The ongoing discussion about Apple's restrictive NFC policies has taken an interesting turn with the discovery of an unconventional workaround using Chinese T-Union transit cards, highlighting the complex balance between security, convenience, and market control in mobile access technologies.
The NFC Control Debate
Apple's tight control over NFC functionality has long been a point of contention in the tech community. While the company is slowly opening up NFC capabilities with iOS 18.1, many users and developers remain frustrated by the restrictions. The community's response reflects a deeper concern about the balance between security and functionality:
Broadly, yes, almost all NFC based access systems are insecure and pretty broken. They mostly operate via security via obscurity, and the fact that anyone serious about security that deploys these systems will put a huge amount of effort into identifying one of an actually secure systems.
Security vs. Accessibility
The debate reveals interesting insights about Apple's varying standards across different markets. While the company maintains strict security requirements for NFC implementations in Western markets, it appears more flexible in the Chinese market, particularly with the T-Union transit card system. This disparity has sparked discussions about whether Apple's security concerns are consistently applied or influenced by market opportunities.
The Cost of Integration
A significant point of discussion centers around the financial aspects of official NFC access solutions. Community members highlight that implementing Apple Wallet compatibility for access systems comes with recurring costs - approximately USD 3 per user per year for Apple's Access Platform, plus additional licensing fees for technologies like NFC chips. This has led to situations where even prosumer products like UniFi's access readers require USD 5 annual subscriptions per device.
Key Implementation Requirements:
- Special NFC chip (PN7161) required for Apple Wallet support
- Apple Access Platform fee: ~USD 3/user/year
- Additional licensing fees for NFC technologies
- Certified hardware must support Apple Enhanced Contactless Polling (ECP)
Technical Complexities
The implementation challenges run deeper than just software. Hardware manufacturers must use specific NFC chips, such as the PN7161, which support Apple's proprietary Enhanced Contactless Polling (ECP) extension. This requirement has created situations where nearly identical hardware requires complete replacement just to support Apple Wallet integration.
Official Access System Partners:
- HID
- Brivo
- WaveLynx
- Salto
- Assa Abloy
- Nedap
- Kisi
Conclusion
The community's response to these developments reflects a broader tension in the tech industry between security, convenience, and commercial interests. While Apple's restrictive approach to NFC has security merits, it has also created barriers that push users toward potentially risky workarounds or costly official solutions.
Reference: Using your Apple device as an access card in unsupported systems