1. MAY/JUNE 2010 Scenario 1 By Neill Tailor

2. Scenario 1 – Question 1a Scenario A large international airport is required to introduce a number of security measures and has introduced new customer information services. Question 1a: State three items of information that would be stored on the passport. [3]

3. Answers for Question 1a Any three points from: Passport type Country of issue Nationality Passport number Entry and exit stamps with dates/ countries visited Photograph Name of passport holder Date of birth Place of birth Occupation Issuing office Holder’s signature Gender Date of issue/expiry Any visa associated with passport Additional security information/biometric data

4. Examiners report for question 1a This section concerns the three items of information on a passport. There were 14 possible answers to obtain marks and candidates usually understood which ones were sensible. Centres should emphasise that criminal records are not stored on a passport- a separate, secure database is used with the passport number as the key field. Ethnic group is also not recorded on most passports and was not accepted. Addresses are not used as they can change from time to time.

5. Scenario 1 – Question 1b Scenario: All passengers will need to have an electronic passport. The airport will use additional identification in the form of electronic fingerprinting at various points in the airport. Tickets for all flights are now electronic (e-tickets). Question 1b: Describe the electronic components in the passport. [2]

6. Answers for Question 1b Any two points from: embedded chip in one of the passport pages/ similar in concept to a smart card holding biometric and other data Use of embedded “ring circuit”/RFID for communication

7. Examiners report for question 1b This question caused some confusion. The Examiners were looking for electronic elements in a passport. These were RFID and a chip. Very few candidates gave these 2 answers- the key word being electronic. Too many answers were about barcodes, magnetic stripes and even MICR. A magnetic stripe does not hold biometric details. A bar code holds just an ID number and check digit yet they were given as holding biometric details.

8. Scenario 1 – Question 1c Scenario: All passengers will need to have an electronic passport. There are computer-based information kiosks throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks. Question 1c: (c) Describe three advantages of electronic passports when compared to paper-based passports. [3]

9. Answers for Question 1c Any three points from: Information on the chip is quicker to read by computer Easier to update from a computer More information can be stored on the electronic passports More difficult to “tamper” with the information More difficult to produce illegal/non-authorised/forged passports Difficult for somebody to use the wrong/stolen passport Remote processing of passport (using RFID) Could be a smart card/smaller … … Description of facial/iris recognition system

10. Examiners report for question 1c This question was about the advantages of electronic passports over paper based ones. Too many candidates did not understand that an electronic passport is a physical device with electronic elements- it is not a soft copy held in a database.

11. Scenario 1 – Question 1d Scenario: A large international airport is required to introduce a number of security measures and has introduced new customer information services. The airport will use additional identification in the form of electronic fingerprinting at various points in the airport. Question 1d: Explain how the use of electronic fingerprinting improves airport security. [4]

12. Answers for Question 1d Any four points from: Take fingerprints on non-air side of airport Restricting access to secure areas for staff/passengers Re-take fingerprints on boarding side Fingerprints are stored electronically and can be accessed at any terminal It is possible to store the fingerprints electronically on passport Very difficult to forge a finger print/ fingerprints provide greater security System check if 2 sets of fingerprints match up Compares fingerprints with pre-stored values on security database/passport Computer database can match fingerprint to a suspect if passport false Computer database can match fingerprint to known criminal Audit trail of employee movements

13. Examiners report for question 1d The use of fingerprints to control and monitor access around an airport was badly understood. The 7 marking points offer guidance about the level of detail required to earn marks in this question that relied on common sense as much as subject knowledge.

14. Scenario 1 – Question 2a Scenario: Tickets for all flights are now electronic (e-tickets). There are computer-based information kiosks throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks. Question 2a: Describe how the system will match an e-ticket to a passenger when they check in at the airport. [3]

15. Answers for Question 2a Any three points from: Lead passenger will have paid by credit card number and has to give passport number… - … name matched up with credit card holder and/or passport Ticket details emailed to lead passenger Email printout used as confirmation Email contains a unique (bar) code which identifies passenger Check-in details match up with stored passenger details

16. Examiners report for question 2a There were 5 marking points for the 3 marks and most candidates scored 2. The barcode on an e-ticket is simply an ID number- it may be derived from passport number and/or credit card number. It does not hold any large volume of data as some candidates suggested in their answers.

17. Scenario 1 – Question 2b Scenario: Tickets for all flights are now electronic (e-tickets). Question 2b: Describe the advantages of e-tickets when compared to paper-based tickets. [3]

18. Answers for Question 2b Any three points both for passenger and airline from: Reduces booking expenses for airline No need to print out tickets No need for postage or envelopes Saving on staff and accommodation costs Passenger feels more in control by selecting seats in advance More convenient/easily re-printed Can’t be lost/stolen/misplaced Less prone to fraud Passenger can print out own ticket, no waiting for delivery Speeds up check-in at airport benefits passengers and airline/cuts down queues Easier for passenger to buy tickets (i.e. online bookings/no need to go to travel agent) System remembers customer details From history From membership number Simpler for passengers at airport; only need a form of id

19. Examiners report for question 2b This was a question where candidates scored marks as they found it an easy question to understand.

20. Scenario 1 – Question 3a Scenario: There are computer-based information kiosks throughout the airport. Passengers can now print out their own boarding passes and obtain flight information from any one of these kiosks. Question 3a: Explain the advantages to the passengers of having computer-controlled information kiosks rather than manned desks. [3]

21. Answers for Question 3a Any three points from: - no long queues at desks - can be more terminals than desks - Kiosks not under time pressure (unlike check-in staff) - Kiosk available 24/7 and not affected by staff taking breaks - no language problems/multi-language - no interpersonal arguments - passengers don’t mind dealing with trivial/ embarrassing questions - terminal may be easier for passengers with communication difficulties - more information generally available - information more likely to be up to date/less inaccurate - faster processing at check-in desk as fewer questions to be discussed

23. Answers for Question 3b Any six points discussing the risks from: NOT what a hacker can do. Hackers/fraudsters might gain access to database/server Use of firewalls Physical guards Sensitive data travels to and from the kiosks Encrypt the data to make it meaningless Authentication techniques e.g. user ids/ passwords Levels of access Need to log out Digital certification Need for security if kiosks use Wi-Fi People can overlook passengers typing in personal data Viruses sent to the system if external data link in kiosk Anti-virus software which is updated regularly Prevent customers being allowed access to memory devices Use of firewalls Spyware giving access to system which can look for security information on the system Use of anti-spyware software Use separate systems for customer information and security

24. Examiners report for question 3b This section was not well answered unlike the previous section. Candidates immediately thought of hacking. In real life this would only happen if the terminals used Wi-Fi to link to the server. The use of other devices is unlikely- apart from skimmers. The kiosks are dedicated to only provide services for e-tickets. They may well not allow www access as many candidates thought and then went on to give generic answers to security from surfing.