Prague08

ePassports EAC Conformity & Interoperability Tests
Prague, September 7th - 12th 2008

Cross Over Tests

1 Overview

The Cross Over tests provides an opportunity for border control systems providers to try out their readers with a wide number of passports, with different implementations or options within the EAC Specification. The tests also provide an opportunity for States and passport providers to check the behaviour of their passports against wide range of different border control systems.  

2 Place and Date of Cross Over Tests

Conformity tests will take place on the 3rd floor of Prague Congress Centre, South Hall. Testing will be run from September 7th to September 12th 2008.

Prague Congress Centre  Prague Congress Centre plan

3 Participants

The Cross Over test event is open to several types of organisations:

Please note that participation is subject to the agreement of the organizers on behalf of the BIG, based on the fulfilment of the requirements listed in the next section. If a non compliance is detected during the registration process, the participant may be rejected or accepted but without having its results taken into account in the official results, depending on the level of non-compliance. The number of participants is limited to 2 persons per provider due to the room dedicated for the tests.

4 Requirements

4.1 Passport samples

For the purpose of the Cross Over tests each passport provider can deliver two types of passports – each type as a set of 6 identical samples, in terms of::

Note that the passport numbers should be different.

Samples must be fully EAC compliant. This means that Chip Authentication and Terminal Authentication must both be supported by the chip. Only version 1.11 of EAC is accepted.

Both types of EAC ePassports must include different chips or OS from each other

The providers or state is allowed to present one set of passports for each type. They can use following data sets::

Both data sets will be used for the cross over test.

The samples must respect the EU specifications in terms of functionality and personalization (including recommended size for biometrics). Optional data groups (DG11, DG12…) may be included.

All samples must have a readable MRZ (OCR reading). Preferably, samples should be the standard ICAO booklet format. Cards are accepted only if they are ID-3 size and have a readable MRZ.

The following certificates and private keys must be provided for each set of samples. The filename format must be respected. The following certificates shall be sent by providers in advance during the pre-registration process together with the registration form.

Element File name
CSCA certificate NN_CSCA (.der, .cer)
DS certificate NN_DS (.der, .cer) preferably included in the chip
CVCA certificate NN_CVCA.cvcert (not mandatory)
CVCA private key under PKCS#8 format NN_CVCA.pkcs8 (not mandatory)
DV certificate NN_DVCA.cvcert
IS certificate NN_IS.cvcert
IS private key under PKCS#8 format NN_IS.pkcs8

"NN" will be changed with the set id at registration.

4.2 Border Control software

Only border control systems that fully support EAC are accepted. This means that Chip Authentication and Terminal Authentication must both be supported. Only version 1.11 of EAC is accepted.
Other mandatory features are required:

Readers may use swipe or full page OCR reader.

Detailed logs must be recorded for each official sample. The log shall contain at least:

The log file must be named BB_NNNNN_crossover.log, where BB = platform id; NNNNN = sample id.

5 Registration Process

Registration forms (available on website: www.e-passports2008.org) must be completed and sent during pre-registration process.

On Sun 7th Sept. afternoon the providers have to perform an administrative registration at the registration place. Here they will receive an id corresponding to the location in the test room where they will install their equipment.

6 Test process

The first day (Mon 8th Sept. 9-13h) the border control system providers will have time to perform PRE-TEST and debug particular configurations after an informal cross over test with a limited set of samples. Sets of passports will be prepared for that purpose. These passports will be available for all border control providers and will be provided by an Official Testers.

After that (Mon 8th Sept. afternoon), the configuration is considered as frozen.

The certificates sent by providers will be published on the website as soon as they were delivered and the final set of certificates will be available at registration for copying onto flash memory before starting.

Cross Over Tests are to be a closed session. Only Border Control providers and Official Testers will be allowed to be present during testing

During the official tests Official Testers will supply providers with samples of passports and will personally check the process of testing, collecting log files and electronic forms. Official Testers will have sets of 5 samples and ensure that all samples will be tested on all readers. The sets of samples will be available on the registration place and Official Testers will exchange them after all tests were performed.

There is a guarantee that all ePassports registered for this part of testing will be tested on all the Border Control systems.

Procedure:

The Border Control providers will have a certain amount of time to prepare their equipment with passport samples provided by Official Testers. Then the passport will be read and results will be written into the electronic form by Official Tester.

It is planned for the tests to be finished on Thursday 10th Sept. at 13 hours. After that the results will be processed and they will be presented and discussed in the morning on Fri 11th Sept.

Time schedule – Cross Over Test

7th September 12h -> 18h Registration of the border control systems
Registration of the passports
8th September 9h -> 13h



13h -> 18h
PRE TEST session. The idea here is to make a test to check potential non compliance and to allow the providers to tune their products.
Certificates are released.
No acceptance made.
At the end of this stage, each product has to be frozen in a single configuration which will be accepted by the Official Testers.
Official Test
Official Testers act
9th September 9h -> 18h Official Test
Official Testers act
10th September 9h -> 18h Official Test
Official Testers act
11th September 9h -> 13h
13h -> 18h
Official Test
Official Testers act
Results processing
12th September 9th - > 12h Presentation of results and discussion, returning passports

In case of organisational problems everyone can address Organisational Committee