurance 100.000 cycles

3 Applications

• Advanced anti-counterfeiting protection

Reliably verify authenticity of physical goods, anytime, anywhere using an NFC enabled device. Also consider

automated authentication of NFC tagged consumables and parts in embedded devices.

• Improved supply chain visibility and control

Visibly help track products along the supply chain, and reduce grey market diversion. Enable more

transparent and secure supply chains, e.g. with unique content, tailored services or exclusive privileges loyalty

rewards.

• Augmented user experiences

Use product opening status to prompt targeted messages, e.g. pre-/post-retail. Evolve the user experience by

engaging with greater personalization, e.g. with unique content, tailored services or exclusive privileges.

• Proof of presence

Provide trusted proof that a person was at a given location at specific times, allowing proof of servicing or

visiting times, and other time/location-based events.