electronic ID

The electronic identity card(ePA) is a new identity card (nPA) for German citizens that is intended to replace the older non-electronic identity card. Like the latter, the electronic ID card contains legible personal data and a photograph. It is the size of an ID1 card and has the structure of a smart card. It is a proof of identity consisting of a printed personal part with an identification number, an electronic part and a digitalsignature.

Personal data are printed on the front and back sides. They include the surname and maiden name, first name, date and place of birth, nationality, period of validity and the signature of the holder. A new feature is the six- digit card access number( CAN), which can be used in readers for sovereign use, for example at border controls, by the checking officers for authentication. In addition, there is a photograph on the front of the card. The color of the eyes, body size, date of issue, issuing authority and home address are entered on the back.

New ID card (nPA), Photo: ID card portal

The technical features of the electronic ID card

In terms of electronic features, the new ID card has a microprocessor with Random Access Memory( RAM), Read Only Memory( ROM) and Electrically Erasable PROMs( EEPROM). In addition, the nPA ID card is equipped with an NFC tag in accordance with ISO 14443, which works by radio but only allows reading ranges of a few centimeters. The data is read in an NFC reader that can be connected directly to personal computers. The electronic part can be used to communicate the data, for example for transmission during a personal check, for authentication and for the digital signature on the Internet, which serves as a legally binding signature.

The security-relevant features of the electronic ID card

Card reader for the electronic ID card, Photo: Reiner SCT

The electronic ID card has many security-relevant features, such as the holographic representations of the portrait and the federal eagle, kinematic motion structures, macro and micro fonts, embossing, watermarks and more. In terms of biometric data, the electronic ID card contains fingerprints, which are stored in digital form and compared with the stored data during fingerprint recognition using a fingerprint scanner. In addition, the ePA ID card has an authentication protocol that provides access protection when the data is read out: extended access control( EAC), in which mutual authentication takes place between the electronic ID card and the electronic reader. When ePA data is transmitted, a password-authorizedconnection establishment takes place before the data is encrypted and transmitted over the end-to-end connection. The protocol is called Password Authenticated Connection Establishment( PACE).