NFC Product Brand Onboarding

Build secure NFC identity into your production process.

Start with a Maker account, qualified NFC tags, and registered inventory for Brand Verification or Device Control. This guide covers manufacturing preparation, then follows the detailed Device Control process for assigning a protected item to its owner.

Manufacturing fit

Choose the tag and its placement together.

Leather, textiles, metal casings, and packaging each affect the NFC installation. We help specify a supported ISO-DEP Type 4 tag and suitable form factor, then plan its integration during assembly, sewing, labeling, or packaging.

Qualify read performance, attachment, environmental exposure, and production handling with the finished product before scaling up.

See NFC setup for both services

Define the result of a tap

Brand Verification: register your brand and website, associate its NFC tags, and let consumers authenticate them in the app before viewing your brand's website.

Device Control: define the protected action, register the device, and prepare the owner enrollment and authorization flow described below.

Device Control: who does what

Four parties, one documented chain of custody.

Product Brand (Maker)

Defines and assembles the protected item

The Product Brand is the Xibernetix Maker. It creates the Maker account and item records, specifies the NFC-tag requirements, imports the tag manifest, and packages each approved tag with its product, asset, or device.

NFC Tag Manufacturer

Supplies qualified tag inventory

Produces NFC Forum Type 4 tags that meet the Product Brand's requirements and supplies a manifest that identifies every tag and its manufacturing details.

Xibernetix

Records and protects the lifecycle

Receives the signed-in Product Brand's tag manifest, keeps the imported inventory scoped to that Maker account, and provides the authenticated provisioning and verification path.

Registered Owner / Operator

Claims the finished item

Installs the Xibernetix app, signs in, and makes the first tap that associates the finished product, asset, or device and its NFC tag with their verified account.

NFC tag credential model

Choose how tag access begins.

Every tag assigned to a Product Brand must appear in the manufacturer's manifest and be uploaded through the Maker-authenticated import flow before it is used in a protected product.

Option 1

Generic tag baseline

The tag begins with its UID and a generic factory master key. Xibernetix uses the identity to establish protected key material during provisioning. Because the generic key is shared, a rogue app that obtains it could attempt to access or provision the tag before the approved flow secures it.

Option 2

Manufacturer-injected master key

The manufacturer generates an assigned master key and programs it into the tag's secure storage before delivery. When that key remains confidential and the tag is registered in the manifest, access is restricted to the Xibernetix backend and authorized mobile-app workflow.

Required for both

Upload the tag manifest

The Maker uploads the manifest of assigned tags to Xibernetix. This records the inventory under the Maker account and lets the platform match each physical tag to its approved product, asset, or device.

Device Control: physical onboarding sequence

Complete these steps in order.

The manifest import happens before the finished product, asset, or device reaches its owner. Tag personalization happens during the owner's first enrollment tap.

  1. 1

    Product Brand joins Xibernetix

    The Product Brand signs up and establishes its Xibernetix Maker account.

  2. 2

    Product Brand registers each protected item

    The Product Brand adds its product, asset, or device to Xibernetix with the metadata needed to identify, manage, and support it.

  3. 3

    Product Brand chooses NFC protection

    The Product Brand decides that NFC tags will secure the item and defines the tag, form factor, and environmental requirements.

  4. 4

    NFC Tag Manufacturer supplies tags and a manifest

    The NFC Tag Manufacturer delivers NFC Forum Type 4 tags using the selected credential model and a JSON manifest containing each tag ID and its detailed manufacturing information.

  5. 5

    Product Brand imports the manifest

    While signed in, the Product Brand uploads the JSON manifest through the dedicated Maker-authenticated endpoint. Xibernetix validates and records the tag inventory under that Maker account.

  6. 6

    Product Brand packages the tag with the item

    The approved NFC tag is installed or enclosed during the qualified assembly, sewing, labeling, or packaging step before the product, asset, or device is shipped or sold.

  7. 7

    Owner receives the finished item

    The product documentation directs the buyer to install the Xibernetix app and create or sign in to an Operator account.

  8. 8

    Owner makes the first tap

    With the app installed and the Operator signed in, the Owner taps their mobile device to the finished product, asset, or device. The app reads the NFC tag and its ID.

  9. 9

    Xibernetix verifies and provisions the tag

    The app requests the tag-specific cryptographic material through the authenticated backend flow. If the tag already contains the expected protected key material, the app verifies it and locks the configuration. If it is still raw, the app writes the protected material and locks it against later modification or reading.

  10. 10

    The item is dedicated to its Owner

    The authenticated NFC tag and its protected product, asset, or device are assigned to the signed-in Owner. On later use, that Owner signs in and taps again; Xibernetix recognizes the authenticated tag and permits the associated item flow only for its assigned Owner.

What the Product Brand needs before shipping

Keep these items together.

  • A completed Maker account and protected-item record
  • Raw NFC Forum Type 4 tag inventory
  • The NFC Tag Manufacturer's complete JSON manifest
  • Tag-to-item packaging and traceability records
  • Owner-facing installation and first-tap instructions
NFC Tag Manufacturer manifest ↓ Product Brand authenticated import ↓ protected item + raw tag package ↓ first operator tap ↓ authenticated, dedicated item
After onboarding

Keep ownership deliberate.

If a protected item is replaced, transferred, lost, or retired, use the authorized lifecycle process before giving it to another person. Do not treat a configured tag as raw inventory or attempt to overwrite its protected configuration.

Read the NFC guide