Cybertrust inks Australian biometric passport deal

IT security and risk-management firm Cybertrust has won a federal government contract to supply the biometric technology being used in the new Australian e-passports.

According to Cybertrust, Australia will be one of the first countries to comply with the International Civil Aviation Organisation's standards, which require biometric data to be stored on travel documents.

Next October, the US will be the first country to demand that travellers from countries participating in its visa-waiver program carry a biometric passport. Other countries are expected to follow suit over the coming years.

Peter Tippett, chief technologist at Cybertrust, said that biometric identifiers in passports will make travelling easier and faster; but he admitted that the system is not perfect.

"This will add a layer of safety. Is it perfect? No. We will reduce the risk by 50, 60 or even 70 percent. The bag guys are not going to be able to spoof these. They can spoof the paper ones but they are not going to be able to spoof the digital signature on a chip," said Tippett.

Cybertrust said the new Australian passport will contain the passenger's biographical information along with a digital photograph. Both these items are digitally signed - using the government's unique key -- and stored on a chip inside the passport. This means, according to Cybertrust, that if the information stored on the passport is altered the tampering will be obvious.

Passengers using the new passports will have their document scanned by an immigration official and the data collected will be compared to the ICAO's secure database. If this information matches, the passenger will also have to undergo a visual comparison by immigration officials while being scanned using facial recognition technology.

Paul O'Rourke, chief executive of Cybertrust Asia Pacific, said the e-passport project is one of the biggest implementations of biometric technology.

"This promises to be one of the largest scale biometric projects ever undertaken," said O'Rourke.

Advertisement

Talkback 2 comments

    "The bad guys will not be able to spoof these." Sure, they might not be able to create fakes. That doesn't matter much, even if it is true, if they can just bribe an official to give them a valid, but incorrect, passport. FacAnonymous -- 02/12/04

    "The bad guys will not be able to spoof these."

    Sure, they might not be able to create fakes. That doesn't matter much, even if it is true, if they can just bribe an official to give them a valid, but incorrect, passport.

    Face recognition and other biometrics are far from perfect - match failues at airports will be expected, and the chances are any real-time biometric checks will end up being treated as unreliable and ignored.

    In the end, it doesn't hurt attackers much - but it sure harms innocent travellers' privacy (what little we have left.)

    Check out Bruce Schneider's writings on this topic - they're well worth reading. http://www.schneier.com/crypto-gram.html

    DOES THIS MEAN THAT THE TENDER FOR THE AUSTRALIAN BIOMETRIC P****PORT HAS BEEN WON BY CUBERTRUST.Anonymous -- 12/04/05

    DOES THIS MEAN THAT THE TENDER FOR THE AUSTRALIAN BIOMETRIC P****PORT HAS BEEN WON BY CUBERTRUST.

Add your opinion


Latest Videos

Blogs

  • Chris Duckett PayPal launches Aussie developer program
    PayPal announced the opening of its certification program for Australian developers today, making Australia the first country outside of the US to offer certification.
  • Array Cash cow in a BigTinCan?
    Around one third of Australia's telcos have shut their doors over time, but that isn't stopping new ventures hoping to chip away at carriers' mobile call bonanza. By fighting carriers at the smartphone rather than the home phone, could the latest two contenders be onto something big?
  • Array A third of the way to a zettabyte
    This week on Twisted Wire we look at how internet usage is changing in Australia and around the world. How are we meeting this demand and how is the cost structure changing for the service provider?
  • More blogs »

Tags

Back to top

Featured