Citizen Electronic ID Card project in France

1
Citizen Electronic ID Card project in France

• G. Bonningue , F.Tatout, D. Ankri
• Ministry of Interior , Secretary of Industry,
  SISGEM
• co-chairman of TB 10 e-government
• Nov. 20 th, 2002

2
STRUCTURE

• The project
• The smartcard in the project
• Conclusion

3
Key dates and object

• Concept Study launched March 2001
• Followed by a complete demonstrator 2002
• March 2000, Law on Electronic signature
• June 2000 report on official titles
• Nov 2000 Conference on the modernisation of
  departmental offices, Lyon
• March 2001, decree on electronic signature

4
The overall concept

• Final objective increase productivity and
  effectiveness of administrative processes
• Issuing electronic ID documents
• How to make a new step from online consultation
  to online transaction ?
• Provide access for the citizen to administrative
  resource, online application for official papers
  and for administrative process
• Use of electronic signature for online
  formalities
• Strong authentication of civil status --gt use of
  a smart card with a digital certificate

5
Some principles

• Reusable SW components
• Availabity and user-friendly applications,
• Versatility for large diffusion
• Perennity, adaptability and evolutivity
• Integration within the ongoing projects for
  reforming the State and administration relation
  with citizen and enterprises

6
Objectives

• Validate concept of public and privative
  terminals,
• Validate concept of using new services
  (electronic certification, horodation, image
  servers, etc)
• Make preconisations on the use of these new
  services
• Contact card with evolution to dual interfaces
  card
• Prepare for further specifications ( standard CEN
  /TC 224 on Citizen electronic Card/ CEC , as
  started in AFNOR see draft CEC document )

7
The overall architecture
Certification area
Production area
Regulatory area
Public area
8
STRUCTURE

• The project
• The smart card in the project
• Conclusion

9
The card concept

• ISO 7810 7816
• Printed material conform to the Directive 1996 on
  driving license
• Contact and provide evolutivity to contactless
• Physically secured by hologram and several other
  security techniques such as OCR lines (OACI
  standard)
• Target security level EAL 4 (card OS use as
  an SCCD, private key generated on chip,
  cryptoprocessor on the card)
• The chip will contain a X 509 v3 certificate /
  PKCS 15, photography, written signature and
  civil status with filiation of the holder, etc

10
Overall process

• 1) Registration in municipalities
• Photography, Civil status and Signature
  (handwritten)
• 2) These data are sealed and transmitted at the
  prefectory level for control and validation (SSL
  128 bits electronic signature by the sender --gt
  public servant with smart card secure SSCD)
• 3) They are transferred to the production center
  (closed Intranet)
• 4) Personalisation and LDAP certificate emission,
  generation of bi-key and personalisation of
  certificate in a center
• 5) The municipality activates the certificate on
  reception of the card, in the presence of the
  holder

11
Other possibilities and constraints

• Basic FUNCTIONS
• Change address
• Renew the digital photograph
• Other possibilities ?
• Matrimonial aspects, children, could be
  integrated within the notion of civil status (to
  be studied, decision would be mainly by MOJ and
  CNIL)
• Applets and new data --gt to be validated,
  possible in a second step.
• Other services and documents issuing local id
  documents , certificates of birth, fishing
  licence , ...

12
Main questions and issues

• Duration of the certificate ? Revocation of
  certificate ?
• Possibility to parametrise and manage
• Duration of the card
• Non repudiation
• Transitions
• from contact to mixte dual interface , and
  horodation
• international use and acceptation
• from close use to multiapplicativity (loading
  applets, other data) will evolve with the
  memory capacity
• a project would certainly begin with a
  proprietary system, for better security,
• how would this evolve in the long run ?
  Development of administrative services with other
  ministry finance , social affairs ,
  justice,...
• More Public concertation required

13
CONCLUSION

• Smart card technologies are ready for such a
  project
• Several central issues relative to smart card
• Adaptation and evolutivity including park
  effect
• Data, data structure, and evolution of them
• modularity
• Multi -application , other services ( and private
  use ?)
• Mainly public area and regulatory area with
  services to be coordinate d at the administration
  level
• Citizen electronic Smart card /CEC as physical
  portable object related to IDENTIFY the user ,
  access remote public service procedures and
  electronically sign documents in a secure
  environment --gt CEN TC 224 WG to be created

14
Conclusion e-ID , as a common minimum
requirement for a european standard group for
CEC citizen electronic card

• ALL MEMBER STATES SHOULD BE INVOLVED AND
  INVITED TO SEND REPRESENTATIVES TO DEFINE A CEC
  WORKING GROUP AT THE CEN TC 224 LEVEL
• MAIN ISSUE IS SERVICES e-government agencies
  will provide services and requirements , and new
  applications should be developed
• CEC standard should address a complete system
• physical aspects and manufacturing
• electronic chip
• certificate and PKI infrastructure, CA , RA, CRL
  ,
• interoperability issues and services