The Trust Framework for ePassport Extended Access Control

Provided by Entrust

Category Authentication

Type White Paper

Length 19

Publish Date August 27 2014

Date posted January 20 2015


Unlike some other common credential types, biometric data sets cannot be withdrawn once compromised. So, they should only be revealed to ePassport systems that can be trusted to handle them properly. Biometric data sets are possibly most vulnerable when the passport falls into criminal hands.

The problem is: how can the passport tell whether the passport inspection system that is interrogating it is trustworthy? This is the function of the Extended Access Control (EAC) features of electronic passports.

Issuing states that want to protect their citizens against abuse of their personal information in foreign countries will place restrictions on the release of biometric data sets on a country-by-country and application-by-application basis. So, privilege management must be an integral part of the ePassport trust infrastructure.

Public key infrastructure (PKI) is the technology that has been chosen to establish, maintain and demonstrate the trustworthiness of the systems for releasing and verifying the passport holder’s biographical and biometric data sets. This is a well-established technology that has been successfully applied to Internet-scale applications, such as secure online transactions.

Recommended for You


Why does China spot security vulnerabilities quicker than the US?

Phil Muncaster reports on China and beyond


Everything you need to know about... Blockchain

IDG Connect tackles the tech stories that matter to you


What will be the single biggest security threat of 2018?

Kathryn Cave looks at the big trends in global tech

Most Recent Comments

Our Case Studies

IDG Connect delivers full creative solutions to meet all your demand generatlon needs. These cover the full scope of options, from customized content and lead delivery through to fully integrated campaigns.


Our Marketing Research

Our in-house analyst and editorial team create a range of insights for the global marketing community. These look at IT buying preferences, the latest soclal media trends and other zeitgeist topics.



If it were legal, would your organization hack back?