Design and implementation of e-KTP (Indonesian electronic identity card) key management system

e-KTP (Indonesian: Kartu Tanda Penduduk Elektronik) was introduced by the Indonesian Interior Ministry to replace the existing identity card. With contactless smart card technology, e-KTP obligates every applicant to have their fingerprints scanned, verified, and saved in the central storage. Furthermore, the data of the fingerprint will be stored in the e-KTP smart card as well. Since it is a very sensitive data, thus, some security controls must be implemented. This project developed a system to address this issue. First, a mutual authentication program between smart card readers/terminals and e-KTP smart cards, before transaction begins. The process authenticates both sides and proves that they are authorized by employing cryptographic protocols, algorithms, and keys. Furthermore the project also developed encryption and decryption program to protect data during transmission.