1 Introduction
The Seos® 5x06 series multi-function cards deliver full Seos 8K functionality, with the addition of MIFARE Classic 4K (5806) or MIFARE DESFire EV1 (5906) implementation. This application note provides guidance for successful integration with or migration from existing MIFARE Classic 4K or MIFARE DESFire EV1 applications. Test cards are available for evaluation and qualification; please contact your local pre-sales representative.
MIFARE Classic environments or devices designed for native implementation may require modification to support the 58xx series. Applications designed for multiple ISO14443A layer cards (e.g., NXP JCOP or SmartMX™ platform) are more likely to support the 58xx series with minimal modification.
The 59xx series card with MIFARE DESFire EV1 implementation is highly likely to operate within DESFire EV1 native environments with little or no application modification.
1.1 5906 iCLASS SE® Reader Compatibility
Depending on the reader model and production date, a configuration card might be necessary to enable Seos functionality. Contact your local pre-sales representative if this issue arises during testing.
1.2 Part Activation Process
Customers must demonstrate qualification of test cards within the target environment using the activation form. Upon submission, HID Global will activate requested part numbers within 3-5 working days. Partners are responsible for ensuring activated parts are qualified for subsequent projects.
The process involves:
- New project: Test & Qualify → Activate Part Numbers → Submit Purchase Order
- Future project: Test & Qualify → Submit Purchase Order
2 5806 Seos® 8K + MIFARE Classic 4K Implementation
2.1 Specification
| Feature | Seos | MIFARE Classic Implementation |
|---|---|---|
| Operating frequency | 13.56 MHz | 13.56 MHz |
| Communication protocol compliance | ISO14443A-4 | ISO14443A-3 |
| SAK | 0x38 | 0x18 |
| ATQA | 0x0200 | 0x0200 |
| Communication speed | Up to 848 kbps | 106 kbps |
| Memory type | EEPROM | EEPROM |
| Memory size | 8 Kbytes | 4 Kbytes |
| Multiple applications support | Yes (using Open Data Profile) | Yes |
| SIO Data Object support | Yes, default | No |
| HID Data Format support | Yes (wrapped in SIO) | N/A |
| HID MIFARE application | No | Yes, optional using HID MIFARE application |
| Write endurance / data retention | Min 100,000 cycles / 10 years | Min 100,000 cycles / 10 years |
| Typical transaction time | Data size dependent | Data size dependent |
| Extended privacy support | No | No |
| Security features | Mutual authentication, diversified keys and secure messaging based on AES128 | MIFARE Crypto |
| Security certification | Common Criteria (CC) EAL 5+ HW certified platform | N/A |
| UID | Global 4 byte static NUID | Global 4 byte static NUID |
2.2 5806 HID Global Product Compatibility
Compatibility varies by HID Global product. Key compatibilities include:
- iCLASS SE Readers (Rev E/D), MultiCLASS SE Readers (Rev E/D): Support Seos (Read PACS SIO) and MIFARE Classic 4K (Read UID).
- iCLASS SE Custom Programming Series (Rev E): Support Seos (Read PACS SIO) and MIFARE Classic 4K (Read custom data, requires data-mapper configuration).
- SE Bio: Supports Seos (Read/write templates).
- Field encoders (CP1000 SE Encoder): Support Seos (Read/write PACS SIO & custom ADF) and MIFARE Classic 4K (Read/write HID MIFARE).
- Embedded reader boards (SE Reader Module SE3200A00/BP0): Support Seos (Read PACS SIO) and MIFARE Classic 4K (Read UID, Read custom data).
- OMNIKEY Desktop Readers (5427 MK1/MK2, 5022, 5023): Support Seos (Read PACS SIO & custom data) and MIFARE Classic 4K (Read UID, Read/write custom data).
2.3 iCLASS SE Reader ISO14443A-4 UID Configuration
iCLASS SE readers prioritize Seos payload over ISO14443A UID. To avoid invalid reads, disable ISO14443A if not needed. For other card types requiring ISO14443A UID mode, use host-controlled reader aids to prompt users to re-present the card.
2.4 iCLASS HF Migration / iCLASS SE Custom Programming Reader Configuration
These reader series may require a configuration change (data map set to ISO14443A-3 object) to support MIFARE Classic implementation. Use test cards to verify compatibility and contact pre-sales for assistance.
2.5 5806 Series MIFARE Classic Third-Party Device Compatibility
The 58xx series is ISO14443A-4 compliant, supporting Seos and MIFARE Classic 4K (ISO14443A-3). HID Global Seos products generally support Seos transparently. Third-party MIFARE Classic readers and systems may require software updates to recognize the card. Applications designed for NXP JCOP or Smart MX MIFARE Classic are likely to be compatible with minimal modification, as they often handle dual ISO14443-4 and ISO14443A-3 compliance.
2.5.1 SAK Coding
A native MIFARE Classic 4K card has SAK 0x08. The 58xx series, supporting Seos and MIFARE Classic, has a resultant SAK of 0x38 (ISO14443-4 flag set). Host applications may need adjustment to handle this SAK correctly and switch to the ISO14443A-3 layer.
| Coding | MIFARE Classic 1KB | MIFARE Classic 4KB | Standard ISO14443-4 | Resultant SAK |
|---|---|---|---|---|
| 58xx Series | - | X | X (Seos) | 0x38 |
2.5.2 ATQA Coding
ATQA should not be used for identification. For reference, the ATQA of the 58xx series card is 0x0200. Refer to NXP application note MIFARE Type Identification Procedure (AN10833) for details.
2.6 MIFARE Classic Implementation Comparison
| Feature | MIFARE Classic 1K Native | MIFARE Classic 4K Native | 58xx Series MIFARE Classic 4K Implementation |
|---|---|---|---|
| ATQA | 0x0400 | 0x0200 | 0x0200 |
| UID | 4-Byte Static NUID (7-Byte/Random option available) | 4-Byte Static NUID (7-Byte/Random option available) | 4-Byte Static NUID (7-Byte/Random ID not supported) |
| SAK | 0x08 | 0x18 | 0x38 |
| Default A Key | 0xFFFFFFFFFFFF | 0xFFFFFFFFFFFF | 0xFFFFFFFFFFFF |
| Default B Key | 0xFFFFFFFFFFFF (as data) | 0xFFFFFFFFFFFF (as data) | 0xFFFFFFFFFFFF (as data) |
| Access Conditions (all except last block) | FF078069 | FF078069 | FF078069 |
| Access Conditions (last block) | FF0780BC | FF0780BC | FF0780BC |
| Sector 0 Authentication | Requires authentication to read | Requires authentication to read | Requires authentication to read |
2.7 5806 Series Test Card
Test cards are available for purchase. The part numbers represent core programming profiles:
- 5806PNGGANN4-TEST: Programmed Seos 8K with matching external, Non-programmed MIFARE Classic 4K.
- 5806PMGGAAN4-TEST: Programmed Seos 8K with matching external, Programmed HID MIFARE Classic 4K.
Include desired Seos and/or HID MIFARE Classic programming information (format number, facility code, ID range) with your order.
3 5906 Seos® 8K + MIFARE DESFire EV1 8K Implementation
3.1 Specification
| Feature | Seos | MIFARE DESFire EV1 Implementation |
|---|---|---|
| Operating frequency | 13.56 MHz | 13.56 MHz |
| Communication protocol compliance | ISO14443A-4 | ISO14443A-4 |
| SAK | 0x20 | 0x20 |
| ATQA | 0x4403 | 0x4403 |
| Communication speed | Up to 848 kbps | Up to 848 kbps |
| Memory type | EEPROM | EEPROM |
| Memory size | 8 Kbytes | 8 Kbytes |
| Multiple applications support | Yes (using Open Data Profile) | Yes |
| SIO Data Object support | Yes, default | No |
| HID Data Format support | Yes (wrapped in SIO) | No |
| Write endurance / data retention | Min 100,000 cycles / 10 years | Min 100,000 cycles / 10 years |
| Typical transaction time | Data size dependent | Data size dependent |
| Extended privacy support | No | No |
| Security features | Mutual authentication compliant to ISO/IEC 24727-3:2008, using NIST SP800-108 key diversification based on AES128. Secure messaging compliant to EN 14890-1:2009 and session key derivation based on NIST SP 800-56A. | 3-pass mutual authentication based on 3DES or AES128, CRC16 and 4-byte MAC (TDES) or CRC32 and 8-byte CMAC (TDES or AES128) |
| Security certification | Common Criteria (CC) EAL 5+ HW certified platform | N/A |
| UID | Global 7 byte static NUID (random 4 byte UID option available via special request) | 7-Byte UID, Switch to Random UID supported. |
3.2 5906 HID Global Product Compatibility
Compatibility with HID Global products:
- iCLASS SE Readers (Rev E/D), MultiCLASS SE Readers (Rev E/D): Support Seos (Read PACS SIO) and DESFire EV1 (Read UID). A configuration card may be required for some models.
- iCLASS SE Custom Programming Series (Rev E): Support Seos (Read PACS SIO) and DESFire EV1 (Read custom data, requires configuration).
- Field encoders (CP1000 SE Encoder): Support Seos (Read/write PACS SIO) and DESFire EV1 (Read/write custom data).
- Embedded reader boards (SE Reader Module SE3200A00/BP0): Support Seos (Read PACS SIO) and DESFire EV1 (Read UID, Read custom data).
- OMNIKEY Desktop Readers (5427 MK1, 5022, 5023): Support Seos (Read PACS SIO & custom data) and DESFire EV1 (Read UID, Read custom data).
3.3 iCLASS SE Reader 5906 Seos Configuration
iCLASS SE readers produced before May 2016 and iCLASS SE Custom Programming reader configurations may require an update to support the Seos 5906 series. Use test cards to verify compatibility.
3.4 iCLASS SE Reader ISO14443A-4 UID Configuration
Similar to the 5806 series, iCLASS SE readers prioritize Seos payload. Disable ISO14443A if not needed to avoid invalid reads. For other card types, use host-controlled reader aids.
3.5 5906 MIFARE DESFire EV1 Third-Party Device Compatibility
Third-party native MIFARE DESFire EV1 devices and systems are likely to support the MIFARE DESFire EV1 implementation with minimal or no updates. Use test cards to confirm compatibility.
3.5.1 SAK Coding
The 59xx series uses SAK 0x20, which is the same as a native MIFARE DESFire card, indicating ISO14443-4 compliance.
| Coding | MIFARE Classic 1KB | MIFARE Classic 4KB | MIFARE DESFire / ISO14443-4 | Resultant SAK |
|---|---|---|---|---|
| 59xx Series | - | - | X | 0x20 |
3.5.2 ATQA Coding
Do not use ATQA alone for identification. The ATQA of the 59xx series card is 0x4403. Refer to NXP application note MIFARE Type Identification Procedure (AN10833).
3.6 5906 MIFARE DESFire EV1 Implementation Comparison
| Feature | MIFARE DESFire EV1 Native | 59xx Series MIFARE DESFire EV1 Implementation |
|---|---|---|
| ATQA | 0x4403 | 0x4403 |
| UID | 7-Byte UID, Switch to Random UID supported. | 7-Byte UID, Switch to Random UID not supported. |
| SAK | 0x20 | 0x20 |
| ATS | 0x067577810280 | 0x0578F7A102 |
| Set User Defined ATS | YES | NO |
| Get Version (native) | 0x(AF)04010101001A05 (AF)04010101041A05 0000000000000000B90C1651404416 | 0x(AF)04810101001A05 (AF)04810101011A05 0000000000000000BA551093704014 |
| Select DF ID "0001" (ISO) | 0x9000 | 0x6A82 |
| Select DF Name >= 5Bytes "0102030405" (ISO) | 0x9000 | 0x6A82 |
3.7 5906 Test Card
Test cards are available for purchase. The part number 5906PNGGANN7-TEST represents the core programming profile (Seos programmed, MIFARE DESFire EV1 non-programmed) with a 7-byte NUID.
Include desired Seos programming information (format number, facility code, ID range) with your order.
Appendices
A How to Complete Programming Information
Programming information is mandatory for programmed card options. This includes Seos® programming for both 5806 and 5906 series, and HID MIFARE Classic programming for the 5806 series (compatible with SmartID® "HM" readers). For custom MIFARE Classic or DESFire EV1 programming, contact pre-sales for a custom part number.
Examples are provided in the original document for specific part numbers like 5806PMGGAAN4 and 5906PNGGANN7, detailing format, facility code, quantity, and ID ranges for Seos and MIFARE programming.
B UID Specification
The document details UID structures: 7-Byte UID (ISO14443A, cascade level 2 for 59xx series) and 4-Byte NUID (ISO14443A, cascade level 1 for 58xx series). It emphasizes the importance of systems supporting the full UID value and notes potential bit/byte order reversal by readers.
C Product Lead Times
Lead times for stock availability are typically 3-5 days for < 1,000 units and determined at order for > 1,000 units. Orders with magstripe or custom graphics, or those requiring make-to-order processing, will have longer lead times. Initial delivery periods post-launch may range from 8-18 weeks, with anticipated reductions later. Contact sales for quantities over 5,000 units.
