1. Catalogs
  2. secunet Security Networks AG
  3. secunet Success Story PKI
video corpo

secunet Success Story PKI

secunet Success Story PKI

secunet Success Story PKI

Product catalog summary
Introduction
The document discusses the implementation of the secunet eID PKI Suite by the German Federal Police to enhance border control through the verification of EAC1- and EAC2-protected ID documents. This system ensures secure and efficient processing of electronic identity documents at border control points.

Challenge
The growing demand for smart documents like ePassports and ID cards necessitates robust inspection systems to access data securely. The German Federal Police required a reliable document verification process with PKI at its core to meet increasing control demands.

Facts and Figures
secunet provided services including central server infrastructure, system integration, software development, user training, and interfaces for European member states. Technologies used include Linux, TLS, Oracle, Java, XML, and more.

Requirements
The German Federal Police needed a system integrated into an existing authentication scheme, compliant with BSI and EU policies, and capable of maintaining updated master and defect lists for document verification.

Solution
secunet developed a border control application that includes Document Verifier Certificate Authorities (DVCA) and Terminal Control Centre (TCC) for cryptographic functions. The system ensures secure communication and key management, with secret keys stored in a hardware security module (HSM).

Implementation
The system, operational since 2011, runs on a clustered Linux platform integrated into the existing IT infrastructure, ensuring reliability and security. It supports over a million border crossings annually, detects forged documents, and requires minimal user interaction.

Success
The PKI solution connects border control posts across Germany, ensuring secure access to EAC-protected data. It complies with national and international standards, providing a reliable backbone for eID document control.

Conclusion
secunet's implementation has strengthened the German Federal Police's ability to verify legitimate eID documents, enhancing national security and border control efficiency.
See more

Catalog excerpts

secunet Success Story PKI-1

Central PKI: Confidence and Trust at the Border Successstory: secunet eID PKI Suite enables the German Federal Police to check EAC1- and EAC2-protected ID documents at border control points

 Open the catalog to page 1
secunet Success Story PKI-2

Indispensible: checking the electronic part of the passport Due to the increasing demands on the control process, a reliable document verification with PKI as the core of this process is required. Challenge The demand for smart documents is growing. This opens the door for border authorities to benefit The high-tech eID documents such as ePassports from the full potential of electronic documents. or the German ID card (nPA) for example are For example, it enables them to reliably check leading the way in deploying robust technical each passenger’s ePassport in seconds, while all measures that...

 Open the catalog to page 2
secunet Success Story PKI-3

Client Sector: PKI ensures efficient and secure document verification when crossing the border Government / law enforcement Organisation: The German Federal Police (Bundespolizei) and its approximately 45,000 employees are assigned to the Federal Ministry of the Interior in Berlin. They are acknowledged as a vital part of the country’s national security system. Border protection, railway policing and aviation security belong to the Federal Police forces‘ core tasks. Requirements Facts and Figures secunet supplied a number of services including: ■ the provision of central server infrastructure...

 Open the catalog to page 3
secunet Success Story PKI-4

Solution Because secunet had recently implemented the ■ At the heart of secunet’s offering is the provision An authorised inspection system (IS) needs to gain TCC for the BSI, it was well positioned to develop access to the data stored in the eID document. To prove a border control application to read and verify (DVCA) to generate the digital certificates, that the IS is authorised it has to use the highly secured electronic identity documents at the German which are transmitted to the Terminal Control inspection system key that belongs to the Terminal border. The secunet experts have worked...

 Open the catalog to page 4
secunet Success Story PKI-5

“We have been success fully operating our central PKI system since 2011. Following a smooth, simple implementation, the entire system has proved itself to be incredibly efficient and reliable on a daily basis.” SPOC ICAO-PKD Mobile Border Controls Stationary Border Controls Mathias Grell, EasyPASS Project Manager, Department 54, German Federal Police Implementation A mission-critical system such as German border control needs to be ultra-reliable and highly secure, so secunet is running it on a clustered Linux 2011, secunet has been supporting the Federal Police the client’s existing IT infrastructure....

 Open the catalog to page 5
secunet Success Story PKI-6

Success secunet’s team of PKI experts ensured that the The German authorities can now be confident that existing eID document checking system was only legitimate eID documents are used to cross migrated to the new server infrastructure on time their borders. The secunet system is already prov- ing its worth by identifying fake and manipulated documents. It also authorises the IS and enables The firm’s successful implementation of a PKI solution for the German Federal Police means that data, while also guaranteeing that only authorised border control posts across the country are now connected,...

 Open the catalog to page 6
secunet Success Story PKI-7

secunet – Protecting Digital Infrastructures secunet is Germany’s leading cybersecurity company. In an increasingly connected world, the Company’s combination of products and consulting assures resilient digital infrastructures and the utmost protection for data, applications and digital identities. secunet specialises in areas with unique security requirements – such as cloud, IIoT, eGovernment and eHealth. With security solutions from secunet, com panies can maintain the highest security standards in digitisation projects and advance their digital transformation. Over 700 experts strengthen...

 Open the catalog to page 7
*Prices are pre-tax. They exclude delivery charges and customs duties and do not include additional charges for installation or activation options. Prices are indicative only and may vary by country, with changes to the cost of raw materials and exchange rates.