www.bundesdruckerei.de COMPANY BROCHURE 2014 Contents EDITORIAL Protection against attacks 3 Bundesdruckerei in figures 4 The Bundesdruckerei Group 5 I. FULL ID | GOVERNANCE Defence shield for companies How companies protect their data and communications and how processes can be implemented effciently 6 II. FULL ID | CITIZEN Who is it really? Identity protection: How ID documents prove identity beyond a trace of doubt and how border controls are becoming more effective and secure 24 III. FULL ID | OB JECTS Security as a brand Security makes all the difference: How highly complex security features protect against forgery and misuse 34 IV. BUNDESDRUCKEREI GMBH Be part of the future Bundesdruckerei – a popular employer in the region and an innovator for the academic sector 40 References & publishing details 48 3 Protection against attacks What we are seeing today is the global networking of goods and services. Industry 4.0 is the topic of the day. The networked factory where machines and workpieces permanently exchange information is now reality. Many industrial companies are working with networked production sites. However, when we produce in networks, when data is exchanged across borders together with freight and goods, when work takes place in mobile environments, we also have to ask how these processes can be made secure and how the related data fows can be suffciently protected. Furthermore, we must be able to rely on the identity of the people, objects and processes involved, i.e. we must be able to trust them. In a nutshell, what we need is authentic, secure and binding communication. We still have work to do here. Industry association Bitkom has warned against digital carelessness. Digitised production processes not only offer huge oppor tunities, they also pose enormous risks. The increase in the number of cyber attacks is a threat to competitiveness and to the intellectual property of successful companies. The damage caused by data and identity theft is worth billions. And as easy as it is today to do business around globe, the new risks arising are often casually accepted. We at Bundesdruckerei believe that it is a task for society as a whole to protect digital infrastructures, processes and data, as well as digital identities. As a leading high-security company, we have assumed responsibility for Germany. With our expertise in identity management and our innovative strength, we see ourselves as a technology partner for private companies and public authorities who need to secure their digital infrastructures and production workfows. With our Full ID | Governance, we not only supply technological solutions, but complete, holistic IT security strategies based on secure digital identities. After all, we ourselves are a medium-sized production company and all too aware of the need for security at companies like ours. In other words, we know what we’re talking about when it comes to digitisation. Ulrich Hamann CEO Bundesdruckerei GmbH 4 5 The Bundesdruckerei Group Bundesdruckerei in figures Subsidiaries Shareholdings D-TRUST GmbH Shanghai Mite Speciality & Certifed trust service provider Precision Printing Co. Ltd. 2014 2013 2012 – Electronic signatures – ID documents for China – PKI products and services Sales 453.4 398.6 453.7 – eID service provider of which ID 391.5 333.9 391.6 Emirates German of which banknotes / other 61.9 64.7 62.1 Security Printing LLC Personnel expenses 117.8 113.3 108.7 Maurer Electronics GmbH – ID and security solutions Investment in tangible assets, software, licenses 30.8 32.4 58.0 Secure ID development centre – UAE and the Middle East – ID systems Depreciation on tangible assets, software, licenses 24.0 25.4 27.8 – Personalisation systems Earnings before interest, taxes, depreciation and 96.3 99.5 124.2 amortization DERMALOG Identifcation in € million Systems GmbH iNCO Spółka z o.o. – Automated fngerprint – Data capture and production of identifcation systems (AFIS) 2014 2013 2012 electronic publications – Scanning services Balance sheet total 840.1 824.9 808.1 cv cryptovision GmbH – Innovative cryptography Fixed assets 569.5 593.4 609.8 – Public key infrastructure (PKI) Current assets 263.9 225.5 192.2 of which liquid funds 157.4 111.9 101.6 Equity 443.7 440.4 413.1 Veridos * in € million – International ID solutions for governments * Veridos was launched on 1 January 2015. 6 7 I. FULL ID | GOVERNANCE Defence shield for companies Cyber attacks have now become a mass phenomenon. Especially companies and operating facilities are the target of digital attacks. And yet we often see a digital carelessness when it comes to security for corporate electronic data, digital processes, online communications and IT infrastructures. But with a just a little effort, a large part of these attacks could be prevented. 8 FULL ID | GOVERNANCE DEFENCE SHIELD FOR COMPANIES 9 Damage to the German economy caused by cyber attacks each year: n terms of economic output, Germany is the country that suffers the greatest damage caused by cybercrime. This was the fnding of the US Center for Strategic and International Studies (CSIS). VDI, the Association of German IEngineers, estimates the losses suffered by German companies every year due to industrial espionage and cyber attacks alone to be in the region of €100 billion. Industry association eco assumes that the threat for German companies will continue to grow in the years to come. That’s why it is vital, also increasingly with a view to competition, to protect critical business infrastructures, digital processes and the related data fows against unauthorised access. Germany rightly claims to be a country of thinkers and inventors. It is German engineering and innovations from medium-sized companies that are held in high esteem the world over, but which also whet criminal appetites. According to a survey by Forsa Institute from 2013, 77 percent of medium-sized industrial companies consider their intellectual property to be at risk. It appears to be possible for hackers to gain access at any time to corporate networks and most attacks are not noticed until it is too late. According to KPMG Consulting, 48 percent of German companies have already fallen victim to data theft. 50 billion euro This is what motivated Bundesdruckerei to develop a holistic range of solutions for companies and institutions under the name “Full ID | Governance” that bundles consulting services and technical systems to provide effcient protection of digital business workfows against attacks from both outside and within. 10 FULL ID | GOVERNANCE DEFENCE SHIELD FOR COMPANIES 11 The entire concept centres around using secure identities as keys to infrastructures, digital processes as well as electronic communications and data – from issuing The ten most frequent visitor badges at the reception desk right through to frewalls and handling of (and hence least secure) electronic invoices. passwords world-wide GoID – The employee ID card for tomorrow Secure ID for all applications In order to enter a company, there is usually a “key”, i.e. the employee ID card. It opens doors and cabinets. It can also often be used to log into the protected network. But this also means whoever has possession of the card, also has 1. 123456 access, even if this person is not an employee. And that’s where the risk lies. Bundesdruckerei has now developed a card that enables one particular thing: the unambiguous, personal identifcation of an employee. 2. 123456789 GoID is the name of this employee card for tomorrow, a card that can only be 3. 12345678 used by the authorised holder. Since the card can only be activated with the right fngerprint, theft or intentionally passing the card on to another person is now no longer a problem. The biometric data needed for this is stored directly on the 4. password card. This data is captured here only, safely stored and, when used, compared with the user’s fngerprint. Verifcation of the biometric data is carried out on and 5. qwerty with the card itself. All the holder of the card has to do is to place their fnger on the integrated sensor for doubt-free identifcation. This is referred to as “verifcation on document” and offers high data protection and security. 6. adobe123 The identity vault for your wallet 7. 1234567 What may appear to be small and insignifcant is in fact the result of several years of research. The challenge was to pack complex technology into the tiniest of space. GoID is shaped like a credit card and with its 2.5 mm is only slightly thicker. That’s 8. 111111 because room was needed to ft everything onto the card: in addition to a fnger- print sensor and a chip where the biometric data is safely stored, GoID comes with 9. 12345 an integrated display for status messages. How to power the card was the next challenge. The solution: GoID runs without batteries. The power needed is taken from the electromagnetic feld that is generated by the reading device antenna. 10. 1234567890 The card is a “universal genius”, offering the perfect balance between security and user-friendliness for every application. For instance, when entering the employee car park with its low security level, all the employee has to do is place the card on the barrier. However, access to sensitive areas, such as a server room, can be linked 12 FULL ID | GOVERNANCE DEFENCE SHIELD FOR COMPANIES 13 Six hacker attacks that 2. During the News of the World made history eavesdropping scandal, 12,800 people had their phones hacked, including thousands of celebrities and politicians. The journalists had hacked into the victims’ voicemail messages. 3. In 2012, hacker group Antisec stole from the FBI and then published a total of 12 million ID codes containing personal details of their owners.