Chapter 5
ePassport and eID Technologies
Lucjan Hanzlik and Mirosław Kutyłowski
Abstract This chapter is devoted to the design and implementation of electronic ID
(eID) such as ePassports and electronic personal identity documents. We present an
overview of existing and emerging concepts, both concerning threats and possible
countermeasures. Thereby we aim to shed light on the development of ubiquitous
systems, where many artifacts will require strong electronic identification with
similar properties to those in the case of eIDs issued for humans.
5.1 Application Scenarios
The initial reason to develop an electronic identity document (eID)—an identity
document with an electronic layer—was to prevent its forgery. The problem is
that purely visual security measures have their limitations. The introduction of the
electronic layer changed the situation substantially.
After introducing the electronic layer into identity documents it became evident
that there are multiple opportunities to design and/or improve systems requiring
strong authentication. The first obvious example is the eGate automatic border
control.
5.1.1 Remote vs. Local Use
The motivation for designing eID systems comes from situations such as automated
border control and enabling eGovernment applications. The first option is presentaLucjan Hanzlik
Stanford University and CISPA, Stanford, CA, USA
M. Kutyłowski ()
University of Science and Technology, Wrocław, Poland
e-mail: miroslaw.kutylowski@pwr.edu.pl
© The Author(s) 2021
G. Avoine, J. Hernandez-Castro (eds.), Security of Ubiquitous Computing Systems,
https://doi.org/10.1007/978-3-030-10591-4_5
81
ePassport and eID Technologies
Lucjan Hanzlik and Mirosław Kutyłowski
Abstract This chapter is devoted to the design and implementation of electronic ID
(eID) such as ePassports and electronic personal identity documents. We present an
overview of existing and emerging concepts, both concerning threats and possible
countermeasures. Thereby we aim to shed light on the development of ubiquitous
systems, where many artifacts will require strong electronic identification with
similar properties to those in the case of eIDs issued for humans.
5.1 Application Scenarios
The initial reason to develop an electronic identity document (eID)—an identity
document with an electronic layer—was to prevent its forgery. The problem is
that purely visual security measures have their limitations. The introduction of the
electronic layer changed the situation substantially.
After introducing the electronic layer into identity documents it became evident
that there are multiple opportunities to design and/or improve systems requiring
strong authentication. The first obvious example is the eGate automatic border
control.
5.1.1 Remote vs. Local Use
The motivation for designing eID systems comes from situations such as automated
border control and enabling eGovernment applications. The first option is presentaLucjan Hanzlik
Stanford University and CISPA, Stanford, CA, USA
M. Kutyłowski ()
University of Science and Technology, Wrocław, Poland
e-mail: miroslaw.kutylowski@pwr.edu.pl
© The Author(s) 2021
G. Avoine, J. Hernandez-Castro (eds.), Security of Ubiquitous Computing Systems,
https://doi.org/10.1007/978-3-030-10591-4_5
81