Applications for DESFire Smart Cards in U.S. Government

BQT Solutions Limited

By John Spongr, Vice President Business Development, BQT Solutions Limited

The DESFire smart card is part of the Mifare product line from Philips Semiconductors.

This smart card has been chosen by a number of U.S. Government agencies to be used as a common link between various access control systems.

This is a significant step forward within the government for two reasons:

  • It moves forward the presidential directive for heightened security for domestic government facilities.
  • It allows individuals enrolled in one agency to be recognized in other agencies’ facilities.

Due to the large numbers of cards to be manufactured and distributed for this purpose, many other applications will take root and provide additional benefits to government workers.

This is a technology to watch and certainly to consider for a standard platform when multiple organizations are involved and a secure growth path is desired.

HISTORY:

Access Control:

The access control industry has evolved in the following way:

  • Brass Keys  (Got lost, easily copied, no easy method to revoke access)
  • Magnetic Stripe cards (allowed photos on front of badge, easily read and copied, allowed revoke access, has long term wear problems)
  • Proximity Card Badges (Contactless - no wear issues, still copy-able but not with common equipment, no read security)
  • Contactless Smart Card Badges (Not copy-able, various levels of read security, can be used for other applications)

U.S. Government:

  • Agencies are organizations like (Pentagon, GSA, FBI, CIA, Department of Energy, FAA, etc,)
  • Many separate agencies – this was the philosophy of separation of powers and balance.
  • The attacks on twin towers in 9/11/2001 caused major changes in security needs.
  • The Department of Homeland Security (DHS) was created to combine 25+ agencies.
  • Previously, each agency decided access control independently. Thus many incompatible systems are currently in use.
  • Under DHS, the mandate is to use a common card standard to resolve this.
  • DESFire is one possible physical platform that supports this standard.
  • DESFire has been selected by NASA and the TSA (Transportation Services Administration) which is all the airports and water ports in the U.S.
  • Other agencies are following these pilot projects closely.

BENEFITS:

Some of the benefits of the DESFire smart card is as follows:

  • Unique serial number on each card that cannot be changed.
  • Fast data transfer to/from the card. (> 400 kbits/s)
  • Flexible file system to allow multiple applications to share a card.
  • A rollback feature for data integrity during transactions.
  • Three levels of data security. (open, verified, encrypted)
  • Various file types to ease application development.
  • Capability to be used in conjunction with biometrics like fingerprint, facial recognition and iris recognition.
  • A future growth path to greater memory capacities.

APPLICATIONS:

The primary application of DESFire is access control. The awareness and control of who enters a facility is only the start of all the possible functionalities.

Other applications are also available and in development:

  • Logical logon to the computer operating system and the network.
  • Time and attendance.
  • Audit tracking of services performed.
  • Project accounting.
  • Loyalty Programs (purchaser, reward, targeted spending)
  • Medical Information.
  • Training Certificates to endure safety policies.

SUMMARY:

Smart card technology has arrived and will continue to grow to be a large factor in facilities management, human resources, and information technology departments.

RSS