Electronic proof of identity
In an increasingly digitalised world, the security of personal data is of paramount importance. The Identity Card Act and the Passport Act for passports play a central role in protecting our identity and data. The capture of photographs and fingerprints is subject to specific regulations.
The Identity Card Act (PAuswG) regulates the issuing, use and administration of identity cards in Germany. It was passed on 18 June 2009 and forms the legal basis for the identification of persons in Germany. The ID card serves as an official document for establishing identity and is mandatory for German citizens from the age of 16.
IT security is a decisive factor in the implementation of the ID card law. Without robust security measures, the data on the ID card is vulnerable to cyber attacks and misuse. TÜVIT offers solutions that meet the highest standards of cyber security and thus guarantee identity protection. The Federal Ministry of Justice and Consumer Protection provides further details on the PAuswG.
The ID Card Act has an impact on a wide range of stakeholders, all of whom contribute to ensuring the security and protection of personal identity in Germany:
When it comes to the security and interoperability of electronic passports and ID cards, the IT security experts at TÜVIT are in demand. TÜVIT is recognised as a test centre for technical guidelines (TR) by the German Federal Office for Information Security (BSI).
To the competence profile
Biometric data is captured and processed in official applications such as passports and ID cards. Harmonised standards for quality, software architecture and interfaces are necessary. BSI TR-03121 provides specifications, conformity with which can be verified by BSI certification.
BSI TR-03170 regulates the digital transmission of biometric photos from service providers to authorities for ID cards. It defines certification requirements for these services so that authorities can retrieve photos from certified providers.
The BSI TR-03132 technical guideline covers various communication models. The focus is on the communication process between an authority and the respective document producers. The technical guideline defines the requirements for this.
The Passport Act (PassG) regulates the issuing and use of passports. It stipulates who can apply for a passport, what information it must contain and how passports are secured. The law contains provisions on application procedures, fees and the period of validity of passports.
An important aspect of the Passport Act is IT security, particularly in relation to biometric data and electronic components contained in modern passports. These passports, often referred to as "ePassports", contain a chip that stores biometric data such as fingerprints and a digital photo. IT security plays a crucial role in ensuring the integrity and confidentiality of this sensitive data.
Security measures include encryption technologies to prevent unauthorised access to the data, as well as mechanisms to authenticate and verify the authenticity of the passport. These measures are crucial to prevent identity theft and counterfeiting and to ensure the international recognition and acceptance of passports.
The Passport Act affects all German citizens who need a passport to travel internationally. It regulates the issuing, renewal and use of passports and ensures that citizens have a valid and recognised proof of identity when travelling abroad. The law specifies which documents and information are required for the application and which security features the passport must contain. It also affects authorities responsible for issuing and managing passports and ensures that the processes are efficient and secure.