Community hub
Recent from talks
Knowledge base stats:
Talk channels stats:
Members stats:
Biometric passport
A biometric passport (also known as an electronic passport, e-passport or a digital passport) is a passport that has an embedded electronic microprocessor chip, which contains biometric information that can be used to authenticate the identity of the passport holder. It uses contactless smart card technology, including a microprocessor chip (computer chip) and antenna (for both power to the chip and communication) embedded in the front or back cover, or centre page, of the passport. The passport's critical information is printed on the data page of the passport, repeated on the machine readable lines and stored in the chip. Public key infrastructure (PKI) is used to authenticate the data stored electronically in the passport chip, making it expensive and difficult to forge when all security mechanisms are fully and correctly implemented.
Most countries are issuing biometric passports to their citizens. Malaysia was the first country to issue biometric passports in 1998. By the end of 2008, 60 countries were issuing such passports, which increased to over 150 by mid-2019.
The currently standardised biometrics used for this type of identification system are facial recognition, fingerprint recognition, and iris recognition. These were adopted after assessment of several different kinds of biometrics including retinal scan. Document and chip characteristics are documented in the International Civil Aviation Organization's (ICAO) Doc 9303 (ICAO 9303). The ICAO defines the biometric file formats and communication protocols to be used in passports. Only the digital image (usually in JPEG or JPEG 2000 format) of each biometric feature is actually stored in the chip. The comparison of biometric features is performed outside the passport chip by electronic border control systems (e-borders). To store biometric data on the contactless chip, it includes a minimum of 32 kilobytes of EEPROM storage memory, and runs on an interface in accordance with the ISO/IEC 14443 international standard, amongst others. These standards intend interoperability between different countries and different manufacturers of passport books.
Some national identity cards, such as those from Albania, Brazil, the Netherlands, and Saudi Arabia are fully ICAO 9303 compliant biometric travel documents. However others, such as the United States passport card, are not.
Biometric passports have protection mechanisms to avoid and/or detect attacks:
To assure interoperability and functionality of the security mechanisms listed above, ICAO and German Federal Office for Information Security (BSI) have specified several test cases. These test specifications are updated with every new protocol and are covering details starting from the paper used and ending in the chip that is included.
Since the introduction of biometric passports, several attacks have been presented and demonstrated.
Privacy proponents in many countries question and protest the lack of information about exactly what the passports' chip will contain, and whether they affect civil liberties. The main problem they point out is that data on the passports can be transferred with wireless RFID technology, which can become a major vulnerability. Although this could allow ID-check computers to obtain a person's information without a physical connection, it may also allow anyone with the necessary equipment to perform the same task. If the personal information and passport numbers on the chip are not encrypted, the information might wind up in the wrong hands.
Hub AI
Biometric passport AI simulator
(@Biometric passport_simulator)
Biometric passport
A biometric passport (also known as an electronic passport, e-passport or a digital passport) is a passport that has an embedded electronic microprocessor chip, which contains biometric information that can be used to authenticate the identity of the passport holder. It uses contactless smart card technology, including a microprocessor chip (computer chip) and antenna (for both power to the chip and communication) embedded in the front or back cover, or centre page, of the passport. The passport's critical information is printed on the data page of the passport, repeated on the machine readable lines and stored in the chip. Public key infrastructure (PKI) is used to authenticate the data stored electronically in the passport chip, making it expensive and difficult to forge when all security mechanisms are fully and correctly implemented.
Most countries are issuing biometric passports to their citizens. Malaysia was the first country to issue biometric passports in 1998. By the end of 2008, 60 countries were issuing such passports, which increased to over 150 by mid-2019.
The currently standardised biometrics used for this type of identification system are facial recognition, fingerprint recognition, and iris recognition. These were adopted after assessment of several different kinds of biometrics including retinal scan. Document and chip characteristics are documented in the International Civil Aviation Organization's (ICAO) Doc 9303 (ICAO 9303). The ICAO defines the biometric file formats and communication protocols to be used in passports. Only the digital image (usually in JPEG or JPEG 2000 format) of each biometric feature is actually stored in the chip. The comparison of biometric features is performed outside the passport chip by electronic border control systems (e-borders). To store biometric data on the contactless chip, it includes a minimum of 32 kilobytes of EEPROM storage memory, and runs on an interface in accordance with the ISO/IEC 14443 international standard, amongst others. These standards intend interoperability between different countries and different manufacturers of passport books.
Some national identity cards, such as those from Albania, Brazil, the Netherlands, and Saudi Arabia are fully ICAO 9303 compliant biometric travel documents. However others, such as the United States passport card, are not.
Biometric passports have protection mechanisms to avoid and/or detect attacks:
To assure interoperability and functionality of the security mechanisms listed above, ICAO and German Federal Office for Information Security (BSI) have specified several test cases. These test specifications are updated with every new protocol and are covering details starting from the paper used and ending in the chip that is included.
Since the introduction of biometric passports, several attacks have been presented and demonstrated.
Privacy proponents in many countries question and protest the lack of information about exactly what the passports' chip will contain, and whether they affect civil liberties. The main problem they point out is that data on the passports can be transferred with wireless RFID technology, which can become a major vulnerability. Although this could allow ID-check computers to obtain a person's information without a physical connection, it may also allow anyone with the necessary equipment to perform the same task. If the personal information and passport numbers on the chip are not encrypted, the information might wind up in the wrong hands.