Facts about the new identity card

Transcription

1 Facts about the new identity card

2 Contents The new identity card At a glance... 4 In detail... 6 Photographs... 8 New ID card, new possibilities...10 Special functions The online function...12 Reader and software...14 The PIN letter...15 The signature function...16 Data protection, security and control...17 If your ID card is lost...18 Safe use of the new functions Answers to your questions Fees Passports in a nutshell E-passport Temporary passport Child passport Information service and reporting hotline

3 At a glance What is new? smart card format postal code integrated chip online function for Internet applications and vending machines (from the age of 16, if requested) digital photograph and optional fingerprints to accurately identify the cardholder qualified electronic signature (to be added separately) advanced security features and special protection of biometric data logo on the back of the ID card (specifies functions and accessories) Further information is available online at ausweisportal.de or via the telephone information service at +49 (0) (Monday through Friday from 7 a.m. to 8 p.m. CET; 3.9 ct/minute from German landlines, max. 42 ct/minute from mobile phones, also available from abroad). Who can obtain the identity card? German citizens over 16. Children and youths under 16 may obtain an identity card without the online function. How much does the identity card cost? For persons aged 24 and over: euros (valid for ten years); for persons under 25: euros (valid for six years). Which documents must be presented with the application? A recent photograph and a valid identity document (e.g. old identity card, passport, child identity card, child passport or birth certificate). Applicants under 16 require consent from both legal guardians or, if there is only one legal guardian, that person has to present proof of the right of custody. Photograph requirements the photograph must be of a recent date the face must be centred within the frame in full front view, i.e. not in half-profile the eyes must be open and clearly visible the mouth must be shut; the facial expression must be neutral Further information is available at fotomustertafel. Can the online function be activated at a later date? As long as the ID card is valid your local government services office may activate or deactivate the online function at any time. A fee of six euros is charged for later activation. Deactivation is free of charge. Are the fingerprints stored? Fingerprints are provided voluntarily and stored only on the ID card, not in registers or databases. Only public authorities have the right and technical means to retrieve this information. 4 5

4 In detail The following data are stored on the ID card chip and may be transmitted through the online function with the cardholder s authorisation: family name and given names date and place of birth address and postal code if applicable: religious order or artistic name if applicable: doctoral degree Photograph Doctoral degree, family name, given names Chip Serial number Nationality Card access number In addition, the online function transmits information on whether the ID card is valid or blocked. The following data are stored solely for the purpose of identity checks by public authorities: digital photograph serial number If requested by the cardholder, fingerprints may be stored solely for the purpose of identity checks by public authorities. Last day of validity Issuing authority Date and place of birth Address Religious order or artistic name Data that are always stored include: personal signature height eye colour Logo At the cardholder s request, the identity card authority will fully deactivate the online function or upload a certificate for the qualified electronic signature (available from certification service providers, see page 16). Machine-readable zone IDD = identity card of the Federal Republic of Germany, serial number, date of birth, last day of validity, check digits, blanks, family name, given name) 6 7

5 Photographs The same rules apply to the photograph of the new identity card as to the current passport: the photograph must be of a recent date the face must be centred within the frame in full front view, i.e. not in half-profile the eyes must be open and clearly visible the mouth must be shut; the facial expression must be neutral Exceptions are possible, e.g. for medical reasons. Further information is available at fotomustertafel. The person must look straight into the camera with a neutral facial expression and the mouth shut. Please note: The photograph is the only mandatory biometric feature stored on the ID card chip. Any other biometric data, including the personal signature, height and eye colour, are only printed on the card. Fingerprints At the applicant s request, two fingerprints may be stored on the ID card chip. If the ID card is stolen, for example, they offer greater protection from identity fraud because it is easier to establish whether an ID card is presented by its true holder. Fingerprints are stored only on the ID card, not in registers or databases. Please note: Only public authorities such as the police, customs administration, passport and ID card authorities, and registration authorities have the right and technical means to retrieve the photograph and fingerprints. Transmission through the online function is not possible. The background must be monochrome and bright (preferably neutral grey). No shadows may be visible in the background. The eyes must be open and clearly visible. Reflections from glasses, tinted glasses or sunglasses are not permitted. The glass frames must not cover the eyes. 8 9

6 New ID card, new possibilities The new ID card continues to be used for police and border controls. The new online function (or eid function) is an additional tool for simple, secure and paperless communication on the Internet between cardholder, administrations and businesses without a long wait. The online world is increasingly becoming an important part of our daily lives. However, some transactions could not be concluded via the Internet because the identity card had to be produced as a proof of identity and age. Moreover, many online services require different passwords, user names and card access numbers. There was no standard proof of identity for the online world. The new ID card closes this gap. The ID card chip can transmit required data using secure encrypted connections as soon as the cardholder authorises such transmission by entering a PIN. Authorisation certificates control which personal data may be transmitted to providers of Internet applications and administrative services. Compared to previous registration procedures on the Internet identifying users by a combination of user name and password, the new ID card increases security: users must not only know the six-digit PIN but also be in possession of the ID card, which makes identity theft and fraud much more difficult. Special functions In addition to the online function, the ID card has further optional functions. Access under pseudonym The ID card is able to generate a service- and card-specific feature which the cardholder can use to register with Internet services under a pseudonym without transmitting personal data such as name and address. Nevertheless, the feature allows a provider to identify the cardholder upon each login. However, the feature cannot be used to establish connections to other services used with the ID card. Proof of age and residency Some services and applications only require information about the cardholder s age and place of residence. Instead of transmitting the full date of birth for these purposes, the new ID card indicates only whether a certain age (e.g. 16 or 18) has been reached or not. If a service is available in only one federal state or in a specific city, the ID card transmits a simple yes or no instead of the full address to confirm that the cardholder lives in a certain place. In addition, cardholders may choose to use the ID card s qualified electronic signature for signing legally binding contracts and certificates on the Internet (see page 16)

7 The online function Required personal data may be electronically transmitted using the online function. This kind of data transmission does not affect the conclusion of a contract as such; the rules for online business continue to apply. This is how electronic identification would work in an online shop: You select an item you want to purchase in an online shop. To conclude the contract, send you an invoice and deliver the products, the online shop needs your family name, given name and address. These data may be transmitted using the online function. To this end, you can view the online shop s authorisation certificate including information on the shop, validity and the required data. By entering your six-digit PIN you agree to the data transmission. You may also choose to exclude certain data from transmission. The ID card chip will verify the online shop s authorisation certificate. The data you agreed to transmit will then be encrypted and transmitted to the online shop. The online shop s system will then check whether your ID card is valid and not blocked. The online shop receives your data. Usually you will be able to view them once again. As before, the purchase is concluded by a separate action of consent, e.g. the Send order button

8 Reader and software To use the online function with your own computer you will need a reader and driver software. Reader The reader retrieves the selected data from the chip and transmits them to the provider after the cardholder enters the sixdigit PIN. The Federal Office for Information Security (BSI) recommends using certified readers with the ID card logo. There are different types of readers: Standard and deluxe readers with a separate keyboard for entering the PIN. Deluxe readers are necessary to use the signature function. Basic readers where the PIN is entered via the computer or on-screen keyboard. The PIN letter The procedure is similar to that of cash and credit cards: after applying for the ID card, the applicant receives a PIN letter with a five-digit activation PIN, the PUK and a blocking code to use the online function. Changing the activation PIN to the personal PIN The five-digit activation PIN (or transport PIN) must be replaced with a personal six-digit PIN before using the online function for the first time, either by using a reader at home or at the ID card authority (free of charge when collecting the ID card). The online function cannot be used without a personal six-digit PIN. PUK The online function is blocked if the personal PIN was entered incorrectly three times in a row. It can be unblocked by entering the PUK. Blocking code The blocking code is used when the ID card is lost and the online function must be blocked (see page 18). Software The software, e.g. the AusweisApp ID card application, is used to connect the ID card to the computer and exchange encrypted data through the reader. The AusweisApp can be downloaded free of charge at

9 The signature function The qualified electronic signature is used to sign legally binding contracts or documents, as well as statements and applications which must be filed with public authorities in writing to be legally binding. The electronic signature replaces the handwritten signature. It can also be used to verify whether documents have been changed after they have been electronically signed. Unlike the online function, the signature function can be used to make legally binding declarations of intent, e.g. to conclude contracts or provide an authorisation. Signature certificate and deluxe reader A signature certificate, a signature PIN and a deluxe reader with PIN keyboard are required to use the new ID card s signature function. A signature certificate can be obtained from a certificate service provider and uploaded to the ID card (see Data protection, security and control The new ID card offers maximum security of personal data and full control over data transmission. Unlike simple radio chips used on key cards and ski passes, for example, the ID card does not send the data stored on its chip to any arbitrary reading device. Before transmitting data, the chip verifies whether the requesting provider or authority is authorised to read these data, which data should be transmitted and whether the cardholder agreed to data transmission. Data are encrypted for each transmission. All information and transmissions are protected through recognised and established international technical procedures. Moreover, despite its radio chip the ID card must be physically in contact with the reader so that data cannot be read from a remote position. This ensures greater security, in particular on the Internet: only persons holding the ID card and knowing the PIN can authorise the transmission of data. Cardholders retain full control and know at all times to whom they are revealing their identity since each provider must be officially authorised. Ultimately, it is the cardholder who decides whether to transmit data and to whom

10 If your ID card is lost 24-hour reporting hotline +49 (0) (3.9 ct/minute from German landlines, max. 42 ct/minute from mobile phones) When an ID card with activated online function is stolen or lost, the online function must be blocked as quickly as possible. This can be done in your local government services office or via the 24-hour reporting hotline +49 (0) (3.9 ct/ minute from German landlines, max. 42 ct/minute from mobile phones, also available from abroad). To block the online function, cardholders will be asked to provide their family name, given name, date of birth and the blocking code. This information can be found in the PIN letter. Further information is available at verlustfall. Please note: Cardholders are obliged to report lost ID cards, with or without online function, to the responsible identity card authority. Blocking the signature function If the ID card s electronic signature is used, the certificate must be blocked separately by the respective provider

11 Safe use of the new functions Please take care of your new ID card and its new functions in the same way as you would care for your cash or credit card by applying the following rules: Always keep your ID card safe. Do not leave it unattended where others may access it. Do not reveal your PIN to anyone. If you write down or record your PIN, you should never keep it with your ID card, e.g. in your purse. Never write the PIN on your card. If you lose your ID card you must block the online function, if activated, as quickly as possible. This can be done by your identity card authority or the 24-hour reporting hotline (see page 18). Please also follow the instructions for safe use of the ID card with your own computer: Regularly update your anti-virus software, firewall, operating system and software (e.g. AusweisApp). Install the providers security updates. Regularly change your PIN. Your PIN should not be a sequence of numbers that is printed on the card (e.g. the date of birth or card access number) or that can be easily guessed (e.g ). Further information Further information is available at On this website, the Federal Office for Information Security (BSI) provides information about risks on the Internet and tips for using the Internet safely

12 Answers to your questions Will old ID cards remain valid? Old ID cards remain valid until they expire. However, the old ID card can be exchanged for the new card at any time. What are the requirements for the photograph? Photographs must show full frontal view, not half-profile. The face must be centred within the frame. The eyes must be open, the mouth shut and the facial expression neutral. Further information is available at fotomustertafel. What are fingerprints used for? Applicants may choose to store two fingerprints on the ID card chip as an additional security feature. The fingerprints are not stored in registers or databases, and may be used only by public authorities such as the police, customs administration, passport and identity card authorities, and registration authorities to verify the ID card s authenticity and the cardholder s identity. What if the ID card is stolen or lost? See page 18. Will I have to apply for a new ID card when moving house? After relocation, local government services offices change the address on the ID card free of charge by updating the data on the chip and applying a sticker with the new address on the back of the ID card. Fees ID card application fees as at 1 November 2010 Applicant aged 24 and over Applicant aged under 24 Temporary ID card Other fees First activation of the online function when issuing the card or upon reaching age 16 Later activation of the online function Deactivating the online function Changing the PIN at the card issuing office (e.g. PIN forgotten)* Changing the address after moving house Blocking the online function when the card is lost Unblocking the online function Electronic signature certificate euros (valid for 10 years) euros (valid for 6 years) 10 euros free of charge 6 euros free of charge 6 euros free of charge free of charge 6 euros as determined by the provider * Cardholders may change their PIN at any time using their own card reader

13 Passports in a nutshell E-passport (electronic passport) Who can obtain the passport? As a rule, all persons over 12. Upon request, an e-passport may be issued also to children under 12. However, no fingerprints are taken for children under six. Which documents must be presented with the application? A recent photograph and a valid identity document (e.g. old passport or identity card for first-time applications, child passport, child identity card or birth certificate). Photograph and fingerprints Photograph: see page 8. Further information is available at Fingerprints: two fingerprints are captured when applying for the e-passport. Fingerprints are stored only on the passport, not in registers or databases. They can be retrieved only by public authorities. Fees and validity Passports issued to persons over 24 cost 59 euros (valid for ten years) and euros for persons under 24 (valid for six years)

14 Passports in a nutshell Temporary passport Who can obtain the passport? A temporary passport is issued only in individual cases, for example if a passport is needed immediately and a regular passport cannot be issued before it is needed for the first time. Which documents must be presented with the application? A recent photograph and a valid identity document (e.g. old passport or identity card, child passport, child identity card or birth certificate). Passport agencies may require documents such as airline tickets for an imminent journey to prove the immediate need. Photograph requirements See page 8. Further information is available at Fees and validity 26 euros (valid for one year). Please note: The temporary passport cannot be used for visa-free travel to the United States of America

15 Passports in a nutshell Child passport Who can obtain the passport? Children under 12. Which documents must be presented with the application? A recent photograph and a valid identity document (e.g. old child passport, child identity card or birth certificate and consent from both legal guardians or, if there is only one legal guardian, that person has to present proof of the right of custody). Photograph requirements See page 8. Further information is available at Fees and validity 13 euros (valid for six years) and six euros for extending validity (up to the twelfth birthday). Special note As of 1 January 2006 the former child passport is no longer issued or renewed. As of 1 November 2007 children can no longer be endorsed on their parents passport. However, it will be possible to apply for a child identity card (e.g. for travelling within the EU). Please note: The child passport cannot be used for visa-free travel to the United States of America

16 Information service and reporting hotline The information service (from Monday through Friday from 7 a.m. to 8 p.m. CET) and the 24-hour reporting hotline are available on +49 (0) (3.9 ct/minute from German landlines, max. 42 ct/minute from mobile phones, also available from abroad). Further information is available at buergerservice. Mail order This brochure may be ordered free of charge from: Publikationsversand der Bundesregierung Postfach // Rostock Phone: +49 (0) // Fax: +49 (0) publikationen@bundesregierung.de Article No.: BMI10004 Personal data provided when ordering the publication will be deleted upon delivery. This brochure has been published free of charge as part of the public information work of the Federal Ministry of the Interior. It may not be used by any political party, candidate or campaign workers during an election campaign for purposes of campaign advertising. This applies to elections at the European, federal, state and local levels. In particular, distributing this publication at campaign events or at information stands of political parties, or inserting, stamping or attaching to it any political information or advertising constitutes misuse. Nor may it be passed on to third parties for purposes of campaign advertising. Regardless of when, by what means and in what quantities this publication was delivered to the recipient, even without reference to any upcoming election, it may not be used in a manner that could be construed as bias by the Federal Government on behalf of any individual political group

17 Published by Bundesministerium des Innern // Berlin Organisation: Federal Ministry of the Interior English translation by Translation Service of the Federal Ministry of the Interior // 5th edition // Last update: November 2010 Photo credits Federal Ministry of the Interior