An on-line secure e-passport protocol

Authors:
Vijayakrishnan Pasupathinathan;Josef Pieprzyk;Huaxiong Wang
Affiliations:
Centre for Advanced Computing-Algorithms and Cryptography, Department of Computing, Macquarie University, Australia;Centre for Advanced Computing-Algorithms and Cryptography, Department of Computing, Macquarie University, Australia;Nanyang Technological University, Singapore
Venue:
ISPEC'08 Proceedings of the 4th international conference on Information security practice and experience
Year:
2008

Citing 3
Cited 3

Special Uses and Sbuses of the Fiat-Shamir Passport Protocol

CRYPTO '87 A Conference on the Theory and Applications of Cryptographic Techniques on Advances in Cryptology
Security and Privacy Issues in E-passports

SECURECOMM '05 Proceedings of the First International Conference on Security and Privacy for Emerging Areas in Communications Networks
Security concept of the EU-Passport

SPC'05 Proceedings of the Second international conference on Security in Pervasive Computing

E-passport EAC scheme based on Identity-Based Cryptography

Information Processing Letters
Enhancing the privacy of electronic passports

International Journal of Information Technology and Management
An investigative analysis of the security weaknesses in the evolution of RFID enabled passport

International Journal of Internet Technology and Secured Transactions

Quantified Score

Hi-index	0.00

Visualization

Abstract

The first generation e-passport standard is proven to be insecure and prone to various attacks. To strengthen, the European Union (EU) has proposed an Extended Access Control (EAC) mechanism for e-passports that intends to provide better security in protecting biometric information of the e-passport bearer. But, our analysis shows, the EU proposal fails to address many security and privacy issues that are paramount in implementing a strong security mechanism. In this paper we propose an on-line authentication mechanism for electronic passports that addresses the weakness in existing implementations, of both The International Civil Aviation Organisation (ICAO) and EU. Our proposal utilises ICAO PKI implementation, thus requiring very little modifications to the existing infrastructure which is already well established.