Recommendations and solutions for safer, more reliable electronic passports
Numerous problems have undermined the security and convenience rationales of the ePassport concept, which was to include individual biometric data in the form of electronic chips. The EU-funded FIDELITY (Fast and trustworthy identity delivery and check with ePassports leveraging traveler privacy) project tackled these issues. Project partners analysed shortcomings and vulnerabilities in the entire ePassport life cycle, and developed technical solutions and a set of recommendations to address them. The privacy-friendly solutions allow for a secure passport issuance process, increased security and usability, and better management of lost and stolen passports. Specifically, the FIDELITY team provided recommendations for reliable breeder (identity) document management procedures, standards and technical solutions for implementing easily authenticable breeder documents. In addition, it made recommendations for secure ePassport application processes. Yet more recommendations and concepts were put forth for the next generation of travel documents, and on how to improve end-to-end ePassport security and usability. Researchers proposed architecture and protocols for secure certificate management that verify the authenticity of ePassports and trustworthiness of passport readers. This will enable the rapid update and exchange of certificates issued by Member States. Project members presented studies, guidelines and recommendations for the implementation of privacy-by-design principles, and ethical, legal and sociological requirements in the development of ePassport solutions. Lastly, solutions were evaluated via ePassport use cases involving a reliable ePassport issuance process, a one-stop solution for identity checks at borders and an identity check solution with a secure mobile inspection terminal. Government agencies responsible for the issuance and examination of travel documents directly participated in the assessment. FIDELITY efforts will enhance ePassport security, usability and privacy, while protecting against border crime. By offering solutions that overcome several limitations, project outcomes will also contribute to re-establishing trust and confidence in ePassports.
Keywords
Electronic passports, ePassport, FIDELITY, identity delivery, privacy