NXP Semiconductors
MF1S70YYX_V1
MIFARE Classic EV1 4K - Mainstream contactless smart card IC for fast and easy solution development
MF1S70yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2017. All rights reserved.
Product data sheet Rev. 3.2 — 23 November 2017
COMPANY PUBLIC 279332 7 / 37
Bit count checking
Bit coding to distinguish between "1", "0" and "no information"
Channel monitoring (protocol sequence and bit stream analysis)
8.4 Three pass authentication sequence
1. The reader specifies the sector to be accessed and chooses key A or B.
2. The card reads the secret key and the access conditions from the sector trailer. Then
the card sends a number as the challenge to the reader (pass one).
3. The reader calculates the response using the secret key and additional input. The
response, together with a random challenge from the reader, is then transmitted to the
card (pass two).
4. The card verifies the response of the reader by comparing it with its own challenge
and then it calculates the response to the challenge and transmits it (pass three).
5. The reader verifies the response of the card by comparing it to its own challenge.
After transmission of the first random challenge the communication between card and
reader is encrypted.
8.5 RF interface
The RF-interface is according to the standard for contactless smart cards ISO/IEC
14443A.
For operation, the carrier field from the reader always needs to be present (with short
pauses when transmitting), as it is used for the power supply of the card.
For both directions of data communication there is only one start bit at the beginning of
each frame. Each byte is transmitted with a parity bit (odd parity) at the end. The LSB of
the byte with the lowest address of the selected block is transmitted first. The maximum
frame length is 163 bits (16 data bytes + 2 CRC bytes = 16 × 9 + 2 × 9 + 1 start bit).
8.6 Memory organization
The 4096 × 8 bit EEPROM memory is organized in 32 sectors of 4 blocks and 8 sectors
of 16 blocks. One block contains 16 bytes.
NXP Semiconductors
MF1S70YYX_V1
MIFARE Classic EV1 4K - Mainstream contactless smart card IC for fast and easy solution development
MF1S70yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2017. All rights reserved.
Product data sheet Rev. 3.2 — 23 November 2017
COMPANY PUBLIC 279332 8 / 37
001aan021
Byte Number within a Block
15141312111098765
Key A Access Bits Key B
43210Block
15
Sector
39
14
13
0
Description
Sector Trailer 39
Data
Data
: :
: :
: :
: :
: :
Data
1 Data
2 Data
: :
: :
: :
Key A Access Bits Key B1532
14
13
0
Sector Trailer 32
Data
Data
: :
: :
Data
1 Data
2 Data
Key A Access Bits Key B
2
1
Sector Trailer 31
Data
Data
0 Data
331
Key A Access Bits
Manufacturer Data
Key B
2
1
Sector Trailer 0
Data
Data
0 Manufacturer Block
30
Figure 5. Memory organization
8.6.1 Manufacturer block
This is the first data block (block 0) of the first sector (sector 0). It contains the IC
manufacturer data. This block is programmed and write protected in the production test.
The manufacturer block is shown in Figure 6 and Figure 7 for the 4-byte NUID and 7-byte
UID version respectively.
NXP Semiconductors
MF1S70YYX_V1
MIFARE Classic EV1 4K - Mainstream contactless smart card IC for fast and easy solution development
MF1S70yyX_V1 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2017. All rights reserved.
Product data sheet Rev. 3.2 — 23 November 2017
COMPANY PUBLIC 279332 9 / 37
001aan010
1514131211109876543
NUID Manufacturer Data
Block 0/Sector 0
21Byte 0
Figure 6. Manufacturer block for MF1S503yX with 4-byte NUID
001aam204
1514131211109876543
UID Manufacturer Data
Block 0/Sector 0
21Byte 0
Figure 7. Manufacturer block for MF1S500yX with 7-byte UID
8.6.2 Data blocks
One block consists of 16 bytes. The first 32 sectors contain 3 blocks and the last 8
sectors contain 15 blocks for storing data (Sector 0 contains only two data blocks and the
read-only manufacturer block).
The data blocks can be configured by the access bits as
read/write blocks
value blocks
Value blocks can be used for e.g. electronic purse applications, where additional
commands like increment and decrement for direct control of the stored value are
provided
A successful authentication has to be performed to allow any memory operation.
Remark: The default content of the data blocks at delivery is not defined.
8.6.2.1 Value blocks
Value blocks allow performing electronic purse functions (valid commands are: read,
write, increment, decrement, restore, transfer). Value blocks have a fixed data format
which permits error detection and correction and a backup management.
A value block can only be generated through a write operation in value block format:
Value: Signifies a signed 4-byte value. The lowest significant byte of a value is stored
in the lowest address byte. Negative values are stored in standard 2´s complement
format. For reasons of data integrity and security, a value is stored three times, twice
non-inverted and once inverted.
Adr: Signifies a 1-byte address, which can be used to save the storage address of a
block, when implementing a powerful backup management. The address byte is stored
four times, twice inverted and non-inverted. During increment, decrement, restore and
transfer operations the address remains unchanged. It can only be altered via a write
command.
Figure 8. Value blocks

MF1S7031XDUF/V1V

Mfr. #:
Manufacturer:
NXP Semiconductors
Description:
RFID Transponders MIFARE Classic EV1 4K - Mainstream contactless smart card IC for fast and easy solution development
Lifecycle:
New from this manufacturer.
Delivery:
DHL FedEx Ups TNT EMS
Payment:
T/T Paypal Visa MoneyGram Western Union