NFC Tag Authentication Explained - An NFC Pro Tutorial from Seritag

Learn how authentication NFC tags work and how they can help protect brands from counterfeit goods and products.
This is an NFC Pro tutorial from Seritag explaining how authentication NFC tags such as NXP's NTAG424, NTAG223, NTAG224 and NTAG426 differ from standard NFC tags. The tutorial provides information on how they work, how they can be used and why they are being used.
Authentication NFC tags have a wide range of uses including anti-counterfeit and connecting physical assets to NFT's and the Metaverse.
Seritag is a worldwide supplier of NFC tags and products and a market leader in the provision of authentication tags. Our Ixkio tag management platform is specifically designed to allow companies to leverage the power of both standard and authentication tags quickly and easily.
Authentication NFC tags provided by seritag.com
Authentication tag management software by ixkio.com
00:10 - Standard v. authentication chips
00:46 - How auth tags work
01:35 - Encoding authentication tags
03:23 - Three ways to use auth tags
04:14 - Using an API
05:09 - Using a Redirect
06:00 - Using Direct Response
06:26 - Why use Authentication NFC tags ?

[@baiomarlaye3165]

This is the best explanation I've found so far thank you

[@user-rl6tw4ds8j]

Loving the info. Can I get in touch with one of your reps ? Wanting to talk about possibilities with the NFC garment labels for my clothing business.

[@SeritagNFCTags]

Sure. Just drop an email to [e-mail] and we are happy to help.

[@fuji_hakayito]

Where can i read more on how the decryption works? How to decrypt the url sent to the server, back to the parameters/variables that can be checked with an MySQL database?

[@SeritagNFCTags]

There's information on how to do this within the NTAG424 datasheet. Alternatively, you can use an API service such as ixkio.com

[@gypsydog7092]

Can these authentication nfc tags also be used as a proof of presence ? For example if they were placed in locations around a building could they ensure that a user was actually next to the tag when it was scanned ?

[@SeritagNFCTags]

They can. As auth NFC tags can't be copied, it's possible to use them as location points and proof of presence. This makes them more suitable than standard NFC tags or QR codes for security/round management. We've already done a number of projects where authentication tags have been used like this. For example, we had a construction company using the tags as 'touch' points on heavy machinery. By attaching the touch points at various locations around the machines, the operator had to physically scan them as they inspected the equipment. The authentication feature acted as additional level of security and aided compliance reporting. The implementation can be the same as any other - typically redirection or API.

[@1RACKZ]

is there any way to bypass or fake authentication?

[@SeritagNFCTags]

Simple question but a complicated answer. With regards the tags themselves, then essentially no. Without having the encryption keys then it's safe to say they couldn't be 'faked'. However, a lot will depend how you configure your setup. For example, assume if you scan the tag, hits a script to check if the tag is authentic and then - if good - redirects to an 'authenticated' page. That page needs to be publicly visible and therefore someone could copy that page and put a link to it directly on another tag. Someone scanning the new tag could then be directed to go straight to the 'authenticated' page - a fake authentication. Therefore, you need to design the landing page, etc, in a way to prevent that (for example ixkio.com uses a traceback system to prevent unwanted direct hits). There is also the risk of one-time authentication link copy. This is a relatively simple problem and low risk. We've put an explainer to this on Seritag at : seritag.com/qa/what-is-onetime-link-fraud-on-authentication-nfc-tags