Governmentissued Identification Credentials Issues and Opportunities Facing the

Who we are Smart Card Alliance mission To stimulate the understanding, adoption, use and

My role is…… Property of the Smart Card Alliance © 2008

Common Requirements for Identity Credentialing in the U. S. • Secure identity credentialing process

Identification Technologies and Applications Vary by Use Case Identity credentials comes in a variety

Passports, IDs, Drivers Licenses Property of the Smart Card Alliance © 2008

e. Passport in the United States Ø 1 million+ e-Passports issued every month Ø

U. S. e. Passport Security Technologies Ø Most secure level of chip technology used

Government ID Badges HSPD 12 (PIV) Card • All Federal employees • Dual interface

Drivers Licenses Issues: Ø Drivers License is de facto “National ID” Ø Must show

Identity Technology Varies Which is the right one to use? nts e m ge

Education Needed for Identity Technology Options Which is the right one to use? Property

Major Issues Effecting Governmentissued Identity Credentials Ø Emerging standards and policies Ø Ø Who

Thank you. . Randy Vanderhoof, Executive Director, Smart Card Alliance 191 Clarksville Rd. ·

Slides: 14

Download presentation

Government-issued Identification Credentials: Issues and Opportunities Facing the Government ID Marketplace Randy Vanderhoof, Executive Director, Smart Card Alliance RFID Security Workshop Johns Hopkins University January 23, 2008

Who we are Smart Card Alliance mission To stimulate the understanding, adoption, use and widespread application of smart card technology through educational programs, market analysis, advocacy, and industry relations. . in the United States and Latin America. Over 180 members, including participants from financial, retail, government, corporate, and transit industries and technology providers to those users Major activities Ø Conferences, symposia, web seminars Ø Educational workshops and on-line training Ø Web-based resources: white papers, reports, industry product and services Ø Industry and Technology Councils § § § Identity Council Contactless Payments Council Healthcare Council Physical Access Council Transportation Council Property of the Smart Card Alliance © 2008 • e-Passport • Federal Government ID • Identity Best Practices • Privacy & Security

Common Requirements for Identity Credentialing in the U. S. • Secure identity credentialing process for issuance Ø Ø Validation of source documents Trusted agents for enrollment and issuance Process for digital keys and certificate management Process for rapid revocation • Authenticate individual and credential Ø Common Machine Readable Technology (MRT) present Ø MRT links to physical characteristics (biometrics) Ø Security features to protect the physical credential and the data elements in the MRT Ø Security and Privacy must be “Baked In” for cardholders to accept credential and use it Property of the Smart Card Alliance © 2008

e. Passport in the United States Ø 1 million+ e-Passports issued every month Ø 15 million issued to date Ø As of June, all passports issued are -passports ØCurrently, 82 million passports in the USA, expected to exceed 100 million by 2010 ØNew travel rules for US, Canada, and Caribbean ØPreferred ID lasts 10 yrs Property of the Smart Card Alliance © 2008 e

U. S. e. Passport Security Technologies Ø Most secure level of chip technology used Ø RF shielding in cover Ø Basic Access Control Ø Derived key from MRZ Ø Key unlocks chip data Ø Reader accepts data Ø Randomized chip number Ø No fingerprint biometrics stored Property of the Smart Card Alliance © 2008

Government ID Badges HSPD 12 (PIV) Card • All Federal employees • Dual interface 64 K chip • Fingerprint biometrics First Responder (FRAC) • Federal and state issued • Uses Federal FIPS 201 standard • Voluntary program lead by DHS Port Security ID (TWIC) • Federal ports – central issuance • Fingerprint and background check • Contactless for access Property of the Smart Card Alliance © 2008

Drivers Licenses Issues: Ø Drivers License is de facto “National ID” Ø Must show government photo ID to travel Ø No federal standards for issuance or card Ø No longer valid for re-entry to U. S. at borders REAL ID Legislation Goals: Ø New standards for who, what, and how Ø MRT chosen is 2 D Barcode, no Chip Ø Estimated cost = $3. 3 billion over 7 years Property of the Smart Card Alliance © 2008

Identity Technology Varies Which is the right one to use? nts e m ge n a ch e. Passport e e s a ed re u t a dd a s e u c Se f rity Driver’s License ag s u ir u req Citizen Border IDPass. Card ? Security: • RFID Tag Federal ID Badge Security: • Secure dual interface chip • Encryption Security: • Secure contactless chip • Encryption • Biometrics – facial image • Biometrics fingerprint • MRZ data with Basic Access Control • RF Shielding Security: • Database match • 2 D Barcode • MRZ data • (4) Digital Certificates • Secure printing Property of the Smart Card Alliance © 2008 • Secure printing

Major Issues Effecting Governmentissued Identity Credentials Ø Emerging standards and policies Ø Ø Who sets the standards of the machine readable technology Who sets the policies for issuance Who enforces the rules governing usage Defining standards/policies in the context of the usage model Ø Technology and issuance choices Ø Secure smart cards vs. RFID vs. Other technologies Ø Centralized issuance vs. local distribution Ø Evolving access infrastructure standards Ø Physical access systems migration Ø Logical access identity, assurance levels Ø Privacy concerns Ø Preparing for unforeseen attack threats Ø Funding concerns Property of the Smart Card Alliance © 2008

Thank you. . Randy Vanderhoof, Executive Director, Smart Card Alliance 191 Clarksville Rd. · Princeton Junction, NJ 08550 rvanderhoof@smartcardalliance. org www. smartcardalliance. org Phone: 1 -609 -587 -4208