By Neill Tailor

MAY/JUNE 2010 Scenario 1

Scenario 1 – Question 1a

Scenario• A large international airport is required to

introduce a number of security measures and has introduced new customer information services.

Question 1a:• State three items of information that would

be stored on the passport. [3]

Answers for Question 1aAny three points from:• Passport type• Country of issue• Nationality• Passport number• Entry and exit stamps

with dates/ countries visited• Photograph• Name of passport

holder

• Date of birth• Place of birth• Occupation• Issuing office• Holder’s signature• Gender• Date of issue/expiry• Any visa associated with

passport• Additional security

information/biometric data

Examiners report for question 1a

• This section concerns the three items of information on a passport.• There were 14 possible answers to obtain marks and

candidates usually understood which ones were sensible. Centres should emphasise that criminal records are not stored on a passport- a separate, secure database is used with the passport number as the key field. Ethnic group is also not recorded on most passports and was not accepted. Addresses are not used as they can change from time to time.

Scenario 1 – Question 1bScenario:• All passengers will need to have an electronic

passport. The airport will use additional identification in the form of electronic fingerprinting at various points in the airport.• Tickets for all flights are now electronic (e-

tickets).Question 1b:• Describe the electronic components in the

passport. [2]

Answers for Question 1b

Any two points from:• embedded chip in one of the passport pages/

similar in concept to a smart card holding biometric and other data• Use of embedded “ring circuit”/RFID for

communication

Examiners report for question 1b

• This question caused some confusion. The Examiners were looking for electronic elements in a passport. These were RFID and a chip. Very few candidates gave these 2 answers- the key word being electronic. Too many answers were about barcodes, magnetic stripes and even MICR. A magnetic stripe does not hold biometric details. A bar code holds just an ID number and check digit yet they were given as holding biometric details.

Scenario 1 – Question 1cScenario:• All passengers will need to have an electronic

passport. • There are computer-based information kiosks

throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks.

Question 1c:• (c) Describe three advantages of electronic

passports when compared to paper-based passports. [3]

Answers for Question 1cAny three points from:• Information on the chip is quicker to read by computer• Easier to update from a computer• More information can be stored on the electronic

passports• More difficult to “tamper” with the information• More difficult to produce illegal/non-authorised/forged

passports• Difficult for somebody to use the wrong/stolen passport• Remote processing of passport (using RFID)• Could be a smart card/smaller …• … Description of facial/iris recognition system

Examiners report for question 1c

• This question was about the advantages of electronic passports over paper based ones. • Too many candidates did not understand that

an electronic passport is a physical device with electronic elements- it is not a soft copy held in a database.

Scenario 1 – Question 1dScenario:• A large international airport is required to

introduce a number of security measures and has introduced new customer information services.• The airport will use additional identification

in the form of electronic fingerprinting at various points in the airport.

Question 1d:• Explain how the use of electronic

fingerprinting improves airport security. [4]

Answers for Question 1dAny four points from:• Take fingerprints on non-air side of airport• Restricting access to secure areas for staff/passengers• Re-take fingerprints on boarding side• Fingerprints are stored electronically and can be accessed at any

terminal• It is possible to store the fingerprints electronically on passport• Very difficult to forge a finger print/ fingerprints provide greater

security• System check if 2 sets of fingerprints match up• Compares fingerprints with pre-stored values on security

database/passport• Computer database can match fingerprint to a suspect if passport

false• Computer database can match fingerprint to known criminal• Audit trail of employee movements

Examiners report for question 1d

• The use of fingerprints to control and monitor access around an airport was badly understood. The 7 marking points offer guidance about the level of detail required to earn marks in this question that relied on common sense as much as subject knowledge.

Scenario 1 – Question 2aScenario:• Tickets for all flights are now electronic (e-

tickets).• There are computer-based information kiosks

throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks.

Question 2a:• Describe how the system will match an e-ticket

to a passenger when they check in at the airport. [3]

Answers for Question 2aAny three points from:• Lead passenger will have paid by credit card

number and has to give passport number…• - … name matched up with credit card holder

and/or passport• Ticket details emailed to lead passenger• Email printout used as confirmation• Email contains a unique (bar) code which

identifies passenger• Check-in details match up with stored passenger

details

Examiners report for question 2a

• There were 5 marking points for the 3 marks and most candidates scored 2. The barcode on an e-ticket is simply an ID number- it may be derived from passport number and/or credit card number.• It does not hold any large volume of data as

some candidates suggested in their answers.

Scenario 1 – Question 2b

Scenario:• Tickets for all flights are now electronic (e-

tickets).

Question 2b:• Describe the advantages of e-tickets when

compared to paper-based tickets. [3]

Answers for Question 2bAny three points both for passenger and airline from:• Reduces booking expenses for

airline• No need to print out tickets• No need for postage or envelopes• Saving on staff and

accommodation costs• Passenger feels more in control

by selecting seats in advance• More convenient/easily re-

printed• Can’t be lost/stolen/misplaced• Less prone to fraud• Passenger can print out own

ticket, no waiting for delivery

• Speeds up check-in at airport benefits passengers and airline/cuts down queues

• Easier for passenger to buy tickets (i.e. online bookings/no need to go to travel agent)

• System remembers customer details

• From history• From membership number• Simpler for passengers at airport;

only need a form of id

Examiners report for question 2b

• This was a question where candidates scored marks as they found it an easy question to understand.

Scenario 1 – Question 3a

Scenario:• There are computer-based information kiosks

throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks.

Question 3a:• Explain the advantages to the passengers of

having computer-controlled information kiosks rather than manned desks. [3]

Answers for Question 3aAny three points from:• - no long queues at desks• - can be more terminals than desks• - Kiosks not under time pressure (unlike check-in staff)• - Kiosk available 24/7 and not affected by staff taking breaks• - no language problems/multi-language• - no interpersonal arguments• - passengers don’t mind dealing with trivial/ embarrassing questions• - terminal may be easier for passengers with communication

difficulties• - more information generally available• - information more likely to be up to date/less inaccurate• - faster processing at check-in desk as fewer questions to be discussed

Examiners report for question 3• This was an easy question for those candidates who had

used an e-ticket kiosk. Those who had not experienced a kiosk were not at a disadvantage, as they use standard ICT features. Most scored well on this question. Interesting how many answers were given about users not having an argument with a kiosk unlike human desk clerks.

Examiners report for question 3a• This section covered the advantages and was well

answered. Candidates must note for whom the advantages are applicable- in this case it is the passenger not the company.

Scenario 1 – Question 3bScenario:• There are computer-based information kiosks

throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks.

Question 3b:• Discuss the security risks to the system arising

from the introduction of electronic information kiosks. [6]

Answers for Question 3bAny six points discussing the risks from:• NOT what a hacker can do.• Hackers/fraudsters might gain

access to database/server• Use of firewalls• Physical guards• Sensitive data travels to and from

the kiosks• Encrypt the data to make it

meaningless• Authentication techniques e.g. user

ids/ passwords• Levels of access• Need to log out• Digital certification• Need for security if kiosks use Wi-Fi

• People can overlook passengers typing in personal data

• Viruses sent to the system if external data link in kiosk

• Anti-virus software which is updated regularly

• Prevent customers being allowed access to memory devices

• Use of firewalls• Spyware giving access to system

which can look for security information on the system

• Use of anti-spyware software• Use separate systems for

customer information and security

Examiners report for question 3b

• This section was not well answered unlike the previous section. Candidates immediately thought of hacking. In real life this would only happen if the terminals used Wi-Fi to link to the server. The use of other devices is unlikely- apart from skimmers. The kiosks are dedicated to only provide services for e-tickets. They may well not allow www access as many candidates thought and then went on to give generic answers to security from surfing.