ePassport

ePassport

An ePassport (electronic passport) is a machine-readable travel document containing an embedded contactless smart card chip that stores the holder's biometric data, personal information, and digital security credentials. Standardized by ICAO (International Civil Aviation Organization) in Doc 9303, ePassports use ISO 14443 RF communication at 13.56 MHz and carry cryptographic protections that prevent forgery, cloning, and unauthorized data access.

Data Structure

The ePassport chip organizes data in Logical Data Structures (LDS):

The SOD contains SHA-256 hashes of all data groups, signed by the issuing country's Document Signer Certificate, which chains up to a Country Signing CA. Border control systems verify this PKI chain to confirm document authenticity.

Security Mechanisms

ePassports implement three layers of access control and authentication:

Chip Platform

ePassport chips are Secure Elements certified to EAL 5+ under Common Criteria, running specialized ePassport operating systems (NXP SmartMX, Infineon SLE 78/97). The chip communicates via ISO 14443 Type A or B, using APDUs defined in ICAO 9303 Part 10. Memory capacity typically ranges from 64 KB to 256 KB of EEPROM or flash to accommodate biometric data.

Global Deployment

Over 150 countries issue ePassports. The ICAO Public Key Directory (PKD) distributes Country Signing CA certificates for cross-border verification. Extended Access Control (EAC), which includes Terminal Authentication and Chip Authentication, is mandatory in the EU for accessing fingerprint data (DG3) and is implemented in many other jurisdictions.