Electronic ID Card - Min. of State Immigration/Registration Anyango

8/7/2019 Electronic ID Card - Min. of State Immigration/Registration Anyango

1/17

MINISTRY OF STATE FOR IMMIGRATION AND

REGISTRATION OF PERSONS

ELECTRONIC ID CARD A CITIZEN CENTRIC TOOL

Presented by George Anyango, Director, IPRS

A Presentation at the 3rd Annual Connected Kenya Summit

18TH 21ST APRIL 20100


2/17

PROLOGUE

The basic pre-requisite ofIdentity Management is the keyto success of most social and commercial programs.

The use of Multi-modal biometrics with smart cards hasenhanced the viability of its use for diverse applications

across the globe. The thinking today is, why not use this very important and

credible document i.e. the ID card for all applications that acitizen would need to cover most of his activities.

In Kenya, with the introduction ofIPRS and other integrated

systems, the use of E ID would go along way in addressingsecurity concerns and enhance personal and commercialtransactions across sectors.


3/17

ID CARD PROGRAMS- SOME QUESTIONS

WhileintroducingE ID programmes,thecommonquestionsaskedare:-

Should the card be a contact/contactless or a dual card?

Can we realistically achieve a ten year life of the chip and the card?

What security features (electronic or physical) should beincorporated?

What applications should the card perform?

Do we need to change the existing readers or have new readers inthe existing ATM machines/other offices?

How do we use the internet and still ensure security?

Thesearesomequestions,theremaybemore whichneedtobeanswered.


4/17

Location/area

security based on

various levels of

security

classification

Location/area

security based on

various levels of

security

classification

Use of PIN/Token

for all secure

transactions

Use of PIN/Token

for all secure

transactions

Personnel &

Vehicle access

control, based

on

Fingerprint/IRIS

and RFID

( Radio

Frequency

Identification

Device) alongwith card

authentication

Personnel &

Vehicle access

control, based

on

Fingerprint/IRIS

and RFID

( Radio

Frequency

Identification

Device) alongwith card

authentication

E-mail

Encryption/decryption

E-mail

Encryption/decryption

All events culminating in a

comprehensive self populating data

base, both centrally & at each

independent County /administrative

location with appropriate alerts

All events culminating in a

comprehensive self populating data

base, both centrally & at each

independent County /administrative

location with appropriate alerts

Wide/Lo

cal

area

Network

Security

Wide/Local

area

Network

Security

A SMART CARD WITH BIOMETRICS BEING CENTRIC TO A

COMPREHENSIVE SECURITY UMBRELLA THAT STARTS WITH:


5/17

E- ID CARD MUST REMAIN A CITIZEN CENTRIC TOOL TO HELP THE HOLDER IN

CARRYING OUT MUDANE ACTIVITIES EFFICIENTLY & CONVENIENTLY. SOME

APPLICATIONS ARE: -

Log in tool for

access to allGovernment

related

documents

Log in tool for

access to allGovernment

related

documents

Secure financial

purse for banks,

leasing agencies

etc, may

eventually

become aVisa/Master

debit Card

Secure financial

purse for banks,

leasing agencies

etc, may

eventually

become aVisa/Master

debit Card

Access or payment toclubs/sport/recreational

events, national events

etc.

Access or payment toclubs/sport/recreational

events, national events

etc.

Social Security,

pension,

poverty

Alleviation

programs

Social Security,

pension,

poverty

Alleviation

programs

LicenseArms/DrivingLicenseArms/Driving

Medicare, Health

Insurance, Personal

Health Data

Medicare, Health

Insurance, Personal

Health Data

Enterprise level access control systems including all welfare and social

activities, etc, into a single solution


6/17

THE CHALLENGES


7/17


8/17

SMART CARD CHALLENGES

ChoosingtheRightSmart Card

Choice of chip/card

Choice of Substrate material

Appellate design for each main functionality

PKI

The Certification Authority (for using certificate for

commercial activity & access all other communication

mediums) Certificates issuance and revocation procedure.

Distribution of PIN and its methodology.


9/17

THE CHALLENGES CONTD.

Securenetworkfortransferofdata

Encryption technology and its secure use on theinternet.

Integrationofallcitizencentricapplications,etc.

Integration of all hardware & software.

Integration of the ID system with allorganisations like Banks, Mobile Operators,Government Departments, Sports Organisers,Health Sector, Poverty Alleviation Programs, etc.


10/17

THE CHALLENGES CONTD.

Economicviabilityforsuchasystem Should it be done in phases?

Accesscontrol Methodology for access control & use of biometric i.e.

Fingerprint on an enterprise level i.e. Sports stadiums,sensitive locations, train/bus terminals

Vehicle access control for sensitive locations like airportterminals, VIP installations, armed forces headquartersetc with a 3 tier authentication: - Identification of vehicle, using RFID technology.

Authentication of cards of driver & passengers

Biometric authentication of the card holders.


11/17

THE NATIONAL POPULATION REGISTER THE SYSTEM

ROLL OUT PLAN


12/17

Ministryofstatefor Immigration &RegistrationofPersons

APPLICATION PROGRAM INTERFACE(API) TO

IPRS

The IPRS API allowsexternalauthorizedusers

toaccessinformationfromthe IPRS.

The datafromthe IPRSdatabaseis

transmittedthroughthe API inastandardized

formathenceeliminatingtheneedfor

alterationofthe IPRSsystem.


13/17


API CONSUMER ACCESS OPTIONS

The API providesmultipleinterfaceaccesstothe

consumersofIPRSdatathrough

Webportal MobiletelephoneSMSservice

Directinternetcommunicationinvarious

transmissionstandards


14/17


IPRS API ENTERPRISE SOLUTION


15/17

OPERATIONALIZATION CHALLENGES

Inordertorunmanyapplications, werequireterminalsatall Banks,Postoffices,Stores,LocalAdministrativeOfficesetc.

Therequirementofsmartcardreaders,computers, Fingerprintscanners,printersetc

inrollingoutacitizencentricprogram wouldbecolossal.

Thenetworkconnectivitytothecentralserverforeachindividualapplication willalsobearestrictingfactor.



16/17

CONCLUSION

Credible ID Card program should cater for all aspects ofsecurity, yet provide the privacy to the individual cardholder.

Access to data should remain at the discretion of the card

holder, and privacy /confidentiality considerations upheld. Given their technical nature, ID Card programs should seek

to integrate with other relevant systems (in our case, suchsystems as e-visa, e-border, ITMS, e-voters card systemetc). This may be a difficult task due to bureaucratic

hurdles. For the e-ID System to work effectively within the

framework of IPRS aforementioned, a broad-basedinstitutional support across sectors, particularly both theprivate and public sectors, must be in place.

This calls for an appropriate policy, legal and institutionalframework within a dynamic private-sector led economy.


17/17

THANKTHANK

YOU.YOU.

Electronic ID Card - Min. of State Immigration/Registration Anyango

Documents