RFID | NFC products such as desktop reader, industrial reader, tags or labels offer solutions for a wide range of applications. New working methods and smart offices require flexible systems. Advanced authentication systems for access, printers or login on shared PC's ensure secure, efficient processes, boost productivity and satisfaction. So it supports businesses in a globalized work environment.
How an RFID access control system is built
An RFID access control system has three parts. The credential – card, key fob or smartphone – carries a unique identifier. The reader at the door frame picks it up contactlessly at 13.56 MHz and passes it to the door controller. The controller checks the permission against the access software and releases the lock. For procurement that means three separate decisions: the credential technology, the reader form factor and the interface to the controller. Treating them as one commits you earlier than necessary.
Which credential technology to choose
The credential decides the security level of the whole installation. 125 kHz Prox is widespread but transmits its identifier unencrypted and can be cloned with freely available devices – no longer an option for new installations. MIFARE Classic does encrypt, but its Crypto1 cipher has been publicly broken since 2008 and is no longer considered secure. The current state of the art is MIFARE DESFire EV2 and EV3 with AES-128 and mutual authentication, alongside the vendor families LEGIC and HID iCLASS SE and Seos. Anyone with Prox cards in the field needs a transition phase – dual-frequency readers cover 125 kHz and 13.56 MHz at the same time, for example the rf IDEAS WAVE ID Plus Mini with MIFARE DESFire EV1 to EV3.
Wiegand or OSDP: the interface to the door controller
The second decision is often overlooked and matters for security. Wiegand has been the standard for decades but sends the identifier in clear text over a one-way line: anyone with access to the cable can read and replay it. OSDP, the SIA standard, works bidirectionally over RS-485 and, with Secure Channel, encrypts the link between reader and controller using AES – plus status messages and firmware updates over the same line. For new installations OSDP is the right choice. Readers that support both keep the path open: the LiNEGUARD Prox Line and the LiNEGUARD Keypad Line support Wiegand, OSDP V2 and SSCP; both are built to IK10 and IP65 with an EAL6+ certified secure element, the Keypad Line additionally certified under ANSSI CSPN.
Access control hardware from IDCRAFT
For the door we supply wall readers and readers with a keypad for PIN entry; for time recording and workstation login, compact USB readers. The HID OMNIKEY 5027 reads ISO 14443 A/B and ISO 15693 including iCLASS, Seos, MIFARE and DESFire and works natively as a keyboard wedge, so without drivers. The HID Multi-ISO Reader adds ISO 7816 through a SAM interface. For LEGIC environments the Elatec TWN4 Palon with LEGIC SM-4200 is available over USB, RS-485 or OSDP and sealed to IP65. On the credential side we produce RFID cards to ISO 7810 with all common HF and NFC chips, on request as hybrid cards with up to three technologies, plus epoxy key fobs. The full range is under HF | NFC stationary readers; how the form factors differ in principle is explained in our guide to RFID readers.
Procurement and advice
Before you order we clarify four points: which credential technology is already in the field, whether the door controller speaks Wiegand or OSDP, whether cards should arrive encoded and printed, and whether mobile credentials on smartphones are part of the plan. As a vendor-independent distributor we supply readers, cards and key fobs from a single source and provide samples for testing in your own installation. The technology basics are covered in What is RFID?
