National Biometric Security Project FEDERAL LABORATORY ...

spotlessstareSecurity

Nov 29, 2013 (3 years and 6 months ago)

57 views



National Biometric
Security Project

FEDERAL LABORATORY
CONSORTIUM

MID
-
ATLANTIC REGIONAL
MEETING




MICHAEL T. YURA, Ph.D.

PRESENTATION

NATIONAL BIOMETRIC SECURITY
PROJECT
:


IT’S ROLE IN SUPPORT OF THE
FEDERAL GOVERMENT



Assist government and private sector
organizations deter terrorist attacks on
the civil infrastructure by enhancing
effective,

automated human identification
through the application of proven
biometric technologies.


National Biometric Security Project Mission


“The Mission of the NBSP is vital to homeland security.”



Porter Goss, Former Chairman, U.S. House of Representatives Permanent Select


Committee on Intelligence 23 July, 2002



National Biometric Security Project Profile


Established in 2001 in Washington DC and WV


Non
-
Profit, independent, and technology neutral


Funded since 2003 as prime contractor for Biometrics in


National Security (BiNS) Program under NSA


Initial focus on defining biometric community potential


and establishing core capabilities:



Accelerating and expanding basic standards



Developing an independent and certified test facility



Defining a comprehensive training program in biometrics



Conducting applications research



Improving biometric information resources


What:


Automatic method of human identification or identity


verification based on physiological or behavioral



characteristics.



How:


Computer technology matches patterns of live



individuals in real time against enrolled records.


Types:


Face, hand, finger, signature, iris, voice



Uses:

Safeguard international borders, enhance




computer network security, control access to




facilities, protect against identity theft, verify




time and attendance, and prevent benefits fraud,



Biometrics

Personal Recognition Methods



What a person possesses



What a person knows



What a person is or does (Biometric)


Primary Biometric ID Functions

VERIFICATION


Authenticating identity of an

individual by comparing a
presented characteristic to a
pre
-
enrolled characteristic



“ARE YOU WHO YOU
SAY YOU ARE?”

IDENTIFICATION


Determining the identity of an

individual by comparing a
presented characteristic to all
pre
-
enrolled in the database


“WHO ARE YOU?”

RECOGNITION



DNA



Ear Pattern



Facial Recognition



Facial Thermograph



Fingerprint



Gait/Walking



Iris



Hand Geometry








Hand Topography



Keystroke Dynamics



Odor



Palm Print



Signature



Vein Pattern



Voice Pattern


Biometric Technologies


NBSP: Technology Neutral & Vendor Independent


Representative Applications



PHYSICAL ACCESS CONTROL



LOGICAL ACCESS CONTROL



AUTHENTICATION



SURVEILLANCE


Any Situation Where Positive Identification
of an Individual is Required






National Biometric Security Project Profile

BiNS I (2003
-
2004)




Completed broad status review of technology/industrial base



Funded accelerated development of new standards



Developed software to test standards compliance



Opened new Test, Research & Data Center for testing


biometric technology/products in Morgantown, WV*



Completed major studies and provided new tools for


biometrics and privacy



Supported NIST and DHS in biometric programs; including


tests of new e
-
passports and readers


* Supported by WV Development Funds


National Biometric Security Project Profile




Developed comprehensive testing program to assess


performance of biometric technologies; published minimum


performance capabilities



Developing comprehensive multi
-
level training program



Designed/installed an IT suite to support advanced data


services and web
-
based capability in biometrics*



Developed Biometric Technology Application Manual (Vol 1)



Converted the Biometric Consortium Electronic Discussion


Group to new bulletin board format


BINS II (2004
-
2005)

* Supported by WV Development Funds






The Infrastructure Threat

Transportation Systems:


-
Border security and international travel

Economic Systems:



-
The financial network, financial centers and facilities

Utility Systems:



-
Gas, oil, electric, water, etc

Social and Support Structures:


-

Government operations and facilities (all branches)


-

Life Services facilities (food, power, water, gas, oil)


-

Historical and symbolic structures and functions

Communications System:


-

Voice and data


-

Internet availability and function


-

Facilities and key centers






NBSP Test, Research & Data Center



“…we must also prepare to deal
with the technological capabilities
that other countries will
acquire…..this underscores how
important it is for America to not
only become a leader in the
development of biometric
technologies, but to always
remain a leader.”


Senator Jay Rockefeller at the Dedication of NBSP’s TRDC

Dec. 2004






NBSP Test, Research & Data Center




TRDC established in Morgantown, WV as the only


independent testing, training, and data facility focused


exclusively on biometrics



8,000 square feet of space with four laboratories



The Biometric Data Laboratory



Product Testing Lab



Government Special Projects Lab



Homeland Security Projects Lab



Process for certification IAW ISO/IEC 17025 is underway



Data Services researches, collects, stores and maintains


data related to all aspects of biometric development,


sources, applications, and performance



Training programs will be based in WV and mobile later






Requirements and

Standards


“The latest science and most
advanced technologies must
continue to be sought out and
utilized. To that end, common
international standards of
biometrics must be developed…

the sooner the better.”












Tom Ridge, Secretary for Homeland Security, 14 January 2005






Standards Achievements









NBSP has invested $1.5m and 5,000 + hours



Number of published standards doubled from 10 to 23



NIST Conformance Test Suite available to allow any


accredited laboratory to test biometric equipment for


conformance to standards.



Standards to allow exchange biometric data in intelligible


format for:



Signature/Sign



Fingerprint


pattern based/ minutiae base



Iris



Face



Hand Geometry





Standards Achievements









Expanded available software platforms for standards
-
based


biometric systems



Funded development of Beta version of Windows CE Reference


Implementation Software to support the BioAPI Consortium



Enabled international use of biometric
-
based Seafarers ID


cards on behalf of the International Labor Organization (ILO)



Developed first draft of required standard for seafarer applications


and enabled ILO to expand number of qualified biometric vendors



Funded U.S. National Body representatives positions to the


ISO/IEC JTC 1, SC37 on biometrics at Seoul and Paris



Supported NIST’s development of a BioAPI Conformance Test


Suite (CTS) which will allow any testing agency to test any


biometric for conformance to BioAPI standard

Test and Evaluation


“If we’re going to be serious
about security at our airports,
we need to employ biometric
technology."






Rep. Peter DeFazio (D
-
OR), member of the House Committee on

Transportation and Infrastructure


NBSP Testing Capabilities Overview


ISO/IEC 17025 Lab Accreditation in

process*


Environmentally controlled

laboratories equipped with state
-

of
-
the
-
art test and evaluation

systems


Technology, Scenario and

Operational test capabilities


Unique Biometric Qualified Product List

Program




*scheduled completion
4Q06

Testing Achievements







NBSP is creating a new level of assurance for government


and private sector buyers and users of biometric equipment


with development of a three
-
class testing program:



Class I


Tests commercial products against a common performance



threshold to establish basic capability to meet security



requirements. Products that meet requirements posted on a



Qualified Products List (QPL).



Class II


Uses developed compliance suites to assess product


conformance with standards



Class III


Conducts client specified tests to meet special application

requirements or perform comparative evaluations

Training and Education

“The ultimate goal of

training Is to reduce

failure to enroll Rate and

increase true Match rates.

This keeps Costs down

and user Satisfaction high.”


“Identity Assurance in the Information Age” by Woodward, Orlans and Higgins

Training Achievements



NBSP conducted extensive surveys of the biometric


community to determine what practitioners in the field


thought was most needed in training



Then invested 2,200+ hours in curriculum development


to fill identified gaps in available biometric training with


three (3) new biometric training courses.




A biometric orientation course



A technical course for program managers and operational


personnel



A certification course for tech support and maintenance

Education Achievements



NBSP helped establish the foundation for Educational

Biometric Centers of Excellence




Enables universities to design/implement biometric programs

consistent with Government/Industry needs



NBSP hosted and chaired a Biometric Education Working

Group (BEWG) attended by Univ. of Kentucky, James

Madison, WVU and Michigan State Univ., the Federal

Government (DHS) and industry



Primary objective of BEWG is to propose a Biometric

Curriculum prototype in preparation to certify schools as

Programs of Excellence in Biometrics



First BEWG report is due to be published in August 2005

Research and Analysis

“The objective of research is

to support: improvements in

the performance and integration
of available and proven
technology; development of
effective countermeasures to
threats

to technology; and examination
of new technology for application
in infrastructure protection.”


From NBSP BiNS SOW


Research and Analysis Achievements

Impact Studies and Tools



Developed two comprehensive reports assessing U.S.


Federal and international laws on privacy and personal


data


Reports demonstrate how, under existing legal systems, biometrics
can effectively be used as a system to verify identity in virtually any
situation and, under certain circumstances, to positively identify
individuals through the use of databases without sacrificing the
desire for maintaining and protecting personal privacy.



Developed a Protocol for the Collection, Use, Dissemination, and


Storage of Biometric Data


Protocol provides guidelines for organizations to meet federal
requirements on the handling of information, especially as related
to human subjects.


Data Services

“An authoritative and
regularly updated data base
and reference source on

biometrics is a pressing

requirement to support all

the activities described

above.



NBSP

Data Services Achievements


NBSP is developing a unique reference document titled



the BTAM (Biometric Technology Applications Manual


Comprehensive reference manual on biometric applications.


To assist integrate of biometrics into protection systems


Real
-
world user’s manual for those who specify, buy, integrate, and
manage biometric systems


Updated on a regular basis to assure its currency


Augmented with a technology/industry database


NBSP is creating extensive data base on biometrics, linked to
related existing sites, and including both publicly available and
sequestered information to serve the user community and the
industrial base. Initial operations will begin in late 2005









NBSP Current Commitments



US
-
VISIT

Program
:

NBSP

established

a

testing

regime

for

passports

and

readers

that

utilize

integrated

circuit

chips

to

retain

secure

biometric

information
.


evaluated

the

interoperability

and

effectiveness

of

chips

to

be

inserted

into

visa
-
waiver

country

passports


successfully

conducted

at

the

NBSP

TRDC

July

27
-
29
,

2004
.



Enhanced

International

Traveler

System

(EITS)
:

At

the

request

of

the

White

House

Office

of

Science

&

Technology

Policy

NBSP

completed

initial

work

on

EITS


defined

the

scope

of

the

EITS

effort


evaluated

the

options

for

establishing

a

multilateral

international

traveler

identification

system


identified

issues

that

would

affect

implementation


















NBSP Current Commitments


Image

Collection

Project
:



NIST
-
led

effort

to

collect

multiple,

accurate

biometric

images

that

may

be

used

to

advance

research

on

biometric

applications


Establishes

common

database

of

images

to

test




all

competing

systems

within

technology

specific

databases


Provides

common

basis

for

testing,

using

data

developed

from

different

sources,

equipment,

and

conditions


NBSP

took

the

lead

in

defining

the

scope

and

organization

of

this

effort

by

proposing

a

three
-
phase

project


End

result

will

be

the

collection

of

images

from

10
,
000

subjects







NBSP Initiatives



Safe

Schools



NBSP

is

providing

support

to

a

Department

of

Education

Safe

Schools

research

project

intended

to

develop

a

series

of

prototype

safe

schools

configured

with

biometrics

as

part

of

the

overall

security

plan

for

primary,

middle

and

secondary

schools



HAZMAT

TRUCKING


NBSP is examining the use of biometrics in identity
management and authentication as well as tracking and
disabling any truck carrying hazardous materials


















Summary





















Start
-
up period (2003
-
2005) addressed urgent needs for


standards, research, and testing; assessed near
-
term


requirements, and completed infrastructure development


required to provide focused services to the biometric


community



The implementation period (2006
-
2007) will execute the


developed testing, training, and data services to support


users and the industrial base



The overall mission and objectives remain focused:



Support and advance the use of biometrics as a key component in


an integrated system for infrastructure protection



Improve the performance and effectiveness of the technology as


the primary tool in identity management and security

Thank You

Contact Information


MICHAEL T. YURA , Ph. D.


150 Clay Street, Suite 350


Morgantown, WV 26501


(304)292
-
8800


yura@nationalbiometric.org






10 million Americans suffered ID Theft in 2003



Cost to business = $50 billion



Unauthorized checking account access is fastest growing


form of ID Theft



Thieves taking advantage of reliance on single factor


authentication for remote access to on
-
line banking


Impact of ID Theft on Consumers