How does ABC Work? WhitePaper 2 1Introduction _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4 2 The Automated Border Control concept_ _ 2.1 The E-gate_ _ _ _ _ _ _ _ _ _ _ _ _ _ 2.2 Integrated two step_ _ _ _ _ _ _ _ _ 2.3 Basic components_ _ _ _ _ _ _ _ _ _ 2.4Process _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 2.5 Monitoring work place_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 6 _ 6 _ _ 6 _ 7 _ 8 _ 8 3 Using an eGate from the traveller’s perspective _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 9 3.1 Stress free travel _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 9 3.2 Good case_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 11 3.3 Bad case _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 14 4 Using an eGate from the border control officer’s perspective_ _ _ _ _ _ _ _ _ 4.1 Description of monitoring work place _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.2 Easy travel _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3 Security evasion _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.1 Falsified ID document _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.2 Watch / black list hit_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.3 Biometric mismatch_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.4 Multiple use of travel documents _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.5 More than one traveller in the eGate _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.3.6 Manuel opening of the eGate exit door _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.4 Potential process layout_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 4.4.1 Two border control officers in the control box behind the eGates_ 4.4.2 One border control officer in a central control room_ _ _ _ _ _ _ _ _ 4.4.3 One mobile border control officer with a tablet_ _ _ _ _ _ _ _ _ _ _ 14 14 15 16 17 17 18 18 19 19 20 20 20 20 3 5References_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 5.1EasyGO _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 5.2EasyPASS_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 5.2.1 EasyPASS installations_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 21 21 21 21 6 Brief description of the companies involved_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 24 6.1secunet _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 24 6.2Bundesdruckerei _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 24 7 Outlook and extensions _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 7.1 Pre-check kiosk I _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 7.2 Pre-check kiosk II_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 7.3 Additional biometrics _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 7.4 Additional user groups_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 7.4.1 Registered traveller _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 25 25 25 26 27 28 8 Conclusion and USPs_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.1 Advantages for the border police _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.2 Advantages for the traveller_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.3 Advantages for the airport_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.4 Advantages for the airline _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.5 Important features _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.5.1Security _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.5.2 Ease of use_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.5.3Speed _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 8.5.4Control_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 28 28 29 29 29 30 30 30 30 30 9Contact _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 31 4 1.Introduction We live in an increasingly interconnected world where citizens travel frequently for business and pleasure. But whether it’s a flight to clinch a major deal, a trip to a coastal resort for a family holiday or a jaunt to a low-cost destination for a stag weekend, the basic requirements of most travellers are remarkably similar: security, speed and convenience at border control. Delivering these basics is a complex task for border authorities, airports and airlines, which must somehow navigate the challenges of ever-increasing passenger numbers, financial and staffing constraints, the need to ensure a high security, coping with changes in demand, and increased competition. It’s a task that is getting tougher as increasing numbers of citizens take to the skies more often. According to the International Civil Aviation Organization (ICAO), some 3.1 billion passengers made use of the global air transport network for business and tourism in 2013, an increase of about 5% on 2012. The number of aircraft departures reached a record of 33 million globally during 2013, surpassing the previous year’s figure by more than one million. The ICAO is bullish about future growth, predicting that passenger numbers could reach more than 6.4 billion by 2030. Region of airline registration Annual growth rates History Forecast 2011 (%) 2012 (%) 2013 (%) 2014 (%) 2015 (%) Europe 9.5 3.9 4.4 5.5 6.2 Arica 0.9 4.2 5.2 5.7 6.0 Middle East 9.2 13.7 10.2 11.2 10.8 Asia/Pacific 6.8 6.4 5.5 6.4 6.8 North America 2.4 1.3 2.3 3.3 3.8 Latin America/ Carib bean 11.1 8.6 7.6 8.7 8.0 World 6.5 4.9 4.8 5.9 6.3 Medium-term Passenger Traffic Forecasts Global and Regional Scheduled Passenger Traffic (Source: ICAO), Passengerkilometres performed (PKP) 5 Figures from the International Air Transport Association (IATA) also point to an upward trend. Its passenger traffic numbers for May 2014 show that demand has increased by 6.2% since May 2013. It says: “The performance is indicative of improving demand drivers. May capacity rose 5.2% and load factor climbed 0.7 percentage points to 79.0%. All regions except Africa experienced positive traffic growth.” In addition to rising passenger numbers, the number of eTravel documents such as eID cards and ePassports in circulation has increased significantly. According to the ICAO, there are now more than 100 issuing authorities supplying ePassports with the Biometrics Research Group, forecasting that the global ePassport market will be worth US$10.2 billion by 2015. These documents are an important line of defence in ensuring border security. Introduced following the 9/11 terrorist attacks, the technology is now being used by the most advanced G8 nations as well as some of the least developed states in the world, such as Somalia. These documents have come on stream at a time when resources are under pressure but security requirements are getting ever more demanding. The documents use secure technology at every level: from secure paper and secure printing techniques through to biometric and chip card technologies. When used correctly, these technologies enable border control staff to visually check the travelling public against their eDocuments and verify that they are not on a security watch list. What’s more, the use of biometric and chip technology means that processes can be automated, thereby freeing up staff to concentrate on just the few passengers that are a cause for concern. As anyone who has caught a flight after airport security has been ratcheted up a notch or two knows, more precautions lead inevitably to slower throughput – whether it is because of stricter baggage regulations and passenger monitoring, or more thorough checks of passports and visas. Therefore, any process that can speed up border control without weakening security is essential. To achieve this, an increasing number of border authorities are using eGate systems to accelerate throughput while at the same time maintaining a high level of security. For example, Germany’s two-step EasyPASS process uses products and components from Bundesdruckerei and secunet (1) to read, check and verify the eDocument before the passenger enters the eGate and (2) to verify the passenger when they are in the eGate by capturing their face and biometrically matching the live image against the image stored on the chip. The solution currently being deployed at all major German airports is easy to use and combines several hardware devices (including ePassport readers and biometric devices) to enable border control processes to be carried out quickly and securely. Other components include monitoring applications, complex border control solutions and a range of background information systems. The solution’s Automated Border Control (ABC) system interfaces with the German border police’s central database. The two companies have deployed variations of this solution in other countries. Throughout this white paper – which explores eGate technology and its impact on border control authorities, passengers, airports and airlines – EasyPASS refers to the ABC system deployed in Germany. 6 At the heart of all eGate systems is the ability to adjust the technology to cope with changing – and growing – demand. Rule-based decision-making is applied to ensure the technology is fit for purpose. This is essential because if security is too restricting you will end up with unnecessarily long queues and frustrated travellers; if it is too weak you could end up letting in criminals such as terrorists, people traffickers, drug smugglers and football hooligans. In short, if your decision rules cannot be changed you end up with a system that will exclude the wrong people. Application of these rules is best achieved by centrally administering and managing automated border control gates that recognise that adaptability is king. The approach is a sound one in an age when airports and airlines are competing against each other to attract travellers. Having a reputation as a safe, secure but efficient and speedy airport, airline or destination is becoming increasingly important in a world of passenger choice, and a key reason why so many aviation industry stakeholders are now deploying solutions such as EasyPASS. 2.The Automated Border Control Concept 2.1 THE E-GATE Automated Border Control (ABC) solutions, such as Bundesdruckerei and secunet’s EasyPASS solution, offer an integrated two-step approach to eGates that combines document reading with biometric verification. The multi-technology approach of these systems enables them to provide far more than evidence of an individual’s personal identity based on their eDocument. The holder’s biometric data stored in the chip enables the automation of processes such as border control, making it faster and more convenient. As a result, ABCs turn border control checks into a simple, intuitive process that any passenger can carry out themselves in just a few seconds. Passenger processing is significantly more efficient, waiting times are reduced, and more can be processed, in parallel. This section examines the two-step approach and looks at the components and the processes involved. 2.2 INTEGR ATED T WO STEP The basic components of an ABC system are the travel document reader, the physical eGate and the biometric unit, which is primarily a face recognition device but may also include fingerprint technology. The biometric unit is a highly complex and integrated piece of technology, which 7 The EasyPASS eGate includes illumination, a digital mirror – which acts as a feedback monitor for the person standing in front of the unit – and a PAD (Presentation Attack Detection) sensor, which carries out liveness and spoof detection. These have formed the basis for ABC systems for the past few years. However, user guidance and user interfaces, especially between traveller and document reader, have proven key problem areas which result in sub-optimal processing times. eGate passenger flows also need improvement. The approach taken by the German EasyPASS eGates being installed in 2014 addresses these issues. The system is easy to use for travellers – even if they’re inexperienced – due to the deployment of feedback mechanisms and interactive guidance. 2.3 BASIC COMPONENTS The first step in an ABC system is the use of the document reader outside the eGate entry door. Germany’s EasyPASS system is capable of handling all ICAO Doc 9303-compliant eID documents, but due to german border control policies, it can only read the ePassports of EU, EER and Swiss citizens plus the new German eID card. It checks both the electronic and the optical security elements of the identity document in detail during the document reading process. The second step is a biometrics device – usually one using facial recognition technology – within the eGate that checks that the person carrying the eDocument is who they claim to be. EasyPASS uses facial recognition technology for 1:1 comparison. During this process the live image captured at the eGate is compared to the image of the passport holder stored in the ePassport’s RFID chip. Fingerprint scanners can also be added to an eGate system and may be a general option for registered traveller schemes and third party nationals. 8 2.4PROCESS ABC systems are very simple to use and few instructions are needed. Currently, because ePassports are still being phased in, travellers may need to be advised by an official whether their passport is an ePassport (indicated by a chip symbol on the cover) or an ordinary passport. A passenger with an electronic travel document – such as an ePassport – simply goes to the eGate and places their document on the document reader next to the entry door. At this point, the document’s optical and electronic data is read and the eGate’s integrated inspection software checks to see if it is genuine. The passport’s data is next sent to the background system, known as the Border Control System (BCS). The BCS makes a rule-based decision about whether the traveller can use the eGate. If it makes a positive decision, the entry door opens and the traveller enters the eGate. If it makes a negative decision, the traveller is denied access to the eGate and is referred to manual border control for additional checks. In most cases the traveller is provided with feedback about their referral, such as not having the correct ID document, being under 18 and so on. The passenger process Once the passenger has passed through the entrance door of the gate, a biometric camera measures their height, automatically positioning itself at the optimum imaging level. Their face is photographed and compared with the passport image already read from the chip, while the BCS queries external databases to check if the traveller is allowed to cross the border. If the biometric and database checks are o.k., the exit door opens, the traveller passes through the ABC eGate and crosses the border. If these checks are negative, an alert is sent to border guards at the monitoring station and the traveller is escorted to a secondary inspection point for further checks. In this case the doors are opened manually by the border guard and the traveller is escorted. The whole process using the EasyPASS system takes less than 18 seconds. 2.5 MONITORING WORK PL ACE The key to successful eGate deployment is positioning border guards in the right location. Rather than using the decades-long approach of a number of border guards sitting behind a row of desks and passengers approaching them with their documents, it is best to provide facilities that enable each border guard to supervise a number of eGates. This means using the latest stationary and mobile monitoring and video surveillance techniques. Bundesdruckerei and secunet offer a monitoring application that can control multiple eGates and includes a video surveillance module, so each gate is equipped with a camera. There are also plans to offer 9 mobile workplace monitoring. Although the technology is capable of enabling one operator to control more than 10 eGates, it is being deployed in line with Frontex (European Agency for the Management of Operational Cooperation at the External Borders of the Member States of the European Union) best practice operational guidelines. These state that one operator should not monitor more than seven e-Gates on arrivals or more than 10 on departures. As a result, the German Federal Police has decided that German border guards monitor a maximum of six eGates within the EasyPASS system. In addition to monitoring individual eGates, it is essential to have a clear overview of the entire border control system. This is best achieved with a central control capable of covering one or more airports. It plays an important role in the ABC system, providing data mining technologies that assess passenger flow and generate eGate status reports as well as carrying out early attack detection. The central administration and management of decision strategies (or rules) within the border control system (both in eGates, mobile border control and stationary border control) means that the ABC can be dialed up to ‘extremely highly secure’ at times when security alerts are high and dialed down to ‘very secure’ when the focus switches to speeding up passenger throughput. 3.Using an eGate from the traveller’s perspective 3.1 STRESS FREE TR AVEL Airports can be stressful locations for many travellers, whether they are seasoned frequent flyers or flying for the first time. It’s not really a surprise: for a short period of time, everything is out of their control. Even people who have meticulously planned, packed their luggage in good time, checked – and re-checked – they have their passports, and arrived at the airport in plenty of time, can be caught out. The list of traveller grievances includes queues at security, ever-changing security regulations, having to unpack – and repack – luggage for inspection at security-checkpoints, flight delays, children kicking the back of their seat for the duration of a flight, being sneezed over, officious border guards and unfriendly airport staff. It is therefore essential to operate a border control system that doesn’t add to this stress, is quick and easy to use, and maintains robust levels of security. The EasyPASS eGate solution 10 The EasyPASS eGate solution builds on the knowledge gained from the introduction of document readers in the private sector, where totally inexperienced and untrained users and operators have been enabled to quickly and successfully navigate the system. The key is to use a consistent set of graphical elements, icons and animations to ensure a uniform and satisfying user experience. When applied to the border control process, this approach enables a speedy and secure throughput of travellers. As a result, using these easy-to-use procedures, secunet and Bundesdruckerei’s EasyPASS eGate solution takes less than 18 seconds to process each traveller. The EasyPASS system is easy to use – even by inexperienced travellers – thanks to the deployment of new feedback mechanisms and interactive user guidance, which will be explored in more detail over the next few pages. The process for the traveller can be summarised as: 1. 2. 3. 4. 5. identifying the border crossing point waiting in position in front of the eGate interacting with the document reader in front of the entry door interacting with the biometric unit within the eGate leaving the eGate via (i) direct border crossing or (ii) a manual control/entry stamp Travellers will first be informed about the eGate border control system before arriving at the airport, though channels such as inflight magazines, videos, emails and texts. Communicating this information is very important, so secunet and Bundesdruckerei strongly recommend close cooperation between all stakeholders (airlines, airports, border control authorities and eGate system integrators). In the airport itself, signage needs to be clear to direct passengers to the relevant control (e.g. all domestic travellers in one lane; all EU/EER travellers in another and non-EU travellers in another). Airports that have deployed Automated Border Control (ABC) also need to provide clear information about who is eligible to use the eGate and which documents they need to proceed through it. 11 3.2 GOOD CASE When the traveller gets to the eGate, they first need to check its status by looking at the ‘bridge’ over the entrance (see image below). If it is ready, a green light will be illuminated; if it is not, a red cross will be lit up. Other symbols on the bridge provide essential information, such as the eGate’s logo (e.g. EasyPASS or EasyGO), which is easily identifiable by the passenger who can decide whether they are eligible to use the gate. There is also a series of symbols that indicate who is allowed to use the system (e.g. ICAO ePassport symbol, age 18+ and EU flag). Other symbols may include a national ID logo or a symbol indicating that the eGate is wheelchair accessible. Interaction with the arc Once the green light comes on, the traveller steps forward and stands in the correct position in front of the gate. Here, there will be interactive graphics that they can read and understand regardless of the languages they speak. These graphics include information about where to place their ePassport; a scanner icon to show that reading is taking place; an incorrect operation notice that warns, for example, that the document has been taken away too early or put in the wrong position on the reader; and a notice indicating insufficient permission, such as the document not being an EU passport. Placing the passport on the document reader Warning messages for incorrectly placing the passport on the document reader 12 The process is similar for those using an eID card, such as the German national ID (nPA). In this case, the images show the correct position for the document; a scanner logo indicates the ongoing reading process, and there is an incorrect operation warning, such as the document being taken away too early. Placing the German ID card on the document reader Having read the traveller’s document, the EasyPASS system’s integrated VISOCORE Verify software quickly detects whether it is genuine. At this point, the traveller sees an icon indicating that document reading has been successful. There will be a symbol on the entrance display telling them to wait if the eGate is still occupied by the passenger in front. Message: „Please wait“ Once the person in front has left the eGate, the entrance animation turns into a green arrow indicating that it is now ready, and the entrance door opens. The traveller then walks through the gate and positions themselves ready to interact with the biometrics unit. Message: „Please enter the eGate“ Unlike other eGate systems, the EasyPASS solution is designed so that when the passenger passes the front door of the eGate, they will automatically look at the biometric unit in the exit door. This ‘face biometrics on the move’ process is simple, intuitive and quick to use. The traveller needs to look straight ahead so the biometrics unit can automatically adjust itself to the optimum height to examine their face. The traveller can see their image in a digital mirror, 13 so they know instantly if they are standing in the correct position for biometric verification to take place. If there are any problems with verification, various symbols will be displayed that indicate the particular issue, such as the traveller being in the wrong position; leaving their passport on the document reader; or two people entering the eGate together. Interaction with the biometric unit If there are no problems, the exit door opens as the traveller approaches the biometrics unit that’s fully integrated into the exit door. Once the biometric system has checked the traveller’s identity, it makes a decision: (i) the traveller has passed all the tests so they can cross the border; or (ii) the traveller needs further checks. In the case of decision (i), a green arrow appears on the display and the exit doors open, enabling the traveller to walk through the gate and continue their journey. If the eGate detects baggage interfering with its operation, a symbol indicating that it needs to be moved appears. If this happens, there is a delay in the exit doors opening. If the traveller has walked out of the eGate but left their luggage there, the exit doors will stay open. Leaving the eGate In the case of decision (ii), an animation telling the traveller that they need to wait lights up on the eGate until a border guard grants approval. Once approval is given, a green arrow indicates that the traveller is free to pass through the eGate. 14 3.3 BAD CASE There may be instances when a traveller is refused entry or use of the eGate. This could be because of problems reading a damaged ePassport chip, poor placement of the document on the reader, or an assessment by the system that the document is a fake or has been tampered with. In such circumstances, the traveller will be asked to present themselves to a border guard for further inspection. 4.Using an eGate from the border control officer’s perspective The key to successful deployment of an eGate is to combine a simple and intuitive passport scanner with intelligent biometrics capture that requires no interaction with the user. The system must fully check the electronic security features of the document – including the biometrics. Additionally, border authorities need clearly to define and evaluate an acceptable False Acceptance Rate (FAR). For example, in both Germany and the Czech Republic an FAR of 0.1% has been defined as acceptable by the authorities From a commercial point of view, the most important feature of an eGate system is its efficiency and the throughput it can achieve in relation to the money invested. The EasyPASS solution is based on a new two-step eGate concept. Both steps – document verification and biometric face recognition – can be performed simultaneously by two different travellers. This approach can increase throughput by 50% compared with other eGate solutions. 4.1 DESCRIPTION OF MONITORING WORK PL ACE The beauty of eGate technology is that border control officers can move to the areas where they are most needed and carry out tasks such as doing more thorough checks of certain passengers on watch lists. The automated approach of eGates such as EasyPASS mean that several control gates can be overseen simultaneously. For example, in Germany one officer oversees four to six eGates while another takes care of any travellers who get stuck in the eGate. The system is always the same: one officer does the supervision; the other officer does the control and passenger handling, so it is easy to plan staff responsibilities accordingly. 15 The monitoring graphical user interface (GUI) 4.2 EASY TR AVEL The simple approach of the EasyPASS system means a traveller can be verified in as little as 18 seconds with limited interaction with a border official. When they place their ePassport on the reader, the system checks both the optical and the electronic security elements of the document. At the same time, it sends an enquiry to official background systems to check whether the passport has been reported lost or stolen. Once it has completed this check, the border control gate opens. As the traveller enters the gate, a biometric camera measures their height, automatically positioning itself at the optimum imaging level. A photo of their face is then taken and compared with the passport image already read from the chip. If the biometric data matches and the system determines that the passenger is entitled to cross the border, they are allowed to do so. Border guards follow the process on monitors and can step in when necessary. They can use the results of the check to decide whether additional police measures are necessary. 16 4.3 SECURIT Y EVASION Because security threats at our borders are constantly changing, the EasyPASS system offers a host of techniques designed to combat various security evasion methods. For example, EasyPASS has a raft of anti-evasion measures including a video control camera; a biometrics unit with liveness and spoof detection; a document reader; and check routines. It also deploys a number of techniques for separate monitoring to ensure that only one person passes through the control at a time. These include a horizontal light barrier rod in the interior to detect the presence of objects or people and a 3D stereo camera above the entrance door that counts people entering the eGate. The EasyPASS system combines a number of different mechanisms and technologies to get the right mixture of traditional ‘strong’ and modern ‘smart’ security techniques. It can be configured to the appropriate security level without impairing its usability, and it can be supported by the border guard. The system’s architecture and design means it is expandable and it can integrate the best possible technologies. Security components of the eGate 17 4.3.1 FALSIFIED ID DOCUMENT The EasyPASS system checks documents according to BSI TR-03135 (the German Federal Office for Security in Information Technology’s technical guidelines created in collaboration with the Federal Police and the Federal Criminal Police Office (Bundeskriminalamt). These set out the requirements and procedures for machine-assisted document reading, including examining the electronic components of the eID document as well as the optical-physical security features. The VISOCORE Inspect technology, which forms the backbone of the document checking system, is quick and efficient. It offers: •Outstanding verification quality, which is continuously updated and regularly tested to ensure the most accurate results •Intuitive handling, with the results displayed in a clear, easy to read format for swift verification •Easy integration via a platform-independent web interface for processing data and verification results •Excellent product service via the VISOCORE Update Service which ensures regular updates of the verification software and the document database Having checked the optical security features, the traveler will be trapped inside the eGate if the system suspects that the document has been tampered with. The results of these tests will be signalled to the border official on a screen via the Monitoring Graphical User Interface (GUI). Failure of optical and electronic document checks shown in the monitoring GUI 4.3.2 WATCH / BL ACK LIST HIT When a passenger places their document on the ePassport reader, it is checked against a watch list of travellers. If this check reveals the document is on a blacklist, the border official will be alerted and the traveller will have to undergo further manual checks and be refused access to the eGate. 18 4.3.3 BIOMETRIC MISMATCH Today’s eGate systems are operated by only a few border officers, and it is very important for them to detect fake biometric features. A modern eGate applies liveness and spoof detection tests and it will also detect any attacks in which photos, videos or masks are used for facial biometrics. In the case of EasyPASS, the system checks for fake faces using the biometric panel. The solution has a Presentation Attack Detection (PAD) sensor, which checks the area of the detected face to verify it is living flesh. If the system suspects that facial attributes have been manipulated, the eGate door stays closed and the monitor highlights clearly that there has been an evasion attempt. It also provides additional information indicating that the traveller has failed the liveness and spoof detection tests. 4.3.4 MULTIPLE USE OF TR AVEL DOCUMENTS EasyPASS can recognise if an attempt is made to use a genuine travel document for several border control processes – that is, person one allows their document to be read and then gives it to person two when entering the gate. Person two then tries to use the same document to pass through border control. The system combats this type of fraud by use of a Central Border Control System (BCS), which temporarily stores an identifier for each tested document. The basis of this identifier is the configurable fields of the Machine Readable Zone (MRZ). This information is stored anonymously via a hash value through MRZ fields, so it is not traceable and privacy is protected. If the system detects two people trying to use the same travel document, it keeps both eGate doors closed and alerts the border official. It also sounds an audible alarm and provides border officials with additional information about the attempted multiple use. Alarm raised through multiple use of the same travel document Presentation attack detection raises an alarm 19 4.3.5 MORE THAN ONE TR AVELLER IN THE EGATE EasyPASS offers a number of countermeasures to prevent travellers from circumventing the system by putting more than one person through the gate at the same time. These include a horizontal barrier rod that lights up inside the gate to detect objects and a 3D camera above the entrance that counts the number of people entering. The light barriers can be adjusted so that they stand at hip height (around 1 metre from the floor) at the top end of the eGate’s side walls. They can also be operated at foot height at the lower end of the side wall. The status of each light barrier is requested around five times per second. The system relies on pattern detection to check for the presence of two people. The 3D camera is an established product for counting the number of people in entrance, exit and passage areas. It has a 98% accuracy rate, and can detect more than one person and measure directional movement. It can be used in a host of environments including stores and shopping centres, airports and rail stations, and for monitoring access to storage areas, so it is particularly well suited to the eGate environment. In the EasyPASS system, the camera is mounted above the gate entrance door so it captures the traveller’s image before they enter. The system then carries out 3D detection in the visible lit area. Anti-Tailgating 3D camera looking from above 4.3.6 MANUEL OPENING OF THE EGATE EXIT DOOR The EasyPASS system has a number of countermeasures to combat people trying to force open the eGate doors. The system can detect even the slightest deviation from the normal movement profile of the doors, such as an external force, even when the system is in idle state. This also helps to avoid injuries during the doors’ normal operation. Plus they have safety brakes to prevent them from flying open and can withstand the force of a sudden holdup. Border officials are immediately alerted to any attempted forcing of the doors. If an attempt is made, the gate locks and an alarm sounds. Information about the security breach also appears on the monitor. The system has been designed to combat any attempts to climb over, or crawl under, the doors, which are tall with a very low ground clearance. They are constructed of robust stainless steel and toughened safety glass, and can detect being hit as well as any problems with the state of the doors (such as not shutting properly after a traveller has passed through). 20 4.4 POTENTIAL PROCESS L AYOUT The approach taken by Germany’s EasyPASS system, of one officer overseeing four to six eGates while another takes care of travellers that get stuck in the eGate, enables border control to adopt a flexible and scalable solution that uses both stationary and mobile solutions to verify the integrity of travel documents. The background system is capable of linking and analysing information from many different sources, including INTERPOL’s international wanted lists. There are a number of different configurations for deploying EasyPASS technology, which are outlined below. 4.4.1T WO BORDER CONTROL OFFICERS IN THE CONTROL BOX BEHIND THE EGATES EasyPASS can be used by two border control officers in a control box behind the eGate where they can monitor and react to any potential security breaches. 4.4.2 ONE BORDER CONTROL OFFICER IN A CENTR AL CONTROL ROOM The system uses an innovative background management system which enables all eGates at an airport to be controlled and configured centrally. This approach means that border control officers have a good overview of queues and security, and can set control rules that can be easily adapted for each gate, gate group, airport and even nationally. 4.4.3 ONE MOBILE BORDER CONTROL OFFICER WITH A TABLET Using mobile technologies, border authorities can respond to on-going security requirements directly at the eGate. The border control officer can see the same information as they would on their PC, the only difference being that images and information is optimised for viewing on the smaller screen of a tablet. Once the border official has accessed a traveller’s data and authorised them to pass through the ABC, nearby border control officers receive both visual and audio notifications. The tablet also connects directly to the control centre, keeping officers up to date with the latest security information. It means border police nationwide can co-operate and deliver fast and flexible responses to the latest security situations. The border control solution ensures 24/7 security because all stakeholders – from the control centre to the officer on site – are always up to date and able to respond. All travellers will be aware of is how much faster, more secure and simpler crossing the border has become. 21 5.References 5.1EASYGO The pilot of the EasyGO system in Prague in the Czech Republic has led to significantly shorter waiting times for passengers arriving at the city’s airport. In turn, this has increased the number of border crossings, while at the same time reducing the pressure on border guards. In fact, more than 440,000 passengers from throughout Europe were processed between December 2011 and April 2014. When it was introduced, the pioneering EasyGO system was the first of its kind in Central and Eastern Europe. The initial secunet EasyGO easygate started operating at terminal one of Prague’s Ruzyne Airport (now Václav Havel International) at the end of 2011. In 2012, the project was awarded IT Project of the Year by the Czech Association of Chief Information Officers (CACIO). As a result of its success in cutting waiting times, it was extended to include another two secunet easygates, bringing the total to three ABC gates and one monitoring station. Czech Association of Chief Information Officers (CACIO): “The EasyGO project is a practical example of how biometric IDs can be used. The highly developed solution offers self-service for crossing the border with a high level of security and saves passengers’ time.” Any traveller aged over 15 with an EU/EER or Swiss ePassport can use Prague’s EasyGO biometric control gate to enter the country. The system verifies the authenticity of each travel document based on optical and electronic security features. A camera in the gate records live images of the traveller and the system compares these to the photograph electronically stored in the passport. If this data matches and none of the additional checks reveal complications, the gate opens and the traveller is allowed to cross the border in a process that takes less than 15 seconds. The EasyGO system at Prague’s Václav Havel International Airport, arrivals secunet delivered the turnkey eGate solution, which includes process control of the gates and secunet’s biomiddle software. This software combines individual biometric components such as passport readers or cameras with client applications and background systems, thus forming the core of the secunet border control gate. Central to the success of Prague’s EasyGO system has been the collaboration of some of the most highly respected names in border control. secunet’s expertise, especially in the area of ABCs, was pivotal in the Czech government’s decision to opt for its technology. During this project it acted as a subcontractor to VÍTKOVICE IT Solutions. 22 5.2EASYPASS Today’s Automated Border Control system EasyPASS has its roots in a pilot project launched by the German Federal Office for Information Security (BSI) in 2009, under which the BSI worked closely with the German Federal Police, secunet and Bundesdruckerei to develop the world’s most secure and user-friendly border control technology. Following the successful completion of the pilot project and small-scale regular operation at Frankfurt Airport, the Federal Ministry of the Interior put out a call for tender in 2013 for the installation of the so-called eGate at Germany’s busiest airports. A consortium of secunet and Bundesdruckerei has now been working to implement the strategy since the beginning of 2014. From the start of the trial period in February up to February 2015, around 2.5000.000 travellers have crossed the German border quickly, securely, and without assistance via the 83 eGates currently operated by the German Federal Police. In February 2015 those 83 gates processed about 100.000 travellers per week. 140 eGates are to be installed at Germany’s busiest airports by mid-2015. Every EU, EEC and Swiss citizen can now see for themselves how quick, easy and secure modern border control can be at the Hamburg, Düsseldorf, Frankfurt, and Munich airports, and the system will also soon be extended to the Köln/Bonn and Berlin-Tegel airports. Users of the eGate must be over eighteen and hold an electronic passport, while German citizens will also have the option of using the new German ID card. After a person’s document has been read and authenticated at the gate’s entrance, the system will compare a live recording of the passenger with the passport photograph stored on the document chip. Once the person’s identity is confirmed – and if no information is flagged as being of interest to the police – the gate will open. The border control process is then complete, and the EasyPASS user can continue on their way in under eighteen seconds. 5.2.1 EASYPASS INSTALL ATIONS EasyPASS at Munich Airport, Terminal 2, Departures 23 EasyPASS at Frankfurt Airport, Terminal 2, Arrivals EasyPASS at Düsseldorf Airport, Terminal C, Arrivals EasyPASS at Hamburg Airport, Terminal 2, Arrivals 24 6.Brief description of the companies involved 6.1SECUNET secunet is one of Germany‘s leading providers of superior IT security. In close dialogue with its customers – enterprises, public authorities and international organisations – secunet develops and implements high-performance products and state-of-the-art IT security solutions. Thus, secunet not only keeps IT infrastructures secure for its customers, but also achieves intelligent process optimisation and creates sustainable added value. At secunet, more than 360 experts focus on issues such as cryptography (SINA), e-government, business security and automotive security aiming always to be one step ahead of competitors in terms of quality and technology. secunet emphasises on long-term relationships with its customers in an atmosphere based on partnership, as demonstrated by our successful security relationship with the Federal Republic of Germany which has been active since 2004. 6.2BUNDESDRUCKEREI Secure ID is a key topic in the 21st century. In the age of the Internet and global mobility, protecting personal data and reliably verifying IDs have become demanding tasks. Bundesdruckerei is now firmly established as a widely recognised pioneer in this future field. In addition to its leading position in security and banknote printing, the company is a leading supplier of innovative solutions for Secure ID. Bundesdruckerei is a company with one of the longest histories in the business, dating as far back as the 18th century. For more than 250 years, printing on behalf of the state has been carried out in Berlin and in 2009, the German government once again took over Bundesdruckerei as a wholly state-owned company. In recent years, however, the company has been transformed into a leading international Full ID | Management supplier. With its solutions and products, Bundesdruckerei not only offers traditional security and banknote printing, the company also covers the entire Secure ID process chain: from the capture and administration of biographical and biometric data to the production and personalisation of state-of-the-art ID documents right through to systems for issuing and verifying these documents. Bundesdruckerei also develops the technical infrastructure that enables citizens, public authorities and private companies to use the electronic components featured in the documents in the digital world. 25 7. Outlook and extensions eGates such as EasyPASS play a vital role in making border control processes more secure and more efficient. Successful deployment of an eGate system means defining and planning how it will be used in the future. Will it be used by all travellers with an ePassport? Will it be used only by those who have pre-registered? Which biometric technologies will be used? How can the system be future-proofed to cope with new security and throughput requirements? How can throughput and process automation be improved? How can the biometrics used improve attack detection? This section examines how the eGate of the future could look. 7.1 PRE-CHECK KIOSK I As the number of travellers increases and new security rules are implemented, it is going to be even more important to have simple, streamlined border controls. However, procedures need to be implemented to deal with the many passengers of various nationalities and languages who may not be entitled to use an eGate. They can significantly reduce the efficiency of the system if they end up in an eGate lane by mistake. To speed up processes, the eGate of the future will see travellers initially approaching a pre-check kiosk right at the start of the lane so their ID documents can quickly be checked to confirm that they are entitled to use it. This new approach means the border control process will consist of three steps: •Step one – pre-check (system checks MRZ passports and directs travellers to correct queue); •Step two – eGate document check (system checks MRZ passports and carries out database search); • Step three – eGate identity check (system uses biometrics for identity check). 7.2 PRE-CHECK KIOSK II The second of the pre-check kiosk models sees one located at the beginning of the eGate lane with the other positioned anywhere in the airport. Using this approach, the traveller initially places their passport on the pre-check reading device. Within a matter of seconds, the integrated document verification system checks whether the travel document is genuine and performs a background query in official databases. This procedure allows border guards and eGates to be assigned to travellers based on security profiles, their country of origin and available resources. The system is highly flexible and can be quickly reconfigured when the security situation changes or at times of peak passenger flow, such as during big sporting events, where certain passenger groups can be diverted to manned border control desks. This pre-check system indicates clearly whether the passenger should go to the manual border control or to an eGate. 26 Step-by-step approach for pre-checks: • Step one: Place passport on pre-check reading device • Step two: Device checks travel document is genuine • Step three: Device carries out background checks on official database • Step four: System assigns an eGate to the traveller •Step five: Token or paper sheet with bar code is handed to passenger informing them of their eGate lane assignment Passenger flow when using a pre-check kiosk 7.3 ADDITIONAL BIOMETRICS Biometric face recognition is a key component of Automated Border Systems (ABCs). However, some authorities may decide to implement additional or alternative security elements. For example, if an eGate system has been extended to be used by third country nationals, visa holders and registered travellers, some authorities may wish to recognise travellers by their fingerprint or iris in addition to their face. Iris technology is becoming a popular choice for eGates, particularly in the Middle East, where a passenger’s iris scan is matched with a preregistered template. Before deciding to opt for additional biometric types, it is important that a border authority considers their pros and cons. Fingerprint technology has the advantage of being very accurate, economical, the most developed and easy to use, and requires little memory for template storage. However, some citizens are uncomfortable with using it because they associate it with the identification of criminals; it also is less accurate if fingers are dry or dirty and with recognising children’s fingerprints. Furthermore, a system that uses this biometric must take into account the percentage of the population that has one or more fingers missing, so may have difficulties registering a template. 27 Iris technology enjoys a high degree of accuracy and can be verified in less than five seconds. It also fares well in liveness detection tests, because a dead person’s eyes deteriorate too quickly to be useful. However, the technology is more expensive than other biometric types. The approach taken by the EasyPASS solution makes it easy to accommodate these additional biometric types. The secunet biomiddle BioAPI 2.0-compliant middleware is an integral part of the EasyPASS eGate system. It ensures that it is simple and cost-effective to use additional biometric types. 7.4 ADDITIONAL USER GROUPS eGates can be about a lot more than simply granting entry to a country’s nationals. If they are to be exploited to their full extent they can also be used for registered traveller programmes (RTPs), enabling airlines and airport authorities to fast track pre-registered passengers through immigration. In fact, RTPs are about putting the right policies in place and are not a technical issue. They are an important advance when you consider the economic worth of international travel. According to EU estimates, in 2011 alone, foreign travellers contributed 271 billion euros to the European economy. The EC’s Smart Borders Study, which was published in October 2014, examined issues such as technical, operational and cost concerns related to border control processes, RTP tokens, data retention and choice of biometric identifiers. It also looked at the extent to which national entry/ exit systems can be integrated into an existing system and revealed how important it is to have a system that fights irregular immigration and provides information on overstayers, as well as facilitating border crossings for pre-vetted frequent third country national (TCN) travellers. The EasyPASS eGate solution is completely in line with the findings of this study. The importance of deploying a solution that can be used by an ever-increasing number of passengers is also reflected in statistics published in the study. For example, it estimates that by 2025 there will be 887 million border crossings annually. Of these, 605 million (68%) will be made by people travelling by air. EU citizens are expected to account for 417 million (69%) of these air travel-based border crossings, with visa-exempt travellers and visa holders making up the remaining 31% (see table below). Visa exempt Visa holders Summary of estimates of the size of the individual file database (in millions) 2014 2020 2025 Border crossings (entry & exit) 81 104 127 Number of travellers 30 39 47 Border crossings (entry & exit) 110 141 175 Number of travellers 19 24 29 Border crossings total 191 145 302 Travellers total 49 63 76 28 7.4.1 REGISTERED TR AVELLER The EU is at the forefront of developing RTPs. Its focus is on moving towards more modern and efficient border management with a ‘smart border package’ to speed up, facilitate and reinforce border check procedures for foreigners travelling to the EU. This package consists of an RTP that uses ABC systems at major border crossing points to allow certain groups of frequent travellers from third countries to enter the Schengen external borders using simplified border checks, subject to pre-screening and vetting. It also includes an Entry/Exit System (EES) to record the time and place of entry and exit of third country nationals. Modernising these systems also ensures greater security, by preventing irregular border crossings and detecting those who overstay. An estimated 5 million legitimate non-EU travellers will make use of this system each year. 8.Conclusion and USPs eGate technology, such as the EasyPASS system, offers all stakeholders benefits, including speed, security and cost effectiveness. Because everyone stands to benefit, the number of ABC systems is expected to increase dramatically over the next decade. 8.1 ADVANTAGES FOR THE BORDER POLICE Border police need to ensure a nation’s borders are secure while enabling passengers to travel quickly through checkpoints. With its reliance on a multitude of technologies including biometrics, smart cards and secure printing, the EasyPASS system offers superior levels of security that can be easily and quickly ramped up – or turned down – to cope with changing security situations and throughput requirements. What’s more, it can be easily adapted to cope with peak periods – such as during international sports events, particularly football tournaments, where authorities may prefer to process suspected hooligans manually. This enables them to handle increased passenger numbers, deal with travellers who may be of interest to the authorities, and not have to spend time and money training more border guards who would be required for only a short period of time. To achieve this superior level of security, the system doesn’t take any short cuts. It fully examines each passport to see whether it is genuine and to verify that the person holding the document is who they claim to be. Unlike manual border control, the system doesn’t get bored or distracted, so the 50th document in a morning will be examined as carefully as the first. This gives border control officials the chance to focus on identity theft, document fraud and the associated risk of terrorist attacks, and much greater control over who crosses the border. 29 In turn this leads to significant advantages for border guards: • • • • Improved throughput Tightened security A system that is adaptable to changing needs The deployment of personnel that can be focused on examination and not on waiting for document readers and background systems to work. 8.2 ADVANTAGES FOR THE TR AVELLER The last thing that a traveller wants to do when they arrive at an airport is join a long queue to get their documents checked. Any system that speeds up their border crossing experience, is easy and convenient to use, is less stressful, gives them more time to use airport services, and leads to shorter queues and transfer times is going to get their thumbs up. And as the popularity of air travel increases – and passenger numbers grow – it is becoming increasingly important to aim for faster processing and keep such queues in check. What is equally important is that travellers’ legitimate concerns about security and privacy protection are taken seriously. The EasyPASS solution has been designed so that no unnecessary data is generated and/or processed, providing travellers with the confidence that their privacy is being respected. 8.3 ADVANTAGES FOR THE AIRPORT Airports look for many ways to stay competitive: top class facilities, great retail outlets and fast security control procedure are all factors that influence a passenger’s decision of which one to choose. Faster processing times improve throughput and can make the airport more competitive. Additionally, shorter queues make travellers happier and the airport more attractive. Plus smaller queues mean more space for retail outlets and greater revenue for the airport. 8.4 ADVANTAGES FOR THE AIRLINE The hugely competitive airline industry recognises that having dropped prices as low as possible, another way that they can attract customers is to fly to destinations that offer quick and convenient processes that make journeys easier. Passengers don’t want to travel to airports that have reputations for long queues at border control that snake out through the arrivals halls. What’s more, airlines want to do everything they can to ensure their passengers can easily connect between flights. Faster processing is an important tool in reducing the risk of missing connecting flights. 30 8.5 IMPORTANT FEATURES 8.5.1SECURIT Y Governments, airports, airline operators, border control officials and passengers are more confident if there are high levels of security at border control. The EasyPASS system has been designed to major on security and privacy without forgetting some of the other important attributes that are required for a successful border control system. It offers automatic verification of optical security features, electronic security chips, MRZ checks, pattern checking under different types of light and security paper checks. It also supports the latest security standards for chip reading, including BAC, EAC and SAC, and offers a continuously updated back document database. 8.5.2 EASE OF USE eGate systems such as EasyPASS make use of innovative user interface concepts that are designed to make it easier and more convenient for travellers to use the system – regardless of what language they speak, their nationality, age or educational background. In fact, detailed graphical feedback at the document reader makes the most complicated task easy. This ease of use helps ensure that the system offers a speedy border experience for travellers. 8.5.3SPEED The EasyPASS system is based on a new two-step eGate concept. Both steps – document verification and biometric face recognition – can be performed simultaneously by two different travellers. This approach can increase throughput by 50% compared with other eGate solutions. The EasyPASS system’s focus on optimal passenger flow has resulted in an impressive average pass-through time of less than 18 seconds. 8.5.4CONTROL EasyPASS can be controlled centrally. This means that border authorities retain autonomy over the whole process and have a good overview at all times. The system’s decision rules can be changed according to the situation in hand, and the centralised background system can be easily adapted to changing needs. This means that the traditional, more basic fixed set of rules no longer needs to be applied to ABC systems. As a result, control rules can be easily adapted for each gate, gate group, airport and even nationally. 31 FOR FURTHER INFORMATION PLEASE CONTACT: Frank Steffens Senior Product Manager secunet Security Networks AG Kronprinzenstraße 30 D-45128 Essen Phone: +49 (0) 201-54 54-30 14 E-mail:[email protected] Christoph Maggioni Senior Dircector Marketing Verification Bundesdruckerei GmbH Kommandantenstraße 18 D-10969 Berlin Phone: + 49 (0) 30-25 98-033 76 E-mail:[email protected] www.secunet.com www.bundesdruckerei.de WhitePaper
© Copyright 2026 Paperzz