Identity document forgery

Last updated

West German customs employee checking an alleged fake document. Bundesarchiv B 145 Bild-F011684-0010, Koln, Zollkriminalinstitut.jpg
West German customs employee checking an alleged fake document.

Identity document forgery is the process by which identity documents issued by governing bodies are illegally copied and/or modified by persons not authorized to create such documents or engage in such modifications, for the purpose of deceiving those who would view the documents about the identity or status of the bearer. [1] The term also encompasses the activity of acquiring identity documents from legitimate bodies by falsifying the required supporting documentation in order to create the desired identity. [2]

Contents

Identity documents differ from other credentials in that they are intended to be usable by only the person holding the card. Unlike other credentials, they may be used to restrict the activities of the holder as well as to expand them.

Documents that have been forged in this way include driver's licenses (historically forged or altered as an attempt to conceal the fact that persons desiring to purchase alcohol are under the legal drinking age); birth certificates and Social Security cards (likely used in identity theft schemes or to defraud the government); and passports (used to evade restrictions on entry into a particular country). At the beginning of 2010, there were 11 million stolen or lost passports listed in the global database of Interpol. [3]

Such falsified documents can be used for identity theft, age deception, illegal immigration, organized crime, and espionage. [4]

Use scenarios, forgery techniques and security countermeasures

Lee Harvey Oswald's fake service card with the name Hidell. Fake service card with the name Alex J. Hidell, CE795.jpg
Lee Harvey Oswald's fake service card with the name Hidell.

A distinction needs to be made between the different uses of an identity document. In some cases, the fake ID may only have to pass a cursory inspection, such as flashing a plastic ID card for a security guard. At the other extreme, a document may have to resist scrutiny by a trained document examiner, who may be equipped with technical tools for verifying biometrics and reading hidden security features within the card. To make forgery more difficult, most modern IDs contain numerous security features that require specialised and expensive equipment to duplicate. School IDs are typically easier to fake, as they often do not have the same level of security measures as government-issued IDs.

Fake ID cards can be ordered on the internet and some examples of these include the UK national identification card and a provisional motorcycle licence. There are a number of different types of false documents such as using another person's ID, a genuine document which has been altered, a form of ID that doesn't exist and a copy of an ID which has been made.

Modern fake ID cards almost invariably carry a picture of the authorized user, a simple and effective form of biometric identification. However, forgery of basic photographic ID cards has become simple in recent years with the availability of low-cost high-resolution printers, scanners and photo-editing software. Basic fake ID cards are commonly made using an inkjet or laser printer to print a replica document which is then laminated to resemble a real ID card. Most designs are made using computer programs, re-creating scanned copies of a license.

More complex ID cards are now being created by printing on a material called Teslin or Artisyn, which are paper-like materials that are actually micro-porous plastic sheets. When butterfly pouches and holograms are applied, the card is then run through a heat laminator, creating a professional-looking ID card.

Numerous security printing techniques have been used to attempt to enhance the security of ID cards. For example, many modern documents include holograms, which are difficult to replicate without expensive equipment not generally available. Though accurate recreation of these holograms is extremely difficult, using a mixture of pigments and base can create a similar shiny multi-colored look that may pass cursory inspection. Another form of document security is UV-light visible ink. [4]

In addition, some documents include a magnetic strip, which contains the similar information to that printed on the card. The data may thus be checked against other data on the card, such as printed information or a machine-readable barcode. Magnetic strips may also contain other secret identifying information. Although magnetic strips can also be faked, they provide another barrier to entry for the amateur forger. Other hidden security devices can also be added, including embedded secure cryptoprocessor chips which are designed to be very difficult to forge, and RFID tags⁠ ⁠—⁠ ⁠the two technologies may also be combined, in the case of contactless smart cards.

Another effective technique is the use of online verification of security information against a central database. In many cases, online verification can detect simple copying of a document by detecting attempted use in multiple places at the same time, or completely false IDs, as the information on the ID will be found to be invalid. A simple method of confirming that an ID is genuine is to print a serial number on it unique to the card and stored on a centralized database. [5] If checked, it will quickly become clear that the ID is false; either the number on the ID is not registered for the holder, or no ID has the number at all. Online verification also has the advantage that it allows easy revocation of lost or stolen documents.

Using digital signatures is another effective method of detecting ID forgery. The ID can include a copy of its data on an integrated circuit or barcode, digitally signed by the document issuer. The digital signature allows for easy authentication of the ID. If the digital signature of a fake ID is checked, it will immediately become evident that the ID is fake, because either the digitally signed copy of the holder's data does not match the data printed on the ID or the (possibly altered) copy of the ID's data is not signed by the document issuer. [6] The effectiveness of this security feature depends on the document issuer keeping the private key used to sign IDs secret, [7] as well as the strength of the cryptographic algorithm used for the ID's digital signature.

Many modern credentials now contain some kind of barcode. For example, many U.S. driving licences include a 2-dimensional code in PDF417 format, which contains the same information as on the front of the license. Barcodes allow rapid checking of credentials for low-security applications, and may potentially contain extra information which can be used to verify other information on the card.

Systemic attacks

The combination of multiple high-security features, biometrics, and well-trained document inspectors with technical assistance can be very effective at preventing forged documents from being easily produced. Instead of acquiring the expensive specialized equipment needed to make fake documents, it may be more economical to produce a "genuine fake"⁠ ⁠—⁠ ⁠a legitimate document, but one which contains false information.

One way of doing this is to present the document issuing authority with false credentials, which they will then endorse by issuing a new document. In this way, false identities and credentials can be "bootstrapped" over a period of time. [8]

Another simpler way of generating false credentials is to suborn one of the officials involved in the document-issuing process through bribery or intimidation. This may also be combined with the bootstrapping process mentioned above to mount complex attacks.

Corruption in the document-issuing process is hard to counter, since as the value of a credential increases, the economic incentives for corruption also increase. This is particularly true in the case of fake ID cards that combine many functions in one document, and for documents which are issued in large numbers, thus requiring many thousands of people to have authorizing powers, thus creating a longer chain of people who can possibly be exploited. Detection of a "genuine fake" document is also a difficult process; as such a fake is a legitimate document, it will pass any tests for forgery. To detect such fakes, it is necessary to perform a background check on the individual in question to confirm the legitimacy of the document's information.

See also

Related Research Articles

<span class="mw-page-title-main">Authentication</span> Act of proving an assertion

Authentication is the act of proving an assertion, such as the identity of a computer system user. In contrast with identification, the act of indicating a person or thing's identity, authentication is the process of verifying that identity. It might involve validating personal identity documents, verifying the authenticity of a website with a digital certificate, determining the age of an artifact by carbon dating, or ensuring that a product or document is not counterfeit.

An identity document is any document that may be used to prove a person's identity. If issued in a small, standard credit card size form, it is usually called an identity card, or passport card. Some countries issue formal identity documents, as national identification cards that may be compulsory or non-compulsory, while others may require identity verification using regional identification or informal documents. When the identity document incorporates a person's photograph, it may be called photo ID.

<span class="mw-page-title-main">Electronic identification</span> Digital proof of identity

An electronic identification ("eID") is a digital solution for proof of identity of citizens or organizations. They can be used to view to access benefits or services provided by government authorities, banks or other companies, for mobile payments, etc. Apart from online authentication and login, many electronic identity services also give users the option to sign electronic documents with a digital signature.

Electronic authentication is the process of establishing confidence in user identities electronically presented to an information system. Digital authentication, or e-authentication, may be used synonymously when referring to the authentication process that confirms or certifies a person's identity and works. When used in conjunction with an electronic signature, it can provide evidence of whether data received has been tampered with after being signed by its original sender. Electronic authentication can reduce the risk of fraud and identity theft by verifying that a person is who they say they are when performing transactions online.

<span class="mw-page-title-main">Mexican passport</span> Passport of the United Mexican States issued to Mexican nationals

The Mexican passport is the passport issued to Mexican citizens for the purpose of travelling abroad. The Mexican passport is also an official ID and proof of Mexican citizenship. According to the January 2024 Henley Visa Restrictions Index, holders of a Mexican passport can visit 161 countries without a visa, placing Mexico in the 23rd rank in terms of global travel freedom.

<span class="mw-page-title-main">National identity card (Sweden)</span> National identity card of Sweden

The Swedish national identity card is a non-compulsory biometric identity document issued in Sweden. It is one of two official identity documents issued by the Swedish Police, the other being the Swedish passport. It is only issued to Swedish citizens, and indicates the citizenship.

<span class="mw-page-title-main">Polish identity card</span> National identity card of Poland

The Polish Identity Card is a national identity document issued to Polish citizens. As Poland is a European Union member state it is also serves a European Identity card. Every Polish citizen 18 years of age or older residing permanently in Poland is required to have an identity card issued by the local office of civic affairs. Children as well as Polish citizens living permanently abroad are entitled, but not required, to have one. Identity cards are valid for a period of 10 years.

<span class="mw-page-title-main">Moldovan identity card</span> National identity card of Moldova

The Moldovan identity card, from 2025 – is a compulsory identity document issued in the Republic of Moldova. Every Moldovan citizen who resides in the Republic of Moldova must have an ID card. Moldovan ID cards are issued by the Public Services Agency. The following are required to have an ID card: from birth until 10 years of age, from 10 years of age until 16, from 16 years of age until 25, and from 25 years of age until 45. After 45 years of age, the ID card is not required to be renewed.

<span class="mw-page-title-main">Biometric Database Law</span> Israeli law

The Biometric Database Law is an Israeli law which the Knesset passed in December 2009, determining that fingerprints and facial contours would be collected from all Israeli residents, that the collected data would be integrated onto the Israeli digital identity cards and digital passports, and that a biometric government database of all Israeli citizens and residents would be created which would be used for biometric identification that would allow the management of access control, identification of individuals and assist in locating individuals suspected of criminal activity by the law enforcement officials. When the law passed in December 2009 it was determined that the law be gradually applied and that at the first phase, the inclusion of one's biometric data in the central database would be voluntary.

<span class="mw-page-title-main">German identity card</span> German identity document

The German Identity Card is issued to German nationals by local registration offices in Germany and diplomatic missions abroad, while it is produced at the Bundesdruckerei in Berlin.

<span class="mw-page-title-main">Greek identity card</span> National identity card of Greece

The Greek identity card is the official national identification document for Greek citizens. It is issued by the Hellenic Police.

A whole new range of techniques has been developed to identify people since the 1960s from the measurement and analysis of parts of their bodies to DNA profiles. Forms of identification are used to ensure that citizens are eligible for rights to benefits and to vote without fear of impersonation while private individuals have used seals and signatures for centuries to lay claim to real and personal estate. Generally, the amount of proof of identity that is required to gain access to something is proportionate to the value of what is being sought. It is estimated that only 4% of online transactions use methods other than simple passwords. Security of systems resources generally follows a three-step process of identification, authentication and authorization. Today, a high level of trust is as critical to eCommerce transactions as it is to traditional face-to-face transactions.

<span class="mw-page-title-main">Ghana Card</span> National identity card of Ghana

The Ghana Card is the national Identity card that is issued by the Ghanaian authorities to Ghanaian citizens – both resident and non-resident, legal and permanent residents of foreign nationals. It is proof of identity, citizenship and residence of the holder. The current version is in ID1 format and biometric. It is issued by the National Identification Authority of Ghana and Regarded as a property of the country as such. In July 2023, through the initiative of the Vice President, Dr. Mahamudu Bawumia, new card numbers were issued to newborn babies as part of pilot program to incorporate newborn babies unto the database.

The Lebanese identity card is a compulsory Identity document issued to citizens of the Republic of Lebanon by the police on behalf of the Lebanese Ministry of Interior or in Lebanese embassies/consulates (abroad) free of charge. It is proof of identity, citizenship and residence of the Lebanese citizens.

Biometrics refers to the automated recognition of individuals based on their biological and behavioral characteristics, not to be confused with statistical biometrics; which is used to analyse data in the biological sciences. Biometrics for the purposes of identification may involve DNA matching, facial recognition, fingerprints, retina and iris scanning, voice analysis, handwriting, gait, and even body odor.

<span class="mw-page-title-main">South African identity card</span> National identity card of South Africa

The South African smart identity card – known as a Smart ID Card – replaces the old green bar-coded identity book. Both are identity documents that serve as proof of a person's identity. This proof includes a person's photograph, their full name, their date of birth, their place of birth, and their unique identity number. The identity card securely stores the biometrics information of the individual. The card also has space to securely store additional info, such as evidence of votes cast in local and national elections, as a means to prevent voter fraud.

<span class="mw-page-title-main">Norwegian identity card</span> National identity card of Norway

The Norwegian identity card, commonly referred to as the national identity card in Norway, is a non-compulsory biometric identity document issued since 30 November 2020. It is one of two official identity documents issued by the Norwegian Police Service, the other being the Norwegian passport. It is only issued to Norwegian citizens, and may indicate citizenship so that it can be used as a travel document facilitating freedom of movement within the European Free Trade Association and the European Economic Area. For travel within the Nordic countries no identity documentation is legally required for Nordic citizens due to the Nordic Passport Union.

Australia does not have a national identity card. Although Australia Post, which is government owned, does have a nationwide identity card called a Keypass but it is not accepted everywhere and you may need alternate forms of ID. Various Identity documents of Australia may be used or required to prove a person's identity instead of a national identity card, whether for government or commercial purposes such as:

<span class="mw-page-title-main">Philippine national identity card</span> National identity card of the Philippines

The Philippine Identification System ID, also known as the Philippine Identification Card or simply the national ID, is the official national identity card for Filipino citizens worldwide and foreign permanent residents in the Philippines. The document is a significant part of the Philippine Identification System (PhilSys), the national identification system to be implemented by the Philippine government.

<span class="mw-page-title-main">Identity Document (Uruguay)</span>

The Identification Document, also known as Cédula de identidad, is the compulsory Uruguayan identity document, issued by the Ministry of the Interior through the National Directorate of Civil Identification (DNIC).

References

  1. Buchanan, James D. R.; Cowburn, Russell P.; Jausovec, Ana-Vanessa; Petit, Dorothée; Seem, Peter; Xiong, Gang; Atkinson, Del; Fenton, Kate; Allwood, Dan A.; Bryan, Matthew T. (2005). "'Fingerprinting' documents and packaging". Nature. 436 (7050): 475. doi:10.1038/436475a. ISSN   1476-4687. PMID   16049465. S2CID   4164867.
  2. Bennett, Colin John; Lyon, David (2008). Playing the Identity Card: Surveillance, Security and Identification in Global Perspective. Routledge. ISBN   9780415465632.
  3. "11 million stolen or lost passports in Interpol database". Havocscope Black Markets.
  4. 1 2 Turner, J. W. Cecil (1946). ""Documents" in the Law of Forgery". Virginia Law Review. 32 (5): 939–954. doi:10.2307/1068683. ISSN   0042-6601. JSTOR   1068683.
  5. "Driver's License Verification". www.e-verify.gov. March 2019. Retrieved 2020-02-23.
  6. "Levels of identity security and groups of secure features". thalesgroup.com. Thales Group. 2022. Retrieved 6 June 2023.
  7. "Understanding Digital Signatures". cisa.gov. Cybersecurity and Infrastructure Security Agency. 1 February 2021. Retrieved 6 June 2023.
  8. "Journalisten Rambam niet vervolgd voor fraude". NU (in Dutch). 2013-06-13. Retrieved 2023-04-26.