Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm experimenting with NFC and realized that my passport actually stores data that is only available when the passport is opened. (A closed passport doesn't seem to divulge any information)

What sequence of instructions is required to read data from a passport?

I assume a passive reading is insufficient, and some challenge / response is required. (I base this on how existing 3rd party NFC applications interact with passport data)

share|improve this question
up vote 7 down vote accepted

Information in passports is protected by the Basic Access Control protocol, the standard can be found here. In order to read from the passport you need certain pieces of information; the passport number, the D.O.B and the date of expiry.

NFC TagInfo is quite a nice app that can read passports amongst other things, make sure you enter the correct information before attempting the read though. It can take a few seconds to read due to the amount of information being transferred.

In the USA there are foil covers over the passport which prevent the NFC working without the passport being open however with my UK passport I can read it just fine when it's closed.

share|improve this answer
Some countries, e.g. the USA, actually use a metallic foil in the passport cover to act as a Faraday cage around the NFC chip, when the passport is closed, thus preventing the chip to be accessed from "outside" the passport. – jarnbjo Feb 12 '13 at 17:34
@jarnbjo I'm from UK and we don't have these, thanks for the info, answer updated. – Peanut Feb 13 '13 at 3:38

These following posts: 1 & 2 has some high-level information on the steps that you have to go through. It describes the steps through the use of an NFC tag reading app, but the steps look to include. First identifying the tag and making an attempt to read. The read requires information fromthe passport to decrypt the stored data. Hope this helps some.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.