Building an Application that reads Secure Information Stored on the Chip of the Citizen Identity Card in Vietnam

Abstract

Reading the information on the CIC/passport is very meaningful in serving the life activities of citizens in Vietnam and of foreign citizens visiting Vietnam. This research is based on the operating modes, such as BAC, FACE, and EAC to read the data contained in the chip put on the Citizen Identity Card (CIC) out securely. Specifically, the authors used the BAC mode to perform safe data reading from the CIC’s chip. BAC mode uses 3DES and SHA1 algorithms to encrypt data to ensure security, so when the data are transmitted from the chip they are encrypted and decryption is performed by the application. In this paper, a complete application has been built for reading personal information stored securely on CIC. This application is built based on the BAC reading mode corresponding to CIC in Vietnam and meets the requirements of the ICAO 9303 standard, so it is able to read passports or CICs of other countries that use this standard. The performance of this application when reading data stored on fields DG1, DG2, and DG13 is improved with a speed of about 1.2s - 1.3s for all 3 data fields.

Deep-Learning-based Cryptanalysis through Topic Modeling

“…Specifically, given that the encryption technique and key are fixed and that cipher texts can be obtained for a collection of plaintexts across different topics, the goal is to develop a framework that can recognize the topic to which the ciphertext belongs. To motivate this scenario, lets consider two parties communicating through an encrypted channel on a wide range of topics [12][13]. Now, lets consider there is a listener, say a government security agency spying on the conversation for national security reasons, who is only interested in the messages related to the topic of military warfare.…”

A Detection and Investigation Model for the Capture and Analysis of Network Crimes

“…Crackers take advantage of vulnerabilities in internet-based services, applications, or communication networks to cause damage to those services, applications, or communications, causing outages, or even destroying or stealing data. For example, Denial of Service (DoS) and Distributed Denial of Service (DDoS) are two attacks increasingly launched [18][19][20][21], but affected users or service providers do not have any information about them because there is no investment in monitoring them.…”