Secure egovernment Where convenience meets security.

Transcription

1 Secure egovernment Where convenience meets security

2 Gaining transparency Electronic ID documents replace and enhance conventional ID documents that governments have been issuing for many years. These documents help governments gain transparency on facts that are important for a community: data such as the number and status of citizens, credentials allowing entrance to a country, professional privileges, or access to health and social security benefits. With the electronic dimension, these functions can be verified far better than with conventional documents. strengthening security, protecting privacy As electronic documents take over the role of conventional ID documents, governments and citizens share the interest that data is solely used for the intended purposes. Users privacy is not to be threatened by unauthorized access to data. In addition, tampering with and fraudulent use of ID documents must be effectively prevented. Modern security controllers with forward-looking security concepts can achieve these goals today and in the future without compromising convenience. and capitalizing on convenience Electronic ID documents allow for workflow integration that was not possible in the days of paper documents. Fast and secure contactless data transmission cuts down interaction times at points of control and renders the experience more convenient for citizens. As the data can be integrated into other authorised governmental and commercial workflows, new opportunities arise to improve citizen-centric egovernment and ecommerce services. 2

3 e-id solutions demand encrypted CPU To achieve governmental targets in security, reliability and privacy protection controllers must be equipped with future-proof and comprehensive digital hardware security architectures: Fully encrypted data path leaving no plaintext on the chip Calculation with encrypted numbers in the CPU itself Comprehensive digital error detection with self-checking dual CPUs flexibility and robustness As more and more documents are converted to edocuments, secure controllers must be prepared for diverse applications without compromising the reliability that governments are used to from paper documents: Flexible, robust and secure flash memory from 200k to 400k to accommodate application data also for multi applications and extensive biometric data sets Contactless interfaces according to ISO Type A and B for independence from reader infrastructure Robust packaging to safeguard long-standing connectivity and performance. Advanced citizen services and governmental efficiency call for seamless transactions at high speed: Highly efficient and secure 16 bit microcontroller for fast calculation Sophisticated symmetrical and asymmetrical crypto co-processors Contactless interfaces supporting very high data rates (VHBR 6.8 Mbit/s) for high speed data transmission National eid Social/eHealth edriving Licence epassport 3

4 Infineon s encrypted CPU The standard for long-lasting Secure egovernment Governments are used to acting responsibly with a horizon of decades. These high standards call for adequately secure & reliable controllers as the ID documents go electronic. Infineon s security controllers with Integrity Guard digital hardware security provide the best match to governmental requirements that is available in the market. Digital hardware security The design of the Integrity Guard security concept uses stable digital mechanisms in hardware to effectively cover whole classes of potential security attacks. For example, two CPUs continuously cross-check each other s flawless operation. Integrity Guard security products are a contrast to competing legacy controllers that are clogged with over a hundred countermeasures against specific attacks and require constant maintenance. Full encryption of the data path Secure controllers with Integrity Guard feature an unrivaled full encryption of the data path. Unlike conventional security chips with which the data is stored in encrypted form but is decrypted for processing, Integrity Guard processes the data exclusively in encrypted form. In this way, the new technology eliminates a potential vulnerability to hackers. Even if data were to be intercepted, the encrypted signals are of no use to the attacker. Certified award winner The Integrity Guard security concept has received numerous innovation awards and excelled in the most rigorous security evaluations. Among other distinctions, Integrity Guard was nominated for the German Future Prize 2012 The Federal President s Award for Innovation and Technology. Security controllers with Integrity Guard have received Common Criteria EAL 6+ certification, the highest security certification level achievable today. 4

5 SOLID FLASH Governments are becoming more demanding in terms of flexibility for eid products that allow seamless citizen services. Infineon contributes to this end with an outstanding memory concept for its secure controllers that replaces mask ROM with SOLID FLASH products. SECURE: Infineon s SOLID FLASH products offer unique security features, such as strong encryption of the flash memory and a specific flash loader mechanism for secure flash memory programming and effective locking. All SOLID FLASH features have proven their quality in rigorous security certifications up to Common Criteria EAL 6+. RELIABLE: Complex failure detection and correction mechanisms together with very robust cycling behavior ensure that Infineon s SOLID FLASH is able to run in the field as long and as reliably as any mask ROM memory. FLEXIBLE: All players contributing in the card value chain can benefit from the advantages of SOLID FLASH in terms of flexibility. Samples can be shipped to approval bodies in only a fraction of the time needed for mask ROM products. OS developers can reduce valuable development time. State printers can save logistic costs by not having to order one specific ROM Mask with lengthy semiconductor production cycles. Finally, the personalization entity can drastically cut down its stock level due to on demand programming capabilities of SOLID FLASH. 5

6 Governments eid partner of choice Infineon is an innovative and long-standing supplier of hardware-based secure ID solutions that has lead the chip card controller market for more than 15 consecutive years. This depth of experience reassures many governments looking for a trustworthy and stable supplier. Speaking of governmental ID programs nowadays, Infineon is the only IC company in 2011 that shipped controllers to the epassports projects of the world s five biggest countries. In Europe, the leading region for new governmental applications, 70% of the National eid projects relies on chips from Infineon. In addition, many high economic growth countries, such as Brazil, Turkey, India, Indonesia & China trust Infineon secure controllers for their new eid documents. In the field of healthcare, 60% of the smart health cards worldwide use Infineon chips. With a global support network and multiple production sites, Infineon effectively serves projects around the world. Infineon is the preferred semiconductor supplier for many global ID solutions, and our continued investment in R&D ensures we will be able to serve them for many years to come. 6

7 Unmatched controller performance Infineon is the only supplier of secure controllers combining all key features for modern egovernment products. Digital HW Security Common Criteria EAL 6+ Flexible & reliable flash Controller Infineon controllers A truly complete picture for egovernment projects High performance 16bit controller Universal contactless communication ISO A&B Highest contactless transmission speed VHBR Packaged to perform Packaging is a major factor for the quality and durability of eid documents. In addition to secure controllers, Infineon offers perfectly adapted packaging technologies and modules tailored to meet challenging mechanical and chemical requirements for governmental documents. The packaging solutions cover contact-based, contactless and dual interface communication in all variants needed for flexible and robust governmental eid documents. Solutions beyond controllers Infineon s long-standing track record with challenging government projects around the globe leads to a deep understanding of the specific needs that go beyond secure chips. Stemming from that history, Infineon can offer native and Java partner Operating Systems as well as inlay or ecover solutions in combination with well-proven secure supply chains. Among others, Germany and the USA rely in major volumes on such Infineon solutions for their eid documents. 7

8 Ask Infineon. Get connected with the answers. Where you need it. When you need it. Infineon offers its toll-free 0800/4001 service hotline as one central number, available 24/7 in English, Mandarin and German. Our global connection service goes way beyond standard switchboard services by offering qualified support on the phone. Call us! Germany (German/English) China, mainland (Mandarin/English) India (English) USA (English/German) Other countries... 00* (English/German) Direct access (interconnection fee, German/English) * Please note: Some countries may require you to dial a code other than 00 to access this international number, please visit for your country! Where to Buy Infineon Distribution Partners and Sales Offices Please use our location finder to get in contact with your nearest Infineon distributor or sales office. Infineon Technologies innovative semiconductor solutions for energy efficiency, mobility and security. Published by Infineon Technologies AG Neubiberg, Germany 2012 Infineon Technologies AG. All Rights Reserved. Visit us: Order Number: B181-H9322-G4-X-7600 Date: 11 / 2012 Attention please! The information given in this document shall in no event be regarded as a guarantee of conditions or characteristics ( Beschaffenheitsgarantie ). With respect to any examples or hints given herein, any typical values stated herein and/ or any information regarding the application of the device, Infineon Technologies hereby disclaims any and all warranties and liabilities of any kind, including without limitation warranties of non-infringement of intellectual property rights of any third party. Information For further information on technology, delivery terms and conditions and prices please contact your nearest Infineon Technologies Office ( Warnings Due to technical requirements components may contain dangerous substances. For information on the types in question please contact your nearest Infineon Technologies Office. Infineon Technologies Components may only be used in life-support devices or systems with the express written approval of Infineon Technologies, if a failure of such components can reasonably be expected to cause the failure of that life-support device or system, or to affect the safety or effectiveness of that device or system. Life support devices or systems are intended to be implanted in the human body, or to support and/or maintain and sustain and/or protect human life. If they fail, it is reasonable to assume that the health of the user or other persons may be endangered.