ICAOINTERNATIONAL CIVIL AVIATION ORGANIZATION MRTD REPORT Stressing Security As ePassport technology defies its critics and privacy groups begin to better understand the scope and purpose of the biometric chip, more and more States are continuing to implement the world’s most secure solution to the interoperable travel document. Also in this Issue: ePassport PKI and the ICAO PKD, Interoperability Overview, EAC Roll-out, In-House MRTD Training, CSCA Certificates Overview List, Maldives Implementation, ICAO’s role in MRTD advancement Vol. 2, No 2 Contents Editorial: Taking an Active Role . 3 Mauricio Siciliano discusses the more proactive role being taken by ICAO and industry stakeholders in communicating the facts behind MRTD and ePassport technology. ICAO MRTD REPORT VOLUME 2, NUMBER 2, 2007 Editorial Managing Editor: Mauricio Siciliano MRTD Programme—Specifications and Guidance Material Section Tel: +1 (514) 954-8219 ext. 7068 E-mail : [email protected] ePassports: The Secure Solution . 4 ISO Task Force on New Technologies Chair Barry Kefauver confronts recent media Anthony Philbin Communications and hacker claims surrounding the security and privacy of contactless chips, Senior Editor: Anthony Philbin Copy Editor: Robert Ronald detailing the unprecedented multilateral and technological achievement represented Tel: +01 (514) 886-7746 by ePassport interoperability. E-mail: [email protected] Web Site: www.philbin.ca ePassport PKI and the ICAO PKD: The Australian Perspective . 12 Production and Design Australian passport official Ross Greenwood, Chairman of the 2007 ICAO PKD Bang Marketing board, describes the reasons for supporting ePassport validation at border clearance Stéphanie Kennan and makes the business case for Member State participation in the ICAO PKD. Tel: +01 (514) 849-2264 E-mail: [email protected] Web Site: www.bang-marketing.com Achieving Interoperability . 16 Claudia Hager, MBA, Executive Director of the Austrian State Printing House Advertising (OeSD), describes in depth the series of multilateral tests that led to the development FCM Communications Inc. of a truly interoperable contactless chip for ePassport use. Mr. Yves Allard Tel: +01 (450) 677-3535 Fax: +01 (450) 677-4445 The Second Generation of ePassports . 20 E-mail: [email protected] Excerpts from the Gemalto White Paper discussing the inclusion of fingerprint biometrics for enhanced security and privacy. Submissions The MRTD Report encourages submissions from inte - MRTD eLearning Programme . rested individuals, organizations and States wishing 30 to share updates, perspectives or analysis related to When ICAO went shopping for the ideal solution to provide states with the global civil aviation. For further information on sub- background and know-how they’d need on MRTD issues, Aine ni Fhloinn and mission deadlines and planned issue topics for future editions of the MRTD Report, please contact Mauricio inHouse Training had an affordable, customized solution. Siciliano, managing editor at: [email protected] CSCA Overview List . 32 Opinions expressed in signed articles or in adverti- sements appearing in the ICAO MRTD Report repre- Sjef Broekhaar and Jan Verschuren of the Ministry of the Interior and Kingdom sent the author’s or advertiser’s opinion and do not Relations, The Netherlands, discuss the IF4TD proposal for the distribution of CSCA necessarily reflect the views of ICAO. The mention of certificates. specific companies or products in articles or adver- tisements does not imply that they are endorsed or recommended by ICAO in preference to others of a Maldives ePassport Initiative . 36 similar nature which are not mentioned or advertised. Together with partners OeSD, Iris Corporation and NXP (formerly Philips), the The publishers extend their thanks to the companies, Maldivian Travel Document Section makes its transition to new ePassport organizations and photographers who graciously specifications, getting their programme up and running a mere ten months after supplied photographs for this issue. they established their goal. MRTD Report – Number 2 – 2007 Published by International Civil Aviation Organization (ICAO) Facing the Future . 38 999 University Street An overview of ICAO’s role in providing the necessary leadership and implementation Montréal, Québec assistance relating to new MRTD specifications. Canada H3C 5H7 The objective of the ICAO MRTD Report is to provide TAG MRTD RFI . 40 a comprehensive account of new developments, Details of the ICAO Technical Advisory Group on Machine-Readable Travel trends, innovations and applications in the field of MRTDs to the Contracting States of ICAO and the Documents’ (TAG MRTD) request for information relating to new and improving international aeronautical and security communities. MRTD and ePassport technologies. Copyright © 2007 International Civil Aviation Organization MRTD Glossary of Terms . 43 EDITOR'S NOTE Taking an Active Role In a time when tremendous efforts are being made regar ding the consistent and secure standardization of travel documents, the ePassport still has many faces. The world’s aviation and security communities are continuing to finalize issuance pro - cesses that respect minimum quality standards, local regulations, citizen rights and worldwide interoperabi lity requirements, but these goals are much closer now to being realized thanks to an unprecedented multilateral effort between State and in- dustry experts. For the last 30 years, ICAO has been the leader and prima ry forum for achieving world-class standards for ePassport docu- ments. But setting the standards in this field is only one of ICAO’s functions. The ICAO Specifications and Guidance Mate- rial (SGM) Section is also committed to continue developing, improving, educating and promoting worldwide implementa- tion of MRTD and eMRTD standards and specifications. During the TAG/MRTD 17 meeting held in ICAO Headquarters last March, the Secretariat committed to prepare and put into action a communications strategy that would see the Organi- Should any of these issues be of particular concern to mem- zation playing a more active role in informing and educating bers of our readership, we would suggest that they contact the government administrations, private entities and the general MRTD Programme Office by visiting the ‘Contact Us’ section of public regarding the content of the MRTD Programme and its the MRTD web site at: http://mrtd.icao.int. Your input, concerns significant benefits for international air transport and national and requests in this field will be essential to help us build a security agencies. This role is even more significant today in comprehensive set of articles, information papers and presen- view of the present worldwide implementation of the ePassport, tations that will address these issues and reinforce the credi- not to mention the troubling misinformation that has been gene- bility and global consensus surrounding this important effort. rated by hackers and privacy groups who have made headline- grabbing but ultimately baseless claims regarding the threats Finally, you'll notice that this latest issue of the ICAO MRTD that contactless chips pose to the security and privacy of the Report has a new look and feel. This new approach is part of world’s travellers. an overall re-branding of ICAO's magazines to help stress the central role that ICAO plays in the global aviation com- In this issue of the ICAO MRTD Report we interview Mr. Barry munity, and to ensure that the Organization is clearly identi- Kefauver, formerly of the US Department of State, who cur- fied with the important work it carries out on behalf of all of rently chairs the ISO Task Force on new technologies of the aviation's stakeholders. We encourage any comments or TAG/MRTD on the security and privacy issues related to the feedback on this new design and focus and hope that these MRTD Report – Number 2 – 2007 ePassports. This is the first of a series of interviews, articles and changes have helped to make the MRTD Report more infor - reference materials that will address the specific and general mative and user-friendly. concerns that have recently been brought forward at conferen- ces and in the media. This body of reference will help to serve Enjoy your reading. States, the media and the general public in more clearly identi- fying and understanding the actual issues and concerns curren - tly being addressed regarding ePassport chip security and Mauricio Siciliano bearer privacy. Editor 3 COVER STORY: BARRY KEFAUVER INTERVIEW ePassports: The Secure Solution THE ePASSPORT HAS ENGENDERED ITS FAIR SHARE OF HEADLINES SINCE ITS IMPLEMENTATION BEGAN SEVERAL YEARS AGO, MOSTLY AS A RESULT OF HACKERS AND PRIVACY GROUPS WHO HAVE MADE FANTASTICAL CLAIMS REGARDING THE THREATS THAT CONTACTLESS CHIPS POSE TO OUR SECURITY AND PRIVACY. BARRY KEFAUVER, FORMERLY OF THE US DEPARTMENT OF STATE AND CURRENTLY A CONSULTANT WHO, AMONG OTHER RESPONSIBILITIES, CHAIRS THE ISO TASK FORCE ON NEW TECHNOLOGIES, OVERSAW SOME OF THE EARLIEST ICAO AND RELATED PROCEEDINGS LOOKING INTO PASSPORT SECURITY, BIOMETRICS AND DATA STORAGE. HE ADDRESSES THE SERIOUS FLAWS IN THE CRITICS’ APPROACHES IN THIS INTERVIEW WITH THE ICAO MRTD REPORT, AND DESCRIBES THE HUGELY SUCCESSFUL TECHNICAL AND MULTILATERAL ACHIEVEMENT REPRESENTED BY THE ePASSPORT INITIATIVE. ICAO MRTD Report: There have been a number of statements made in recent months regarding what are described as ‘privacy and security threats’ associated with the new RFID or ‘e’ Passports.