The US State Department is on track to start issuing RFID (radio frequency identification) chipped passports this week, despite warnings from some security experts that such systems could be accessed or tracked by hackers.
The programme will start in the Denver passport office and be rolled out across the country over the next few years. All American passports are expected to include RFID chips containing personal information by 2017.
State Department personnel have successfully tested the electronic passports over the past year, said Frank Moss, deputy assistant secretary for passport services.
Moss contended that electronic passports improve security by making it harder to forge or alter official documents. All personal information on the chip must precisely match that in the printed portion of the electronic passport. "In the past, it could have been possible to put a new photo inside [a stolen passport] or find someone who looks like the holder," Moss said.
Additionally, if an electronic passport is stolen, the chip has a unique identifying number that can be tracked by law enforcement agencies worldwide, he said.
Moss said that extra memory space on the RFID chip may be used in the future to store biometric information such as a fingerprint image. However, he said no decision has yet been made on how to use the extra storage space.
Some security experts have expressed concern over the use of a contact-less chip that doesn't require contact with a scanner. The new passport can be read about four inches from a scanner.
Given the fast pace of technology changes, and the 10-year life of a passport, it's inevitable that the RFID chip will become hackable and that technology will be built to access it from long distances, said Bruce Schneier, CTO of Contact Counterpane Internet Security, based in Mountain View, California. The new passport could eventually allow for surreptitious access and tracking, he said.
Schneier contended that the State Department could have used an RFID chip that requires contact with a reader. "I can think of no benefit for a contact-less chip," he said. "The question is, if there is no good reason for RFID, why are they pushing so hard for it?"