ADSS ePassport Server
Ascertia’s ADSS ePassport Server provides countries with everything they need to deliver a standards compliant PKI to support passport issuance and to authenticate terminals at border control.
Based on the Ascertia’s ADSS Server platform, the ADSS ePassport Server is easily deployed into a new or existing ePassport architecture and can provide a world class signing platform for the protection of ePassport holder information.
The solution delivers all of the key components required to deploy into a new or existing ePassport architecture for issuing, protecting and automatically validating ePassports. It also includes a SDK that enables border control to inspect ePassports. Service modules include:
National Public Key Directory (NPKD)
Master List Signer (MLS)
Country Signing Certification Authority (CSCA)
Country Verifying CA (CVCA)
Document Verifier (DV)
Single Point of Contact CA (SPOC CA)
These enable border control to securely collect, check and distribute all cryptographic materials needed to validate a passport.
ADSS ePassport Server also provides the key components to deliver electronic security to machine-readable travel documents (MRTD) – the International Civil Aviation Organization (ICAO) and the European Union introduced standards to provide security to these documents and this has helped to deliver superior border security to countries globally
FEATURES & BENEFITS
ICAO Compliant Document Signing
ADSS ePassport Document Signing Service is a comprehensive solution for creating and verifying advanced digital signatures, when deployed in an ePassport deployment the service provides a high-power signing platform that can easily be integrated into the ePassport personalisation process.
Diverse Architecture Support
Ascertia ADSS Passport PKI Server supports both X.509 and Card Verifiable ISO 7816 certificates, this enables the broadest support for governments looking to roll out new ePassports to citizens as well as using Ascertia ADSS ePassport PKI Server to migrate their existing ePassport PKI to Ascertia.
Depending on your architectural requirements the Ascertia ADSS ePassport Server can be deployed as a standalone:
Country Signing Certification Authority (CSCA)
Country Verifying CA (CVCA)
Document Verifier (DV)
Single Point of Contact CA (SPOC CA)
Due to the flexible nature of the Ascertia product, countries can also combine the roles of their ADSS ePassport PKI Server, this helps reduce the total number of servers installed within a deployment and reduces the cost and complexity of a solution, the following are examples of where ePassport roles could be combined:
Country Signing Certification Authority (CSCA) & Country Verifying CA (CVCA)
Country Signing Certification Authority (CSCA) & Single Point of Contact CA (SPOC CA)
Document Verifier (DV) & Single Point of Contact CA (SPOC CA)
Standards based Communication Protocols
Full compliance with:
ICAO 9303 7th Edition Part 12 for Basic Access Control
BSI TR-03139 v2.2 for Extended Access Control
BSI TR-03129
BSI TR-03110
CSN 36 9791
Ascertia’s ADSS ePassport Server has service module to be deployed as a Country Signing Certification Authority (CSCA)
Country Verifying CA (CVCA)
Document Verifier (DV)
The Single Point of Contact (SPOC) service module enables countries to securely exchange certificates and certificate requests automatically for their Extended Access Control (EAC) PKI with their international counterparts to enable secure and authorised access to citizen biometrics stored within the ePassport.
Document Signing
Ascertia’s ADSS ePassport Server provides an ICAO compliant ePassport document signing server. Delivered as a commercial off the shelf product, ADSS ePassport Sever provides countries with a highly scalable and secure signing solution.
We enable our customers to digitally sign & protect documents & transactions, helping them to streamline business processes and provide trusted identity assurance
We enable our customers to digitally sign & protect documents & transactions, helping them to streamline business processes and provide trusted identity assurance
USE CASES
Everything you need to get started
LeasePlan chose ADSS Server because it exactly met our business and technical requirements. We found we could easily download ADSS Server and all its integration components from Ascertia’s website and the installation and configuration went very smoothly.
Hugo De herdt
LeasePlan Belgium