A biometric passport (also known as an electronic passport, e-passport or a digital passport) is a passport that has an embedded electronic microprocessor chip, which contains biometric information that can be used to authenticate the identity of the passport holder. It uses contactless smart card technology, including a microprocessor chip (computer chip) and antenna (for both power to the chip and communication) embedded in the front or back cover, or centre page, of the passport. The passport's critical information is printed on the data page of the passport, repeated on the machine readable lines and stored in the chip. Public key infrastructure (PKI) is used to authenticate the data stored electronically in the passport chip, supposedly making it expensive and difficult to forge when all security mechanisms are fully and correctly implemented.
Most countries are issuing biometric passports to their citizens. Malaysia was the first country to issue biometric passports in 1998. [1] By the end of 2008, 60 countries were issuing such passports, [2] which increased to over 150 by mid-2019. [3]
The currently standardised biometrics used for this type of identification system are facial recognition, fingerprint recognition, and iris recognition. These were adopted after assessment of several different kinds of biometrics including retinal scan. Document and chip characteristics are documented in the International Civil Aviation Organization's (ICAO) Doc 9303 (ICAO 9303). [4] The ICAO defines the biometric file formats and communication protocols to be used in passports. Only the digital image (usually in JPEG or JPEG 2000 format) of each biometric feature is actually stored in the chip. The comparison of biometric features is performed outside the passport chip by electronic border control systems (e-borders). To store biometric data on the contactless chip, it includes a minimum of 32 kilobytes of EEPROM storage memory, and runs on an interface in accordance with the ISO/IEC 14443 international standard, amongst others. These standards intend interoperability between different countries and different manufacturers of passport books.
Some national identity cards, such as those from Albania, Brazil, the Netherlands, and Saudi Arabia are fully ICAO 9303 compliant biometric travel documents. However others, such as the United States passport card, are not. [5]
This section needs additional citations for verification .(September 2022) |
Biometric passports have protection mechanisms to avoid and/or detect attacks:
To assure interoperability and functionality of the security mechanisms listed above, ICAO and German Federal Office for Information Security (BSI) have specified several test cases. These test specifications are updated with every new protocol and are covering details starting from the paper used and ending in the chip that is included. [9]
Since the introduction of biometric passports, several attacks have been presented and demonstrated.
Privacy proponents in many countries question and protest the lack of information about exactly what the passports' chip will contain, and whether they affect civil liberties. The main problem they point out is that data on the passports can be transferred with wireless RFID technology, which can become a major vulnerability. Although this could allow ID-check computers to obtain a person's information without a physical connection, it may also allow anyone with the necessary equipment to perform the same task. If the personal information and passport numbers on the chip are not encrypted, the information might wind up in the wrong hands.
On 15 December 2006, the BBC published an article [26] on the British ePassport, citing the above stories and adding that:
and adding that the Future of Identity in the Information Society (FIDIS) network's research team (a body of IT security experts funded by the European Union) has "also come out against the ePassport scheme... [stating that] European governments have forced a document on its people that dramatically decreases security and increases the risk of identity theft." [27]
Most security measures are designed against untrusted citizens (the "provers"), but the scientific security community recently also addressed the threats from untrustworthy verifiers, such as corrupt governmental organizations, or nations using poorly implemented, unsecure electronic systems. [28] New cryptographic solutions such as private biometrics are being proposed to mitigate threats of mass theft of identity. These are under scientific study, but not yet implemented in biometric passports.
It was planned that, except for Denmark and Ireland, EU passports would have digital imaging and fingerprint scan biometrics placed on their RFID chips. [116] This combination of biometrics aims to create an unrivaled level of security and protection against fraudulent identification papers [ vague ]. Technical specifications for the new passports have been established by the European Commission. [117] The specifications are binding for the Schengen agreement parties, i.e. the EU countries, except Ireland, and the four European Free Trade Association countries—Iceland, Liechtenstein, [118] [119] Norway and Switzerland. [120] These countries are obliged to implement machine readable facial images in the passports by 28 August 2006, and fingerprints by 26 June 2009. [121] The European Data Protection Supervisor has stated that the current legal framework fails to "address all the possible and relevant issues triggered by the inherent imperfections of biometric systems". [122]
Irish biometric passports only used a digital image and not fingerprinting. German passports printed after 1 November 2007 contain two fingerprints, one from each hand, in addition to a digital photograph. Romanian passports will also contain two fingerprints, one from each hand. The Netherlands also takes fingerprints and was [123] the only EU member that had plans to store these fingerprints centrally. [124] According to EU requirements, only nations that are signatories to the Schengen acquis are required to add fingerprint biometrics. [125]
In the EU nations, passport prices will be:
In the EFTA, passport prices will be:
The ICAO standard sets a 35x45 mm image with adequate resolution with the following requirements:
Though some countries like USA use a 2x2 inch photo format (51x51 mm), they usually crop it to be closer to 35:45 in ratio when issuing a passport.
An identity document is a document proving a person's identity.
The Malaysian passport is the passport issued to citizens of Malaysia by the Immigration Department of Malaysia. The main legislation governing the production of passports and travel documents, their possession by persons entering and leaving Malaysia, and related matters is the Passport Act 1966.
The Singapore passport is a passport issued to citizens of the Republic of Singapore. It enables the bearer to exit and re-enter Singapore freely; travel to and from other countries in accordance with visa requirements; facilitates the process of securing assistance from Singapore consular officials abroad, if necessary; and requests protection for the bearer while abroad.
Greek passports are issued to Greek citizens for the purpose of international travel. Biometric passports have been issued since 26 August 2006, with old-style passports being declared invalid as of 1 January 2007. Since June 2009, the passport's RFID chip includes two index fingerprints as well as a high-resolution JPEG image of the passport holder. From 18 December 2023, issuance of the new generation of Greek passports was started by selected authorities and after 9 January 2024, only the new generation of passports are issued. Every Greek citizen is also a citizen of the European Union. The passport, along with the national identity card allows for free rights of movement and residence in any of the states of the European Union, European Economic Area, and Switzerland.
The Armenian passport is a passport issued to Armenian citizens to enable them to travel outside Armenia, and entitles the bearer to the protection of Armenia's consular officials overseas. Armenian citizens have visa-free or visa on arrival access to 65 countries and territories as of 2023.
A German passport is an identity document issued to nationals of Germany for the purpose of international travel. A German passport is, besides the German ID card and the German Emergency Travel Document, the only other officially recognised document that German authorities will routinely accept as proof of identity from German citizens. Besides serving as proof of identity and presumption of German nationality, they facilitate the process of securing assistance from German consular officials abroad. German passports are valid for ten years or six years and share the standardised layout and burgundy red design with other EU passports. Every German citizen is also a citizen of the European Union. The passport, along with the national identity card, allows for free rights of movement and residence in any of the states of the European Union, European Economic Area and Switzerland.
Lithuanian passport is an official document, issued to Lithuanian citizens to identify themselves as such and/or to facilitate travel outside Lithuania. Every Lithuanian citizen is also a citizen of the European Union. The Lithuanian passport, along with the national identity card allows for free rights of movement and residence in any of the states of the European Union, European Economic Area and Switzerland.
A Dutch passport is an identity document issued to citizens of the Kingdom of the Netherlands for the purpose of international travel. As the Netherlands only distinguish one category of citizen, for all countries in the Kingdom, passports are the same for all four countries. The passport also serves as a means of identification as required by the Dutch law since 1 January 2005 for all persons over the age of fourteen. Dutch passports are valid for a period of ten years from issuing date. The passport complies with the rules for European Union passports. Since 26 August 2006 all passports are issued as a biometric passport with an embedded contactless smartcard RFID chip for storing biometric data. Every Dutch citizen is also a citizen of the European Union. The nationality allows for free rights of movement and residence in any of the states of the European Union, European Economic Area, and Switzerland.
The Swedish national identity card is a non-compulsory biometric identity document issued in Sweden. It is one of two official identity documents issued by the Swedish Police, the other being the Swedish passport. It is only issued to Swedish citizens, and indicates the citizenship.
Brazilian passport is the official document for foreign travel issued by the federal government, through the Federal Police.
A Moldovan passport is an international document issued to citizens of the Republic of Moldova for the purpose of international travel. The passport is issued by the Public Services Agency and by Moldovan foreign representations abroad. The passport is valid for ten years. For children under the age of seven years it is valid for four years. Since 1 January 2006, Moldovan citizens can hold two passports simultaneously, providing a written request has been submitted to local passport office.
The Albanian passport is a travel document issued by the Ministry of Interior to Albanian citizens to enable them to travel abroad. They are also used as proof of identity within the country, along with the Albanian ID card.
The Lebanese passport is a passport issued to the citizens of the Republic of Lebanon to enable them to travel outside the Republic of Lebanon and entitles the bearer to the protection from the diplomatic missions and consulates of the Republic of Lebanon if necessary. It is issued exclusively by the Lebanese Directorate General of General Security (DGGS), and can also be issued at various Lebanese diplomatic missions and/or consulates outside of the Republic of Lebanon. It allows the bearer a freedom of living in the Republic of Lebanon without any immigration requirements, participate in the Lebanese political system, entry to and exit from the Republic of Lebanon through any port, travel to and from other countries in accordance with visa requirements, facilitates the process of securing consular assistance abroad from the diplomatic missions and consulates of the Republic of Lebanon if necessary, and requests protection for the bearer while abroad.
Extended Access Control (EAC) is a set of advanced security features for electronic passports that protects and restricts access to sensitive personal data contained in the RFID chip. In contrast to common personal data which can be protected by basic mechanisms, more sensitive data must be protected further for preventing unauthorized access and skimming. A chip protected by EAC will allow that this sensitive data is read only by an authorized passport inspection system.
Maldivian passport is a proof of citizenship, issued by Maldives Immigration, to all the nationals of the Maldives for international travel. The current passport, the 2nd generation e-passport, was launched on 24 January 2016. This passport consists of a highly secured poly-carbonate data page with laser engraved photos and data. Each visa page of the passport has a different design, represented with numerous illustrations by the Maldivian local artist, Hussain Ali Manik. A Maldivian Passport can be issued to any Maldivian citizen who applies for a passport.
The Albanian identity card (Letërnjoftim) is a national identity card issued by Albanian authorities to Albanian citizens. It is proof of identity, citizenship and residence. The current version is in ID1 format and biometric. The ID card is compulsory for citizens over 16 years of age, costs 1,500 lekë and is valid for 10 years.
The German Identity Card is issued to German nationals by local registration offices in Germany and diplomatic missions abroad, while it is produced at the Bundesdruckerei in Berlin.
Biometrics refers to the automated recognition of individuals based on their biological and behavioral characteristics, not to be confused with statistical biometrics; which is used to analyse data in the biological sciences. Biometrics for the purposes of identification may involve DNA matching, facial recognition, fingerprints, retina and iris scanning, voice analysis, handwriting, gait, and even body odor.
Sahrawi passports are passports issued to citizens of the Sahrawi Republic. They are issued by the Ministry of Foreign Affairs or Interior, and launched by National Centre of Documents Production.
The Identification Document, also known as Cédula de identidad, is the compulsory Uruguayan identity document, issued by the Ministry of the Interior through the National Directorate of Civil Identification (DNIC).