Download (PDF, 589 KB, Datei ist nicht barrierefrei

thE BsI
the German Federal Office for Information Security
(Bundesamt für Sicherheit in der Informationstechnik - BSI)
is Germany’s central It security service provider: a neutral,
independent authority for issues relating to It security in the
information society. the BsI provides information on risks
and threats relating to the use of information and communication
technology, develops security guidelines, advises
manufacturers, distributors and users. the BsI primarily
advises public administrations on the national, state and
local levels, but also seeks to exchange information with
businesses and private users.
Contents
ContEnts
1. The new identity card – secure, standardized
proof of identity in the digital world 4
2. User-oriented requirements for the
identification function of the new identity card 6
3. Application software for users – AusweisApp 8
4. Security mechanisms for the identification
function of the new ID card 9
4.1 Password Authenticated Connection
Establishment (PACE) 10
4.2 Extended Access Control (EAC),
readers and EAC box 11
4.3 Passive Authentication (PA) 14
4.4 Public Key Infrastructures (PKI)
for electronic identity documents 15
4.4.1 Country Signing Certificate Authority (CSCA) 15
4.4.2 Country Verifying Certificate Authority (CVCA) 16
5. The eID server – interface for web applications 19
6. Revocation management in the new
German identity card 20
7. References 23
Imprint 24
2 3