Auditors urge more testing for RFID travel documents

GAO recommends State Department step up its security assessments for development of furture passport cards

The State Department should more stringently test or evaluate the security features of U.S. passport cards and border crossing cards (BCC) that use vicinity radio-frequency technology when those travel identification documents are updated, according to government auditors.

The designs for U.S. passport cards and second-generation BCCs generally meet or exceed standards for international travel documents, but the process through which State develops those cards could be improved to better assess security, according to the Government Accountability Office.

When redesigning the passport card State didn’t heed a previous recommendation to assess security features, GAO said in a report released July 1. State didn’t fully assess or test the security features incorporated on the passport card or the second generation BCC, GAO concluded.

State began issuing passport cards in July 2008 as a lower-cost alternative for U.S. citizens who are required to have travel documents under the Western Hemisphere Travel Initiative. The department then began issuing second-generation BCCs in October 2008 based on the same architecture as the passport cards. BCC’s are issued to citizens and residents of Mexico.


Related story

Rule will make passport cards scannable from several feet away


“More fully conducting testing of the passport card and the BCC and addressing identified problems would provide State with a fuller understanding of the overall security and performance of the cards and greater assurance that its cards have been produced with adequate security,” the auditors concluded.

For future redesigns or updates, GAO recommended that State improve its process for developing the cards fully:

  • Deal with any problems encountered during testing and include documentation of reasons for not dealing with any of them.
  • Test the security features on the cards as they will be issued, including any changes made to the cards’ construction, security features or appearance.

In response, State agreed with the recommendations and detailed actions already underway to deal with them. GAO noted that State has taken actions to conduct security assessments in future redesigns.

About the Author

Ben Bain is a reporter for Federal Computer Week.

Featured

  • Comment
    Pilot Class. The author and Barbie Flowers are first row third and second from right, respectively.

    How VA is disrupting tech delivery

    A former Digital Service specialist at the Department of Veterans Affairs explains efforts to transition government from a legacy "project" approach to a more user-centered "product" method.

  • Cloud
    cloud migration

    DHS cloud push comes with complications

    A pressing data center closure schedule and an ensuing scramble to move applications means that some Homeland Security components might need more than one hop to get to the cloud.

  • Comment
    Blue Signage and logo of the U.S. Department of Veterans Affairs

    Doing digital differently at VA

    The Department of Veterans Affairs CIO explains why digital transformation is not optional.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.