On 1/16/2024 7:44 PM, John Levine wrote:
It appears that Michael StJohns <mstjohns@xxxxxxxxxxx> said:
On 1/16/2024 6:02 PM, Ole Jacobsen wrote:
The app is fairly easy to use although I had some issue getting it to read
my passport photo page, but it eventually read the chip instead via NFC.
The scan of your passport page is used to gather data derive a key to
read the chip, rather than for the purpose of data gathering about you.
You are always going to have to do both.
The photo page has a bunch of text at the bottom intended for OCR. I
have checked in to fligts with apps that take a picture of the photo
page and read that text. The info in the NFC chip is a superset of
that OCR text, including a digitized picture, so it's not obvious why
it even looks at the photo page.
R's,
John
cf "PACE" or "BAC" protocols. For the NFC chip, various "sensitive"
data - including your photo and things like your fingerprints - on the
NFC chip can't be read without the key. There is some generic and type
identifier data for the chip and passport that can be read without the
key and is generally non-sensitive.
See section 4.2 of
https://www.icao.int/publications/documents/9303_p11_cons_en.pdf - the
MRZ referred to here is the OCR text on the photo page. This section
depends on knowledge of the ISO7816 family of protocols to exchange
APDUs with the travel document.
eMRTD is "Electronic Machine Readable Travel Document".
Enjoy - Mike
