National Biometric Security Project FEDERAL LABORATORY CONSORTIUM MIDATLANTIC REGIONAL MEETING

1
National Biometric Security ProjectFEDERAL
LABORATORY CONSORTIUMMID-ATLANTIC REGIONAL
MEETING

MICHAEL T. YURA, Ph.D.
2
PRESENTATION

• NATIONAL BIOMETRIC SECURITY PROJECT
• ITS ROLE IN SUPPORT OF THE FEDERAL GOVERMENT

3
National Biometric Security Project Mission
Assist government and private sector
organizations deter terrorist attacks on the
civil infrastructure by enhancing
effective, automated human identification through
the application of proven biometric technologies.
The Mission of the NBSP is vital to
homeland security. Porter Goss, Former
Chairman, U.S. House of Representatives Permanent
Select
Committee on Intelligence 23 July, 2002
4
National Biometric Security Project Profile

• Established in 2001 in Washington DC and WV
• Non-Profit, independent, and technology neutral
• Funded since 2003 as prime contractor for
  Biometrics in
• National Security (BiNS) Program under NSA
• Initial focus on defining biometric community
  potential
• and establishing core capabilities
• Accelerating and expanding basic standards
• Developing an independent and certified test
  facility
• Defining a comprehensive training program in
  biometrics
• Conducting applications research
• Improving biometric information resources

5
Biometrics

• What Automatic method of human identification
  or identity verification based on physiological
  or behavioral characteristics.
• How Computer technology matches patterns of
  live individuals in real time against enrolled
  records.
• Types Face, hand, finger, signature, iris,
  voice
• Uses Safeguard international borders, enhance
  computer network security, control access to
• facilities, protect against identity theft,
  verify time and attendance, and prevent
  benefits fraud,

6
Personal Recognition Methods

• What a person possesses
• What a person knows
• What a person is or does (Biometric)

7
Primary Biometric ID Functions
RECOGNITION
VERIFICATION Authenticating identity of an
individual by comparing a presented
characteristic to a pre-enrolled characteristic
ARE YOU WHO YOU SAY YOU ARE?
IDENTIFICATION Determining the identity of an
individual by comparing a presented
characteristic to all pre-enrolled in the
database WHO ARE YOU?
8
Biometric Technologies

• DNA
• Ear Pattern
• Facial Recognition
• Facial Thermograph
• Fingerprint
• Gait/Walking
• Iris
• Hand Geometry

• Hand Topography
• Keystroke Dynamics
• Odor
• Palm Print
• Signature
• Vein Pattern
• Voice Pattern

NBSP Technology Neutral Vendor Independent
9
Representative Applications

• PHYSICAL ACCESS CONTROL
• LOGICAL ACCESS CONTROL
• AUTHENTICATION
• SURVEILLANCE
• Any Situation Where Positive Identification of
  an Individual is Required

10
National Biometric Security Project Profile

• BiNS I (2003-2004)
• Completed broad status review of
  technology/industrial base
• Funded accelerated development of new standards
• Developed software to test standards compliance
• Opened new Test, Research Data Center for
  testing
• biometric technology/products in Morgantown,
  WV
• Completed major studies and provided new tools
  for
• biometrics and privacy
• Supported NIST and DHS in biometric programs
  including
• tests of new e-passports and readers
• Supported by WV Development Funds

11
National Biometric Security Project Profile
BINS II (2004-2005)

• Developed comprehensive testing program to
  assess
• performance of biometric technologies
  published minimum
• performance capabilities
• Developing comprehensive multi-level training
  program
• Designed/installed an IT suite to support
  advanced data
• services and web-based capability in
  biometrics
• Developed Biometric Technology Application
  Manual (Vol 1)
• Converted the Biometric Consortium Electronic
  Discussion
• Group to new bulletin board format

Supported by WV Development Funds
12
The Infrastructure Threat
Transportation Systems -Border security and
international travel Economic Systems -The
financial network, financial centers and
facilities Utility Systems -Gas, oil,
electric, water, etc Social and Support
Structures - Government operations and
facilities (all branches) - Life Services
facilities (food, power, water, gas, oil) -
Historical and symbolic structures and
functions Communications System - Voice and
data - Internet availability and function -
Facilities and key centers

13
NBSP Test, Research Data Center

we must also prepare to deal with the
technological capabilities that other countries
will acquire..this underscores how important it
is for America to not only become a leader in the
development of biometric technologies, but to
always remain a leader.
Senator Jay Rockefeller at the Dedication of
NBSPs TRDC Dec. 2004
14
NBSP Test, Research Data Center

• TRDC established in Morgantown, WV as the only
• independent testing, training, and data
  facility focused
• exclusively on biometrics
• 8,000 square feet of space with four
  laboratories
• The Biometric Data Laboratory
• Product Testing Lab
• Government Special Projects Lab
• Homeland Security Projects Lab
• Process for certification IAW ISO/IEC 17025 is
  underway
• Data Services researches, collects, stores and
  maintains
• data related to all aspects of biometric
  development,
• sources, applications, and performance
• Training programs will be based in WV and mobile
  later

15
Requirements and Standards
The latest science and most advanced
technologies must continue to be sought out and
utilized. To that end, common international
standards of biometrics must be developedthe
sooner the better.

Tom Ridge, Secretary for Homeland Security, 14
January 2005
16
Standards Achievements

• NBSP has invested 1.5m and 5,000 hours
• Number of published standards doubled from 10 to
  23
• NIST Conformance Test Suite available to allow
  any
• accredited laboratory to test biometric
  equipment for
• conformance to standards.
• Standards to allow exchange biometric data in
  intelligible
• format for
• Signature/Sign
• Fingerprint pattern based/ minutiae base
• Iris
• Face
• Hand Geometry

17
Standards Achievements

• Expanded available software platforms for
  standards-based
• biometric systems
• Funded development of Beta version of Windows CE
  Reference
• Implementation Software to support the BioAPI
  Consortium
• Enabled international use of biometric-based
  Seafarers ID
• cards on behalf of the International Labor
  Organization (ILO)
• Developed first draft of required standard for
  seafarer applications
• and enabled ILO to expand number of qualified
  biometric vendors
• Funded U.S. National Body representatives
  positions to the
• ISO/IEC JTC 1, SC37 on biometrics at Seoul
  and Paris
• Supported NISTs development of a BioAPI
  Conformance Test
• Suite (CTS) which will allow any testing
  agency to test any
• biometric for conformance to BioAPI standard

18
Test and Evaluation
If were going to be serious about security at
our airports, we need to employ biometric
technology."
Rep. Peter DeFazio (D-OR), member of the House
Committee on Transportation and Infrastructure
19
NBSP Testing Capabilities Overview

• ISO/IEC 17025 Lab Accreditation in process
• Environmentally controlled laboratories equipped
  with state- of-the-art test and evaluation
  systems
• Technology, Scenario and Operational test
  capabilities
• Unique Biometric Qualified Product List Program
• 
  scheduled completion 4Q06

20
Testing Achievements

• NBSP is creating a new level of assurance for
  government
• and private sector buyers and users of
  biometric equipment
• with development of a three-class testing
  program
• Class I
• Tests commercial products against a common
  performance
• threshold to establish basic capability to
  meet security
• requirements. Products that meet
  requirements posted on a
• Qualified Products List (QPL).
• Class II
• Uses developed compliance suites to assess
  product conformance with standards
• Class III
• Conducts client specified tests to meet special
  application requirements or perform comparative
  evaluations

21
Training and Education
The ultimate goal of training Is to reduce
failure to enroll Rate and increase true Match
rates. This keeps Costs down and user
Satisfaction high.
Identity Assurance in the Information Age by
Woodward, Orlans and Higgins
22
Training Achievements

• NBSP conducted extensive surveys of the
  biometric
• community to determine what practitioners in
  the field
• thought was most needed in training
• Then invested 2,200 hours in curriculum
  development
• to fill identified gaps in available
  biometric training with
• three (3) new biometric training courses.
• A biometric orientation course
• A technical course for program managers and
  operational
• personnel
• A certification course for tech support and
  maintenance

23
Education Achievements

• NBSP helped establish the foundation for
  Educational Biometric Centers of Excellence
• Enables universities to design/implement
  biometric programs consistent with
  Government/Industry needs
• NBSP hosted and chaired a Biometric Education
  Working Group (BEWG) attended by Univ. of
  Kentucky, James Madison, WVU and Michigan State
  Univ., the Federal Government (DHS) and industry
• Primary objective of BEWG is to propose a
  Biometric Curriculum prototype in preparation to
  certify schools as Programs of Excellence in
  Biometrics
• First BEWG report is due to be published in
  August 2005

24
Research and Analysis
The objective of research is to support
improvements in the performance and integration
of available and proven technology development
of effective countermeasures to threats to
technology and examination of new technology for
application in infrastructure protection.
From NBSP BiNS
SOW
25
Research and Analysis Achievements

• Impact Studies and Tools
• Developed two comprehensive reports assessing
  U.S.
• Federal and international laws on privacy and
  personal
• data
• Reports demonstrate how, under existing legal
  systems, biometrics can effectively be used as a
  system to verify identity in virtually any
  situation and, under certain circumstances, to
  positively identify individuals through the use
  of databases without sacrificing the desire for
  maintaining and protecting personal privacy.
• Developed a Protocol for the Collection, Use,
  Dissemination, and
• Storage of Biometric Data
• Protocol provides guidelines for organizations to
  meet federal requirements on the handling of
  information, especially as related to human
  subjects.

26
Data Services
An authoritative and regularly updated data base
and reference source on biometrics is a pressing
requirement to support all the activities
described above.
NBSP
27
Data Services Achievements

• NBSP is developing a unique reference document
  titled
• the BTAM (Biometric Technology Applications
  Manual
• Comprehensive reference manual on biometric
  applications.
• To assist integrate of biometrics into protection
  systems
• Real-world users manual for those who specify,
  buy, integrate, and manage biometric systems
• Updated on a regular basis to assure its currency
• Augmented with a technology/industry database
• NBSP is creating extensive data base on
  biometrics, linked to related existing sites, and
  including both publicly available and sequestered
  information to serve the user community and the
  industrial base. Initial operations will begin
  in late 2005

28
NBSP Current Commitments

• US-VISIT Program NBSP established a testing
  regime for passports and readers that utilize
  integrated circuit chips to retain secure
  biometric information.
• evaluated the interoperability and effectiveness
  of chips to be inserted into visa-waiver country
  passports
• successfully conducted at the NBSP TRDC July
  27-29, 2004.
• Enhanced International Traveler System (EITS) At
  the request of the White House Office of Science
  Technology Policy NBSP completed initial work
  on EITS
• defined the scope of the EITS effort
• evaluated the options for establishing a
  multilateral international traveler
  identification system
• identified issues that would affect
  implementation

29
NBSP Current Commitments

• Image Collection Project
• NIST-led effort to collect multiple, accurate
  biometric images that may be used to advance
  research on biometric applications
• Establishes common database of images to test
• all competing systems within technology
  specific databases
• Provides common basis for testing, using data
  developed from different sources, equipment, and
  conditions
• NBSP took the lead in defining the scope and
  organization of this effort by proposing a
  three-phase project
• End result will be the collection of images from
  10,000 subjects

30
NBSP Initiatives

• Safe Schools
• NBSP is providing support to a Department
  of Education Safe Schools research project
  intended to develop a series of prototype safe
  schools configured with biometrics as part of the
  overall security plan for primary, middle and
  secondary schools
• HAZMAT TRUCKING
• NBSP is examining the use of biometrics in
  identity management and authentication as well as
  tracking and disabling any truck carrying
  hazardous materials

31
Summary

• Start-up period (2003-2005) addressed urgent
  needs for
• standards, research, and testing assessed
  near-term
• requirements, and completed infrastructure
  development
• required to provide focused services to the
  biometric
• community
• The implementation period (2006-2007) will
  execute the
• developed testing, training, and data
  services to support
• users and the industrial base
• The overall mission and objectives remain
  focused
• Support and advance the use of biometrics as a
  key component in
• an integrated system for infrastructure
  protection
• Improve the performance and effectiveness of the
  technology as
• the primary tool in identity management and
  security

32
Thank You
33
Contact Information

• MICHAEL T. YURA , Ph. D.
• 150 Clay Street, Suite 350
• Morgantown, WV 26501
• [phone]
• yura_at_nationalbiometric.org

34
(No Transcript)
35

Impact of ID Theft on Consumers

• 10 million Americans suffered ID Theft in 2003
• Cost to business 50 billion
• Unauthorized checking account access is fastest
  growing
• form of ID Theft
• Thieves taking advantage of reliance on single
  factor
• authentication for remote access to on-line
  banking