KScrigno

KScrigno is an application designed to manage files and program dynamic URLs on NXP MIFARE DESFire EV2 and EV3 NFC tags.

It is useful for storing confidential information on the tag and for implementing NFC-based identification, attendance monitoring, and tracking services in conjunction with the KScrigno Dynamic Url Server.

Tag Structure and Management

The MIFARE DESFire tags used by KScrigno organize information in a flexible and secure hierarchical structure.

A single tag can contain multiple applications, a concept similar to the idea of a “folder” used in operating systems. Within each application, up to 32 files can be managed.

The main limitation is the amount of memory available on the tag, which can be up to 16 KB.

Security and Access Keys

The tag is protected by a sophisticated system of authentication keys. The Master Key is the primary key used to manage the tags and is associated with a profile.

Each individual application is also protected by a specific Application Key.

This organization makes it possible to create configurations with different levels of access while keeping the data stored on the same tag logically separated.

Profiles, Applications, and Files

KScrigno allows users to manage multiple profiles, applications, and files.

Profiles define how tags can be accessed and managed. Typically, all tags belonging to a specific project are associated with a single profile.

Applications and their associated files allow information to be organized according to a customized structure.

Dynamic URLs

One of KScrigno’s key features is the ability to program the tag with a dynamic URL in NDEF format.

The NDEF format allows the URL to be read without requiring a specific app: simply bring an Apple or Android device close to the tag to open the URL in the device’s default browser.

The tag generates a URL containing a counter that is incremented each time the tag is read. The dynamic URL cannot be altered because it is protected by a MAC code, a digital seal generated by the tag.

This functionality in conjunction with the KScrigno Dynamic Url Server is particularly suitable for integration with management systems, where simply reading the tag can trigger a specific action and record an event.

The main application scenarios include:

  • Guard Tour Management, using tags as checkpoints that an operator must reach and scan along a designated route.
  • Attendance monitoring, to quickly and automatically record check-in and check-out events.
  • Passage tracking, associating each scan with a specific tag, checkpoint, operator, date, and time.
  • Service activation, in scenarios where the physical presence of a person must be verified before a service can be activated.

Files

The application enables the storage of information on tags. Access protection using a 128-bit AES key, together with encryption during NFC communications, provides an appropriate level of security for users who need to store small amounts of data using a technology that does not rely on the Cloud.

Transactions with the Tag can optionally be protected by the “Redundant” function. At the cost of duplicating the storage space used, this feature protects data against interrupted transactions and potential data corruption.