NXP Semiconductors
MF1S50YYX_V1
MIFARE Classic EV1 1K - Mainstream contactless smart card IC for fast and easy solution development
MF1S50yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Product data sheet Rev. 3.2 — 23 May 2018
COMPANY PUBLIC 279232 7 / 36
Bit count checking
Bit coding to distinguish between "1", "0" and "no information"
Channel monitoring (protocol sequence and bit stream analysis)
8.4 Three pass authentication sequence
1. The reader specifies the sector to be accessed and chooses key A or B.
2. The card reads the secret key and the access conditions from the sector trailer. Then
the card sends a number as the challenge to the reader (pass one).
3. The reader calculates the response using the secret key and additional input. The
response, together with a random challenge from the reader, is then transmitted to the
card (pass two).
4. The card verifies the response of the reader by comparing it with its own challenge
and then it calculates the response to the challenge and transmits it (pass three).
5. The reader verifies the response of the card by comparing it to its own challenge.
After transmission of the first random challenge the communication between card and
reader is encrypted.
8.5 RF interface
The RF-interface is according to the standard for contactless smart cards ISO/IEC
14443A.
For operation, the carrier field from the reader always needs to be present (with short
pauses when transmitting), as it is used for the power supply of the card.
For both directions of data communication there is only one start bit at the beginning of
each frame. Each byte is transmitted with a parity bit (odd parity) at the end. The LSB of
the byte with the lowest address of the selected block is transmitted first. The maximum
frame length is 163 bits (16 data bytes + 2 CRC bytes = 16 × 9 + 2 × 9 + 1 start bit).
8.6 Memory organization
The 1024 × 8 bit EEPROM memory is organized in 16 sectors of 4 blocks. One block
contains 16 bytes.
NXP Semiconductors
MF1S50YYX_V1
MIFARE Classic EV1 1K - Mainstream contactless smart card IC for fast and easy solution development
MF1S50yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Product data sheet Rev. 3.2 — 23 May 2018
COMPANY PUBLIC 279232 8 / 36
001aan011
Byte Number within a Block
15141312111098765
Key A Access Bits Key B
43210Block
3
Sector
15
2
1
0
Description
Sector Trailer 15
Data
Data
Data
Sector Trailer 14
Data
Data
Data
Sector Trailer 0
Data
Data
Manufacturer Block
Sector Trailer 1
Data
Data
Data
314
2
1
0
31
2
1
0
30
2
1
0
:
:
:
:
:
:
Key A Access Bits Key B
Key A Access Bits Key B
Key A Access Bits
Manufacturer Data
Key B
Figure 5. Memory organization
8.6.1 Manufacturer block
This is the first data block (block 0) of the first sector (sector 0). It contains the IC
manufacturer data. This block is programmed and write protected in the production test.
The manufacturer block is shown in Figure 6 and Figure 7 for the 4-byte NUID and 7-byte
UID version respectively.
001aan010
1514131211109876543
NUID Manufacturer Data
Block 0/Sector 0
21Byte 0
Figure 6. Manufacturer block for MF1S503yX with 4-byte NUID
NXP Semiconductors
MF1S50YYX_V1
MIFARE Classic EV1 1K - Mainstream contactless smart card IC for fast and easy solution development
MF1S50yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2018. All rights reserved.
Product data sheet Rev. 3.2 — 23 May 2018
COMPANY PUBLIC 279232 9 / 36
001aam204
1514131211109876543
UID Manufacturer Data
Block 0/Sector 0
21Byte 0
Figure 7. Manufacturer block for MF1S500yX with 7-byte UID
8.6.2 Data blocks
All sectors contain 3 blocks of 16 bytes for storing data (Sector 0 contains only two data
blocks and the read-only manufacturer block).
The data blocks can be configured by the access bits as
read/write blocks
value blocks
Value blocks can be used for e.g. electronic purse applications, where additional
commands like increment and decrement for direct control of the stored value are
provided
A successful authentication has to be performed to allow any memory operation.
Remark: The default content of the data blocks at delivery is not defined.
8.6.2.1 Value blocks
Value blocks allow performing electronic purse functions (valid commands are: read,
write, increment, decrement, restore, transfer). Value blocks have a fixed data format
which permits error detection and correction and a backup management.
A value block can only be generated through a write operation in value block format:
Value: Signifies a signed 4-byte value. The lowest significant byte of a value is stored
in the lowest address byte. Negative values are stored in standard 2´s complement
format. For reasons of data integrity and security, a value is stored three times, twice
non-inverted and once inverted.
Adr: Signifies a 1-byte address, which can be used to save the storage address of a
block, when implementing a powerful backup management. The address byte is stored
four times, twice inverted and non-inverted. During increment, decrement, restore and
transfer operations the address remains unchanged. It can only be altered via a write
command.
Figure 8. Value blocks
An example of a valid value block format for the decimal value 1234567d and the block
address 17d is shown in Table 4. First, the decimal value has to be converted to the
hexadecimal representation of 0012D687h. The LSByte of the hexadecimal value is
stored in Byte 0, the MSByte in Byte 3. The bit inverted hexadecimal representation of
the value is FFED2978h where the LSByte is stored in Byte 4 and the MSByte in Byte 7.
The hexadecimal value of the address in the example is 11h, the bit inverted
hexadecimal value is EEh.

MF1S5031XDUD/V1V

Mfr. #:
Manufacturer:
NXP Semiconductors
Description:
RFID Transponders MF1S5031XDUD/UNCASED//V1/WAFER SAWN FFC NDP NO MAR
Lifecycle:
New from this manufacturer.
Delivery:
DHL FedEx Ups TNT EMS
Payment:
T/T Paypal Visa MoneyGram Western Union