A survey of system security in contactless electronic passports

Journal of Computer Security

Volumn 19, Issue 1, 2011, Pages 203-206

  Sinha, Anshuman ^a  

^a Fire and Security   (United States)

Author keywords

BAC; contactless; EAC; electronic passport; ePassport; MAC; PKI; RFID; security

Indexed keywords

BAC; CONTACTLESS; E-PASSPORT; EAC; ELECTRONIC PASSPORTS; MAC; PKI; RFID; SECURITY;

AUTHENTICATION; CRYPTOGRAPHY; OPTICAL CHARACTER RECOGNITION; SECURITY SYSTEMS; SURVEYS;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 79951834998     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2010-0414     Document Type: Article

References (30)

1. E. Bjelkasen and L.W. Olsen, Security Issues in ePassports - ICAO Standard and National Implementations as Part of the US Visa-Waiver Program, May, 2006.
2. BSI, Technical Guide TR 03110, Ver. 1.11. Advanced security mechanism for machine readable travel documents - Enhanced access control, 2008.
3. Y. Chen, M.K. Mihcak and D. Kirovski, Certifying Authenticity via fiber infused paper, ACM SIGecom Exchanges 5(3) (2005).
4. Z. Cheng and R. Comley, Attacks on an ISO/IEC 11770-2 key establishment protocol, September 23, 2004.
5. Common Criteria, Common criteria protection profile, MRTD basic access control, Bundesamt für Sicherheit in der Informationstechnik, Version 1.0, August 2005.
6. Common Criteria, Common criteria protection profile, MRTD extended access control, Bundesamt für Sicherheit in der Informationstechnik, Version 1.1, September 2006.
7. G. DeJean, M.K. Mihcak and D. Kirovski, RF-DNA: Radio-Frequency Certificates of Authenticity, Cryptographic Hardware and Embedded Systems - CHES 2007, Lecture Notes in Computer Science, Vol. 4727, 2007.
8. Department of Homeland Security US-VISIT Program, available at: http://www.dhs.gov/files/ programs/usv.shtm, 2010.
9. Department of Homeland Security Website, available at: http://www.dhs.gov/files/programs/content-multi-image-002.shtm\#1, 2010.
10. Federal Information Processing Standards (FIPS), Secure hash standard, Publication 180-1, April 17, 1995.
11. O. Henniger, K. Lafou, D. Scheuermann and B. Struif, Verifying X.509 Certificates on Smart Cards, HP Laboratories, November 2006.
12. IEEE, Standard method for measuring the effectiveness of electromagnetic shielding enclosures, IEEE 299-2 1997.
13. International Civil Aviation Organization, Doc 9303 Part 1, Vol. 2, Specifications for electronically enabled passports with biometric identification capability, 2006.
14. International Civil Aviation Organization, Machine Readable Travel Documents (MRTDs): History, interoperability and implementation, Release 1, Draft 1.4, March 23, 2007.
15. International Civil Association Organization, RF protocol and application test standards for ePassport Part 2, Tests for air interface initialization, anti-collision and transport protocol, Version 1.02, February 20, 2007.
16. International Civil Association Organization, RF protocol and application test standards for ePassport Part 3, Tests for air interface initialization, anti-collision and transport protocol, Tests for application protocol and logical data structure, Version 1.01, February 20, 2007.
17. International Civil Association Organization, RF protocol and application test standards for ePassport Part 4, ePassport reader tests for air interface, initialization, anti-collision and transport protocol, Version 1.01, February 20, 2007.
18. A. Juels, D. Molnar and D. Wagner, Security and Privacy Issues in ePassport, April 17, 1995.
19. P. Kocher, J. Jaffe and B. Jun, Differential Power Analysis, Cryptography Research, 1999.
20. V. Krishnan and H. Wang, Security Analysis of Australian and EU E-Passport Implementation, Journal of Research and Practice in Information Technology 40(3) (2008).
21. D.K. Kugler, Extended Access Control - Infrastructure and Protocol, Interop-Test, Federal Office for Information Security, June 2006.
22. C. Mitchell, Limitations of Challenge Response Entity Authentication, HP Laboratories, May 1989.
23. T. Nguyen, Contactless authentication protocol for MRTDs: BAC and EAC, Bundesdruckerei GmbH, RFID Security, 2006.
24. M. Nüsken, Lecture Notes Electronic Passport and Biometrics, b-it Bonn-Aachen International Center for Information Technology, Winter 2006/2007.
25. Z. Riha, JRC Ispra European Commission, Masaryk University, September 2008.
26. M. Schlüter, Z. Riha and B. Hofbauer, ePassports EAC Conformity and Interoperability Test Results, Prague, 2008.
27. B. Schneier, Schneier on security, RFID passport security, available at: http://www.schneier.com/blog/archives/2005/04/rfid-passport-s.html, April 28, 2005.
28. Smartrac Website, available at: http://www.smartrac-group.com/en/ personalausweise.php, 2008.
29. United States Department of Transportation, FAA privacy impact assessment of IDMS and PIV cards, available at: http://www.dot.gov/pia/faa-idms.htm, February 2008.
30. United States of America, Department of State, Electronic passport, 22 CFR Part 51 [Public Notice 5208] RIN 1400-AB93, Final rule, October 25, 2005.