New German RFID ID Card, European Electronic ID card, European Citizen Card (ECC) – Big Brother is here.


Lets first have a look on the reading of the new German RFID ID Card, European electronic ID card, European Citizen Card (ECC), with (RFID Reader ISO 14443).

(Watch this photo,a Contactless Microchip with Antenna is on the right side of the card and a Contact Microchip on the left one.)

14.03.2007
 
Bundesdruckerei presents European electronic ID card (ECC)
 
At the CeBIT (CEntrum der  Βόro- und Ιnformationsτechnik = Center of office and Technology Infromation) ITC (Ιnstrumental TransCommunication) fair, which is due to kick off tomorrow in Hanover, Bundesdruckerei GmbH will be the first company to present a European electronic ID card (European Citizen Card, ECC) in several formats.

Bundesdruckerei can implement the ECC in two different formats: either in credit-card format or in the somewhat larger ID2 format of today’s German ID card. The ECC can be produced as a hybrid card, i.e. with a contactless and contact chip; the ID2 format can be produced with a contactless chip. As a manufacturer of German and many other international ePassports, Bundesdruckerei also masters the third customary format for ID documents. However, the security of an electronic ID card is not ensured solely by electronic components but also by new, high-quality security printing combined with new, innovative security features in high-security card technology. Thanks to its outstanding lead in technology expertise, Bundesdruckerei is in a position to implement the specific demands of customers in a highly flexible manner.

04.03.2008
 
Bundesdruckerei develops new generation of forgery-resistant high-security cards

 
On the opening day of CeBIT in Hanover, Bundesdruckerei GmbH is to present a new generation of forgery-proof high-security cards based on polycarbonate (PC) material, called “Innosec Fusion”.

Various European countries including the Federal Republic of Germany are planning to introduce new electronic ID cards with an integrated chip in the near future. “Our new technology is highly resistant against forgery and thus perfectly suited for electronic ID cards”, emphasizes Ulrich Hamann, CEO of Bundesdruckerei. The new personalisation technology will soon reach market maturity.

14.12.09
Controversial new ID cards coming in 2010

The German Interior Ministry confirmed on Monday that new identification cards containing radio-frequency (RFID) chips will be introduced starting November 1, 2010 – but some data protection experts are critical of the decision.

a“It’s smaller than the old one, but can do a lot more,” Interior Minister Thomas de Maizière said in a statement.

The information on the card itself will be digitally stored on the RFID chip inside the card, in addition to two fingerprint scans that German citizens can choose to opt out of. The ID will also have a digital signature that can be used to complete official business with government offices and possibly beyond – accessed only by a six digit PIN number.

“The citizens choose who they want to give what data to,” Interior Ministry official Hans Bernhard Beus said.

But data protection advocates say the RFID chip, which can be detected via radio frequencies from about two metres away without the owner’s knowledge, is problematic despite the fact it has already been incorporated into German passports.

Dr. Andreas Pfitzmann, head of the privacy and data security group at Technische Universität Dresden, told The Local on Monday that there is no reason to use RFID chips for identification cards, and that in the worst case scenario, the chips could be used to carry out such things as terrorist attacks. !!!

“An extreme example would be that assuming German passports react differently to the radio frequency than American passports, I could use this frequency to set off a bomb where I know there are only Americans or Germans,” he said.

Pfitzmann, who specialises in privacy and identity management in Europe, spoke out against using RFID “e-passports” in parliamentary hearings during the late 1990s. He said the new ID cards raise similar concerns.

“Unfortunately the technology tempts people to give personal information that shouldn’t be made public to dubious machines,” he told The Local, adding that there was no way to indicate whether a reading machine is officially authorised. “The new identification card has inherited many of the bad traits of the passport.”

But the new Perso, as it’s known colloquially in German, also has some positive new additions such as the digital signature, which could help streamline Germany’s notoriously opaque bureaucracy, he said.

“There is no easy answer. One could have done some things better, but I wouldn’t simply say that it’s only negative just because mistakes were made,” Pfitzmann said.

All old identification cards will be valid until they expire, though German residents will have the option to trade up for the new ID early if they wish.

Read more here :
                                                     Bundesdruckerei
 
Thiw article is taken from : http://www.bundesdruckerei.de/en/index.html
Berlin, 16 March 2007 – Bundesdruckerei GmbH produces the electronic office ID card for Germany’s federal authorities. Starting in the summer of this year, this card shall be gradually introduced for the Federal Armed Forces. This may be followed by other federal authorities.

Bundesdruckerei developed the office ID card together with the Federal Criminal Police Office (BKA) and the Federal Office for Information Security (BSI). The card is made of a durable and long-lasting polycarbonate and is a state-of-the-art, secure hybrid card. It features both a contactless memory chip as well as a contact processor chip. The traditional public authority ID card now includes a host of additional electronic mechanisms which enabled the implementation of a multi-functional security concept.

The security card is produced at Bundesdruckerei and is optically personalised there in a central process using laser engraving. In order to ensure maximum protection against forgery and manipulation, various different security features are already integrated into the card body during the production process. For instance, the card features a number of tried-and-tested security printing methods, such as guilloche patterns, microtext or copy-resistant printing inks, just like those used for the German ID card. The integration of a contactless chip means that the card can also be used for access control systems or to record working time. The integrated contact chip has been prepared for various applications, such as the electronic signature. The actual saving of data on the chip is only carried out by an authorised employee at the public authority. Personal data that is particularly sensitive cannot be read out without the consent of the card holder.

The issuing authorities alone hence define the functionalities and infrastructure connection for the office ID card. Bundesdruckerei can support the public authorities if necessary during the setting up of the technical requirements and during the integration of suitable applications. Numerous pilot projects have been carried out prior to the introduction of the office ID card. Under the leadership of Bundesdruckerei, the card was already tested back in 2001/2002 with employees from the Federal Ministry of the Interior (BMI) and the Federal Office for Information Security (BSI). From 2003 to 2005, Bundesdruckerei conducted a pilot project titled “Personal key card for the Federal Armed Forces” which additionally tested the integration of electronic office /troop ID cards into existing public key infrastructures (PKI). 

2. Security Documents Electronic office ID card

Modernising Germany’s administration is one of the paramount infrastructure challenges of recent years and will remain so in the years to come. The measures designed to optimise administrative procedures have already been launched on a broad basis and are now to be pushed further ahead. To this effect, the Federal Ministry of the Interior commissioned Bundesdruckerei GmbH in co-operation with the Federal Office for Information Security and the German Federal Criminal Police Office to develop and produce office ID cards with enhanced security features for the staff at all federal authorities. The Federal Armed Forces has also adopted this approach.

Vast experience and comprehensive results formed the foundation of the planning process:

In a first pilot project over a 7-month period, a preliminary version of the electronic office ID card was successfully tested from November 2001 to June 2002 by a total of 100 employees at the Federal Ministry of the Interior and at the Federal Office for Information Security under the leadership of Bundesdruckerei GmbH.

In addition to this, Bundesdruckerei successfully conducted a pilot project titled “Personal key card for the Federal Armed Forces” (May 2003 – October 2005) for the Federal Office for Information Management and Information Technology of the German Armed Forces. 764 cards were issued to 633 participants in the pilot phase at 56 locations and successfully tested.

The new electronic office ID card uses state-of-the-art hybrid card technology in order to combine the functionalities of contactless memory chips with those of contact-based processor chips, making it possible for the first time to integrate numerous additional electronic mechanisms into the conventional ID card, thereby implementing a multi-functional security concept.

3. Security Documents

New ID card

The new ID card was launched in Germany on 1 November 2010.
This card can do everything the old ID card could – and much more.As a handy document in credit-card format, the new ID card will continue to be used as so-called photo ID. But for those citizens who wish to make use of its additional functions, transactions on the Internet are set to become more convenient and secure. That’s because the information printed on the ID card is also digitally stored on the chip integrated into the card. For the first time ever, the holder can use the new ID card to prove his identity on the Internet. At the same time, however, he continues to have full control over the data. Apart from the online ID function, the holder of the new ID card can also elect to use the qualified electronic signature (QES). When it comes to the sovereign ID function, citizens can choose whether or not to have their fingerprints stored on the chip in the card. This establishes an even stronger link between the document and its holder.

1. Bundesdruckerei GmbH produces electronic office ID card for Germany’s federal authorities

Gradual introduction for the Federal Armed Forces to start in summer Multi-functional security concept developed

 Bundesdruckerei is a one-stop shop for comprehensive security know-how for the new ID card:
  • The company produces the new ID card, one of the most secure ID documents in the world.
  • It issues authorisation certificates for online service providers.
  • The company operates its own eID Service at its high-security computer centres for the authentication of online service providers.

4.Bundesdruckerei and Gothaer Versicherungen offer online function for the new German ID card

Berlin-based high-security company provides authorisation certificates and eID Service

Berlin, 2 November 2010 – Gothaer Allgemeine Versicherung is the first company in Germany to be officially authorised by the Federal Administration Office (BVA) to use electronic proof of ID. At the same time, the company opted for the eID Service and authorisation certificates from Bundesdruckerei GmbH for the new online authentication function.

The new German ID card launched on 1 November 2010 comes with an additional electronic ID function which allows citizens, companies and public agencies to prove their identity on the Internet in a reliable manner.

Bundesdruckerei is supporting Gothaer Allgemeine Versicherung in its endeavours to use this innovation in its business processes. Based on the approval recently issued by BVA, Bundesdruckerei will now issue the insurance company with the necessary authorisation certificates that serve as electronic service provider ID. These certificates authorise the insurance company to read out personal data from the new ID card on condition that the customer has given his consent.

Bundesdruckerei’s eID Service ensures secure communication during the exchange of data. This eID Service runs in the background and assumes the role of a trustworthy mediator between the online service provider and the user. It also ensures that all the data is encrypted and signed for transmission and that the user and the service provider can at all times be identified without any doubt according to the principle of mutual authentication.

Gothaer believes that electronic proof of ID has a lot to offer. “As a participant in the centrally co-ordinated application test for the German national ID card, we have already been working hand-in-hand with Bundesdruckerei and have come to appreciate the company as a competent partner,” says project manager Eric Wiedemann from sales management at Gothaer. “That’s why we are also relying on Bundesdruckerei’s eID Service for real-time operations.” Gothaer customers will soon be able to use their new ID cards in order to enter into online contracts or to request preliminary insurance confirmation.

Ulrich Hamann, CEO of Bundesdruckerei GmbH, is convinced: “This and many other forms of co-operation in the context our new eID Service will allow citizens to rely on improved identity protection and comprehensively verified service provider data. This marks a huge step towards secure identities.”  

5. New ID card

The new ID card contains a security chip. This is where the digital photo and the information visible on the document are stored, i.e., the data of the printed machine-readable zone (back), family name and nee, first name, doctoral degree, date and place of birth, photo, address, nationality, series number as well as the religious name or pseudonym.
 
Anybody who wishes to additionally protect their ID card against misuse can have two fingerprints stored on the chip when they apply for their ID document. The photo combined with the fingerprint clearly identifies the ID card holder.

If requested, certificate information can be additionally stored on the chip in order to use a qualified electronic signature (QES).

In order to warrant complete data transparency for each and every citizen, all ID card offices have been equipped with reading devices that have been certified by the German Federal Office for Information Security (BSI). These readers can be used to display all the data stored on the chip.  

6.New ID card

FAQs

1) How to change from the old ID card to the new one?
The new Law on Identification Cards came into effect on 1 November 2010. Since then, citizens can apply for the new document only. All the old ID cards will continue to be valid until they reach their expiry date. However, citizens can apply for a new ID card at any time.2) Do other countries already have similar documents?
Yes, and these documents are becoming increasingly more widespread throughout the world. In the European Union, for instance, citizens in Belgium, Estonia, Finland, Italy, Austria, Portugal and Spain already have electronic ID cards. However, these cards, which are also referred to as citizen cards, are rooted in other technical infrastructures and therefore cannot be fully compared to the German system. 

3) What does the new ID card cost?
Pursuant to the Federal Ministry of the Interior’s current fee ordinance, the new ID card costs ?28.80. A reduction is available for applicants under the age of 24: for a first-time application, they pay a reduced fee of ?22.80.

4) How long is the new ID card valid?
The new ID card is valid for ten years for document holders over the age of 24. The period of validity for younger document holders is six years.

5) Why is there a chip in the new ID card?
The chip is where the personal information, such as name, address and date of birth, is digitally stored and the document holder can make this information available for the online ID function. The additionally stored biometric data of the facial image (mandatory) and the fingerprints (voluntary) ensure that the document cannot be forged and guarantee that it can be used as a valid travel document in the Schengen territory.

6 ) Can the ID card holder check the data stored on the chip?
Yes. In order to warrant complete data transparency for each and every citizen, all ID card offices have been supplied with reading devices that have been certified by the German Federal Office for Information Security (BSI). Agency staff can use these modules to display all of the personal data stored on the chip, including the digital passport photo and the fingerprints, if stored.

7) Why does the user need a PIN?
In order to use the online ID function, citizens can rely on their six-digit PIN (personal identification number) to release the document data for transmission to authorised service providers, for instance, for online shopping.

What happens if the ID card holder enters the wrong PIN?
Nothing happens the first time. If entered a second time, the card holder is requested to enter his six-digit access number which is visible on the front of the document. If the wrong PIN is entered three times, the PIN is disabled. In this case, the user can reset the incorrect-use counter by entering his PUK. This number can be used no more than ten times. After this, the citizen can no longer reactivate the PIN himself. Instead, the card holder must go to the ID card office where he can have a new PIN set. This is subject to a fee.

9) What is the purpose of storing fingerprints?
The additional storage of two fingerprints on the security chip of the new ID card is solely a voluntary decision and is used exclusively for sovereign ID functions. This feature allows citizens to identify themselves during sovereign border controls and in their own country, for instance, in dealings with the police. Just like the digital photo, the stored biometric fingerprint data strengthens the link between the ID document and its holder. This reduces the risk of identity misuse.

10) Who is authorised to read out fingerprints?
Only officially authorised bodies, such as the ID-card and passport offices, police enforcement authorities and the customs administration are permitted to read out biometric data pursuant to German data protection legislation. The data forms part of the sovereign ID function. Service providers cannot read out the biometric data within the scope of the online ID function.

11) What happens if an ID card holder does not want to give his fingerprints?
Nothing at all. The fingerprint data is only included in the document when explicitly requested by the citizen. If a citizen does not want this, the new ID card is then issued with all the options for electronic ID but without fingerprint data in the chip.

12) Where are the fingerprints stored?
The fingerprint data remains at the ID card office until the citizen collects his new ID card. The data is then irrevocably deleted and is now only stored on the security chip of the ID card. Bundesdruckerei, which produces the new ID card, does not store the fingerprints either. It is not permitted in Germany to store ID card data.

13) How can the ID card holder sign online using the new signature function?
The new ID card has been prepared for use with the qualified electronic signature (QES) which is legally equivalent to a hand-written signature. Citizen can use the signature function of their new ID card when they have a valid signature certificate.

14) How can citizens obtain a valid signature certificate?
Signature certificates are exclusively available from specialised trust centers or certification service providers (CSPs) and not from the ID card offices. Costs differ here depending on the provider. A list of providers is available on the website of the Federal Network Agency at: www.nrca-ds.de, under “Akkreditierte ZDA” [Accredited CSPs]. In order to integrate a signature certificate, the online ID function of the new ID card must be active. Citizens also need an advanced reader with an integrated PIN pad.

15) What happens to the qualified electronic signature (QES) if the ID card is lost?
The loss of a new ID card with an activated signature function must be reported immediately to the respective trust center so that the applications booked can be revoked. The local ID card offices are not responsible for revoking the signature function even when the ID card holder reports the loss to his office

Advertisements
Previous Post
Leave a comment

1 Comment

  1. ash

     /  December 14, 2011

    can u describe some implementation details of it?

    Reply

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: