On Wednesday, GD Burti, the Brazilian subsidiary of international technology group Giesecke & Devrient (G&D), announced that it is the only manufacturer of national security documents to meet the security requirements for the new Brazilian eID cards.
The high-security RIC (Registry of Civil Identity) cards have been granted certification by Instituto Nacional de Tecnologia da Informação, Brazil's foremost IT authority. GD Burti (Rio de Janeiro, Brazil) has already delivered more than one million RIC cards as part of an initial pilot project. RIC cards store biometric data and will make it easier for Brazilian nationals to visit other Mercosur treaty states, says the company.
The new RIC card meets the Brazilian government's standards for its national ID cards – which must contain an eID application as well as a match-on-card solution for fingerprints – thus enabling unambiguous identification of individuals: state authorities such as the police will be able to scan a person's fingerprints using a portable device and compare them with those stored on the person's ID card.
Additional security is ensured by Public Key Infrastructure (PKI), which guarantees the authenticity of the data stored on the chip. The RIC card enables each Brazilian citizen to be registered under a single number valid nationwide. That eliminates one of the biggest security risks of the country's current ID documents, which require multiple registrations in the various federal states under different registration numbers, says GD Burti.
The RIC card is a hybrid card containing both a contact-based and a contactless module. The latter comprises a travel application that complies with the standards of the International Civil Aviation Organization (ICAO) and will facilitate travel between the Mercosur treaty states. Both a photographic image of the ID holder and the holder's fingerprints are stored on the RIC card.
According to the company, a variety of optical and electrical security features protect the RIC card against forgery and enable citizens to verify a card's authenticity quickly. These include integrated kinegrams, guilloches and other optical elements such as microtext or rainbow print.
GD Burti is currently the only card manufacturer to be granted the ITI certification, which it received in February of this year. The standards of Brazil's top IT authority, Instituto Nacional de Tecnologia da Informação, are comparable with FIPS, the Federal Information Processing Standard formulated by the U.S. National Institute of Standards and Technology.
As from June 2012, the ITI certification will be mandatory in Brazil for all new national eID documents with PKI signature functionality.