Germany adds digital fingerprints to passports
626133
(InfoWorld) - Germany will store digital fingerprints in addition to digital photos in passports as one of several biometric security measures planned toÂ fight organized crime and international terrorism. All new passports issued from November will store two digital fingerprints in an embedded chip, which, since 2005, includes a digital photo, the German Federal Ministry of the Interior said Friday. While fingerprints will be stored exclusively in passport chips, photos will continue to be saved additionally in databases of local authorities. A new amendment gives police and other authorized government officials online access to these databases. Unlike several other countries in Europe and abroad, Germany has no central database for photos or fingerprints of all citizens or for registered foreigners living in the country, and currently lacks plans to establish one, according to a ministry spokeswoman. Centralized data, including photos and fingerprints, exists only for people registered with the police for criminal activity, and for applicants for German visas. Only readers equipped with a new cryptographic protocol can read the passports including both photos and fingerprints. The Extended Access Control system connects the chip and the reader by establishing a secure communications channel over a distance of 10 centimeters to 20 centimeters. Moves by the German government to digitize increased levels of personal data and link databases among authorities have led to an outcry by some groups, including federal and state data privacy commissioners. At a meeting in DÃ¼sseldorf on Friday, the commissioners criticized the government's programs that amass personal data, including telephone records, and its plans to give greater power to police officials to monitor terrorists and other criminals online by allowing them to hack into computers. In 2008, the German government plans new ID cards for all citizens with the same biometric features, according to the spokeswoman. "There are three primary reasons to issue biometric ID cards: to avoid false IDs, strengthen the identification process and also offer an authorization possibility for services such as online purchases," she said. By 2010, Germany hopes to have a new central database containing core data about each citizen and registered inhabitant of the country, according to the spokeswoman. The data includes name, birthday and address but will not contain a photo or fingerprints, she said. In February, the government passed a law allowing security officials in the country to create theÂ largest and most comprehensive pool of personal dataÂ ever amassed in the country. The databases of nearly 40 different agencies, including the Federal Criminal Police Office (BKA) and the Federal Intelligence Service (BND), are now being linked to allow authorities to run searches on suspected individuals and retrieve information within minutes. An expanded index file is being created for suspected terrorists. The file will contain the person's name, bank account number, telephone number, e-mail address, driver's license information and other data, including the names of companies, organizations and other parties associated with the person and linked to terrorist groups. Since the start of this week, law enforcement officials in Germany and Austria have electronic access to each other's criminal fingerprint databases. Since 2006, the countries have shared their DNA databases as one of several measures agreed by some European Union nations under the Treaty of PrÃ¼m in 2005. Â
257904
Americans' fingerprints should be added to their passports, outgoing Homeland Security Secretary Tom Ridge said Wednesday, hoping to include the United States in a growing global security standard but risking a privacy fight at home.
658849
Border Patrol agents and other federal law enforcement officers can now simultaneously search through two federal fingerprint databases to see if aliens crossing illegally into the United States are wanted by authorities.
443119
The European Commission unveiled a border security plan on Wednesday to fingerprint all foreigners visiting Europe's 24-nation border-free area.
602412
(InfoWorld) - A security expert has cracked one of the U.K.'s new biometric passports, which the British government hopes will cut down on cross-border crime and illegal immigration. The attack, which uses a common RFID (radio frequency identification) reader and customized code,Â siphoned data off an RFID chipÂ from a passport in a sealed envelope, said Adam Laurie, a security consultant who has worked with RFID and Bluetooth technology. The attack would be invisible to victims, he said. "That's the really scary thing," said Laurie, whose work was detailed in the Sunday edition of the Daily Mail newspaper. "There's no evidence of tampering. They're not going to report something has happened because they don't know." The British government, which began issuing RFID passports about a year ago, eventually wants to incorporate fingerprints and other biometric data on the chips, although privacy activists are concerned over how data will be stored and handled. Currently, the chip contains the printed details on the passports, the person's photograph, and security technology to detect if those files have been altered. The attack was executed while the passport was still in its original envelope used to send it from the passport service, since RFID chips can be read from a few inches away, Laurie said. He used a passport ordered by a woman affiliated with No2ID, a group that opposes the U.K.'s biometric passport and ID card programs. The data on the passport's chip is locked until an RFID reader provides the encryption key, Laurie said. The encryption key is calculated using a combination of the person's personal data, such as date of birth, and is contained in the "machine-readable zone" (MZR) -- the string of characters and digits on the bottom of the passport's first page. At an immigration desk, the optical character reader scans the MZR and gets the key. The RFID chip is unlocked, and the information on the chip is matched with that on the passport. However, Laurie was able to do this process himself. He analyzed ICAO 9303, the standard from the International Civil Aviation Organization that been adopted worldwide for machine-readable passports, to see how the MZR is organized. Laurie also knew some of the woman's personal details -- used to calculate her passport's key -- and found out more through Internet research. He then wrote what's known as a "brute force" program, which repeatedly tries different combinations of data to discover the key. After about 40,000 attempts by the program, he cracked the key. To scan the chip, he used a common RFID reader from ACG ID, now part of Assa Abloy Identification Technology of Germany. The attack could then let Laurie begin the process of making an exact copy of the woman's passport. "[The biometric passport] has been sold to us as something that increases the security of the passport, but so far I don't see anything about it that increases my security," Laurie said. The greatest weakness with the passports is using relatively easy-to-find data to compose the encrypted key, Laurie said. It would be better to include more random elements that would render brute-force style programs nearly useless, he said. Laurie's work spawned from concern over how users can know what's on their passport's chip. "At the moment, if you want to see what's in your own passport, you have to go to passport office," Laurie said. "With my code, you can do it at home." Laurie has published a library of open-source tools written in the Python programming language that will run on RFID readers made by ACG and by Frosch Electronics, based in Austria. Â
640961
The European Union on Tuesday approved a European visa data system which will store biometric information like fingerprints and photos on 70 million visa-holders who pass through the EU's borderless travel zone each year.
528516
Foreign visitors at the 50 busiest land border crossings in 10 states are now being fingerprinted as part of the government's new biometric screening system, the Homeland Security Department announced on Monday.
272047
MICROSOFT has unveiled a new range of peripherals that include the company&#39;s first foray into biometric identification on the desktop.
241033
FLORENCE, Oct. 18 -- Ministers from five European countries said Monday that they hoped to start digital fingerprinting for passports by 2006 in an effort to improve security, but they split over a German
476528
All UK visa applicants will be fingerprinted as part of new measures being announced to tighten Britain's borders.
460241
Â· New law heralds world's biggest biometric systemÂ· Police to share information on visa applicants
182479
The appliance of science UK police are using digital fingerprint technology to speed up the detection of crime.â¦
377953
The European Union yesterday approved a European visa data system which will store biometric information like fingerprints and photos on 70 million visa-holders who pass through the EU's borderless travel zone each year.
22853
Microsoft is introducing a new line of keyboards and mice, including some with fingerprint readers that lets users scan a finger instead of having to enter a log-in name and password when accessing online services or logging on to the PC.
120153
The State Departmentâs rollout of technology to capture biometric data from visa applicants has progressed more quickly than expected and the department will meet its Sept.
389567
Iris, fingers, head, shoulders, knees and toes The UK, Europe and the US are planning to belt and brace their border databases by using multiple forms of biometrics to identify people.â¦
545177
Schengen states to share visa data The European Parliament has approved draft proposals for a biometric database to prevent people who are refused a visa by one Schengen country from applying to other member states.â¦