Slashdot Mirror


E-Passport System Test This Week

An anonymous reader writes "ZDNet has a story covering another Homeland Security test of the E-Passport system, a biometric program designed to stop counterfeit identification." From the article: "The passports contain biometric information such as a digital photo, as well as biographic information. The technology being tested promises to read and verify the electronic data when those carrying the e-passports attempt entry into the countries via participating airports. U.S. diplomats, Australian and New Zealand citizens and Singapore Airlines officials are among those who have been issued the e-passports. These people will also undergo normal screening procedures at the international airports."

25 of 89 comments (clear)

  1. Great Idea - Already in use in certain areas by Nerd+Systems · · Score: 4, Interesting

    I've had encounters with similar systems to this E-Passport just recently on my honeymoon cruise. My wife and I were each issued a "Sea Pass" card, which didn't have our picture on it, but had our names printed on it, and a magnetic swipe. Whenever we wanted to buy anything on the ship, we would swipe our card and it would identify us and no cash was needed throughout the entire cruise. For shore excursions, we swiped our cards as we left, and it noted that we no longer were on the boat, keeping track of everyone out on shore excursions and what not. On our return, we swiped our cards, it pulled up for the security guard our information as well as a picture, which he was able to verify our identity with, and let us back on the boat. I'm glad for this, as it stops people from trying to steal those cards, as they are useless if your not the same person, and since the data is stored in a central registry, can't be easily falsified, like a current passport could be. I like the idea of an E-Passport, as it can guarantee a person's identity a lot more easily then a traditional passport, which can be forged easily enough these days with all the technology out there, as well as making travel safer in foreign countries, as well as for our own country. I can't wait though for them to implement something such as an RFID tag inside of these, so we can just walk through customs, having it tally up all our items purchased, collecting duties as we walk, and have the whole ordeal be a lot less painless, instead of having to wait in long lines while you get questioned over and over... would be nice to just have the RFID tag identify you as you go through a turnstile, and have that be the end of customs... Either way, this is going to make travel a lot easier and safer...

    --
    Need a Nerd?
    Nerd Systems
    1. Re:Great Idea - Already in use in certain areas by Anonymous Coward · · Score: 3, Insightful

      Yep, and once someone works their way into the database, they'll know who you are and what you've been upto.

    2. Re:Great Idea - Already in use in certain areas by Stiletto · · Score: 2, Interesting

      I hope you meant:

      John Q. Doe
      1234 North Oak Lane
      Los Angeles, CA
      (123)-456-7890

      Work contact:
      5666 Johnson Industrial Park
      Los Angeles, CA
      (123)-098-7654

      [PHOTO HERE]

      Filed credit card 1# 2345 9999 1234 0543 Exp 04/09
      Filed credit card 2# 1555 4599 9876 1234 Exp 05/10

      Drivers licence number: D520 302216004

      Bought 4 steaks
      Left the ship at 3AM and came back at 7AM
      Has a 4 week cruise package
      Teenage daughter is often alone in her room (number 45)

      [Click here to charge something to customer's account]

      You don't actually think some random company operating these oh-so-convenient card swipers is actually responsible with your data do you? You should be scared shitless.

    3. Re:Great Idea - Already in use in certain areas by Andrzej+Sawicki · · Score: 2, Funny
      I'm scared shitless.
      I guess so, being the coward that you are...
    4. Re:Great Idea - Already in use in certain areas by daliman · · Score: 2, Informative
      "I can't wait though for them to implement something such as an RFID tag inside of these"

      In the New Zealand passports, they already have. At the same time, they doubled the cost and halved the duration of the passport to five years. There was no period for public comment, it was presented as a fait accomplit, as they were concerned that there would be a rush on the non-rfid, cheaper, long duration passports. Well, duh.

      The NZ passport data is not encrypted in any way, although they claim the passports have some "physical shielding" to minimise eavesdropping. Except that, of course, the passport will be opened to be read; so the shielding is useless to prevent eavesdropping.

      They claim that the RFID part is to be compliant with the ICAO guidelines, but the guidlines only require biometric data, not contactless chips.

      Yeah, this stuff is just great. I'm sure that nobody would ever misuse legitimate access to this data, or gain illegitimate access to it either. Yeah, real sure.

      Information on the actual ICAO guidlines is available here - http://www.icao.int/mrtd/download/technical.cfm

    5. Re:Great Idea - Already in use in certain areas by imipak · · Score: 2, Insightful

      Please, go away and read some Bruce Schneier. He's the one of the authors of the AES crypto suite, the one developed by/for the USG, amongst many other things, and he has some very interesting things to say about post-911 security. Go read some issues of Crypto-Gram - the Jan 2006 issue just came out - and realise how wrong you are. Never mind, well done, now you get it....

    6. Re:Great Idea - Already in use in certain areas by Red+Flayer · · Score: 2, Insightful

      "It is the one kind of transaction that cannot be stored, profiled, abused, and otherwise attached to your identity for all eternity."

      Not so much as you'd think. I recently had to withdraw over $10k cash for employee holiday bonuses, and had to provide identification so that the bank could let the US Government know

      (1) My name, address, and occupation (including full company name and job title)
      (2) The fact that I had received over $10k cash
      (3) The serial numbers of the bills I received

      So, for now, they do trace cash, but only when transactions are over $10k. But, should an illegal cash activity happen, and a lot of the bills I received turn up in that transaction -- well, then I'm under suspicion.

      There's a whole bunch more to this (like, if they suspect that the cash is illegal, and seize it, I have to sue to get it back). While the $10k limit seems reasonable (most people never handle that sum in cash), I disagree. I think eventually that limit will be $5k. Or $2k. Especially as the cost of information sotrage and transittal continues the decrease. Plus, with guaranteed inflation over the long run (considered necessary by government to stimulate investment spending), eventually that limit will be meaningless.

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
  2. Just in time by Anonymous Coward · · Score: 5, Funny

    Yeesh, as a holder of an Australian Passport, it looks like I arrived in the US just in time to avoid being used as a guinea pig in the test, being falsely identified as a terrorist suspect when it malfunctions and being locked away for an undetermined number of years without trial ;P

  3. oooh by tuxette · · Score: 3, Funny

    Remind me to buy lots of Gummi Bears at the Tax-Free Shop ;-)

    --
    People say I'm crazy, I got diamonds on the soles of my shoes...
  4. Problem is... by Tavor · · Score: 4, Interesting

    The biometric chip may be ultra-hard to forge, but the human element attached to it isn't. Remember the T-Mobile hacking incident with celeberties? It wasn't the hardware at fault, but the hardware's human masters. There will be a human making these passports, typing in the name, and writing the info to the chip. If the human is given bad information (Drivers License, Birth Cert, etc,) the information written to the chip will be bad, and voila - system failed: forged info on the chip. Even if the fingerprints and iris scans are correct, the name will be wrong and terror watch lists consist mosty of names and pictures - we all know how reliable that can be.

    --
    Windows has detected an undetectable error.
    1. Re:Problem is... by tuxette · · Score: 2, Interesting

      It's not just that. All it takes is for someone with a sick sense of humor or otherwise disgruntled employee to fuck with the data. You know, switch thing here and there... and we're all screwed...

      --
      People say I'm crazy, I got diamonds on the soles of my shoes...
    2. Re:Problem is... by BrokenHalo · · Score: 2, Informative
      It doesn't even take any particular malice to fuck up the database. Three months ago, my wife applied for, and duly received her Australian passport. Last week, her sister attempted to do the same, and was foiled by the fact that some dyslexic moron had in that short interval managed to scramble the letters of her mother's maiden name on the database and consequently she was regarded as some sort of unperson.

      Needless to say, it took a pile of statutory declarations and other depositions to sort the mess out. God knows what she would have done if she had had no existing relatives.

      If these bozos can't even get the basics right, I don't see how they are going to make any impression on terrorism.

  5. Stop identification by bobthemuse · · Score: 3, Funny

    ...a biometric program designed to stop counterfeit identification...

    Yeah, we wouldn't want to stop counterfeits, or identify them. As long as we stop counterfeit identification, we can proudly announce to the nation that there are no counterfeit passports.

  6. Stop counterfeit identification? by Zarxos · · Score: 3, Funny

    ...a biometric program designed to stop counterfeit identification... I guess we're doing too good of a job identifying those counterfeits right now...

  7. Re:Dear Americans by meowsqueak · · Score: 3, Insightful

    Actually, it makes no difference if NZers decide to visit the USA or not. The passport upgrade is (eventually) mandatory for all NZ citizens who want to carry one, because there's no such thing as a separate NZ passport for US entry. So the original poster is correct - we're all paying far, far more for our new passports. Let's hope these new passports operate smoothly and speed up international transitions.

  8. Re:Dear Americans by Anonymous Coward · · Score: 3, Interesting

    Going from Ireland to the US you currently have to get a retina scan taken and recorded and a finger print done and also recorded. (of course no mention of how long this data will be retained for is given, most likely permanently (or atleast until the next revolution)). On top of that the assholes doing the privacy invasion charge you for the privilege.

    Land of the free...

  9. Re:Dear Americans by sharat_sc · · Score: 2, Informative

    Well IBM had come up with privacy preserving authentication some time ago. MIT Tech review article

  10. Re:Dear Americans by alech · · Score: 2, Insightful

    OK, so who modded the parent up? I doubt that a retina scan is taken if you go from Ireland to the US. Let's see, who wrote it? An AC without any source. Oh yes, I am bound to believe this. As someone working in biometrics, I can tell you that retina scans are basically from old Bond movies. Noone really uses them anymore. The AC might have mistaken them with iris scans, which is something completely different and less dangerous (as a normal photo is taken). But still, I doubt that, as the "normal" procedure for US-VISIT is facial image and fingerprint. I have no idea why this should be different for Irish citizens.

  11. Re:Someone's got to make the easy jokes. by daliman · · Score: 2, Funny
    Oh, come on mods, that's a joke! Mod funny!

    I'm a New Zealander and I mod the sheep jokes funny :D

    A man passing through Australian customs is asked if he has any criminal convictions. He responds "I didn't know it was still a requirement to get in!".

  12. NZ Passports Lack Encryption by daliman · · Score: 2, Informative
    From the Ars Technica article on the same thing - http://arstechnica.com/news.ars/post/20060114-5982 .html

    "The Department will also implement Basic Access Control (BAC) to mitigate further any potential threat of skimming or eavesdropping. [...] BAC utilizes a form of Personal Identification Number (PIN) that must be physically read in order to unlock the data on the chip. In this case, the PIN will be derived from the printed characters from the second line of data on the Machine-Readable Zone that is visibly printed on the passport data page. The BAC also results in the communication between the chip and the reader being encrypted, providing further protection."

    It's worth noting that the New Zealand passports do not have this implemented; all data is transferred in the clear.

    1. Re:NZ Passports Lack Encryption by daliman · · Score: 2, Interesting
      The exact quote from my exchange

      Me: is the transmitted information encrypted en route or is it sent in the clear?

      DIA: When information is transmitted between the passport and the reader the information is transferred in the clear although physical shielding is employed to minimise the risk of eavesdropping.

  13. What biometric? by im_dan · · Score: 2, Informative

    As an Australian citizen I just got one of these a month ago. I don't know what they are talking about biometric data being stored, I did not submit a thumbprint or undergo an Iris scan. It was just a regular passport application with only my name etc, so unless the government already has this information on file which I'm sure they don't. This e-passport is just a normal passport with my information on the chip.

    --
    Look over their, it's a grammar nazi
    1. Re:What biometric? by TheDugong · · Score: 2, Informative

      You are correct - if you read the documentation that comes with it (RTFM 8O) ), or at least did come with mine. Just mirrors your details incl photo. However, if you have dead chip or the chip contains incorrect data (which you cannot validate yourself) you are going to have to prove that you are not a forger and probably have your trip/holiday f&*ked.

  14. Re:Dear Americans by TheDugong · · Score: 3, Funny

    I DO NOT want to go/come to the USA because of the current regime (not the average septic ;o) ), however, I have still been forced to have one of these passports.

    I called up the passport office to ask what would happen if I was in a foreign country and the chip failed, the answer:

    "It will not happen".

    I called twice, same f%&kin' answer!

    I went into some detail about microwaves etc, but the monkette on the end of the phone was as dumb as dog do do, so it was a waste of time.

    She did however say that

    "...it can get damaged by being put through the wash...",

    To which I interrupted:

    Monkette: "So, it can get damaged?"

    Monkette: "[Whoops mumble mumble] Only if you do the wrong thing with it. If you damaged normal passport you would have to get it replaced".

    Me: "True, but I can at least see any physical damage to the passport. How can I tell if the chip is dead?"

    Monkette: "They will check it before you board a flight"

    Me: "So will I still be able to board?"

    Monkette: "Probably not"

    Me: "So, there goes my holiday?"

    Monkette: "[mumble mumble]. It can't get damaged."

    Me: "But you just told me it could!"

    Monkette: "[Whoops mumble mumble]. You get a list of things which can damage it when you recieve it. [The End. That's the law. Tough shit. I care not.]"

    F%4k You Alexander Downer! Arsehole!

    From an Aussie/Pom who stupidly missed the non-epassport boat by a week(!) and ironically is going to use the passport for the first time to go to NZ.

  15. Re:Dear Americans by taniwha · · Score: 2, Insightful

    It's actually worse than this - by requiring NZ to issue e-passports - the US is forcing EVERY NZer who gets a passport to get one whether they are travelling to the US or not - at $150 a pop it's a tax (used to be half that) the US is in essence applying to all of us who want to travel. I know most USAians don't have passports and don't travel much, but the rest of us like to and do it a lot