Ambimat GroupAmbimatAmbiSecureeSIM InitiativeEngineering BlogAhmedabad · India · Est. 1981
HISTORICAL ARCHIVE · Originally published January 28, 2021
Archive

ePassport and How will chip-based e-Passports work

How chip-based ePassports work in practice — the BAC / PACE access protocols, the CSCA / DSC / PKD trust chain, and the role of the secure element inside the document.

This is an earlier piece from the AmbiSecure engineering archive. Where the field has moved on, the link above points to current coverage of the same topic.

Chip-based ePassports work because the document carries a tamper-resistant secure element that runs ICAO 9303 applets and is bound to a national PKI. The chip exposes a small, well-defined set of read protocols (BAC, PACE, Active Authentication) and never reveals private keys.

What is an ePassport?

"With a chip embedded in it, the ePassport will ensure the security of the passport holder's data."

The embedded chip adds security features that detect tampering attempts.

Introduction (Detailed)

A biometric passport uses "contactless smart card technology, including a microprocessor chip and antenna" embedded in the passport cover or center page. "Malaysia was the first country to issue biometric passports in 1998," with adoption expanding to 120 countries by June 2017.

"Only the digital image (usually in JPEG or JPEG2000 format) of each biometric feature is actually stored in the chip."

Salient Features

  1. Digitally signed chip containing personal particulars
  2. Thicker back and frontier covers for protection
  3. Faster processing at immigration checkpoints
  4. Storage capacity for up to 30 international visits with 64 kilobytes memory

About Ambimat Electronics

"Design experience of close to 4 decades" — solution provider for IoT and security products.

Browse more historical AmbiSecure writing.

The full archive lists everything we have published, with the modern-equivalent counterpart linked wherever one exists.

Open archive