JMRTD

Installation Instructions

Downloads

The host API can be downloaded as an automatic installer (thanks to IzPack and JSmooth).

• The current version of the host API is 0.4.4 and can be downloaded as a Windows installer: jmrtd_installer.exe or as a platform independent JAR file: jmrtd_installer.jar.
• The current version of the applet is passportapplet-0.0.2.zip.

Alternatively, you could check out the SVN repository (we're using the Subclipse plugin for Eclipse) Note that the host API currently requires JDK 1.6.

Hardware

The host API requires a (contactless) PC/SC smart card reader. It was tested with:

• SCM Microsystems SDI010 dual interface reader.
  • Linux: using the standard CCID PCSC-lite driver. Tested by Martijn.
  • MacOS X: using the standard CCID PCSC-lite driver. Tested by Ronny.
  • Windows XP: using latest drivers provided by manufacturer. Tested by Martijn.
• OmniKey CardMan 5121 RFID dual interface reader.
  • Linux on i386: using PCSC-lite drivers provided by manufacturer, version 1.2.0. Version 1.5.0 of the driver caused some problems. Version 2.6.0 probably works fine too. Tested by Martijn.
  • Linux on x86_64: using PCSC-lite drivers provided by manufacturer, version 2.6.0. Works fine. Tested by Martijn.
  • Windows XP: using latest drivers provided by manufacturer. Tested by Martijn.
• OmniKey CardMan 5321 RFID dual interface reader.
  • Windows XP: using latest drivers provided by manufacturer. Tested by Martijn.
• ACS ACR122U NFC reader. (Also available as touchatag reader.)
  • Linux: using Java wrapper around CCID driver in PCSC-lite. Highly experimental, code for wrapper is written by Wojciech, available in SVN. Tested by Wojciech.
  • Windows XP: using (the same) Java wrapper around manufacturer supplied driver. Highly experimental. Tested by Martijn.
• ACS ACR120U
  • Windows XP: using Java wrapper around manufactuer supplied JNI wrapper around manufacturer supplied Windows-only driver. Is extremely slow. Tested by Martijn.

If you manage to get things working with other hardware, please let us know.

Passport Host API

You may need to first install the following:

• Java runtime 1.6
• PCSC-Lite: a PC/SC stack for Linux and other Unices. (Windows XP has built-in PC/SC support, so no need to download this, but you may need to start the "smart card service" explicitly.)
• A JCE crypto provider (we use the Legion of the Bouncy Castle provider ourselves).
• Bouncy Castle is needed anyway, since we use classes from this package to decode ASN.1/BER/DER encoded representations of data on the passport. Download the provider jar and place it somewhere in the classpath.
• Handling of CV certificates in the host API is done using EJBCA's cert-cvc library.
• JAI ImageIO: for interpreting JPEG 2000 data (the facial image is possibly stored in this format).
• If you want to play around with the applet using a simulator:
  • ApduIO (part of the Java Card Development Kit, see below): for communication with CREF.
  • JCOP offcard API (part of the JCOP toolset, see below): for communicating with the JCOP simulator.

The JMRTD jar file can be placed anywhere in the class path.

Passport Applet

• If you have a hardware Java Card: Use the development kit that comes with your Java Card hardware to generate a CAP file and upload it to your card.
• Sun's Java Card Development Kit contains a Java Card simulator (the "CREF reference implementation") which is supported.
• IBM's JCOP toolset (available as an Eclipse plugin) also contains a simulator for different JCOP cards which is supported.

Functionality to personalize the passport applet after it is uploaded to the card is provided in the passport host API.