icao pkd - an overview · icao pkd – an overview and the ... (technical participation + icao ......

Eidgenössisches Justiz- und Polizeidepartement EJPDBundesamt für Polizei fedpolAbteilung DiensteSektion Ausweisschriften

ICAO PKD – An Overview and the benefits of joining the PKDRoman Vanek Chief Division Identity Documents & Special Task PKD Board ChairmanFederal Office of Police Switzerland

Federal Department of Justice and PoliceFederal Office of Police fedpolDivision Identity Documents and Special Tasks

Roman Vanek, Federal Office of Police - ICAO PKD Overview, 8th MRTD Symposium 20122

Contents

• eMRTDs – worldwide introduction – state of play

• PKD – Participation – an overview

• How do we work together?

• Reasons to join – benefits of participating



e-passports - a success story



Border Control: the ideal setup includes ICAO PKD

Border Control

National Watch list

ASF SLTD (INTERPOL)

Regional Cooperationi. e. SIS, VIS

API – PNR – etc.

National PKD –Path Validation



Current Situation

PKD Participants Status: 33



Resetting of priorities to improve document control capabilities

• Issuing of eMRTDs had the priority for many countries• The priorities have to be balanced now

Document Issuance

Document Control Capabilities

Document Control Capabilities


What do Border Control Authorities need to check?


• Some may require only CSCAs (minimum requirement, trust chain)

• Some require CSCA and CRL• Some require CSCA, DSC and CRL

Make all three available and let the responsible authorities use what they want.


Checking eMRTDs


• Verification of the signature on the passport confirms that data in the passport has not been tampered with -Document Signing Certificate (DSC) = Token of Trust.

• Does not automatically guarantee who inserted the data on the chip.

• Path Validation (Chain of Trust) of the DSC crucial to ensuring the identity of the issuer.



PKD Set-up details - Switzerland

CertificateWeb Server

Messaging

Central MRTDCert DB

ICAOPKD

System ControlComponent

DS Certs, CRLsand CSCA

Master Lists

…

Switzerland

ICAO

CSCA, DS Certsand CRLs

CSCA, DS Certsand CRLs

e.g. Border Control

Administrator

Passport Control

CSCACerts


• If not done at the same time, the participation at the ICAO-PKD should be the immediate next goal of a country after introducing e-passports.

• The need to exchange certificates is the logical step forward from the well known specimen exchange (you must know what you're looking for,

when inspecting a travel document).

• A reliable certificate exchange is a requirement for the use of automated border controls abroad by your citizens.


Reasons to participate

ICAOPKD


Conformance checking


• Conformance Monitoring engine

• If not compliant to minimal standard – publication in a separate branch is possible / advice is given and a deadline is set to fix the problem – machine readable error codes available.

• Also checks if DSC/CRL was previously issued. • CRL checked if it is the latest.



• It’s too expensive!

• Bilateral exchange works good enough

• It’s not necessary – DS certificates are (mostly) on the chip

• It’s too complicated – we must first introduce e-passports

Some Arguments for not joining the PKD



Example Switzerland

• Switzerland invested approximately € 25 mio.to introduce the 2nd generation of e-passports.

ICAO-PKD registration fee: USD 56’000ICAO-PKD annual fee (technical participation + ICAO budget contribution): USD 56’000.

• Swiss passports can be validated rapidly worldwide allowing our citizens to travel hassle free. How much is this worth, how much is the trust in your passport worth?



Need to join the ICAO PKD

• PKD participation is not only the key for setting up successful Automated Border Controls, but any e-passport based border control.

• We currently have 33 PKD Participants but over 90 States and non-State entities that issued about380’000’000 e-passports (September 2011).

• Not or too late detected falsifications/misuses of eMRTDs would lead to a massive loss of credibility with impact on future developments.


In the best national interest

• Border Control Authorities interests in the PKD Secure, reliable and fast border checks, living up to the

citizens expectations for facilitation & security.

• Issuing Authorities interests in the PKDSharing of the information necessary for the world wide

recognition of a nation's eMRTD, allowing it’s citizens to cross borders as easily as possible (business, leisure, family relations etc.).

Avoid inter agency disputes about competences, it’s in everybody's interest



ICAO - HLCAS

• High-Level Conference on Aviation Security12. – 14. September 2012

• Conference Conclusions: Recommendation: consider to join the PKD

• ICAO has a strong commitment to the PKDFunding is provided to cover ICAO-PKD related staff, administration and travel costs. Similar funding should be available 2013. This results in a fee reduction for participants.



How to join?

• All the information and necessary forms can be found: http://www.icao.int/Security/mrtd/Pages/PKD-HowtoPartici.aspx

Best option: follow the upcoming presentation by:

Christiane Dermarkar, ([email protected])



How does the PKD Board Work?

• The Board is a standing body, consisting of 15 delegates from participating countries (3 year terms).

• Current Board Members: Australia, Canada, China, France, Germany, India, Japan, Netherlands, New Zealand, Nigeria, Singapore, Switzerland, United Arab Emirates, United Kingdom, United States



How can you participate?

• 2 Annual Meetings, open to Board Members and in agreement with the Chairman to (prospective) PKD Participants and observers.

• Technical and operational issues, finances, administration.

• Participation in discussion / e-mail exchange in between meetings / technical support.



Additional benefit


You have first hand access to the information on PKD/Certificates/eMRTD issues and can participate in the decision shaping/making.



Federal Office of PoliceChief Division Identity Documents and Special Tasks –PKD Board Chairman

Roman Vanek

[email protected]