Search

In the current paper, we propose a novel mobile-based architecture that enforces security and privacy protection in the context of mParticipation. This architecture enables the citizens to cast their opinions anonymously and without limitation in time and space. It also removes the burden of preceding registration before any voting process. As the new electronic identity (eID) Cards are replacing the conventional identity cards in most European countries, we also discussed, in this paper, how the new German eID cards can be utilized for mobile participation. The use of the eID cards offers better flexibility and stronger security. A prototype implementation of this architecture is also described in this document, and the related performance is discussed. Copyright © 2016 John Wiley & Sons, Ltd.

Electronic identity (eID) systems enable electronic services and applications to identify users reliably. In an eID system, unique data, i.e. an eID, is assigned to each user. The eID unambiguously identifies the user within the eID system. In most cases, the user's eID is extended by additional attributes such as name, address, or date of birth. The assigned eID and associated attributes are used by electronic services and applications to identify users unambiguously and to obtain required information about these users. In practice, required user attributes potentially need to be exchanged between different eID systems. Unfortunately, each eID system uses its own ontology to represent and organize eIDs and associated attributes. This diversity of ontology definitions prevents an easy exchange of eIDs and attributes between eID systems. To address this issue, we propose an ontology-alignment solution that provides interoperability between eID systems. We show the feasibility of the proposed solution through a web service (WS) based implementation. This WS enables eID-based applications to retrieve eID attributes from different eID systems. Experiments conducted show that the proposed solution and the resulting WS works with arbitrary ontologies and hence provides interoperability between eID systems.

The potential of optically stimulated luminescence of wire-bond chip card modules with molded encapsulations for retrospective and accident dosimetry is investigated. Contact-based and contactless modules were studied, the latter finding potential use in electronic documents (e.g. electronic passports, electronic identity cards). Investigations were carried out on intact as well as chemically prepared modules, extracting the filler material. Contact-based modules are characterized according to zero dose signal, correlation between OSL and TL, dose response and long-term signal stability. For prepared modules, the minimum detectable dose immediately after irradiation is 3 mGy and between 20 and 200 mGy for contact-based and contactless modules, respectively. Dose recovery tests on contact-based modules indicate that the developed methodology yields results with sufficient accuracy for measurements promptly after irradiation, whereas a systematic underestimation is observed for longer delay times. The reasons for this behaviour are as yet not fully understood.

Radio frequency identification (RFID) technology is among the Internet of Things (IoT) technologies that have been proposed for substantially improving performance of container port operations. In addition, more implementation is to be expected in the field of container yard and depot as well as in logistics-related activities. Seaports, especially container terminals, are expected to become one of the efficient nodes among all logistics activities with the help of IoT technology in the operation practice of sea port, which plays an essential role in transportation; there is a trend that IoT technology, including RFID technology, is to be adopted to fulfill future electronic identity verification and remote location and control over cargo. A goal of this article is to critically evaluate RFID application for operational procedures in port-based container logistics. Based on that, some previously used technologies are briefly introduced with their effectiveness and efficiencies so that comparison can be ma...

For local e-government to become a reality, all the elements of the ecosystem must be in place. We search for the elements which constitute the ecosystem, both from the citizen and from the city council point of view, with the electronic identity card (eID) as the core. In order to find out the main deficiencies in the system and to propose solutions, we need to quantify the present situation of each element: from city and county councils websites where eID is needed to use the services offered to the number of eID and compatible readers owned by citizens. According to the latest data, only 2% of the population owns an eID reader: this is the weakest element of our ecosystem.

This study proposed to disclose the legislative’s Inquiry Rights ahead of corruption eradication commission (KPK) performance since many officials state are involved in corruption which includes the members of the Legislative Assembly (DPR). The inquiry rights appeal regarding the performance and budget management of KPK apparatus. It is appeal due to electronic identity card (E-KTP) case which involved members of legislative assembly. This study uses nominative approach pointing to the law No. 17/2014 concern with the MPR, DPR, DPRD and DPD and law No. 30/2002 concern with commission eradication сorruption. In addition, it also uses the sociological approach in term of public response to The Legislative Assembly’s inquiry rights appeal. This study revealed that the Inquiry right appealed by Legislative Assembly constitutionally was legal since it was one of the three right of legislative assembly. However, the inquiry right appealed by Legislative assembly regard with Id-card case potentially to hinder the KPK’s performance to prevent any corruption act in Indonesia. Additionally, this appeal also creates pros and cons because the society does not in line with it

This paper describes the introduction of a new electronic identity card including an electronic identity (EID) for local physical and online authentication in 2006. The most significant difference to any European country is the decentralized issuing at 256 police stations employing an automatic printing machine. This is the most visible element in a high degree continuation, as the previous paper based ID cards were also personalized and issued at the police stations. Similarly the attributes defining the identity and the legal framework were not changed either. While there was some delay in the planning phase, the role-out of the new eID cards was rather smooth. At the end of 2009, approx. 13 Mio Spanish citizens out of more than 46.5 Mio inhabitants (www.ine.es) were in possession of an eID card. But this does not necessarily mean that they are using the eID function for online authentication. The reasons for this application gap will be discussed with reference to online tax declaration, where the eID so far covers less than one percent of all online declarations while authentication by software certificates still make up for 98 percent.

The Belgian Electronic Identity Card (eID) was introduced in 2002. The card enables Belgian citizens to digitally prove their identity and to sign electronic documents. Today, only a limited number of citizens really use the card in electronic applications. An important reason is the lack of killer functionality and killer applications. This paper presents two reusable extensions to the Belgian eID technology that opens up new opportunities for application developers. First, a secure and ubiquitously accessible remote storage service is presented. Second, it is shown how the eID card can be used to issue new certificates. The feasibility and reusability of both extensions are validated through the development of several applications in different domains. Copyright © 2010 John Wiley & Sons, Ltd.

In this article, the authors are evaluating the current authentication mechanisms for eGovernment employed in Belgium. Particular focus is placed on the Belgian electronic identity card (eID) and the use of national identification numbers. After evaluating the current situation the authors proceed to highlight possible alternative.

This paper describes the design and implementation of an Attribute Provider (AP), compatible with the protocol defined in the STORK 2.0 electronic identity European infrastructure that provides cross-border authentication and attribute management in web-based services.

In the last decade traditional identity documents have been equipped with an embedded NFC-chip to enable wireless access to the relevant data. This applies in particular to passports, following the ICAO standard, but increasingly also to other identification documents, such as driver’s licenses. Such electronic identity (eID) documents can now be used as “mother cards” by the users to remotely enrol and obtain derived credentials which can in turn be used for identification and authentication, notably on smart phones. These self-enrolment possibilities are becoming popular, because they are easier and cheaper than traditional, face-to-face enrolments.

The e-government strategy of each country aims to deliver digital services to its citizens. In this paper Croatian National Identification and Authentication System (NIAS) as a base for usage of personal user box as a central point of receiving messages together with electronic identity infrastructure, as a key enablers in the development of trust into e-government in Croatia, will be described. Online authentication of electronic identity allows both the individual and the provider of government services (service agency) to have confidence in the identity of the other party in a transaction over the Internet (online transaction) and is essential infrastructural component for realizing overall objectives of e-government. There is a growing awareness that the interoperability of national public ICT infrastructures is a precondition for a more service-oriented and competitive public sector.

This economy profile for Doing Business 2016 presents the 11 Doing Business indicators for Sweden. To allow for useful comparison, the profile also provides data for other selected economies (comparator economies) for each indicator. Doing Business 2016 is the 13th edition in a series of annual reports measuring the regulations that enhance business activity and those that constrain it. Economies are ranked on their ease of doing business; for 2015 Sweden ranks 8. A high ease of doing business ranking means the regulatory environment is more conducive to the starting and operation of a local firm. Doing Business presents quantitative indicators on business regulations and the protection of property rights that can be compared across 189 economies from Afghanistan to Zimbabwe and over time. Doing Business sheds light on how easy or difficult it is for a local entrepreneur to open and run a small to medium-size business when complying with relevant regulations. It measures and tracks changes in regulations affecting 11 areas in the life cycle of a business: starting a business, dealing with construction permits, getting electricity, registering property, getting credit, protecting minority investors, paying taxes, trading across borders, enforcing contracts, resolving insolvency and labor market regulation. The data in this report are current as of June 1, 2015 (except for the paying taxes indicators, which cover the period from January to December 2014).

This set of three case studies explores the intersection of openness, digital governance, andhigh quality information in Estonia,1 Finland, and Norway with the aim of identifying lessonsthat will support the same objectives in lower resource countries. Openness, a key aspect ofthe international agenda for increasing transparency and accountability, for reducing public sectorcorruption, and for strengthening economic performance, rests on the principle that citizenshave a right to know what their governments are doing and to benefit from using governmentinformation. Goals for open, accountable, and inclusive governance rest on the assumption thattrustworthy information is available and can be shared meaningfully through strategies for digitalgovernance. This assumption needs to be examined. Does reliable and complete informationexist across lower resource countries? Can it be accessed readily? Will it survive through time?

This study presents the vision and implementation recommendations for the electronic identity based service delivery framework (EISDF) in Vietnam. It also delineates the roles to be played by the diverse stakeholders (private, public, development community, etc.) in the field. The study recommends various relevant and innovative electronic identity (eID) services that can be implemented to transform and enhance the accountability and efficiency of service delivery across sectors. These recommendations are based on the stocktaking of international experiences and identified possibilities based on the country assessment. Special emphasis is placed on eID systems that operate on mobile phones, and on those that have the potential of being scaled up by both the public and private sectors in Vietnam. The eID systems can help reduce identity fraud and enable individuals to avail of services more securely in a variety of contexts as in mobile banking and mobile applications for health care.

This study deals with user acceptability of a proposed e-Passport in the European Union (EU). E-passport is an advanced version of a combined national identity card and travelling document which holds digitised biometric features of its associated individual for enhanced security of personal authentication. We attempt here to investigate the nature of the innovation and citizens’ attitudes to an e-Passport (or analogous innovation) in a range of socio-political-contexts within which the implementation occur. This paper reports the findings of an Internet Survey, conducted as the second part following a larger research program on biometrics-based e- Identity (e-Passport) acceptability and deployment issues. The data collected are interpreted under the guidance of the theoretic framework ‘Price of Convenience’ briefly described and fully referenced herein and theories of national culture after Hofstede [15], [16]. We found that although a direct and complete extrapolation of results from countries of similar cultural dimensions to another is not possible, limited referencing is still possible and provides a rather rich understanding of a country when it is used together with other dimensions of study. Although useful in helping to draw parallels between different countries, Hofstede’s work is not all encompassing. Thus we also proposed other contingency factors and indicators for e-Passport acceptance which can make countries with similar cultural dimensions appear very different in biometric technological adoption.

The post-2015 development agenda is being shaped as we speak. The role of identity and identification and its importance to development outcomes places it within the new Sustainable Development Goals (SDG) agenda—specifically as one of the proposed SDG targets (#16.9), but also as a key enabler of the efficacy of many other SDG targets. Although there is no one model for providing legal identity, this SDG would urge states to ensure that all have free or low-cost access to widely accepted, robust identity credentials. Regardless of the modalities to achieve it, the recognition of legal identity – together with its associated rights – is becoming a priority for governments around the world. Political will is central, and the SDGs – unwieldy as they may seem today – provide a useful reference point for accountability. But new approaches expand the horizon of what is possible, and should serve as a stimulus to development ambition. Seizing these opportunities requires strong leadership, a supportive legal framework, mobilization of financial and human resources, and – critically – the trust of each country’s residents. Incentives, technology, foreign assistance and reforms will all be critical in achieving tangible results. Equally important is coordination at the global, regional and national levels, to ensure inclusive oversight and concerted global action. Support from donors and other development partners is widely diffused. It could focus more strategically on building core systems for registration and – equally important – ensuring that these extend into effective and inclusive systems to support development.

Government Electronic IDs (EIds) are digital credentials issued to the citizens. In Europe, EIds are distributed in the form of identity cards or passports that allow for identity verification towards government and private services in the digital domain. This paper provides a reference design and implementation examples for Trusted Execution Environment (TEE) based EIds. Especially, the paper highlights the role of attestation during enrolment, a requirement that is not present in legacy EIds.

In the new era of big data, existing mobile identity authentication methods lack universal protection for user privacy, which causes user privacy leaking happened frequently. Based on electronic identity (eID), this paper proposes a mobile identity authentication method. Using near field communication (NFC) technology to integrate eID into the application system’s authentication process, this paper designs and implements the eID authentication procedure. This method guarantees user identity authentication safe and reliable as well as protects users’ privacy validly on mobile terminals. Experiment shows it’s a universal and effective solution.

This research aims to describe and analyze the policy implementation of Law number 24 Year 2013 on population administration at Population and Civil Registry Service of KutaiKartangera District thorough the process of Electronic Identity Card Issuance. The research findings showed that Population and Civil Registry Service of KutaiKartanegara District had implemented the policy stated in Law Number 24 year 2013 on Population Administration, in the form of electronic ID Card issuance. However, its implementation was not optimal, which was indicated by the fact that there were still a lot of people who did not possess residency document, namely electronic ID Card.

Initially, the article describes how the Finnish Government has developed telecommunications and Internet use by launching initiatives, such as electronic identity cards for Finnish citizens to enable clear authentication for e-commerce. In addition, Finnish law for e-commerce in the public administration already provides the legal basis for filing, e.g. patent applications, electronically. Against this backdrop, the article describes the way in which the Finnish Patent Office is moving forward rapidly in the provision of services on the Internet. These include both statutory and legal filing and like actions, as well as, in cooperation with the EPO, the dissemination of patent information. On patent information, the plans to make all Finnish patents and the corresponding legal status accessible through the Internet, to expand the patent information centres and to heighten public awareness, are outlined.

Hoboken, NJ: John Wiley & Sons. 2004. 716 pages. ISBN: 0-471-48348-6 (paper). This 2004 compendium is a large exposition of the history, nature, and research into the phenomenon of electronic ident...

Prolific sensing devices like mobile phones and video cameras can sense electronic and visual information, respectively, which can help detect and verify a person. Accurate detection and verification of a person's identity from this sensed data is important for enabling applications such as surveillance and e-health. This is challenging due to sensed data heterogeneity, measurement noise, and the prohibitive cost of specialized equipment. This paper proposes R-Focus, a rotating platform with electronic and visual sensors that can detect and verify a person of interest in an area. R-Focus performs electronic and visual data collection and rotates based on the collected data. R-Focus uses the electronic identity information for a person to gather visual identity information for the person, who is verified and tracked. We implement R-Focus on commercial off-the-shelf hardware and software. Our experimental evaluation shows R-Focus's promise for detecting and verifying a person of interest.

Biometric characteristics could play an increasing role as means for binding electronic documents and transactions to a person and for identifying that person. However, one of the conditions for biometric methods to be used as an electronic signature is that spoofing vulnerabilities are adequately assessed and appropriate solutions are developed. Anti-spoofing measures are also crucial in electronic identity schemes which may include biometric characteristics. For these schemes, privacy and data protection issues remain to be solved as well.

Russian Abstract: В статье анализируется реакция российского общества на введение в стране электронных идентификаторов личности: универсальных электронных карт и электронных паспортов. Показаны преимущества электронных документов и вместе с тем обобщаются аргументы религиозно ориентированной части общества, не желающей принимать эти документы. Предлагается решение проблемы. English Abstract: The article analyzes the reaction of Russian society to the introduction of the electronic identity of a person: universal electronic cards and electronic passports. It shows the advantages of electronic documents and, at the same time, summarizes arguments of part of society, which is religiously oriented and does not want to accept these documents. It also offers the solution.

Electronic Identity eID cards are rapidly emerging in Europe and are gaining user acceptance. As an authentication token, an eID card is a gateway to personal information and as such it is subject to privacy risks. Several European countries have taken extra care to protect their citizens against these risks. A notable example is the German eID card, which we take as a case study in this paper. We first discuss important privacy and security threats that remain in the German eID system and elaborate on the advantages of using privacy attribute-based credentials Privacy-ABCs to address these threats. Then we study two approaches for integrating Privacy-ABCs with eID systems. In the first approach, we show that by introducing a new entity in the current German eID system, the citizen can get a lot of the Privacy-ABCs advantages, without further modifications. Then we concentrate on putting Privacy-ABCs directly on smart cards, and we present new results on performance, which demonstrate that it is now feasible for smart cards to support the required computations these mechanisms require.

SSEDIC (Scoping a Single Electronic Identity Community) has entered its third year helping the European Commission (EC) to create a common view of the electronic identity landscape as input for the 2020 Digital Agenda for Europe (DAE). The results from the second year of work have recently been reviewed by the EC and published in the SSEDIC web site (http://www.eid-ssedic.eu/). Although there are seven published documents this year, we would like to focus on three of them that are of higher relevance to Universities: results of the second SSEDIC eID survey (which has got a significant level of input from the Higher Education community), the Authentication Standards Paper and, specially, the document on eID in universities. The main aim of the presentation is raising awareness of these materials among the University IT community. This second year work has used the input from the first year review, presented at last year's EUNIS congress in Vila Real, and its review results will be the stepping stone to the last year of work. We would like to have the views of the University IT community in order to improve SSEDIC knowledge of electronic identity in Higher Education and thus provide a better input to the DAE.

This work is framed into the context of automatic face recognition in electronic identity documents. In particular we study the impact of digital alteration of the face images used for enrollment on the recognition accuracy. Alterations can be produced both unintentionally (e.g., by the acquisition or printing device) or intentionally (e.g., people modify images to appear more attractive). Our results show that state-of-the-art algorithms are sufficiently robust to deal with some alterations whereas other kinds of degradation can significantly affect the accuracy, thus requiring the adoption of proper detection mechanisms.

Part 4: Infrastructure and Technology; International audience; Electronic Identities (eID) and their cross-border recognition are on top of the agenda of various e-Government initiatives of the European Commission (EC). Therefore, the EC launched the EU large scale pilot STORK, which was running for about 3.5 years and finished at the end of 2011. In this period, STORK has established a European eID interoperability platform for citizens. The focus of STORK was to achieve eID interoperability of natural persons. However, many e-Government processes are conducted by representatives of legal persons. Hence, this paper proposes an eID interoperability framework for the cross-border identification and authentication of legal persons or professional representatives using electronic mandates. The framework strongly bases on the findings of STORK and introduces an extension of the STORK framework supporting cross-border identification and authentication of legal persons.

Electronic identity (eID) initiatives have in many cases started with state-issued credentials for secure authentication of natural persons. While citizen eID is a major leap, e-business and e-government processes are in many cases carried out by legal persons or professional representatives. Comprehensive mandate systems that seamlessly integrate with the national identity management (IDM) system are still rare.

National governments across Europe are currently introducing electronic identity management systems for enhancing security and gathering more unified forms of authentication for online public services. A particular challenge of security system design is to cope with the suspense between security and usability. This is strongly reflecting in identity management where this suspense becomes very apparent. Thus, for the success of identity management systems a certain focus on user centricity is demanded. This paper analyzes the system in Austria with respect to important determinants of a citizen-centric identity management approach, deduced from security usability issues, interrelated with factors for user perception as provided by the Technology Acceptance Model. The result reveals a biased picture of user centricity with an essential need for a stronger consideration of user perception and the provision of additional benefits addressing a perceivable user value.

Doing business sheds light on how easy or difficult it is for a local entrepreneur to open and run a small to medium-size business when complying with relevant regulations. It measures and tracks changes in regulations affecting 10 areas in the life cycle of a business: starting a business, dealing with construction permits, getting electricity, registering property, getting credit, protecting investors, paying taxes, trading across borders, enforcing contracts and resolving insolvency. In a series of annual reports doing business presents quantitative indicators on business regulations and the protection of property rights that can be compared across 183 economies, from Afghanistan to Zimbabwe, over time. This economy profile presents the doing business indicators for Sweden. To allow useful comparison, it also provides data for other selected economies (comparator economies) for each indicator. The data in this report are current as of June 1, 2011 (except for the paying taxes indicators, which cover the period January-December 2010).

Electronic Identity (eID) is a key driver for the growth of the EU economy and the completion of the Single Digital Market. Despite the proliferation of identity management systems, the various political declarations and initiatives in this area, the plethora of research projects and the wide array of advanced eID technologies, the creation of an encompassing, interoperable, pan-European eID scheme has not yet been accomplished. One fundamental reason for such state-of-affairs is the inadequacy of the current EU legal framework. In this context, the paper identifies a number of legal gaps and barriers in the EU legal framework that are arguably hindering the creation of a full-fledged pan European eID. Through such examination, the article underlines that an appropriate regulation regarding eID on a European level is lacking. Current EU law does not yet present a specific and appropriate legal framework for the management of digital identities, regulating the latter through principles, rules and concepts ‘borrowed’ from different EU legal instruments and national laws.

Blockchain, a continuously growing tamper resistant data structure, was developed as the technology underlying the Bitcoin crypto-currency and it is now being applied to a wide range of problems as a form of ‘Distributed Ledger’. The promise of this technology has been recognised by governments and the financial industry. It also has application to enhance privacy of personal information, to secure the Internet of things and to change electronic identity. This study explains what a Blockchain is and how it works. It describes some actual and the potential applications of this technology together with some of the risks associated with its use.

The use of electronic documents is constantly growing and the necessity to implement an ad-hoc eCertificate which manages access to private information is not only required but also necessary. This paper presents a protocol for the management of electronic identities (eIDs), meant as a substitute for the paper-based IDs, in a mobile environment with a user-centric approach. Mobile devices have been chosen because they provide mobility, personal use and high computational complexity. The inherent user-centricity also allows the user to personally manage the ID information and to display only what is required. The chosen path to develop the protocol is to migrate the existing eCert technologies implemented by the Learning Societies Laboratory in Southampton. By comparing this protocol with the analysis of the eID problem domain, a new solution has been derived which is compatible with both systems without loss of features.

The application, issuance and usage of modern electronic identity documents that are connected to biometric data is only possible after a complex process of requirements and regulations has been carried out together with the establishment of a respective infrastructure. Although different governmental eID documents are connected to various requirements, the structure and approach of the modus operandi is quite similar. Therefore, synergistic effects can be used to represent the processes connected to these documents.

In the Project “Semantic Product Memory” we exploit the lessons learned so far for the general design of a Digital Product Memory (DPM). DPMs can be used along their product's life cycle to collect data by different instances. In case of the individualized weekly medicament blister for patients from 7×4 Pharma not only the collected data but even the product itself is private. If we equip such a product with a DPM the collected data should be accessible -individually or role-based- only by authorized persons. This authorized access can be accomplished via a roles and rights management system and a secure identification provided by the new German electronic identity card. With our demonstrator we will present a system, which allows an authorized access on a DPM. Depending on the rights and roles of a user different data and different views will be available and displayed accordingly.

There is a wide range of cryptographic techniques that may serve to prevent attacks on electronic identity documents (e-IDs). Many e-ID systems – including the ICAO ePass and virtually all national electronic identity cards – make intensive use of these methods. The first purpose of this work is to identify all cryptographic techniques that make an electronic identity document secure. As a second step, these techniques are grouped into several distinct classes. And third, they are evaluated according to their application areas and according to their advantages and disadvantages. In the fourth part of the paper, the ICAO ePass and the German electronic identity card (ePA) are examined with a view on the cryptographic techniques they use.

The use of modern computing equipment by emergency service units in a disaster area assures increased efficiency during disaster response. Emergency devices must be easy to use and secure. Trusted Computing is a promising approach to help protect the software integrity of commodity emergency devices and thus increase their security. To efficiently use Trusted Computing in an emergency scenario it is necessary to establish an initial trust relationship between the emergency infrastructure providers and a user, her devices, and the software running on those devices. Currently, this requires physical presence of the involved entities. In this paper we propose a remote protocol that employs electronic identity facilities and Trusted Computing to aggregate the identity of a user, the identity of her devices and a set of trusted software states as well as the users facilities and skills. Such a protocol alleviates the need for physical presence. Thus, the protocol facilitates deployment of new electronic emergency equipment, while maintaining a high level of security. We belief that such a protocol is an important step in the process of introducing new capabilities for disaster response.

In 2002, Belgium has adopted an electronic identity card as one of the first countries in Europe. By the end of 2009, the roll-out of the eID card will be completed. This means that each Belgian citizen will possess an eID card. The card enables her to digitally prove her identity and to legally sign electronic documents. The Belgian eID card opens up new opportunities for the government, its citizens, service providers and application developers. The Belgian eID technology originally aimed at facilitating transactions between Belgian citizens and the government. Although many eID applications have been developed, the success of the Belgian eID technology has not been what was expected. Therefore, the Belgian government encourages developers to build commercial applications that use the eID card (for authentication or e-signatures). However, extending the scope of the Belgian eID technology from e-government to the commercial sector is no sinecure and not without risks. ispartof: Handbook of Research on Mobility and Computing: Evolving Technologies and Ubiquitous Impacts status: published

The Belgian Electronic Identity Card was introduced in 2002. The card enables Belgian citizens to prove their identity digitally and to sign electronic documents. Today, only a limited number of citizens really use the card in electronic applications. A major reason is the lack of killer functionality and killer applications. This paper presents two reusable extensions to the Belgian eID technology that opens up new opportunities for application developers. First, a secure and ubiquitously accessible remote storage service is presented. Second, we show how the eID card can be used to issue new certificates. To demonstrate the applicability and feasibility of both extensions, they are combined in the development of a secure e-mail application. The proposed solution offers strong privacy, security and key management properties while increasing the accessibility of confidential e-mail compared to existing solutions (such as PGP and S/MIME). ispartof: pages:97-109 ispartof: Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering vol:17 pages:97-109 ispartof: MobiSec location:Turin, Italy date:3 Jun - 5 Jun 2009 status: published

The Belgian Electronic Identity Card enables Belgian citizens to prove their identity digitally and to sign electronic documents. At the end of 2009, every Belgian citizen older than 12 years will have such an eID card. In the future, usage of the eID card may be mandatory. However, irresponsible use of the card may cause harm to individuals. Currently, there exist some privacy and security problems related to the use of the eID card. This paper focuses on solutions to tackle these problems. A new authentication protocol is introduced to substantially reduce the risk of abusing the single sign-on authentication and privacy friendly identity files are proposed to improve the citizen's privacy. Book subtitle: 24TH IFIP TC 11 INTERNATIONAL INFORMATION SECURITY CONFERENCE, SEC 2009, PROCEEDINGS ispartof: pages:237-247 ispartof: Emerging Challenges for Security, Privacy and Trust vol:297 pages:237-247 ispartof: 24th IFIP International Information Security Conference (SEC) location:Pafos, Cyprus date:18 May - 20 May 2009 status: published

The Spanish National Electronic Identity Card (DNIe) is currently being issued by the Spanish government, allowing citizens to use the electronic signature and authentication certificates incorporated in it. In this document, the situation of four sets of requirements (Protection Profiles) for signature-creation and verification applications with the DNIe will be shown. These requirements have been developed by INTECO with the collaboration of a technology partner and the industry and are based on the Common Criteria for Information Technology Security Evaluation (CC). These four Protection Profiles will be the way for developers to adjust their products to the functional and security assurance requirements specified in them, allowing the certification of their developments.

Pursuing authentication through appropriate mechanisms for e-government procedures is a complex issue. The problem is not a technological one: from this point of view, the set of available authentication devices may be considered mature and stable. Major difficulties seem to arise from the fluidity of juridical taxonomies and of guiding-principles on which methodologies to select appropriate authentication mechanisms have to be established. Besides, e-inclusive policies and regulations have largely multiplied the number of variables to manage. In this scenario, effectiveness of available approaches and methodologies to support public bodies in their authentication choices may be legitimately questioned.