MRZ and chip access
MRZ data can participate in access derivation/protocols depending on the eMRTD. Public documentation does not infer BAC/PACE support without an implementation source.
Electronic passports/eMRTDs with MRZ, NFC and correctly scoped ICAO Doc 9303 concepts.
MRZ/access → LDS/DG → SOD hash → DSC → CSCA trust → holder binding
MRZ data can participate in access derivation/protocols depending on the eMRTD. Public documentation does not infer BAC/PACE support without an implementation source.
DG1 commonly carries biographic/MRZ data and DG2 the facial image in the ICAO LDS context. Other DGs are described only when the implementation uses them.
The SOD carries signed security data/hash references used to validate Data Group integrity. Reading a DG successfully is not equivalent to successful Passive Authentication.
Passive Authentication requires validation of the document signer certificate/trust chain to a CSCA/trust anchor according to trust-store policy. Public documentation does not claim ICAO PKD participation without evidence.
Active Authentication and Chip Authentication are separate mechanisms and are published only when the reader/backend implementation supports them.
After chip/document trust, live-biometric holder binding is a separate step. Evidence should distinguish chip integrity/trust results from face comparison/PAD results.