Changes from adopted text to adopted text

Removed(b) DG 5: image of the licence holder’s signature;

Removed(c) DG 6: image of the licence holder’s face.

RemovedDG 1 data shall be structured as specified in point 6 and as specified in Part B2, item 6. Data contained in DG 5 and DG 6 shall be stored in accordance with the specifications of part B2, item 7.

Removed(3) Additional Data Groups

RemovedThe additional data elements, where provided for by the national legislation of Member States concerning driving licences, shall be stored in the following DGs:

Removed(a) DG 2: details on the licence holder, except for biometric data;

Removed(b) DG 3: details on issuing authority;

Removed(c) DG 4: portrait image;

Removed(d) DG 7: biometric data regarding fingerprint of the licence holder;

Removed(e) DG 8: biometric data regarding iris of the licence holder; [Am. 138]

Removed(f) DG 11: other details, such as the full name of the holder in national characters.

RemovedData contained in these DGs shall be stored in accordance with the specifications of part B2, item 8.

Removed5. DATA SECURITY MECHANISMS

RemovedAppropriate mechanisms shall be used for the validation of authenticity and integrity of the microchip and data contained in it and for restricting access to driving licence data.

RemovedData on the microchip shall be protected according the specifications laid down in part B2, item 3. This section specifies additional requirements that shall be complied with.

Removed(1) Authenticity Verification

Removed(a) Mandatory Passive Authentication

RemovedAll DGs stored in the EU Driving Licence application shall be protected with passive authentication.

RemovedData related to passive authentication shall comply with the requirements specified in part B2, item 9.

Removed(b) Optional Active Authentication

RemovedOptional Active Authentication mechanisms shall be applied to ensure that the original microchip has not been replaced.

Removed(2) Access Restriction

Removed(a) Mandatory Basic Access Protection

RemovedThe Basic Access Protection mechanism (BAP) shall be applied for all data in the EU Driving Licence application. In the interest of interoperability with existing systems such as that using Machine Readable Travel Documents (eMRTD) it is mandatory to use the one-line Machine Readable Zone (MRZ), as specified in part B2, item 10.

RemovedThe Kdoc document key used to access the chip is generated from the one-line MRZ, which can be entered either manually or using an Optical Character Recognition (OCR) reader. The BAP 1 configuration defined for a one-line MRZ as specified in part B2, item 10 shall be applied.

Removed(b) Conditional Extended Access Control

RemovedWhere personal data as referred to in Article 9(1) of Regulation (EU) 2016/679 are stored on the microchip, access to such data shall be protected with additional measures.

RemovedThe Extended Access Control mechanisms shall comply with the specifications of part B2, item 11.

Removed(3) Public Key Infrastructure (PKI) for driving licences including a microchip

RemovedMember States shall establish the necessary national arrangements for Public Key management, in accordance with Annex A of ISO standard 18013_3.

Removed6. DATA PRESENTATION

Removed(1) Formatting of data in DG 1

Removed(2) Logical record format

RemovedThe categories regarding vehicles, restrictions or conditions shall be compiled in a data object following the structure specified in the following table:

Removedwhere:

Removed(a) vehicle category codes shall be presented as defined in Article 6 (such as AM, A1, A2, A, B1, B, etc.);

Removed(b) date of issue shall be presented in the format DDMMYYYY (day in two digits followed by month in two digits followed by year in four digits) for the vehicle category;

Removed(c) date of expiry shall be presented in the format DDMMYYYY (day in two digits followed by month in two digits followed by year in four digits) for the vehicle category;

Removed(d) code, sign and value refer to additional information or restrictions relating to the vehicle category or the driver.

RemovedPART B2: List of applicable standards for driving licences which include a storage medium

RemovedPART B3: Procedure for EU type-approval of driving licences which include a microchip

Removed1. GENERAL PROVISIONS

RemovedManufacturers applying for an EU type-approval of driving licences including a microchip shall present a security certificate and a functional certificate.

RemovedAny intended modification to the production process, including software, shall be subject to a prior notification to the authority which granted type-approval. The authority may require further information and tests before accepting the modification.

RemovedTests shall follow the methods laid down in item 12 of part B2.

Removed2. SECURITY CERTIFICATE

RemovedFor the security evaluation, driving licence microchips shall be evaluated in accordance with the criteria specified in part B2, item 13.

RemovedA security certificate shall only be delivered upon successful evaluation of the ability of the microchip to resist attempts to tamper with or alter data.

Removed3. FUNCTIONAL CERTIFICATE

RemovedA functional evaluation of driving licences including a microchip shall be laboratory- tested in accordance with the criteria specified in part B2, item 14.

RemovedMember States implementing a microchip on driving licences shall ensure that the relevant functional standards and the requirements of part B1 are complied with.

RemovedA functional certificate shall be delivered to the manufacturer where all of the following conditions are met:

Removedthere is a valid security certificate for the microchip;

Removedcompliance with requirements of part B2 has been demonstrated;

Removedfunctional tests have been passed successfully.

RemovedThe relevant Member State authority shall be responsible for issuing the functional certificate. The functional certificate shall indicate the identity of the issuing authority, the identity of the applicant, the identification of the microchip and a detailed list of the tests and their results.

Removed4. EU TYPE-APPROVAL CERTIFICATE

Removed(1) Model certificate

RemovedMember States shall deliver the EU type-approval certificate upon presentation of security and functional certificates as provided in this Annex. EU type-approval certificates shall comply with the model in part B4.

Removed(2) Numbering system