NL1010443C2 - Fraud resistant identity card with encrypted digital data and digitized images can serve multiple purposes, such as passport, driving license, medical card, etc. - Google Patents

Abstract

The identity card is a so-called smart card, which can be read by authorized machines. In addition to conventional identity data in alphanumeric characters, the card can carry biometric images, such as a digitized photograph, thumbprint, etc.

Description

Short indication

Fraud-resistant identification and identification system in which the identification and identification data on a data carrier are recorded in optically legible and in digital format, whereby the digitally stored data is secured by cryptography (digital signature).

preface

In the past, various attempts have been made to produce identity and / or identification documents that unquestionably establish a person's identity and credentials and cannot be copied and / or changed unnoticed. On the one hand this led to ever new and more expensive technology on the part of the issuing agency and on the other hand to tireless creativity on the part of the counterfeiters.

By placing the documents on a digital data carrier and using cryptography, the integrity of the documents can be guaranteed. Integrity can also be guaranteed at a relatively low cost by changing the cryptographic method and / or the length of the cryptographic keys.

Aims The invention aims at: 1. Determining the identity of a person by means of biometric and personal data on a data carrier.

2. Making it impossible for third parties to change the data on the data carrier by means of cryptography and / or to manufacture a data carrier with fictitious data, without this being discovered by the control machine.

3. Determining the legitimacy attributed to a person (such as driver's license, donor codicil, membership and so on). These legitimacies do not necessarily have to be affixed to the data carrier by the issuing authority and can be cryptographically secured.

4. Securing, for example, medical data, bank account number and so on to a person by means of a PIN code, password or fingerprint.

35 5. Realize substantial cost savings by: a. Fraud that is easy to identify; 1 0 1 04 4 3 2 b. combine identity and multiple legitimacy on one data carrier; c. reuse of the legitimacy on the data carrier (for example, membership can be overwritten every year); and 5 d. not having to keep semi-finished products secure (for example, as is now the case with blank passports).

Operation 1. Definition

A hybrid data carrier with, on the one hand, information to be recorded by people without the intervention of a machine (hereinafter referred to as "readable information") and with, on the other hand, information to be read by a machine (hereinafter referred to as "digital information"). Digital signatures ensure that the digital information cannot be changed unnoticed. The readable information is also wholly or partly present in the digital information, so that it can be compared or checked after the digital information has been made visible by a machine. The data carrier serves for identification with the possibility of identification of one person and applies uniquely to this person (hereinafter referred to as "the holder"). Identification means determining the identity of a person and identification of persons by assigning data (hereinafter referred to as "credentials") to the identified person (eg driving license, donor codicil or membership). The data carrier is provided by an issuing body (for example, the municipal government) and it is this who puts the digital signature on the digital data and thereby ensures that the digital data cannot be changed unnoticed.

2. Identification

That part of the information that serves to identify the holder is called the identification data. These occur in both the legible and the 30 digital information (possibly compressed in the digital information). The identification data contains: • biometric data of the holder (for example a passport photo or fingerprint), • a unique number provided by the issuing body (for example the 35 SOFI number), and 101 044 3 3 • other desired data (for example name and address details, a expiration or creation date).

Identification takes place by means of a machine to have the digital signature checked over the digital information and to make the digital data visible. Then, an employee of the controlling authority (eg customs) can compare the visualized identification data with the readable information to determine that the readable information has not been manipulated and he can compare the biometric data of the holder with that of the identification data to establish the identity of the holder.

In addition, for quick initial identification, a simplified form of control can be performed without the intervention of a machine. To this end, the controller compares the readable biometric data with the biometric characteristics of the container. The reliability of this simplified form increases with the presence of one or more security features (e.g. a hologram) on the data carrier.

3. ID 20. The identification data (eg driver's license, donor codicil or membership) are always part of the digital information and can be part of the readable information. The credentials can be added at a later time than the issue. In order to secure these credentials, the legitimating body places a digital signature on the credentials, including at least the unique number from the identification data. Identification takes place by identification of the holder (see point 2), checking by the machine of the digital signature over the identification data and then making that identification data visible by offering the machine 30 or the identification data to a third system for verification. (for example a central database or an access control system). The reading of credentials can be secured by PIN code, password, fingerprint and so on, so that the holder can prevent the reading of these credentials.

35

The types of data appearing in points 1 to 3 are shown schematically in Figure 1.

1 0 1 04 4 3 4

Example of an application

A possible application could be a European Identity Card replacing the current passport. This proof of identity is a so-called "memory card" (chip card with memory) on which a passport photo of the holder is affixed and in which the same passport photo including a unique number and digital signature is written in the memory. Figure 2 schematically shows the operation of such an application. The authorities involved are: • A European Certification Authority (ECA), which certifies public keys of the 10 newly issuing bodies and which communicates its own public key with suppliers of identification equipment (IA).

• Only issuing authorities (PUI), which provide the European citizen with the identity document, the European Personal Identification Card (EPIC). These can be, for example, the municipalities.

15 · Controlling authorities in possession of identification equipment IA) wishing to establish the identity of persons. Examples include customs and the police.

The manufacture of the EPIC requires the following steps: 20 1. The ECA generates a public and a secret key and publishes the public key.

2. The PUI generates a public and a secret key and has the public key certified by the ECA.

3. The card holder appears at the PUI with a passport photo.

25 4. A unique number, the identifier, is assigned by the PUI to the cardholder.

5. The passport photo is digitized and possibly compressed.

6. The PUI makes the EPIC with the passport photo, the digitized passport photo, the unique number and the signature with the secret key of the PUI over the digitized passport photo and the unique number.

7. The PUI may add on the EPIC, credentials and a digital signature on the credentials and the unique number.

8. The card is issued by the PUI to the cardholder.

35 Identifying a person with EPIC is done as follows: 1. The inspector checks the passport photo on the EPIC with the card holder.

2. The EPIC is inserted into the IA.

1 01 04 4 3 5 3. The IA checks the certificate of the public key of the Agency.

4. The IA checks the digital signature on the digitized passport photo and unique number.

5. The IA makes the digitized passport photo visible on a screen and the inspector checks it with the cardholder.

6. The IA checks the digital signature of any identification data and the unique number and makes them visible on the screen.

1010443

Claims (2)

1. A data carrier for identifying and / or legitimizing a person, on which biometric data of the person concerned 5 occur, characterized in that the biometric data occur twice, namely in a directly visible form and in a digital form. In addition, a unique number in digital form, and possibly an expiration date, name and address and further data. One digital signature has been placed over this digital data and the digital biometric data, so that the digital data cannot be changed without it being easy to detect with a control device, thereby creating a fraud-proof identification and / or identification system. . 2. A data carrier as claimed in claim 1., to which identification data (such as driving license, membership of an association, etc.) have been added in digital form, with or without an additional provision (for example a PIN code security) to allow the holder in order to prevent unwanted reading of this identification data, characterized in that a digital signature is placed together over the identification data and the unique number mentioned in claim 1. 1 01 044 3