Paula Ortiz Lpez

1
Paula Ortiz López Spanish Data Protection Agency
2
National Electronic Identity Card (DNI-e)

• Everyone has the right to recognition everywhere
  as a person before the law
• Art. 6 Universal Declaration of Human Rights
• Therefore, personal identity is the right of all
  citizens and Governments must establish the
  suitable mechanisms to facilitate this right to
  its citizens.
• The concept of personal identity takes on still
  greater value in the current Information Society.
  

3
National Electronic Identity Card (DNI-e)

• The National Identity Card (DNI) in Spain

• Since 1944 provides unequivocal accreditation of
  the identity of its holder.
• It is required in the great majority of
  relationships between citizens, and between
  citizens and public and private institutions.
• Identifying document in 97 of all processing
• Its use is pervasive in every sphere throughout
  the entire country, and is compulsory for the
  issue of other documents, such as
• Passport, driving license, social security
  number, tax identification number (NIF), etc.
• Ministry of the Interior

4
National Electronic Identity Card (DNI-e)

• From the DNI to the e-DNI

• Digital identification
• A key tool in the development of the Information
  Society and legal, economic, etc. relations via
  the Net.
• Generalised medium able to incorporate digital
  identity.
• Legitimation of the DNI (Article 6 Data
  Protection Law)
• Law 1/1992, of 21st of February, on Protection on
  Citizens Safety
• Act 59/2003, on the Electronic Signature
• Regulation 1553/2005 digital signature

5
National Electronic Identity Card (DNI-e)

• The difference between a traditional identity
  card (DNI) and electronic identity card (DNI-e)
  is that the former is used to accredit ones
  identity to third parties, but it is not able to
  sign for the specific person. On the other hand,
  the DNI-e, in addition to identity to third
  parties, also provides electronic accreditation,
  and it is able to provide remote witness of our
  presence and may sign on our behalf, if the
  appropriate code is provided.

6
ARTICLE 29 WP Working Document on E-Government,
of 8th May 2003 (WP 73)

• Main concerns / Situation in Spain
• 1. Determination of the nature of the data
  registered on the card
• 2. Determination of the procedures of data
  processing,
• 3. Determination of the organisations allowed to
  have access to the
• various categories of information,
• 4. Respect of the individuals rights
• 5. Determination of the administrations entitled
  to decide of the nature of
• the data registered in the electronic identity
  card,
• 6. Potential use of the electronic identity card
  for commercial purposes
• 7.Security measures applied.
• 8. Centralised storage of health and biometric
  data, such as fingerprints.

7
e-Government and electronic identification

• Regulations

• RD 263/96 Use of, electronic, computing and
  telematic techniques
• Law 24/2001 Telematic Logs, Acknowledgement of
  Receipt, Notaries Public and Registrars
• RD 209/2003 Telematic logs and notifications.
  Certificates.
• Law 7/2003 on the New Limited Liability Company
• RD 1553/2005, issue of electronic DNI
• Order INT/738/2006, of 13 of March. Declaration
  of practices and policies of certification of the
  Department of the Interior

• Directive1995/46/EC on Data Protection
• Directive 1999/93/EC on Electronic Signatures
• Directive 2000/31/EC on Electronic Commerce

• Law 30/1992 on Administrative Procedure
• Organic Law 15/1999 on Data Protection
• Law 34/2002 on the Information Society
• Law 59/2003 on Electronic Signature

8
National Electronic Identity Card (DNI-e)

• Objectives of the e-DNI
• Accredit the identity and the personal data of
  its holder, as well as the Spanish nationality.
• To certify the identity of the citizen not only
  in the physical world, but also on online
  transactions, allowing signing all type of
  electronic documents. Using a safe device of
  signature, the electronic signature that takes
  place by means of the electronic DNI will have
  effects equivalent to those of a written by hand
  signature
• To emit the e-DNI in a single administrative act,
  reducing therefore the time used for its
  obtaining
• Interoperability with the European projects of
  digital identification
• To foment the confidence in the electronic
  transactions.
• Acceptance on the part of all the Public
  Administrations and Organizations of tie or
  dependent Public Right of the same ones of the
  use of the electronic DNI.

9
National Electronic Identity Card (DNI-e)

• Electronic Signature
• System of accreditation that allows the
  verification of the identity of people with the
  same value that the hand written signature,
  authenticating the communications generated by
  the signer.
• Law 59/2003 defines digital signature in its
  article 3.1 as The electronic signature is the
  set of data in electronic form, briefed next to
  others or associated with them, that can be used
  like means of identification of the signer
• The Law distinguishes between advanced electronic
  signature (identifies the signer and detects
  future changes) and recognized electronic
  signature (same value as hand written signature)

10
National Electronic Identity Card (DNI-e)

• Electronic Signature System
• Registration Authority DNI Issuing Offices
  (National Police Department)
• Registry of data and personal identity
  accreditation
• Certification Authority Ministry of the
  Interior. National Police Department
• Issuance of electronic certificates
• Validation Authority Various entities
• Information on the validity of the certificates.
  
• Data Controller processing all the information
  National Police Department

11
National Electronic Identity Card (DNI-e)

• Characteristics of the e-DNI

• Smart card physical card chip
• Digital certificates of authentication and
  electronic signature
• Private area (DNI Holder)
• Certificate of signature
• Private keys
• Public area (Unrestricted)
• Certificate of authentication
• Public keys
• Restricted Area (Verification by Law Enforcement
  Bodies)
• Biometrical data

12
National Electronic Identity Card (DNI-e)

• The front of the card includes the following
  items
• 1. In the central body of the card
• Family Name
• Name
• Second Family Name
• Sex
• Nacionality
• Date of birth
• Serial Number of the phisical support of the card
• Expiration date
• Validity date
• 2. At the lower left corner
• Number of the National Identity Card

13
National Electronic Identity Card (DNI-e)
14
National Electronic Identity Card (DNI-e)

• The back of the card contains the following data
• 1. In the top of the card
• Place of birth
• Region- Country
• Parents names
• Residence
• Town of residence
• Province- country of residence
• Number of the e-DNI issuing office
• 2. OCR-B Information printed for automated
  reading of the citizens identity as per ICAO
  standards for travel documents

15
National Electronic Identity Card (DNI-e)
16
National Electronic Identity Card (DNI-e)

• The e-DNI does not contain any information
  related to personal or any other type of data
  (health, tax, traffic, etc.)

17
National Electronic Identity Card (DNI-e)

• The chip contains (Read electronically)
• Filiation data of the holder (Restricted Area)
• Digitalized picture (Restricted Area)
• Digitalized signature (Restricted Area)
• Finger print (Restricted Area)
• Authentification Certificate (Public Area)
• Signature Certificate (Public Area)
• Private keys for the activation of the aforesaid
  certificates (Private Area)

18
National Electronic Identity Card (DNI-e)

• Calendar, project planning

• March-2006. Issue of e-DNIs commences at a pilot
  office in Burgos
• 2008 generalised use of e-DNI
• DNI is it becoming a different document?
• Principle of Purpose
• Additional data on the e-DNI chip (points on
  licenses....)

19
e-AEPD
Participation of the Spanish Data Protection
Agency

• e-government
• Providing information on the legal regulations
  established for e-government
• e-DNI
• Participation on the Coordination Committee, the
  Technical Committee acting as support for the
  Committee created by the Council of Ministers
  Resolution of 23rd December 2004
• Promoting the provision of e-government services
  from the Agency itself (NOTA project)

20

Thank you