As presented at ICT Delta, 18 March 2010, in Rotterdam (NL)

1. UsingePassportsfor online authentication Maarten Wegdam Joint work with: Martijn Oostdijk & Dirk-Jan van Dijk

2. The goalSecure online authentication ICT Delta 2010 2

3. 3 Chip Verified attributes Machine Readable Zone Logo Antenna The opportunityePassport chip ICT Delta 2010

4. Example ICT Delta 2010 4

5. The problemNotdesignedfor online authentication ICT Delta 2010 5

6. OursolutionUser-centricIdentity Provider ICT Delta 2010 6

7. How does thiswork? (simplified) ICT Delta 2010 7 Identity Provider Client Relying Party 3. uses service 1. authenticates 2. pseudonym & attributes

8. How does thiswork? (simplified) ICT Delta 2010 8 Identity Provider Client Relying Party uses service Facilitates this process by 1 Partial release of attributes (& pseudonym) 2 Asks client for consent 3 Additional password authentication

9. Prototype ICT Delta 2010 9

11. http://www.nlnet.nl/project/epassports/ and http://jmrtd.org

14. Passive Authentication

15. Active Authentication

16. Extended Access Control

18. Eavesdropping (privacy)

19. Altering (authenticity, integrity)

20. Cloning (authenticity)

21. Disclosure of biometrics (confidentiality)

22. Look-a-like fraud12

23. What’s inside? Chip MRZ Logo Antenna 13 ICT Delta 2010

25. The minimum information needed for the purpose at hand should be released, and only to those who need it. Details should be retained no longer than necesary.

26. It should NOT be possible to automatically link up everything we do in all aspects of how we use the Internet. A single identifier that stitches everything up would have many unintended consequences.

27. We need choice in terms of who provides our identity information in different contexts.

28. The system must be built so we can understand how it works, make rational decisions and protect ourselves.

29. Devices through which we employ identity should offer people the same kinds of identity controls - just as car makers offer similar controls so we can all drive safely.http://www.identityblog.com/ ICT Delta 2010