Vendors Taken To Task Over E-Passport Flaws

Special committee formed to fix stubborn interoperability problems besetting biometric passports is laying down the law to vendors

A special committee of the International Civil Aviation Organization formed in December to fix stubborn interoperability problems besetting biometric passports is laying down the law to vendors.

The committee, which met in last month in Berlin, has issued a set of core requirements for contactless chip and especially reader manufacturers. If vendors fail to meet the core standards, they can forget about being invited to future live tests of their products by government passport authorities.

The hard line came after the latest round of tests showed that border control agents had big problems obtaining data from the chip-based passports. The results have U.S. officials talking about another one-year extension of the deadline for widespread introduction of the electronic documents.

Frank Moss, deputy assistant secretary for passport services in the U.S. State Department, says that a deadline extension is something officials are "looking at very seriously."

Any further delay would be a significant setback for contactless smart card technology. Officials in several countries are preparing to issue passports embedded with contactless chips and antennas, and vendors are hoping some 500 million passports worldwide will be issued over the next decade with tap-and-go radio frequency technology.

The chips will store a digital photograph and, in some cases, fingerprint images to enable border control agents to better verify the identity of travelers presenting their passports. The U.S. government has set an October 2005 deadline for the 27 countries whose citizens can enter the United States without a visa to have a biometric passport program in place.

'Extremely Disappointed'
The core expectations, contained in a document approved by the ad hoc committee Jan. 11 and titled "Guide to Interfacing e-MRTD's and Inspection Systems," is a response to results of the last live test of sample passports, conducted in late November and early December at Baltimore/Washington International Airport.

In addition to the United States, Australia, New Zealand, Sweden, France, Italy, Germany, Belgium and Japan brought prototype e-passports to test. Finland, Netherlands, the United Kingdom, Canada, Austria, Singapore and Brunei, also participated.

Government officials from a number of the countries were "extremely disappointed" by the results, which showed the vendors had made little progress since tests conducted earlier in the year in Morgantown, West Virginia, says Barry Kefauver, who heads the main committee of the International Organization on Standardization assisting ICAO in drafting the biometric passport guidelines.

The test at the Washington, D.C.-area airport revealed several factors that prevented readers from properly receiving data from passports. These included the size and type of contactless chip in the passport, its location in the passport booklet, and the power of the reader's signal. There were also problems verifying digital signatures on the chip and reading facial biometrics.

"Apparently, there are vendors still either not reading the standards or reading the standards incorrectly or interpreting them incorrectly," says Kefauver, a former U.S. State Department official and member of the special or ad hoc committee. "It's not gotten through to some vendors what needs to be done."

Three of the readers tested could successfully read the chips only 58%, 43% and 31% of the time, respectively, according to a U.S. government report. It's not known how many readers were tested in all.

A Versus B
Part of the problem seems to stem from differences between the two options allowed in the international contactless smart card standard, ISO 14443. Those option are known as types A and B, and contactless smart card and chip vendors have typically focused on one or the other.

"It became ap- parent that some readers had been developed with a focus on either type A or type B chips and that their ability to handle the 'other' type was not as good or as consistent," according to an e-mail from the U.S. Homeland Security Department to other government agencies and vendors regarding the test.

This content continues onto the next page...