Copyright 次世代 IC カードシステム研究会 C 1 Nagaaki OHYAMA Tokyo Institute of Technology Chair of NICSS National ID card in Japan May Provoo (Reykjavik, Iceland)

Copyright 次世代 IC カードシステム研究会 C 2 Status of e-Japan strategy The current e-Japan strategy will be ended by the end of March 2006 IT strategic head quarter is drafting the next policy paper –e-Japan strategy, 2001  construction of broad band infrastructure –e-Japan strategy, 2003  full use of IT infrastructure –e-Japan strategy, 2006  creation of value Japan is moving to the promotion of advanced applications under government initiative  Healthcare and e-Government Realization of secure and convenient IT society  Smart card is well recognized as a key device for security

Copyright 次世代 IC カードシステム研究会 C 3 Considerations on personal ID Following documents are conventionally used for ID in general 1.Certificate of resident registration to prove the current address for individual 2.Certificate of family registration 3.Driver license 4.Health insurance certificate Either resident or family/both registration certificate has been used for administrative procedures –For coming IT society Resident Registration Card was intended to replace the resident registration certificate –Resident Registration Card together with the personal authentication (digital signature) service is being issued by local government

Copyright 次世代 IC カードシステム研究会 C 4 Resident Registration Card (Res. Reg. Card) Resident registration law –This law, originally established in 1967, was revised in 1999 and became effective from 5, Aug –By this regulation every local government started to issue resident ID card form 25, Aug –This card is completely voluntary not compulsory. –This card is a primary card, which enables the cardholder to receive e-government services in the cyberspace. –This card could be also used by other applications under the condition that the applications are pointed out in each local government or municipal law.

Copyright 次世代 IC カードシステム研究会 C 5 Personal authentication Service –By personal authentication law, all local governments started RA service to the residents from 29, Jan., –This service is voluntary not compulsory. –Revised regulation is under discussion in the parliament –500 yen for 3 years –Because of the security of the secret key, this regulation enforces the use of smart card; initially Res. Reg. Card. –Reader for contact interface is commercially available at the cost around 20US$ and contact-less is around 100US$. –PC supporting Smart card Reader will be procured in a couple of years by Japanese central government Personal authentication Service is done for electric declaration of TAX, health insurance, and passport by PC

Copyright 次世代 IC カードシステム研究会 C 6 Res. Reg. Card Mutual authentication between CS (Communication Server) and Smart card through asymmetric encryption Password will be set depending upon applications Terminal of CS Auth. key-A Auth. lock-B Password Auth. Lock-A Auth. Key-B Reg. ID number Res. Reg. application. Res. Reg. card Dig. Sign Payment Healthcare Mutual auth. by digital signature Local Gov. service counter Resident RSA 1024bits Personal Auth.

Copyright 次世代 IC カードシステム研究会 C 7 Status of Res. Reg. Card Promotion of the Res. Reg. cards –The number of Res. Reg. Card is much less than expected, about 450,000 since Aug., 2003, because it is not convenient enough at this moment; common applications are eID and digital signature ⇒ Additional applications are strongly needed; healthcare and payment etc. –All e-government services should be completed by one card Schedule –Almost of 100% e-Government services will be launched by the end of March, –Local e-Government services will be also launched within 5 years  Res. Reg. Card is defined as an indispensable device for a realization of secure and convenient e-Government

Copyright 次世代 IC カードシステム研究会 C 8 Status of Japanese e-Passport e-Passport will be launched from March, 2006 –The current ICAO specification needs more discussion In the first phase, 2 years after the initial issuance, chip will be locked according to the ICAO specifications. For e-Visa and additional convenience, chip should support multi- applications. –Pilot test with Japanese relevant ministries’ collaboration is being carried out from February –Japanese government would like to keep an open market in this field, and this principle will be supported by Asia IC card forum (AICF).

Copyright 次世代 IC カードシステム研究会 C 9 Considerations on eID Basic requirement –Could be used as an official ID in both real and cyber spaces  Smart card Candidates –Res. Reg. Card with facial image –Social security card Healthcare insurance, Welfare, Labor insurance etc. Paper base document at present Use of multi-application IC card Relevant regulations must be revised  it takes rather long time

Copyright 次世代 IC カードシステム研究会 C 10 New era of Res. Reg. Card Official discussion will be started from June, 2006 Hopefully resolve to revise the current regulation within this year Discussion items –Facial image printed on the card; optional to mandatory –Same ID function as e-Passport Could be used at boarder control  Singapore, South Korea and preferably EU –Social security: health insurance, national pension, labor insurance, welfare etc. –Payment; optional

Copyright 次世代 IC カードシステム研究会 C 11 Concluding remarks –Smart Card and secure IC chip are the key technologies for secure environment in both real and cyber spaces –Japanese government is promoting the popularization of smart cards –Res. Reg. Card will proceed into the new era –e-Passport will soon realize the interoperability of ID function internationally  eID becomes easy to harmonize at the international level –We have to consider the next step where smart cards become an infrastructure like the internet and mobile phone