Campus Photo-ID Cards

RFID Student ID Cards

One-Card Campus Credential

Tall stack of plain white PVC RFID cards on a white background

Quick answer

RFID student ID cards consolidate dormitory access, library self-service, meal-plan / declining-balance payments, print-release, exam authentication and campus-transit onto a single ISO/IEC 7810 ID-1 credential. The 2026 campus stack runs MIFARE DESFire EV3 (AES-128, multi-application file-system) or dual-frequency HF + LF for phased legacy-reader migration, integrated with CBORD / Transact dining POS, SirsiDynix / Ex Libris library ILS, PaperCut print-release and HID / ASSA ABLOY / SALTO access readers — and increasingly complemented by Apple Wallet / Google Wallet mobile student IDs on eligible devices.

  • One card, many applications. DESFire EV3 file-system firewalls access, library, meal-plan and print credentials in separate AES-128 applications on a single chip.
  • Photo-ID personalisation at orientation scale: 2,000–10,000 cards in 2 weeks, dye-sub or retransfer print, sorted by residence hall or department for distribution.
  • Apple Wallet + Google Wallet student-ID-ready — physical card issuance plus CBORD, Transact eAccounts or Atrium-powered mobile credential provisioning.
10+ Years ISO 9001 500+ Clients 50+ Countries

At a glance

Use these short answers to decide whether this page matches the project before moving into the detail.

Chip selection for campus programmes

MIFARE DESFire EV3 — ISO/IEC 14443-4 + AES-128 + Common Criteria EAL5+; multi-application file-system firewalls access, library, meal-plan, print credentials on one chip...

Card body + personalisation

ISO/IEC 7810 ID-1 (85.6 × 54 × 0.76–0.84 mm) PVC / PVC+PET-G composite; overlay-laminated for 3–5 year daily-wear life. Dye-sub personalisation on Evolis Primacy 2 / Zeb...

Campus application stack
  • Access-control: HID, SALTO XS4, ASSA ABLOY Aperio, Kantech, dormakaba readers at dorm doors, academic buildings, labs, lifts.
  • Library ILS: SirsiDynix Horizon, Ex Libris Alma, Koha, Evergreen — campus card = library patron credential.
  • Dining / declining-balance POS: CBORD Odyssey / NetCard, Transact eAccounts, Atrium, Heartland Campus Solutions.
  • Print-release: PaperCut MF, uniFLOW, Equitrac — tap-to-release print queue at MFPs.
  • Exam authentication: proctor station verifies photo + scans RFID to confirm enrolment in the exam's course registration.
  • Transit: campus shuttle farebox or regional transit-agency interoperability (UCLA / Michigan / UT Austin patterns).
FERPA and student-data posture
  • FERPA (Family Educational Rights and Privacy Act) — 20 U.S.C. § 1232g / 34 CFR Part 99 — governs US student education records including campus-card usage logs.
  • Directory information (name, dates of enrolment) may be disclosed; non-directory (grades, attendance via card-log correlation) requires consent.
  • Campus-card systems typically hold access logs for 12–24 months; retention policy must be documented per FERPA.
  • EU campuses fall under GDPR Art. 6 + Art. 9 (special-category if biometric photo is linked); legitimate-interest + necessity for access-control is the standard basis.
Apple Wallet + Google Wallet student IDs
  • Apple Campus Cards (Apple Wallet) launched October 2019 — Duke, University of Alabama, Oklahoma, Johns Hopkins, Santa Clara, Mercer, Temple, Vanderbilt and others in first cohort.
  • Student provisions a mobile credential to iPhone + Apple Watch; physical card remains for readers without NFC support and for exam proctor photo-ID requirements.
  • Google Wallet student IDs shipped in 2022 — expanded in 2023–2024; similar provisioning flow on Android.
  • Provisioning vendors: Transact eAccounts, CBORD, Atrium-powered Atrium Connect drive most North American mobile-credential deployments.
  • Chip-based physical card is still issued — mobile credential complements rather than replaces for regulatory photo-ID workflows.
Orientation-scale issuance
  • Incoming-class volume: 2,000–10,000 cards in a 2-week orientation window for a mid-size R1 university.
  • Digital-print line runs 2,000 unique cards/day on a dye-sub + encoding pipeline.
  • Cards sorted by residence hall, department, class-year or alphabetical for distribution at orientation desks.
  • Pre-encoded access permissions (dorm group, meal-plan tier, library patron status) written during production — student uses card on day one without a first-tap provisioning event.
Replacement churn and replacement-issuance model
  • Lost / damaged / forgotten card rates run 8–15% per semester across the student population.
  • A 20,000-student university reissues 3,200–6,000 cards per semester on top of the incoming-class volume.
  • Pre-encoded blank cards + stored artwork template support same-day issuance at a card-office desktop printer; central vendor maintains the chip stock and anti-counterfeiting laminate.
  • Mobile credential (Apple Wallet / Google Wallet) reduces card-office desk traffic but does not eliminate it — regulatory photo-ID workflows still demand physical card.
Anti-counterfeiting stack (exam authentication)
  • Holographic overlay laminate — kinetic pattern visible under light; defeats consumer-printer reproduction.
  • UV-reactive ink panels — invisible ambient, visible under 365 nm UV lamp at proctor desk.
  • Microtext — 0.25 mm font in guilloché-style background; survives dye-sub heat, collapses under reprint.
  • Laser-engraved student ID number — burned into card body, cannot be overprinted.
Volume + pricing envelope
  • MIFARE Classic 1K custom-printed + encoded: USD 0.30–0.60 / card at volume.
  • MIFARE DESFire EV3 custom-printed + encoded: USD 0.80–1.50 / card at volume.
  • Dual-frequency DESFire EV3 + EM4100 custom-printed + encoded: USD 1.60–2.40 / card at volume.
  • Anti-counterfeiting overlay stack adds USD 0.10–0.30 / card depending on spec.
Durability testing
  • ISO/IEC 10373-1 dimensional, bending, torsion, peel, UV exposure — standard card-body test battery.
  • ISO/IEC 10373-6 contactless coupling and antenna integrity.
  • Daily-wear pocket/lanyard carry 3–5 years on composite PVC; 5–10 years on PET-G monolithic.
  • Badge-on-badge RF coupling (two cards in same holder) is the #1 field failure — educate users or issue two-slot wallets.
Mobile credential ↔ physical card data consistency
  • Mobile credential and physical card share the same campus-card ID number — access-control and POS see one identity regardless of the form factor presented.
  • Key diversification per NXP AN10922 ensures the same student's mobile and physical credentials derive unique per-card AES keys — compromise of one does not compromise the other.
  • Revocation flows: campus card office disables both the physical card UID and the mobile pass token when a student loses a device or leaves the institution.
  • Provisioning flow integrates with the campus SSO / SIS — student requests Apple Wallet / Google Wallet credential from the campus-card portal after identity verification.
Procurement compliance package
  • Chip batch certificates (NXP / HID) with wafer lot + AFI / key-version traceability.
  • ISO/IEC 14443 / ISO/IEC 10373-1 conformance test reports.
  • RoHS / REACH / Prop-65 material safety declarations.
  • FERPA-aligned data-handling statement covering card-issuance workflow.
  • Optional: PCI DSS alignment statement for declining-balance meal-plan programmes that hold stored value.

What a 2026 campus card actually is

A student ID card is the single credential through which a student interacts with every campus system — dormitory access, library self-service, dining declining-balance, print-release, exam proctoring and increasingly campus transit. The chip inside has to firewall each application with AES-128 crypto, the printed surface has to survive 3–5 years of lanyard wear and proctor inspection, and the issuance workflow has to ship 10,000 cards in 2 weeks for orientation.

  • 8–15%replacement churn per semester
  • 2,000–10,000orientation-issuance window
  • ISO 7810 ID-1standard campus card body
  • DESFire EV32026 default multi-app chip

The 2026 default chip is MIFARE DESFire EV3. Its file-system / application-tree model lets the campus card office issue separate AES-128 applications for access, library, meal-plan and print-release — a compromise of one application key does not cross-contaminate the others. HID iCLASS SE / SEOS is the US default on HID reader estates. MIFARE Classic 1K remains a residual budget chip for single-application deployments (gym / events / library-only) where Crypto-1 is an acceptable risk posture.

The 2026 card office is also provisioning Apple Wallet and Google Wallet mobile credentials alongside the physical card. Duke, University of Alabama, Oklahoma, Johns Hopkins and the other 2019–2024 cohort rolled out Apple Campus Cards through Transact eAccounts, CBORD and Atrium Connect; Google Wallet student IDs expanded from 2022. Mobile credentials reduce card-office desk traffic but do not eliminate the physical card — regulatory exam-proctor photo-ID workflows still require a laminated photo card.

DESFire EV3 vs iCLASS SE vs MIFARE Classic 1K — pick the chip for the campus stack

MIFARE DESFire EV3 (AES-128 multi-application)

  • ISO/IEC 14443-4 + AES-128 mutual authentication + Common Criteria EAL5+. The chip is tamper-resistant to known side-channel attack classes.
  • File-system / application-tree: separate AES-128 applications for access, library, meal-plan, print-release — each with independent keys.
  • Cross-vendor reader support — HID Signo, ASSA ABLOY Aperio, SALTO XS4, Nedap AEOS, CBORD readers, Transact eAccounts readers all read EV3 natively.
  • Apple Wallet + Google Wallet student-ID provisioning paths (Transact eAccounts, CBORD, Atrium Connect) built around DESFire EV3 / EV2 key infrastructure.
  • Random UID option prevents unauthorised fleet-linkage at the reader level — addresses FERPA / GDPR student-linkage risk.

vs HID iCLASS SE / SEOS and MIFARE Classic 1K

  • HID iCLASS SE / SEOS — AES-128 + secure identity object; US campus default on HID reader estates; Apple Wallet via HID Origo + Transact eAccounts.
  • MIFARE Classic 1K — Crypto-1 broken since 2007–2008 (Nohl / Plötz / Garcia academic papers); cloneable in < 60 s on a EUR 150 Flipper Zero. Residual use for budget-optimised single-application (gym / events / library-only) cards, not dorm access or stored-value.
  • Dual-frequency DESFire EV3 + EM4100 — bridges phased migration from legacy 125 kHz reader estates; 2–3x cost of single-chip.
  • Migration path: Classic 1K → Plus SE SL3-only AES → DESFire EV3 full multi-application remains the upgrade ladder for mid-programme deployments.

Mobile credentials and physical cards — the 2026 hybrid campus

Proud Tek student ID card — specifications and issuance workflow

  1. Step 1
    Chip stock: MIFARE DESFire EV3 (AES-128, EAL5+), MIFARE DESFire EV2 renewal, MIFARE Classic 1K budget, HID iCLASS SE / SEOS, dual-frequency DESFire EV3 + EM4100.
  2. Step 2
    Card body: ISO/IEC 7810 ID-1 PVC / PVC+PET-G composite 0.76–0.84 mm; PET-G monolithic for 5–10 year extended durability.
  3. Step 3
    Photo-ID personalisation: dye-sub (Evolis Primacy 2 / Zebra ZXP Series 7 / Magicard 600) + retransfer (Entrust Sigma DS4 / Magicard Ultima); 2,000 unique cards/day throughput.
  4. Step 4
    Anti-counterfeiting stack: holographic overlay + UV-reactive + microtext + laser-engraved student ID number.
  5. Step 5
    Pre-encoding: access-group permissions, library patron status, meal-plan tier, print-release account written at production — cards work on day one.
  6. Step 6
    Compliance package: chip batch certificate, ISO/IEC 14443 conformance, ISO/IEC 10373-1 durability, RoHS / REACH / Prop-65, FERPA-aligned data-handling statement.
  7. Step 7
    MOQs: 200 custom-printed, 100 blank pre-encoded. Lead time 10–15 business days custom; rush 7–10 days to 5,000 cards. Replacement stock held year-round.

Campus application coverage — the one-card model

  • Dormitory + academic building access — HID Signo, SALTO XS4, ASSA ABLOY Aperio, Kantech, dormakaba readers; per-building and per-door time-profile permissions.
  • Library self-service + patron authentication — SirsiDynix Horizon, Ex Libris Alma, Koha, Evergreen; book check-out, study-room booking, interlibrary loan.
  • Dining / declining-balance + retail POS — CBORD Odyssey / NetCard, Transact eAccounts, Atrium, Heartland Campus Solutions; meal-plan tier enforcement + stored-value.
  • Print-release queue at MFPs — PaperCut MF, uniFLOW, Equitrac; per-student quota enforcement + tap-to-release.
  • Exam proctor authentication — photo + RFID scan confirms the card-holder is enrolled in the exam's registered course.
  • Campus transit + farebox — shuttle systems and some regional transit agencies (UCLA / UT Austin / Michigan patterns) accept the campus card as transit credential.

FERPA / GDPR posture for campus-card usage logs

  • FERPA (20 U.S.C. § 1232g / 34 CFR Part 99) treats campus-card access and transaction logs as student education records — retention, disclosure and consent obligations apply.
  • Directory information (name, enrolment dates) may be disclosed without consent; non-directory (grades, attendance correlated from door logs) requires explicit consent.
  • Access-log retention is typically 12–24 months — the campus records-management office sets the retention clock; longer retention requires a documented purpose.
  • EU campuses fall under GDPR Art. 6 (legitimate interest or public task) + Art. 9 (special-category biometric when face photo is linked to access log).
  • Apple Wallet + Google Wallet mobile credentials inherit the same retention and disclosure posture — the cardholder ID is the FERPA-scoped data, not the form factor.

Roadmap — campus-card milestones from magstripe to mobile credential

  1. 1985 — magstripe student IDs

    First-generation magnetic-stripe student IDs deploy for library circulation and early meal-plan POS — ISO/IEC 7811-2 combined with photo ID.

  2. 2001 — MIFARE DESFire launch

    NXP ships the first DESFire chip; campus access programmes start moving from magstripe to HF contactless.

  3. 2007 — MIFARE Classic broken

    Nohl + Plötz (24C3) and Garcia et al. (ESORICS / CARDIS 2008) break Crypto-1 — campus Classic 1K programmes begin renewal planning; HID iCLASS SE ships 2012.

  4. 2014 — CBORD / Transact integrations

    CBORD Odyssey, Transact eAccounts and Atrium consolidate the North American campus-card payment platform — DESFire EV1 becomes the default chip for multi-application deployments.

  5. 2019 — Apple Wallet student IDs

    Apple Campus Cards launch October 2019 with Duke, Alabama, Oklahoma, Johns Hopkins, Santa Clara, Mercer, Temple, Vanderbilt — the first production mobile-credential campus cohort.

  6. 2020 — DESFire EV3 ships

    NXP releases DESFire EV3 with AN12343 features — AES-128, SDM, multi-application, EAL5+; 2026 default chip for R1 research universities and large state systems.

  7. 2022 — Google Wallet student IDs

    Google Wallet student IDs launch on Android; provisioning via Transact / CBORD / Atrium expands through 2023–2024.

  8. 2026 — Today

    Campus cards run DESFire EV3 multi-application alongside Apple Wallet / Google Wallet mobile credentials. From buyer conversations across dormitory-access, library-self-service, campus-meal-plan, print-release and exam-authentication student-ID programmes.

Useful next pages

Use these linked product, guide and comparison pages to keep the next click specific and practical.

Related campus card products and chip deep-dives

Credential peers and chip-family reference for campus shortlist.

FAQ

Which chip should we use for student ID cards?

For multi-application R1 / large-state-system campuses running access + library + meal-plan + print-release + Apple Wallet / Google Wallet mobile credentials, MIFARE DESFire EV3 is the 2026 default — AES-128, EAL5+, cross-vendor reader support via HID Signo / ASSA ABLOY Aperio / SALTO XS4 / CBORD / Transact readers, and Apple Wallet / Google Wallet provisioning paths. HID iCLASS SE / SEOS is the US-campus default on HID reader estates. MIFARE Classic 1K (USD 0.30–0.60 / card) remains budget-optimised for single-application deployments (gym / events / library-only) where Crypto-1's compromised posture is acceptable.

Can you produce cards with student photos already printed?

Yes. Send a CSV mapping student IDs to card fields (name, ID number, class year, residence hall, meal-plan tier) plus a photo folder (JPEG, minimum 300 dpi, neutral background per ISO/IEC 19794-5). Our digital-print line handles 2,000 unique cards/day on Evolis Primacy 2 / Zebra ZXP Series 7 / Magicard 600 / Entrust Sigma DS4. Cards ship sorted by residence hall, department, class-year or alphabetical. Typical turnaround 10–15 business days for up to 5,000 cards; rush 7–10 days available for orientation deadlines.

Do mobile student IDs (Apple Wallet / Google Wallet) replace the physical card?

Not fully. Mobile credentials reduce card-office traffic on the 8–15% semester-replacement churn and work on NFC-capable door and POS readers, but they complement rather than replace the physical card. Regulatory exam-proctor photo-ID workflows still require a laminated photo card; readers at older buildings may not support mobile NFC; international students with non-supported devices need a physical card. The 2026 hybrid pattern is: physical DESFire EV3 card at orientation plus opt-in Apple Wallet / Google Wallet provisioning from the campus-card portal after SIS / SSO identity verification.

What is the MOQ and pricing for student ID cards?

MOQ 200 for custom-printed cards. Volume tiers at 500 / 1,000 / 2,000 / 5,000 / 10,000+. Indicative pricing: MIFARE Classic 1K USD 0.30–0.60/card; MIFARE DESFire EV3 USD 0.80–1.50/card; dual-frequency DESFire EV3 + EM4100 USD 1.60–2.40/card. Anti-counterfeiting overlay stack adds USD 0.10–0.30/card. Blank pre-encoded cards MOQ 100 for same-day card-office reissuance. Compliance package (chip batch certificate, ISO/IEC 14443 test report, ISO/IEC 10373-1 durability, FERPA data-handling statement) included with every order.

Sources & references

Primary standards, OEM datasheets and regulatory documents cited by this article. All URLs were verified on the access date shown below.

  1. ISO/IEC 7810:2019 — Identification cards, Physical characteristicsISO · Dec 1, 2019 · accessed Apr 24, 2026

    ID-1 body spec governing student ID card form factor.

  2. ISO/IEC 14443 series — Proximity cardsISO · Jun 1, 2018 · accessed Apr 24, 2026

    HF proximity card air-interface — baseline for DESFire EV3 + iCLASS SE campus card deployments.

  3. ISO/IEC 10373-1:2020 — Identification cards — Test methodsISO · Nov 1, 2020

    Card-body durability test methods (dimensional, bending, torsion, UV) for orientation-scale campus-card procurement.

  4. NXP MIFARE DESFire EV3 product briefNXP Semiconductors · Jun 1, 2020 · accessed Apr 24, 2026

    DESFire EV3 — AES-128, multi-application file-system, EAL5+; the 2026 default campus chip.

  5. NXP AN10922 — Key diversification for MIFARE DESFireNXP Semiconductors · Apr 1, 2017 · accessed Apr 24, 2026

    Defines the per-card AES key derivation underpinning mobile + physical credential separation for campus programmes.

  6. FERPA — Family Educational Rights and Privacy Act, 20 U.S.C. § 1232gUS Department of Education · Aug 1, 2023 · accessed Apr 24, 2026

    Governs US student education records, including campus-card access and transaction logs.

  7. Apple — Launching Apple Pay for student IDsApple · Oct 10, 2019 · accessed Apr 24, 2026
  8. Google Wallet — student ID provisioningGoogle · Oct 1, 2022 · accessed Apr 24, 2026

    Google Wallet student ID provisioning documentation — the Android counterpart to Apple Campus Cards.

  9. Transact — mobile credential platformTransact · Mar 1, 2023 · accessed Apr 24, 2026

    Campus-card platform driving a substantial share of North American mobile-student-ID provisioning via DESFire EV3 / iCLASS SE reader estates.

  10. CBORD — campus card platformCBORD (Roper Technologies) · Jun 1, 2023 · accessed Apr 24, 2026

    Campus-card platform anchoring dining, door and mobile-credential workflows across North American higher-education programmes.

10+ Years RFID Manufacturing
ISO 9001 Certified Factory
500+ Enterprise Clients
50+ Countries Served

Proud Tek is a Shenzhen-based RFID & NFC manufacturer supplying hotel chains, transit operators, event venues and retail brands worldwide. Every order includes free samples, RF testing and dedicated project support.

Get a Quick Quote

Tell us about your project and we'll respond within one business day. Fields marked (asterisk) are required.

We'll only use this to reply to your inquiry.
Optional, but helps us route your inquiry faster.
e.g. 5,000 pcs
e.g. hotel, event, asset tracking
Chip preference, timeline, special requirements...

Next step

Ready to discuss your project?

Use the contact route when you are ready for pricing, samples, or compatibility help, or continue into the linked product and comparison pages below.