ePassport — from BAC to PACE-CAM.
Electronic travel documents have evolved from contact-only paper-plus-chip to PACE-protected, biometric-rich, multi-application travel credentials with PKD-distributed trust roots.
Timeline
ICAO Doc 9303, first edition
“A Passport with Machine Readable Capability” defines the optical MRZ; Australia, Canada and the United States base the first machine-readable passports on it.
Biometric data on chip recommended
ICAO publishes recommendations on biometric facial image storage on a contactless chip.
First chip-enabled passports rolled out
The first ICAO-compliant ePassports are issued (Belgium, November 2004), with the face image on a contactless chip. Basic Access Control (BAC), optional in the ICAO specification, follows on later issuances.
ICAO PKD begins operating
The ICAO Public Key Directory starts distributing CSCA / DSC trust material between participating states.
Extended Access Control (EAC) in EU passports
EU passports issued from 28 June 2009 carry fingerprints, protected by EAC: chip authentication + terminal authentication.
Doc 9303 seventh edition
ICAO restructures Doc 9303 into a multi-part specification. PACE (Supplemental Access Control) succeeds BAC with stronger password-based key agreement on the chip-reader channel; BAC remains for older readers.
Logical Data Structure 2 (LDS2) in development
ICAO works on an extended on-chip data model for travel records, visa records and additional biometrics written after issuance — not just static issuance data.
Digital Travel Credential pilots
ICAO's Digital Travel Credential (DTC) derives a verifiable mobile credential from the ePassport chip. Finland's Border Guard runs a live border-control pilot at Helsinki Airport from August 2023.
Backend platforms for issuance + personalisation
In-country enrolment, sovereign personalisation, CSCA-key custody, and PKD upload pipelines become standard parts of national-ID programmes.
Frontend + backend converge
A single platform handles enrolment UIs, biometric capture, applet personalisation, DSC signing, and PKD distribution — with audit hooks across the entire issuance chain.
Continue exploring.
How do you build against this evolution?
If your roadmap touches any of these milestones, our engineering team can map the standards posture to a deployable architecture.