Be careful and always make sure that you share information only through the secure website of the Slovak public administration. A secure page always starts with https:// before the domain name of the website.
An electronic identity card refers to one of the following documents or devices:
An identity card equipped with an electronic chip (hereinafter referred to as “eID”)
A residence permit document equipped with an electronic chip (hereinafter referred to as “eDoPP”)
An alternative authenticator (hereinafter referred to as “AA”)
The new Identity Cards Act No. 395/2019 Coll. Opens in a new windowallows eIDs to be issued as electronic documents without the holder’s facial image and signature, for the purposes of electronic healthcare services.
The following rules should be observed to ensure the safe use of an eID card:
Keep your eID card in a safe place, out of the reach of other people.
Never allow anyone else to use your eID card.
Ensure that your security codes remain confidential. Do not disclose them to anyone. If you need to write them down, never store the written record together with your eID card.
Your security codes are confidential and must never be disclosed to anyone, even if someone asks you to provide them.
If your eID card is lost or stolen, or if you suspect that it may have been misused, notify the police immediately and arrange for any stored certificates to be revoked. This can be done either by visiting the Documents and Records Department at a District Directorate of the Police Force in person or through the eGovernment service provided for this purpose.
An application for an eID can be submitted at any District Directorate of the Police Force. This applies only to identity cards in the ID1 format, which began to be issued on 1 July 2008.
Mobile service units may also visit citizens who are unable to submit an application in person, for example, because they are bedridden or have limited mobility.
The electronic chip significantly expands the range of uses of an identity card. When an identity document does not contain an electronic chip, the holder must generally be physically present to prove their identity to public or commercial institutions. An eID equipped with an electronic chip extends this functionality to electronic communication over the internet. The citizen’s identification data is stored on the eID chip. Thanks to the electronic chip, the eID can also be used to create a qualified electronic signature (QES).
The BOK is a Personal Security Code that, together with the electronic identity card, is used to confirm the cardholder’s identity when communicating electronically with the information systems of public administration bodies or with other natural or legal persons.
A BOK code is not assigned to documents without the holder’s photograph and signature that are intended for use in electronic healthcare services.
Misuse of an electronic identity card for electronic transactions is prevented by the requirement to know the Personal Security Code (BOK) or, in the case of a qualified electronic signature (QES), the QES PIN.
Once the loss has been reported, the possibility of using the document for electronic identification in online communications with public administration is automatically revoked.
If a qualified certificate for creating a qualified electronic signature (QES) is stored on the electronic identity card, the holder must request its revocation from the certification authority that issued it.
Instructions on how to do this can be obtained from the relevant officer when applying for a qualified certificate at a District Directorate of the Police Force.
The introduction of electronic identity cards is part of the gradual process of digitising public administration services.
An electronic identity card serves as a secure medium for storing citizens’ identification data. It also enables citizens to identify and authenticate themselves electronically when using public administration services.
The electronic identity card can also be used to create a qualified electronic signature (QES). In electronic communications between citizens and public administration, this signature fulfils a role equivalent to that of a handwritten signature used in non-electronic dealings with public authorities.
An electronic identity card is used to prove a person’s identity when dealing with government offices and institutions in person. It also enables identity verification in the electronic environment. The ability to verify the cardholder’s identity is a fundamental and essential function when using electronic services, whether in the public or private sector.
Examples of electronic public-sector services include:
Reporting changes in personal information
Submitting applications, complaints and lawsuits
Auctions and public procurement
Land registry services
Tax office services
eHealth services
And other similar services.
The Online eID function of an electronic identity card enables its holder to reliably prove their identity (authenticate themselves) when accessing electronic services. The function is activated by entering a BOK code when applying for an electronic identity card. Initially, electronic services will include only eGovernment services provided by public administration bodies. At a later stage, online services offered by private companies, such as banking services and similar services, will also be included. It is expected that, for an increasing number of internet service providers offering personalised services, using the Online eID function will be much easier, safer and more convenient than alternative methods of user identification and authentication.
The principle will be explained using the example of logging in to the electronic services portal of the Ministry of the Interior of the Slovak Republic.
On the portal website, the holder of an electronic identity card selects the login option. The portal redirects the holder to the eID authentication system (hereinafter referred to as “AS-C”), which establishes a secure, encrypted connection to the electronic identity card. The holder is then prompted to enter their Personal Security Code (BOK). Once the BOK has been entered, AS-C uses secure cryptographic algorithms to verify that the card is valid (i.e. that it has not been lost, stolen or cloned and that its data has not been altered) and reads the holder’s identity from the card. AS-C then issues a temporary confirmation that electronic identification has been completed. The holder’s browser sends this confirmation to the electronic services portal of the Ministry of the Interior of the Slovak Republic. This confirmation is also protected by cryptographic mechanisms against misuse. The portal uses the electronic identification confirmation to establish the holder’s identity and grant access to the electronic services provided.
Citizens can obtain drivers for a contact smart card reader from its manufacturer, for example, on a storage medium provided at the time of purchase or from the manufacturer's official support website.
The software for an electronic identification card manages the electronic identification process and provides standard programming interfaces that allow other applications to integrate with the card's functions. For example, an application for creating a qualified electronic signature can use this software to communicate with the relevant qualified electronic signature (QES) functions on the card.
Electronic identification of citizens in online interactions using the online eID function is provided by the eID Client application. During the electronic identification process, the application interacts with the user and enables the AS-C to communicate remotely with the electronic identification card.
The eID Client application can also be used to change the BOK code, as well as the QES PIN and PUK.
The legally prescribed validity period of a national ID card with an electronic chip is 10 years. The validity period of a residence permit card with an electronic chip depends on the duration of the authorised stay. Alternative authenticators are issued with a validity period of 3 years.
Examples of the different types of electronic identification cards are shown in the user manualOpens in a new window for the eID Client application.
The electronic chip stores the citizen’s identification data, such as their first name, surname, residential address, date of birth, and information about the validity of the identity card. The chip may also store certificates used to create a qualified electronic signature (QES), as well as certificates required to encrypt communication with the electronic identity card.
The BOK is a six-digit code chosen by the cardholder when applying for an electronic identity card.
The cardholder can change the BOK at any time during the validity period of the identity card. The change can be made at a District Directorate of the Police Force, at another location announced by the Ministry of the Interior of the Slovak Republic, or by using the application software made available for this purpose by the Ministry of the Interior of the Slovak Republic.
If you enter the wrong BOK five times in a row, the ability to communicate electronically will be blocked. You can then have it unblocked in person at a District Directorate of the Police Force. If your identity card was issued after 21 June 2021, you can unblock your BOK using your PUK in the eID Application settings, under the PIN Management section.
If you forget your BOK and it becomes blocked after unsuccessful attempts to enter it, you can request a new BOK at any District Directorate of the Police Force. An officer will verify your identity and enable you to set a new BOK. If your identity card was issued after 21 June 2021, you can unblock your BOK using your PUK in the eID Application settings, under the PIN Management section.
Sensitive personal data will also be stored on the chip of the electronic identity card. Therefore, ensuring the security of this data is an essential part of the solution. The data stored on the chip is protected by security mechanisms and the BOK code. Only authorized entities possessing the appropriate access certificate will be able to retrieve data from the chip. The card is effectively protected against security threats such as impersonation, theft, data tampering, and cloning.
No, only the data that the citizen (cardholder) authorizes and consents to be read can be accessed from the electronic identity card. The citizen confirms access to the selected data by entering the BOK code. When data is read from the eID, a secure, encrypted communication channel is established between the server and the card, through which the server reads the data approved by the citizen.
Yes. The cardholder can access the data stored on the contact chip of the electronic identity card. The cardholder can verify the data recorded on the chip at a kiosk located at a District Directorate of the Police Force.
The AS-C is operated by the Ministry of the Interior of the Slovak Republic.
Online service providers who have authorised access to this function of the identity card through an access certificate. The issuance of these certificates is controlled by the state certification authority.
Frequent use may cause a layer of dirt to accumulate on the contact surfaces of the electronic chip. This may result, for example, from friction between the chip and the reader's contact surfaces. In such cases, the chip should be wiped clean.
The Slovak Republic is joining the group of countries that already issue electronic identity cards to their citizens, including Germany, Estonia, Belgium, Italy, the Czech Republic and many others. The Slovak electronic identity card draws inspiration from these successful concepts while incorporating the latest technologies and security standards.
No. The eIDfunction was not designed exclusively for use on the Internet. It can also be used, for example, at kiosks operated by the Ministry of the Interior, where ID card holders can read information stored on the chip. In the future, more such devices are expected to become available in the commercial sector as well.