Download (PDF, 589 KB, Datei ist nicht barrierefrei

IDEntIFICAtIon FunCtIon IDEntIFICAtIon FunCtIon
1. The new identity card – secure,
standardized proof of identity
in the digital world
starting november 1 st , 2010, the new identity card will be
introduced in Germany as an electronic, multi-functional
card in credit-card format, valid as a travel document and as
proof of identity both personally and in the electronic world.
this identity card implements an innovative concept based
on a contactless interface that is already in use for electronic
passports world-wide.
the new identity card not only represents a modern
sovereign document that will significantly improve the
identification of persons e.g. when crossing borders. the
ID card will also be equipped with additional electronic
functions, in par ticular electronic ID (eID) and the optional
Qualified Electronic signature (QEs), which offer users
significant advantages. these functionalities enable individuals
to positively identify themselves online and issue
legally binding electronic declarations of will. they are thus
a key instrument for enabling legally valid contacts to be
con cluded over the Internet, and are intended to promote
streamlined eGovernment and eBusiness services.
the introduction of the identification function of the new
identity card entailed preparing, developing and deploying
a sophisticated It infrastructure and embedding it in a complex
overall system with more than 60 million participating
individuals. this required firstly that the associated organizational,
legal and technical prerequisites be created. the
German ID Card Act [PAuswG 2010] sets out the general legal
framework for identity documentation and electronic proof
of identity; the corresponding regulation [PAuswV 2010]
defines in particular the requirements for security and data
protection of the eID infrastructure. these are augmented
by close to 20 technical Guidelines and protection profiles
promulgated by the Federal office for Information security
(BsI), which are published in binding form in the German
Federal Gazette. some of these requirements are explained
as examples in this brochure.
the infrastructure of the new identity card is intended to
realize a trustworthy and efficient identity management.
the combination of a sovereign identity document with
eID functionality for eBusiness and eGovernment will also
provide users with a secure identity in the electronic world
and afford them better protection against many types of
cybercrime, such as phishing and identity theft.
Particular priority was placed on data protection, data
security and preserving information self-determination. All
disclosures and transmissions are reliably protected using
internationally recognized and established encryption processes.
As part of the eID function, user data are exchanged
only between the provider of the service and the holder of
the identity document.
Biometrically relevant data, i.e. photo, where applicable
fingerprints, eye color, height and personal signature, are
never transmitted to service providers or via the Internet.
only sovereign authorities possess the authorization and the
technical means to query such sensitive information.
4 5