Skip to main content

US Border Patrol Unable to Validate E-Passport Data

US Border Patrol Unable to Validate E-Passport Data

E-passports store a cryptographic signature to prevent forgeries and tampering, but CBP has not deployed the software needed to verify the information, causing a security lapse.

  • By Jessica Davis
  • Feb 27, 2018

U.S. Customs and Border Protection officials have been unable to cryptographically verify passports of visitors coming into the US for more than a decade because they lacked the proper software, according to a letter sent to CBP acting commissioner Kevin K. McAleenan by Sens. Ron Wyden (D-OR) and Claire McCaskill (D-MO). E-passports store a cryptographic signature to prevent forgeries and tampering, but CBP has not deployed the software needed to verify the information, causing a security lapse.

For the last 11 years, the United States has inserted RFID chips in the back panel of its passports, creating “e-Passports”. The chip stores passport information, a biometric identifier, and a cryptographic signature to prevent tampering or forgeries, making it theoretically more secure and more difficult to alter.

However, according to Wyden and McCaskill, CBP currently “lacks the technical capabilities to verify e-passport chips.”

“Specifically, CBP cannot verify the digital signatures stored on the e-passport, which means that CBP is unable to determine if the data stored on the smart chips has been tampered with or forged," according to the senators’ letter.

The security gap was first brought to light by the Government Accountability Office (GAO) in a 2010 report.

"DHS does not have the capability to fully verify the digital signatures because it ... has not implemented the system functionality necessary to perform the verification,” GAO reported. "The additional security against forgery and counterfeiting that could be provided by the inclusion of computer chips on e-passports issued by the United States and foreign countries ... is not fully realized."

The senators have asked CBP to work with the government’s General Services Administration to create a budget for implementing the software needed to use the e-passport verification functionality and present a plan by January 1, 2019.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

Most   Popular

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.