The Technology Behind RFID Passports

01 The Chip Inside the Cover

Open a modern passport to the page bearing your photograph and look closely at the cover. Embedded within the cardboard and fabric — invisible to the eye — is a contactless smart card microprocessor no larger than a postage stamp. This chip, typically an ISO 14443-compliant integrated circuit, contains a processor capable of executing cryptographic operations, non-volatile memory holding biometric and biographic data, and an antenna coiled around its perimeter that allows it to communicate with an external reader via radio waves. The antenna is so thin that it adds no perceptible thickness to the passport, yet it is sophisticated enough to power the chip entirely from the energy of the reader's radio signal — a process called harvesting.

The chip stores a digital version of the data page: the holder's name, date of birth, nationality, passport number, expiry date, and a digitized version of the photograph. Many countries also store biometric templates — mathematical representations derived from fingerprints and iris scans, rather than the raw images themselves. These templates are compact, typically 400 to 1,000 bytes each, and are designed so that the original biometric cannot be reconstructed from the stored data. The chip also holds cryptographic keys and certificates that allow the reader to verify that the data hasn't been altered since the passport was issued.

02 RFID: The Radio Link

The technology that connects the passport chip to a border-control reader is Radio-Frequency Identification, or RFID. Unlike the RFID tags used in retail inventory or pet microchips, which operate at low frequencies (125–134 kHz) or ultra-high frequencies (860–960 MHz), e-passport chips operate at 13.56 MHz — the same band used by NFC payment systems and contactless transit cards. This frequency was chosen because it offers a practical read range of about 10 centimeters, close enough to require deliberate proximity (preventing casual skimming from a distance) but far enough to allow a passport to be read without physical contact, such as when placed face-down on a scanner glass.

The communication protocol is defined by ISO 14443, which specifies both the physical radio layer and the data exchange commands. When a reader is brought near the passport, its antenna generates an electromagnetic field at 13.56 MHz. The passport's antenna captures this field, inducing a current that powers the chip's internal circuitry. Once powered, the chip modulates the radio field to transmit its data back to the reader — a technique called load modulation, identical in principle to how a Qi wireless charger communicates with a phone. The data rate is modest, around 106 kbps for basic reads, which is sufficient for the few kilobytes of data stored on the chip but means a full read including biometric verification can take several seconds.

03 Basic Access Control: The First Lock

If the passport chip simply broadcast its data to any reader that came within range, it would be trivially vulnerable to skimming — an attacker could brush past a passport holder with a hidden reader and copy the passport's contents. To prevent this, e-passports implement a protocol called Basic Access Control, or BAC, which requires the reader to prove it already knows certain information about the passport before the chip will release its data. Specifically, the reader must derive a cryptographic key from the data printed on the passport's machine-readable zone — the two lines of characters at the bottom of the data page that contain the passport number, date of birth, expiry date, and checksum digits.

The BAC key derivation takes specific fields from the machine-readable zone — the passport number, date of birth, and date of expiry — and hashes them to produce a pair of 56-bit DES keys. Only a reader that has optical character recognition access to the printed passport page can compute these keys, which means the passport must be physically opened and scanned before the chip can be interrogated. This creates a two-factor system: the printed data and the electronic data must match. An attacker who copies the chip data but not the printed data cannot use the passport, because a reader at the border will attempt to derive the BAC key from the printed machine-readable zone, and the derived key will fail to unlock a chip cloned from a different passport. BAC was the first security layer mandated by the International Civil Aviation Organization (ICAO) for all e-passports, and it remains the baseline protection for over a hundred countries' passports.

04 Extended Access Control and Biometric Protection

While BAC protects the basic biographic data on the chip, the more sensitive biometric data — fingerprints and iris scans — requires a higher level of protection. The European Union, in particular, mandated that fingerprint data stored on e-passport chips be accessible only to authorized readers, not to anyone who can read the machine-readable zone. This led to the development of Extended Access Control, or EAC, which adds a public key infrastructure layer on top of BAC. Under EAC, the reader must present a cryptographic certificate signed by a trusted authority — typically the issuing country's document signing authority — and the chip verifies this certificate before releasing biometric data.

EAC is a two-part protocol. The first part, Chip Authentication, establishes a secure encrypted channel between the chip and the reader using the chip's internal public/private key pair, preventing eavesdropping on the biometric data transfer. The second part, Terminal Authentication, verifies that the reader's certificate chain is valid and that the specific reader is authorized to access the biometric data. This means a border-control terminal in Frankfurt can read a Portuguese passport's fingerprints, but a commercial off-the-shelf RFID reader cannot, even one that has optical access to the machine-readable zone. The certificate infrastructure is maintained bilaterally between countries through a system called the Public Key Directory, managed by ICAO, which distributes each country's document signing certificates to all participating nations.

05 Passive Authentication: Proving the Data Hasn't Changed

The third pillar of e-passport security — and the one that makes cloning truly difficult — is called Passive Authentication. Unlike BAC and EAC, which are access control mechanisms determining who can read the chip, Passive Authentication is about integrity: proving that the data stored on the chip is genuine and unaltered. When a passport is issued, the issuing authority creates a digital hash of the chip's data (the Logical Data Structure, or LDS) and signs it with its private key. This signed hash, along with the issuing authority's public certificate, is stored on the chip itself. At the border, the reader uses the issuing country's public key — obtained from the ICAO Public Key Directory — to verify the signature against the chip's current data. If even one byte of the stored name or photograph has been modified, the hash will not match and the passport will be flagged as fraudulent.

This is the mechanism that makes e-passports far more difficult to forge than their paper-only predecessors. A counterfeiter who can produce a convincing fake passport with a stolen identity photograph still cannot create a valid chip: they would need the issuing government's private signing key to generate a valid signature. Without that key, any modification to the chip's data — swapping a photograph, changing a name — will be detected instantly by the Passive Authentication check. The system's security depends entirely on the confidentiality of each government's private signing keys, which are typically held in hardware security modules within high-trust national facilities — the same type of infrastructure used to sign root SSL certificates for the web.

06 Real-World Vulnerabilities and the Skimming Debate

Despite the layered security architecture, researchers and privacy advocates have raised concerns about e-passport RFID since the technology's introduction. The most persistent worry is remote skimming: the possibility that an attacker could read the chip from a distance greater than the intended 10 centimeters. Academic demonstrations have shown that with specialized high-gain antennas and amplifiers, e-passport chips can be read at distances of 25 to 50 centimeters — significantly more than the nominal range, though still not the meters claimed in popular reporting. However, these demonstrations require large, visible antenna equipment and perfect conditions, and BAC still requires the attacker to have optical access to the machine-readable zone. A skimmer who reads the chip without reading the printed data gets nothing useful, because the chip won't release data without the BAC key exchange.

More realistic concerns involve cloning and traceability. While Passive Authentication prevents an attacker from modifying chip data, it does not prevent copying the chip wholesale — the data is encrypted, but a sufficiently sophisticated attacker who has both optical access and radio access could in principle copy the entire chip contents to a blank smart card. This clone would pass Basic Access Control (the key is the same) and Passive Authentication (the signature is valid), but it would fail Extended Access Control's Chip Authentication, which uses a challenge-response protocol tied to the original chip's private key. The private key on an e-passport chip is generated on-chip and never leaves the chip, making cloning that passes all security layers effectively impossible without physically extracting the key from the original chip — a process that typically destroys the chip. A separate concern is traceability: because each passport chip has a unique identifier, in principle an attacker could use the chip's response to radio interrogation to track an individual's movements. To mitigate this, modern e-passport chips implement a feature called Random UID, which generates a new random identifier on each interaction rather than a fixed one.

07 The Future of the Machine-Readable World

The e-passport ecosystem continues to evolve. The European Union's 2024 rollout of the Entry/Exit System (EES) and the ongoing deployment of automated border control kiosks across Asia, North America, and Europe are pushing the technology toward faster, more automated verification. Newer passport designs incorporate polycarbonate data pages that are more durable and tamper-resistant than traditional paper, laser-engraved personalization that cannot be altered without destroying the page, and additional security features such as color-shifting inks and transparent windows that are virtually impossible to replicate. Some countries are exploring the use of smartphone-based digital travel credentials that could eventually complement or replace physical passports, using the phone's secure element to hold the same cryptographic data and biometric templates.

The fundamental architecture, however, is likely to remain: a government-issued identity document that combines physical anti-counterfeiting measures with a cryptographically authenticated electronic identity, readable by authorized systems but protected against casual access. The e-passport represents one of the largest and most successful deployments of public key infrastructure in the world, with over 150 countries participating in a system that enables a border guard in Tokyo to verify the cryptographic signature of a passport issued in Brazil — a global web of trust built on the same mathematics that secures internet banking and encrypted messaging. It is, in its quiet way, one of the most remarkable engineering achievements of the early 21st century.