1 General description

The NXP MIFARE SAM AV2 hardware solution is the ideal add-on for reader devices offering additional security services. Supporting TDEA, AES and RSA capabilities, it offers secure storage and secure communication in a variety of infrastructures. Unlike other products in the field, MIFARE SAM AV2 has proven interoperability with all of NXP's broad card portfolio, (MIFARE Ultralight, MIFARE Ultralight C, MIFARE 1K, MIFARE 4K, MIFARE Plus, MIFARE DESFire, MIFARE DESFire EV1 and SmartMX solutions), making it the most versatile and secure SAM solution on the

market today. Secured communication When used in combination with a reader IC supporting innovative X features, MIFARE SAM AV2 provides a significant boost in performance to the reader along with faster communication between reader and module. The X feature is a new way to use the SAM in a system, with SAM connected to the microcontroller and the reader IC simultaneously. The one variant, identified with T1AD2060, can be connected to RC52X contactless reader ICs, the other variant, identified T1AR1070, can be connected to RC663 using the X-feature. Apart from

the difference in the interface, both variants have the same functionality. The connection between the SAM and the reader is performed using security protocols based on either symmetric cryptography (TDEA and AES) or PKI RSA asymmetric cryptography. The protocols comply with the

state-of-art standards and thereby ensure data confidentiality and integrity.

2 Features and benefits

2.1 Cryptography

? Supports MIFARE Crypto1, TDEA (Triple DES encryption algorithm), RSA and AES cryptography

? Supports MIFARE Ultralight, MIFARE Ultralight C, MIFARE 1K, MIFARE 4K, MIFARE Plus, MIFARE DESFire,

MIFARE DESFire EV1

? Secure storage and updating of keys (key usage counters)

? 128 key entries for symmetric cryptography and 3 RSA key entries for asymmetric cryptography

? TDEA and AES based key diversification

? Offline cryptography

2.2 Communication

? Up to four logical channels; simultaneous multiple card support

? Support for DESFire and MIFARE Plus authentication (with related secure messaging and session key

generation)

? Secure Host to SAM and back end to SAM communication with symmetric cryptography 3 pass authentication

for confidentiality and integrity

? Support high speed baud rates up to 1.5 Mbit/s

? Secure Host to SAM and back end to SAM communication with RSA based cryptography

? Support ISO/IEC 7816 baud rates

? True random number generator (TRNG)

2.3 Delivery types

? Available in wafer, PCM 1.1 module, or HVQFN package

3 Applications

? Access management

? Public transport

? Loyalty programs

? Micro payment