Features and benefits

2.1 RF Interface & Communication Protocol

• Fully compliant to the NFC Forum Tag 4 Type technical specification [14]

• Fully compliant to NDEF data structure configurations [15]

• Contactless interface compliant to ISO/IEC 14443A-2/ -3/ -4, see [1] , [2], [3]

• Support of ISO/IEC 7816-4 communication frames for highest interoperability with

mobile and wearables

• Low power consumption (Hmin) enabling operating distances of up to 10 cm

• Support of fast data rates: 106 kbit/s, 212 kbit/s, 424 kbit/s, and 848 kbit/s

• Support of double size (7-byte) Unique Identifiers (UID) and optionally Random ID

(RID) according to ISO 14443-3 [2]

• Communication frame size to support up to 128 bytes

• Support of ISO 7816-4 wrapped commands

2.2 Memory Organization

• 416 bytes user memory

• Data retention of 50 years and write endurance of minimum 200.000 cycles

• File system compliant to ISO/IEC 7816-4 with one predefined Directory File (DF) and a

set of Elementary Files (EF)

– Three standard data files, one with 32 byte for the capability file, one with 256 bytes

for NDEF storage and one with 128 bytes for protected data

• File system compliant with ISO 7816

2.3 Security and Privacy

• Common Criteria certification: EAL4 for both Hardware and Software

• Secure Unique NFC (SUN) message featuring integrity protection, authenticity and

confidentiality

• The SUN feature is enabled by the Secure Dynamic Messaging (SDM) which is

mirrored as text (ASCII encoded) into the NDEF message

• Incremental NFC Counter, which counts each tap

• Secure messaging compliant to standard AES according to NIST Special Publication

800-38A and 800-38B [5] [6]

– Optional enhanced side channel attack protection using LRP wrapped AES operation

according to [10]

• Five customer defined AES 128-bit keys including key versions

• Optional Random ID for enhanced privacy

• 3-pass mutual authentication

• Flexible access control configurable per file (EF)

– Individual key configuration for Read (R) / Write (W) / ReadWrite (RW) / Configuration

• Configurable secure messaging communication mode

– Plain communication

– CMAC protected for message integrity protection

– Full Enciphered plus CMAC for full encryption of complete data transferred through

contactless interface

• ECC-based NXP originality signature

• AES-based originality keys leveraging the LRP wrapped AES authentication

Specific Features

• Tamper detection and secure mirroring into the NDEF message

• Frame-level oriented automatic anti-tearing mechanism

• High input capacitance (50 pF) for small form factor design

Applications

NTAG 424 DNA TT offers multi-layered security to enable a broad range of trusted

applications that protect products, services and user experiences.

• Advanced anti-counterfeiting

Verify authenticity of physical goods and identify sales outside authorized markets

• Tamper detection and proof

Detect unauthorized product opening to secure product integrity

• Secured exclusive user experiences based on product status

Enabled advanced user interactions, pre- and post-sale. Also reward customers with

truly exclusive and personalized content, offers and privileges

• Secured sensitive data applications

Protect sensitive product and user data, or trigger an action upon a verified incidence,

e.g., payment

• Secure authentication and configuration of closed loop devices

Authenticate consumables and parts, enable an integrity check, and automatically

transfer device settings