Looking through the Estonian ID card PIN security envelopes

Organization
Image processing, machine learning
Abstract
The Estonian ID card is issued to cardholders along with a closed security envelope, which contains the PIN codes used to authorize cryptographic operations of the ID card.

Over the 20 years of the Estonian ID card, we have experienced two incidents where it was discovered that the security envelope holding the PIN codes did not meet the security requirements – the PIN codes were clearly visible through the enclosed envelope by holding it under a lamp.

The latest issue was solved by printing the PIN codes in a lighter color. However, since the obfuscation pattern used by the envelopes is deterministic, it is possible that the PIN codes could still be seen through the envelope when some advanced image processing and machine learning methods are applied.

The task of this project is to:
- study the best practices in security envelope printing;
- analyze the current security envelopes of the ID card;
- experiment with various image processing methods to see through the PIN envelope.

Links:
Section "6.11 Transparent PIN envelopes" in: https://cybersec.ee/storage/phd_idcard.pdf
Graduation Theses defence year
2021-2022
Supervisor
Arnis Parsovs
Spoken language (s)
English
Requirements for candidates
Level
Bachelor, Masters
Keywords
#acs

Application of contact

 
Name
Arnis Parsovs
Phone
E-mail
arnis@ut.ee
See more
https://acs.cs.ut.ee/