M1/03-0593


Accredited Standards Committee, INCITS, InterNational Committee for Information Technology Standards
INCITS Secretariat, Information Technology Industry Council (ITI)
1250 Eye St. NW, Suite 200, Washington, DC 20005
Telephone 202-737-8888; Fax 202-638-4922; Email: incits@itic.org


Date: December 7, 2003
Project: 1566-D
Ref. Docs:  M1/02-0079
Reply to:  Fernando Podio, Chairman, M1.3 TG Application Profiles
Phone: 301-975-2947
Email: fernando.podio@nist.gov

To: Mr Greg Cannon, Cross Match Technologies, Inc.
cc: M1 Members - For Information
cc:
Associate Manager for INCITS M1, INCITS Secretariat
From: Fernando Podio, Chairman, M1.3 TG Application Profiles
NIST, 100 Bureau Drive, Stop 8930, Gaithersburg, MD 20899-8930



Subject: M1's Response to the Negative Vote and Comments received for M1 Letter Ballot M1/03-0420,
Approval of  forwarding the Transportation Workers Application Profile (Ref. M1/03-0419) to INCITS for Public Review.


Dear Mr. Cannon,

Thank you for your comment on M1 Letter Ballot M1/03-0420.

M1.3 Task Group has recommended M1 approval of the resolution of ballot comments documented in M1/03-0534 (9/0/0) and M1 approved M1.3's recommendation (26/0/0) to address your comments  as shown below.

 
 Original Comment M1 response M1 Comment

Cross Match Technologies, Inc.

I am voting no because of one small but important issue regarding the proposed architecture.  The profile specifies that the application would provide the GUID to the biometric system. To me, this is backwards and represents a security problem.  The biometric system should, upon enollment, provide a unique id code.  This allows for the protection of privacy from the perspective of the biometric system.  If the system has access to the application IDs, then basically the system could gain access to other information with that id.



Rejected













Requires comprehensive solution with proposed text.

In accordance with ANSI requirements to make attempts to resolve negatives and ensure that all who voted "NO" on M1 Letter Ballot M1/03-0420 to submit dpANS to INCITS for further processing are aware of the ANSI Appeals Process, we are advising you in this letter of the Appeals Process (see below) and of the following items:

You are requested to respond to this letter, notifying the TG chair whether you are:

Please send this response to the M1.3 chairman fernando.podio@nist.gov as soon as possible.


Appeals Processes

1) You may appeal an action of INCITS or its Secretariat. The INCITS Appeals Procedures are in Section 5.8 of the INCITS/RD-2, Organization and Procedures for the International Committee for Information Technology Standards (http://incits.org/incits/rd2/main.htm).

2) Notification of Right to Appeal to the ANSI Board of Standards Review (http://ansi.org/standards_activities/domestic_programs/appeals/appeals.aspx?menuid=3)

Please note, in accordance with BSR Procedures, those objecting to the approvals or withdrawals are hereby notified of their right of appeal. The appeal must be based on due process or lack of consensus and include a statement as to why the BSR action should be modified.  The BSR will not render decisions on the relative merits of technical matters, but it shall consider whether due process was afforded technical concerns.

If you have not completed the appeals process at the standards developer, you are normally not eligible to appeal to the BSR.