DESfire before EV-1 (which was introduced in 2002) should indeed not be used any more and has not been recommended for use for more than five years. DESfire EV-1 (introduced ~2007) adds countermeasures against differential power analysis (which the non-EV-1 product lacked, leading to its eventual downfall), and AES-128. Since ~2014 there's even the newer DESfire EV-2 with better key management to delegate card space to third parties, proximity checks and better privacy options.
Felica is prevalent in Asia, but only added AES in around 2011.
I know nothing about ACOS except for its existence.
Note, if it isn't obvious: I'm biased towards DESfire EV-1, having worked with the cards in several projects.
For your basic problem of just storing data on a card that is to be read after authentication, disregarding all other things (authentication of data from the card, confidentiality of the data while in transit, etc.) it is likely that either system will work (and thus be indistinguishable).
If you eventually want more, you probably don't want a niche product like ACOS (except of course if it happens to hit your niche exactly), so DESfire or Felica. The latter is mostly documented in Japanese, so if that's a problem, that's a problem.
