Report of the Defense Science Board Task Force on Defense Biometrics March 2007 Office of the Under Secretary of Defense For Acquisition, Technology, and Logistics Washington, D.C. 20301-3140 This report is a product of the Defense Science Board (DSB). The DSB is a Federal Advisory Committee established to provide independent advice to the Secretary of Defense. Statements, opinions, conclusions, and recommendations in this report do not necessarily represent the official position of the Department of Defense. The DSB Task Force on Defense Biometrics completed its information gathering in September 2006. This report is UNCLASSIFIED and releasable to the public. ______________________________________________________________ TABLE OF CONTENTS TABLE OF CONTENTS EXECUTIVE SUMMARY .........................................................................................................................................1 INTRODUCTION—IDENTITY MANAGEMENT AND BIOMETRICS ............................................................7 IDENTITY VS. “COLLATERAL DATA” .........................................................................................................................9 IDENTITY ASSURANCE.............................................................................................................................................10 AN IDENTITY MANAGEMENT “SYSTEM” .................................................................................................................10 IDENTITY PROCESSES ..............................................................................................................................................14 THE “ROOT” IDENTITY ............................................................................................................................................14 THE ROLE OF BIOMETRICS.......................................................................................................................................15 THE IDENTIFICATION TRINITY .................................................................................................................................15 Something You Know .........................................................................................................................................15 Something You Have ..........................................................................................................................................16 Something You “Are”—Biometric Indices.........................................................................................................17 BIOMETRIC AUTHENTICATION MODEL ....................................................................................................................18 DATA MANAGEMENT ISSUES............................................................................................................................19 THE POWER OF ID-SENSITIVE APPLICATIONS ...........................................................................................21 THE “BACK OFFICE” PROCESS.........................................................................................................................23 BIOMETRIC INDICES............................................................................................................................................25 FACIAL RECOGNITION .............................................................................................................................................25 FINGERPRINTS .........................................................................................................................................................28 IRIS RECOGNITION...................................................................................................................................................28 VASCULAR RECOGNITION .......................................................................................................................................30 DNA........................................................................................................................................................................30 BIOMETRIC “RESIDUE”—FORENSICS ............................................................................................................33 PROCESSING THE BIOMETRIC .........................................................................................................................35 COMPRESSION LOSSES.............................................................................................................................................35 ANOTHER “COMPRESSION” DANGER.......................................................................................................................36 HITS AND FALSE ALARMS—COSTS AND BENEFITS...................................................................................37 BIOMETRICS GOES TO WAR..............................................................................................................................39 SCENARIOS (“USE CASES”).................................................................................................................................41 IDENTIFICATION VS. VERIFICATION VS. RECOGNITION ............................................................................................41 SCENARIOS AND VIGNETTES....................................................................................................................................42 RESEARCH, DEVELOPMENT, TESTING & EVALUATION: NEEDS, OPPORTUNITIES AND CAPABILITIES ........................................................................................................................................................45 MULTI-MODALITY—THE POWER OF TWO OR MORE...............................................................................................48 SPOOFING ................................................................................................................................................................49 STANDOFF ...............................................................................................................................................................50 COVERTNESS ...........................................................................................................................................................51 NEW MEASURES AND APPLICATIONS ......................................................................................................................51 SPEED OF RESPONSE, ETC. .......................................................................................................................................52 ENVIRONMENTAL EFFECTS......................................................................................................................................53 RACE, ETHNICITY AND GENDER EFFECTS................................................................................................................53 RESIDUAL INDICES OTHER THAN FINGERPRINTS AND DNA.....................................................................................53 MEASUREMENT, STATISTICS, TESTING, AND EVALUATION.....................................................................................54 TECHNOLOGY INSERTION STRATEGY ......................................................................................................................54 BIOMETRIC PRODUCT ASSURANCE ..........................................................................................................................54 DEFENSE BIOMETRICS____________________________________________________________________i TABLE OF CONTENTS______________________________________________________________ MODELING RETURN ON INVESTMENT (ROI)............................................................................................................55 SCALABILITY...........................................................................................................................................................55 DOD ORGANIZATIONAL ISSUES.......................................................................................................................57 POLICY AND DOCTRINE WITHIN AND BEYOND DOD................................................................................59 DOD PARTICIPATION IN THE BIOMETRICS INTERAGENCY PROCESS:........................................................................59 POLICY & GOVERNANCE: ........................................................................................................................................60 TECHNICAL STANDARDS .........................................................................................................................................61 PRIVILEGE MANAGEMENT .......................................................................................................................................63 DATA SHARING .......................................................................................................................................................64 Sharing Identity-Related Information ................................................................................................................65 MANPOWER AND TRAINING REQUIREMENTS............................................................................................67 SECURING IDENTITIES........................................................................................................................................69 PRIVACY..................................................................................................................................................................70