Government ID, Smart Cards, Identification and Authentication

Entrust develops PKI for next generation of ePassports

Monday, October 1, 2007

Entrust, Inc. has developed Extended Access Control (EAC), a public key infrastructure (PKI) for the next generation of ePassports. EAC provides a higher level of security during the verification process of e-passports. Not based on the X.509 standard, EAC will leverage a new type of certificate established by the International Civil Aviation Organization (ICAO) known as a card verifiable (CV) certificate. The initial e-passport generation uses Basic Access Control (BAC), which features passive and optional active authentication. These next-generation e-passports will be required by all member European Union (EU) nations by June 2009.

To see the next-generation e-passports, visit https://www.entrust.com/.


Entrust Continues Leadership by Adding Support for Next-generation E-Passports

DALLAS - Domestic and global security threats, coupled with rapidly emerging standards and technology, are leading governments across the world to pursue the issuance of more sophisticated machine readable travel documents (MRTDs) to their citizens. Entrust, Inc., a leader in e-passport deployment and innovation, has announced the development of public key infrastructure (PKI) for the next generation of e-passport security, also known as Extended Access Control (EAC).

“Because we already help secure e-passports and national ID cards for governments around the world, it’s only natural that Entrust plays a vital role in the development of this next level of e-passport technology,” said Entrust Chairman, President and Chief Executive Officer Bill Conner. “As part of a layered security approach, Entrust PKI solutions help increase security, improve efficiency and promote cost-effectiveness to enable a more citizen-centric government.”

EAC provides a higher level of security during the verification process of e-passports. Not based on the X.509 standard, EAC will leverage a new type of certificate established by the International Civil Aviation Organization (ICAO) known as a card verifiable (CV) certificate. Entrust is actively participating in the technical groups working on the new CV standard, including attending the Brussels Interoperability Group (BIG) meeting this week in Paris, France.

These next-generation e-passports will be required by all member European Union (EU) nations by June 2009. Deployment mandates for the U.S. have yet to be determined.

The initial e-passport generation uses Basic Access Control (BAC), which features passive and optional active authentication, and is in production in many parts of the world. Unmatched in PKI deployment experience, Entrust provides BAC e-passport security for a number of top e-governments in the world, including the U.S., U.K., Slovenia, Singapore and New Zealand.

“The Government of Slovenia began issuing e-passports in August 2006 and is rapidly incorporating EAC into our systems and processes,” said Vladimir Logofetov, Secretary, Information Services Division, Interior Ministry of Slovenia. “We are happy to have the assistance of S&T Slovenija and Entrust in this effort as we increase the security of e-passports for our citizens.”

E-passport travel documents contain an electronic chip – smart card or RFID – that stores information that can be verified against the data on the passport as well as against the individual. Because of the sensitivity of this personal information (e.g., digitized photographs, fingerprints or other biometrics) the security and integrity of e-passports are critical. To protect these assets, PKI is an integral technology for the security and verification infrastructure of e-passports.

Modular and fully integrated, the Entrust Authority PKI portfolio is built on the foundation of Entrust Authority Security Manager, the certification authority (CA) system responsible for issuing and managing users’ digital identities. Optional components help organizations manage the entire lifecycle of PKI certificates. Approximately 1,000 government and commercial organizations have purchased Entrust PKI solutions since Entrust brought the first PKI to market in the 1990s.

If you’d like to experience the benefits of the next-generation e-passports, visit our interactive EAC demonstration at https://www.entrust.com/forms/eac-demo/index.htm.

About Entrust

Entrust secures digital identities and information for consumers, enterprises and governments in 1,650 organizations spanning 60 countries. Leveraging a layered security approach to address growing risks, Entrust solutions help secure the most common digital identity and information protection pain points in an organization. These include SSL, authentication, fraud detection, shared data protection and e-mail security. For information, call 888-690-2424, e-mail entrust@entrust.com or visit http://www.entrust.com[end] 

Eighteen months after its introduction, 31 countries have recognized the INTERPOL Global Smart eID & eVisa multipurpose, smart card credential.

The INTERPOL Global Smart eID & eVisa is a travel document secured by PKI technology that provides enterprise smart card capabilities for logical and physical access to INTERPOL facilities and networks. As a travel document, the card supports both Basic Access Control and Extended Access Control e-passport standards. It also is the basis for special visa status from granting member countries, allowing for secure enterprise access and speedier border crossings.

read more »

In order to help organizations converge logical and physcial access into one credential, Entrust is hosting a webinar May 10 at 11 a.m. EDT. Frost & Sullivan Global Program Director of Smart Cards Jean-Noel Georges and Entrust Senior Marketing Manager Mike Moir will present the live, interactive webinar.

read more »

SCHUFA, a German credit reporting agency, has issued more than 1 million grid cards from Entrust for multi-factor authentication to its consumer portal. SCHUFA and its customers rely on the Entrust IdentityGuard authentication platform and Entrust’s grid cards.

read more »

The U.S. General Services Administration has awarded Entrust Inc. a four-year, $4.5 million contract to continue providing hosted PKI services and digital certificates as the security infrastructure for HSPD-12 initiatives. An incumbent in the re-compete proposal, Entrust has provided managed PKI solutions and services for the GSA’s credentialing program since 2007.

read more »

Precise Biometrics has developed a new line of “smart cases” for brands of tablets and smart phones to be released in 2012 and 2013. The new smart cases have built-in card reader and fingerprint sensor enabling users to both secure their devices as well as replace various password-based security for protected online sites and applications.

read more »

Entrust Inc. has made enhancements to its Entrust Discovery digital certificate product by expanding search capabilities for digital certificates residing within Microsoft’s Cryptographic APIs and adding more than 25 basic or custom policy field alerts to ease certificate management.

read more »