I527-290 ESRIF Final Report (WEB).indd - European Commission

186
We need to develop appropriate business cost models to manage how such matters will be paid for: who will be the service
provider and hence will governments, airports or the citizen end up footing the bill? There are a number of projects and
jurisdictions where we can and should learn lessons from, such as our own EU systems. As already stated, once the initial cost is
overcome, these systems can drastically reduce operational costs. This important aspect should also be detailed in the related
business cases.
In summary some of the key capabilities and gaps are as follows:
Lack of eff ective planning and the need to factor in Change Management from the start
Need to consider appropriate and new business models focused on effi ciency and cost reduction
Develop new and required standards for key identity management matters such as interoperability and other matters
8.3.2.2 Deployed infrastructure are not using all electronic security features deployed into secure ID documents
People may hold secure electronic identity documents while the legal infrastructure is neither adopted nor deployed. E-Passports
are a good example: they are already deployed in Europe even though border controls are not able to verify such an electronic
document. The verifi cation is almost always visual. Over 60 countries have started issuing e-passports, and there are around 100
million e-passports in circulation, but less than 10 countries 11 eff ectively use readers able to read the data from the chips.
The potential reasons for this situation might be that countries wait for the EAC and are put off by the slow reading times
(7s for older chips). That’s why it is important to concentrate the eff ort both on the generalization of EAC and on the system’s performance.
The potential reasons for this situation might be that countries wait for the EAC and are put off by the slow reading times
(7s for older chips). That’s why it is important to concentrate the eff ort both on the generalization of EAC and on the system’s performance.
A similar situation can also be considered with e-ID cards. Many countries in Europe have already started to issue e-ID cards
but these cards are not used as widely as they could.
The reasons for that are probably similar to the ones mentioned for the e-passports with the addition of the lack of interoperability
among countries. Establishing a standard, or using an existing one like EAC, is necessary.
8.3.2.3 Better usage of API/PNR and ESTA
As already mentioned, in the future global border control scheme, we need to move the border controls from reactive to proactive. This
can be achieved via a connection to a secure information system (through companies operating fl ights or through a special secure
connection), so that passengers will be checked by the authorities during the fl ight, and only those who need a more accurate control
at the border will be actually and physically checked. Solutions such as Passenger Name Record (PNR), Advanced Passenger Information
(API) and Electronic System for Travel Authorization (ESTA) already exist and should be more widely used to achieve this goal.
In the travel industry, a PNR is a record in the database of a Computer Reservation System (CRS) that contains the travel
record for a passenger, or a group of passengers travelling together. The concept of a PNR was fi rst introduced by airlines that
needed to exchange reservation information in case passengers required fl ights of multiple airlines to reach their destination
(‘’interlining’’). For this purpose IATA defi ned a standard for the layout and content of the PNR.
The border control authorities could use the PNR to perform detailed checks and risk profi ling on all the travellers as the PNR
long before their actual arrival in the country.
The APIS is a system established to enhance border security by providing offi cers with pre-arrival and departure manifest
data on all passengers and crew members. The information in the APIS is recorded when the passenger boards the plane.
With better use of APIS, part of the border control could be moved to the point of departure of the passenger so that those
who would anyway be denied entry at their destination would not even obtain authorisation to board the plane. It is also
interesting to note that industry is supportive of capturing API and PNR data.
11 Edgar Beugels, Frontex, presentation at Security Document World Conference, London 2009
ESRIF FINAL REPORT - PART 2 • Working Group: Identifi cation of People and Assets