Download (PDF, 589 KB, Datei ist nicht barrierefrei

sECurIty
PKI Public Key
Infrastructure
CSCA: Country
Signing Certificate
Authority
CVCA: Country
Verifying Certificate
Authority
Hierarchy of digital certificates.
Hierarchy of digital certificates
for signing data in electronic
identity documents.
Hierarchy of digital certificates
for read authorization of
electronic identity documents.
4.1 Password Authenticated Connection
Establishment (PACE)
Password Authenticated Connection Establishment (PACE)
ensures that the contactless rF chip in the new identity
card cannot be read without explicit access, and that data
are exchanged with the terminal device in encrypted form
[Bender 2008].
the password that can be used for PACE depends on the
authorization certificate of the reader (terminal) device used.
usually, this is the six-digit personal identification number
(PIn), which is known only to the holder of the identity card.
For reader devices with authorization certificates for
sovereign use, e.g. border control, either a Machine
readable Zone (MrZ) printed on the back of the new
identity card or the six-digit card access number (CAn)
printed on the front is sufficient.
4.2 Extended Access Control (EAC),
readers and EAC box
Extended Access Control (EAC) comprises an array of
protocols that are always executed in a specific order,
depending on which electronic identity document is to be
read [tr-03110].
the EAC protocols include Chip Authentication (CA)
and terminal Authentication (tA). the two protocols are
executed together with Password Authenticated Connection
Establishment (PACE) and Passive Authentication (PA).
the purpose of Chip Authentication is to confirm that
the chip is a real chip (and not a forgery or a clone) and to
establish a secure connection between the chip and the
reader, or between the chip and the service provider in the
case of online authentication.
Chip Authentication is based on Diffie-hellman key exchange,
in which the reader or terminal device uses an
ephemeral key pair and the chip a static pair. the chip’s
public key is signed during the process of generating it
(Passive Authentication – see section 4.3).
the use of the signed key verifies the authenticity of the chip;
at the same time, a strongly-encrypted and authenticated
end-to-end channel is established between the chip and – in
the case of online authentication – the service provider.
the advantage of PACE is that the length of the password
All data on the new identity card are treated as confidential
has no effect on the security level of the encryption. In other
and must be protected against being read by unauthorized
words, even when the CAn or PIn are used, which are short
persons. the terminal Authentication (tA) protocol was
compared to the MrZ, the data on the rF chip of the electro-
developed for this purpose. sensitive data can only be read
nic identity card are strongly protected during transmission.
when this protocol has been successfully executed on the
reader. the rF chip in the identity document is designed so
that it enables reading of specific data only when the reader
10 11
sECurIty