Language switcher

You are here

The majority of electronically used ID-cards were renewed

494,000 ID-cards with a security risk, i.e. 95% of electronically used cards, were renewed by the end of March. As at 1 April, the certificates of almost 300,000 cards were revoked. The cards will still be valid as identity and travel documents until the date marked on the card.

‘The government revoked the certificates of cards with a security risk to avoid the exploitation of the weakness in the chip. To our knowledge, this security risk has not realised and no one’s digital identity has been abused due to it,’ said Margus Arm, Head of the Electronic Identity Department of the Information System Authority.

The Director General of the Police and Border Guard Board suspended the certificates of 760,000 ID-cards with a security risk on 3 November last year after Czech researchers had published their research describing the security risk in the chips manufactured by Infineon, which are used in Estonian ID-cards. The security risk affected ID-cards, including residence permit cards, e-residency cards, and digital ID, issued between October 2014 and 25 October 2017. The documents and mobile IDs issued earlier were not affected by this security risk.

‘We are glad that most people who use ID-cards electronically renewed their certificates and that the security risk had no effect on using Estonian e-services. Estonian people are used to e-services as well as software updates, which helped to mitigate the risk affecting Estonian ID-cards quickly. However, we must consider that for security reasons, our digital identity might require software updates also in the future,’ said Margit Ratnik, Head of the Identity and Status Bureau of the Police and Border Guard Board.

The majority of un-renewed ID-cards have not been used electronically for a year, i.e. no digital signatures have been given and electronical services have not been used. About 30,000 cards that were not renewed have been used electronically at least once.

Numbers:

  • 1.3 million ID-cards
  • Certificates of 760,000 cards were suspended
  • 494,000 ID-cards were renewed (incl. digital ID, residence permits, e-residency cards)
  • Certificates of nearly 300,000 ID-cards were revoked
  • 520,000 ID-cards were used electronically last year
  • 160,000 users of mobile-ID

More news on the same subject

05.11.2019

University of Tartu research: Europe needs to specify how digital signatures are given

Researchers at the University of Tartu – Tõnu Mets, guest lecturer of IT law at the School of Law and sworn advocate, and Arnis Paršovs, head of the information security working group at the Institute of Computer Science – published the article ‘Time of signing in the Estonian digital signature scheme’.

18.09.2019

Director General of RIA: the courage to experiment and make mistakes ensures a brighter future for the e-state

17.08.2019 – Experts from more than 30 countries will meet at the conference about the future of electronic identity starting today to seek and present new challenges of the digital society.