NXP NTAG223 NFC Authentication Tags Now Available

We've now added NXP's NTAG223 DNA NFC chip to our extensive range of NFC products. Designed as a more economical alternative to the popular NTAG424 DNA, the NTAG223 offers secure NFC tag authentication at a lower cost, making it an attractive option for a wide range of product authentication and anti-counterfeiting applications.

The NTAG223 is now available in the majority of our custom NFC products, with plans to introduce a growing selection of stock products featuring the chip.

What is the NTAG223?

The NTAG223 DNA is an NFC authentication chip developed by NXP Semiconductors. Like the well-established NTAG424, it uses AES-128 cryptographic technology and Secure Unique NFC (SUN) authentication to help protect products against counterfeiting and unauthorised duplication. 

Unlike standard NFC chips, which can have their stored data copied onto another tag, the NTAG223 generates a unique cryptographic authentication message each time it is scanned. 

When an NFC enabled smartphone reads the tag, the chip dynamically generates authentication data incorporating a tap counter and a secure cryptographic code. This information can then be checked by an authentication server to verify that the scan originated from a genuine chip. 

The process happens in the background, allowing customers to authenticate products with a simple tap of their smartphone, without needing to install a dedicated app.

How Does the NTAG223 Compare to the NTAG424?

The NTAG223 has been designed to offer many of the core authentication benefits of the NTAG424, but with a simplified feature set and a more economical price point.

Encryption Keys

One of the key differences is the number of cryptographic keys. The NTAG424 supports five AES-128 keys, allowing more complex security configurations, access permissions and authentication functions. The NTAG223, by comparison, uses a single AES-128 key for its SUN authentication functionality.

The NTAG223 is also an NFC Forum Type 2 chip, whereas the NTAG424 is a Type 4 chip. The NTAG223 provides 144 bytes of user memory, compared with the more advanced memory and file structure of the NTAG424.

Data Retention

Importantly, the NTAG223 is specified by NXP for 10 years of data retention, compared with 50 years for the NTAG424. As not many NFC tags have been in use that long, it's difficult to know how accurate in normal use this specification is. Our experience so far is that for tags in normal, stable, indoor operating temperatures, this is likely to be an underestimation. However, as we always tell our customers, this is the datasheet spec and you need to consider this. 

Meta Data and Mirroring

For those of you familiar with the NTAG424, you will probably know that you can use different keys to dynamically include both encrypted meta data and CMAC into the URL. Additionally, the configuration allows for complete flexibility in the positioning of these, and the chip count and UID, into the URL structure.

The NTAG223 is simpler. There is essentially one setting which mirrors the CMAC into the URL (or other data field) in a standard format : {UID}x{COUNT}x{CMAC} or {UID}x{COUNT}x{TAMPER}x{CMAC} depending on the variant - NTAG223 or NTAG223 StatusDetect. 

The CMAC is calculated over the UID, count and depending on variant, tamper bytes. This is then dynamically mirrored as ASCII (letters and numbers!) into the URL in what NXP call the 'Secure Unique NFC (SUN) message authentication feature'. 

It's simpler than that NTAG424, but for vast majority of use cases, it's just as effective.  

Similarities

Despite these differences, both chips support the essential SUN authentication technology, enabling secure, dynamic authentication with a standard NFC smartphone.

For many applications, particularly high-volume product authentication, checkpoint tags, brand protection and anti-counterfeiting, the additional functionality of the NTAG424 may not be necessary. The NTAG223 therefore offers an appealing balance between security, functionality and cost.

Available Across Our Custom NFC Product Range

We can now supply the NTAG223 in the majority of our custom NFC products, including custom printed NFC labels, stickers, cards and other specialist formats.

We are also planning to introduce the NTAG223 into a selection of our standard stock products, making it easier for customers to purchase authentication grade NFC tags in smaller quantities and familiar formats.

Encoding the NTAG223

We can supply the NTAG223 products to you without encoding or you can use our high speed encoding services.

In fact, another advantage of the NTAG223 chip is that due to it's simpler structure compared to the NTAG424, our encoding service is also cheaper.  

Fully Supported by AuthNFC

The NTAG223 is also now fully supported by AuthNFC, our NFC authentication platform previously known as ixkio.

AuthNFC provides a straightforward way to deploy and manage secure NFC authentication without needing to develop and maintain your own cryptographic verification infrastructure.

When used with the NTAG223, AuthNFC can verify the cryptographic authentication data generated by the chip, allowing brands and businesses to check product authenticity when a customer scans an NFC tag.

This combination makes it possible to build a complete authentication solution, from the physical NFC tag through to the online verification process. 

A More Cost-Effective Approach to NFC Authentication

With growing demand for secure NFC technology across product authentication, brand protection, collectables, packaging and consumer engagement, the NTAG223 provides an exciting addition to our range.

By combining proven AES-128 authentication technology with a simplified chip architecture, it makes secure NFC authentication more accessible for projects where cost is an important consideration.