ویراساینس.
سند علمی

Preventing Security and Privacy Attacks on Machine Readable Travel Documents (MRTDs)

Gaurav S. Kc, Paul A. Karger

چکیده

After the tragic terror attacks of 9/11, the U.S. Congress resolved to bring about a major overhaul of the immigration process at border posts by passing the Enhanced Border Security and Visa Entry Reform Act of 2002. Section 303(c) of that act requires that countries that participate in the US Visa Waiver Program (VWP) have a program to issue machine readable passports that are tamper resistant and incorporate biometric and document authentication identifiers. In the interest of international reciprocity, the U.S. will issue similar machine readable passports to U.S. citizens. The Technical Advisory Group of the International Civil Aviation Organization (TAG/ICAO) has issued specifications for the deployment of Machine Readable Travel Documents (MRTD) that are equipped with a smart card processor for the purposes of biometric identification of the holder. Some countries, such as the United States, intend to issue machine readable passports that serve only as passports. Other countries, such as the United Kingdom, intend to issue more sophisticated multi-application passports that can also serve as national identity cards. We have conducted a detailed security analysis of these specifications, and we present the results in this paper. We also illustrate possible, hypothetical scenarios that in turn, could cause a compromise in the security and privacy of holders of such travel documents. Finally, we suggest improved cryptographic protocols and high-assurance smart card operating systems to prevent these compromises and to support electronic visas as well as passports.

اسناد مشابه

  • Preventing Attacks on Machine Readable Travel Documents (MRTDs)

    سند علمی۲۰۰۵IACR Cryptology ePrint ArchiveGaurav S. Kc, Paul A. Karger

    After the terror attacks of 9/11, the U.S. Congress passed legislation that requires in the US Visa Waiver Program to begin issuing issuing machine readable passports that are tamper resistant and incorporate biometric and document authentication identifiers. The International Ci

  • Security Analysis of the Extended Access Control Protocol for Machine Readable Travel Documents

    سند علمی۲۰۱۰ISCÖzgür Dagdelen, Marc Fischlin

    We analyze the Extended Access Control (EAC) protocol for authenticated key agreement, recently proposed by the German Federal Office for Information Security (BSI) for the deployment in machine readable travel documents. We show that EAC is secure in the Bellare-Rogaway model un

  • The PACE|AA Protocol for Machine Readable Travel Documents, and Its Security

    سند علمی۲۰۱۲Financial CryptographyJens Bender, Özgür Dagdelen, Marc Fischlin, Dennis Kügler

    We discuss an efficient combination of the cryptographic protocols adopted by the International Civil Aviation Organization (ICAO) for securing the communication of machine readable travel documents and readers. Roughly, in the original protocol the parties first run the Password

  • About Machine-Readable Travel Documents Privacy Enhancement Using (Weakly) Non-Transferable Data Authentication

    سند علمی۲۰۰۷Jean Monnerat, Serge Vaudenay, Martin Vuagnoux

    Passports are now equipped with RFID chips that contain private information, biometric data, and a digital signature by issuing authorities. We review most of applicable security and privacy issues. We argue that the main privacy issue is not unauthorized access through radio cha

  • PKI Digital Signatures For Machine Readable Travel Documents

    سند علمی۲۰۰۹M. Auriga

    Technology, have both changed the world dramatically in recent times. The resulting need for improved international security is also having a significant impact on the official identity documentation of individuals. Whereas counterfeiting of identity documents, and alteration of

  • The Extended Access Control for Machine Readable Travel Documents

    سند علمی۲۰۰۹IACR Cryptology ePrint ArchiveRafik Chaabouni, Serge Vaudenay

    Machine Readable travel documents have been rapidly put in place since 2004. The initial standard was made by the ICAO and it has been quickly followed by the Extended Access Control (EAC). In this paper we discuss about the evolution of these standards and more precisely on the