Download (PDF, 589 KB, Datei ist nicht barrierefrei

sECurIty
device (terminal) can demonstrate an explicit read authorization
for these specific data (e.g. only date of birth). the
Country Verifying Certificate Authority certificate (CVCA
certificate) is stored on the rF chip to verify this authorization.
this certificate forms the root of the Country Verifier
Public Key Infrastructure (CV-PKI), a hierarchy of authorization
certificates for reading sensitive data from identity
documents.
In Terminal Authentication, the reader (terminal) transmits
its read authorization to the rF chip in the form of a
terminal certificate. It also transmits the CVCA certificate
and all certificates in the hierarchy between these two
certificates. this enables the rF chip to verify the authenticity
and integrity of the terminal’s certificate. A positive
result requires that each of the subsequent certificates in the
hierarchy is signed with the private key of its predecessor,
starting with the CVCA certificate. the rF chip “knows” that
this certificate is trustworthy because it was stored on the rF
chip when it was manufactured.
once the authenticity and integrity of the terminal
certificate transmitted by the reader has been established,
the rF chip must verify that this certificate was really issued
for this device. to this end, the rF chip transmits a random
number to the reader, which signs it with a private key
belonging to the terminal certificate. the reader device
then transmits the signed random number back to the
rF chip. using the terminal device’s public key, which
is contained in the terminal certificate, the rF chip can
verify the signature of the random number and determine
whether the possesses has the private key that matches the
certificate.
EAC box
Key component for ID card amendment
Registration office PC
Authorization PKI
Each reader that wants to access the data of the electronic
identity card requires corresponding authorization certificates,
each with their own private and public keys, which
must be renewed regularly via a PKI. the EAC box provides
these functions in an encapsulated form in an evaluated
and certified environment and communicates with external
components and services via standardized interfaces
[tr-03131].
once the electronic identity card has been introduced, the
EAC box will be used as a reader device for changing address
data on the eID at municipal registration offices. Further
uses in addition to this scenario are conceivable (e.g. border
control).
12 13
Flow control
Crypto
protocols
Stored
certificates
and keys
EAC box core
sECurIty
Card
reader
Display
PIN pad
Specification: BSI Technical Guideline TR-03131 “EAC-Box Architecture and Interfaces”
Protection profile: “CC Protection Profile for Inspection Systems”
Secure channel