Card-based access control assigns every user a credential — a card, key fob, or tag — that a reader identifies at the door. Present the card, and a controller checks your permissions and releases the lock in milliseconds while logging exactly who entered and when. It is the most widely deployed access technology in offices, factories, hospitals, and residential compounds across Egypt. But not all cards are equal: a cheap 125 kHz proximity card and an encrypted 13.56 MHz smart card offer very different levels of security. This guide explains RFID, Mifare, and smart-card credentials so you can choose the right one for each door.
Key Takeaways
- Card systems balance cost, convenience, and security — 125 kHz proximity cards are cheap but easily cloned, while encrypted smart cards resist duplication.
- A complete system combines credentials, readers, a controller, management software, and an electric lock.
- Mifare Classic is common but its cipher is broken; Mifare DESFire EV2/EV3 is the secure choice for new projects.
- Cards can be lost or copied, so pair them with a PIN or biometrics on high-security doors.
- Use OSDP wiring instead of legacy Wiegand to encrypt the link between reader and controller.
How Card-Based Access Control Works
Every card system is built from five parts: the credential you carry, the reader mounted beside the door, the controller (or panel) that makes the decision, the management software where you enrol users and set rules, and the electric lock — usually a magnetic lock or an electric strike. When you present a card, the reader captures its unique identifier (UID) and passes it to the controller. The controller checks that UID against its database: Is this card valid? Is it allowed on this door? Is it within the permitted time schedule? If everything matches, the controller releases the lock and writes an entry to the audit log. Because the controller stores the credential database locally, the doors keep working even if the network or the server goes offline. Readers connect over the legacy Wiegand protocol or, in modern installations, over OSDP on an RS-485 bus, which is bidirectional and can be encrypted.
RFID Proximity Cards (125 kHz)
The 125 kHz low-frequency proximity card — sold as EM4100 or HID Prox — is the workhorse of budget access control. It stores a fixed, read-only UID and transmits it whenever it enters the reader's field, at a range of a few centimetres. Proximity cards are inexpensive, universally supported, and simple to issue, which makes them popular for time-attendance terminals, internal office doors, and parking barriers. Their weakness is security: the UID is sent in the clear with no encryption, so anyone with a copier costing a few dollars can clone the card in seconds. Use 125 kHz proximity only for low-risk applications, and never as the sole credential on doors protecting cash, data, or people.
Mifare and 13.56 MHz Smart Cards
Smart cards operate at 13.56 MHz and add real computing to the credential. Mifare Classic (1K or 4K) organises memory into sectors and was for years the default for access and transport cards — but its proprietary Crypto-1 cipher was broken long ago, and a Classic card can now be cloned with free tools. For any new deployment, move up to Mifare Plus or, better, the DESFire family (EV1, EV2, EV3). DESFire uses AES and 3DES encryption with mutual authentication and secure messaging, so the card and reader prove their identities to each other before any data is exchanged, which makes practical cloning essentially impossible. Smart cards can also hold several applications at once — building access, cashless canteen payment, and photo ID — on a single ISO 14443 contactless credential.
Beyond Plastic: Fobs, Tags, and Mobile Credentials
The credential does not have to be a card. The same chip lives inside key fobs, silicone wristbands for gyms and pools, and adhesive tags you can stick to a phone case. Printable ISO cards double as photo-ID badges, which is convenient for staff identification. The fastest-growing option is the mobile credential: a virtual card issued to a smartphone over NFC or Bluetooth Low Energy (BLE). Mobile credentials cut the cost and logistics of printing and distributing plastic, are issued and revoked instantly from software, and are far harder to clone than a proximity card because they rely on the phone's secure element. Many Egyptian businesses now run a hybrid scheme — smart cards for staff and mobile credentials for managers and visitors.
Security Risks and How to Close Them
Every card technology has failure modes worth planning for. Cloning affects 125 kHz proximity and Mifare Classic — answered by moving to DESFire. Tailgating, where a second person slips through behind a valid user, is countered with turnstiles, mantraps, or anti-passback rules that stop the same card being used twice in the same direction. Lost or stolen cards are the easiest risk to manage: deactivate the credential in software and it is rejected at every reader within seconds — something a mechanical key can never offer. The most overlooked weakness is the wiring itself. The old Wiegand protocol sends the card number unencrypted between reader and controller, and a small device can sniff or replay it, while OSDP with Secure Channel encrypts that link. For critical doors, require two factors — card plus PIN, or card plus fingerprint.
Choosing and Deploying the Right Credential
Match the technology to the risk of each door rather than buying one card type for the whole building. Low-risk internal doors and attendance terminals can stay on inexpensive proximity cards. Main entrances and areas holding cash, stock, or personal data deserve DESFire smart cards, and server rooms, cash offices, and pharmacies should demand two-factor entry. Plan the issuance and revocation workflow before go-live: who prints cards, how a leaver's credential is cancelled the same day, and how visitor passes expire automatically. Specify OSDP readers so the installation is future-proof, size the controller for the number of doors plus growth, and decide the lock behaviour for each door — fail-safe magnetic locks that release on a fire alarm for escape routes, and fail-secure electric strikes where security must hold. FastEgy designs this mix for each site.
Frequently Asked Questions
What is the difference between RFID and Mifare cards?
RFID proximity cards work at 125 kHz and broadcast a fixed, unencrypted UID, so they are cheap but easy to clone. Mifare cards work at 13.56 MHz; the modern DESFire versions add AES encryption and mutual authentication, which makes them far more secure and practically impossible to duplicate.
Can access control cards be cloned?
125 kHz proximity cards and Mifare Classic cards can be cloned in seconds with cheap tools. Encrypted DESFire EV2 and EV3 smart cards cannot be practically cloned. For sensitive doors, use DESFire and add a PIN or fingerprint as a second factor.
How many cards can one access control system manage?
It depends on the controller and software. Hikvision controllers typically manage thousands of credentials per door and tens of thousands across a system, each with its own time schedules and door-group permissions.
What should I do when a card is lost?
Deactivate it immediately in the management software. The lost card is then rejected at every reader within seconds, and you can issue a replacement. Instant revocation is the biggest advantage of cards over mechanical keys.
Should I wire readers with Wiegand or OSDP?
Choose OSDP over an RS-485 bus with Secure Channel enabled. It encrypts the link between reader and controller, supports longer cable runs and bidirectional communication, and resists the sniffing and replay attacks that affect legacy Wiegand wiring.
Related Guides
- Biometric Access Control: Fingerprint, Facial & Iris
- Turnstile Integration with Surveillance Cameras
- Video Intercom Systems for Your Door
- The Complete Hik-Connect Remote Access Guide
Deploy Card Access Control with FastEgy
FastEgy supplies and installs complete card-based access control across Egypt — Hikvision readers, controllers, DESFire smart cards, electric locks, and management software, configured for your doors and integrated with your CCTV. Talk to our team for a site survey and a design matched to each entrance. Call 17586 or browse our access control range.
Call the FastEgy hotline 17586 or reach us through the contact page for a free consultation.