GITI_2011 - Muehlbauer.pdf - E-government.ge

Project „eID Card Georgia“
Discover the smart world of TECURITY ®
Strictly confidential!
www.muehlbauer.de
info@muehlbauer.de
Strictly confidential!
www.muehlbauer.de
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 1

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 2

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 3

Basis
Investment
Financial
Market
Company facts
30 years of competence and innovation
• 3000 employees on more than 30 locations worldwide
• Appr. 500 engineers in research & development
• Currently more than 400 trainees in the company
• High standards of sustainability and social commitment
• Technology & buildings: appr. EUR 200 million
• Research & Development: appr. EUR 180 million
• Huge investments were made in 2010/2011 to generate the
conditions for even more extensive action in the markets
• Sales 2010:
• EBIT margin:
• Strong background:
EUR 207.2 million
appr. 15% (five years average)
73,5% (equity ratio)
The world’s leading system partner for the complete
technology and know-how-transfer for the production of
smart ID documents and integration of government solutions
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 4

Mühlbauer – Always on Site
• Production on three continents
• Know-how transfer from Germany guarantees the same proven quality all over the world
• More than 30 sales & service locations all over the world
7 Technology Centers
in Germany
Technology Center
Newport News, USA
Headquarters Roding
Germany
Technology Center
Nitra, Slovakia
Technology Center
Melaka, Malaysia
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 5

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 6

Business fields
High technology and market expertise around “Identification”
Cards &
TECURITY ®
Worldwide leading position for complete
technology and know-how transfer for the
production of smart ID documents. Intensively
involved in more than 300 ID projects worldwide
Semiconductor
Related
Products
Turnkey solution provider of RFID
Smart Label and semiconductor backend
technology
Precision
Parts &
Systems
High flexibility and speed, specialist for all
production steps in precision mechanical
engineering
High synergy effects of Mühlbauer`s three business fields Cards & TECURITY ® ,
Semiconductor Related Products and Precision Parts & Systems
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 7

Cards & TECURITY ®
Complete turnkey solutions…
SOFTWARE
Production Management & Surveillance
Data Enrollment
& Management
Document
Management
Public Key
Infrastructure
Personalization Management
Surface & Print Inspection
Verification
HARDWARE
Data
Enrollment
Printing
Inlay & IC Module
Production
Card & Smart Card,
Holder Page &
ePassport Production
Card & ePassport
Personalization
Packaging & Mailing
Access
Control /
Border
Crossing
Surface & Print Inspection Solutions
… from „chip“ to personalized ID Document
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 8

Cards & TECURITY ®
Data Enrollment
• Multi-biometric approach
• Supports vendor independent biometric sensors
• ICAO (CBEFF) compliant
• Support of mandatory and optional ICAO
requirements
• Future proof approach
Examples for captured data
• Fingerprint
• Iris identification
• Face recognition
• Signature recognition
• Retina identification
• Speaker identification
• Keyboard dynamics
• Optical speaker ident
• Hand geometry
• DNA analysis
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 9

Cards & TECURITY ®
Data Enrollment
Mühlbauer getID
Data Enrollment Software – Module Overview
Existing ID
Document
Data
Base
Trash
Handling
Authentification
Data Capturing
Processing
Quality
Management
Manual
Correction
Distribution
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 10

Cards & TECURITY ®
Border / Access control & surveillance
Mühlbauer FAST
FAST GATE
• Simplified Border Crossing Process
• Integrated Standards for Security Checks
• Security Features from ePassports
• Supports regular MRZ ePassports and eVisa
• Support of next generation ePassport
with biometric characters
• Independence of biometric feature
• Creation of Travel Profiles
• Communication with watch lists
• Support of RFID and Smart Card Technology
• Support of Standards (ISO, ICAO etc.)
• Open Architecture
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 11

Cards & TECURITY ®
The market position
ePassport projects all over the world
• Mühlbauer is highly involved in almost more than 200 further ID projects
• As market leader we have the best preconditions to become the partner of governments and
public authorities for further ID Projects
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 12

Cards & TECURITY ®
The market position
Smart Card projects all over the world
• Mühlbauer is highly involved in almost more than 200 further ID projects
• As market leader we have the best preconditions to become the partner of governments and
public authorities for further ID Projects
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 13

Mühlbauer at a Glance
Independent Technology Partner
Technological
know-how
combined
Market
know-how
• World market leader in equipment for Smart Identification
• The only company worldwide which offers complete turnkey solutions to the market
• Intensively involved in more than 200 ID projects worldwide
• Sales and service on-site – always close to our clients
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 14

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 15

General Project Overview
Excellent
Consortium
Experience
Resource
Commitment
Secure Solution
Secure
Document
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 16

General Project Overview
EXISTING SYSTEMS
SERVICES
PROPOSED SOLUTION
Enrolments
Data Approval
Material
Management
Personalization
& QA
Shipment and
PIN/PUK Print
LOCAL DATA MANAGEMENT IN TBILIS, KUTAISI, BATUMI
Realization Phase
Project
Initialization
AFIS
National Registry
INTERFACE
CENTRAL
eID
Chip Encoding DLL
DLL Development Wizard
Project
Implementation
Project
Testing & Training
Certificate Provider
INTERFACE
DOCUMENT
ISSUANCE
SYSTEM
INFRA-
STRUCTURE
Database, IT Hardware
Web-Portal
Cards
Project
Acceptance
Post Realization Service
Category 1:
On-Site Support
Separate Project
Central Material
Management
Responsibility
Management
Certification
Management
System
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 17

Applets,
Middleware
Machines
INCAPE
Document
General Project Overview
• 3.039.400 DI Cards
• 3.300.000 PIN / PUK Envelopes
• 2.100.000 Flyers
• Production Management System INCAPE Central
• Production Management System INCAPE Site
• Production Management System INCAPE Warehouse
• IT Hardware
• 5x getID Live Mobile
• 8x CLP54
• 7x PIN / PUK Printer
• 3x Table Enveloping System
• Card Management (CM) Application
• Logical Data Structure (LDS) Application
• Identification Authentification Signing (IAS) Application
• PIN Management
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 18

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 19

The Production Sites
Core Processes
Inventory/Stock
Management
Production
Preparation
Key
Management
Data
Preparation
Personalization Process
Production
Control
&
Tracking
(Mühlbauer
INCAPE)
Address
PIN
Card Lifecycle Management
Dispatch
Statistics &
Report
Controlled Destruction
& Job
Re-Generation
Quality Control &
Counting
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 20

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 21

The Documents
National ID Card
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 22

The Documents
Permanent Residence Card
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 23

The Documents
Temporary Residence Card
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 24

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 25

Basic Security Features of the Document
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 26

Basic Security Features of the Document
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 27

Basic Security Features of the Document
In addition there also divers Level 2 and Level 3 security features, which
will not be shown in this presentation, for security respectively
confidentiality reasons.
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 28

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 29

Chip Overview
Dual Interface Chip
80K
Operating System
JCOP
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 30

Chip Overview
The eID Document is more than
• Simple identity proof
• Time-saver for contacting administration authorities
The eID Document is
• A new way to interact with their citizens
• In a cost-effective strategy
• Key technology for the authentication of the citizens
- Access
- Digital signature
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 31

Chip Overview
Chip Overview
• Multi-application ISO 7816-4 Smart Card following
European Citizen Card Standard CEN TS 15480
• Logical Data Structure (LDS) Application
Personal identification data as visible on the card
• Identification Authentification Signing (IAS) Application
Identification of the card holder using X.509 certificate
2-factor authentification of the card holder on the web (e. g. Login)
Electronic signature for signing forms and documents
Plus: Data encryption, PIN and certificate management
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 32

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 33

LDS Applet
Logical Data Structure Application
• Machine Readable Travel Document as per ICAO
9303
Part 3 Vol 2
• Contains COM, DG1 (MRZ), DG2 (Picture), DG7
(Signature),
DG11 (Personal-Details), DG12 (Document-Details)
and
SOD (Security Object)
• Requires Basic Access Control (BAC) at
contactless interface
• Supports plain reading at contact interface
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 34

IAS Applet
Features
• Integration of eID Card into eService infrastructure
• Follows CEN EN 14890-1/2 (eSignK) standard
• State of the art cryptography
(RSA 2048, ECC 256 and SHA-2)
• Private key and certificate chain for
• Electronic signature with user consent
by Signature-PIN
• Authentication and encryption with
user authorization by Card-PIN
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 35

IAS Applet
Features Pin Management
• Ready to use with certificate issued during
production – only signature PIN activiation required
• Provides for secure key and certificate renewal in
untrusted environment (e.g. over the web)
• Card-PIN, Transport-PIN and Personal
unblocking Key are provided with PIN-letter
• Card-PIN and Signature-PIN can be
changed by card holder
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 36

Content
1. Company Facts
2. Business Areas – Cards & Tecurity ®
3. General Project Overview
4. The Production Sites
5. The Documents
a) Basic Security Features of the Document
b) Chip Overview
6. Applications on the Chip
7. eID Card Tool / IAS Middleware
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 37

eID Card Tool
Functions
• Activating Personal PIN
• Display of stored data
• Change of personal PIN / PUK
• Unlock Card PIN with PUK
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 38

IAS Middleware
Middleware
IDCard
contactless
middleware
ID Card
contact
middleware
CSP
PKCS#11
Card Mini Driver
Common PKI framework
Common Card Framework
eID applet
ICAO
applet
IAS
applet
Contactless chip
Contact chip
ID Card
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 39

IAS Middleware
Functions
• Applying new smart eID Card at home
• Signing MS Office Documents
• Managing eID smart chip content
• Signature PIN activation / changing
• Card PIN activation / changing
• Signing / encrypting eMails
• Login authentification
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 40

Contact
Mühlbauer Group
Headquarters
Josef-Mühlbauer-Platz 1
93426 Roding, Germany
Phone: +49 9461 952 - 0
Fax: +49 9461 952 - 1101
Email: info@muehlbauer.de
www.muehlbauer.de
Australia | Brazil | China | France | Germany | India | Malaysia | Mexico
Russia | Serbia | Slovakia | South Africa | South Korea | Taiwan | Turkey |
Uganda | United Arab Emirates | U.S.A.
www.muehlbauer.de
Strictly confidential!
„Project eID Card Georgia“ – R1.1
November 18th 2011– Mühlbauer Group – Page 41