Statement for the Record

Dr. Arden L. Bement Jr.
Director
National Institute of Standards and Technology
U.S. Department of Commerce

For the

Subcommittee on Immigration
Committee on the Judiciary
United States Senate

“S 1749/HR 3525 Enhanced Border Security and Visa Entry Reform Act”

April 12, 2002



    Mr. Chairman and Members of the Subcommittee, thank you for the invitation to submit this statement for the record.  This statement describes part of the critical technical work that needs to be done to accomplish the objectives of S.1749 (and its companion bill, HR3525), the Enhanced Border Security and Visa Entry Reform Act.  Specifically, I would like to discuss the work and expertise of the National Institute of Standards and Technology (NIST) in developing technical standards of the types specified in this legislation.  I will also describe some of the programs that our sister agency, the National Oceanic and Atmospheric Administration (NOAA), is conducting in support of enhanced border security.

    The mission of NIST, which is part of the Technology Administration of the Department of Commerce, is to develop and promote measurements, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life.  NIST works with the private sector and government agencies to develop and assist in the application of the technologies, measurements, and standards needed for new and improved products, services, and capabilities.

    NIST has a history of responding to national needs. In times of crisis NIST is available with its expertise and technical advice to help protect U.S. citizens from natural disasters and other various types of threats, like the terrorists threats that we are currently facing.  Now the nation needs to protect homeland security, and again, NIST is ready to respond. Our researchers are providing technical support to other agencies that are involved in this national emergency.

    The USA Patriot Act (PL 107-56) and the proposed House and Senate follow-on bills seek to provide appropriate tools required to intercept and obstruct terrorism in our country.  Specific provisions of this legislation call for:

    Under this legislation, NIST would be tasked to develop and certify accuracy standards for biometric technologies in support of these identification and verification functions.
The basic need to be addressed is accurate identification to ensure that terrorists are not admitted into the United States.

    Biometrics play a critical role in accurate confirmation of identity. Biometrics is the science of recognition of a person based on a physiological characteristic or group of characteristics.  Biometrics systems can be subdivided into two modes, identification and verification.  In identification mode, a biometrics system identifies a person from an  enrolled population by searching a database for a match.  In verification mode, the system uses biometrics to authenticate a person’s claimed identity based on his or her previously recorded pattern.

    The biometrics to be included in the NIST studies, and which would require certification are: ten rolled fingerprints for matching, ten (or less) flat fingerprints for matching, single flat fingerprint verification, and face-based verification.  Using available fingerprint and facial databases, NIST will construct and conduct tests for use in setting standards for certifying the accuracy of proposed fingerprint and facial biometric technologies.

    The proposed new statute accelerates an already aggressive timeframe for delivering technical standards -- from two years to one year.  In this one-year period, NIST would provide technical standards for three biometrics – ten-print rolled fingerprint matching for identification, single-finger flat fingerprint verification, and face-based verification.  If the original two-year period as called for in the USA Patriot Act were maintained, NIST could also develop and perform tests for face recognition under different kinds of scenarios, such as variations in lighting, head pose, facial expression, and how far apart in time the images are taken, as well as develop guidelines and standards dealing with the quality of face images and fingerprint images, and their relation to accuracy.

    NIST has already contributed greatly in laying the foundation for interoperable data exchange of one of the primary biometric technologies under consideration – that is, for fingerprint technology.  NIST, working closely with the FBI, Department of Justice, state and local law enforcement agencies, product vendors of fingerprint classification systems, and several foreign law enforcement agencies, recently completed a joint American National Standards Institute and NIST standard for the data format for exchange of fingerprint information.  This standard promotes the exchange of fingerprint data among different law enforcement agencies using systems from different vendors.

    NIST is also currently working on standards to allow the exchange of biometric templates. These templates hold the biometric information on an enrolled subject.  In addition, improved interoperability of the diverse government systems can be achieved by using existing standards for exchange of data. These technologies include standardized mark-up languages (such as XML) and query languages for databases (such as SQL), standards for multimedia data (including MPEG-7), and Unicode for foreign language information.  NIST work with the FBI on standardizing the format for criminal histories has demonstrated that these tools can be successfully used for interoperable exchange of data.

    NIST currently is not working on any other database interoperability issues relevant to the proposed Act. The NIST position is that providing standards for certifying the accuracy of biometrics should be the highest priority effort, since knowledge of the accuracy of the biometrics is critical to a successful implementation and deployment of any system based on biometrics.

    NIST has demonstrated its technical competence in developing standards and performance evaluation in security and many other technical areas, including fingerprint and other biometric technologies.  It has a successful history in working with law enforcement agencies and with product vendors to establish interoperability standards, which ensure successful exchange of image data.  NIST wants to assure the Chairman and the Subcommittee members that we are eager to continue to fulfill our technical standards role in this very important effort for the security of our Nation.

    I would now like to provide the Subcommittee with information regarding NOAA's programs which support border and port security.  When discussing the issue of border security one must think of ports of entry on land and sea.  It is in this context that the Subcommittee may find the NOAA’s programs relevant to its consideration of  S. 1749.

    As gateways to our largest cities and industries, United States seaports are vulnerable choke points and strategic targets for attack.  Our economy – the foundation of national security – depends upon the unimpeded flow of commerce into and out of our ports, particularly as 95% of U.S. foreign trade enters and leaves by ship.  The U.S. military also relies on commercial ports for national defense and deployment missions.  As the volume of international maritime cargo doubles over the next twenty years, any weakness in U.S. seaport security will lead to increasing vulnerability to criminal and terrorist activities.  The intentional release of hazardous chemicals; the introduction of weapons of mass destruction; the sinking of ships to blockade ports; manmade obstructions mining our entry channels; the protection of critical infrastructure in or near ports; these are but a few of the concerns for those maintaining seaport security.

    Because of its unique roles as coastal steward and producer of navigation data, the National Oceanic and Atmospheric Administration (NOAA) offers assistance that is of great benefit to the Coast Guard, the Navy, the Federal Emergency Management Agency, port authorities, marine pilots and others committed to port security while continuing critical support for maritime commerce.  NOAA provides the nation with valuable nautical charting and hydrographic services that can help strengthen port security and develop the tools and infrastructure to improve Maritime Domain Awareness.

Mine-like objects and Quick Routes

    Drifting mines pose a major threat to the U.S. coast.  High-resolution hydrographic data in navigable routes are required for effective Mine Counter Measure (MCM) operations.

    NOAA's surveying expertise with multi-beam and high resolution side scan sonar imagery is essential for characterizing the water column and bottom environments.  These data provide the baseline for change detection, which has been documented as an effective approach to defend against mines.  Once baselines are established, waterways must be maintained.  Effective MCM maintenance must be performed at intervals appropriate for the situation (vessel traffic, silting, dredging, etc.) and consists of an identical high-resolution survey to compare against the baseline to determine bottom differences.  These differences are evaluated and prosecuted as required by Naval MCM assets to provide safe routes, or Quick Routes, for vessels to move through ports, harbors, or other restricted waters.

    NOAA will focus on the high priority commercial ports as determined with the U.S. Coast Guard.  The abundance of ports makes these tasks formidable.  It is proposed that Navy maintain the principal routes to major Defense bases and facilities.  NOAA used a major proportion of the monies provided by Congress in FY2002 for hydrographic equipment upgrades to meet these goals.  This equipment will enable NOAA to collect the same data as the Navy MCM operational groups, and supply the raw data to the Navy for processing.  Operations are planned for April 2002.

Office for Law Enforcement - Vessel Monitoring System (VMS)

    The National Oceanic and Atmospheric Administration (NOAA) Fisheries Office for Law Enforcement currently operates a national Vessel Monitoring System (VMS) program.  VMS is a near-real time satellite based monitoring and surveillance system with two-way communications capabilities in most areas throughout the U.S. Exclusive Economic Zone (one-way communications only in Alaska).  The position reports, which are available 365 days a year, are monitored by NOAA Fisheries Office for Law Enforcement and later this year a live feed will be sent directly to U.S. Coast Guard assets on the water.

    Current VMS systems are used to enforce fishery management measures. NOAA has approximately 500 VMS units deployed with an additional 600 units to be added in June of 2002.   VMS clearly supports an enforcement mission; however, it has direct ancillary benefits to Homeland Security activities.  Therefore, NOAA is currently exploring opportunities to substantially accelerate the current VMS program.

    NOAA believes that increased border security correlates directly with increased risk within our EEZ and along our coast line for illegal entry.  In March of this year the President announced his “Citizen Corps” initiative, which includes the expansion of “Neighborhood Watch” to include the participation of ordinary citizens in detecting and preventing terrorism.  By expanding the number of U.S. fishing vessels operating with VMS, NOAA is expanding our capability to detect and prevent terrorism and other criminal activity in one of our most vulnerable areas; the U.S. Exclusive Economic Zone.

    VMS provides two-way satellite communications capability, which can be used to report suspicious activities or vessels directly to NOAA Fisheries Special Agents, Enforcement Officers and the U. S. Coast Guard.  VMS also supports the Coast Guard’s “Coastal Watch” initiative, which was developed in response to their homeland defense activities.  Under “Coastal Watch”, the Coast Guard requests fishers to report suspicious activities for investigation and intelligence purposes.  Furthermore, critical decisions on the deployment of enforcement assets can be based on VMS surveillance reports. Satellite communication can also update essential information during a law enforcement response.

    Through expanded participation, investigative methodologies will be enhanced via surveillance data maintained within VMS, such as, easily identifying potential witnesses to incidents, locating U.S. vessels in areas of suspicious activity for assistance and support and increased intelligence gathering capabilities.

Electronic Navigational Chart with U.S. Coast Guard Automatic Identification System

    In addition, NOAA’s Electronic Navigational Chart (ENC) will integrate with the U.S. Coast Guard’s Automated Identification System (AIS) to help track and manage vessel movement in our Nation’s ports.  This will be an important component of the Coast Guard’s efforts to improve Maritime Domain Awareness and port security, and to reduce the potential for maritime threats without unreasonably disrupting the free flow of commerce.

    The Coast Guard is developing AIS as a navigational tool for collision avoidance and vessel tracking.  In its simplest form, AIS consists of a VHF radio transmitter that sends out a ship's name, position, course and speed, along with other data.  Other ships can receive and display this information as well as Vessel Traffic System receivers located on shore.  Like radar, AIS positions are updated frequently enough to help avoid collisions, but unlike radar, AIS can 'see' around hills and eliminate blind spots caused by coastal topography.

    NOAA’s ENC is an integral component for AIS because vessel positions obtained by AIS must be displayed on a highly accurate electronic charting backdrop.  An ENC is a highly accurate vector database of chart features that shows marine geospatial information such as buoys, vessel traffic lanes, water depths, wrecks, obstructions, and shoreline features.  Because the data are intelligent, computer software can issue warnings to mariners if a ship is approaching danger.  For example, if a ship has a draft of 40 feet, and is heading for water depths of 30 feet, a warning can be issued.  Likewise, a shoreside AIS monitoring station can identify and sound warning when a vessel strays from its traffic lane.

    AIS will be phased in over the next several years so that most commercial vessels will be required to carry some form of AIS in U.S waters.  The International Maritime Organization has established a 2002 deadline for all new commercial carriers to be fitted for AIS transponders; large commercial ships constructed after July 1, 2002, are required to carry AIS in U.S. coastal waters.  Existing ships must be retrofitted for AIS transponders by 2007.  AIS can be used by the Coast Guard to monitor vessel traffic in coastal waters and therefore increase Maritime Domain Awareness.

    NOAA’s Office of Coast Survey, as the U.S. national hydrographic office, is exclusively responsible for production and authorization of ENC data in U.S. waters.  NOAA is building its ENCs to the International Hydrographic Organization’s S-57 electronic charting standard.  In order for an electronic chart to gain type approval as an Electronic Chart Display and Information System (ECDIS), it must be fueled by ENCs.   However, ENCs are not only for ECDIS use.  ENCs can fuel any Electronic Chart System (ECS) that reads the S-57 format.

    Again, I would like to thank the Subcommittee for this opportunity to submit this statement for the record.  If the any Senator or staff has any question regarding any program or effort discussed I would be happy to provide answers for the record.