eIDAS in Europe, eID in The Netherlands & Germany eIDAS in Europe, eID in the Netherlands & Germany 2nd Dutch-German Security Forum on Cyber Security Dr. Detlef Houdeau May 2nd, 2017 May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eIDAS in Europe, eID in The Netherlands & Germany Agenda eIDAS in Europe, eID in The Netherlands & Germany 1 eIDAS in Europe 2 Comparison eID in the Netherlands and Germany May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eID regulation and standardization in Europe eIDAS in Europe, eID in The Netherlands & Germany Regulation Existing ePass: EC/2252/2004 eRPC: EC/13502/2/2007 eTacho: EC/2135/1998 eID: EC/910/2014 eDL: EC/383/20121) eVRC: EC/127/20032) In the pipeline Schengen Visa Generation 2 eRTP Generation 3 w/ ESS eEHIC (standardized but not in use) ID-documents improvement (DG JUST) Birth Certificate Standard ePass 1G: ICAO 9303 2G: BIG 3G: ICAO 9303 eRPC ICAO 9303 + BIG eTacho EU spec (no standard) eID CEN TC 224 eDL eVRC eEHIC CEN TC 215 eRTP New EU spec is expected RPC = Residence Permit Card DL = Driving License VRC = Vehicle Registration Card RTP = Registered Traveler Card EHIC = European Health Insurance Card EES = Exit/Entry Schengen ICAO = International Civil Aviation Organization BIG = Brussels Interoperability Group 1) DL = Mandatory; eDL Voluntary 2) eVRC = Voluntary May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eIDAS in Europe, eID in The Netherlands & Germany EU eIDAS regulation 910/2014 eIDAS in Europe, eID in The Netherlands & Germany Target Digital Single Market: "more Europe" = more trust, more market, more choice, more convenience; 510 Million Citizens, 28 Member States; Scope Cross border authentication, use eID-token in the public domain (e.g. eID-token from Spain, used in Italy), only for notified eID-token Pre-Work Large Scale Pilots: STORK I + II, PEPPOL, epSOS, eCODEX (2010 – 2015); round 100 mio € public funding EU Regulation 910/2014, 23rd of Jul 2014 Implementing 2015 – 2018 voluntary 29th of Sep 2018 mandatory Specification eIDAS token specification (equal BSI TR 03110) Protection Profile 99% copy and past from CEN TC 224 WG 15 (equal BSI TR 03105) Next Pilot 05/2016 Call for Interest – EU Student Card, full eco system at university Impact in Europe New Tender would address eIDAS token specification (e.g. Hungary) Next Generation migrate on eIDAS token specification (e.g. Italy) Security certification would be easier (e.g. eHealth Germany) May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

Trends on eID-cards in Europe eIDAS in Europe, eID in The Netherlands & Germany Increase Document Security Combine optical with electronic Security Turkey (2016) Using Travel (ICAO) Standard "Synergy" with e-Passport in security, functionality and production flow Sweden (2005) The Netherlands (2006) Ukraine (2016) Using eGovernment Service Online Authentication in the Web Finland (1999) Estonia (2004) Using eHealth Service eID for electronic identification, eHealth for Prescription and Emergency Data Italy (2006) Portugal (2007) Using eTax-Declaration Online Service in the Web Using eTicket-Service Online-Check in Public Transport Italy (2010) Belgium (2011) Using eVoting-Service Voting in the Web eGate at Airport Automatic Border Control Spain (2006) Germany (2014) Using ePension-Service Online Information Service May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eID-Programs in The Netherlands and Germany Focus: Public sector eIDAS in Europe, eID in The Netherlands & Germany The Netherlands Application Germany ePassport eID-Card eResidence Permit Card e-Health Card e-Driving license e-Tachograph Card e-Taxi Card In issuing process May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eID-card in The Netherlands and Germany eIDAS in Europe, eID in The Netherlands & Germany The Netherlands Germany 2006 Start Roll Out (CY) 2010 Data set, security and biometrics from ePassport Target function/ application Online-Services based on 2-factor authentication Biometric verification of the holder ICAO 9303 Used standards eIDAS-token specification EN 419212 (CEN) from 2006: face photo; from 2009: face photo & 2 fingerprints Biometric data stored in the chip face photo (mandatory) 2 fingerprints (voluntary) MRZ/BAC, EAC, MRZ/SAC Access to e-Data MRZ/EAC or CAN/EAC May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

Any questions are welcome eIDAS in Europe, eID in The Netherlands & Germany Dr. Detlef Houdeau phone: +49 89 234 21144 eMail: detlef.houdeau@infineon.com May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved. May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.

eIDAS in Europe, eID in The Netherlands & Germany May 2017 Copyright © Infineon Technologies AG 2017. All rights reserved.