This biometric symbol is usually printed on the cover of biometric (ICAO compliant) passports.
A biometric passport (also known as an electronic passport, e-passport or a digital passport) is a traditional passport that has an embedded electronic microprocessor chip, which contains biometric information that can be used to authenticate the identity of the passport holder. It uses contactless smart card technology, including a microprocessor chip (computer chip) and antenna (for both power to the chip and communication) embedded in the front or back cover, or centre page, of the passport. The passport's critical information is printed on the data page of the passport, repeated on the machine readable lines and stored in the chip. Public key infrastructure (PKI) is used to authenticate the data stored electronically in the passport chip, supposedly making it expensive and difficult to forge when all security mechanisms are fully and correctly implemented.
Most countries are issuing biometric passports to their citizens. Malaysia was the first country to issue biometric passports in 1998.[1] By the end of 2008, 60 countries were issuing such passports,[2] which increased to over 150 by mid-2019.[3]
The currently standardised biometrics used for this type of identification system are facial recognition, fingerprint recognition, and iris recognition. These were adopted after assessment of several different kinds of biometrics including retinal scan. Document and chip characteristics are documented in the International Civil Aviation Organization's (ICAO) Doc 9303 (ICAO 9303).[4] The ICAO defines the biometric file formats and communication protocols to be used in passports. Only the digital image (usually in JPEG or JPEG 2000 format) of each biometric feature is actually stored in the chip. The comparison of biometric features is performed outside the passport chip by electronic border control systems (e-borders). To store biometric data on the contactless chip, it includes a minimum of 32 kilobytes of EEPROM storage memory, and runs on an interface in accordance with the ISO/IEC 14443 international standard, amongst others. These standards intend interoperability between different countries and different manufacturers of passport books.
Biometric passports have protection mechanisms to avoid and/or detect attacks:
Non-traceable chip characteristics
Random chip identifiers reply to each request with a different chip number. This prevents tracing of passport chips. Using random identification numbers is optional.
BAC protects the communication channel between the chip and the reader by encrypting transmitted information. Before data can be read from a chip, the reader needs to provide a key which is derived from the Machine Readable Zone: the date of birth, the date of expiry and the document number. If BAC is used, an attacker cannot (easily) eavesdrop transferred information without knowing the correct key. Using BAC is optional.
Passive Authentication (PA)
PA is aimed at identifying modification of passport chip data. The chip contains a file, Document Security Object (SOD), that stores hash values of all files stored in the chip (picture, fingerprint, etc.) and a digital signature of these hashes. The digital signature is made using a document signing key which itself is signed by a country signing key. If a file in the chip (e.g., the picture) is changed, this can be detected since the hash value is incorrect. Readers need access to all used public country keys to check whether the digital signature is generated by a trusted country. Using PA is mandatory.[6] As of January 2017, 55 of over 60 e-passport-issuing countries belong to the PKD program.[7]
Active Authentication (AA)
AA prevents cloning of passport chips. The chip contains a private key that cannot be read or copied, but its existence can easily be proven. Using AA is optional.
EAC adds functionality to check the authenticity of both the chip (chip authentication) and the reader (terminal authentication). Furthermore, it uses stronger encryption than BAC. EAC is typically used to protect fingerprints and iris scans. Using EAC is optional. In the European Union, using EAC is mandatory for all documents issued starting 28 June 2009.[citation needed]
SAC was introduced by ICAO in 2009 for addressing BAC weaknesses. It was introduced as a supplement to BAC (for keeping compatibility), but will replace it in the future.
Shielding the chip
This prevents unauthorised reading. Some countries – including at least the US – have integrated a very thin metal mesh into the passport's cover to act as a shield when the passport cover is closed.[8] The use of shielding is optional.
To assure interoperability and functionality of the security mechanisms listed above, ICAO and GermanFederal Office for Information Security (BSI) have specified several test cases. These test specifications are updated with every new protocol and are covering details starting from the paper used and ending in the chip that is included.[9]
Attacks
Since the introduction of biometric passports, several attacks have been presented and demonstrated.
Non-traceable chip characteristics
In 2008, a Radboud/Lausitz University team demonstrated that it is possible to determine which country a passport chip is from without knowing the key required for reading it.[10] The team fingerprinted error messages of passport chips from different countries. The resulting lookup table allows an attacker to determine from where a chip originated. In 2010, Tom Chothia and Vitaliy Smirnov documented an attack that allows an individual passport to be traced,[11][12] by sending specific BAC authentication requests. In 2016, Avoine et al. published a survey on security and privacy issues in passport protocols, where a new technique to track passports is introduced, based on the response time of basic commands.[13]
In 2005, Marc Witteman showed that the document numbers of Dutch passports were predictable,[14] allowing an attacker to guess/crack the key required for reading the chip. In 2006, Adam Laurie wrote software that tries all known passport keys within a given range, thus implementing one of Witteman's attacks. Using online flight booking sites, flight coupons and other public information it's possible to significantly reduce the number of possible keys. In some early biometric passports BAC wasn't used at all, allowing attacker to read the chip's content without providing a key.[15]
Passive Authentication (PA)
In 2006, Lukas Grunwald demonstrated that it is trivial to copy passport data from a passport chip into a standard ISO/IEC 14443 smartcard using a standard contactless card interface and a simple file transfer tool.[16] Grunwald used a passport that did not use Active Authentication (anti-cloning) and did not change the data held on the copied chip, thus keeping its cryptographic signature valid.
In 2008, Jeroen van Beek demonstrated that not all passport inspection systems check the cryptographic signature of a passport chip. For his demonstration Van Beek altered chip information and signed it using his own document signing key of a non-existing country. This can only be detected by checking the country signing keys that are used to sign the document signing keys. To check country signing keys the ICAO PKD[17] can be used. Only 5 out of 60+ countries are using this central database.[18] Van Beek did not update the original passport chip: instead an ePassport emulator was used.[19]
Also in 2008, The Hacker's Choice implemented all attacks and published code to verify the results.[20] The release included a video clip that demonstrated problems by using a forged Elvis Presley passport that is recognized as a valid US passport.[21]
Active Authentication (AA)
In 2005, Marc Witteman showed that the secret Active Authentication key can be retrieved using power analysis.[14] This may allow an attacker to clone passport chips that use the optional Active Authentication anti-cloning mechanism on chips – if the chip design is susceptible to this attack.
In 2008, Jeroen van Beek demonstrated that optional security mechanisms can be disabled by removing their presence from the passport index file.[22] This allows an attacker to remove – amongst others – anti-cloning mechanisms (Active Authentication). The attack is documented in supplement 7 of Doc 9303 (R1-p1_v2_sIV_0006)[23] and can be solved by patching inspection system software. Note that supplement 7 features vulnerable examples in the same document that – when implemented – result in a vulnerable inspection process.[citation needed]
In 2014, Calderoni et al. show a procedure to bypass the security protocol that is commonly adopted to prove chip authenticity (Active Authentication) within first-generation electronic passports. The discussed breach is related to some metadata files (EF.COM, EF.SOD) and allows the attacker to conceal those data required by the inspection system during the protocol's execution.[24] This breach may facilitate a malicious user in using fake documents cloned from original ones.
In 2007, Lukas Grunwald presented an attack that can make EAC-enabled passport chips unusable.[25] Grunwald states that if an EAC-key – required for reading fingerprints and updating certificates – is stolen or compromised, an attacker can upload a false certificate with an issue date far in the future. The affected chips block read access until the future date is reached.
Opposition
Map of countries with biometric passports as of August 2024
Privacy proponents in many countries question and protest the lack of information about exactly what the passports' chip will contain, and whether they affect civil liberties. The main problem they point out is that data on the passports can be transferred with wireless RFID technology, which can become a major vulnerability. Although this could allow ID-check computers to obtain a person's information without a physical connection, it may also allow anyone with the necessary equipment to perform the same task. If the personal information and passport numbers on the chip are not encrypted, the information might wind up in the wrong hands.
On 15 December 2006, the BBC published an article[26] on the British ePassport, citing the above stories and adding that:
"Nearly every country issuing this passport has a few security experts who are yelling at the top of their lungs and trying to shout out: 'This is not secure. This is not a good idea to use this technology'", citing a specialist who states "It is much too complicated. It is in places done the wrong way round – reading data first, parsing data, interpreting data, then verifying whether it is right. There are lots of technical flaws in it and there are things that have just been forgotten, so it is basically not doing what it is supposed to do. It is supposed to get a higher security level. It is not."
and adding that the Future of Identity in the Information Society (FIDIS) network's research team (a body of IT security experts funded by the European Union) has "also come out against the ePassport scheme... [stating that] European governments have forced a document on its people that dramatically decreases security and increases the risk of identity theft."[27]
Most security measures are designed against untrusted citizens (the "provers"), but the scientific security community recently also addressed the threats from untrustworthy verifiers, such as corrupt governmental organizations, or nations using poorly implemented, unsecure electronic systems.[28] New cryptographic solutions such as private biometrics are being proposed to mitigate threats of mass theft of identity. These are under scientific study, but not yet implemented in biometric passports.
Issued since 5 January 2012.[29] Valid for 10 years for adults, and 5 years for minors. The data page of the passport is from rigid polycarbonate plastic and contains a microchip embedded in which are stored biometric data of the holder including fingerprints, photo and signature. The data is extracted from the chip with wireless RFID technology. Algerian citizens have visa-free or visa on arrival access to 50 countries and territories, ranking it 91st in the world according to the Henley Passport Index Q1 2022.
Issued since 8 March 2010.[32][33] The Botswana passport, which features 48 pages, is written in English and French. The firsts page features a map of Botswana superimposed with wildlife. As of 2014 the Botswana passport was the 4th most powerful on the African continent, allowing Batswana citizens travel to at least 70 countries visa free,[34] 28 with visa on arrival and 121 requiring a visa.[35] The passport is ranked 58th in the world.[35][36]
Issued since 26 January 2016, costing €50. It is noted that the scheme will gradually expand to Cape Verdean diplomatic missions in Boston and Lisbon in the future.[38]
Issued since 23 January 2014. As of 1 January 2017, Gabonese citizens had visa-free or visa on arrival access to 50 countries and territories, ranking the Gabonese passport 86th in terms of travel freedom (tied with Haitian and Malagasy passports) according to the Henley visa restrictions index.[39]
Issued since 1 March 2010 and costing GH¢50–100 for adults and children. The passports contain several other technological characteristics other than biometric technology. However the Ghanaian biometric passports do not carry the "chip inside" symbol (), which is mandatory for ICAO-standard electronic passports.[40][41][42]
As of February2020[update], the application fee for regular 32 page passport booklet is GH₵320 and GH₵550 for regular 48 page passport booklet. The application fee for expedited 32 page passport booklet is GH₵350 and GH₵300 for expedited 48 page passport booklet.[43] To facilitate the application for and acquisition of Ghanaian passports, Passport Application Centers (PACs) have been set up around the major cities of Ghana, including Accra, Kumasi, Tamale, Ho, Sekondi-Takoradi, and in Sunyani.[44] 22 Diplomatic Missions outside Ghana have the mandate as at November 2020, to issue Biometric Passports to Ghanaians who are abroad.[45] Passports issued for applications received starting 31 March 2019 have a validity period of ten years (it was previously five years).[46] The Ministry of Foreign Affairs and Regional Integration has introduced a 48-page passport booklet (It was previously 32 pages only) available from 1 February 2020.
Issued since 1 September 2017. Contain fingerprints, facials and signature including other vital information, which is all ICAO compliant.
In mid July 2019, a few foreign embassies such as Berlin, Paris, London, and Washington, DC started processing applications for Kenyans in the diaspora. Kenya plans to invalidate old style passports on 31 December 2021.
Lesotho
Date of introduction is uncertain. However, the enabling statute was tabled in November 2016.[47]
Issued since 2014 and costs 110,000 Ariary. Since September 2014, it is mandatory for Malagasy citizens to depart the country with a biometric passport.[48]
Mauritania
Issued since 6 May 2011,[49] costs US$115.68. Valid for 5 years.
Issued since 2007 as the first in Africa. The harmonized ECOWAS Smart electronic passport issued by the Nigerian Immigrations Service is powered by biometric technology in tandem with the International Civil Aviation Organization (ICAO) specifications for international travels.
Travelers' data captured in the biometric passport can be accessed instantly and read by any security agent from any spot of the globe through an integrated network of systems configured and linked to a centrally-coordinated passport data bank managed by the Nigerian Immigrations Service.
Issued since 27 June 2019, and is in compliance with the new East African Community technical specifications as well as International Civil Aviation Organization (ICAO). Among the new features include a microchip making it tamper-proof. The Rwandan passport is issued Rwandan citizens for international travel. Rwanda started issuing East African Community Biometric Passport also known as E-Passport in June 2019 replacing the old ones that will only stay valid until June 2021, The new passports are valid for five years and ten years. Ordinary, service, and diplomatic passports are issued.
Sierra Leone
Issued since 1st Sept 2015 in compliance with International Civil Aviation Organisation (ICAO). New book design launched at the same time as the switch to e-passport from Machine Readable Passport (MRP). Book re-designed again in 2022 and electronic chip upgraded for faster processing of bio-metric data. Currently issuing e-passports for Ordinary, Diplomatic and Service books.[54]
Issued since May 2009, costs SDG 250 (approximately USD 100), SDG200 for students and SDG100 for children. Valid for 10 years, or 7 years for a commercial passport.[58]
The new electronic passports are issued in three categories. The citizen's passport (ordinary passport) is issued to ordinary citizens and contains 48 pages. Business men/women who need to travel often have a commercial passport that contains 64 pages. Smaller passports that contain 32 pages only are issued to children. The microprocessor chip contains the holder's information.
Issued since 1 January 2018. The Bio-metric Tanzanian passport is one of the strongest passports in Africa. It is in compliance with the new East African Community Passport which eases border crossing for east African community member nationals. In 2022, the Tanzanian passport was ranked 74 in the global mobility ranking and maintained its spot as the ninth most powerful in Africa.
Issued since September 2011. Contains digital images of fingerprints, photo and electronic signature of the passport holder. Valid for up to 10 years.[60][61]
Issued since July 2012. Contains digital images of fingerprints, photo and electronic signature of the passport holder. Valid for 10 years.[62][63][64]
Issued since April 2010, biometric machine-readable passports cost ৳3450 (US$29) for regular delivery, including all taxes, and ৳6900 (US$58) for express delivery including all taxes.[67] E-passports cost ৳4025 (US$34) to ৳13800 (US$120) with all taxes included.[68] The cost varies depending on the number of pages and the validity of the e-passport.[68] The e-passport is valid for either five years or ten years depending on the age of the applicant.[69] Bangladesh is the first country in South Asia to issue e-passports for all eligible citizens. The electronic microprocessor chip embedded e-passport has forty-one different security features, including holographic images embossed in thin film laminate, which change colour under light and appear to move.[70] Demographic and biometric information of the bearer including the fingerprints of all ten fingers, iris scan, color photograph of the face and digital signature are stored on the chip in the e-passport.[71] The Government of Bangladesh issues three different types of e-passports. These are diplomatic passports with a red cover; official passports with a blue cover; and regular or ordinary passports with a green cover.
Issued since 17 July 2014. The cost for a 5-year passport, issued only to children aged five and under, is US$80; while the 10-year passport, issued to all people older than five, costs US$100.[73]
On 30 January 2011, the Ministry of Foreign Affairs of the People's Republic of China launched a trial issuance of e-passports for public affairs. The face, fingerprint and other biometric features of the passport holder will be digitalized and stored in pre-installed contactless smart chip in the passport.[74][75] On 1 July 2011, the Ministry began issuing biometric passports to all individuals conducting public affairs work overseas on behalf of the Chinese government.[76]
Ordinary biometric passports have been introduced by the Ministry of Public Security starting from 15 May 2012.[77] The cost of a passport is 200 CNY (approximately US$31) for first time applicants in China and CNY220 (or US$35) for renewals and passports issued abroad.
Effective from 1 July 2017, cost of a biometric ordinary passport is reduced to CNY160 (approximately US$24) for both first time applicants and renewal applicants.[78] As of April 2017, China had issued over 100 million biometric ordinary passports.[79]
In 2006, the Immigration Department announced that Unihub Limited (a PCCW subsidiary company heading a consortium of suppliers, including Keycorp) had won the tender to provide the technology to produce biometric passports. In February 2007, the first biometric passport was introduced. The cover of the new biometric passport remains essentially the same as that of previous versions, with the addition of the "electronic passport" logo at the bottom. However, the design of the inner pages has changed substantially. The design conforms with the document design recommendations of the International Civil Aviation Organization. The new ePassport featured in the 2008 Stockholm Challenge Event and was a finalist for the Stockholm Challenge Award in the Public Administration category. The Hong Kong SAR ePassport design was praised on account of the "multiple state-of-the-art technologies [which] are seamlessly integrated in the sophisticated Electronic Passport System (e-Passport System)".[80] The cost for a HKSAR passport is HKD 370 (or USD 48) for a 32-page passport and HKD 460 (or USD 59) for a 48-page passport.[81]
The Government of India issues three different types of passports – Diplomatic passports; Official passports; and regular/ordinary passports.
India initiated the first phase deployment of Biometric Passports in 2008, only to diplomatic passport holders. On 25 June 2008 Indian Passport Authority issued the first Biometric passport to Pratibha Patil, the then President of India.[82]
Between 2008 and 2024, Biometric passport rollout for ordinary citizens was in various stages of internal development, testing and tendering.
In April 2024, The Government has finally started the test rollout of Biometric Passports to ordinary citizens. It started with the testing of the project at Regional Passport Offices (RPO) in Bhubaneswar and Nagpur. Post successful pilot launch and requisite certifications, it will be rolled out at remaining Regional Passport Offices across India in a phased manner in 2025.
48-page biometric passports cost Rp650,000 (US$43).[83] As of 12 October 2022, the validity of newly issued passports are extended from 5 years to 10 years.[84] Diplomatic and service biometric passports are issued since 19 August 2021.[85]
Issued since July 2007 for diplomatic and service passports, 20 February 2011 for ordinary biometric passports. The cost of a new passport was approximately IRR1,500,000 (less than US$8) if issued inside Iran, 100 euros if issued overseas.[86]
Issued since July 2013 for a 2-year pilot project under the Biometric Database Law. This was optional. In August 2013, any passport expiring in more than 2 years could be replaced free of charge with a biometric one upon request. Passports expiring within 2 years were charged the full fee. The review of the pilot project (that was supposed to be concluded in 2015) was postponed by order of the Minister of the Interior to a later date, due to the controversy regarding the creation of the Biometric Database rather than storing the biometric data only in the passport's chip, as is the practice in many other countries. In 2015, the duration of the pilot project was extended until 2017. In May 2017, the pilot project ended. Newly issued passports were then required to be biometric.[88]
To obtain a biometric passport, an applicant must appear in an Interior Ministry office "to be photographed by the special camera which records information such as facial bone structure, distance between one's eyes, ears to eyes and ratio of facial features one from another. The applicant will also be fingerprinted and all this information will be stored in the new high-tech electronic passport."[89]
As of January 2022, Israeli passports issued in the airport or outside of Israel are not biometric, and are generally valid for 5–10 years (1 year if issued as an emergency passport in the airport).
Issued since March 2006. The passports meet requirements of the US Visa Waiver Program which calls for countries to roll out their biometric passports before 26 October 2006.
In May 2024, the Jordanian government has announced that the tender to issue Jordanian electronic passports in accordance with international standards has been awarded. The new Jordanian passport will be in line with the requirements of the ICAO.
The company to which the tender is awarded will begin its work after obtaining the order to proceed in accordance with legal procedures, and the tender will be implemented within a maximum period of (250) working days.[90]
Issued since 1 August 2016. Lebanese passports are navy blue, with the Lebanese Cedar emblazoned in the centre of the front cover. "The Lebanese Republic, Passport" is written on the cover page in both Arabic and French. The contents of the passport are in Arabic, French and English.
Issued since 1998.[1] Malaysia is however not a member of the Visa Waiver Program (VWP) and its first biometric passport did not conform to the same standards as the VWP biometric document because the Malaysian biometric passport was issued several years ahead of the VWP requirement. The difference lies in the storage of fingerprint template instead of fingerprint image in the chip, the rest of the technologies are the same. Also the biometric passport was designed to be read only if the receiving country has the authorisation from the Malaysian Immigration Department. Malaysia started issuing ICAO compliant passports from February 2010.[91]
Malaysia used to issue passports with validity for 2 years and 5 years, but the passport with 2 years validity was withdrawn since January 2015.[92]
The pricing for a Malaysian passport are RM200 (approximately US$50) with 5 years validity, MYR100 (approximately US$25) for senior citizens, children below 12, Hajj pilgrims, and students below 21 and studying abroad is MYR100 and is free for disabled citizens.[93]
Issued since 26 July 2006. The new passport follows a completely new design, and features the passport holder's facial and fingerprint information as biometric identifiers. A 32-page Ordinary passport will cost Rf350, while a 64-page Ordinary passport will cost Rf600. Children under the age of 10 years and people applying for passports through diplomatic missions abroad will be issued with a 32-page non-electronic Ordinary passport, which will cost Rf250.
Issued since the end of 2014.[98] It consists of 48 pages and is valid for up to 10 years. Omani passports' cover is red and have inscriptions in golden letters indicating the official name of the country at the top and the word "passport" at the bottom both in Arabic and English divided by the coat of arms. The biometric passport symbol, alerting to the presence of a RFID chip inside the document, is at the very bottom of the cover page.[99] In June 2019, Omani citizens had visa-free or visa on arrival access to 83 countries and territories, ranking the Omani passport 52nd in the world according to the Passport index.[100]
The Government of Pakistan issues three different types of passports. These are Diplomatic passports; Official passports; and Ordinary passports. On March 30, 2022, Prime Minister Imran Khan launched the e-passport service, which has twenty-nine new security features added. At this initial stage, the e-passport facility was only available for diplomatic officials and government officials who are issued diplomatic passports and official passports respectively.[101] The issuance of e-passports for Islamabad residents only commenced on June 10, 2023, at DGI&P Headquarters in Islamabad. However, starting from 16 August 2023, the issuance of e-passports extended to all field offices throughout the nation. Over time, this service will also be introduced to Foreign Missions of Pakistan abroad.[102]
On February 10, 2022; the Saudi Arabian ministry of interior has announced that they began issuing the new electronic Saudi Passport, with the same issuing fees as the past (300 SAR for 5 years and 600 SAR for 10 years).[106][107]
Issued since 15 August 2006,[108] costs SGD70 if applied for online, by mail or ICA deposit box and SGD80 if applied for via a Singapore Overseas Mission. Valid for 10 years. The passport now complies with the US Visa Waiver Program.[109]
Issued since 25 August 2008, costs 55,000 Won (USD 55). Validity for 5 and 10 years. On 21 December 2021, issuing the next generation biometric passports to South Korean citizens has begun, which was delayed by one year as planned due to the COVID-19 pandemic.[110][111]
Syria has started issuing biometric passports on 21 August 2023 for all new passports. The fee varies from £100 to £700 based on the period of processing. The validity varies between 2 years for young male citizens (due to military service), up to 6 years for other citizens. The current fee for the urgent passport (1–3 days processing time) makes it the most expensive passport globally.[112]
Diplomats and government officials passports issued from 26 May 2005. From 1 June 2005, a limited quantity of 100 passports a day was issued for Thai citizens, however, on 1 August 2005 a full operational service was installed and Thailand became the first country in Asia to issue an ICAO compliant biometric passport.[113]
Turkish passports which are compatible with European Union standards have been available since 1 June 2010.[114] Colours of the new biometric passports have also been changed. Accordingly, regular passports; claret red, special passports; bottle green and diplomatic passports wrap black colours.[115]
Turkish Minister of the State announced that the government is printing the new passports at government minting office since the private contractor failed to deliver in March 2016.[116]
As of January 2022, cost of issuing a 10-year passport in Turkey is ₺1703.30 (approximately €115).[117]
Turkmenistan became the first country in ex-USSR, in mid-Asia region to issue an ICAO-compliant biometric passport. The passport is available since 10 July 2008.[118]
The United Arab Emirates Ministry of Interior began to issue biometric passports on 11 December 2011, making it the second GCC state to launch biometric passports after Qatar.[119]
In Uzbekistan on 23 June 2009 Islam Karimov issued a Presidential Decree[120] "On measures to further improve the passport system in the Republic of Uzbekistan." On 29 December 2009 the President of Uzbekistan signed a decree to change the dates for a phased exchange of populations existing passport to the biometric passport. In accordance with this decree, biometric passports were phased in, beginning on 1 January 2011. In the first phase, the biometric passport was issued to employees of ministries, departments and agencies of the republic, individuals who travel abroad or outside the country, as well as citizens who receive a passport in connection with the achievement of a certain age or for other grounds provided by law. The second phase was for the rest of the population who were able to get new passports for the period from 2012 to 2015.
It was planned that, except for Denmark and Ireland, EU passports would have digital imaging and fingerprint scan biometrics placed on their RFID chips.[122] This combination of biometrics aims to create an unrivaled level of security and protection against fraudulent identification papers [vague]. Technical specifications for the new passports have been established by the European Commission.[123] The specifications are binding for the Schengen agreement parties, i.e. the EU countries, except Ireland, and the four European Free Trade Association countries—Iceland, Liechtenstein,[124][125] Norway and Switzerland.[126] These countries are obliged to implement machine readable facial images in the passports by 28 August 2006, and fingerprints by 26 June 2009.[127] The European Data Protection Supervisor has stated that the current legal framework fails to "address all the possible and relevant issues triggered by the inherent imperfections of biometric systems".[128]
Irish biometric passports only used a digital image and not fingerprinting. German passports printed after 1 November 2007 contain two fingerprints, one from each hand, in addition to a digital photograph. Romanian passports will also contain two fingerprints, one from each hand. The Netherlands also takes fingerprints and was[129] the only EU member that had plans to store these fingerprints centrally.[130] According to EU requirements, only nations that are signatories to the Schengen acquis are required to add fingerprint biometrics.[131]
In the EU nations, passport prices will be:
Austria (available since 16 June 2006): an adult passport costs €75.90,[132] while a chip-free child's version costs €30.[133] As of March 2009 all newly issued adult passports contain fingerprints.[134] Passports are valid for 2 years after issuance for children up to the age of 1; 5 years for children aged 2–11; 10 years for citizens aged 12 and older.
Belgium (introduced in October 2004): €71 or €41 for children + local taxes. As of May 2014, passports for adults are valid for 7 years.
Bulgaria (introduced in July 2009; available since 29 March 2010): BGN40 (€20) for adults. Passports are valid for 5 years.[135]
Croatia (available since 1 July 2009): HRK390 (€53). The chip contains two fingerprints and a digital photo of the holder. Since 18 January 2010 only biometric passports can be obtained at issuing offices inside Croatia. Diplomatic missions and consular offices must implement new issuing system until 28 June 2010.
Cyprus (available since 13 December 2010): €70, valid for 10 years
Czechia (available since 1 September 2006): CZK600 for adults (valid 10 years), CZK100 for children (valid 5 years). Passports contain fingerprints.
Denmark (available since 1 August 2006): DKK890 for adults (valid for 10 years), DKK150 for children 0–11 (valid for 2 years [age 0–2] or 5 years), DKK178 for children 12–17 (valid for 5 years), and DKK378 retirement age (from July 2021 67 years) (valid for 10 years). A new and standardised photo must be supplied too. As of January 2012 all newly issued passports contain fingerprints.[136][137]
Estonia (available since 22 May 2007): EEK450 (€28.76) (valid for 5 years). As of 29 June 2009, all newly issued passports contain fingerprints.[138]
Finland (available since 21 August 2006): €53 (valid for up to 5 years). As of 29 June 2009, all newly issued passports contain fingerprints.[139]
France (available since April 2006): €86 or €89 (depending whether applicant provides photographs), valid for 10 years. As of 8June2022[update], all newly issued passports contain fingerprints with the exception of emergency passports that hold a validity of 1 year.[140][141][142]
Germany (available since November 2005): ≤23 year old applicants (valid for 6 years) €37.50 and >24 years (valid 10 years) €70.[143] Passports issued from 1 November 2007 onwards include fingerprints.[144][145]
Greece (available since 26 August 2006): €84.40 (valid for 3 years for children up to 14, valid for 10 years for adults).[146] Since June 2009, passports contain fingerprints.[147]
Hungary (available since 29 August 2006): HUF7,500 (€26), valid for 5 years, HUF14,000 (€48.50) valid for 10 years. As of 29 June 2009, all newly issued passports contain fingerprints.[148][149][150]
Ireland: Biometric passport booklets have been available since 16 October 2006, and Biometric passport cards since October 2015. 34-page passport booklets are priced at €75, 66-page booklets at €105,[151] both valid for 10 years. For children aged between 3 and 18 years the price is €26.50 and the passport booklets are valid for 5 years. Infants' passport booklets for those under 3 years cost €16 and expire 3 years after issue. Irish biometric passport cards are only available to adults of 18 years and over who already have an Irish passport booklet and cost €35. They expire on the same date as the holder's Irish passport booklet or 5 years after issue, whichever is the shorter period. (Ireland is not a signatory to the Schengen Acquis and has no obligation or plans to implement fingerprint biometrics.)
Italy (available since 26 October 2006): €116,[152] valid for 10 years. As of January 2010 newly issued passports contain fingerprints.[153]
Latvia (available since 20 November 2007): an adult passport costs €30, or €20 if received together with eID,[154] valid for 10 or 5 years.
Lithuania (available since 28 August 2006): €43.[155] For children up to 16 years old, valid max 5 years. For persons over 16 years old, valid for 10 years.[156]
Malta (available since 8 October 2008): €70 for persons over 16 years old, valid for 10 years, €35 for children between 10 and 16 years (valid for 5 years) and €14 for children under 10 years (valid for 2 years).
Netherlands (available since 28 August 2006): Approximately €11 on top of regular passport (€38.33) cost €49.33. Passports issued from 21 September 2009 include fingerprints. Dutch identity cards are lookalike versions of the holder's page of the passport but do not contain fingerprints.[157]
Poland (available since 28 August 2006): PLN140 (€35) for adults, PLN70 for children aged under 13, free for seniors 70+ years, valid 10 years (5 years for children aged below 13). Passports issued from 29 June 2009 include fingerprints of both index fingers.[158]
Portugal (available since 31 July 2006 – special passport; 28 August 2006 – ordinary passport): €65 for all citizens valid for 5 years. All passports have 32 pages.[159]
Romania (available since 31 December 2008): RON258 for citizens over the age of 12, RON234 for citizens under the age of 12,[160] valid for 10 years for those over the age of 18, 5 years for those over the age of 12 to 18, and for 3 years for those under 12. As of 19 January 2010, new passport includes both facial images and fingerprints.[161] Temporary passports valid for only one year can be issued for the price of RON96 and is issued in less than 3 working days.
Slovakia (available since 15 January 2008): an adult passport (>13 years) costs €33.19 valid for 10 years, while a chip-free child's (5–13 years) version costs €13.27 valid for 5 years and for children under 5 years €8.29, but valid only for 2 years. The latest version was issued in 2014 and contains a contactless chip in the biodata card that meets ICAO specifications.[162]
Slovenia (available since 28 August 2006): €42.05 for adults, valid for 10 years. €35.25 for children from 3 to 18 years of age, valid for 5 years. €31.17 for children up to 3 years of age, valid for 3 years. All passports have 32 pages, a 48-page version is available at a €2.50 surcharge. As of 29 June 2009, all newly issued passports contain fingerprints.[163]
Spain (available since 28 August 2006) at a price of €26 (price at 2018), free passports are issued for citizens that hold a "Familia Numerosa" document. They include fingerprints of both index fingers as of October 2009. (Aged <30 a Spanish passport is valid for 5 years, otherwise they remain valid for 10 years).
Sweden (available since October 2005): SEK 400 (valid for 5 years). As of 1 January 2012, new passport includes both facial images and fingerprints.[164]
In the EFTA, passport prices will be:
Iceland Issued since 23 May 2006 and costing ISK 5,100 (ISK 1,900 for under 18 and over 67).
Liechtenstein biometric passports issued since 26 October 2006.[165] The technical specifications are binding for Liechtenstein[124][125] as it became part of the Schengen area in 2011.[166] The cost of the passport ranges from CHF 50 (children under 12) to CHF 250 for adults.
Norway Issued since 2005, costs NOK 450 for adults, or c. €50, NOK 270 for children. Increased to NOK 570/342 in 2020.[167] In 2007 the Norwegian government launched a ‘multi-modal’ biometric enrolment system supplied by Motorola. Motorola's new system enabled multiple public agencies to digitally capture and store fingerprints, 2D facial images and signatures for passports and visas.[168] The Norwegian biometrics company IDEX ASA has begun development of electronic ID cards (eID) with fingerprint security technology for use throughout the EU.[169]
Switzerland Issued since 4 September 2006, costs CHF 140 for adults and CHF 60 for children under 18 years.[170] Since 1 March 2010, all issued passports are biometric, containing a photograph and two fingerprints recorded electronically.[171]
Issued since 1 September 2021, Valid for 10 years. Contains fingerprints and facial photo, the bearer's photo and all the data written on the passport.
Issued since 15 October 2009 and costing 50 KM (€25.65). Valid 10 years for adults and 5 years for younger than 18. On 1 June 2010 Bosnia and Herzegovina issued its first EAC passport.
Issued since 2010. Valid for 10 years to adults, costing 150 lari if issued at tenth business day. The same day issuance will cost 350 lari. The price of the photo (3 Lari) needs to be paid additionally. There are discounts, e.g. a 50% discount for persons under age 18.[172][173]
Issued since 1 January 2008, costing approximately 760 MDL (€45)[174] and is obligatory from 1 January 2011. The passport of the Republic of Moldova with biometric data contains a chip which holds digital information, including the holder's signature, as well as the traditional information. It is valid for 7 years (for persons over 7) and 4 years (for persons less than 7) respectively. It was introduced as a request of European Union to safeguard the borders between the E.U. and Republic of Moldova.
Issued since 2006. Since 3 August 2018, they cost 5,000 rubles (approximately US$80) and use printed data, photo and fingerprints and are BAC-encrypted.[175] Biometric passports issued after 1 March 2010 are valid for 10 years. Russian biometric passports are currently issued within Russia and in all of its consulates. From 1 January 2015, the passports contain fingerprints.
Issued since 7 July 2008, costs RSD3,600 or approximately €32.[176] Valid for 10 years, 5 years for children aged 3 to 14, and for 3 years for children aged 3 or less.
It was first planned to issue biometric passports and identity cards on 1 January 2013.[177] They started being issued since January 2015.[citation needed]
Starting August 2021, Ukrainian citizens can use digital passports and identity cards in the Diia app for all legal purposes within Ukraine.[178]
In Ukraine, the term "digital passport" is used to denote only the fully digital version of the biometric passport accessible via the Diia mobile app.[178]
United Kingdom introduced it in March 2006, initially costing £72.50 for adults (valid for 10 years) and £46[179] for children under the age of 16 (valid for 5 years).[180]
Issued since March 22, 2022. Available to all citizens, biometric passports replaced regular passports. Regular passports are valid until expiry date. The price has remained the same at US$35 for a 5-year period and US$50 for a 10-year period. The passport is ICAO-Compliant with the biometric symbol () printed on the biographical data page as well as at the bottom on the front cover.[187]
The biometric version of the U.S. passport (sometimes referred to as an electronic passport) has descriptive data and a digitized passport photo on its contactless chips, and does not have fingerprint information placed onto the contactless chip. However, the chip is large enough (64 kilobytes) for inclusion of biometric identifiers. The U.S. Department of State first issued these passports in 2006,[189] and since August 2007 issues biometric passports only. Non-biometric passports are valid until their expiration dates.[190]
Although a system able to perform a facial-recognition match between the bearer and his or her image stored on the contactless chip is desired,[191] it is unclear when such a system will be deployed by the U.S. Department of Homeland Security at its ports of entry.[192][193]
A high level of security became a priority for the United States after the attacks of 11 September 2001. High security required cracking down on counterfeit passports. In October 2004, the production stages of this high-tech passport commenced as the U.S. Government Printing Office (GPO) issued awards to the top bidders of the program. The awards totaled to roughly $1,000,000 for startup, development, and testing. The driving force of the initiative is the U.S. Enhanced Border Security and Visa Entry Reform Act of 2002 (also known as the "Border Security Act"), which states that such smartcardidentity cards will be able to replace visas. As for foreigners travelling to the U.S., if they wish to enter U.S. visa-free under the Visa Waiver Program (VWP), they are now required to possess machine-readable passports that comply with international standards. Additionally, for travellers holding a valid passport issued on or after 26 October 2006, such a passport must be a biometric passport if used to enter the U.S. visa-free under the VWP.[194]
Issued since October 2005, costs AU$325 as of 1 January 2023.[196] Contains the same personal information that is on the colour photo page, including a digitized photograph. Australia does not use fingerprinting of incoming passengers. Valid for 10 years for adults and 5 years for minors to 16 years.
Issued since November 2005, like Australia and the US, New Zealand is also using the facial biometric identifier. There are two identifying factors: the small symbol on the front cover (), indicating that an electronic chip has been embedded in the passport and the polycarbonate leaf in the front (version 2009) of the book, inside which the chip is located. Like Australia, New Zealand has installed SmartGates into airports to allow New Zealand ePassport and ePassport holders of 4 other countries (Australia, Canada, UK, and US) to clear immigration controls more rapidly, and facial recognition technology has been installed at immigration gates. The cost for a non-urgent passport is NZ$199 (when applying online or in person in New Zealand) for adults, and NZ$115 for children.[198] Passport were valid for five years if issued before December 2015. However, in 2015 the New Zealand government approved for the reinstatement of a 10-year validity period for passports, with all passports issued after December 2015 being valid for 10 years.
Issued since 1 February 2019 and costing BOB 550 (USD 79.13). Valid 6 years. The Bolivian ePassport has the same functions as the other biometric passports as regulations from OASI.
Issued since December 2006. However, just in December 2010 it began to issue passports with microchips, first in the capital Brasília and Goiás state. Since the end of January 2011, this last is available to be issued all over Brazil. Valid for 10 years for adults and costs R$156.07 (approximately €35).[200] In December 2014, the Federal Police Department extended the validity of the document, from five to ten years.[201]
On 21 February 2016, the Superintendencia Nacional de Migraciones announced that the first Peruvian biometric passports would be delivered by 26 February 2016.[204][205] It features a new cover, along with several security improvements, in order to be exempted for visas for the Schengen Area.[206] It will cost PEN 98.50, approximately USD 28, making it the cheapest passport in Latin America.[207]
The Uruguayan Ministry of the Interior started to issue biometric passports to Uruguayan citizens on 16 October 2015. The new passport complies with the standards set forth by the Visa Waiver Program of the United States.[208] However for naturalised citizens, the passport is not ICAO 9303 compliant as the country of birth is used in the "nationality" field and associated MRZ leading to errors being returned on usage (as noted in section 7.1 of ICAO 9303 part 3).
Issued after July 2007, Venezuela was the first Latin American country issuing passports including RFID chips along other major security improvements. The chip has photo and fingerprints data.[209]
Biometric passport photo requirements
The ICAO standard sets a 35x45 mm image with adequate resolution with the following requirements:
The facial image shall depict a true likeness of the rightful holder of the passport and shall not be digitally altered or enhanced to change the subject's appearance in any way
A close up of the head and shoulders with the subject facing square on and looking directly at the camera with both eyes visible and with a neutral expression with the mouth closed
Both edges of the face must be clearly visible. The subject shall not be looking, portrait-style, over one shoulder
The eyes must be open, and there must be no hair obscuring them
Glasses: the photograph must show the eyes clearly with no lights reflected in the glasses. The glasses shall not have tinted lenses. Avoid heavy frames if possible and ensure that the frames do not cover any part of the eyes. Glasses should appear only if permanently worn.
Head coverings shall not be accepted except in circumstances that the issuing State specifically approves. The face must be visible from the hairline to the chin and forward of the ears.
A uniform light-coloured background shall be used to provide a contrast to the face and hair. For colour portraits, light blue, beige, light brown, pale grey or white are recommended for the background
Though some countries like USA use a 2x2 inch photo format (51x51 mm), they usually crop it to be closer to 35:45 in ratio when issuing a passport.
The Malaysian passport is the passport issued to citizens of Malaysia by the Immigration Department of Malaysia. The main legislation governing the production of passports and travel documents, their possession by persons entering and leaving Malaysia, and related matters is the Passport Act 1966.
The Singapore passport is a passport issued to citizens of the Republic of Singapore. It enables the bearer to exit and re-enter Singapore freely; travel to and from other countries in accordance with visa requirements; facilitates the process of securing assistance from Singapore consular officials abroad, if necessary; and requests protection for the bearer while abroad.
Greek passports are issued to Greek citizens for the purpose of international travel. Biometric passports have been issued since 26 August 2006, with old-style passports being declared invalid as of 1 January 2007. Since June 2009, the passport's RFID chip includes two index fingerprints as well as a high-resolution JPEG image of the passport holder. From 18 December 2023, issuance of the new generation of Greek passports was started by selected authorities and after 9 January 2024, only the new generation of passports are issued. Every Greek citizen is also a citizen of the European Union. The passport, along with the national identity card allows for free rights of movement and residence in any of the states of the European Union, European Economic Area, and Switzerland.
The Armenian passport is a passport issued to Armenian citizens to enable them to travel outside Armenia, and entitles the bearer to the protection of Armenia's consular officials overseas. Armenian citizens have visa-free or visa on arrival access to 65 countries and territories as of 2023.
A German passport is an identity document issued to nationals of Germany for the purpose of international travel. A German passport is, besides the German ID card and the German Emergency Travel Document, the only other officially recognised document that German authorities will routinely accept as proof of identity from German citizens. Besides serving as proof of identity and presumption of German nationality, they facilitate the process of securing assistance from German consular officials abroad. German passports are valid for ten years or six years and share the standardised layout and burgundy red design with other EU passports. Every German citizen is also a citizen of the European Union. The passport, along with the national identity card, allows for free rights of movement and residence in any of the states of the European Union, European Economic Area and Switzerland.
Lithuanian passport is an official document, issued to Lithuanian citizens to identify themselves as such and/or to facilitate travel outside Lithuania. Every Lithuanian citizen is also a citizen of the European Union. The Lithuanian passport, along with the national identity card allows for free rights of movement and residence in any of the states of the European Union, European Economic Area and Switzerland.
The Pakistani passport is an essential travel document granted by the Government of Pakistan to its citizens for international travel purposes. The Directorate General of Immigration & Passports holds the responsibility for passport issuance, under the regulation of the Ministry of Interior.
A Dutch passport is an identity document issued to citizens of the Kingdom of the Netherlands for the purpose of international travel. As the Netherlands only distinguish one category of citizen, for all countries in the Kingdom, passports are the same for all four countries. The passport also serves as a means of identification as required by the Dutch law since 1 January 2005 for all persons over the age of fourteen. Dutch passports are valid for a period of ten years from issuing date. The passport complies with the rules for European Union passports. Since 26 August 2006 all passports are issued as a biometric passport with an embedded contactless smartcard RFID chip for storing biometric data. Every Dutch citizen is also a citizen of the European Union. The nationality allows for free rights of movement and residence in any of the states of the European Union, European Economic Area, and Switzerland.
A Moldovan passport is an international document issued to citizens of the Republic of Moldova for the purpose of international travel. The passport is issued by the Public Services Agency and by Moldovan foreign representations abroad. The passport is valid for ten years. For children under the age of seven years it is valid for four years. Since 1 January 2006, Moldovan citizens can hold two passports simultaneously, providing a written request has been submitted to local passport office.
The Albanian passport is a travel document issued by the Ministry of Interior to Albanian citizens to enable them to travel abroad. They are also used as proof of identity within the country, along with the Albanian ID card.
The Algerian passport is an international travel document issued to citizens of Algeria, and may also serve as proof of Algerian citizenship. Besides enabling the bearer to travel internationally and serving as indication of Algerian citizenship, the passport facilitates the process of securing assistance from Algerian consular officials abroad.
The Lebanese passport is a passport issued to the citizens of the Republic of Lebanon to enable them to travel outside the Republic of Lebanon and entitles the bearer to the protection from the diplomatic missions and consulates of the Republic of Lebanon if necessary. It is issued exclusively by the Lebanese Directorate General of General Security (DGGS), and can also be issued at various Lebanese diplomatic missions and/or consulates outside of the Republic of Lebanon. It allows the bearer a freedom of living in the Republic of Lebanon without any immigration requirements, participate in the Lebanese political system, entry to and exit from the Republic of Lebanon through any port, travel to and from other countries in accordance with visa requirements, facilitates the process of securing consular assistance abroad from the diplomatic missions and consulates of the Republic of Lebanon if necessary, and requests protection for the bearer while abroad.
The Bangladeshi passport is an ICAO compliant, machine-readable and biometric e-passport issued for the purpose of travel to foreign countries by the passport holder. Bangladesh is the first country in South Asia to issue e-passports for all eligible citizens. The passport booklet is manufactured, printed and issued by the Department of Immigration & Passports of the Ministry of Home Affairs. This electronic microprocessor chip embedded e-passport has forty-one different security features, including holographic images embossed in thin-film laminate, which change colour under light and appear to move. Demographic and biometric information of the e-passport holder are stored on the chip inside the e-passport. This information includes the fingerprints of all ten fingers of the passport holder; the iris scan of both eyes; a color photograph of the face of the bearer; their digital signature; etc. Depending on the age of the applicant, the e-passport is valid for either five years or ten years and it is distributed by the Government of The People's Republic of Bangladesh, or by any of its overseas diplomatic missions, to eligible Bangladeshi nationals who are citizens by birth, by descent or through naturalization.
Maldivian passport is a proof of citizenship, issued by Maldives Immigration, to all the nationals of the Maldives for international travel. The current passport, the 2nd generation e-passport, was launched on 24 January 2016. This passport consists of a highly secured poly-carbonate data page with laser engraved photos and data. Each visa page of the passport has a different design, represented with numerous illustrations by the Maldivian local artist, Hussain Ali Manik. A Maldivian Passport can be issued to any Maldivian citizen who applies for a passport.
The Uzbekistan passport, being the property of the Republic of Uzbekistan, is issued to the citizens of Uzbekistan for international travels. An ordinary international passport can be issued to an infant at birth and must be renewed after 2 years, next one for toddlers renewed after 5 years and later every 10 years. The passport could also be changed in case of damage or when the bearer of the passport changed his/her name.
The Albanian identity card (Letërnjoftim) is a national identity card issued by Albanian authorities to Albanian citizens. It is proof of identity, citizenship and residence. The current version is in ID1 format and biometric. The ID card is compulsory for citizens over 16 years of age, costs 1,500 lekë and is valid for 10 years.
Biometrics refers to the automated recognition of individuals based on their biological and behavioral characteristics, not to be confused with statistical biometrics; which is used to analyse data in the biological sciences. Biometrics for the purposes of identification may involve DNA matching, facial recognition, fingerprints, retina and iris scanning, voice analysis, handwriting, gait, and even body odor.
Sahrawi passports are passports issued to citizens of the Sahrawi Republic. They are issued by the Ministry of Foreign Affairs or Interior, and launched by National Centre of Documents Production.
Many countries have entry restrictions on foreigners that go beyond the common requirement of having either a valid visa or a visa exemption. Such restrictions may be health related or impose additional documentation requirements on certain classes of people for diplomatic or political purposes.
Automated border control systems (ABC) or eGates are automated self-service barriers which use data stored in a chip in biometric passports along with a photo or fingerprint taken at the time of entering the eGates to verify the passport holder's identity. Travellers undergo biometric verification using facial or iris recognition, fingerprints, or a combination of modalities. After the identification process is complete and the passport holder's identity is verified, a physical barrier such as a gate or turnstile opens to permit passage. If the passport holder's identification is not verified or if the system malfunctions, then the gate or turnstile does not open and an immigration officer will meet the person. E-gates came about in the early 2000s as an automated method of reading the then-newly ICAO mandated e-passports.
↑ Hegemann, Hendrik (March 2015). "Constructions of Effectiveness and the Rationalization of Counterterrorism Policy: The Case of Biometric Passports". Studies in Conflict & Terrorism. 38 (3): 199–218. doi:10.1080/1057610X.2014.982384. S2CID110098665.
↑ Tom Chothia; Vitaliy Smirnov (2010). A Traceability Attack Against e-Passports(PDF). 14th International Conference on Financial Cryptography and Data Security. Retrieved 8 September 2010.
↑ Luca Calderoni; Dario Maio (September 2014). "Cloning and tampering threats in e-Passports". Expert Systems with Applications. 41 (11): 5066–5070. doi:10.1016/j.eswa.2014.02.044.
↑ EC News articleArchived 9 January 2009 at the Wayback Machine about the relevant regulations: Council Regulation (EC) 2252/2004, Commission Decision C(2005)409 adopted on 28 February 2005 and Commission Decision C(2006)2909 adopted on 28 June 2006
↑ Opinion of the European Data Protection Supervisor on the proposal for a Regulation of the European Parliament and of the Council amending Council Regulation (EC) No 2252/2004 on standards for security features and biometrics in passports and travel documents issued by Member States, 6 August 2008
This page is based on this Wikipedia article Text is available under the CC BY-SA 4.0 license; additional terms may apply. Images, videos and audio are available under their respective licenses.
