Your Federal Quarterly Tax Payments are due April 15th Get Help Now >>

TSA TWIC Stakeholder Brief by CoastGuard

VIEWS: 58 PAGES: 16

									    Transportation Worker
Identification Credential (TWIC)
         Stakeholder Brief




 Transportation Security Administration
        Credentialing Program
                                TWIC Program


            Vision
            Improve security by establishing a system-wide common credential,
            used across all transportation modes, for all personnel requiring
            unescorted physical and/or logical access to secure areas of the
            transportation system.


            Goals
            • Improve security
            • Enhance commerce
            • Protect personal privacy



                                                                                2
TWIC Stakeholder Brief (X2.3)
                    Related Legislation

    USA PATRIOT Act of 2001
    Requires states to conduct background checks through the Attorney
    General and TSA before issuing licenses to individuals to transport
    hazardous materials in commerce.

    Aviation and Transportation Security Act of 2001 (ATSA)
    Grants the TSA Administrator broad authority for transportation security;
    requires TSA to ensure the adequacy of security measures at airports;
    directs strengthened access control points in airport secured areas; and,
    requires TSA to consider the use of biometric, or similar technologies, to
    identify individuals employed at airports.

    Maritime Transportation Security Act of 2002 (MTSA)
    Requires the issuance of biometric transportation security cards and the
    completion of background checks for entry to any secure area of a
    vessel or facility.                                                          3
TWIC Stakeholder Brief (X2.3)
                      TWIC Program History
         2001                                                       2002                                                             2003
Sep    Oct    Nov     Dec       Jan   Feb     Mar   Apr   May    Jun     Jul     Aug    Sept      Oct      Nov   Dec   Jan    Feb    Mar     Apr     May
   9/11                                                                                        Maritime Transportation Security Act of 2002 (MTSA)
              USA PATRIOT Act of 2001
                    Aviation Transportation Security Act (ATSA)
                       DOT forms Credentialing Direct Action Group (CDAG) & GO Teams (#9 Biometrics #36 Smart Card #51 TWIC Architecture)

                                                             CDAG TWIC Working Groups (Topology, Cost Sharing, Privacy, Claimed Identity)
                                            TWIC Vision approved by Secretary of Transportation
                                            TWIC Budget approved by OST
                                                      TWIC Architecture briefings for 300+ industry associations & stakeholders

                                                                    OMB approves FY03 submission
                                                                                                     TSA approves TWIC FY04 OMB 300
                                            Congressional Engagement &
                                                         Program Pause                          ADM Loy’s Senate testimony supporting
                                                                                                TWIC, RT, and CAPPS II
                                                                           Congress approves TWIC Phasing
                                                                                    Plan and $35M for FY03
                                                                                                         TSA IRB and DHS approvals
                                                                                    TWIC Phase I: Planning
                                                                                                        TWIC Phase II: Technology Evaluation
                                                                                                                 Contract award to Maximus

                                                                                                  Credentialing Program Office (CPO) established
 • TWIC Legislative Authority                                                  • Congress Approved TWIC Regional Plan
    • USA PATRIOT, ATSA 2001, MTSA 2002                                              and $35M for FY03
 • Cabinet Level (DOT) Approval Feb 2002                                       • President’s FY04 Budget Includes $55M for TWIC
 • TWIC Public Meetings Jan-Apr 2002                                           • ADM Loy Strongly Supports TWIC in Testimony:
                                                                                     “TWIC is Flagship Program”                                       4
TWIC Stakeholder Brief (X2.3)
                      Alternatives Analysis
                                                                                                                       Total Program Cost to Nation
                                                                                                                       Federal Share of Total Cost

      Conducting evaluation of Alternative 2                                                    High Costs
       based on Alternatives Analysis and
          Balanced Scorecard results.                                                        Medium Costs


                                                                                                 Low Costs
                                       • Advantages                             • Disadvantages
                                                                                                               Alt 1      Alt 2    Alt 3   Alt 4

                                       •Common infrastructure                    •High system replacement costs
             Alternative 1:
         Federal Implementation
                                       •Matches individual with                  •Public perception / privacy concerns
              and Funding
                                        credential technology
                                       •Centralized control of implementation    •Potential impact on commerce

                                       •Common infrastructure                    •Requires local
             Alternative 2:            •Matches individual with                    commitment to Public /
         Federally led Public /         credential technology                                                                INVESTIGATE
                                                                                   Private Partnership
          Private Partnership          •Leverage existing systems
                                       •Options for shared cost
               Alternative 3:          •Stakeholder independence                 •Divergent to interoperability goal
         Federal Requirements /        •Matches individual with                  •Requires 100% local implementation,
        Local Implementation and        credential technology                     design, and execution
                  Funding              •Local acceptance                         •Lack of economy of scale
             Alternative 4:            •Lower initial costs                      •Security vulnerabilities due to low
      Federally led Public / Private
       Partnership with Low Tech
                                       •Common infrastructure                      technology credential
                                                                                 •Higher labor costs for human
               Credential                                                          sensors at checkpoints
                                                                                                                                                      5
TWIC Stakeholder Brief (X2.3)
                                Work Streams

                                                            Today
                                                                    Pilot Programs
           Planning (3 Months)                            Technology Evaluation (5 Months)                          Prototypes (7 Months)
                As-Is / To-Be                            Evaluate range of potential technologies for            Evaluate technology for full range of
            Requirements Baseline                         core business process and requirements                  business processes, policies and
           Technical Evaluation Plan                                                                                        requirements



                                                        Business Case Development
         Concept Paper                     Alternatives Assessment                           Life Cycle Cost Estimate        As-Is Analysis
         Feasibility Study                 Cost Benefit Analysis                             Risk Management Plan            To-Be Analysis


                                                       Acquisition / Procurement Tasks
                                Program Support                         Pilot Evaluation                           Broad Agency Announcement
                                Technical Evaluation                                                               Memorandum of Agreement


                      Information Technology Infrastructure and Enterprise Architecture
         Regional Database                 Data Model                      Biometrics        Technical Architecture          Operations & Maintenance
         Connectivity                      Enterprise Information                            Central Database                Help Desk


                                                            Business Policy Issues
         Background Checks                  Topology/Biometrics                               Privacy                       Trusted Agent
         Liability                          Cost Sharing                                      Claimed Identity              Regulations


                                                          Stakeholder Engagement
         Workers                           Modes                                             Associations             Local – Delaware River Region
         Industry                          Government                                        Vendors                  Local – L.A. / Long Beach



                                                                                                                                                         6
TWIC Stakeholder Brief (X2.3)
                                Regional Pilots

                                   3 Months          Today
                                                          5 Months                                                                          7 Months

                                                         Technology




                                                                                 Technical Evaluation Cost-Benefit Life-Cycle Cost
                                  Planning                                                                                                 Prototype
   East                                                  Evaluation

Philadelphia /                                     Evaluate Range of Potential                                                           Evaluate Access
 Wilmington                                                                                                                            Technologies for Full
                                “As-Is” Analysis     Technologies for Core                                                              Range of Business
                                                     Business Process and                                                             Processes, Policies and
                                “To-Be” Analysis         Requirements                                                                     Requirements
                                                        Multiple Facilities                                                                  Biometrics
                          Requirements Baseline
                                                        4-6 Technologies                                                                 Additional Facility
 Regional                 Technology Evaluation                                                                                              Locations
                                  Plan               Integrated Circuit Chip
  Pilots                                                                                                                                 TWIC Technology
                                  Site Survey         Optical (Laser) Stripe                                                         Prototype (Multi-Tech Card)

                              Methodology &              Magnetic Stripe                                                                Policy & Processes
                            Performance Metrics                                                                                               Include:
                                                    Single and 2D Bar Codes                                                            Background Checks;
                                  Lab Testing       Cost-Benefit & Life-Cycle                                                        Trusted Agent; Claimed ID
                                                         Cost Analysis
                                                                                                                                      Migration Across Region
   West
                                                         Technology                                                                         Prototype
Los Angeles /                       Planning
 Long Beach                                              Evaluation
                                                    Today                                                                                                       7
TWIC Stakeholder Brief (X2.3)
                            Technology Evaluation
                            Phase             Illustrative

        Purpose:                                                                          Maritime                                                                                                               HQ                                               Pipeline                                                   Air                                          Rail                                                          Other
                                                                                         Maritime                                                                                                               HQ                                               Pipeline                                                   Air                                          Rail                                                          Other
        Evaluate multiple




                                                                                                                                                                                                                                                                           Conoco Phillips Oil Refinery
                                                                      Packer Avenue Terminal PA




                                                                                                                                                                                                                                                                          Conoco Phillips Oil Refinery
                                                                     Packer Avenue Terminal PA




                                                                                                                                                                                                                                                                                                                                                                                      Union Pacific Rail ITCF CA
                                                                                                    Beckett Street Terminal NJ
        access control




                                                                                                                                                                                                                                                                                                                                                                                     Union Pacific Rail ITCF CA
                                                                                                   Beckett Street Terminal NJ




                                                                                                                                                                                                                                                 Port HQ Los Angeles CA
                                                                                                                                                                                                                      Port HQ Long Beach CA




                                                                                                                                                                                                                                                                                                                                                                                                                                                                     Salem Nuclear Plant NJ
                                                                                                                                                                                                                                                Port HQ Los Angeles CA
                                                                                                                                                                                                                     Port HQ Long Beach CA
                                             Port of Wilmington DE




                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Salem Nuclear Plant NJ
        technologies for core




                                                                                                                                                                                              Delaware River & Bay
                                            Port of Wilmington DE




                                                                                                                                                                                                                                                                                                                                                                                                                                           ILWU Union Hall CA
                                                                                                                                                                                             Delaware River & Bay




                                                                                                                                                                                                                                                                                                                                                                                                                    Customs House PA
                                                                      Penns Terminal PA




                                                                                                                                                                         Crowley Marine CA
        business processes




                                                                                                                                                     LBCT Terminal CA




                                                                                                                                                                                                                                                                                                                                                                                                                                         ILWU Union Hall CA
                                                                                                                                                                                                                                                                                                                                                                                                                   Customs House PA
                                                                     Penns Terminal PA




                                                                                                                                                                                              Maritime Exch PA
                                                                                                                                  APL Terminal CA



                                                                                                                                                                        Crowley Marine CA
                                                                                                                                                    LBCT Terminal CA




                                                                                                                                                                                             Maritime Exch PA
                                                                                                                                 APL Terminal CA




                                                                                                                                                                                                                                                                                                                                                                  CSX Facility PA
        and requirements.




                                                                                                                                                                                                                                                                                                                              PNE Airport PA
                                                                                                                                                                                                                                                                                                           PHL Airport PA




                                                                                                                                                                                                                                                                                                                                                LAX Airport CA
                                                                                                                                                                                                                                                                                                                                                                 CSX Facility PA
                                                                                                                                                                                                                                                                                                                             PNE Airport PA
                                                                                                                                                                                                                                                                                                          PHL Airport PA




                                                                                                                                                                                                                                                                                                                                               LAX Airport CA
                    East Coast Sites
                    West Coast Sites




                                                                                                                                                                                                                                                                           PA
                                                                                                                                                                                                                                                                          PA
                          Enrollment         X                        X                            X                              X                  X                   X                     X                      X                         X                          X                               X  X X                                                 X                  X
                        Enrollment          X                        X                            X                              X                  X                   X                     X                      X                         X                          X                               X  X X                                                 X                  X
                   Optical (Laser) Memory
                  Optical (Laser) Memory
 Access Control




                            Stripe                                                                 X                                                                     X                     X                                                X                                                                            X
 Technologies
Access Control




                           Stripe                                                                 X                                                                     X                     X                                                X                                                                            X
Technologies




                              ICC            X                                                                                    X                                                            X                                                                           X                                                                    X                                    X
                            ICC             X                                                                                    X                                                            X                                                                           X                                                                    X                                    X
                        Bar Code (2D)        X                                                                                                       X                                         X
                       Bar Code (2D)        X                                                                                                       X                                         X
                        Bar Code (3x9)                                X                                                                                                                        X                                                                                                                                                                  X
                      Bar Code (3x9)                                 X                                                                                                                        X                                                                                                                                                                  X
                       Magnetic Stripe                                                                                                                                                         X                      X                                                                                    X                                    X
                      Magnetic Stripe                                                                                                                                                         X                      X                                                                                    X                                    X

                  Multiple Types of Access Control Points                                                                                                                                                             Multiple Transportation Modes
        • Vehicle gates                                                   • Building and door                                                                                                               • Port, Airport, Trucking, Rail, Pipeline, and HQs
                                                                            access
        • Truck multi-lanes                                                                                                                                                                                                                   Multiple Access Control Technologies
                                                                          • High volume
        • Unmanned personnel                                                pedestrian entrances • Smart Chip, Magnetic Stripe, Optical Media,
          turnstiles                                                                               Single and 2D Barcodes
                                                                          • SIDA
                                                                                                                                                                                                                                                                                                                                                                                                                                                                8
    TWIC Stakeholder Brief (X2.3)
                                                                                                                                                                                                  Business Processes
                                                                                                                                                                                                   Business Processes




                                                                                                                                                                                                                                                                                                                                    Purpose:




                                                                                                                                                                                                                                                                                                  requirements.
                                                                                                                                                                                                                                                                                                  processes and




                                                                                                                                   • Biometrics




TWIC Stakeholder Brief (X2.3)
                                                                                                                                                                                    Biometrics
                                                                                                                                                                                                     Contactless


                                                                                                                                                                                     Biometrics
                                                                                                                                                                                                      Contactless




                                                                   • Claimed Identity
                                                                                                                                                                                                                                                                               East Coast Sites
                                                                                                                                                                                                                                                            West Coast Sites




                                    • Central Database
                                                                                                                                                                                                                        Technology Solution
                                                                                                                                                                                                                         Technology Solution
                                                                                                                                                                                                                                                                                                  the full range of business
                                                                                                                                                                                                                                                                                                  Broaden evaluation using
                                                                                                                                                                                                                                                                                                  multiple technologies over




                                                                                                                                                                                                                    TWIC Multi-Application / Multi-
                                                                                                                                                                                                                     TWIC Multi-Application / Multi-




                                                                                                                                                                                    X
                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                          Port of Wilmington DE




                                                                                                                                                                                     X
                                                                                                                                                                                                      X
                                                                                                                                                                                                                                                      X
                                                                                                                                                                                                                                                           Port of Wilmington DE




                                                                                                                                                                                                                    X
                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                          Packer Avenue Terminal PA
                                                                                                                                                                                                                                                           Packer Avenue Terminal PA




                                                                                                                                                                                                                    X
                                                                                                                                                                                                                                                          Penns Terminal PA




                                    • Privacy
                                                                                                                                                                                                                     X




                                                                   • Liability
                                                                                                                                                                                                                                                           Penns Terminal PA




                                                                                                                                                                                    X
                                                                                                                                                                                                                    X




                                                                                                                                   • Watch List
                                                                                                                                                                                     X
                                                                                                                                                                                                                     X




                                                                                               • Background Checks • Threat Data
                                                                                                                                                                                                                                                          Beckett Street Terminal NJ
                                                                                                                                                                                                                                                           Beckett Street Terminal NJ




                                                                                                                                                               Business Processes
                                                                                                                                                                                                                                                                                                                               Maritime




                                                                                                                                                                                                                    X                                     APL Terminal CA
                                                                                                                                                                                                                                                                                                                                Maritime




                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                                                                                                                              Prototype Phase




                                                                                                                                                                                                                       X                                   APL Terminal CA
                                                                                                                                                                                                                                                          Maersk Terminal CA
                                                                                                                                                                                                                        X


                                                                                                                                                                                                                                                           Maersk Terminal CA
                                                                                                                                                                                                                          X



                                                                                                                                                                                                                                                          LBCT Terminal CA
                                                                                                                                                                                                                           X




                                                                                                                                                                                                                                                           LBCT Terminal CA


                                                                                                                                                                                    X
                                                                                                                                                                                                                             X




                                                                                                                                                                                                                                                          Crowley Marine CA
                                                                                                                                                                                     X
                                                                                                                                                                                                                              X




                                                                                                                                                                                                                                                           Crowley Marine CA
                                                                                                                                                                                                                                                          Delaware River & Bay




                                                   Centers
                                                                                                                                                                                    X
                                                                                                                                                                                                     X
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                           Delaware River & Bay
                                                                                                                                                                                     X
                                                                                                                                                                                                      X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          Maritime Exch PA
                                                                                                                                                                                                                                                                                                                                               Illustrative




                                                                                               • Topology
                                                                                                                                                                                                                                                           Maritime Exch PA




                                                 • Enrollment
                                                                                                                                                                                    X
                                                                                                                                                                                                     X
                                                                                                                                                                                                                    X
                                                                                                                                                                                                                                                                                                                               HQ




                                                                                                                                                                                                                                                          Port HQ Long Beach CA
                                                                                                                                                                                     X
                                                                                                                                                                                                      X
                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                                                                                                HQ




                                                                                                                                                                                                                                                           Port HQ Long Beach CA
                                                                                                                                   • Trusted Agent
                                                                                                                                                                                    X
                                                                                                                                                                                                     X
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                          Port HQ Los Angeles CA
                                                                                                                                                                                     X
                                                                                                                                                                                                      X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                           Port HQ Los Angeles CA
                                                                                                                                                                                                                    X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          BP Refinery CA
                                                                                                                                                                                                                                                           BP Refinery CA
                                                                                                                                                                                                                                                          Conoco Phillips Oil Refinery
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                           Conoco Phillips Oil Refinery
                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                                                                                               Pipeline




                                                                                                                                                                                                                                                          PA
                                                                                                                                                                                                                                                                                                                                Pipeline




                                                                                                                                                                                                                                                           PA
                                                                                                                                                                                                     X
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                          PHL Airport PA
                                                                                                                                                                                                      X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                           PHL Airport PA
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                          PNE Airport PA
                                                                                                                                                                                                                     X
                                                                                                                                                                                                                                                                                                                               Air




                                                                                                                                                                                                                                                           PNE Airport PA
                                                                                                                                                                                                                                                                                                                                Air




                                                                                                                                                                                    X
                                                                                                                                                                                                                    X




                                                                                                                                                                                     X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          LAX Airport CA
                                                                                                                                                                                                                                                           LAX Airport CA
                                                                                                                                                                                    X
                                                                                                                                                                                                                    X




                                                                                                                                                                                                                                                          CSX Facility PA
                                                                                                                                                                                     X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                           CSX Facility PA
                                                                                                                                                                                                                                                                                                                               Rail




                                                                                                                                                                                    X
                                                                                                                                                                                                                    X
                                                                                                                                                                                                                                                                                                                                Rail




                                                                                                                                                                                     X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          Union Pacific Rail ITCF CA
                                                                                                                                                               Analysis




                                                                                                                                                                                                                                                           Union Pacific Rail ITCF CA
                                                                                                                                                                                                                    X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          Customs House PA
                                                                      • Technical Evaluation




                                                                                                                                                                                                                                                           Customs House PA
                                                                                                                                     • Cost-Benefit Analysis
                                                                                                                                                                                                                    X




                                        • Implementation Options
                                                                                                                                                                                                                     X




                                                                                                      • Life Cycle Cost Analysis




                                                                                                                                                                                                                                                          ILWU Union Hall CA
                                                                                                                                                                                                                                                            ILWU Union Hall CA
                                                                                                                                                                                                                                                                                                                               Other
                                                                                                                                                                                                                                                                                                                                Other




                                                                                                                                                                                    X
                                                                                                                                                                                                     X
                                                                                                                                                                                                                    X




                                9
                                                                                                                                                                                     X
                                                                                                                                                                                                      X
                                                                                                                                                                                                                     X




                                                                                                                                                                                                                                                          Salem Nuclear Plant NJ
                                                                                                                                                                                                                                                           Salem Nuclear Plant NJ
                        Pilot System
                        Architecture
                   • Architecture designed for interoperability and ability to support other
                     applications and requirements. Allows local access decisions.
                   • Centralized issuance model is cost effective and flexible.
Perimeter Access
         Station                                                                                                      Perimeter Access
                                                                                                                               Station
                                      Los                                                 Delaware
Security Access                     Angeles                                             River and Bay
Station
                                     Long              TSA                                                            Security Access
                                                                                                                      Station
                                     Beach          Data Central
                                                   Biometric 1: N
Security Access                                       Match
Station                                                                                                               Security Access
                                                                                                                      Station


                        TWIC Regional                                 Federal
                        Database and                                  Threat-Intel
                        Issuance Center                               Systems                 TWIC Regional
                                                                                              Database and
                                                                                              Issuance Center

                                                       VPN
                                                       VPN                                         Perimeter Access
                  Perimeter Access                                                                          Station
                           Station                                                   Others
                                           DHS &
                                          TSA HQ
                                                                                                   Security Access
                  Security Access                                                                  Station
                  Station


                                                                                                   Security Access
                  Security Access                   TWIC Central                                   Station
                  Station
                                                    Issuance Center
                                                                                                                                 10
 TWIC Stakeholder Brief (X2.3)
                         System Attributes

         • Positive match of credential – person - background check - access level
           through the use of a secure reference biometric
         • Business and Standards based approach and flexible solution architecture
           enables TWIC System to support multiple users, requirements and
           applications
                   • Government Smart Card Interoperability Specification (GSC-IS) provides broad
                     interoperability
                   • Open architecture and multiple technologies support leveraged investments
                   • TWIC is a tool that enables business process improvements and E-Gov
                   • Capable of meeting needs across DHS
         • Centralized ability to interface with other federal agencies and databases for
           “watch list”, threat and intelligence information
         • Secure record control and network of databases, provides capability to
           disseminate “threat alerts,” revoke security access system-wide for specific
           individuals, hot-list, or deal with lost-stolen cards
         • Reduces risk of fraudulent / altered credentials through use of state-of-the-
           art anti-tamper and anti-counterfeit technologies                                        11
TWIC Stakeholder Brief (X2.3)
                         Beyond the Scope
                         of TWIC
       •Possession of a TWIC does not automatically grant the holder
        access to secure areas.
                 – Only facilities grant access. Facilities have complete control over who
                   is granted access to secure areas, and what level of access is granted.


       •The TWIC program will not develop site-specific secure area
        definitions.
                 – The TWIC regulations will point to the definitions of “secure areas” as
                   determined in national security plans, regulations or by statute.


       •The TWIC program does not prevent facilities from specifying
        additional access requirements.
                 – Facilities may require background investigations, access procedures,
                   or credentials beyond those provided by TWIC.


                                                                                             12
TWIC Stakeholder Brief (X2.3)
                                                  Card Architecture
             Illustrative of Surface Technologies                                                                                             Legacy Systems and Applications
                             Transportation Security Administration
                             TRANSPORTATION WORKER                                                                                                                                                   Security                                                   Access
                             IDENTIFICATION CREDENTIAL                                                                     Enrollment         Training
                                                                                                                                           Training/ HR
                                           TWIC
                                                                                         2D Bar                                                                                                                                                                                                                         TSA Switch
                                                                                          Code                                          Internet / Intranet / LAN / WAN                                                                                                                                   Secure Connection
                                                              Name
                                                                                                                  Enrollment Station
Linear                                                        Jane
                                                              Smith

 Bar                                                         Employer
                                                                                                ISO Standards                                                                 Client Applications
                                                                                                                                                                              Client Applications                                                    Card GUI
                                                                                                                                                                                                                                                      Card GUI


Code                                                         Regional
                                                             Airline
                                                                                                                                                                                                                                        APIs
                                                                                                                                                                                                                                                                      PKCS
                                                                                                Interoperable via GSC-IS                                                       Service Provider
                                                                                                                                                                                   BSI/XSI
                                                                                                                                                                                                                                                CAPI
                                                                                                                                                                                                                                               Provider
                                                                                                                                                                                                                                                                       #11
                                                                                                                                                                                                                                                                     Provider
                                                                                                                                           Workstations                                                                                                                                                                     Kiosks
                                          Issue Date
                                          2002SEP19
                                          Expiration Date
                                                                                                FIPS 140 Level 2 Secure
                                          2003SEP20


                                                                                                JAVA 32-64K EEPROM                                                                                              Smart Card Reader




                                                                                                Multi-Technology Card
                                                                                                                                        Demographic Data Digital Photograph
                                                                                                PKI
 Magnetic                                                             ICC                                                               Biometrics           PKI Certificates
  Stripe                                                              Chip                      Multiple Biometrics                     Clearance Data      Access Authorized
                                                                                                Contactless                             HR Training Qualifications and Other Data

                                           While this card is not prima fascia evidence of




                                                                                                                                                                                                                                                                                                                            X.509
                                           government employment, it is the property of the




                                                                                                                                                                                                                Personal Information
                                                                                                                                                                               General Information
                                           DHS and is intended for official identification




                                                                                                                                                             PIN Management




                                                                                                                                                                                                                                                                                Card Information


                                                                                                                                                                                                                                                                                                    Digital Signature
                                                                                                                                                                                                                                               Access Control
             Property of the US Government purposes only. Misuse, alteration or abuse is
                                           subject to Title 18 USC 499, 506 and 701. If




                                                                                                                                                                                                                                                                  Login
                                           found, mail to TSA, 601 South 12 th St, Arlington,




                                                                                                                                                                                                                                                                                                                            Biometric
  TWIC Card #




                                                                                                                                                  Manager
                                           VA 22202. Return Postage Guaranteed.


                                                                                                                                           Card
  ORD 77171123444A02




                                                                                                                                                                                                       Generic Container
                                                                                                                                                            PIN                                                                                                                                    PKI                     Bio
                                                                                                                                                                                                                                       Applet

                                                                                                                                                                                                            GSC Containers
             Optical (Laser) Media Stripe                                                                                                                                                                                                                                                                                               13
                                                                                                                                                                                                                                       JavaCard VM 2.1
  TWIC Stakeholder Brief (X2.3)
                   Business Policy Issues
   • Claimed Identification                          Card Topology
            – “Breeder” documents                        – Security features
            – Identity verification                      – Card technologies
   • Trusted Agent                                       – Appearance
            – TSA-certified enrollment sources       • Regulations
            – Federal, state, private                    – Determine if regulations are
                                                           required, if so
   • Enrollment / Card Issuance
                                                         – Drafting and issuance of full-
            – Enrollment process / sites                   implementation regulations
            – Card production facilities             • Cost Sharing
   • Background Checks /                                 – Authorizing legislation
     Investigations                                      – Credential cost
            –     Multiple levels                        – Collection process
            –     Disqualifying offenses
                                                     • Liability
            –     Confidentiality
                                                         – Government liability for security
            –     Adjudication / appeals / waivers         breeches
   • Biometrics                                      • Privacy
            – Selection of biometric                     – Protections

                                                                                               14
TWIC Stakeholder Brief (X2.3)
                    Privacy Considerations

   Guiding Principles
   • Minimum Data:              Collect and retain only data that is absolutely necessary
   • Limit Use:                 Use the data only for the purpose for which it was collected
   • Data Quality:              Data maintained is accurate, complete, current, and relevant
   • Data Security:             Secure and protect from unauthorized use (physical and cyber)
   • Accountability:            Internal controls to sustain the privacy of individual information

   Actions to Date
   • Created Privacy Workgroup
   • Developed Privacy Impact Assessment as part of combined TWIC/Registered Traveler
     (RT) Program OMB Exhibit 300 submission
   • Issued Government Paperwork Reduction Act 60-day notice to Federal Register on
     June 24, 2003
   • Issued TWIC Privacy Act System of Record Notice—now pending DHS review/approval
   • Briefed DHS Chief Privacy Officer on TWIC Program July 10, 2003
                                                                                                     15
TWIC Stakeholder Brief (X2.3)
                                Conclusion

                                           TWIC Program Benefits
         Improves Security                                    Enhances Commerce
         •     Reduced risk of fraudulent or altered          •   Increases process speed and efficiency
               credentials                                    •   Enables improved management and
         •     Biometrics used for secure, positive match         utilization of resources
               of individual to authorized access level and   •   Expanded e-government potential
               clearances
                                                              •   Public – private partnership
         •     Ability to interface and communicate with
                                                              •   Economies of scale purchasing
               other federal, local, and state agencies
                                                              •   Eliminates need for redundant credentials
         •     Ability to disseminate “threat alerts”
                                                                  and background investigations
               throughout a nationally integrated system
                                                              •   Potential to reduce industry insurance
                                                                  costs
         Protects Individual Privacy                          •   Leverages current security investment and
                                                                  legacy systems
         •     Collection of minimum data elements
         •     Secure record control system and network
         •     Employs advanced information technology
               to protect personal information
         •     System-wide encryption implementation


                                                                                                              16
TWIC Stakeholder Brief (X2.3)

								
To top