0607

ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Page 1 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Content
OBJECTIVE
Page 3
- Background
3
ANALYSIS OF PROBLEM
Page 4
-
Hong Kong Smart Identity Card
Applications of Smart ID Card
E-channels (passengers and vehicles)
Fingerprint verification
Pros of using Smart ID Card
Cons of using Smart ID Card
4
5
6-8
8
9
10
DESIGN OF SOLUTION
Page 11
- Network (LAN and wireless)
- Star topology
11
12
IMPLEMENTATION
Page 13
-
Normal and peak time traffic
Network diagram
Database schema
ER diagram
Hardware and Software
13
14-15
16
17
18
EVALUATION
Page 19
- Limitation
- Improvement
19
19
REVIEW
Page 20
TIMEFRAME
Page 21
REFERENCES
Page 21
- Website
- Reference books
21
21
Page 2 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Objective
-
To identify the pros and cons of using Smart Card technology in
passenger clearance at immigration control points.
To find out the hardware and software packages requited for the
system
To design a network which can handle normal immigration traffic
and peak time traffic.
To state and justify the underlying database design for the Smart
Card passenger clearance system.
Background
Plastic cards are a part of the way of life in most
industrialized countries nowadays. We use them to identify
ourselves, to travel, to gain access to buildings, to obtain
cash from the bank and to pay for goods and services. The
majority feels that their lives are already excessively
controlled by anonymous pieces of plastic.
Most of these plastic cards are usually magnetic stripe
cards. In spite of their tremendous popularity, magnetic
stripe cards suffer from one crucial weakness. Data stored
on them can be easily read and modified by someone with
access to the right kind of equipment. And that is why there
is the invention of smart cards, using integrated circuits and
chips inside the card.
In 1968, German inventor Jurgen Dethloff along with
Helmet Grotrupp filed a patent for using plastic as a carrier
for microchips. In 1970, Japanese inventor, Kunitake
Arimura, applied for a similar patent. Smart Cards were
introduced in Japan in the same year. In 1974, Frenchman
Roland Moreno registered his smart card patent in France.
Nor is this phenomenon restricted to rich western countries.
Besides the Octopus card-bases public-transport systems,
Hong Kong has also launched the applications of smart
cards as identification. From 2003 onwards, every Hong
Kong citizen must have a smart card in his wallet. A
territory-wide smart Identity Card (ID) card replacement
exercise is set to start on August 18, 2003. The
Government of the Hong Kong Special Administrative
Region is issuing smart identity (ID) cards to replace the
existing ID cards. One of the main applications on the
smart ID cards is for immigration purpose.
Page 3 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Analysis of problem
Hong Kong Smart Identity Card
The front of a smart ID card
The back of a smart ID card
(http://www.immd.gov.hk/ehtml/hkid_hkid.htm#chip)
It is a typical smart card with the size of a standard credit card,
dimensions of 85.6mm by 54mm. The size is specified in the ISO
international standard. The standard simply describes an embossed
plastic card with a magnetic strip or a chip designed for the identification
of persons.
Polycarbonate, a durable and secure base material with strong
resistance to environmental influences as well as mechanical, chemical
and thermal stress produces the card.
What makes it so unique is, the card is embedded with an integrated
circuit, and also a "chip" which has the capacity of storing and
processing data.
ID cards usually carry personal
particulars. The chip inside the
card supports the recording,
storing and processing of data.
And also transmitting data to or
receiving data from designated
device electronically a well.
The chip inside the Hong Kong
smart identity card is particularly
designed with segregated
compartments for keeping
Immigration applications and other
value-added non-immigration
applications like library services.
(http://www.immd.gov.hk/ehtml/hkid_hkid.htm#chip)
Page 4 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Application of the Hong Kong Smart ID card
Immigration Applications
Identity cards are used to identify people
in a region. A smart identity card is able to
provide one’s identity in a more secure
and high-tech way. As all the personal
data are stored in the chip of the card,
together with the templates of the two
thumbprints, people holding the smart ID
card can use their cards for automated
immigration clearance through
e-channels.
E-Cert Application
Electronic certificates can also name as
electronic identity card. It enables
cardholders to perform transactions on
the Internet securely.
An E-cert issued by the Hong Kong Post
can be stored in the smart ID card.
Library Card Application
A few years ago, people have to apply for
a library card to enjoy various services
provided by the public libraries. However,
the smart ID card can replace this job
now. Only a simple registration process
can enable the library card function. After
that, a smart ID card can be used as a
library card.
Driving License
This application will be started to use in
2007.
The driving license of the cardholder can
also be included in the smart ID card.
Page 5 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
E-channel
The Hong Kong Immigration Department, has introduced an Automated
Passenger Clearance System (APCS), the “e-channel” since 16th
December 2004. The e-channel allows Hong Kong Permanent
Residents (aged above 11) to carry out self-service immigration
clearance by using the smart identity cards.
Besides for passengers, vehicles going in and out the border tin three
immigration control points, Lok Ma chau, Man Kam To and Sha Tau Kok
also enjoy the same right, as the government has introduced the
vehicular e-channels. Cross boundary drivers can use the Automated
Vehicle Clearance System (AVCS) by using their smart identity card.
Procedure using the e-channel (APCS):
1.
2.
3.
4.
5.
Insert your smart identity card with the side marked with the
arrow and the electronic chip into the card reader.
The card reader performs a mutual verification with the smart
identity card key.
After authentication, the gate doors to the e-channel open upon
successful automatic verification.
Once at the e-channel, place thumb flat on the centre of the
scanner for fingerprint verification process.
Upon successful fingerprint verification, the gate door to leave
the e-channel opens.
Page 6 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
The following table shows the operating hours of e-channels (passengers):
Control points installed with e-channels
Operating hours
Lo Wu (Arrival and Departure Hall)
Daily from 6:30 am to midnight
Macau Ferry Terminal (Arrival and Departure Hall)
24 hours daily
China Ferry Terminal (Departure Hall)
Monday to Friday from 6:30 am to 9:00 pm
Saturday, Sunday and public holidays to
midnight
China Ferry Terminal (Arrival Hall)
Monday to Friday from 7:00 am to 10:00 pm
Saturday, Sunday and public holidays to 2:00 am
Tuen Mun Ferry Terminal (Arrival and Departure Hall)
Daily from 7:15 am to 10:15 pm
Hung Hom (Arrival and Departure Hall)
Daily from 6:30 am to 7:30 pm
Hong Kong International Airport (South Departure Hall)
Daily from 5:30 am to midnight
Hong Kong International Airport (North Departure Hall)
Daily from 6:00 am to midnight
Hong Kong International Airport (Arrival Hall A)
Daily from 6:00 am to midnight
Hong Kong International Airport (Arrival Hall B)
24 hours daily
Lok Ma Chau (Arrival and Departure Hall)
24 hours daily
Sha Tau Kok (Arrival and Departure Hall)
Daily from 7:00 am to 8:00 pm
Man Kam To (Arrival and Departure Hall)
Daily from 7:00 am to 10:00 pm
(http://www.immd.gov.hk/ehtml/20041216.htm)
For the sake of faster and smoother clearance, not only the fingerprint
verification technology, but also the face recognition system is added in the
vehicular e-channel.
Procedure using the e-channel (AVCS):
1.
2.
3.
4.
5.
Stop the vehicle before the white line of the channel.
Drive the vehicle into the e-channel when the
green traffic light appears.
The checking station will move itself to a suitable
height for the driver to place his thumb flat on the
scanner by the sensors at its two sides. At that
same time, driver has to look at the camera on the
checking station.
Both fingerprint verification and face recognition
will be in progress for speeding up the clearance
process.
Upon completion of the clearance, they can drive
their vehicles away. Intercom is available if the
driver encounters any problem.
Page 7 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
The following table shows the operating hours of these e-channels (vehicles):
Control points Location of kiosks
Operating hours
Lok Ma Chau
Both northbound departure southbound
arrival kiosk numbers 2-12
24 hours daily
Sha Tau Kok
Both northbound departure & southbound
arrival kiosk numbers 1-3
Daily from 7:00 am to 8:00 pm
Man Kam To
Both northbound departure & southbound
arrival kiosk numbers 1-6
Daily from 7:00 am to 10:00 pm
(http://www.immd.gov.hk/ehtml/20041216.htm)
Fingerprint verification
Fingerprint verification is used as an identity authentication of the smart
ID cardholder.
If the cardholders registered their smart identity cards with fingers other
than thumbs, those fingers should be used for identity verification other
than the thumb.
If your fingers are too wet or dry or placed in the wrong position on the
scanner, this may lead to difficulties in the verification process.
People who have poor fingerprints may encounter difficulties in the
verification process.
To avoid delay, it is recommended to use traditional counters or lanes for
clearance.
Page 8 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Pros of using smart identity cards
-
Faster and smoother clearance
by introducing the automated immigration clearance (e-channels), it
can help to reduce congestion occur when it is the peak time of
traveling in the counters of control points on people’s arrival and
departure
-
Multi-purpose
it is convenience. With the capacity of multi-applications, smart ID
cardholders can benefit from various services, such as the
e-channels, instant access to public library facilities, secure electronic
transactions over the Internet, and other high quality government
services planned for the future.
-
High security
data are stored in the chip and engraved into different layers of the
card. They are protecting with strong partitions and different access
keys, thus prohibiting unauthorized parties from accessing the data.
Besides, there is a triangle printed with optical variable ink beside the
chip. Its color changes between gold and green when viewed in
different angles. Multiple laser images of the cardholder’s photograph
and identity card name are located on the lower left corner. On the
left of the multiple laser images, there is kineprint. This can prevent
other people alter or use information from lost or stolen cards. It is
hard for criminals to forge the smart ID card.
-
Use of biometric
Biometric is a reliable, robust and convenient way for person
authentication. It can play a part in eliminating counterfeit.
-
Minimal data storing
the most sensitive personal information are kept at the back-end
computer systems rather that are stored in the chip.
-
For the Privacy Law
The collection, storage, use and release of data must comply with the
Personal Data (Privacy) Ordinance, Registration of Persons
Ordinance and Registration of Persons Regulations. Only authorized
departments can have access to the relevant database. There is no
sharing of database among Government departments.
Page 9 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Cons of using smart identity cards
-
Congestion problems are even worse if people
don’t know the procedure of using the
e-channels or encounter any unexpected
difficulties when using the automated
immigration system.
-
Some may get stuck in the inside the channel.
Workers are necessary to on duty 24 hours to
provide manual help.
-
The e-channel machines can never replace the
counters in control points if any technical
problems happen. In certain circumstances, it is
a waste of money to introduce this kind of
technology.
-
Expensive replacement fee is charged if lost.
-
Some criticize the Hong Kong government dithers over privacy law
concerns in linking others things to the new Hong Kong smart identity cards.
-
Easily damaged if do not protect it properly.
X not keeping the card in an appropriate protective holder
X bend the card
X test it with a magnet.
X Close contact with keys and coins
X scratching the chip
-
Not function any more if the chip is detached from the card.
-
Proper maintenance of a network requires considerable time and
expertise.
Page 10 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Design of solution
To design a network that can handle normal immigration traffic and peak-time
traffic, we have to know which network is the best fit for the system.
Network
A network consists of two or more computers that
are linked in order to share resources, exchange
files, or allow electronic communications. The
computers on a network may be linked through
cables, telephone lines, radio waves, satellites, or
infrared light beams.
A Local Area Network (LAN) is a network that is confined to a
relatively small area. In a LAN configuration, one computer is designated
as the file server. It stores all of the software that controls the network, as
well as the software that can be shared by the computers attached to the
network. Computers connected to the file server are called workstations.
On most LANs, cables are used to connect the network interface cards in
each computer. Not all networks are connected with cabling; some
networks are wireless. But Wireless LANs have several disadvantages.
They provide poor security, and are susceptible to interference from lights
and other devices. They are also slower than LANs using cabling.
Page 11 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Star topology is one of the most common computer networks
design. In a star topology, client computers connect to a central
system called a server/ switch using cables. There are no direct
connections between client computers. For a star topology, either
unshielded (UTP) or shielded twisted pair (STP) wires will be used
normally.
But in this case, fiber optic cable is more preferable to connect the
workstations to the server, since the rate of data transmission is
required to be fast.
Advantages of using star topology
— Good performance.
— Easy to set up and to expand.
— Any non-centralized failure will have very little effect on the
network, whereas on a ring network it would all fail with one fault.
Disadvantages of using star topology
— Expensive to install
— Extra hardware required
— The whole network goes down if the server breaks down.
So I decided to use wired network and the star topology.
Page 12 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Implementation
Normal immigration traffic
Take Lo Hu arrival and departure hall as an example. Assume the
number of people arrive and depart Hong Kong is 100 each minute. 50
of them are arrival, 50 of the remaining are departure. Among all, about
60% of these people are Hong Kong permanent residents, which are
smart card holders. So at least 15 e-channel machines must be installed
both in the arrival and departure halls. There should be also at least 10
manual counters set up in the two halls. By installing with the minimum
numbers, the waiting time to entry or exit Hong Kong is at most 1 minute
provided that the processes of both clearance methods are successful.
Peak-time immigration traffic
In peak-time for example before and after the Lunar New Year, summer
holidays, the number of people arrive and depart Hong Kong may raise
to 200 each minute. The e-channel machines in the arrival and departure
halls must now increase by two times, which are 30. And also for the
manual counters, the number should now be 20, instead of 10.
So to deal with the peak-time immigration traffic, the minimum number of
e-channel machines should be 30 in each hall. There should also be 20
manual counters for non- Hong Kong permanent residents. Only half of
the machines and counters are opened to use during normal traffic to
save money and manpower. The other half is opened to manage the
increase number of people during holidays.
Page 13 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Network Diagram
(Normal immigration traffic)
Manual counters
Bridge
Key:
Server
Open
Close
Fiber optic cable
UTP/ STP wire
Bridge
E-channels
Page 14 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Network Diagram
(Peak-time immigration traffic
Manual counters
Bridge
Key:
Server
Open
Fiber optic cable
UTP/ STP wire
Bridge
E-channels
Page 15 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
The data that will be collected and stored whenever people passing
through the e-channel:
Database Schema
RESIDENT (id_no, kiosk_id)
ECHANNEL (kiosk_id, date_in, date_out, time_in, time_out, location)
PROFILE (id_no, eng_name, chin_name, chinchar_code, sex, address,
tel_no, nationality, crim_rec)
RESIDENT
Id_no
Kiosk_id
ECHANNEL Kiosk_id date_in date_out time_in Time_out location
PROFILE
Id_no eng_name Chin_name Chinchar_code
address
Tel_no
nationality
sex
Crim_rec
Each Hong Kong resident must have only one profile and each resident
can only enter one e-channel at one time. So they are all one-to-one
relationships.
The relationship between RESIDENT and PROFILE is mandatory.
Because each Hong Kong permanent resident should have a unique
profile stored in the government database server.
The direction from RESIDENT to ECHANNEL is optional because a
resident may never enter an e-channel. However, the direction from
ECHANNEL to RESIDENT is mandatory because each e-channel must
involve one resident using his smart identity card for automated
clearance at control point
Page 16 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
ER Diagram
Page 17 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Hardware:
E-Channel Machine
Smart identity card reader
Scanner for the fingerprint
Smart identity card
Chips
Self-service kiosks
Back-end computers
Workstations
Network interface cards
Switches
Bridges
Servers
Fiber optic cable, untwisted or twisted cables
Software:
database management system
Fingerprint verification programme
face recognition programme
Page 18 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Evaluation
Limitation:
— If the numbers of people enter and exit Hong Kong exists the
above assumptions, the network is not able to handle the traffic.
Stream of people may occur due to the shortage of e-channel
machines and counters available.
— Moreover, there are people who don’t know how to use the
machines and choose to use the manual counters even they are
the smart card holders.
— There should also be a number of people stand by to assist
those who encounter difficulties in using the e-channels.
— If the switch or server is broken down, the whole network goes down.
It create serious congestion problem since there is no backup
counters provided.
— Errors may occur since biometric (e.g. fingerprint) is used in the
process. If your fingers are too wet or dry or placed in the wrong
position on the scanner, this may lead to difficulties in the verification
process.
— People who have poor fingerprints may encounter difficulties in
the verification process.
Improvement:
— To solve the congestion problem, the
intermediate way is to increase both the
number of e-channel machines and the
counters. If the space is not available to
hold more, a new arrival or departure
hall should be constructed.
— Set up more counters as the back up
measures if problems occur in the
automated clearance system.
— To help the public to be more
familiarized with the use of automated
Clearance system, pamphlets regarding the procedure of using the
e-channels can be distributed freely in airports, KCR and MTR
stations. Regular visits to schools can also be done.
— Provide antiseptic spray and wet towel for passengers to clean their
fingers before the fingerprint verification process.
Page 19 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Review:
It is definitely a challenging task to complete this project. In fact, I have
learnt a lot throughout this.
Before doing this project, all the CA students in my school visited the
immigration department in WanChai. I am so proud to be one of the
witnesses of producing a new smart identity card. It was really a precious
experience since this is not an opportunity for every Hong Kong people.
The most important thing that I have learnt is time management. As a
form seven student, it is really tough to allocate my time in order to
manage my studies and to complete this project. Although, in some
circumstance, it is a waste of time, it is really a chance for me to apply
what I have learnt in these two years’ computer applications like the ER
diagram, networking, etc. This can actually help me to revise my
lessons.
Page 20 of 21
ASL computer applications paper 2 2005-2007
Project assignment
Created by Emmy Kwok 7B (9)
Timeframe
Task
Visit
Research
Outline the
project
Finalize the
project
Detail
Visit the Immigration dept in
Wanchai
Search information on the
Internet and in the library
Draft the following on this
topic:
- Background story
- Smart identity card
- Applications of smart id
card
- E-channels
- Pros and cons using
smart cards
- Hardware and software
used
- ER diagram
Draw the draft of the
network diagram
Write down the list of
limitation of the system
Submit the written report
and the CD-ROM
Due date
Actual
date
Sept 2006
25/09/2006
Dec 2006
21/12/2006
-1/1/2007
11/01/2007
11/01/2007
11/01/2007
22/01/2007
11/01/2007
22/01/2007
01/02/2007
01/02/2007
Reference
Webs:
9
9
9
9
9
9
http://www.immd.gov.hk/ehtml/hkid.htm
http://www.hongkongpost.gov.hk
http://www.smartid.gov.hk/en/index.html
http://sumitdhar.blogspot.com/2004/11/introduction-to-smart-cards.html
http://www.geoexpat.com/forum/showthread.php?t=2650&highlight=smart+cards
http://www.cnn.com/TECH/computing/9807/02/smartcards.idg/index.html
http://www.theage.com.au/news/national/smart-card-back-on-the-agenda/2006/
03/26/1143330931688.html
Books:
9
9
9
Smart Card Handbook: W. Rankl & W. Effing
Smart Card Security and Application: Mike Hendry
Smart cards: the smart card forum
Page 21 of 21