MIFARE Classic vs FeliCa
Card vs CardClassic is a legacy contactless card with broken security, while FeliCa is a high-performance proprietary system with strong mutual authentication.
MIFARE Classic vs FeliCa
MIFARE Classic and FeliCa are the two most-deployed contactless card technologies globally — MIFARE Classic dominates Europe and much of Asia; FeliCa dominates Japan and is present in Hong Kong (Octopus). Both operate at 13.56 MHz but use entirely different protocols, security architectures, and transaction speeds.
Overview
MIFARE Classic is an NXP product following ISO 14443ISO 14443StandardStandard for contactless smart cards.Click to view → Type A at 106 kbps. Its Crypto-1 cipher has been cryptanalytically broken since 2008. A MIFARE Classic card carries 1 KB or 4 KB of EEPROMEEPROMHardwareNon-volatile card memory for data.Click to view → divided into 16/64 sectors, each protected by 48-bit Crypto-1 keys. Read/write operations are sector-by-sector. Transaction time at a transit gate is approximately 100–300 ms depending on the number of sectors accessed.
FeliCa is a Sony invention standardised as ISO 18092 (NFC-F) and JIS X 6319-4, operating at 13.56 MHz but at 212/424 kbps — twice the data rate of MIFARE Classic. FeliCa uses Sony's FeliCa OS with a proprietary command set and data structure organised in Systems, Services, and Blocks. FeliCa's security uses 3DES3DESCryptographyLegacy triple-DES symmetric cipher in payment smart cards.Click to view → (legacy) or AESAESCryptographyNIST symmetric block cipher for smart card encryption.Click to view →-128 (FeliCa Plug) with mutual authentication. Critical to its transit dominance: FeliCa achieves a tap-to-transaction time of under 200 ms — fast enough for full-speed turnstile gates without slowdown.
Key Differences
- Standard: Classic is ISO 14443 Type A; FeliCa is ISO 18092 / JIS X 6319-4 (NFC-F)
- Data rate: Classic 106 kbps; FeliCa 212/424 kbps
- Transaction speed: Classic ~100–300 ms; FeliCa ~50–200 ms
- Crypto: Classic uses Crypto-1 (broken); FeliCa uses 3DES or AES-128
- Data structure: Classic uses sector/block layout; FeliCa uses System/Service/Block hierarchy
- Geographic dominance: Classic in Europe, China, many Asian markets; FeliCa in Japan, Hong Kong, Taiwan
- NFC phone support: Both supported in NFC phones — FeliCa via NFC-F (standard in iPhone 8+ in Japan, all Android)
- Multi-application: FeliCa supports multiple Systems on one card; Classic has limited multi-app support
Use Cases
MIFARE Classic (legacy):
- European transit systems (Amsterdam GVB, many legacy city cards)
- Chinese transit systems (some cities used Classic before upgrading)
- Access control (legacy deployments, security now compromised)
FeliCa dominates:
- Tokyo Metro, JR East (Suica), Osaka (ICOCA) — the world's busiest transit networks
- Hong Kong Octopus (used for retail, parking, library, vending — not just transit)
- Taiwan EasyCard
- Mobile payments in Japan: Osaifu-Keitai (FeliCa NFC on Android) and Apple Pay Suica (iPhone with FeliCa chip)
- Convenience store payments in Japan (Family Mart, 7-Eleven, Lawson)
Verdict
For transit applications requiring the highest gate throughput, FeliCa's speed advantage is measurable and operationally significant. Tokyo's Shinjuku station processes millions of taps daily — sub-200 ms FeliCa transactions make this possible without queuing. For security, FeliCa's intact 3DES/AES-128 is categorically superior to MIFARE Classic's broken Crypto-1. However, FeliCa's geographic dominance is fundamentally Japan and adjacent markets — global interoperability requires ISO 14443 (MIFARE DESFire or EMVEMVApplicationGlobal chip payment card standard.Click to view → Contactless). New transit systems outside Japan have no compelling reason to choose FeliCa over MIFARE DESFire EV3, which offers AES-128 security at ISO 14443-4 standard with global terminal support.
推荐
FeliCa for high-speed transit; avoid Classic for new deployments due to Crypto-1 vulnerability.
常见问题
Each comparison provides a side-by-side analysis covering interface type, chip architecture, security certification, communication protocol, application domains, and cost. Card-vs-card comparisons focus on specific products, while cross-technology comparisons evaluate broader categories like Contact vs Contactless or EMV vs MIFARE.