NT4H1321
NTAG 413 DNA Secure Unique NFC Message for direct access
to web services
Rev. 3.2 — 12 October 2017 Product short data sheet
400232 COMPANY PUBLIC
1 Introduction
NTAG 413 DNA revolutionizes NTAG product portfolio by bringing AES cryptographic
authentication and allows to automatically and securely connect to a web service by just
tapping the tag without the need of a dedicated app installed on the mobile NFC device.
Besides the NXP originality signature and a 3-pass mutual authentication, it introduces a
novel security feature called “Secure Unique NFC Message (SUN)”, which automatically
generates tap-unique tag authentication data upon each read-out what enables
dedicated unique communication to each user based on predefined criteria. No app
(in NFC device) is required to generate this tap-unique data consisting of CMACed
information derived from the chip UID, a tap counter and contained data. An NFC
enabled device can automatically connect to a web based service and based on the
information contained in URL, the device can check the tags authenticity and verify the
information validity. NTAG 413 DNA offers flexibility to individualize the structure of this
unique data set.
NTAG 413 DNA is an ideal solution to engage with consumers through dynamic content
experiences, fully triggered by them and served in real-time. By that it enables smarter
marketing based on ongoing contextual and unique consumer engagement opportunities
in a secure way. Applications include but are not limited to consumer engagement, brand
protection, access control, one-time vouchers and similar use cases where the proof of
uniqueness, originality and physical tag presence are required.
NTAG 413 DNA is certified as NFC Forum Type 4 Tag [Certifcation ID: 58515] [15]
and is also compliant to ISO/IEC14443-4 [4], ISO/IEC 7816-4 [7] file structure and
APDUs format. Thanks to the high input capacitance (70pF), NTAG 413 DNA tag IC is
particularly tailored for applications requiring small footprints, without compromise on
performance. Small NFC tags can be more easily embedded into e.g. product labels or
electronic devices. The mechanical and electrical specifications of NTAG 413 DNA is
tailored to meet the requirements of inlay and tag manufacturer.
1.1 Contactless energy and data transfer
Communication to NTAG 413 DNA can be established only when the IC is connected
to an antenna. Any form factor and antenna class type according to ISO/IEC 14443-1
[1] is possible to design with NTAG 413 DNA ICs. Few antenna design examples with
guidelines are in NTAG antenna design application note [12] .
NXP Semiconductors
NT4H1321
NTAG 413 DNA Secure Unique NFC Message for direct access to web services
NT4H1321_SDS All information provided in this document is subject to legal disclaimers. © NXP B.V. 2017. All rights reserved.
Product short data sheet Rev. 3.2 — 12 October 2017
COMPANY PUBLIC 400232 2 / 16
aaa-026092
ENERGY
DATA
NFC
INITIATOR
NFC TAG
NTAG IC
Figure 1. Contactless system
When NTAG 413 DNA is positioned in the RF field, the high speed RF communication
interface allows the transmission of the data with a baud rate of up to 424 Kbit/s.
2 Features and benefits
2.1 NTAG 413 DNA features overview
2.1.1 RF Interface & Communication Protocol
Fully compliant to the ISO/IEC 14443, all parts 1 to 4, [1], [2], [3], [4]
Fully compliant to the ISO/IEC 7816-4 [7] file selection and APDU handling
Fully compliant passive target compliant to ISO/IEC18092 [16]
Features 7-byte UID according to ISO/IEC14443 – 3 [3]
Communication speed up to 424 kbps
2.1.2 NFC Forum Tag Type compliance
Fully compliant to the NFC Forum Tag 4 Type technical specification [5]
Fully compliant to NDEF data structure configurations [6].
Certified (Certification ID: 58515) NFC Forum Type 4 Tag, which ensures maximum
interoperability [6].
2.1.3 Memory organization
One 32-byte standard data file, formatted as Capability Container (CC)
One 128-byte standard data file for NDEF message
Flexible mirroring of UID, NFC Counter and CMAC in the NDEF message
Configurable separators´ positions, lengths and values (or format) within the NDEF
message
2.1.4 Security features
Secure Unique NFC Message (SUN)
Three AES 128-bit application keys featuring key versions
Incremental NFC Counter, which counts each tap
NXP Semiconductors
NT4H1321
NTAG 413 DNA Secure Unique NFC Message for direct access to web services
NT4H1321_SDS All information provided in this document is subject to legal disclaimers. © NXP B.V. 2017. All rights reserved.
Product short data sheet Rev. 3.2 — 12 October 2017
COMPANY PUBLIC 400232 3 / 16
AES based dynamic CMAC as part of the NDEF data
Three-pass mutual authentication
Plain, CMACed and encrypted communication (configurable)
Secure retrieval of NFC Counter (optional)
ECC based NXP originality signature
Tamper-resistant secure hardware
2.1.5 Deployment and user convenience
NTAG 413 DNA offers the personalization of NFC tag with different type of NDEF records
and a flexible setting of the NDEF file to define the mirrored parameters and CMAC input
offset. At personalization of of the tag, individual application keys, and accessrights to
NDEF file with those keys can be set independently.
2.2 Crypto standard
NTAG 413 DNA’s core crypto function is compliant to FIPS PUB 197 (FIPS 197)
Advanced Encryption Standard (AES) [10]. CMAC is calculated according to NIST
Special Publication 800-38B [11], and uses only 8 even bytes from last encrypted block.
2.3 NTAG 413 DNA benefits
2.3.1 Secure Unique NFC Message (SUN)
A cryptographical method which is generating Secure Unique NFC Message (SUN) in
each tap based on Secure Dynamic Messaging.
A cryptographical method which is generating Secure Unique NFC Message (SUN) in
each tap based on Secure Dynamic Messaging, see the full data sheet [9].
2.3.2 Configuration of the Secure Unique NFC Message
Mirroring items (UID, NFC Counter, CMAC), separators´ positions, lengths and values
can be defined for the NDEF data. Upon the first read command within a session, the
file content is generated according to the pre-defined settings and will be available
thereafter. The data to be included in the CMAC calculation can be configured using an
offset.
The NFC Counter is incremented on each tap and the unique response data will be
generated along with a CMAC. For connecting directly to a web-service without any
dedicated application on an NFC device, the NDEF data to be formatted to a URI record.
2.3.3 Mirroring
2.3.3.1 UID
7-byte fixed UID is programmed in the chip, and can be mirrored within the NDEF
message.

NT4H1321G0DUD/062V

Mfr. #:
Manufacturer:
NXP Semiconductors
Description:
RFID Transponders CLHW
Lifecycle:
New from this manufacturer.
Delivery:
DHL FedEx Ups TNT EMS
Payment:
T/T Paypal Visa MoneyGram Western Union

Products related to this Datasheet