icao mrtd symposium icao€¦ · abc systems sspc is a one step ... (hash checks) consistency: •...
TRANSCRIPT
![Page 1: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/1.jpg)
District Schiphol
J.J.M. (Hans) de Moel, B.Sc.ICAO, Montreal, 7-9 OCT 2014
SSPC
![Page 2: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/2.jpg)
District Schiphol
Introduction
Border Control at Schiphol Airport:
Basis: the identity triangle (theory)
Processes: man versus machine (theory and practice)
Self Service Passport Control (practice)
![Page 3: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/3.jpg)
District Schiphol
![Page 4: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/4.jpg)
District SchipholAuthentication
Identification Verification
Identity triangle
3
2
1
securityfeatures
Checks at manual in NL
![Page 5: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/5.jpg)
District SchipholAuthentication by scanner or staff
Identificationin ESTA
Verification by algorithm or staff
Identity triangle
1
2
3
securityfeatures
Checks in Australia
![Page 6: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/6.jpg)
District SchipholAuthentication by document scanner
Identificationin NL-SIS-2
Verificationby biometrics
Identity triangle
2
1
3
securityfeatures
Checks in SSPC
![Page 7: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/7.jpg)
District Schiphol
Identity triangle
Forgeries
Fraud
![Page 8: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/8.jpg)
District Schiphol
![Page 9: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/9.jpg)
District Schiphol
ABC Systems
Automating the processesfrom man to machine
![Page 10: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/10.jpg)
District Schiphol
ABC SystemsChange in documents:•Non-MRTD: Handwritten •MRTD: Machine readable •e-MRTD: machine readable with chip
Change in security features:•Physical security features•Electronic security features
Change in border control•Manual check•Automated check
See KEESING Journal of Documents & Identity, issue 43, 2014, pages 30-33
![Page 11: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/11.jpg)
District Schiphol
ABC Systems
SSPC is a one step process
ABC variations:One step process•all actions within mantrap
Two step processintegrated: •eligibility before and verification in mantrapsegregated: •eligibility at kiosk and verification at gate
Eligibility: EU citizens with e-passport and >18 years only
![Page 12: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/12.jpg)
District Schiphol
ABC Systems
e-passports onlyabout 30% of pax
but <10% use SSPC
![Page 13: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/13.jpg)
District Schiphol
ABC Systems
GATE OPERATION
DECISIONS
QUERIES CO
NN
ECTI
ON
S
![Page 14: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/14.jpg)
District Schiphol
ABC Systems
Currently installed at Amsterdam Airport Schiphol:
6 clusters of 6 e-gates = 36 e-gates
1 cluster of 6 e-gates is operated by 2 border guards:•1 mobile border guard (assistance / false rejections)•1 supervisor (monitoring / false acceptance)•current transaction time: 30 sec/pax•about 50.000 pax/week
In 2015 to be expanded to 72 e-gates
![Page 15: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/15.jpg)
District Schiphol
ABC Systems
ONE STEP PROCESS
![Page 16: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/16.jpg)
District Schiphol
ABC Systems
Developing the system:
•System as a service: higher price, more flexibility
•System errors versus user errors:• time-outs, loops, lighting• following instructions
•Practical adjustments:• document feeder • user interface
![Page 17: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/17.jpg)
District Schiphol
Authentication by document scanner
Identity triangle
1
securityfeatures
Automated Border Control Challenges
![Page 18: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/18.jpg)
District Schiphol
Current types of passports:
Examination
Non e-passports:• check model • check physical security features
E-passports: • check model (generation 1 / generation 2)• check physical security features• check electronic security features
• Passive Authentication• Chip Authentication• Active Authentication
![Page 19: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/19.jpg)
District Schiphol
Passive Authentication – extended version
RFID chip
• Trusted certificate store (ICAO PKD or similar)• Verification of Security Object (EF.SOD) (on chip)• Verification Document Signer certificate (chip or store)• Validity check DS and CSCA certificates (store)• Revocation check DS certificate (CRL’s in store) • Verification of integrity datagroups (hash checks)
CONSISTENCY:• Comparison of DG’s in EF.COM and EF.SOD • Comparison of ‘ISSUER’ in EF.SOD and EF.DG1• Comparison of data in EF.DG1 and MRZ
![Page 20: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/20.jpg)
District Schiphol
Electronic versus physical security features
Examination
![Page 21: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/21.jpg)
District Schiphol
ChallengesIs biopage photo compared to chip photo (DG2) ?
![Page 22: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/22.jpg)
District Schiphol
What can a document scanner DO and what NOT?
?
X
?
X
Checking a passportwatermark
microtext optical variable feature
ImagePerf
UV-patternand thresholds
field comparison
calculation !
Examination
No see through
No tilting
Resolution?
![Page 23: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/23.jpg)
District Schiphol
Challenges
Distinguishing print techniqueseasy for humans,
difficult for machines
![Page 24: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/24.jpg)
District Schiphol
Identification
Identity triangle
2
Automated Border Control Challenges
![Page 25: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/25.jpg)
District Schiphol
ChallengesTypo (by ear)
MahmedMechmetMohamadMohammedMuhamad
VIZ -> MRZHöẞl = HOESSLHöẞl = HOEBLHöẞl = HOBL
Joke van der Steen (NLD)Joke Vandersteen (BEL)Yoka Fonda Stayne (USA)
Li = = LEEAli Ben Mohamed orMohamed Ben Ali
Ping Li orLi Ping
Transcription
Order
Conversions.
![Page 26: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/26.jpg)
District Schiphol
Challenges
VIZ in NLD: Erika Musterfrau, spouse of Van der SteenMRZ: P<NLDMUSTERFRAU<<ERIKA<<<
VIZ in DEU: Erika van der Steen, born as MusterfrauMRZ: P<D<<VAN<DER<STEEN<<ERIKA
Does the MRZ contain all the appropriate data?
Should personal data be more uniform in passports?
![Page 27: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/27.jpg)
District Schiphol
Verificationusing biometrics
Automated Border Control Challenges
Identity triangle
3
![Page 28: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/28.jpg)
District Schiphol
Challenges > 90%
Facial comparison
![Page 29: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/29.jpg)
District Schiphol
Challenges > 50%
Facial comparison
![Page 30: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/30.jpg)
District Schiphol
Challenges < 10%
Facial comparison
![Page 31: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/31.jpg)
District Schiphol
Challenges < 10%
Facial comparison
![Page 32: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/32.jpg)
District Schiphol
QUESTIONS?
![Page 33: ICAO MRTD Symposium icao€¦ · ABC Systems SSPC is a one step ... (hash checks) CONSISTENCY: • Comparison of DG’s in EF.COM and EF.SOD ... ICAO MRTD Symposium icao …](https://reader031.vdocuments.us/reader031/viewer/2022013006/5b91a07709d3f215288c179f/html5/thumbnails/33.jpg)
District Schiphol
Hans de Moel
District Schiphol
+ 31 20 – 603 9175 (office)
+ 31 6 – 2096 2032 (mobile)
Contact