M1/03-0532

in031207


Annual Report for: M1

Covering the Period from January 17, 2001 to September 24, 2003

 

Title of INCITS Subgroup: Biometrics

 

Links

Link to Website of M1 (includes all documents, minutes, and organizational member information)
See Informal Description of Work

See Executive Summary

Link to M1 area on the INCITS Projects Database
See Significant Accomplishments

See Significant Challenges
See Expected Challenges
See Committee Activities
See previuos year's meetings
See next year's planned meetings

See Liaison Activities

M1 Membership and Officers
See Future Trends and Related Technical Activities

See Other Administrative Information

Informal Description of Work:

The purpose of M1 is to ensure a high priority, focused, and comprehensive approach in the United States for the rapid development and approval of formal national and international generic biometric standards. These standards are consider to be critical for U.S. needs, such as homeland defense, the prevention of identity theft and for other government and commercial applications based on biometric personal authentication. The current program of work includes biometric data interchange formats, exchange format frameworks, Application Programming Intrefaces, application profiles, and performance testing and reporting standards. M1 is the U.S. TAG to JTC 1 SC 37 - Biometrics which is developing a similar portfolio of standards.


Executive Summary:

Since its establishment in November 2001, M1 has maintained an accelerated pace of biometric standards development. M1 has held 7 meetings, it has eleven approved "D" projects, one "S" project, one "M" project and it is responsible for five "L" projects. During 2002, M1 formed the following  Ad-Hoc Groups to addresss different aspects of its program of work:


* AHGBISGF: M1 Ad-Hoc Group on Biometric Interoperability in Support of the Government Smart Card Framework
* AHGAP: M1 Ad-Hoc Group on Application Profiles
* AHGBDIF: M1 Ad-Hoc Group on Biometric Data Interchange Formats
* AHGBPTR: M1 Ad-Hoc Group on Biometric Performance Testing and Reporting


During 2003, M1 has created four Task Groups to handle its increased activity in biometrics standards development:


* M1.1, the Task Group on Biometric Data Interchange Formats

* M1.2, the Task Group on Biometric Technical Interfaces

* M1.3, the Task Group on Biometric Profiles

* M1.4, the Task Group on Biometric Performance Testing and Reporting


M1 is addressing the approved "S" project ("Evaluation of Multi-Biometric Systems") through an M1 Ad-Hoc Group and has also established an Ad-Hoc on Cross Jurisdictional and Societal Issues to address the US positions to JTC1 SC 37 WG 6 on Cross-Juristictional and Societal Issues.


M1 work is being recognized by the industry and also users which are including preliminary references to the M1 draft standards in their requirements (compliance with ANSI 358-2002, the BioAPI specification is a DoD requirement, for example).


M1 has as of September 2003, fifty eight member organizations, six of them are Advisory Members. M1 has Liaisons with INCITS B10, T4, V2, and the following organizations: X9F4, NIST/BC Biometric WG, BioAPI Consortium, the American Association of Airport Executives, and the International Biometric Industry Association (IBIA).


A brief description of the four Task Groups current program of work follows:


M1.1, the Task Group on Biometric Data Interchange Formats

M1.1 focuses on the standardization of the content, meaning and representation of biometric data interchange formats. Currently, assigned projects are

(*) These documents are dpANS and have been through an Initial Public Review.

M1.1 has formed an Ad-Hoc Group on Quality to address means of quatify and to express and interpret the quality of a biometric sample. A draft project proposal was approved by M1 in its August 2003 meeting .

M1.1 has twenty one members.


M1.2, the Task Group on Biometric Technical Interfaces

M1.2 covers the standardization of all necessary interfaces and interactions between biometric components and sub-systems, including the possible use of security mechanisms to protect stored data and data transferred between systems. M1.2 will also consider the need for a reference model for the architecture and operation of biometric systems in order to identify the standards that are needed to support multi-vendor systems and their applications. At the present time, it does not have responsibility for any national project. It only focuses on the related "L" projects (BioAPI specification and the Common Biometric Exchange Formats Framework).

M1.2 has twenty members.

M1.3, the Task Group on Biometric Profiles

M1.3 focuses on the development of Application Profile projects. Projects assigned so far are:


(*) As a result of the August 2003 meeting of M1, a revised project proposal will be sent to INCITS reflecting expansion of this project to address "border management" overall.

M1.3 has formed an Ad-Hoc Group on Border Management to address progress of this revised project.

M1.3 has twenty one members.

M1.4, the Task Group on Biometric Performance Testing and Reporting

M1.4 handles the standardization of biometric performance metric definitions and calculations and approaches to test performance and requirements for reporting the results of these tests. M1.4 began its work with an approved project on Biometric Performance Testing and Reporting (**).

(**) As a result of the August 2003 meeting of M1, a revised project proposal will be sent to INCITS reflecting expansion of this project to a multi-part standard.


M1.4 has twenty two members.


As a result of these activities, the total program of work of M1 since its inception is as follows:

 


M1/TG


"D" Projects Under Development

"S" Projects
 "L" projects

"D" or "S" Projects in Approval

Published Standards

Total

M1


1

1



1

M1.1

7


1

7


8

M1.2



3


3

M1.3

3



3

3

M1.4

1

1

1


2

TOTAL

11



12



17

 



Significant Accomplishments

M1 has forwarded to INCITS twelve project proposals during this period, seven associated with biometric data interchange formats, three with biometric application profiles, one with biometric performance testing and reporting, and one for a study project on multi-modal biometrics.


M1 has advanced 4 documents (biometric data interchange formats) to the stage that allowed them to be forwarded to INCITS for Initial Public Review. Three of them (iris image, finger pattern-based, and finger minutia) have been through an Initial Public Review. As a result of the Initial Public Review, M1 made no substantive changes to either document. They will be sent for Management Review. The fourth document (finger image format) is under Initial Public Review which closes on November 3rd, 2003.


M1 was a major technical contributor to the approved JTC 1 SC 37 projects. The accelerated pace imposed on NBs in SC 37 has resulted in significant progress in this SC since its inception in June 2002. M1 has contributed to its program of work with six data interchange formats which became WDs (as revised by SC 37) as a result of the SC 37 Special Group meetings in April 2003 (5) and September 2003 (1) and also contributed with proposed NPs for biometric profiles and multiple technical contributions to many of the SC 37 approved and proposed projects.


M1 also contributed to SC 37 the BioAPI specification (ANSI INCITS 358-2002) and the Common Biometric Formats Framework (augmented version of NISTIR 6529-2001 - CBEFF). The BioAPI specification reached FCD status as a result of the SC 37 SG 2 September 2003  meeting (initial CD status was reached through a combined NP + CD ballot as a result of the first SC 37 Plenary in December 2002). As a result of the SC 37 SG 2 September 2003  meeting, the augmented version of CBEFF reached CD3 status.


In addition, M1 has contributed to the SC 37 Program of Work with technical editors/co-editors for all the data format documents, editors for BioAPI and CBEFF, editors/co-editors for the performance testing and reporting multipart standard and with the Rapporteurs for some of the parts of the testing and reporting standard.


This significant progress, both nationallly and internationally,  represents thousands of hours of work by volunteer officers, editors, and contributors. Over 420 documents and presentations have been prepared by M1 during this period supporting the technical and administrative activities of the M1 committee.

Another major accomplishment is also the report (M1/03-0398) of the M1 Ad-Hoc Group on Biometric Interoperability in Support of the Government Smart Card Framework (AHGBISGF). This group was formed by M1 to identify biometric interoperability requirements for the Government Smart Card Framework (GSCF) - NISTIR 6887-2003 Edition, GSC-IS (v2.1). Recommnedations of this Ad-Hoc group on how to extend GSCF to address biometric interoperability were sent to INCITS B10 as a contribution from M1. The almost 100 page report, also identifies proposed extensions to the BioAPI standard to achieve higher degree of interoperability with the GSC Government Smart Card Framework. It is expected that the result of this work will be taken internationally, through B10, to JTC 1 SC 17 as part of the proposed GSCF project and to JTC 1 SC 37 as extensions to the BioAPI especification.


The work of M1 and its related counterpart (JTC 1 SC 37) was publicized in the following publications during 2003:


"Biometric authentication - Are you who you claim to be?", ISO Bulletin, M. D. Hogan, March 2003

“Biometric Standards -- A Key to a More Secure World”, M. D. Hogan and F. Podio, ANSI Reporter: Spring 2003 – “Safe at Home”, April 2003.

“Roles for NIST in Accelerating the Development of Critical Biometric Consensus Standards for Homeland Security and the Prevention of ID Theft”
, F. Podio and M. D. Hogan, White Paper, March 11, 2003


In addition, in the last twelve months, over 25 talks were given in technical conferences by the M1 officers reflecting the M1 program of work.

Significant Challenges

Adoption of biometric-based high performance, interoperable systems will depend in part of the availability of the required open systems biometric standards. The major challenge for M1 is the timely development of the approved portfolio of the biometric standards needed by vendors and other consumers. The challenge presented by the accelerated development pace has been met by the M1 membership. However, M1 needs to expand the membership to address approved (e.g., testing and reporting standards) and new national projects (e.g., data format quality standards and possible future standards work in multi-biometric systems and conformity testing methodologies).


Biometric application profiles require substantial user participation in order to reflect these users' needs. The user' participation has significantly increased since the first quarter of 2003 and therefore, substantial rewrites on two of the three approved projects took place (Profiles for Border Crossing - currently migrating towards "Border Management" and the Profiles on Transportation Workers (a first M1 ballot was issued at the begining of September for this document).

Expected Challenges

The accelerated pace of M1 activities has extended in part to liaison efforts as well.  The biometric experts in M1 are planning to contribute to related work in other national and international activities. Internationally, SC 37 has requested participation in a collaborative effort between JTC 1 SC 27 and ISO TC 68 in the development of the international standard equivalent to X9.84 (ISO/IEC WD 19092).  A biometric security evaluation effort in SC 27 will also require contributions from SC 37 experts. M1 experts are expected to collaborate also in this effort through SC 37. 

Further harmonization of biometric (and related technology standards) will also require major efforts from the M1 experts. A challenge for M1 is to expand the organizational and liasion membership.


A major challenge is the initial accelerated pace of international biometric standards development in JTC 1 SC 37. SC 37 is operating in a 5 month cycle (5 months between SG/WG meeetings and 10 months between Plenaries). This schedule imposes great demands on M1 member organizations, editors, technical contributors and officers. Another major challenge will be developing conformity testing methodology standards for the standards under development in M1. Experts will need to be identified to contribute to the development of these standards (if projects are approved by the M1 membership). These efforts will create new workloads and demands on M1 members.

Committee Activities

Previous meetings for the reporting period


January 16-17, 2002, Washington, DC (M1 - 1st)

April 30, 2002, Washington, DC,  (OSAHG)

May 6 - 7, 2002, Gaithersburg, MD (M1 - 2nd) 

July 11, 2002, Washington, DC (AHGAP - 1st)

July 12, 2002, Washington, DC (AHGBDIF 1st)

August 19 - 22, 2002, Falls Church, VA - 19 (AHGBDIF 2nd),  20 (AHGAP - 2nd), 21-22 (M1 - 3rd)

October 29 - 31, 2002, Washington, DC, 29 (AHGBPTR 1st), 30 (AHGBDIF 3rd), 31 (AHGAP 3rd)

December 2 - 3, 2002, Somerset, NJ (M1 - 4th) 

January 9th, 2003, Washington, DC, (AHGBISGF 1st)

February 4 - 7, 2003, Washington, DC, 4 (AHGPTR 2nd), 5 (AHGBDIF 4th), 5-6 (AHGAP 4th), 7, 2003 (AHGBISGF 2nd)

March 10-14, 2003, Orlando, FL, 10-11 (AHGBISGF - 3rd), 10 (AHGBPTR 3rd), 11 (AHGBDIF 5th), 12 (AHGAP 5th), 13-14 (M1 - 5th)

April 21, 2003  (teleconference meeting) - M1.1 (1st)

April 24, 2003, Washington, DC (AHGBISGF 4th)

May 15, 2003, Orlando, FL (AHGBISGF 5th)

June 9 -13,  Seattle, WA (M1 - 6th, M1.1 - 2nd, M1.2 - 1st, M1.3 - 1st, M1.4 1st, AHGBISGF- 6th)

July 7, 2003, Washington, DC, M1 Ad-Hoc Group on Cross Jurisdictional and Societal Issues (AHGCJSI)

July 18, 2003, (teleconference meeting) (AHGBISGF 7th)

July 23, 2003,  (teleconference meeting) M1.3 Ad-Hoc Group on Biometric Profiles (Harmonization)

July 28, 2003, Washington, DC, M1 Ad-Hoc Group on Application Profile for Border Crossing

July 29, 2003,  (teleconference meeting) M1.1 Ad-Hoc Group on Biometric Sample Quality

August 18-22, 2003, Falls Church, VA (M1 - 7th, M1.1 - 3rd, M1.2 - 2nd, M1.3 - 2nd, M1.4 - 2nd, AHGBISGF - 8th)

September 25, 2003, Crystal City, Arlington, VA (AHGEMS)


* OSAHG: M1 Ad-Hoc Group on Organization and Strategy
* AHGBISGF: M1 Ad-Hoc Group on Biometric Interoperability in Support of the Government Smart Card Framework
* AHGAP: M1 Ad-Hoc Group on Application Profiles
* AHGBDIF: M1 Ad-Hoc Group on Biometric Data Interchange Formats
* AHGBPTR: M1 Ad-Hoc Group on Biometric Performance Testing and Reporting
* AHGEMS: M1 Ad-Hoc Group on Evaluating Multi-Biometric Systems

Planned future meetings

Nov 3-6, 2003, Morgantown, WV 

Jan 12 - 16, 2004, NY, NY 
Future M1 meetings will be planned based on the international SC 37 meeting schedule for 2004.


Liasion Activities


M1 maintain liaison with the following organizations:

INCITS


Liaison is maintained with INCITS (InterNational Committee for Information Technology Standards) to keep the committee informed of the actions of the INCITS organization and the progress of our projects within INCITS. See http://www.incits.org/ for further information.


TC B10

The technologies addressed by INCITS B10 and M1 are, for some applications, complementary in nature. The potential contribution of M1 to the SC 17 projects (trough B10) is apparent. In particular in the utilization of biometric data within travel documents and ID cards. Close and timely collaboration between these two INCITS TCs is maintained. M1 made a substantial contribution in the last month to the B10 work with SC 17. An M1 Ad-Hoc developed recommnedations on extensions to the Government Smart Card Framework to address biometric interoperability.

For more information about B10 see http://www.incits.org/tc_home/b10.htm


TC T4

Strong synergy exists between biometrics and IT security.  The complementary nature of both programs of work is expected to lead to further close and long term collaboration between experts from both TCs.  M1 plans to actively pursue constructive contributions to the T4  projects. An specification (Biometric Template Protection Techniques) developed by an outside organization, the NIST/Biometric Consortium Biometric Working Group (a liaison to M1) will be offered to T4 as a contribution to the international work of JTC 1 SC 27 (if approved by T4).

TC V2

Current V2 activities (standards for a Universal Remote Console (URC)) may lead to collaboration opportunities with M1. Potential contributions of M1 to V2 work are  possible in the next period. In particular related to the utilization of biometric technologies and biometric data within the applications of interest to V2.

X9F4

The industries targeted by X9F4’s program of work are potential users of biometric technologies. M1 expects to actively contribute (through SC 37 and X9F4) to the international counterpart of X9F4 (ISO TC 68) projects related with the application and utilization of biometrics within the Banking and Financial Services applications. In particular the transposition of the X9.84 standard to ISO TC 68.

NIST/BC Biometrics WG

The Biometric Consortium serves as the U.S. government focal point for research, testing, evaluation and application of biometric-based personal verification and identification technologies. A working group established by NIST and the Biometric Consortium, the NIST/BC Biometric Working Group, has been working over the last two years to develop biometric specifications that can be turned over to formal standards bodies such as INCITS M1 and JTC 1 SC 37. In the last year NIST/BC Biometric Working Group approved and provided to INCITS M1 three specifications for consideration as national and international standards: (a) Biometric Template Protection and Usage; (b) Biometric Application Programming Interface for Java Card TM; and (c) an augmented version of the Common Biometric Exchange File Format (NISTIR 6529-A). 

BioAPI Consortium

The BioAPI Consortium was formed to develop a widely available and widely accepted Application Programming Interface to serve any type of biometric technology. It has over 100 members from industry and other organizations. Additional information about the BioAPI Consortium can be found at www.bioapi.org.

IBIA

The International Biometric Industry Association (IBIA) (http://www.ibia.org) is a trade association, to advance, advocate, defend and support the collective international interests of the biometric industry.  IBIA is  governed by and for biometric developers, manufacturers and integrators, and is impartially dedicated to serve all biometric technologies in all applications.  IBIA is very active in the areas of privacy principles.  It is also the Registration Authority for the CBEFF specification (NISTIR 6529-A).

Membership and Officers


The membership lists for TC M1 and its TGs are available on the M1 website under the members button. The officers of TC M1 and its TGs are shown below.


Officers


TC M1 Chair: (appointed 04/22/02)

Fernando L. Podio

National Institiute of Standards and Technology
100 Bureau Dr., MS 8951
Gaithersburg, MD 20899-8951
USA

Phone: (301) 975-2947
Fax: (301) 869-7429
E-mail: fernando.podio@nist.gov


TC M1 Vice-Chair: (appointed 05/06/02)

Dr. Colin Soutar

Bioscrypt Inc.
5450 Explorer Drive, Suite 500
Mississauga, ON  Canada  L4W 5M1 
Phone 905-624-7707

Fax:  (905) 624 7745

E-mail:  colin.soutar@bioscrypt.com

TC M1 International Representative: (appointed 07/11/02)

Cathy Tilton

SAFLINK CORPORATION

11417 Sunset Hills Road
Suite 106
Reston, VA 20190 
USA
Phone: 703-708-9280
Fax: 703-708-0014

E-mail: ctilton@saflink.com

TC M1 Secretary (appointed 05/06/02)

Dr. Stephen J. Elliott

Purdue University

307 Knoy, Dept. of Industrial Technology
West Lafayette, IN 47907
USA
Phone 765-532-5108
Fax 765-496-2700

E-mail: sjelliott@tech.purdue.edu

TG M1.1 Chair (appointed 03/14/03)

Creed Jones

Sagem Morpho, Inc.
1145 Broadway Plaza, #200
Tacoma, WA  98402
USA

Phone: 253-591-8868
Email: creedj@morpho.com

TG M1.1 Vice-Chair (06/09/03)

Dr James Cambier
121 Whittendale Drive, Suite B
Moorestown, NJ 08057
USA
Phone 856-222-9090
E-mail: jcambier@iridiantech.com

TG M1.1 Secretary (06/09/03)

Greg Cannon
Cross Match Technologies, Inc.
Address 3960 RCA Blvd.
Suite 5001
Palm Beach Gardens , FL 33410 
USA
Phone 561-622-1650
Fax 561-622-4278
E-mail greg.cannon@crossmatch.com

TG M1.2 Chair (appointed 03/14/03)

Fred Herr

The Biometric Foundation

65 Douglas road
Lamsbale, PA 19446

USA

Phone 215-527-6717
Fax 301-990-9405  

E-mail: fherr@idtp.com

TG M1.2 Vice-Chair (appointed August 19-20, 2003)  

Wayne Kyle

Biocom, LLC
952 Echo Lane, Suite 322
Houston , TX 77024 
USA
Phone 713-984-8994
Fax 713-984-9232
E-mail wkyle@biocom.tv

TG M1.3 Chair (appointed 03/14/03)

Fernando L. Podio

National Institute of Standards and Technology
100 Bureau Dr., MS 8951
Gaithersburg, MD 20899-8951
USA

Phone: (301) 975-2947
Fax: (301) 869-7429
E-mail: fernando.podio@nist.gov


TC M1.3 Secretary (appointed 09/22/03)

Rick Randall

BAH (representing DoD BMO)

Address:  8283 Greensboro Drive,
Allen Bldg room 804

McLean, VA 22102
USA
Phone:    703-902-5388
Fax:      703-902-3535

E-mail: randall_rick@bah.com


TG M1.4 Chair (appointed 03/14/03)

Ron Sutton

LOCKHEED MARTIN CORP
Address 12506 Lake Underhill Road
Orlando, FL 32832-5714  
USA
Phone 407-306-4771
Fax 407-306-6959
E-mail ronald.d.sutton@lmco.com

TG M1.4 Vice-Chair (appointed 08/19/03)  

Michael Thieme

Organization International Biometric Group
Address One Battery Park Plaza, Ground Floor
New York, NY 10004
USA
Phone 212-809-9491
Fax 212-809-6197
E-mail mthieme@biometricgroup..com


Future Trends and Related Technical Activities

Deploying new information technology systems for homeland security will require a comprehensive set of both national and international technically sound standards for biometrics that meet the U.S. needs. Biometric technologies are starting to play a crucial role in a wide range of applications. In addition to supporting homeland security and preventing ID fraud, biometric-based solutions are able to provide for confidential financial transactions and personal data privacy. Enterprise-wide network security infrastructures, the protection of buildings from unauthorized individuals, employee IDs, secure electronic banking, investing and other financial transactions, retail sales, law enforcement, and health and social services are already benefiting from these technologies. A range of new applications can be found in such diverse environments as amusement parks, banks, mobile devices, passport programs and driver licenses, colleges, and school lunch programs. Biometric technologies are being required in multiple government and commercial applications.


The importance of biometric technologies has dramatically increased because of the events of September 11, 2001. Homeland defense is now the highest of priorities for many countries. These countries are now seriously considering or have already approved new legislation that calls for the investigation and use of biometric technologies as soon as possible for homeland defense applications. The prevention of ID theft will also become a significant market for biometrics in the future. Accounting for systems developers, resellers and the influence that biometrics will have in other industries and the IT industry (i.e., security industry), biometric technologies are expected to be a substantial catalyst for the global IT market in these applications. The expected growth of the biometrics market, however, is placing a greater demand on the international biometric industry, biometric system developers, researchers and end-users to work together to address in cooperation a number of issues including privacy, testing and evaluation, infrastructure, cost, scalability and open system interoperability and data interchange. M1 and SC 37’s efforts will help to ensure that future standards-based systems and applications are more interoperable, scalable, reliable, and secure.


M1 is developing a first generation of formal biometric data interchange standards. Advances in biometric technology research and development might require in the future a second generation of these standards (e..g,  3-D face). The portofolio of biometric application profiles is expected to growth. Health Care, Enterprise systems and access control applications may lead to the development of profiles for these applications.


Industry consortia remain an important source of new standards activities. M1 will continue to relay of standards incubators such as the Biometric Consortium as source of guidance and specifications. We have seen at least one case recently that elected to use INCITS fast-track standardization as the primary mechanism for carrying the documents forward into the standards world, the augmented version of CBEFF (NISTIR 6529-A). We have seen a second case where M1 has invited an outside organization (NIST/BC Biometric WG) to submit one of its specificaitons for further standardization (biometric template protection and usage - M1 has determined that this specificaiton should be offered to T4 as a candidate for a US contribution to SC 27). The heavy workloads and highly technical environments associated with our activities lead to some electronic meetings. This approach has been used for some of the Ad-Hoc meetings and even an initial TG meeting (M1.1). However, most of the TG meetings and all of the M1 meeting, have beenphysical meetings.

Other Administrative Information

Financial Statement:

M1 meeting activities are financed and hosted by volunteer organizations. The individual participants and their member organizations finance all travel, room, and related business expenses. M1 has no direct financial activities.


Web-based/electronic document distribution procedures:

From its inception in November 2001 M1 has operated through electronic document distribution (M1 reflector for members). All M1 documents are posted in a web-based document register (WEB URL). Documents are posted in the document register by INCITS personnel. M1 and M1 TG officers have access to an automated document numbering system. 


The full details (company, address, phone, e-mail etc.) of M1 and M1 TG officers are available on-line through the INCITS web site. At the present time M1 does not have a web-based Letter Ballot scheme in place. The M1 officers are responsible for issuing the M1 letter ballots electronically through the M1 email reflector.


Documents for each meeting (M1 and TGs) are posted in advance according to the INCITS rules and offered to the M1 membership in ZIPPED files posted in the M1 web site before the meetings.

Recommendations:


At the first M1 meeting, approved a motion to encourage INCITS to continue to support the rapid advancement of  generic biometrics standards development.  M1 stated that "this development work should not be delayed while decisions are reached concerning the ultimate placement of this work within ISO/IEC JTC 1". Due to the uncertainty where the international generic biometric standards development work was going to be placed M1 also decided to issue a letter ballot requesting to INCITS that M1 be given the U.S. TAG assignment of the generic biometric work in ISO/IEC JTC 1, wherever this work was placed.