**************************
Following is a written reply by the Secretary for Security, Mr Lai Tung-kwok, to a question by the Hon Michael Tien Puk-sun in the Legislative Council today (May 15):
Question:
It has been almost a decade since the launch of smart identity (ID) cards in June 2003. Some members of the public have pointed out that with the advancement in technology, the encryption and anti-forgery technologies adopted for smart ID cards have become outdated. They are concerned that the personal data of members of the public might be leaked. Moreover, a total of some 400 forged smart ID cards were seized by the authorities in 2011 and 2012, reflecting that the risk of smart ID cards being forged by law-breakers should not be overlooked. In this connection, will the Government inform this Council:
(a) whether the authorities have conducted any review on the use of smart ID cards, including the quality of the materials, security features of the computer chip, as well as the development and application of other functions, etc.; if they have, of the outcome; whether the authorities have kept abreast of more advanced technology so as to improve the current design of smart ID cards; if they have, of the details; and
(b) given that for those persons who were issued smart ID cards in the early stage, their photos on the ID cards may look significantly different from their facial appearances at present, whether the authorities have plans to arrange for replacing the ID cards of members of the public by second generation smart ID cards in order to update their photos thereon, so that smart ID cards can effectively serve their functions as identification and travel documents; if they have, of the implementation timetable and progress of the preparation work?
Reply:
President,
Since the launch of the HKSAR smart identity card in June 2003, more than 10 million smart identity cards have been issued by the Immigration Department (ImmD). Under section 7A(1) of the Registration of Persons Ordinance (Cap. 177), any person who without lawful authority or reasonable excuse uses or has in his custody or possession a forged identity card shall be liable on conviction to a maximum penalty of a fine of $100,000 and 10 years' imprisonment.
The existing smart identity card has a number of anti-forgery features, such as optical variable ink, multiple laser image, kineprint with colour-changing images when viewed at different angles, and high-quality laser engraved photograph on the polycarbonate card body, all of which make it difficult to alter or counterfeit the card. The chip of the smart identity card is made of durable alloy and is designed with a number of security measures that could effectively prevent various forms of intrusion. Moreover, the chip is designed with segregated compartments to separate immigration applications from other value-added non-immigration functions and access to chip data is protected by various security controls. There is no evidence to show that personal data security is a problem, nor is there an increasing trend in the number of forged smart identity cards intercepted by the ImmD.
Reply to the two parts of the question is as follows:
(a) and (b) The quality of card material, data security function of the chip and current arrangements for development and applications of the smart identity card are effective. Smart identity card is made of polycarbonate, a durable material strongly resistant to environmental influences as well as mechanical, chemical and thermal stress. Besides, the ImmD has put in place a very strict testing system on the quality of smart identity card so as to ensure it meets the required standard of quality. With regard to chip security, the data stored in the chip is protected by security means and can only be read by authorised government departments with the aid of specific card readers. If the smart identity card is embedded with Hong Kong Post e-Cert, that e-Cert can only be activated by the e-Cert PIN kept by the holder. As to the development and applications of smart identity card, the data stored in the chip of the card can apply not only in immigration clearance service (e.g. e-channels of the Automated Passenger Clearance System and the Automated Vehicle Clearance System), but also in various value-added non-immigration applications, including e-Cert, library card, facilities booking at the Leisure Link self-service kiosks and the eHealth system, etc. Members of the public may opt among these applications according to their needs.
Meanwhile, the ImmD is planning to conduct a study on the current Smart Identity Card System to review the adequacy of the existing system and assess the need to introduce more advanced technologies to enhance the quality of materials, data security, anti-forgery features and biometric identification technology, as well as other functional developments and applications. At present, there is no concrete plan to replace the current smart identity card with the second generation smart identity card.
Ends/Wednesday, May 15, 2013
Issued at HKT 14:25
NNNN
