Every tap a cryptographic signature. Spot clones on the very first touch.
NXP NTAG 424 DNA chips with AES-128. The tag signs every read with a secret key shared only with our server. A counterfeiter can copy the URL, but not the key, and the next tap gives them away.
How the encrypted NFC tag works
The NTAG 424 DNA chip signs every read with a unique cryptographic key that only you and our server know. A clone cannot reproduce it, and we recognise it on the first tap.
- 01
Physical scan
The customer holds their smartphone to the NFC tag. A few bytes pass between chip and phone.
- 02
The chip signs
The tag computes an AES-CMAC over UID + counter with a secret key. Every tap produces a different signature.
- 03
The server checks
Our backend recomputes the signature with the same key and compares the two. It also checks that the counter is new.
- 04
Result
If the signature is valid, the customer sees the content. If not, a warning banner appears and the tag is locked after 5 attempts.
Behind the scenes: the cryptographic flow
The key K is written to the chip when the tag is produced, then kept on our server. It is never exposedin URLs or on the customer's devices.
1:1 clones
A counterfeiter can read the URL but not the key. Without it, every new tap produces invalid signatures.
Replay attacks
Copying and pasting a valid URL does not work: the counter must always increase.
Brute force
After 5 attempts with an invalid signature, the tag is locked automatically in the backend.
Available for: luxury goods, event tickets, certificates of authenticity, fine wines and spirits, official documents.
Where NTAG 424 technology makes sense
Any sector with high unit value and a counterfeiting risk. Same platform, same chips, configured batch by batch.
Fine wines and spirits
Amarone, Barolo, Champagne, single malt whisky. An NFC capsule under the foil: the customer scans it with their phone and sees at once whether the bottle is genuine. Protection against clones in grey markets.
1,000 bottles of Amarone · €549 extra per batch
Luxury cosmetics
Fragrances, premium serums, luxury packaging. A tag in the carton or under the base: one tap from the consumer = authenticity check + product page + repurchase link to the official channel.
10,000 packs · brand protection
Pharmaceuticals
Anti-tampering for packs: every box has a unique chip. Patients and pharmacists verify it with their own smartphone. Supports compliance with the EU Falsified Medicines Directive 2011/62.
EU serialisation requirements
Fashion and accessories
Bags, shoes, luxury garments. A hangtag sewn into the garment or the inside label: the buyer verifies the origin, sees the supply chain and unlocks the brand community after purchase.
Luxury collections · resale market
Watches and jewellery
A digital certificate of authenticity built into the warranty. It replaces (or complements) the paper certificate, traceable and impossible to clone.
Warranty + ownership history
Event tickets
Concerts, trade fairs, premium seating. Every ticket = a unique chip with a counter: entry only if the CMAC is valid and the counter has not been used yet. Fraud prevention against unauthorised resale.
Arenas · Stadiums · Trade fairs
Certificates and documents
Academic qualifications, diplomas, certificates of origin, artwork passports. The chip proves issue by the original body with verifiable cryptography.
Diplomas · PDO/PGI · Art
OEM spare parts
Automotive, aerospace, medical. Every part has a digital identity: authenticity is checked before fitting, blocking counterfeit parts that put safety at risk.
OEM supply chain · component tracking
Standard NFC tags vs NTAG 424 DNA
Is the price difference worth it? It depends on the value of the product and on the impact counterfeiting has on your brand.
| Feature | NTAG 213/215 (standard) | NTAG 424 DNA |
|---|---|---|
| Cloneable NFC tag (NTAG213/215) | ✓ Copied in 2 seconds with any Android app | ✗ Impossible without the AES-128 secret key |
| Unique signature per tap | None: always the same URL | AES-CMAC changes on every read (monotonic counter) |
| Replay attack | Possible: copy the URL → works anywhere | Blocked: the counter must always increase |
| Brute force | Not applicable (no signature) | Tag auto-locks after 5 invalid CMACs |
| Real-time verification dashboard | Tap count only | Status per tap: authentic / suspicious / blocked |
| Unit cost | €0.25 - €0.50 | €1.20 - €1.80 (chip + personalisation) |
How a batch is produced
The platform generates the data, you write the chips with your own machine. No hardware vendor lock-in.
- 1
Create the batch from the dashboard
From the product panel (e.g. "Amarone 2018") click "Create tag batch", set the quantity (1→10,000), anti-counterfeit ON.
- 2
Download the CSV
The system generates unique short_code + AES-128 secret_key values and gives you a CSV with a ready URL template.
- 3
Personalise the chips
Import the CSV into your NFC encoding machine (ACR122U, PN532, industrial readers). Write NDEF + Secure Dynamic Messaging with the secret_key.
- 4
Apply them to your products
Sticker under the packaging, capsule on the bottle, sewn-in hangtag: wherever you prefer.
- 5
Live verification + dashboard
Every customer tap goes through us: CMAC + counter verified, status recorded. You see authentic, suspicious and blocked taps in real time.
No NFC encoding machine?
We take care of it. You create the batch on the platform; we personalise the chips with your secret keys, print labels with your branding, run 100% QA and ship everything to you ready to apply.
Chip encoding
URL template + Secure Dynamic Messaging + a unique AES-128 key per tag. Industrial machine, no errors.
Label printing
Stickers, hangtags, capsules, premium card, fabric. Your layout, 2 revisions included.
100% QA
Every chip checked against your platform before shipping. Defects are on us.
Ready to use
Rolls or boxes labelled with the short_code range. Fits into your production line.
Indicative service price list
500 tags
€609
basic setup
1,000 tags
€990
€0.99/tag
5,000 tags
€3,690
€0.74/tag
10,000+
quote
tailored
Prices incl. VAT for setup + encoding. Chips and labels extra (or included in the Anti-counterfeiting kit). Lead times: 5-10 days (up to 1k), 10-20 days (up to 10k).
Ready to protect your brand?
Start with 500 tags. For larger volumes (5,000+) we have dedicated price lists and supply-chain consulting. Delivery in 10-15 days. Outside Italy? Request a quote.