Plug & Play Smart Card
The SafeNet IDPrime 3940, a dual-interface smart card, is an ideal solution for enterprises looking to deploy PKI multi-factor authentication. If you need to communicate with contact or a contactless ISO14443 interfaces, or some NFC readers, SafeNet IDPrime 3940 is a convenient solution for enterprises seeking compliance with CC EAL5+, eIDAS or ANSSI regulations.
In addition to its seamless integration into Windows ecosystems, the SafeNet IDPrime 3940 is a dual interface
smart card and is compatible with any environment through support by the SafeNet Authentication Client.
SafeNet IDPrime smart cards are designed for PKI-based applications, and come with a SafeNet minidriver
that offers perfect integration with native support for Microsoft® environments (through Windows 10), without any additional middleware.
The SafeNet IDPrime 3940 is a dual-interface smart card, allowing communication either via a contact interface or via a contactless ISO14443 interface, also compatible with some NFC readers.
SafeNet IDPrime 3940 Smart Cards are secured with both RSA up to 4096 and Elliptic curves algorithms up to 521 bits, and address a range of use cases that require PKI security,including secure access, email encryption, secure data storage, digital signatures and secure online transactions for end users.
Dual interface—SafeNet IDPrime 3940 offers both an ISO7816 contact interface and an ISO14443 contactless
interface, also compatible with some NFC readers.
Perfect integration in Windows environment—Certified and distributed by Microsoft, the SafeNet minidriver
ensures immediate integration with all Microsoft environments, plus Plug & Play service up to Windows 10.
Secure Flash mask chip—400KB.
Compatible with any environment—SafeNet IDPrime 3940 is fully supported by the SafeNet Authentication Client.
Compliant with eIDAS regulations—SafeNet IDPrime 3940 is fully qualified according the eIDAS regulations for both eSignature and eSeal applications, and is qualified by the French ANSSI. Its Java platform is also CC EAL5+ / PP Java Card certified.
Multi-application smart cards—SafeNet IDPrime smart cards can have optional onboard applet for MPCOS e-purse.
Enhanced cryptographic support—SafeNet IDPrime 3940 offers PKI services with both RSA up to 4096 and elliptic curves up to 521 bits.
SafeNet IDPrime 3940 is CC EAL5+ / PP Java Card certified for the Java platform and CC EAL5+ / PP QSCD certified for
the combination of Java platform and PKI applet. SafeNet IDPrime 3940 is qualified by the French ANSSI and is
qualified according to the eIDAS regulations for both the eSignature and the eSeal applications.
Optional Onboard Applets
SafeNet IDPrime cards are multi-application smart cards, meaning they can have optional onboard applets for various
functions. An MPCOS applet can be added to provide both e-purse and data management services.
SafeNet IDPrime 3940 is based on a 400 KB Java Flash memory chip. SafeNet IDPrime 3940 comes
as standard with 20 key containers. The memory available for certificates and other applets & data
in this standard configuration is 73 KB.
BaseCSP minidriver (SafeNet minidriver)
Global Platform 2.2.1
Java Card 3.0.4
ISO 7816 and ISO 14443
Windows, MAC, Linux
Hash: SHA-1, SHA-256, SHA-384, SHA-512.
RSA: up to RSA 4096 bits
RSA OAEP & RSA PSS
P-256 bits ECDSA, ECDH. P-384 & P-521bits ECDSA, ECDH are available via a custom configuration
On-card asymmetric key pair generation (RSA up to 4096 bits & Elliptic curves up to 521 bits)Symmetric: AES—For secure messaging and 3DES for Microsoft Challenge/Response only
T=0, T=1, PPS, with baud rate up to 446 Kbps at at 3.57 MZ (TA1=97h)
T=CL, ISO 14443 type A, with speed up to 848 Kbps
Onboard PIN Policy
SafeNet IDPrime family of cards can be customized (card body and programming) to fit customers’ needs.
Gemalto applets (optional)
MPCOS E-purse & secure data management application
Embedded crypto engine for symmetric and asymmetric cryptography
Minimum 500,000 write/erase cycles
Data retention for minimum 25 years
SafeNet IDPrime smart cards include multiple hardware and software countermeasures against various attacks: side channel attacks, invasive attacks, advanced fault attacks and other types of attacks.
The SafeNet IDPrime 3940 is both CC EAL5+ / PP Java Card certified for the Java platform and CC
EAL5+ / PP QSCD certified for the combination of Java platform plus PKI applet, is eIDAS qualified for both eSignature and eSeal, and qualified by the French ANSSI.