Re: National Identity Card

From: S Moonesamy <sm+mu_at_elandsys.com>
Date: Sun, 20 Sep 2015 11:44:42 -0700

Hi Ish,

Thanks for writing
http://hacklog.mu/national-identity-card-pertinent-questions/

   "Apart from the four fingerprint minutiae the chip would also contain
    textual information ..."

I don't know whether the address is stored on the National identity
Card. A person who has an identity card has to notify the Civil
Status Office within 28 days of a change of residence. I guess that
someone might find this useful as it should be possible to ensure
that people do not use a "fake" [1] addresses.

The card is supposed to contain the "signature of thumbprint" of the
person and "any other information as may be prescribed". The
fingerprints might fit in the last part.

   "Say you have this Biometric ID Card which has encrypted data on
it. The data
    cannot be read unless you have the key to decrypt it."

   "It's because the bank's reader has the "key" to read yours or anybody
    else's National Identity Card."

Your explanations says that the reader contains a "decryption
key". It does not make sense to have a "decryption key" stored on
each reader. You would be creating a security problem instead of
solving one if you do that. :-)

Regards,
S. Moonesamy

1.
http://www.mumsnet.com/Talk/secondary/970370-Admissions-cheating-fake-addresses
Received on Sun Sep 20 2015 - 18:55:14 PST

This archive was generated by hypermail 2.3.0 : Sun Sep 20 2015 - 19:00:02 PST