Fax: (703) 681-6369

DoD BIOMETRICS PROGRAMDoD BIOMETRICS PROGRAM

DoD Biometrics Management Officebiometricsoffice@hqda.army.mil

http://www.c3i.osd.mil/biometrics/Phone: (703) 681-6446 DSN: 761-6446

M1/02-0016

To provide an information briefing on

the Department of Defense Biometrics Program

to include general information about biometrics,

the DoD Biometrics Program current activities.

PURPOSEPURPOSE

Date: March 2000

DEPARTMENT OF DEFENSEDEPARTMENT OF DEFENSE

Date: February 2000

OFFICE OF THE OFFICE OF THE SECRETARY OF DEFENSESECRETARY OF DEFENSE

Sec. 112. To ensure the availability of biometrics technologies in the Department of Defense, the Secretary of the Army shall be the Executive Agent to lead, consolidate, and coordinate all biometrics information assurance programs of the Department of Defense….

Public Law 106-246

(Signed by the President on 13 July 2000)

Four completed tasks• Established DoD Biometrics Management Office (Jul 00)

• Established & Managed a Support Infrastructure (Jul 00)

• Established Interim Biometrics Fusion Center (Oct 00)

• Draft Program Management Plan (Jan 01)

27 December 2000Eight Point Memorandum

DEPUTY SECRETARY OF DEFENSEDEPUTY SECRETARY OF DEFENSE

Four ongoing tasks• Enterprise biometrics acquisitions (SEI, Product, Services)

• Expedited fielding of selected biometrics systems

• Develop DoD policies for biometrics (DODD)

• Coordinate DoD Service and Agencies budgets for biometrics

Two points• DoD Biometrics Management Office prepares a

Biometrics Products List (BPL) in compliance with the National Security Telecommunications and Information Systems Security Committee’s (NSTISSC 11) National Information Assurance Acquisition Policy.

• DoD Biometrics Management Office establishes a contracting vehicle for DoD components to procure BPL products.

19 January 2001Biometrics as an IA Enabler Memorandum

ASSISTANT SECRETARY OF DEFENSE ASSISTANT SECRETARY OF DEFENSE (C3I)(C3I)

Technology that meets the following requirements:

• Approved by BMO • Low cost ($50 or less)

• Minimal bandwidth impact

• Minimum user training

• Operates in the office

• Operates in MOPP 4

• Common Criteria Compliant

• NIAP Certified

FOCUS ON FOCUS ON COMMERCIAL TECHNOLOGY COMMERCIAL TECHNOLOGY

•Commercial Off The Shelf (COTS)

• The BFC will build a biometrics knowledge base – cyber accessible

• The BFC will assist users with unique and near time requirements

• Acceptable Biometrics Products for DoD and others to use

• Close coordination with DOD PEOs

NEAR TERM FUNCTIONS NEAR TERM FUNCTIONS

Department of Defense

Army

Navy

Air Force Marines Department of Commerce

Government Services Administration

National Guard Bureau

National Security Agency

Coast Guard

Defense Information Systems Agency

NIAP Lab

Certified Products

•DoD Integration

•Test and Evaluation

•Modeling and Simulation

BFC

‘Branded’ Products (BPL)

DoD BPA for biometric products

User requirements are reviewed and translated to industry standards. In participation with government, academia and industry partners standards are inserted into testing process……

IndustryProducts

HOW WILL THE BFC WORK? HOW WILL THE BFC WORK?

Other Agencies Tests

Existing standards that DoD can leverage off of industry:

BioAPI CBEFF X9.84 X.509

BIOMETRICS STANDARDSBIOMETRICS STANDARDS UNDER CONSIDERATION UNDER CONSIDERATION

DoD requirements under discussion:

Encryption – storage and/or transmission

Liveness – standardized definitionTemplate Storage – No 3rd party will store DoD Templates

NIAP – Protection Profile (Low, Medium, High)

Section 508 – Support equal access to disabled

INDUSTRY CHALLENGESINDUSTRY CHALLENGES

• Broad, cross platform support for devices– Biometric drivers for non-windows platforms– Plug and play devices and software modules

• BioAPI validation suite for all platforms

• Integration of biometrics with PKI & CAC

• Low power sensors for wireless devices

• Faster enrollment and response time including processing and matching

INDUSTRY CHALLENGESINDUSTRY CHALLENGES

• Small, compact translation software to allow multiple vendor use of a single template

• Rugged devices for harsh environments

• Template ageing

• Solid liveness test for all biometric technologies

• Verified value of using multimodal (preferred combinations of biometrics) vs single mode for unclassified and classified systems

• Biometrics Policy Committee– Privacy, Security, Responsibilities

• Common Access Card – Biometrics Working Group– Enterprise Solutions, Storage, Transmission, Authentication

• Biometrics Protection Profile– Low, Medium, High Profiles

• Biometrics Consortium Working Groups– Interoperability, Performance and Assurance

DoD BIOMETRICS ACTIVITIESDoD BIOMETRICS ACTIVITIES