Gómez-Espiñeira, BraisRivera-Dourado, MartiñoPérez-Jove, RubénVázquez-Naya, José2026-09-152026-09-152025Gómez-Espiñeira, B., Rivera-Dourado, M., Pérez-Jove, R., & Vázquez-Naya, J. M. (2026). Open-source Secure NFC-based Physical Access Control System using EV2 Mutual Authentication. In Proceedings XoveTIC 2025: Impulsando el talento científico (pp. 239-248). Servizo de Publicacións UDC. https://doi.org/10.17979/spu.23.c41978-84-9749-925-5https://hdl.handle.net/2183/49256Presentado en: VIII Congreso Xove TIC: impulsando el talento científico. Octubre, 2025, A Coruña.[Abstract]: Currently, physical access control is dominated by private and proprietary solutions that are closed, inflexible and often insecure. To address these shortcomings, this work presents an open-source, modular NFC-based access control system. The system consists of two modules. First, a hardware module, capable of reading NFC NTAG424 cards and unlocking a magnetic lock has been assembled. Second, a centralized management server, with an administration panel. The system supports Enhanced Version 2 mutual authentication protocol, time-based and role-based policies, allowing administrators to protect multiple zones within the same facility from a centralized management server. This open solution provides a secure and cost-effective alternative that seeks greater transparency and control.engAttribution-NonCommercial-NoDerivatives 4.0 Internationalhttp://creativecommons.org/licenses/by-nc-nd/4.0/Physical access controlNear field communication (NFC)Mutual authenticationNTAG424Centralized access managementOpen-source security systemsconference outputopen access10.17979/spu.23.c41