National Biometric National Biometric Security ProjectSecurity Project

FEDERAL LABORATORY FEDERAL LABORATORY CONSORTIUMCONSORTIUM

MID-ATLANTIC REGIONAL MID-ATLANTIC REGIONAL MEETINGMEETING

MICHAEL T. YURA, Ph.D.

PRESENTATION

NATIONAL BIOMETRIC SECURITY

PROJECT:

IT’S ROLE IN SUPPORT OF THE FEDERAL GOVERMENT

Assist government and private sector organizations deter terrorist attacks on

the civil infrastructure by enhancing effective,

automated human identification through the application of proven

biometric technologies.

National Biometric Security Project MissionNational Biometric Security Project Mission

“The Mission of the NBSP is vital to homeland security.” Porter Goss, Former Chairman, U.S. House of Representatives Permanent Select

Committee on Intelligence 23 July, 2002

National Biometric Security Project ProfileNational Biometric Security Project Profile

Established in 2001 in Washington DC and WV Non-Profit, independent, and technology neutralFunded since 2003 as prime contractor for Biometrics in National Security (BiNS) Program under NSAInitial focus on defining biometric community potential and establishing core capabilities:

Accelerating and expanding basic standards Developing an independent and certified test facility Defining a comprehensive training program in biometrics Conducting applications research Improving biometric information resources

What: Automatic method of human identification or identity verification based on physiological or behavioral

characteristics.

How: Computer technology matches patterns of live individuals in real time against enrolled records.

Types: Face, hand, finger, signature, iris, voice

Uses: Safeguard international borders, enhance computer network security, control access to facilities, protect against identity theft, verify

time and attendance, and prevent benefits fraud,

BiometricsBiometrics

Personal Recognition MethodsPersonal Recognition Methods

What a person possessesWhat a person possesses

What a person knowsWhat a person knows

What a person is or does (Biometric)What a person is or does (Biometric)

Primary Biometric ID FunctionsPrimary Biometric ID Functions

VERIFICATION

Authenticating identity of an individual by comparing a presented characteristic to a pre-enrolled characteristic

“ARE YOU WHO YOU SAY YOU ARE?”

IDENTIFICATION

Determining the identity of an individual by comparing a presented characteristic to all pre-enrolled in the database

“WHO ARE YOU?”

RECOGNITIONRECOGNITION

DNA Ear Pattern Facial Recognition Facial Thermograph Fingerprint Gait/Walking Iris Hand Geometry

Hand Topography Keystroke Dynamics Odor Palm Print Signature Vein Pattern Voice Pattern

Biometric TechnologiesBiometric Technologies

NBSP: Technology Neutral & Vendor IndependentNBSP: Technology Neutral & Vendor Independent

Representative ApplicationsRepresentative Applications

PHYSICAL ACCESS CONTROL

LOGICAL ACCESS CONTROL

AUTHENTICATION

SURVEILLANCE

Any Situation Where Positive Identification Any Situation Where Positive Identification of an Individual is Requiredof an Individual is Required

National Biometric Security Project ProfileNational Biometric Security Project Profile

BiNS I (2003-2004)

Completed broad status review of technology/industrial base Funded accelerated development of new standards Developed software to test standards compliance Opened new Test, Research & Data Center for testing biometric technology/products in Morgantown, WV* Completed major studies and provided new tools for biometrics and privacy Supported NIST and DHS in biometric programs; including tests of new e-passports and readers * Supported by WV Development Funds

National Biometric Security Project ProfileNational Biometric Security Project Profile

Developed comprehensive testing program to assess performance of biometric technologies; published minimum performance capabilities Developing comprehensive multi-level training program Designed/installed an IT suite to support advanced data services and web-based capability in biometrics* Developed Biometric Technology Application Manual (Vol 1) Converted the Biometric Consortium Electronic Discussion Group to new bulletin board format

BINS II (2004-2005)

* Supported by WV Development Funds

The Infrastructure ThreatThe Infrastructure ThreatTransportation Systems:

-Border security and international travelEconomic Systems: -The financial network, financial centers and facilities

Utility Systems: -Gas, oil, electric, water, etc

Social and Support Structures:- Government operations and facilities (all branches)- Life Services facilities (food, power, water, gas, oil)- Historical and symbolic structures and functions

Communications System:- Voice and data- Internet availability and function- Facilities and key centers

NBSP Test, Research & Data CenterNBSP Test, Research & Data Center

“…we must also prepare to deal with the technological capabilities that other countries will acquire…..this underscores how important it is for America to not only become a leader in the development of biometric technologies, but to always remain a leader.”

Senator Jay Rockefeller at the Dedication of NBSP’s TRDC –Dec. 2004

NBSP Test, Research & Data CenterNBSP Test, Research & Data Center TRDC established in Morgantown, WV as the only independent testing, training, and data facility focused exclusively on biometrics 8,000 square feet of space with four laboratories

The Biometric Data Laboratory Product Testing Lab Government Special Projects Lab Homeland Security Projects Lab Process for certification IAW ISO/IEC 17025 is underway

Data Services researches, collects, stores and maintains data related to all aspects of biometric development, sources, applications, and performance Training programs will be based in WV and mobile later

Requirements andRequirements and Standards Standards

“The latest science and most advanced technologies must continue to be sought out and utilized. To that end, common

international standards of biometrics must be developed…

the sooner the better.”

Tom Ridge, Secretary for Homeland Security, 14 January 2005

Standards AchievementsStandards Achievements

NBSP has invested $1.5m and 5,000 + hours Number of published standards doubled from 10 to 23 NIST Conformance Test Suite available to allow any accredited laboratory to test biometric equipment for conformance to standards. Standards to allow exchange biometric data in intelligible format for:

Signature/Sign Fingerprint – pattern based/ minutiae base Iris Face Hand Geometry

Standards AchievementsStandards Achievements

Expanded available software platforms for standards-based biometric systems

Funded development of Beta version of Windows CE Reference Implementation Software to support the BioAPI Consortium

Enabled international use of biometric-based Seafarers ID cards on behalf of the International Labor Organization (ILO)

Developed first draft of required standard for seafarer applications and enabled ILO to expand number of qualified biometric vendors

Funded U.S. National Body representatives positions to the ISO/IEC JTC 1, SC37 on biometrics at Seoul and Paris Supported NIST’s development of a BioAPI Conformance Test Suite (CTS) which will allow any testing agency to test any biometric for conformance to BioAPI standard

Test and EvaluationTest and Evaluation

“If we’re going to be serious about security at our airports, we need to employ biometric technology."

Rep. Peter DeFazio (D-OR), member of the House Committee on Transportation and Infrastructure

NBSP Testing Capabilities OverviewNBSP Testing Capabilities Overview ISO/IEC 17025 Lab Accreditation in

process* Environmentally controlled laboratories

equipped with state-of-the-art test and evaluation systems

Technology, Scenario and Operational test capabilities

Unique Biometric Qualified Product List Program

*scheduled completion 4Q06

Testing Achievements NBSP is creating a new level of assurance for government and private sector buyers and users of biometric equipment with development of a three-class testing program:

Class ITests commercial products against a common performance

threshold to establish basic capability to meet security requirements. Products that meet requirements posted on a Qualified Products List (QPL).

Class IIUses developed compliance suites to assess product conformance with standards

Class IIIConducts client specified tests to meet special application

requirements or perform comparative evaluations

Training and EducationTraining and Education

“The ultimate goal of training Is to reduce failure to enroll Rate and increase true Match rates. This keeps Costs down and user Satisfaction high.”

“Identity Assurance in the Information Age” by Woodward, Orlans and Higgins

Training AchievementsTraining Achievements

NBSP conducted extensive surveys of the biometric community to determine what practitioners in the field thought was most needed in training Then invested 2,200+ hours in curriculum development to fill identified gaps in available biometric training with three (3) new biometric training courses.

A biometric orientation course A technical course for program managers and operational personnel A certification course for tech support and maintenance

Education AchievementsEducation Achievements NBSP helped establish the foundation for Educational Biometric Centers of Excellence

Enables universities to design/implement biometric programs consistent with Government/Industry needs

NBSP hosted and chaired a Biometric Education Working Group (BEWG) attended by Univ. of Kentucky, James Madison, WVU and Michigan State Univ., the Federal Government (DHS) and industry Primary objective of BEWG is to propose a Biometric Curriculum prototype in preparation to certify schools as Programs of Excellence in Biometrics First BEWG report is due to be published in August 2005

Research and AnalysisResearch and Analysis“The objective of research is to support: improvements in the performance and integration of available and proven technology; development of effective countermeasures to threats to technology; and examination of new technology for application in infrastructure protection.”

From NBSP BiNS SOW

Research and Analysis AchievementsResearch and Analysis AchievementsImpact Studies and Tools Developed two comprehensive reports assessing U.S. Federal and international laws on privacy and personal data

Reports demonstrate how, under existing legal systems, biometrics can effectively be used as a system to verify identity in virtually any situation and, under certain circumstances, to positively identify individuals through the use of databases without sacrificing the desire for maintaining and protecting personal privacy.

Developed a Protocol for the Collection, Use, Dissemination, and Storage of Biometric Data

Protocol provides guidelines for organizations to meet federal requirements on the handling of information, especially as related to human subjects.

Data ServicesData Services

“An authoritative and regularly updated data base and reference source on biometrics is a pressing requirement to support all the activities described above.”

NBSP

Data Services AchievementsData Services Achievements

NBSP is developing a unique reference document titled the BTAM (Biometric Technology Applications Manual

Comprehensive reference manual on biometric applications. To assist integrate of biometrics into protection systems Real-world user’s manual for those who specify, buy, integrate, and

manage biometric systems Updated on a regular basis to assure its currency Augmented with a technology/industry database

NBSP is creating extensive data base on biometrics, linked to related existing sites, and including both publicly available and sequestered information to serve the user community and the industrial base. Initial operations will begin in late 2005

NBSP Current CommitmentsNBSP Current Commitments

US-VISIT Program: NBSP established a testing regime for passports and readers that utilize integrated circuit chips to retain secure biometric information. evaluated the interoperability and effectiveness of chips to be

inserted into visa-waiver country passports successfully conducted at the NBSP TRDC July 27-29, 2004.

Enhanced International Traveler System (EITS): At the request of the White House Office of Science & Technology Policy NBSP completed initial work on EITS defined the scope of the EITS effort evaluated the options for establishing a multilateral international

traveler identification system identified issues that would affect implementation

NBSP Current CommitmentsNBSP Current CommitmentsImage Collection Project: NIST-led effort to collect multiple, accurate biometric

images that may be used to advance research on biometric applications Establishes common database of images to test all competing systems within technology specific databases Provides common basis for testing, using data developed

from different sources, equipment, and conditions NBSP took the lead in defining the scope and organization of

this effort by proposing a three-phase project End result will be the collection of images from 10,000

subjects

NBSP InitiativesNBSP Initiatives

Safe Schools NBSP is providing support to a Department of Education

Safe Schools research project intended to develop a series of prototype safe schools configured with biometrics as part of the overall security plan for primary, middle and secondary schools

HAZMAT TRUCKING NBSP is examining the use of biometrics in identity

management and authentication as well as tracking and disabling any truck carrying hazardous materials

SummarySummary

Start-up period (2003-2005) addressed urgent needs for standards, research, and testing; assessed near-term requirements, and completed infrastructure development required to provide focused services to the biometric community The implementation period (2006-2007) will execute the developed testing, training, and data services to support users and the industrial base The overall mission and objectives remain focused:

Support and advance the use of biometrics as a key component in an integrated system for infrastructure protection Improve the performance and effectiveness of the technology as the primary tool in identity management and security

Thank YouThank You

Contact Information

MICHAEL T. YURA , Ph. D.150 Clay Street, Suite 350Morgantown, WV 26501(304)292-8800yura@nationalbiometric.org

10 million Americans suffered ID Theft in 2003 Cost to business = $50 billion Unauthorized checking account access is fastest growing

form of ID Theft Thieves taking advantage of reliance on single factor authentication for remote access to on-line banking

Impact of ID Theft on ConsumersImpact of ID Theft on Consumers