The common smart cards in life are mainly IC cards and ID cards, CPU cards, and M1 cards. So what are the differences between them and how to distinguish and choose?
ID card: Passively transmits a unique ID number through radio frequency (RFID), without storage and computing capabilities.
One-way communication (card reader → ID card), the frequency is usually 125kHz.
Disadvantages: The ID number is fixed and easy to copy (cloning can be done using a card reader + blank card).
IC card (including M1 card): Built-in EEPROM storage chip, supports data reading and writing (such as balance, records). Two-way communication (contactless 13.56MHz), authentication key required.
M1 card: A type of IC card (Philips' Mifare Classic series).
Storage capacity 1KB, divided into 16 sectors, each sector has an independent key.
Security flaws: cracked in 2008 (the vulnerability is in the CRYPTO1 encryption algorithm).
CPU card: Built-in CPU, operating system (such as COS) and encryption coprocessor. Support ISO/IEC 14443 protocol, dynamic encryption (temporary key generated for each transaction).
Advantages: anti-copying, anti-tampering (support SM4, 3DES and other algorithms), can run multiple applications (such as supporting medical insurance, public transportation, and banks at the same time).
Card type |
Technical principle |
Security |
Function |
Typical applications |
Representative models |
ID |
Contains only read-only ID number (no storage and calculation capabilities) |
Very low (easy to copy) |
ID Identification |
Access control, attendance, sign-in |
EM4100、TK4100 |
IC |
Contains storage chip (can read and write data) |
Medium-low (encryption at rest) |
Data storage, simple transactions |
Bus cards, membership cards, prepaid cards |
Mifare S50(M1) |
CPU |
Built-in microprocessor (operating system + encryption algorithm) |
High (dynamic encryption) |
Complex transactions, multi-application management |
Bank card, social security card, electronic passport |
Java Card, SIM Card |
M1 |
A type of IC card (contactless RFID) |
Medium (Cracked) |
Small amount payment, access control |
Campus card, subway card |
Mifare Classic 1K |
Security comparison
1. ID card: no encryption, ID number plain text transmission → only suitable for low-security scenarios.
2. M1 card: static encryption (CRYPTO1 algorithm has been cracked) → other security measures are required.
3. Ordinary IC card: support static key authentication → suitable for small payments.
4. CPU card: dynamic encryption + physical anti-attack → financial-level security.
How to distinguish these cards?
Look at the chip: ID card, no contact, usually marked with "EM" or "ID";IC card/M1 card, contactless, may have a "Mifare" logo;CPU card with metal contacts (contact) or hidden security chip (contactless).
Card reading test: Use a card reader to read. If you can only get the ID number → ID card; if you can read and write data → IC card; if you support complex instructions → CPU card.
When choosing a card type, you can choose according to actual needs. If you need to pursue low cost and simple identification, then an ID card is enough; if you need data storage and micropayments, then an IC card (M1 card) is more suitable (pay attention to security risks). If you need higher security and multiple applications such as finance and government scenarios, then a CPU card is recommended, and then choose a suitable smart card reader according to the card type.