Hong Kong SMARTICS

A secure smart identity card solution

  • slide

The Summary

PROJECT DETAILS

A highly secure, multi-application smart ID card system using MULTOS technology to enhance personal data protection.

  • Client

    HKSAR Government

  • Category

    Government & Identity

  • Website

    gov.hk

  • Country

    Hong Kong

Download PDF

In 2001 the Hong Kong SAR Government announced a plan to revamp the ID Card System, using the latest advancements in identification technology, based around highly secure multiapplication smart cards and biometrics.

The HKSAR Government embarked on the Smart Identity Card (SMARTICS) project with the key objectives to:

  • Stop identity theft by providing ultimate security and privacy for citizens’ personal data

  • Minimize illegal immigration and illegal use of various social and work entitlements

  • Put in place key enabling technology for online services requiring trusted ID and secure authentication

Who We Are

Multos International is a leading implementer of MULTOS technology. We offer a complete range of contact, contactless and dual interface products, on many EEPROM sizes. Applications spanning the Banking, Govt/ID and Transit market sectors have been introduced on our products. Furthermore, any application, be it existing or proposed, can be developed for the MULTOS or MULTOS step/one platforms.

Our products have been used in numerous security sensitive projects, in a broad mix of issuing environments and supply chain configurations. With Operations personnel and Technical Support staff located around the world, we are fully capable of providing MULTOS products and ancillary services that form the basis of a successful smartcard-based solution. Contact us at info@multosinternational.com to see how MULTOS or MULTOS step/one fits your needs.

Key Requirements

Functional
The Hong Kong SAR Government required a card that could provide:

  • Secure Proof of Identity

  • Proof of Entitlement

  • Secure Access to On-Line E-Govt Services

  • Addition of new services

Security

The sensitive nature of the personal information stored on the card, and the risk of identity theft that exposure of that data would cause, demanded the highest levels of security.

Flexibilty

Hong Kong SAR Government has been globally recognized for its innovative and advanced e- Government program — over 1200 e-services are offered online by over 50 Government departments and agencies, representing almost 90% of all Government services that can be offered in an online format.

Flexibility was required of the solution to ensure that it would be able to match future requirements.

The Solution

MULTOS was chosen as the smartcard platform for this critical project because of its outstanding match to the requirements.

MULTOS is a true multiapplication smartcard platform.
Low OS overheads and compact applications maximise the space available for multiple applications.

Highest levels of security.
MULTOS platform has achieved ITSEC E6 (high) security evaluation. This covers application and data firewalls and the loading and deleting of applications – thus allowing multiple applications to reside on a single card

Issuer centric model
for controlling the card enablement and applications on the card. A critical part of this project is the establishment of a Key Management Authority (KMA) in Turkey that will be responsible for the keys in this issuer centric model.

Full smartcard lifecycle management.
The MULTOS specification covers a complete smartcard platform, not just the OS or the APIs, but extending to card and application management. This means a complete system can be developed for the HKSAR with flexibility in the supply chain, in the applications and any future requirements can be easily managed.

Open and interoperable platform.
The MULTOS specification is open to any party and is controlled by a consortium of the industry’s leading players. Importantly, each MULTOS implementation undergoes an independent Type Approval to ensure inter-operability and compatibility to specifications.

A proven solution with low risks.
The MULTOS platform is well suited to applications requiring high levels of security (such as EMV banking and ID). Many millions of MULTOS smartcards have been deployed in projects with similarly tough requirements around the world.

Confidence

The HK SAR needed confidence of:

  • On time delivery

  • Cost effective solution

  • Surety of supply

  • Reliable performance

  • Low technical risk

The Smart Identity Card

The SMARTICS provides a truly multiapplication smartcard, with applications for:

  • Personal Details: Name, Birth date, ID number, fingerprint templates and photo

  • Storing X509 Certificates for online authentication and Private Keys for Digital Signature

  • Public Library Card

  • Booking sport & leisure activities at self-service kiosks

Implementation

The international consortium led by PCCW, the principal contractor assisting the Hong Kong Immigration Department, implemented the Smart ID Card System end-to-end solution by integrating state-of the-art components from international partners:

  • Multos International implementation of MULTOS smart card technology

  • Infineon’s 36K cryptocontroller solution

  • Trüb’s personalization systems with counterfeit-proof card body

  • Digimarc’s Photo Capturing System

  • COGENT’s fingerprint biometric technology

  • Thales’ Data Preparation hardware & software security systems

  • ACI Smart Chip Manager for card and application management

  • MULTOS Key Management System

Hong Kong residents are now using the SMARTICS to secure their access to e-Government services. They are now able to fill and lodge forms online from their smart card reader equipped home PC or from any of the 400 public kiosks.

The same enthusiastic take-up has been shown by residents for the implementation of e-channel, the SMARTICS-enabled self-service immigration clearance solution, introduced in December 2004. To perform immigration clearance the cardholder inserts the card in the reader and then presses their thumb against the biometric reader. If a positive match is made against the thumbprint templates stored on the card they are cleared to pass.

The issuance of the first Smart ID Card commenced in August 2003 and today there are over 7 million cards issued. Also, utilizing the MULTOS Technology is the Hong Kong e-Passport used by over 3 million residents for international travel.