ePass PKI

Secures ePassport production and inspection with standards-compliant PKI modules for sovereign travel-document programs.

Overview

ePass PKI for electronic and biometric passport security

Eviden ePass PKI is a software suite covering all aspects of ePassport security, from secure production of sovereign electronic travel documents to implementation of trusted digital identities for inspection terminals so biometric data can be read out. Electronic and biometric passports require high protection for both document authenticity and controlled access to sensitive personal data. 

The product architecture includes standards-based software modules for BAC/SAC and EAC scenarios and for international interoperability schemes, allowing customers to deploy ePassport production and inspection projects with confidence using compliant and future-proof PKI products.

Key capabilities

  • Secure ePassport production PKI modules
  • Inspection-terminal identity for biometric-data access
  • Standards-compliant BAC/SAC and EAC support
  • Interoperability through PKD and SPOC schemes
  • Dedicated CA and signer/verifier role modules.
     

PKI software suite for sovereign ePassport production, inspection, and interoperability, with standards-based CA, signer, verifier, and exchange modules.

Key Features

What sets ePass PKI apart

Defense Digital DNA icon

End-to-end ePassport PKI coverage

  • Covers secure production of sovereign electronic travel documents and trusted digital identities for inspection terminals.
  • The product page explicitly states coverage from secure production to implementation of trusted digital identities for inspection terminals (IS) to read out biometric data.
     
Defense sovereign icon

Standards-based sovereign PKI modules

  • Provides all software modules required for PKI systems specified by major ePassport security frameworks.
  • The page says the suite provides all necessary software modules to implement ICAO 9303 and EU TR 03110 Part 1 specified and standardized PKI systems.
     
Defense operational readiness icon

International interoperability support

  • Includes interoperability modules aligned to cross-border ePassport trust and certificate exchange requirements.
  • The architecture section explicitly references the international interoperability schemes PKD and SPOC.

     

Benefits

Unified identity governance

S

Stronger sovereign document protection

Helps protect document authenticity and controlled access to sensitive personal data in electronic and biometric passports.

M

More confident project deployment

The product page states customers can deploy ePassport production and inspection projects with confidence using compliant and future-proof PKI products.

B

Better international interoperability alignment

Built-in PKD and SPOC interoperability modules support alignment with stringent international standards and exchange schemes.

Why Eviden

Why choose Eviden?

Key differentiators

  • Combines production-chain PKI and inspection-terminal PKI in one suite
  • Implements both BAC/SAC and EAC-oriented module sets
  • Explicit support for international ePassport interoperability schemes PKD and SPOC.
     

Optional proof

Standards leadership: Product page explicitly references ICAO Doc9303 and EU TR 03110
Interoperability proof: Product page explicitly references PKD and SPOC.
 

Proof & Evidence

  • Compliance: The product page states compliance with stringent international standards and references ICAO Doc9303 and EU TR 03110 frameworks.

Architecture and integration

Deployment model: Software suite with standards-based PKI modules for sovereign ePassport production and inspection environments

Key integrations:

  • Production chain via Document Signer (DS) signature server
  • ICAO Public Key Directory via National PKD (N-PKD) module
  • Inspection terminals via inspection-system certificates (IS)
  • Other SPOC environments via SPOC certificate exchange
  • Standards supported: ICAO Doc9303, EU TR 03110 Part 1, PKD, SPOC, BAC/SAC, EAC
  • BAC/SAC module set: Country Signing Certification Authority (CSCA), Offline Root CA issuing DS certificates, Document Signer (DS), National PKD (N-PKD)
  • EAC module set: Country Verifying Certification Authority (CVCA), Offline Root CA issuing DVCA certificates, Document Verifier Certification Authority (DVCA), Single Point of Contact (SPOC)
     

FAQ

Frequently asked questions

Eviden ePass PKI is a software suite that secures the full ePassport lifecycle, from secure production of electronic travel documents to trusted digital identities for inspection terminals that access biometric data.

The solution is designed in line with ICAO Doc 9303 and EU TR-03110 standards and supports international interoperability through the ICAO Public Key Directory (PKD) and the Single Point of Contact (SPOC) framework.

Key modules include CSCA, Document Signer (DS), National PKD (N-PKD), CVCA, DVCA, and SPOC. These components manage document signing, certificate issuance, public key exchange, and secure terminal authentication.

The suite enables Basic Access Control (BAC), Supplemental Access Control (SAC), and Extended Access Control (EAC), ensuring that only authorized inspection systems can access sensitive biometric information stored in ePassports.

Solution

ePass PKI Solution

Electronic and biometric passports are critical sovereign travel documents and require a very high level of protection to guarantee both document authenticity and controlled access to sensitive personal data of the holder. ePass PKI is a PKI suite covering all aspects of ePassport security and complies to stringent international standards including interoperability schemes.

ePass PKI is a software suite which covers all aspects of ePassport security, from secure production of sovereign electronic travel documents to implementation of trusted digital identities for inspection terminals (IS).
An important place is also given to the interoperability modules, which are fully compliant to stringent international standards.

Eviden ePAss PKI - factsheet

Interested in ePass PKI

Speak with an expert