Germany Deploys Live Enrollment System to Mitigate Passport Morphing Risk

Germany is instituting a national requirement that passport and ID applicants have their biometric photo captured live at designated offices or certified kiosks to mitigate face morphing attacks, according to officials overseeing the project.

The move addresses a long-standing vulnerability: applicants were previously able to submit their own digital photographs, which could be manipulated by blending the features of multiple individuals. Even a 30 percent morph can successfully match against different people, creating a significant weakness for border control systems.

Under the new approach, biometric images must be captured under controlled conditions at municipal offices or through secure self-service kiosks. State printer Bundesdruckerei has deployed its PointID enrollment system at more than 5,500 locations across Germany. The terminals include presentation attack detection for both face and fingerprints, automatic background elimination, and intelligent image selection to ensure compliance with ICAO standards.

Oversight is being provided by the Federal Office for Information Security (BSI), which has introduced new technical guidelines and is certifying devices from multiple vendors. The agency has received certification applications from several suppliers, indicating a competitive market for secure enrollment solutions.

Officials acknowledge that implementing a uniform biometric enrollment requirement across Germany’s decentralized state system poses organizational challenges. However, security experts stress that locking down the initial point of capture is the most critical step in the identity chain. By securing enrollment, the German government aims to prevent manipulated images from undermining the integrity of passports and ID cards.

The policy is regarded as one of the strongest measures yet adopted in Europe to counter biometric morphing threats. By mandating live capture at trusted locations, Germany is signaling that the reliability of ePassports depends not only on chip security and cryptography but also on the controlled environment in which the biometric is created.

Sources: Bundesdruckerei, BSI

–

By Ali Nassar-Smith