SPECIAL REPORT DHS: POCKETS 0F PROGRESS Authentication, are in the car RFID, biometrics are integral to many of plans Bi" JASDH MILLEFI GEN STAFF M?t?ol?r'. deputy program manager for the Lit-l. Visitor and Immi? grant Status Indicator 'l?cchnology pro- gram, has a simple vision for making the borders more secure. It doesn't have to do with 12-foot tent-cs, or unmanned aerial vehicles or anything Iancy. it is a simple card lit-[1111? bining two technologies that have been around for tlet?atles?biometrics and radio frequency identification. Such a card. hiocny envisions. would give border patrol oiliccrs a complete pic- ture of visitors as they enter and exit the country. and ensure that they actually lcavc when they?re supposed to. This is a big dillbl?cncc from what is hapv potting now under the pilot program that DHS is running as part of the 1.1.3. 1 viisit system. The pilot uses a long-range RFI chip implanted in a form for visitors who require a visa. but critics contend that it can gantrantcc only that the form leaves the country. not the visitor. h-Iocny agrees with that criticism. ?That is why we will challenge industry to devise a way to make sure that a per- son is leaving the country by hating a Illil 1} anti biometric device together." he said. "it coiild the [People are. ticrm?ity Service under the lnitiativel card or some- thing else. It is all aimut the timing ofthe marriage of the technology." Starring roles in the Im'antimc. and Fit-ill}? both separately and together?are play? ing siguilicant roles in at least four high- prniile programs across HHS. Along with the l?ii-t pilot. LLS. ?r'isil. captures biometric data on visitors and checks their ?ngerprints against terror- ist and criminal databases. The card, though Congress likely will delay its would in? clude a long-range chip to quickly transmit to border control niliccrs about the holder of the card. The 'I?rauspol'tation Security Adminis- tration is relying on fingerprint and iris biometrics for its Registered Traveler Program. lt'l?. volunteers submit biometrics. gt: through Fill background checks and. il'appruvcd. receive an iden? tillcation card to go through airport sc- Blo on Page 2+ 22 sovtaautsr cousmrn 5.: 13.35:: At Fo Lewis. ser- vicemen use handhel canners to scan the Flaoithate I srds, which employees obtain afte - nrolling at a self?service l-iiosl-r. (b Coast Guard secures facilities with biometrics, RFID system HILLEH GEN STAFF To unoensrano THE anom? ISE biometrics and radio frequency identi?cation technology hold for the Homeland Security Department, look no ?irther than two Coast Guard facilities? one in the District of Columbia and one in Washington state. At Coast Guard headquarters in 110.. a voluntary program?which both cam- puses use?called RapidGate lets ven- dors gain easier access to the facility by voluntarily registering for a biometric identi?cation card. Since November, RapidGatc has helped the EEC. campus identify three potential vendor employees who had served time for murder. one registered ses offender, two working under false names and others with multiple identi- ties or who had lied about their crimi? nal history. said Wayne Trims, Coast Guard?s chief of security and safety for the headquarters support command in Washington. ?We get a better grade of contractor," by using RapidGate, Truict said. ?These are people who work in our building, and we need to have a level of trust." Meanwhile, at the Coast Guard's Fort Lewis, Wash, facility, RapidC-ate uses both biometrics and RFID to track ven- dors, said Steven Larson, chief csecu- tive of?cer and chairman of Bid Pass- port Inc. of Portland, ?re, the compa- ny hired under a ?ve-year contract to install the system. Fort Lewis of?cials declined to be in- tentiewed for the story. Larson said Fort Lewis, which has been using Hapid?ate for two years, is using biometrics to authenticate and identify vendors, and RFID to track ve- hicles. The RFID tag is connected to a vendor's vehicle so the Coast Guard knows when it enters or leaves the fa- cility. ?There is constant exception report- ing if someone didn?t leave,? Larson said. ?The key is to always make certain that there is a clean ingress and egress for different vehicles that come onto the base.? The ins and nuts Vendors at both sites must apply to be- come a part of RapidGatc, and employ- ees go through a background check. The Coast Guard collects employees? ?ngerprints and takes their pictures at a self-enrollment kiosk. After passing the background check, employees are issued cards. The vendors vehicle also has an RFID tag attached to it, so when it enters the base, a notation is recorded in the data; base. That same record must be closed out when the vehicle leaves the base, [arson added. About 700 vendors and 4,000 people enter Fort Lewis every day, and Larson said vendors can enter in as little as 12 seconds. In D.C., about so vendors and 105 card holders use RapidGate, which the Coast Guard runs in parallel with its physical-access control system, called Mamiess. Truaa said vendors who do not nor- mally need clearances go through RapidGate, while others who do need clearances go through Masctess. He said with the systems running in parallel, the building is more secure. ?If a vendor is ?red or quits but does- at turn in their 1D, within 30 seconds we can kill their access," he said. Larson said the cost of the program is covered by the fees vendors pay to reg; ister. He said the program, including the use of RFID, likely will be expanded to other facilities. I BID remain netf??em Page 22 curity mere quickly. TEA launched the pilets in 200+ and new has implement- ed the at a hand?d efairperts. including Drlandn. Fla. The Wnrker Identity Credential. anether "ft-let uses a binmetrie ID card pert wnrkers tn gain physical nr legical access tn secure areas. TSA tested the pregram Nev. see-t until June 2005 at 2t}: sites arnund the ceuntry using ?ngerprints and iris hiemetrics. Dther parts ef DHS else are usingr RFID and hiemetrics in ether ways. The ?nest Guard is using hiemetrics tn au- thenticate venders inte their facilities mere quickly {Ree siege. Page 23}. and the Secret Service is relying en HFID fer asset tracking. Ho-Ionger-missing link 't?v?hile hiemetrics and HFID gies hardly are new. their maturatiun and public acceptance seem tn pave the way fer lung?term use. ?Hiemctrics is the key link that eenv ncets the individual tn the threat assess- ment." said Darrin Hayser. a This. spnkesman. ?it us tn enmhat fraud and ensures that the individual at the access pnint is they said they are. It is a key piece tn and Regis? tered Traveler." Mucny said that adding RFIU tags in certain decuments will simplify and em sure safe travel. while guaranteeing citi? aens? privacy and allewing peeplc tn meve threugh eheckpnints quickly cnnugb tn allew fer the flew uf cnm~ meree ever the berders. is playing a larger relc. especial- ly cargn." said Jeremy Grant. a seninr vice president and emerging technuln- gins analyst fer the Washingtun Research Greup ef still needs tn better develnp hew tn de- plny it and manage it. It reminds me [ef] where hiemetrics was fnur er the years age. It has a let ef premise. hut peeplc still are ?guring net the best way tn use it." At least nne vender agrees with h-iecny's visien nf marrying the Jim Stelarski. pregram manager ef the Smart Herder Alliance fer LES. 1?r?isit and directnr efhemeland security fer Accenn ture LLP ef Chicagn. said his eempany is lab-testing an ltliID and device. ?We think this is cleser than live years nut." Stnlarski said. "We are far frem a wnrking medel. but the idea is that tn hinmetrically enable a RFID card will make an ID as certain as pessible." Stelarski plans tn the technelegy tn LLB. ?v'isit CID Sentt llast+ ings later this summer. But there still is a let nf uncertainty 24 sevEHHuEHt ceueurra sews DHS: POCKETS UF PROGRESS SPECIAL REPORT Evincny said there are a let ef misplaced fears areund REID. with snme peeplc thinking the wants tn put a chip in their necks. ?The specter efsnmenne walk- ing areuntl with a black hat and surreptitinusly using a reader tn rapture sumenne?s Sid-digit number is wrt'mg." said. ?Penplc want tn paint a negative picture nf the nest best idea frem this administratien all the time. We draft want tn track hu- mans [evetyavhere they ge]. We want. tn erected the entry and esit nf visiters. We want tn dn what we are dning teday. hut dn it mere etlieien 1y." Patrick Sty-?ect?icy. president and chief eseeutivc elticer ef DDIN ef Dulles. ?v?au said a let uf hew the get-'crument is using HFID is mere efficient be? cause et' the lessens it learned frem the bar cede industry. It st reamli standards We don't want to track humans [everywhere they go]. We want to record the entry and exit of visitors. We want to do what we are doing today. but do it more efficiently." Hester nocsv. its. vise aheut using RFID tn authenticate and identify peeplc. Jim Harper. directnr ef pnlicy studies fer the Cate Institute in Washingten and a member ef the Emerging Applicatiens and Technelegy Subcemmittee ef the DHS Data Privacy and Integrity Advisury said using RF ID te "track" peeplc creates tee many security and privacy risks. Harper is nne efthe anthers efthe cnn- treversial draft repnrt The Eve ty'aevn ?tr Human which re.- ceived a let nf criticism industry and even within itself. is apprepriate tn drive dewn and yen in get a little mere quickly. but it dnesn't selve the security preblems." Harper said. ?They aren?t tn Sept. 11. they are trying tn harden everything." The draft repnrt' said HFID is nnly ap- prepriate fer "human identi?catinn" when used fer miners er fire?ghters when they gn inte dangernus situatinns. Melissa Ngn. staff ceunsel fer the Rice? trenic Privacy Infermatien Center in said nne nf the biggest qUEsr tiens with RFID is much tine shnuld be cnllected fur each persnn. ?If yen celiect ten much it becnmes hleated." she said. ?lfyeu want tn authenticate semenne. yen shnuld celleet enly the infermatien needed tn de that." inte 13 primary nnes sn hardware can be designed with mere flesibility." said Sweeney. authnr nf Dummies. HFID is in its infancy at DHS. the premise ef hiemetrics is quickly cnming tn fruitien. LT.S. 1dish and ether pregrams are suc- cessfully using hiemetrics. Fer Regis- tered Traveler. 'l?Sr?t tested kinds ef hiemetrics at live fer mere than a year and had a let efsuccess. accerding tn agency tiliit'ials. ran the pregram and industry esperts. Registered Traveler Under Registered Traveler. citiaens pass a backgreund cheek use an lD card and a binmetrie?either a ?ngerprint er iris scan?tn shave the time it takes tn ge threugh the initial stage nf security at airperts. The gnal nf HT is in have the binmetric databases areund the ceuntry. se the infurmatinn can he read at any Jeff Pnulsnn. EDS Ceres pregram manager fer the Registered Traveler pi- run at Reagan Natinnal and Bestnn Iargan airperts. said the bin- metrics capture rates were high. TWTC. anether TSA that re- lies heavin en ?ngerprint hiemetrics. will be rnlled nut fer 1t} millien trans- pnrtatien wnrkers ever the nest years. DHS secretary Michael Cherth said in a press brie?ng earlier this year. hired BearingPeint lee. nf McLean. as the lead tiir the Wit? used at 2H sites amend the cnuntry January Linn-t tn June 2005. During the test. Bearing- F'nint cellected hiemetrics and stnred en chips en an card. Pert er wnrkers had tn use the card with their fingerprint and a identilicarien number tn gain access tn a facility er a system. said [inr- den Hannah. managing directnr nf HeariugPeint's security and identity grnup. Lisa i-iimher. vice president nf the Maritime iischange fer the Delaware River and Bay in Philadelphia. said her nrganiaatirm. which represents business? es aleug the Delaware River and tenk part in the TWIC had new cerns aheut whether TBA tested hiemet- rics readers adequately. he types ef peeplc whe werk nut? dners with rnugh hands er with sears en their hands. what kind nf reads will they get?" she asked. ?if lingers dnn't wnrk. what alternate hiemetrics will they use?" T?Wlt.? did net widely test stteh ether ferms nf hitnnetrics systems as iris scan? ning. Kayser said. Duly Les singe- les used iris rccegnitinn en a lecal scale. Hannah said. "Binntetrics makes sense. but it can't delay the time it takes te get inte the main gate." said Bill Beles. security man- ager at the Pert ef Wilmingten. Del. "With the TWIC card new. it takes er three secends. If yeu add the hiemet- ric. it will add anether secend er twn. If there are really busy days. it ceuld add as much as ?ve and that ceuld he a real preblent." Alnng with ?ngerprint hiemetrics. Chuck Archer. vice president nf the fed? eral secter fer Identis ef Iviinnetenka. Mind. and a fermer FBI nflieial. said iris and facial alsu are rap? idly clnsing the gap in terms nf making pnsitive itlenti?catinn. Every year. the algnrithm that sup? perts iris and facial recegnitien cemes cleser tn appresimating identitieatinn ef ?ngerprints." he said. ?Iris and facial are less intrusive than ?nger. and as the tech- nelngy and gains credibility. iris and facial are climbing the ladder ef ac- ceptability.? Even with the blemishes and hiccups that any maturing technel- egy. DHS is wedded tn EFID and bin- metrics. and ether agency ef?cials made it clear that ensuring privacy and securi- ty is a eencern. but whether the agency can mere fully integrate these remains unclear. I GUI