Press Releases

Oberthur Technologies is Awarded Security Certificate Common Criteria EAL4+ for Its New Generation of Electronic Passports With Supplementary Access Control

LEVALLOIS, France--(BUSINESS WIRE)-- Oberthur Technologies, one of the world’s largest providers of security and identification solutions and services based on smart card technologies, today announced that its ID-One™ ePass product with Supplementary Access Control received the security certificate CC EAL4+.

Common Criteria (CC) is the worldwide security standard used to assess the compliance of Oberthur Technologies ID-One™ ePass product with the Protection Profile dedicated to SAC, and the capability of this product to defeat security attacks.

Since the first issuance of electronic passports, several security mechanisms have been added to the Basic Access Control protocol in order to further protect a passport holder’s privacy, anonymity and personal information.

In full compliance with the latest requirements of the International Civil Aviation Organisation (ICAO), Oberthur Technologies goes beyond the security features of the second generation of passport (EAC) and enters the era of the third generation passport with a Common Criteria certified ID-One™ ePass supporting Supplementary Access Control (SAC).

The key benefits of SAC are mainly aimed at providing enhanced anonymity and privacy services, especially providing secure access to biometrics that are considered the most sensitive.

This is made possible thanks to the latest cryptographic algorithms such as Elliptic Curves and AES5. The original BAC protocol uses a fixed key derived from basic information printed on the passport. The new SAC protocol creates a stronger key that changes each time the passport is read, thereby increasing privacy and anonymity to citizens passing through border inspection systems.

“Oberthur Technologies is proud to reveal product availability of a certified ICAO passport, which demonstrates the company’s continuous commitment to security, innovation and anticipation of the states requirements to issue passports based on SAC technology,” said Moise Moyal, Marketing Manager of the Identity Business Line at Oberthur Technologies.

Oberthur Technologies will be exhibiting at the eighth symposium & exhibition on ICAO MRTDs, biometrics and security standards, from the 10th to the 12th of October – Stand 2.

SAC1 : Supplementary Access Control
BAC2 : Basic Access Control
ICAO3 : International Civil Aviation Organisation
EAC4 : Extended Access Control
AES5: Advanced Encryption Standard

About Oberthur Technologies

Oberthur Technologies is a world leader in the field of secure technologies: systems development, solutions and services for smart cards (payment cards, SIM cards, access cards, NFC…) and for secure identity documents, traditional and electronic (identity card, passport, health care card). Created in 1984, Oberthur Technologies employs over 6 000 employees. With 50 sales offices across 5 continents, Oberthur Technologies’ international network serves clients in 140 countries.

For more information:

Oberthur Technologies
Annika Hellgren, +46 73 684 47 02
FTI Consulting Strategic Communications
Yannick Duvergé, +33 1 47 03 68 65 / +33 6 74 91 48 05
Guillaume Granier, + 33 1 47 03 68 61 / + 33 6 32 65 79 28

Source: Oberthur Technologies