Creating trust across borders

January 2009 Access Control & Identity Management

Personal identity security is one of the great

concerns of the modern age and must be treated with the utmost seriousness. Stephan D. Hofstetter, head of product management at Trüb AG Switzerland, explains how they keep the forgers in check.

Security demands in the modern world continue to grow ever more complex. While on the one hand borders are opening up (for example, under the EU-Schengen agreement) that allow free passage for people without showing their ID cards, on the other, security measures are being tightened – both on borders and within individual countries themselves. Measures such as the Schengen agreement pose particular challenges for those in the security industry.

It is often said in the document security business that despite the great speed at which technology advances, simple forgeries may follow within a few hours of the original development. Rather than seeing this situation as a reason to throw in the towel and accept that we cannot beat the forgers, Trüb AG view it as being a constant challenge which motivates them to apply a variety of different scientific disciplines – electronics, cryptography and biometrics – to their documents so as to put even more barriers in their way, while facilitating the growing numbers of travellers.

Procedures and processes have been established for the integration of these technologies, both within the EU and internationally under the guidance of the ICAO. How they are applied in practice is largely left to the authorities in the countries which issue and receive the documents.

Making travel documents machine-readable

Come April 2010 travel documents must have a specified machine readable zone, referred to as the MRZ, if they are to be recognised as ICAO-compliant. The MRZ is a standard format code combining information about the document and the bearer which is used by automated border controls for registration and verification. Electronic passports, and the up-coming ID cards equipped with the same infrastructure as these passports, take the MRZ a stage further, in that a hash code generated from the MRZ is used to unlock the chip and secure the communication.

ICAO recommend border-control processes and provide guidance as to how machine readable and biometric upgraded documents can be fully exploited. The most robust biometric system remains the expert comparison of the photograph on the document with the person presenting it. The signature, on the other hand, has become less important in terms of border security and is now more relevant in the commercial environment, ie, banks/post offices, where this data is then evaluated by the police identification service.

The use of electronic biometrics (ranging from the manual comparison of the electronic photograph with the person to automated verification, or indeed identification) is regulated by governments. It is not expected that these systems will be used to check everyone across the board, but rather as a security feature in spot checks.

The 2010 deadline means that many countries need to review their current document systems. For several it will mean taking a first step into digital data processing. This provides a great opportunity for national authorities to employ a new generation of documents with new physical and process security.

In fact, to meet this deadline for machine readable passports, the SA Government Printing Works (GPW) has already invested in a multimillion Rand initiative that will see all SA passports being upgraded with enhanced security, making them virtually impossible to copy.

Physical documents – secure and enduring

It is increasingly the case that ID documents are being upgraded with logical security, ie, smartcard chips. However, this does not mean a corresponding downgrading of physical security. Instead, the trend is towards supplementing physical security with logical security.

In the secure document field there are some widely supported and recognised basic principles which have become established as good practice. The choice of a high performance, pure polymer material such as polycarbonate, with a well engineered structure of layers fused without adhesives, is crucial to ensuring long-term durability. Laser engraving is the perfect process for producing clear cut images on these kinds of documents, documents which are necessary for reliable identification and verification.

There are a multitude of security features available in the field. But what is important is that a good mix which addresses the various different levels of verification is established to secure, with an emphasis on the first level, verification without any special equipment. Examples of this include the embedded OVD, Dynaprint and Photolock. A further dimension – not to be neglected in the design of the protection concept – is the threat profile, because the measures chosen need to counter the different methods of data substitution and document counterfeiting.

Personalisation, the process by which individual bio-data, document data and perhaps chip-application code are generated and written to the virgin document, is another area crucial to data integrity and remains an ongoing challenge to improving document security.

ID documents are widely seen as being a particularly important aspect of national security, and are therefore designed with great care. That is why personalisation outside a country’s borders is very much the exception rather than the rule.

DynaPrint

This feature supplements the optically-variable laser images with coloured envelopes in a pre-defined design. With its resistance to copying and imitation, DynaPrint represents an extremely efficient security element. (See pic a.)

PhotoLock

Personalised data are exposed elements of the document, and must therefore be specially protected. PhotoLock achieves this through a unique combination of laser engraving and specific document treatment with an On/Off effect. (See pic b.)





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Controlling access for people and vehicles
IDEMIA STid Security Technews Publishing Editor's Choice Access Control & Identity Management Asset Management Industrial (Industry) Mining (Industry)
When it comes to access control, the security requirements of mines and the industrial sector are similar, requiring a layered approach that combines physical barriers, digital authentication, and continuous monitoring to protect personnel, assets, and operational continuity.

Read more...
Paxton launches new phone-based security system: Solo
Paxton News & Events Access Control & Identity Management
Paxton has officially unveiled Solo, a phone-based, cloud-hosted access control system. As part of the launch, installers can claim a free Solo starter kit from Paxton, allowing them to trial the system and see how it can work for their business.

Read more...
Taking control of IAM in the AI era
Access Control & Identity Management AI & Data Analytics
AI and Shadow AI are proliferating, creating a series of new risks for organisations. To gain control over who and what has access to corporate data, organisations need unified control over their entire environment.

Read more...
Impro announces Primo update
News & Events Access Control & Identity Management Integrated Solutions
Impro Technologies recently held a launch event in which it introduced a series of new products, from new readers through to its updated Primo access management software.

Read more...
If you cannot prove identity, you cannot claim security
Access Control & Identity Management Information Security
Cybersecurity planning for 2026 is a structural change in how attacks are executed and how trust is exploited, demanding that companies stop layering tools on top of infrastructure and instead prioritise intelligence and identity.

Read more...
Paxton set to launch game-changing new system
Paxton Access Control & Identity Management News & Events
Access control is evolving fast. Installers and end users are looking for systems that are simple to install, easy to manage remotely, and flexible enough to scale. In response, Paxton is exploring how emerging technologies can reshape access control.

Read more...
NEC XON secures mobile provider’s hybrid identities
NEC XON Access Control & Identity Management Information Security Commercial (Industry)
For a leading South African telecommunications operator, identity protection has become a strategic priority as identity-centric attacks proliferate across the industry. The company faced mounting pressure to secure both human and non-human identities across complex hybrid environments.

Read more...
Cloud security in visitor management and access control
SA Technologies Access Control & Identity Management Infrastructure Residential Estate (Industry) Commercial (Industry)
Cloud has become the default platform for modern security operations, from visitor management portals and remote access control to incident logging, reporting, analytics, and integrations. But “in the cloud” does not mean “someone else is securing it for us”.

Read more...
Centurion raises the bar at HomeSec Expo
Centurion Systems News & Events Access Control & Identity Management Residential Estate (Industry) Smart Home Automation Commercial (Industry)
Centurion Systems unveiled its latest product lines at HomeSec Expo 2026, introducing SMART+, a simpler way for installers and end users to manage their Centurion installations - as well as a few new products.

Read more...
What’s in store for PAM and IAM?
Access Control & Identity Management Information Security
Leostream predicts changes in Identity and Access Management (IAM) and Privileged Access Management (PAM) in the coming year, driven by evolving cybersecurity realities, hybridisation, AI, and more.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.