eid Use Cases beyond Border Control Adam Ross Sales Manager eid Solutions, cv cryptovision GmbH

Transcription

1 eid Use Cases beyond Border Control Adam Ross Sales Manager eid Solutions, cv cryptovision GmbH E-Government Use Cases Beyond cv cryptovision Border Control GmbH T: +49 (0) F: +49 (0) info(at)cryptovision.com 1

2 About cryptovision Headquarters: Gelsenkirchen, Germany Subsidiary: New York City, USA Sales Offices: Silicon Valley, USA; Mexico City, Mexico; Vienna, Austria Founded: 1999 by Markus & Andreas Hoffmeister Focus: IT Security, Cryptography, PKI Customer Base: hundreds of customers worldwide 2

3 eid Card Usage BORDER CONTROL 3

4 eid Card Usage There's a lot more you can do with an eid card, but so far... 4

5 This presenta,on will show a few eid card applica,ons beyond border control. All examples where either designed, prototyped or deployed with the use of cryptovision technologies. 5

6 AGENDA 6

7 Ghana: Know Your Customer (KYC) When starwng business, such as opening and bank account a secure idenwficawon is required. This also applies to KYC in Ghana. 7

8 Ghana: Know Your Customer (KYC) 8

9 Ghana: Know Your Customer (KYC) 9

10 Ghana: Know Your Customer (KYC) Summarizing cryptovision technologies used:! epasslet standard eid applicawon with various authenwcawon opwons including BAC, SAC, EACv1 / v2! SCalibur SDK to realize the KYC use case at the bank service counters including eid read- out, form filling and digital signature 10

11 Ghana: Know Your Customer (KYC) 11

12 AGENDA 12

13 Nigeria: Banking $ 13

14 Nigeria: Banking $ * h_p:// 14

15 Nigeria: Banking 15

16 Nigeria: Banking Nigerian eid Card payment and banking 16

17 Nigeria: Banking! only every third grown- up Nigerian has a bank account! new eid cards feature payment funcwon! Cryptovision epasslet Suite combined with EMV on 1 chip approx. 100 million people gain access to banking system 17

18 Banking Gelsenkirchen, July 3, 2014 For the first Wme in history money is withdrawn with an eid card from a German ATM. The eid card is Nigerian.

19 Nigeria: Banking 19

20 Nigeria: Banking $ 20

21 AGENDA 21

22 Nigeria: Prepaid SIM Registration Many countries implemented prepaid SIM registrawon by law, such as Nigeria 22

23 Nigeria: Prepaid SIM Registration Current processes are slow, unsecure and costly: Involves paper- based forms to be filled by applicants IdenWficaWon based on tradiwonal IDs (photocopy created) Biometric fingerprint has to be taken and stored, again MulWple 100 million pages of paper to be archived Secure process relies on telecom employees 23

24 Nigeria: Prepaid SIM Registration 24

25 Nigeria: Prepaid SIM Registration ROM EEPROM eid epki MoC Payment Driving License ICAO Transport Health Personal data Fingerprints Keys Cer,ficates Addi,onal data Vo,ng Pension Insurance Tax SIM Custom cryptovision epasslet Suite Core Library NXP JCOP Java Card OperaWng System 25

26 Nigeria: Prepaid SIM Registration ROM EEPROM Personal data Fingerprints Keys Cer,ficates Addi,onal data eid epki MoC Payment Driving License ICAO Transport Health Vo,ng Pension Insurance Tax SIM Custom cryptovision epasslet Suite Core Library NXP JCOP Java Card OperaWng System 26

27 Nigeria: Prepaid SIM Registration Summarizing cryptovision technologies used:! epasslet EACv2 based card profile prepared for custom SIM applicawon! CAmelot PKI DVCA dedicated to issue cerwficates for read/write access to SIM applicawon! SCalibur SDK SIM registrawon applicawon for the mobile network companies 27

28 Nigeria: Prepaid SIM Registration 28

29 AGENDA 29

30 USA: Health 30

31 USA: Health Card may contain medical informawon: blood type, allergies, medicawons,..., genewc code 31

32 USA: Health 32

33 USA: Health cryptovision, together partners like LifeMedID, provides soluwons that address list of problems presented cryptovision SCalibur provides an SDK that is ideal for realising a health card 33

34 USA: Health 34

35 USA: Health Money Savings for Insurance companies and Hospitals Reduces Medical Insurance ID Fraud Greater efficiency of registrawon staff ReducWon of law suites due to errors in medical ID records Customer sawsfacwon Faster registrawon PaWent portals to access personal medical records Compliance to legal privacy laws 35

36 CONCLUSION 36

37 based on various eid references Angola: Electronic passport based on epasslet Suite Armenia: National eid card based on epasslet Suite Colombia: Electronic passport based on epasslet Suite Croatia: Electronic passport based on epasslet Suite Ecuador: epassport and eid card based on epasslet Suite, middleware, PKI and development environment Germany: Prototyping for machine-readable travel documents with EACv2; crypto libraries for German eid card terminals Ghana: National eid residence permit card based on epasslet Suite, SCalibur middleware components, and CAmelot based eid PKI Guatemala: eid card based on epasslet Suite Macao: ehealth card based on epasslet Suite Security components Malaysia: Electronic passport based on epasslet Suite Malawi: electronic ID based on epasslet Suite Mexico: electronic consular card based on epasslet Suite Moldova: Electronic passport based on epasslet Suite Nigeria: National eid card based on epasslet Suite, card profile, SCalibur and sc/interface middleware, and CAmelot based eid PKI Peru: Voter s card applet and middleware SDK for voting infrastructure Rwanda: eid card based on epasslet Suite with option for EAC migration; PKI components Thailand: Electronic passport based on epasslet Suite 37

38 Some observations Keep it simple and plan ahead A lot of use cases can be covered with PKI credenwals already simplify PIN management (e.g. unblock with biometrics) consider non- qualified signatures (as a complement) add a second cerwficate and key pair for authenwcawon For reading out personal data an eid applicawon is more flexible allows for custom data also works in offline scenarios 38

39 Some observations eid document based idenwficawon and signatures can be offered as commercial service to (re- )finance project costs Access to these services can be restricted by law (easily bypassed) by technical means, e.g. access cerwficates (infrastructure required) 39

40 Some observations Mobile inspecwon systems facilitate general authenwcawon Terminals based on OTS devices and standard OS can reduce costs Virtual/derived eids can be used in some cases (if no private key is involved) Mobile inspection system Smartphone 40

41 Thank you for your apen,on! Adam Ross cv cryptovision GmbH E-Government Use Cases Beyond cv cryptovision Border Control GmbH T: +49 (0) F: +49 (0) info(at)cryptovision.com 41

42 More Details on Products (if direct marke,ng is permiped) E-Government Use Cases Beyond cv cryptovision Border Control GmbH T: +49 (0) F: +49 (0) info(at)cryptovision.com 42

43 eid Eco-System John Doe Data Preparation Personalization Identification Border Control Data Collection Document Issuance Credential Issuance (PKI) Government and Citizen Use Cases 43

44 Why cryptovision eid middleware? Distributed middleware is secure, even on untrusted clients. This concept is used with the German eid. eid Card Untrusted Client Distributed Middleware Trusted Server Online Service E-Government SCalibur Use Cases Beyond Border Control 44

45 eid Eco-System SCalibur John Doe Data Preparation Personalization Identification Border Control Data Collection Document Issuance Credential Issuance (PKI) Government and Citizen Use Cases 45

46 What else Standalone usage allows to store the access credenwals on a Trusted Device Card Trusted Device with Terminal Key E-Government SCalibur Use Cases Beyond Border Control 46

47 eid Eco-System John Doe Data Preparation Personalization Identification Border Control Data Collection Document Issuance Credential Issuance (PKI) sc/interface Government and Citizen Use Cases 47

48 Thank you for your apen,on! Adam Ross cv cryptovision GmbH E-Government Use Cases Beyond cv cryptovision Border Control GmbH T: +49 (0) F: +49 (0) info(at)cryptovision.com 48