Biometric passport

A biometric passport, also known as an e-passport, ePassport or a digital passport, is a combined paper and electronic passport that contains biometric information that can be used to authenticate the identity of travelers. It uses contactless smart card technology, including a microprocessor chip (computer chip) and antenna (for both power to the chip and communication) embedded in the front or back cover, or center page, of the passport. Document and chip characteristics are documented in the International Civil Aviation Organization's (ICAO) Doc 9303.^[1][2][3] The passport's critical information is both printed on the data page of the passport and stored in the chip. Public Key Infrastructure (PKI) is used to authenticate the data stored electronically in the passport chip making it expensive and difficult to forge when all security mechanisms are fully and correctly implemented.

The currently standardized biometrics used for this type of identification system are facial recognition, fingerprint recognition, and iris recognition. These were adopted after assessment of several different kinds of biometrics including retinal scan. The ICAO defines the biometric file formats and communication protocols to be used in passports. Only the digital image (usually in JPEG or JPEG2000 format) of each biometric feature is actually stored in the chip. The comparison of biometric features is performed outside the passport chip by electronic border control systems (e-borders). To store biometric data on the contactless chip, it includes a minimum of 32 kilobytes of EEPROM storage memory, and runs on an interface in accordance with the ISO/IEC 14443 international standard, amongst others. These standards intend interoperability between different countries and different manufacturers of passport books.

Some national identity cards (for example in the Netherlands, Albania and Brazil) are fully ICAO9303 compliant biometric travel documents. However others, such as the United States Passport Card, are not.

Data protection

Biometric passports are equipped with protection mechanisms to avoid and/or detect attacks:

• Non-traceable chip characteristics. Random chip identifiers reply to each request with a different chip number. This prevents tracing of passport chips. Using random identification numbers is optional.
• Basic Access Control (BAC). BAC protects the communication channel between the chip and the reader by encrypting transmitted information. Before data can be read from a chip, the reader needs to provide a key which is derived from the Machine Readable Zone: the date of birth, the date of expiry and the document number. If BAC is used, an attacker cannot (easily) eavesdrop transferred information without knowing the correct key. Using BAC is optional.
• Passive Authentication (PA). PA is aimed at identifying modification of passport chip data. The chip contains a file (SOD) that stores hash values of all files stored in the chip (picture, fingerprint, etc.) and a digital signature of these hashes. The digital signature is made using a document signing key which itself is signed by a country signing key. If a file in the chip (e.g. the picture) is changed, this can be detected since the hash value is incorrect. Readers need access to all used public country keys to check whether the digital signature is generated by a trusted country. Using PA is mandatory. According to a September 2011 United States Central Intelligence Agency document released by Wikileaks in December 2014, "Although falsified e-passports will not have the correct digital signature, inspectors may not detect the fraud if the passports are from countries that do not participate in the International Civil Aviation Organization’s Public Key Directory (ICAO PKD). Only 15 of over 60 e-passport-issuing countries belong to the PKD program, as of December 2010"^[4]
• Active Authentication (AA). AA prevents cloning of passport chips. The chip contains a private key that cannot be read or copied, but its existence can easily be proven. Using AA is optional.
• Extended Access Control (EAC). EAC adds functionality to check the authenticity of both the chip (chip authentication) and the reader (terminal authentication). Furthermore, it uses stronger encryption than BAC. EAC is typically used to protect fingerprints and iris scans. Using EAC is optional. In the European Union, using EAC is mandatory for all documents issued starting 28 June 2009.
• Supplemental Access Control (SAC) was introduced by ICAO in 2009 for addressing BAC weaknesses. It was introduced as a supplement to BAC (for keeping compatibility), but will replace it in the future.
• Shielding the chip. This prevents unauthorized reading. Some countries – including at least the US – have integrated a very thin metal mesh into the passport's cover to act as a shield when the passport cover is closed.^[5] The use of shielding is optional.
• To assure interoperability and functionality of the security mechanisms listed above, ICAO and German Federal Office for Information Security (BSI) have specified several test cases. These test specifications are updated with every new protocol and are covering details starting from the paper used and ending in the chip that is included.^[6]

Inspection process

The typical work-flow of an automatic border control system (eGate)^[7]

Attacks

Since the introduction of biometric passports several attacks have been presented and demonstrated:

• Non-traceable chip characteristics. In 2008 a Radboud/Lausitz University team demonstrated that it's possible to determine which country a passport chip is from without knowing the key required for reading it.^[8] The team fingerprinted error messages of passport chips from different countries. The resulting lookup table allows an attacker to determine from where a chip originated. In 2010 Tom Chothia and Vitaliy Smirnov documented an attack that allows an individual passport to be traced,^[9][10] by sending specific BAC authentication requests.
• Basic Access Control (BAC). In 2005 Marc Witteman showed that the document numbers of Dutch passports were predictable,^[11] allowing an attacker to guess/crack the key required for reading the chip. In 2006 Adam Laurie wrote software that tries all known passport keys within a given range, thus implementing one of Witteman's attacks. Using online flight booking sites, flight coupons and other public information it's possible to significantly reduce the number of possible keys. Laurie demonstrated the attack by reading the passport chip of a Daily Mail's reporter in its envelope without opening it.^[12] Note that in some early biometric passports BAC wasn't used at all, allowing attacker to read the chip's content without providing a key.^[13]
• Passive Authentication (PA). In 2006 Lukas Grunwald demonstrated that it is trivial to copy passport data from a passport chip into a standard ISO/IEC 14443 smartcard using a standard contactless card interface and a simple file transfer tool.^[14] Grunwald used a passport that did not use Active Authentication (anti-cloning) and did not change the data held on the copied chip, thus keeping its cryptographic signature valid. In 2008 Jeroen van Beek demonstrated that not all passport inspection systems check the cryptographic signature of a passport chip. For his demonstration Van Beek altered chip information and signed it using his own document signing key of a non-existing country. This can only be detected by checking the country signing keys that are used to sign the document signing keys. To check country signing keys the ICAO PKD^[15] can be used. Only 5 out of 60+ countries are using this central database.^[16] Van Beek did not update the original passport chip: instead an ePassport emulator was used.^[17] Also in 2008, The Hacker's Choice implemented all attacks and published code to verify the results.^[18] The release included a video clip that demonstrated problems by using a forged Elvis Presley passport that is recognized as a valid US passport.^[19][20]
• Active Authentication (AA). In 2005 Marc Witteman showed that the secret Active Authentication key can be retrieved using power analysis.^[11] This may allow an attacker to clone passport chips that use the optional Active Authentication anti-cloning mechanism on chips – if the chip design is susceptible to this attack. In 2008 Jeroen van Beek demonstrated that optional security mechanisms can be disabled by removing their presence from the passport index file.^[21] This allows an attacker to remove – amongst others – anti-cloning mechanisms (Active Authentication). The attack is documented in supplement 7 of Doc 9303 (R1-p1_v2_sIV_0006)^[22] and can be solved by patching inspection system software. Note that supplement 7 features vulnerable examples in the same document that – when implemented – result in a vulnerable inspection process.
• Extended Access Control (EAC). In 2007 Luks Grunwald presented an attack that can make EAC-enabled passport chips unusable.^[23] Grunwald states that if an EAC-key – required for reading fingerprints and updating certificates – is stolen or compromised, an attacker can upload a false certificate with an issue date far in the future. The affected chips block read access until the future date is reached.

Opposition

Privacy proponents in many countries question and protest the lack of information about exactly what the passports' chip will contain, and whether they impact civil liberties. The main problem they point out is that data on the passports can be transferred with wireless RFID technology, which can become a major vulnerability. Although this could allow ID-check computers to obtain a person's information without a physical connection, it may also allow anyone with the necessary equipment to perform the same task. If the personal information and passport numbers on the chip are not encrypted, the information might wind up in the wrong hands.

On 15 December 2006, the BBC published an article^[24] on the British ePassport, citing the above stories and adding that:

"Nearly every country issuing this passport has a few security experts who are yelling at the top of their lungs and trying to shout out: 'This is not secure. This is not a good idea to use this technology'", citing a specialist who states "It is much too complicated. It is in places done the wrong way round – reading data first, parsing data, interpreting data, then verifying whether it is right. There are lots of technical flaws in it and there are things that have just been forgotten, so it is basically not doing what it is supposed to do. It is supposed to get a higher security level. It is not."

and adding that the Future of Identity in the Information Society (FIDIS) network's research team (a body of IT security experts funded by the European Union) has "also come out against the ePassport scheme... [stating that] European governments have forced a document on its people that dramatically decreases security and increases the risk of identity theft."^[25]

Most security measures are designed against untrusted citizens (the "provers"), but the scientific security community recently also addressed the threats from untrustworthy verifiers, such as corrupt governmental organizations, or nations using poorly implemented, unsecure electronic systems.^[26] New cryptographic solutions such as private biometrics are being proposed to mitigate threats of mass theft of identity. These are under scientific study, but not yet implemented in biometric passports.

Countries using biometric passports

Biometric Passport Map:

  Biometric passports

  Announced future issue of biometric passports

Wikimedia Commons has media related to Biometric passport.

European Union

It was planned that, except for Denmark, Ireland and the UK, EU passports would have digital imaging and fingerprint scan biometrics placed on their RFID chips.^[27] This combination of biometrics aims to create an unrivaled level of security and protection against fraudulent identification papers. Technical specifications for the new passports have been established by the European Commission.^[28] The specifications are binding for the Schengen agreement parties, i.e. the EU countries, except Ireland and the UK, and three of the four European Free Trade Association countries – Iceland, Norway and Switzerland.^[29] These countries are obliged to implement machine readable facial images in the passports by 28 August 2006, and fingerprints by 29 June 2009. The European Data Protection Supervisor has stated that the current legal framework fails to "address all the possible and relevant issues triggered by the inherent imperfections of biometric systems".^[30] Currently, the British and Irish biometric passports only use a digital image and not fingerprinting. German passports printed after 1 November 2007 contain two fingerprints, one from each hand, in addition to a digital photograph. Romanian passports will also contain two fingerprints, one from each hand. The Netherlands also takes fingerprints and is the only EU member that plans to store these fingerprints centrally.^[31] According to EU requirements, only nations that are signatories to the Schengen acquis are required to add fingerprint biometrics.^[32]

In the EU nations, passport prices will be

• Austria (available since 16 June 2006): an adult passport costs €75.90,^[33] while a chip-free child's version costs €30.^[34] As of March 2009 all newly issued adult passports contain fingerprints.^[35]
• Belgium (introduced in October 2004): €71 or €41 for children + local taxes. As of May 2014, passports for adults are valid for 7 years.
• Bulgaria (introduced in July 2009; available since 29 March 2010): 40 BGN (€20) for adults. Passports are valid for 5 years.^[36]
• Croatia (available since 1 July 2009): 390 HRK (€53). The chip contains two fingerprints and a digital photo of the holder. Since 18 January 2010 only biometric passports can be obtained at issuing offices inside Croatia. Diplomatic missions and consular offices must implement new issuing system until 28 June 2010.
• Cyprus (available since 13 December 2010): €70, valid for 10 years
• Czech Republic (available since 1 September 2006): 600 CZK for adults (valid 10 years), CZK100 for children (valid 5 years). Passports contain fingerprints.
• Denmark (available since 1 August 2006): DKK600 for adults (valid for 10 years), DKK115 for children (valid for 5 years) and DKK350 for over 65 (valid for 10 years). As of January 2012 all newly issued passports contain fingerprints.^[37]
• Estonia (available since 22 May 2007): EEK450 (€28.76) (valid for 5 years). As of 29 June 2009, all newly issued passports contain fingerprints.^[38]
• Finland (available since 21 August 2006) €53 (valid for up to 5 years). As of 29 June 2009, all newly issued passports contain fingerprints.^[39]
• France (available since April 2006): €86 or €89 (depending whether applicant provides photographs), valid for 10 years. As of 16 June 2009, all newly issued passports contain fingerprints.^[40]
• Germany (available since November 2005): ≤23-year-old applicants (valid for 6 years) €37.50, >24 years (valid 10 years) €59 Passports issued from 1 November 2007 on include fingerprints.^[41][42]
• Greece (available since 26 August 2006) €84.40 (valid for 5 years).^[43] Since June 2009, passports contain fingerprints.^[44]
• Hungary (available since 29 August 2006): HUF7,500 (€26), valid for 5 years, HUF14,000 (€48.50) valid for 10 years. As of 29 June 2009, all newly issued passports contain fingerprints.^[45][46][47]
• Ireland Biometric passport booklets have been available since 16 October 2006, and Biometric passport cards since October 2015.

32-page passport booklets are priced at €80, 66-page booklets at €110, both valid for 10 years. For children aged between 3 and 18 years the price is €26.50 and the passport booklets are valid for 5 years. Infants' passport booklets for those under 3 years cost €16 and expire 3 years after issue.

Irish biometric passport cards are only available to adults of 18 years and over who already have an Irish passport booklet and cost €35. They expire on the same date as the holder's Irish passport booklet or 5 years after issue, whichever is the shorter period.

(Ireland is not a signatory to the Schengen Acquis and has no obligation or plans to implement fingerprint biometrics)

• Italy (available since 26 October 2006): €116,^[48] valid for 10 years. As of January 2010 newly issued passports contain fingerprints.^[49]
• Latvia (available since 20 November 2007): an adult passport costs Ls15 (€21.36 [prior to 16, July 2012]), valid for 10 or 5 years.
• Lebanon (available since 1 August 2016):LP 60000 ($40) for one year and LP 300000 ($200) for the validity of five years.
• Lithuania (available since 28 August 2006): LTL150 (€43). For children up to 16 years old, valid max 5 years. For persons over 16 years old, valid for 10 years.^[50]
• Luxembourg (available since 28 August 2006): €30. Valid for 5 years. As of 29 June 2009, all newly issued passports contain fingerprints.^[51]
• Malta (available since 8 October 2008): €70 for persons over 16 years old, valid for 10 years, €35 for children between 10–16 years (valid for 5 years) and €14 for children under 10 years (valid for 2 years).
• Netherlands (available since 28 August 2006): Approximately €11 on top of regular passport (€38.33) cost €49.33. Passports issued from 21 September 2009 include fingerprints. Dutch identity cards are lookalike versions of the holder's page of the passport but don't contain fingerprints.^[52]
• Poland (available since 28 August 2006): 140PLN (€35) for adults, PLN70 for children aged under 13, free for seniors 70+ years, valid 10 years (5 years for children aged below 13). Passports issued from 29 June 2009 include fingerprints of both index fingers.^[53]
• Portugal (available since 31 July 2006 – special passport; 28 August 2006 – ordinary passport): €65 for all citizens valid for 5 years. All passports have 32 pages.^[54]
• Romania (available since 31 December 2008): 302 RON (€67),^[55] valid for 5 years for those over the age of 6, and for 3 years for those under 6. As of 19 January 2010, new passport includes both facial images and fingerprints.^[56]
• Slovakia (available since 15 January 2008): an adult passport (>13 years) costs €33.19 valid for 10 years, while a chip-free child's (5–13 years) version costs €13.27 valid for 5 years and for children under 5 years €8.29, but valid only for 2 years.
• Slovenia (available since 28 August 2006): €42.05 for adults, valid for 10 years. €35.25 for children from 3 to 18 years of age, valid for 5 years. €31.17 for children up to 3 years of age, valid for 3 years. All passports have 32 pages, a 48-page version is available at a €2.50 surcharge. As of 29 June 2009, all newly issued passports contain fingerprints.^[57]
• Spain (available since 28 August 2006) at a price of €25 (price at the 22 April 2012). They include fingerprints of both index fingers as of October 2009. (Aged 30 or less a Spanish passport is valid for 5 years, otherwise they remain valid for 10 years).
• Sweden (available since October 2005): SEK 350 (valid for 5 years). As of 1 January 2012, new passport includes both facial images and fingerprints.^[58]
• UK (introduced March 2006): £72.50 for adults (valid for 10 years) and £46^[59] for children under the age of 16 (valid for 5 years).^[60] (Not Signatory to Schengen Acquis, no obligation to fingerprint biometrics.)

Unless otherwise noted, none of the issued biometric passports mentioned above include fingerprints as of 5 May 2010.

Albania

The Albanian biometric passport has been available since May 2009, costs 6000 Lekë (€50) and is valid for 10 years. The microchip contains ten fingerprints, the bearer's photo and all the data written on the passport.

Algeria

Algerian biometric passports were introduced on 5 January 2012 with a validity of 10 years for adults.

Argentina

On 15 June 2012, the government announced the availability of a new biometric passport at a cost of 400 pesos, valid for 10 years^[61]

Armenia

In July 2012 Armenia introduced two new identity documents to replace ordinary passports of Armenian citizens. One of the documents – ID card with electronic signature and other personal data, is used locally within the country, and the biometric passport with an electronic chip is used for traveling abroad. Electronic chip of biometric passport contains digital images of fingerprints, photo and electronic signature of the passport holder. The passport will be valid for 10 years.^[62][63][64]

Australia

The Australian biometric passport was introduced in October 2005. The microchip contains the same personal information that is on the colour photo page of the ePassport, including a digitized photograph. A standard (35-Visa Pages) adult passport (>18 years) is A$250 valid for 10 years; for children, the fee is AUD125 valid for 5 years. A Frequent traveler (67-Visa Pages) adult passport (>18 years) is AUD376 valid for 10 years; for children, the fee is AUD188 valid for 5 years.^[65] SmartGates have been installed in Australian airports to allow Australian ePassport holders and ePassport holders of several other countries to clear immigration controls more rapidly, and facial recognition technology has been installed at immigration gates.^[66]

Azerbaijan

Azerbaijan introduced biometric passports in September 2013 and costing AZN40 (~USD25). The passports will include information about the passport holder's facial features, as well as his finger and palm prints. Each passport will also include a personal identification number. The program covers the development of the appropriate legislative framework and information systems to ensure information security.

Bangladesh

Bangladesh introduced biometric passports in April 2010 and costs BDT3450. All traditional non-MR passports must be withdrawn from circulation by November 2015.

Bosnia and Herzegovina

Available since 15 October 2009 and costing 40 KM (€20.51). Valid 10 years for adults and 5 years for younger than 18. Produced by Bundesdruckerei. On 1 June 2010 Bosnia and Herzegovina issued its first EAC passport.

Brazil

Brazil started issuing ICAO compliant passports in December 2006. However just in December 2010 it began to issue passports with microchips, first in the capital Brasília and Goiás state. Since the end of January 2011 this last is available to be issued all over Brazil. It is valid for 5 years for adults and costs R$156.07 (approximately €80).^[67] In December 2014, the Federal Police Department extended the validity of the document, from five to ten years.^[68]

Brunei

The Bruneian biometric passport was introduced on 17 February 2007. It was produced by German printer Giesecke & Devrient (G&D) following the Visa Waiver Program's requirements. The Bruneian ePassport has the same functions as the other biometric passports.^[69]

Cambodia

Cambodia began to issue biometric passports to its citizens on 17 July 2014. The cost for a 5-year passport, issued only to children aged five and under, is 80 USD; while the 10-year passport, issued to all people older than five, costs 100 USD.^[70]

Canada

Only the ePassport (Canadian Biometric Passport) is available to Canadians since 1 July 2013. Available for 5 years at a cost of CAD120 or 10 years at CAD160.^[71]

Cape Verde

Cape Verde started to issue biometric passports on 26 January 2016. The cost of a biometric passport is 50 euros with a processing time of 30 days. It is noted that the scheme will gradually expand to Cape Verdean diplomatic missions in Boston and Lisbon in the future.^[72]

Chile

Chile introduced new biometric passports and national ID cards on 2 September 2013. The newly designed passport booklet has a validity of 5 years.^[73]

People's Republic of China

On 30 January 2011, the Ministry of Foreign Affairs of the People's Republic of China launched a trial issuance of e-passports for public affairs. The face, fingerprint and other biometric features of the passport holder will be digitalized and stored in pre-installed contactless smart chip in the passport.^[74][75] On 1 July 2011, the Ministry began issuing biometric passports to all individuals conducting public affairs work overseas on behalf of the Chinese government.^[76]

Ordinary biometric passports have been introduced by the Ministry of Public Security starting from 15 May 2012.^[77] The cost of a passport is 200 CNY (approximately US$31) for first-time applicants in China and 220 CNY (or US$35) for renewals and passports issued abroad.

Colombia

The Colombian foreign ministry announced that, starting 1 September 2015, new biometric passports will be issued. The only visible change will be that ordinary Colombian passports will now carry the standard biometric symbol at the bottom of the front cover of the booklet.^[78] the cost of the passport is 160.000 pesos

Dominican Republic

In the Dominican Republic, biometric passports began to be issued in May 2004. However the Dominican biometric passports do not carry the "chip inside" symbol . In January 2010, the cost of the passport was 1,250 DOP, about 35–40 USD at that date.

Egypt

The Egyptian Government has, from 5 February 2007, introduced the electronic Passport (e-Passport) and electronic Document of Identity for Visa Purposes (e-Doc/I) which are compliant with the standard of the International Civil Aviation Organization (ICAO). Digital data including holder's personal data and facial image will be contained in the contactless chip embedded in the back cover of e-Passport and e-Doc/I.

Gabon

Available since 23 January 2014. The Gabonese biometric passports carry the "chip inside" symbol ().^[79]

Ghana

Available since 1 March 2010 and costing GH¢ 50.00–100.00 for adults and children. The passports contain several other technological characteristics other than biometric technology. However the Ghanaian biometric passports do not carry the "chip inside" symbol (), similar to the Pakistani passport, which is mandatory for ICAO-standard electronic passports.

Hong Kong

In 2006, the Immigration Department announced that Unihub Limited (a PCCW subsidiary company heading a consortium of suppliers, including Keycorp) had won the tender to provide the technology to produce biometric passports. In February 2007, the first biometric passport was introduced. The cover of the new biometric passport remains essentially the same as that of previous versions, with the addition of the "electronic passport" logo at the bottom. However, the design of the inner pages has changed substantially. The design conforms with the document design recommendations of the International Civil Aviation Organization. The new ePassport featured in the 2008 Stockholm Challenge Event and was a finalist for the Stockholm Challenge Award in the Public Administration categeory. The Hong Kong SAR ePassport design was praised on account of the "multiple state-of-the-art technologies [which] are seamlessly integrated in the sophisticated Electronic Passport System (e-Passport System)".^[80] The cost for a HKSAR passport is HK$370 (or US$48) for a 32-page passport and HK$460 (or US$59) for a 48-page passport.^[81]

Iceland

Available since 23 May 2006 and costing ISK5100 (ISK1900 for under 18 and over 67).

India

India has recently initiated first phase deployment of Biometric e-Passport for Diplomatic passport holders in India and abroad. The new passports have been designed indigenously by the Central Passport Organization, the India Security Press, Nashik and IIT Kanpur. The passport contains a security chip with personal data and digital images. Initially, the new passports will have a 64KB chip with a photograph of passport holder and subsequently include the holder's fingerprint(s). The biometric passport has been tested with passport readers abroad and is noted to have a 4-second response time – less than that of a US Passport (10 seconds). The passport need not be carried in a metal jacket for security reasons as it first needs to be passed through a reader, after which generates access keys to unlock the chip data for reader access.^[82]

India has also given out a contract to Tata Consultancy Services for issuing e-passports through passport seva kendra. India plans to open 77 such centers across the country to issue these passports.

On 25 June 2008 Indian Passport Authority issued first e-passport to the then President of India, Pratibha Patil. The e-passport is under the first phase of deployment and will be initially restricted to diplomatic passport holders. It is expected to be made available to ordinary citizens from 2013 onwards.^[83] The necessary procurements have been initiated by India Security Press, Nasik, installed special machine churning 8 million biometric passports per year in 2010 and the actual transition to the new age passport is expected to begin in the year 2016.^[84]

Indonesia

Indonesia started issuing e-Passports on 26 January 2011. The passport costs Rp655,000 (US$66) for the 48-page valid for 5 years, and Rp405,000 (USD41) for the 24-page passport valid for 5 years.^[85]

Iran

Iran started issuing biometric diplomatic and service passports in July 2007. Ordinary biometric passports began to be issued on 20 February 2011. The cost of a new passport was approximately US$37 (IRR1,125,000) .^[86]

Iraq

Starting February 1, 2010 the Iraqi Ministry of Interior revealed new electronic system to issue the new A series biometric passports in contract with the German SAFE ID Solutions, the new series is a machine-readable biometric passport available to the public which cost 25,000 dinars or about USD20.^[87]

Ireland

On October 16, 2006, the Minister of Foreign Affairs presented the first biometric passports.

Israel

Since July 2013, the Israeli Ministry of the Interior has been issuing biometric passports for those citizens who wish to receive them. For a 2-year pilot period under the Biometric Database Law, this was optional. As of August 2013, any passport expiring in more than 2 years can be replaced with a biometric one upon request, free of charge. Passports expiring within 2 years will be charged the full fee. The program review that was supposed to be concluded in 2015 was postponed by order of the Minister of the Interior to a later date, due to the controversy regarding the creation of the Biometric Database rather than storing the biometric data only within the passport's chip, as is the practice in many other countries. Since 2015, the pilot period has been extended until 2017.

Japan

The Japanese government started issuing biometric passports in March 2006. With this, Japan has met requirements under the US Visa Waiver Program which calls for countries to roll out their biometric passports before 26 October 2006.

Kazakhstan

Kazakhstan introduced biometric passport in 2009.

Kosovo

In May 2011, the Ministry of Interior of the Republic of Kosovo announced that biometric passports would be issued in the summer of 2011 after the winning firm is chosen and awarded the production of the passports.^[88] The first biometric passports were issued in October 2011.

Laos

In September 2016, the Ministry of Foreign Affair of Laos has announced that the biometric passports will roll out after 30 June 2016

Lebanon

The Lebanese Directorate General of General Security started issuing biometric passports as of 1 August 2016.

All new Lebanese passports issued are biometric passports and machine-readable contain a contactless smart RFID chip embedded inside the bottom of the front cover under the word "PASSEPORT"

Macau

Applications for electronic passports and electronic travel permits have been started and processed since 1 September 2009.

Macedonia

Available since 2 April 2007 and costs 1500 MKD or c. €22.

Madagascar

The passport is available since 2014 and costs 110,000 Ariary. Since September 2014, it is mandatory for Malagasy citizens to depart the country with a biometric passport.^[89]

Malaysia

Malaysia was the first country in the world to issue biometric passports in 1998, after a local company, IRIS Corporation, developed the technology. Malaysia is however not a member of the Visa Waiver Program (VWP) and its first biometric passport did not conform to the same standards as the VWP biometric document because the Malaysian biometric passport was issued several years ahead of the VWP requirement. The difference lies in the storage of fingerprint template instead of fingerprint image in the chip, the rest of the technologies are the same. Also the biometric passport was designed to be read only if the receiving country has the authorization from the Malaysian Immigration Department. Malaysia started issuing ICAO compliant passports from February 2010.

Malaysia used to issue passports with validity for 2 years and 5 years, but the passport with 2 years validity was withdrawn since Jan, 2015.

The pricing for a Malaysian passport are RM 200 with 5 years validity, RM100 for senior citizens, children below 12, Haj pilgrims, and students below 21 and studying abroad is RM100 and is free for disabled citizens.

Maldives

Maldives started rolling out its new ePassport to its citizens on 26 July 2006. The new passport follows a completely new design, and features the passport holder’s facial and fingerprint information as biometric identifiers. A 32-page Ordinary passport will cost Rf350, while a 64-page Ordinary passport will cost Rf600. Children under the age of 10 years and people applying for passports through diplomatic missions abroad will be issued with a 32-page non-electronic Ordinary passport, which will cost Rf250.

Sovereign Military Order of Malta

Since 2005 the SMOM diplomatic and service passports include biometric features and are compliant with ICAO standards.

Moldova

The Moldovan biometric passport is available from 1 January 2008. The new Moldovan biometric passport costs approximately 760 MDL (€45)^[90] and is obligatory from 1 January 2011. The passport of the Republic of Moldova with biometric data contains a chip which holds digital information, including the holder's signature, as well as the traditional information. It is valid for 7 years (for persons over 7) and 4 years (for persons less than 7) respectively. It was introduced as a request of European Union to safeguard the borders between the E.U. and Republic of Moldova.

Montenegro

The Montenegrin biometric passport was introduced in 2008. It costs approximately €40.

Mongolia

The Mongolian ministry of interior stated that first biometric passport will be issue at the end of 2016.

Mauritania

The issuance of the biometric passports was launched 6 May 2011.^[91]

It costs 115.68 US Dollar for issuance and is valid for five years only.

Morocco

The Moroccan biometric passport was introduced in 2008. In December 2009, early limited trials have been extended, and the biometric passport is available from 25 September 2009 to all Moroccan citizens holders of an electronic identity card.^[92] It costs 300DH (approximately €27).

Mozambique

Mozambique started to issue biometric passports in September 2014. The issuance of such passports was suspended 40 days later but was resumed in February 2015.^[93]

New Zealand

Introduced in November 2005, like Australia and the USA, New Zealand is using the facial biometric identifier. There are two identifying factors: the small symbol on the front cover indicating that an electronic chip has been embedded in the passport, and the polycarbonate leaf in the front (version 2009) of the book inside which the chip is located. The cost is NZ$140 (when applying in person) or NZ$124.50 (when applying online—available only if already holding a passport) for adults, NZ$81.70 for children, valid for five years. However, in 2015 the New Zealand government approved for the reinstatement of a 10-year validity period for passports, which will come into effect on 30 November 2015.

Nigeria

Nigeria is currently one of the few nations in Africa that issues biometric passports, and has done it since 2007.The harmonized ECOWAS Smart electronic passport issued by the Nigerian Immigrations Service is powered by biometric technology in tandem with the International Civil Aviation Organization (ICAO) specifications for international travels.

Travellers' data captured in the biometric passport can be accessed instantly and read by any security agent from any spot of the globe through an integrated network of systems configured and linked to a centrally-coordinated passport data bank managed by the Nigerian Immigrations Service.

Norway

The introduction of biometric passports to Norway began in 2005 and supplied by Setec, costing NOK 450 for adults, or c. €50, NOK 270 for children.

In 2007 the Norwegian government launched a ‘multi-modal’ biometric enrolment system supplied by Motorola. Motorola's new system enabled multiple public agencies to digitally capture and store fingerprints, 2D facial images and signatures for passports and visas.^[94]

The Norwegian biometrics company IDEX ASA has begun development of electronic ID cards (eID) with fingerprint security technology for use throughout the EU.^[95]

Pakistan

In 2004, Pakistan became among one of the first countries in the world to issue the biometric passports, which are according to the publisher compliant with ICAO standards and dubbed Multi-biometric e-Passports, however they do not carry the "chip inside" symbol (), which is mandatory for ICAO-standard electronic passports.

As of 2012, Pakistan has adopted the Multi-biometric e-Passport that is now compliant with ICAO standards. ^[96]

In May 2016, Pakistan interior minister launched the project officially and promised that ePassports would be available fully in 2017 for citizens.^[97]

Panama

Panama has issued biometric passports since 2014. The cost of the passport went up from $50 to $100, and the inside contains images of recent government projects.

Peru

On 21 February 2016, the Superintendencia Nacional de Migraciones announced that the first Peruvian biometric passports would be delivered by 26 February 2016.^[98][99] The first passport was issued for Peruvian opera singer Juan Diego Flórez. It will feature a new cover, along with several security improvements, in order to be exempted for visas for the Schengen Area.^[100] It will cost PEN98.50, approximately USD28, making it the cheapest passport in Latin America.^[101]

Philippines

On 11 August 2009, the first biometric passport was issued to then President Gloria Macapagal-Arroyo. The new e-passport has various security features, including a hidden encoded image; an ultra-thin, holographic laminate; and a tamper-proof electronic microchip and is priced at around ₱950.^[102][103]

Qatar

On 20 April 2008, Qatar started issuing biometric passports which are ICAO compliant. A Qatari passport costs QR200.^[104]

Russia

Russian biometric passports were introduced in 2006. As of 2015, they cost 3500 rubles (approximately USD50) and use printed data, photo and fingerprints and are BAC-encrypted.^[105] Biometric passports issued after 1 March 2010 are valid for 10 years. Russian biometric passports are currently issued within Russia and in all of its consulates.

From 1 January 2015, the Government of Russia has issued passports which contain fingerprints.

Saudi Arabia

On 21 June 2006, Saudi Arabia started issuing biometric passports which are ICAO compliant. A Saudi Arabian passport costs SR150.

Serbia

Available since 7 July 2008, and cost 3.600 RSD or approximately €32.^[106] (Aged 3 or less a Serbian passport is valid for 3 years, aged 3 to 14 it is valid for 5 years, otherwise passport remain valid for 10 years.)

Singapore

The Immigration and Checkpoints Authority (ICA)^[107] of Singapore introduced the Singapore biometric passport (BioPass) on 15 August 2006. With this, Singapore has met requirements under the US Visa Waiver Program which calls for countries to roll out their biometric passports before 26 October 2006.^[108]

The pricing for a Singaporean passport are, 70 SGD if applied via online, mail or ICA deposit box and 80 SGD if applied via Singapore Overseas Mission and Singaporean passports are valid for 5 years.

Somalia

The new "e-passport" of Somalia was introduced and approved by the nation's Transitional Federal Government on 10 October 2006. It costs $100 USD to apply for Somalis living inside of Somalia, and $150 USD for Somalis living abroad. Somalia is now the first country on the African continent to have introduced the "e-passport".^[109]

South Korea

The Ministry of Foreign Affairs and Trade of South Korea started issuing biometric passports to its citizens on 25 August 2008. The cost is fixed to 55,000 Won or 55 US Dollars, and the validity of ordinary passport is 10 years.^[110]

South Sudan

The Republic of South Sudan started issuing internationally recognized electronic passports in January 2012.^[111] The passports were officially launched by the President Salva Kiir Mayardit on 3 January 2012 in a ceremony in Juba.^[112] The new passport will be valid for five years.^[113]

Slovakia

Biometric passports were first issued in Slovakia in 2008. The latest version was issued in 2014 and contains a contactless chip in the biodata card that meets ICAO specifications.^[114]

Sri Lanka

From the 10 August 2015, the Department of Immigration and Emigration Sri Lanka has begun issuing ICAO compliant biometric passports to the public. As at October 2016, all new passports require both thumbs to be scanned and a digital facial mapping photograph be taken during the issuing process.^[115]

Sudan

The Republic of the Sudan started issuing electronic passports to citizens in May 2009. The new electronic passport will be issued in three categories. The citizen's passport (ordinary passport) will be issued to ordinary citizens and will contain 48 pages. Business men/women who need to travel often will have a commercial passport that will contain 64 pages. Smaller passports that contain 32 pages only will be issued to children. The microprocessor chip will contain the holder's information. Cost to obtain a new passport will be SDG250 (approximately USD100), SDG200 for students and SDG100 for kids. The validity of the citizen's passport will be five years, or seven years for the commercial passport.^[116]

Switzerland

The Swiss biometric passport has been available since 4 September 2006. By a narrow majority of 50.14%, Swiss voters decided in May 2009 to accept the introduction of a biometric passport.^[117] Since 1 March 2010, all issued passports are biometric, containing a photograph and two fingerprints recorded electronically.^[118] The costs are CHF 140.00 for adults and CHF 60.00 for children (−18 years old).^[119]

Taiwan

The Taiwanese biometric passport has been available since 29 December 2008. It costs NT$1,600 for an ordinary passport with either 3, 5 or 10 years validity.^[120] Taiwanese Central Engraving and Printing Plant prints passports for the Ministry of Foreign Affairs of Taiwan for several decades. During this period, the passport has been redesigned various times. The current e-passport (or known as biometric passport) is fitted with RFID technology that facilitates Taiwanese passport immigration clearances worldwide.

Tajikistan

Biometric passports will be issued in Tajikistan from 1 February 2010. On 27 August 2009, Tajik Ministry of Foreign Affairs and German Muhlbauer signed a contract on purchase of blank biometric passports and appropriate equipment for Tajikistan.^[121]

Thailand

The Ministry of Foreign Affairs of Thailand^[122] introduced the first biometric passport for Diplomats and Government officials on 26 May 2005. From 1 June 2005, a limited quantity of 100 passports a day was issued for Thai citizens, however, on 1 August 2005 a full operational service was installed and Thailand became the first country in Asia to issue an ICAO compliant biometric passport.^[123]

Togo

In August 2009, Togo became one of the first African countries to introduce biometric passports. The price of the passport was then set at 30,000 CFA Francs for Togolese residing in Togo. For Togolese residing abroad, the price varies.

Tunisia

The Tunisia ministry of interior stated that it will start issuing biometric passports at the end of year 2016.

Turkey

Turkish passports which are compatible with European Union standards have been available since 1 June 2010.^[124] Colours of the new biometric passports have also been changed. Accordingly, regular passports; claret red, special passports; bottle green and diplomatic passports wrap black colours.^[125]

Most recently Turkish Minister of the State announced that the government is printing the new passports at government minting office since the private contractor failed to deliver.

The current cost of issuing a 10-year passport in Turkey is TRY620.60 (approximately US$215).^[126][127]

Turkmenistan

Turkmenistan became the first country in ex-USSR, in mid-Asia region to issue an ICAO-compliant biometric passport. The passport is available since 10 July 2008.^[128]

Ukraine

According to law, Ukraine was supposed to issue biometric passports and identity cards on 1 January 2013.^[129] However, they did not become available until two years later in January 2015 and are fully compatible with European Union standards.

United Arab Emirates

The UAE ministry of interior stated that it would start issuing Emirati biometric passports at the end of 2010.^[130]

United States

The biometric version of the U.S. passport (sometimes referred to as an electronic passport) has descriptive data and a digitized passport photo on its contactless chips, and does not have fingerprint information placed onto the contactless chip. However, the chip is large enough (64 kilobytes) for inclusion of biometric identifiers. The U.S. Department of State first issued these passports in 2006, and since August 2007 issues biometric passports only. Non-biometric passports are valid until their expiration dates.^[131]

Although a system able to perform a facial-recognition match between the bearer and his or her image stored on the contactless chip is desired, it is unclear when such a system will be deployed by the U.S. Department of Homeland Security at its ports of entry.^[132]

A high level of security became a priority for the United States after the attacks of 11 September 2001. High security required cracking down on counterfeit passports. In October 2004, the production stages of this high-tech passport commenced as the U.S. Government Printing Office (GPO) issued awards to the top bidders of the program. The awards totaled to roughly $1,000,000 for startup, development, and testing. The driving force of the initiative is the U.S. Enhanced Border Security and Visa Entry Reform Act of 2002 (also known as the "Border Security Act"), which states that such smartcard identity cards will be able to replace visas. As for foreigners travelling to the U.S., if they wish to enter U.S. visa-free under the Visa Waiver Program (VWP), they are now required to possess machine-readable passports that comply with international standards. Additionally, for travellers holding a valid passport issued on or after 26 October 2006, such a passport must be a biometric passport if used to enter the U.S. visa-free under the VWP.

Uruguay

The Uruguayan Ministry of the Interior started to issue biometric passports to Uruguayan citizens on 16 October 2015. The new passport complies with the standards set forth by the Visa Waiver Program of the United States.^[133]

Uzbekistan

In Uzbekistan, 23 June 2009 Islam Karimov issued a Presidential Decree^[134] "On measures to further improve the passport system in the Republic of Uzbekistan." On 29 December 2009 the President of Uzbekistan signed a decree to change the dates for a phased exchange of populations existing passport to the biometric passport. In accordance with this decree, biometric passports will be phased in, beginning with 1 January 2011. In the first phase, the biometric passport will be issued to employees of ministries, departments and agencies of the republic, individuals who travel abroad or outside the country, as well as citizens who receive a passport in connection with the achievement of a certain age or for other grounds provided by law. The second phase will be for the rest of the population who will be able to get new passports for the period from 2012 to 2015.

Venezuela

Issued after July 2007, Venezuela was the first Latin American country issuing passports including RFID chips along other major security improvements. The chip has photo and fingerprints data.^[135]

See also

• International Civil Aviation Organization Public Key Directory

References

External links

Wikimedia Commons has media related to Biometric passport.

ICAO passport standards and related materials:

• ICAO Doc 9303 Series. Machine Readable Travel Documents. Seventh Edition, 2015.
• International Civil Aviation Organization
• ICAO Document 9303, Part 2
• Supplement to ICAO Doc 9303 - Release_7
• LDS 1.7 PKI Maintenance

Open source and free tools:

• 'JMRTD' is an Open Source Java Implementation of Machine Readable Travel Documents
• 'RFIDIOt' is an open source python library for exploring RFID devices. The script mrpkey.py can read passport chips
• 'ePassport Viewer' is a GPL-friendly tool to read and checks ePassports
• 'epassport_emulator' is a freeware ePassport emulator for JavaCard and the Nokia Secure element