1. Fax: (703) 681-6369 DoD BIOMETRICS PROGRAM DoD Biometrics Management Office biometricsoffice@hqda.army.mil http://www.c3i.osd.mil/biometrics/ Phone: (703) 681-6446 DSN: 761-6446 M1/02-0016

2. To provide an information briefing on the Department of Defense Biometrics Program to include general information about biometrics, the DoD Biometrics Program current activities. PURPOSE

3. Date: March 2000 DEPARTMENT OF DEFENSE

4. Date: February 2000 OFFICE OF THE SECRETARY OF DEFENSE

5. Sec. 112. To ensure the availability of biometrics technologies in the Department of Defense, the Secretary of the Army shall be the Executive Agent to lead, consolidate, and coordinate all biometrics information assurance programs of the Department of Defense…. Public Law 106-246 (Signed by the President on 13 July 2000)

6. Four completed tasks Established DoD Biometrics Management Office (Jul 00) Established & Managed a Support Infrastructure (Jul 00) Established Interim Biometrics Fusion Center (Oct 00) Draft Program Management Plan (Jan 01) 27 December 2000 Eight Point Memorandum DEPUTY SECRETARY OF DEFENSE Four ongoing tasks Enterprise biometrics acquisitions (SEI, Product, Services) Expedited fielding of selected biometrics systems Develop DoD policies for biometrics (DODD) Coordinate DoD Service and Agencies budgets for biometrics

7. Two points DoD Biometrics Management Office prepares a Biometrics Products List (BPL) in compliance with the National Security Telecommunications and Information Systems Security Committee’s (NSTISSC 11) National Information Assurance Acquisition Policy. DoD Biometrics Management Office establishes a contracting vehicle for DoD components to procure BPL products. 19 January 2001 Biometrics as an IA Enabler Memorandum ASSISTANT SECRETARY OF DEFENSE (C3I)

8. Technology that meets the following requirements: Approved by BMO Low cost ($50 or less) Minimal bandwidth impact Minimum user training Operates in the office Operates in MOPP 4 Common Criteria Compliant NIAP Certified FOCUS ON COMMERCIAL TECHNOLOGY Commercial Off The Shelf (COTS)

9. The BFC will build a biometrics knowledge base – cyber accessible The BFC will assist users with unique and near time requirements Acceptable Biometrics Products for DoD and others to use Close coordination with DOD PEOs NEAR TERM FUNCTIONS NEAR TERM FUNCTIONS Department of Defense Army Navy Air Force Marines Department of Commerce Government Services Administration National Guard Bureau National Security Agency Coast Guard Defense Information Systems Agency

10. NIAP Lab Certified Products DoD Integration Test and Evaluation Modeling and Simulation BFC ‘Branded’ Products (BPL) DoD BPA for biometric products User requirements are reviewed and translated to industry standards. In participation with government, academia and industry partners standards are inserted into testing process…… Industry Products HOW WILL THE BFC WORK? Other Agencies Tests

11. Existing standards that DoD can leverage off of industry: BioAPI CBEFF X9.84 X.509 BIOMETRICS STANDARDS UNDER CONSIDERATION DoD requirements under discussion: Encryption – storage and/or transmission Liveness – standardized definition Template Storage – No 3 rd party will store DoD Templates NIAP – Protection Profile (Low, Medium, High) Section 508 – Support equal access to disabled

12. INDUSTRY CHALLENGES Broad, cross platform support for devices –Biometric drivers for non-windows platforms –Plug and play devices and software modules BioAPI validation suite for all platforms Integration of biometrics with PKI & CAC Low power sensors for wireless devices Faster enrollment and response time including processing and matching

13. INDUSTRY CHALLENGES Small, compact translation software to allow multiple vendor use of a single template Rugged devices for harsh environments Template ageing Solid liveness test for all biometric technologies Verified value of using multimodal (preferred combinations of biometrics) vs single mode for unclassified and classified systems

14. Biometrics Policy Committee –Privacy, Security, Responsibilities Common Access Card – Biometrics Working Group –Enterprise Solutions, Storage, Transmission, Authentication Biometrics Protection Profile –Low, Medium, High Profiles Biometrics Consortium Working Groups –Interoperability, Performance and Assurance DoD BIOMETRICS ACTIVITIES