Boubacar Djibo Director, Air Transport Bureau, International Civil Aviation Organization (ICAO)

Transcription

1 Session III (b): Working Group on International Law Enforcement Cooperation Boubacar Djibo Director, Air Transport Bureau, International Civil Aviation Organization (ICAO) CTED, Enhancing International Cooperation in Countering Terrorism 20 June /06/2017 Footer 1

2 Air route network 2015 Source: ICAO 2

3 The size of the industry billion passengers 51 million tonnes of freight Over scheduled airlines More than aircraft More than airports 173 air navigation centres 40 millions flights and in billion passengers

4 The Strategic Objective: Security and Facilitation reflects the need for ICAO s leadership in aviation security, facilitation and related border security matters

5 ICAO mandate for the 3 Facilitation programmes Resolution A39 20 Appendices: Annex 9 Facilitation ICAO Traveller Identification Programme (TRIP) Strategy ICAO Public Key Directory (PKD) A : Development and implementation of facilitation provisions B : National and international action in ensuring the security and integrity of traveller identification and border controls C : National and international action and cooperation on facilitation matters D : Passenger data exchange 5

6 Benefits of TRIP Worldwide confidence in authentic identity documents Protection from identity theft Use of machine assisted systems Shorter lines 6

7 Security and Facilitation Traveller identification (TRIP) strategy Holistic approach to identification management and travel documents Applicable to all mode of transports and borders Integrates MRTDs, PKD and other elements of traveller identification management Approved by the 38 th Session of the ICAO Assembly 7

8 Holistic approach to identification management ICAO 8

9 Interoperable applications MTRD API PNR PKD Watch lists Bilateral and multilateral exchanges Trusted or expedited travellers INTERPOL Data Bases 9

10 ICAO TRIP Strategy: elements and actors Civil Registries Evidence of identity Airlines & International Organization s Border Control Authorities Traveller identification Connectivity management TD issuance authorities TD Industry (ICAO Doc 9303) Interoperable applications Inspection systems and tools Traveller identification management Document issuance and control MRTDs 10

11 What is Facilitation? Immigration, Customs, Health, Quarantine 11

12 Five Phases of the Air Passenger Travel Cycle* *An Initiative of the CTITF Working Group on Border Management Relating to Counter Terrorism

13 td/pages/document9303.aspx 13

14 Standards and Specifications Doc 9303 ISO : SC17 WG3 ISO/IEC 7501 Part 2 Visa Part 3 Official Travel Document Contactless Chip Part 1 Passport epassport 14

15 Passports Data page layout Zone I photo VIZ Zone V Zone III Zone II Zone IV 88mm MRZ 125mm 15

16 Machine Readable Passports (MRPs) Machine Readable Zone

17 Machine Readable Zone document type country code primary & secondary identifiers (names) filler characters passport number nationality date of birth sex date of expiry optional data check digits 17

18 Annex 9: 24 November 2015 deadline D. Travel documents 3.11 All passports issued by Contracting States shall be machine readable in accordance with the specifications of Doc 9303, Part 4. Note. This provision does not intend to preclude the issuance of non-machine readable passports or temporary travel documents of limited validity in cases of emergency For passports issued after 24 November 2005 and which are not machine readable, Contracting States shall ensure the expiration date falls before 24 November Contracting States shall ensure that travel documents for refugees and stateless persons ( Convention Travel Documents ) are machine readable, in accordance with the specifications of Doc ) As of today atotalof156 Member States had responded to the questionnaire of SL EC6/3 12/70 18

19 From MRTDs to ICAO TRIP Strategy: Changes in Fraudulent methods 2006 Identity Fraud= 31% Documents Fraud= 54% Others = 15%* Documents Fraud Identity Fraud Identity Fraud = 71% 2009 Documents Fraud = 29% Documents Fraud Identity Fraud *Intergraph Study, 2010 Current threat: Identity fraud 19

20 Identification Management Criminal focus shifting to lesser developed areas: Evidence of Identity Issuance process Travel document fraud Identity fraud at the border Unless addressed, weakens the core MRTD programme and global trust! 20

21 Tools for traveller identification INTERPOL Stolen and Lost Travel Document (SLTD) Database Advanced Passenger Information (API) Passenger Name Record (PNR) Public Key Directory (PKD) Watch lists Bilateral and multilateral exchanges (e.g. Al Qaeda, Taliban, etc ) ABC: Trusted or expedited travellers (e.g. Nexus USA / Canada, Paraphe in France) 21

22 API system overview An electronic communications system whereby required data elements are collected and transmitted to border control agencies at the arrival prior to flight departure or arrival and made available on the primary line at the airport of entry. Collected: Available in Departure Control Systems: flight open for check in (48hrs) 22

23 Why do States want API? Improve clearance at border controls Combat illegal migration Identify passengers who are a known immigration or security threat More effective allocation of border control and law enforcement resources 23

24 iapi provides the best answer ICAO has recognized the facilitation benefits of Advance Passenger Information (API) as a tool for effective and efficient border control, consistent with the scope and intent of Security Council resolution 2178 (2014). Together with the World Customs Organization (WCO) and the International Air Transport Association (IATA), we have published related guidelines to help ensure harmonized global implementation, and in April of this year our Facilitation Panel recommended that API systems should be mandated in ICAO s Annex 9. This recommendation will be considered by the ICAO Council in early 2017, and otherwise we are also participating at present in the CTC-led API workshops being conducted in various world regions. 24

25 UNSC Resolutions 2178 (2014) and 2309 (2016) Reaffirms that all States shall prevent the movement of terrorists or terrorist groups by effective border controls and controls on issuance of identity papers and travel documents, and through measures for preventing counterfeiting, forgery or fraudulent use of identity papers and travel documents 9. Calls upon Member States to require that airlines operating in their territories provide advance passenger information (API) to the appropriate national authorities inordertodetectthedeparturefrom their territories, or attempted entry into or transit through their territories, by means of civil aircraft, of individuals designated by the Committee established pursuant to resolutions 1267 (1999) and 1989 (2011) Noting that Annex 9 Facilitation to the Convention on International Civil Aviation, done at Chicago on December 7, 1944 (the Chicago Convention ) contains standards and recommended practices relevant to the detection and prevention of terrorist threats involving civil aviation Further calls upon all States to require that airlines operating in their territories provide advance passenger information to the appropriate national authorities in order to detect the departure from their territories, or attempted entry into or transit through their territories, by means of civil aircraft, of individuals designated by the Committee pursuant to resolutions 1267 (1999), 1989 (2011) and 2253 (2015); 25 25

26 API TRANSMISSION

27

28 AIRLINES IATA ICAO Annex 9 Facilitation Paragraph 9: Calls upon...api State API System WCO/IATA/ICAO guidelines Std 3.48 API requirements UN Council Presidential Statement: strongly encourages urges INTERPOL IOM

29 Passenger Name Record (PNR): standardization and support : States & Operators: provide 24/7 support : When requiring PNR data, States should consider the adoption and implementation of the PNRGOV message as a method of transferral of PNR data. Note: The PNRGOV message is a standard electronic message endorsed jointly by WCO/ICAO/IATA... 29

30 What is the PKD & What does it do? A central storage location, highly secure where States and other entities can input and retrieve the security information to validate the electronic information on the passport. It allows Border control authorities to confirm that the epassport: Was issued by the right authority Has not been altered Is not a copy or cloned document 30

31 The Role of The PKD Minimizing the volume of certificate exchange: Document Signer Certificates (DSCs) Certificate Revocation Lists (CRLs) Country Signing Certificate Authority (CSCA) Master List Ensuring timely uploads Managing adherence to technical standards Facilitating the validation process 31

32 ICAO PKD acts as a Central Broker Conformity validated certificates This example shows 8 States/non States requiring 56 bilateral exchanges (left ) or 2 exchanges with the PKD (right) to be up to date with DSCs and CRLs. In case of 191 ICAO States 36,290 bilateral exchanges would be necessary while there are still 2 exchanges with the PKD. 32

33 Public Key Infrastructure (PKI): major role in emrtd security Operational View epassport Issuance epassport Inspection (Manual or Automated) Importance of being compliant with Doc Machine Readable Travel Document SO D Personalization SO D Document Signer Digital Signature (each State) Inspector / Inspection System Verify digital signature of State Validate data integrity and authenticity (Photo, etc ) Physical inspection 33

34 A central, secure storage location, where States and other entities can input and retrieve the security information to validate the electronic information on the passport Minimize the volume of certificate exchange Manage adherence to technical standards (Doc 9303) The role of the ICAO PKD Facilitate the validation process Allow Border control authorities to confirm that the epassport: was issued by the appropriate authority has not been altered is not a copy or cloned document 34

35 Public Key Infrastructure (PKI) PKI plays major role in emrtd security Technology supporting political trust decisions National PKI deployment Must be reliable, secure, ICAO 9303 compliant International Trust Initial trust establishment out of band Compliant electronic processing extends trust Certificates of States must be accessible (PKD/websites) Benefits of PKI realized ONLY if issuing and receiving ICAO member states participate 35

36 epassport Enhance Security of the document Biometrics to confirm identity 36

37 epassport: The trust imperative epassport must be ICAO compliant epassports are Machine Readable Passports (MRPs) with a chip. The chip is an additional security feature for passports; does not replace it epassports are issued by entities that assert trust Identification supply chain Achieve global exchange of certificates and other information Improper validation of epassports leads to a false sense of security 37

38 New 2017 Participants Turkmenistan Peru Barbados 58 ICAO PKD Participants 38

39 Value of PKD for epassports Enhances the security of the epassport validation process Facilitates fast and secure cross border movement by the front line entities PKD can be used with Automated Border Controls (ABC) or with a manual e reader Maintains compliance with ICAO specifications Assures smooth and continuous epassport validation at control points Fees for PKD membership are low compared to investment required for a multiple bilateral infrastructure 39

40 Value of PKD for epassports (cont d) Over 120 States indicatethattheyare currentlyissuingepassports(nearly half a billion epassports in circulation world wide) States are required to undertake a complex process to ensure that the data chip in epassports is fully compliant with ICAO Doc 9303 specifications ICAO and the International Organization for Standardization (ISO) are in the process of implementing a mechanism to make error codes available at each border to detect security issues when reading a non compliant epassport data chip 40

41 epassports share by region Source: IATA Total Canadian passports in circulation (regular, diplomatic and special) = 23,134,186 Out of these, 12,892,352 are epassports in circulation. By 2018 all Canadian Passports in circulation will be epassports (Passport Canada) 41

42 S1 Regional Initiatives ECOWAS CEDEAO European Union 42

43 Diapositive 42 S1 why two slides on regional initiatives??? Susan, 14/05/2014

44 Regional Initiatives 43 Mercosur Andean Community

45 The new UN e-lp Joint TC project between UN and ICAO Specs designed by ICAO MRTD experts State-of-the-art technology Fully ICAO-compliant Takes full advantage of ICAO PKD security benefits

46 Technical assistance projects Canada was the first Member State to fund technical projects to assist States in implementing the ICAO TRIP Strategy: Strengthening Travel Document Security and Border Control in Central America ( ) Strengthening Travel Document Security and Identification Management in the Sahel and neighboring States ( ) Strengthening border controls in the Caribbean Region ( )

47 ICAO Training package Control of the authenticity and validity of travel documents at airport borders Level I Purpose of this four day course: Examine travel documents effectively, allowing border officers to expedite the movement of legitimate travellers while identifying high risk individuals. For more information: g/pages/tdexam Available in Arabic by the end of 2016

48 Forthcoming Event 13 th TRIP (ex-mrtd) Symposium 2017 (24 26 October 2017) The Symposium is a world class forum for the exchange of information on all aspects of traveller identification management, and the ICAO Traveller Identification Programme (TRIP) Strategy providing decision makers and technical experts with valuable insight on key current and emerging issues. 47

49 Where to find the list of data elements? Standards and Recommended Practices for API, iapi and PNR API and iapi data elements are listed in the WCO-IATA-ICAO Guidelines on API PNR data elements are listed in the ICAO Guidelines on PNR Data (Doc. 9944) 48

50 ICAO Publications of interest (Annex 9 related) 49

51 ICAO Publications of interest (TRIP related) 50

52 ICAO Training Package Control of the Authenticity and Validity of Travel documents at Airport Borders Level I Purpose of this four day course: Examine travel documents effectively, allowing border officers to expedite the movement of legitimate travellers while identifying high risk individuals. 2016: Available in English and French Available in other ICAO Languages in 2017 For more information: 51

53 ICAO Guide for assessing air traveller border controls Canada-funded project Strengthen border controls in the Caribbean Region Objective: Assist Member States in the Caribbean Region in implementing the ICAO TRIP Strategy and in complying with their international obligations contained in the resolutions of the UN Security Council. Deliverables: development of a guide (building on the existing CTITF air travel cycle) ARisk-Based Model of Air Traveller Border Controls (Part 1) and An Assessment Methodology ( Part 2) Expected outcome: The model would guide Member States in applying those different tools including API, PNR, Electronic Travel Systems (ETS) and cross-border intelligence sharing The assessment methodology, based on the model, will guide self-assessment to formulate recommendations for corrective action and further capacity building.

54 International cooperation: key for successful implementation 53

55