09-03-2011, 04:08 PM
[attachment=9890]
E-PASSPORT an earnest tool for authentication
Abstract :
As time is passing things are getting better and equally worse to authenticate the true identity of an individual with the rapid force of evolutions in technologies. To put a stop to the phenomenon of The falsification of identity in passports here we came up with an efficient solution , that is “E-PASSPORT” .Passports issued nowadays have an embedded RFID chip that carries digitally signed biometric information. Access to this chip is wireless, which introduces a security risk, in that an attacker could access a person’s passport without the owner knowing. While there are measures in place to prevent unauthorised access to the data in the passport, we show that it is easy to remotely detect the presence of a e-passport and determine its nationality.
Introduction
Today, the best forgeries of passports in its entirety are still produced by redrawing the original passport artwork, often conducted by hand by skilled artwork specialists. The resulting work is often impossible to authenticate without careful study by experienced personnel and the use of specialized equipment. Here we came up with a fabulous solution that is “E-Passport “ so that the original details of Genuine passports cannot be altered or modified.
An E-Passport or a Biometric Passport is a combined paper and electronic identity document that uses biometrics to authenticate the citizenship of a person. The passport’s confidential information is stored on a tiny RFID (Radio Frequency IDentification) chip which is an automatic identification method. A basic RFID device, often known as “RFID tag” consists of a tiny, inexpensive chip that transmits
a uniquely identifying number over a short distance to a reading device, and thereby permits rapid, automated tracking of objects.
RFID-based boarding pass generation
The RFID chip contains the biometric and personal information. The ICAO (International Civil Aviation Organization) of the United Nations defines the biometric standards to be used in passports, it provides a guideline for E-Passports on what features could or should be implemented. The current staged biometrics which is used for this type of identification system is facial recognition, fingerprint recognition, and iris scans.Together RFID and biometric technologies promise to reduce fraud, ease identity checks and enhance security. At the same time, these technologies raise new risks which contain different problems, like data confidentiality and integrity in E-Passports , which are:
• Biometric feature leakage.
• Clandestine Scanning and Eavesdropping.
• Cryptographic weaknesses
We have analyzed and discuss the above mentioned problems, which we identified in our minds and through our studies. Our main focus is to study the insecurity problems in E-Passports and propose new ideas or enhancements to defeat them. We have informed security and privacy threats in E-Passports which are running globally, and then we stated the emerging and impending E-Passport types with respect to these threats.
2. Evolution of E-Passports.
The first country in the world to issue E-Passports was Malaysia in 1998 and it was followed by many countries. These countries, along with the other early adopters, now use the ICAO standard passports. After the 9/11 disaster and due to losses and cases of stolen passports in U.S and in other countries, there is a rapid increased demand for biometric passports deployment in different countries. Then all the International community through the support of International Civil Aviation Organization (ICAO) adopted E-Passports which contain smart chips on which data can be stored and read wirelessly by chip readers. The U.S made obligatory that 27 Nations of VWP (Visa Waiver Program) must issue E-Passports till Oct, 2006 so that their citizens can continue to enter the US without first obtaining a visa.
The special features of an Electronic Passport are:
• Securely stored biographical information and digital image that are identical to the information that is visually displayed in the passport.
• Contact less chip technology that allows the information stored in an E-Passport to be read by special chip readers at a close distance.
• Uses digital signature technology to verify the authenticity of the data stored on the chip.
Logo of E-Passport
This logo is typically printed on the passport cover to indicate the presence of an RFID chip. An e-passport contains an ISO14443 RFID tag, which can also be called a
contactless smartcard. ISO14443 is the standard for so-called proximity RFID tags, with a designed operating range of 1–10 cm. ISO14443 defines the low level physical communication layer. The higher level logical communication, at the level of bytes sent and received, conforms to the older ISO7816 standard, which was originally
developed for contact smartcards. The international standards for e-passports are provided by guidelines of the International Civil Aviation Authority (ICAO), a United Nations body. In particular, these define a set of commands (in ISO7816 format) that the passport can receive and the corresponding responses. Currently the chips in most e-passports store the personal details of the passport
holder and a photo (typically in JPEG2000 format), all digitally signed to prevent fake passports, but it is foreseen that more biometric data, in particular fingerprints,will be added
E-PASSPORT an earnest tool for authentication
Abstract :
As time is passing things are getting better and equally worse to authenticate the true identity of an individual with the rapid force of evolutions in technologies. To put a stop to the phenomenon of The falsification of identity in passports here we came up with an efficient solution , that is “E-PASSPORT” .Passports issued nowadays have an embedded RFID chip that carries digitally signed biometric information. Access to this chip is wireless, which introduces a security risk, in that an attacker could access a person’s passport without the owner knowing. While there are measures in place to prevent unauthorised access to the data in the passport, we show that it is easy to remotely detect the presence of a e-passport and determine its nationality.
Introduction
Today, the best forgeries of passports in its entirety are still produced by redrawing the original passport artwork, often conducted by hand by skilled artwork specialists. The resulting work is often impossible to authenticate without careful study by experienced personnel and the use of specialized equipment. Here we came up with a fabulous solution that is “E-Passport “ so that the original details of Genuine passports cannot be altered or modified.
An E-Passport or a Biometric Passport is a combined paper and electronic identity document that uses biometrics to authenticate the citizenship of a person. The passport’s confidential information is stored on a tiny RFID (Radio Frequency IDentification) chip which is an automatic identification method. A basic RFID device, often known as “RFID tag” consists of a tiny, inexpensive chip that transmits
a uniquely identifying number over a short distance to a reading device, and thereby permits rapid, automated tracking of objects.
RFID-based boarding pass generation
The RFID chip contains the biometric and personal information. The ICAO (International Civil Aviation Organization) of the United Nations defines the biometric standards to be used in passports, it provides a guideline for E-Passports on what features could or should be implemented. The current staged biometrics which is used for this type of identification system is facial recognition, fingerprint recognition, and iris scans.Together RFID and biometric technologies promise to reduce fraud, ease identity checks and enhance security. At the same time, these technologies raise new risks which contain different problems, like data confidentiality and integrity in E-Passports , which are:
• Biometric feature leakage.
• Clandestine Scanning and Eavesdropping.
• Cryptographic weaknesses
We have analyzed and discuss the above mentioned problems, which we identified in our minds and through our studies. Our main focus is to study the insecurity problems in E-Passports and propose new ideas or enhancements to defeat them. We have informed security and privacy threats in E-Passports which are running globally, and then we stated the emerging and impending E-Passport types with respect to these threats.
2. Evolution of E-Passports.
The first country in the world to issue E-Passports was Malaysia in 1998 and it was followed by many countries. These countries, along with the other early adopters, now use the ICAO standard passports. After the 9/11 disaster and due to losses and cases of stolen passports in U.S and in other countries, there is a rapid increased demand for biometric passports deployment in different countries. Then all the International community through the support of International Civil Aviation Organization (ICAO) adopted E-Passports which contain smart chips on which data can be stored and read wirelessly by chip readers. The U.S made obligatory that 27 Nations of VWP (Visa Waiver Program) must issue E-Passports till Oct, 2006 so that their citizens can continue to enter the US without first obtaining a visa.
The special features of an Electronic Passport are:
• Securely stored biographical information and digital image that are identical to the information that is visually displayed in the passport.
• Contact less chip technology that allows the information stored in an E-Passport to be read by special chip readers at a close distance.
• Uses digital signature technology to verify the authenticity of the data stored on the chip.
Logo of E-Passport
This logo is typically printed on the passport cover to indicate the presence of an RFID chip. An e-passport contains an ISO14443 RFID tag, which can also be called a
contactless smartcard. ISO14443 is the standard for so-called proximity RFID tags, with a designed operating range of 1–10 cm. ISO14443 defines the low level physical communication layer. The higher level logical communication, at the level of bytes sent and received, conforms to the older ISO7816 standard, which was originally
developed for contact smartcards. The international standards for e-passports are provided by guidelines of the International Civil Aviation Authority (ICAO), a United Nations body. In particular, these define a set of commands (in ISO7816 format) that the passport can receive and the corresponding responses. Currently the chips in most e-passports store the personal details of the passport
holder and a photo (typically in JPEG2000 format), all digitally signed to prevent fake passports, but it is foreseen that more biometric data, in particular fingerprints,will be added