Search the archive: |
| | |
At a key interoperability test for second-generation ePassports in Prague earlier this month, Entrust successfully demonstrated a public key infrastructure (PKI) certificate exchange using UK and Slovenian systems in a multi-country test environment.
Showcasing its 'point-and-click' PKI system, Entrust explained that the security infrastructure for second-generation ePassports, based on Extended Access Control (EAC), is now ready for global deployment.
Confidence of success
Taking place over five days, one of the key objectives of the Prague tests was for European countries to prove the standards conformance of their ePassports containing fingerprint biometric data protected by EAC functions. A second objective was to verify crossover interoperability between EAC inspection systems and ePassports from different countries.
According to Entrust's chairman, Bill Conner, "As only two of four countries that signed up for all four PKI tests, we were proud of our customers - Slovenia and UK - for stepping up to the plate and helping us demonstrate a flawless execution of our EAC PKI offering."
EU certificate policy
In addition to standard conformance and crossover interoperability, the tests were the first organised attempt to verify EAC PKI operation in accordance with the European Union Certificate Policy, including bilateral exchange of EAC certificates.
Twelve of the 27 participating countries completed the first PKI test round, and four countries participated in all four phases of the PKI testing, demonstrating a complete end-to-end system.
While all twelve countries demonstrated certificate exchanges with multiple country certificate authorities, UK and Slovenia completed the four PKI test phases, as well as targeted exchanges with all 12 countries. As part of the event, Entrust also demonstrated integration with other ePassport equipment vendors, including L-1, 3M and G.E.T.
Adding biometrics
Many countries are now beginning to evolve their ePassport programmes to the second generation, which includes enhanced security and privacy capabilities. European Union (EU) member countries are required to add advanced biometric data to their machine-readable travel documents (MRTDs) by June 2009.
This is because, among other reasons, the terrorists of 9/11 modified existing paper passports to cross borders while travelling into the United States. This highlighted the need for a more secure passport. In moving to electronic passports, the International Civil Aviation Organisation (ICAO) touted two primary goals: to ensure a forged or modified passport could not be used to cross borders and to prevent a criminal from impersonating the holder of a genuine passport. The second-generation of ePassports will provide governments with a stronger biometric (typically a fingerprint or iris scan) that is more difficult to impersonate.
Source: Entrust Inc.
|
