1 OASIS Biometrics TC New Committee Kickstart Kevin Mangold Ross Micheals

1

OASIS Biometrics TC

New Committee Kickstart

Kevin MangoldRoss Micheals

2

IntroductionOASIS Overview with Q&AOASIS BIAS SOAP Profile TC HistoryPurpose of New TCWS-Biometric DevicesPossible New Work Items & DiscussionQuestion & AnswerCall for ParticipationAdjourn

3


4

OASIS 101

interoperability DRIVE adoption

OASIS —> ISO, ITU, IEC…

Be heard a) business reqs b) use cases

Grow global markets: bigger pie = BIGGER SLICE

Tap into the brain

trust

OPEN + STANDARDS + YOU

Reduce risk Build based on industry consensus

5

OASIS 101OverviewCommittee ParticipationVotingTC ResourcesPromoting Your WorkAnnual DuesNew TC Timeline

6

OASIS Overview• Not-for-profit consortium founded in 1993• 2000+ members representing 600+ orgs and

individuals from 100+ countries• 70+ Technical Committees• Internally recognized, auditable process• Proven IPR Policy• Rules that protect the level playing field

7

Committee Participation

Non-Voting Member

Attend two consecutive

meetings Voting Member

Miss two consecutive meetings

Each person chooses role

Observer

8

Voting on Standards

Committee Specifications

1 person = 1 vote

OASIS Standards

1 org = 1 vote

9

Standard Approval Process

Cmte Spec Draft (CSD)

(1 person = 1 vote)

Public Review (30 days)

CSD Cmte Spec (CS)

Statements of Use(3 or more)

Submission for OASIS Standard

Ballot

Public Review(60 days)

OASIS Standard Ballot

(full membership; 1 org = 1 vote)

Approved OASIS Standard

10

TC Resources

• Public TC web pages

• Members-only TC web pages / collaboration tools (“Kavi”)– Only OASIS members may view

• TC mailing list– Publicly archived

– Only TC Members may post

– Only TC Members and Observers are subscribed (automatically)

• TC comment list (non-member feedback to TC)

• TC wiki*– Sandbox for collaborating on drafts

– Only TC members may edit/public may view

• JIRA**Created upon request

11

Promoting Your Work

TC Web Site (Public and

Members-Only)

FAQ

Social Media

Press Release

Webinar

Interop Demos

12

Annual Dues

Organization type / size Sponsor ContributorCompany employing more than 500 people 16,000 8,000Company employing 100 - 500 people 14,000 7,500Company employing 10 - 99 people 12,000 6,600Company employing fewer than 10 employees 9,500 3,200Academic Institution or Association 10,000 1,100National government agency from OECD member country 10,000 *National government agency from non-OECD country 10,000 1,100Local government agency 10,000 1,100

Personal membership is also available for self-employed or unemployed individuals.

http://www.oecd.org/countrieslist/0,3025,en_33873108_33844430_1_1_1_1_1,00.html



https://www.oasis-open.org/join/categories-dues

13

New TC Timeline

Call for Comment

• 14-day review by OASIS membership at-large• Issued by TC Admin no more than 5 days after Convener submits draft charter

Convener Call

• Convener, TC Proposers review member comments, finalize charter• Scheduled by TC Admin within 4 days of CfC close

Final Charter

• Includes final TC Proposers list and Statements of Support• Submitted by Convener no more than 30 days from CfC start

Call for Participation

• 30-day period for new members to join• Issued by TC Admin no more than 5 days from receipt of final charter

1st TC Meeting

• Official TC launch, elections for chair/co-chairs• Scheduled at least 30 days after CfP (if call) or 45 days (if F2F)

• Statement of work, scope, and other requirements defined in TC Process• Submitted by Convener to TC AdminDraft Charter

http://www.oasis-open.org/policies-guidelines/tc-process

14

OASIS. You belong here.

Membership: Communications:Dee Schur Carol [email protected]@oasis-open.org

JOIN

mailto:[email protected]

mailto:[email protected]

15


BIAS SOAP Profile and TC History Lesson

Cathy Tilton – DaonChair, BIAS Integration TC

17

In the beginning …

In reviewing the biometric-related standards portfolio and service oriented architecture (SOA) references, it became apparent that a gap existed in the availability of standards related to biometric services.

Biometric Applications Biometric Resources

?

18

The time was right - • Biometric systems and customers are becoming more sophisticated

– Increased interest in and utility of biometrics• Government & commercial, but mostly driven by the

former at present– Large, complex systems– Enterprise architectures built on the SOA model & standards– Emphasis on data sharing & reuse of resources/services– The need for vendor independence, multiple sources

• Departure from custom solutions• Embracing of open systems, standards

– New requirements for interoperability and flexibility

19

Context – Biometrics in the Cloud

XML

SOAP

http://images.google.com/imgres?imgurl=http://www.utmem.edu/campuspolice/Images/fingerprint.gif&imgrefurl=http://www.utmem.edu/campuspolice/Fingerprinting.html&h=199&w=193&sz=3&hl=en&start=11&tbnid=KBd9xTuxKGxFDM:&tbnh=104&tbnw=101&prev=/images?q=fingerprint&svnum=10&hl=en&lr=

20

Context – Biometrics as a Service

Enrollment Screening

Authentication Credentialing

Services

21

Context – Biometric Data Sharing

Cross-Program

Cross-Agency

Inter-state

International

22

BIASBiometric Identity Assurance Services

Collaborative project of INCITS and OASIS

INCITS 442:2010

OASIS BIAS SOAP Profile

Provides a services-based framework for biometric systems

BiometricOperations

ServicesBindings

http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=bias

23

Timeline

2005

DHS needidentified;

Joint projectcoordination

begun

2006

JointWorkshop

20122008 2010

442 Revinitiated

M1 projectinitiated

INCITS 442:2010published

BIAS SOAPProfile

Comm. Specpublished

1st TCmeeting

ISO BIASproject

approved

BIAS SOAPProfile

standardpublished

INCITS 442published

Switch: Msg Protocol

to SOAP Profile

2007 2009 2011

24

System Context• Example Applications

– Border management– Credentialing– Customer/subscriber

identification• Example Resources

– A fingerprint verification matching server

– A 1:N iris search/match engine– A facial biometric watch list– A criminal or civil automated

fingerprint identification system (AFIS)

– A name-based biographic identity database

– An archive of biometric identifiers

– A population of subjects

Application

Matc

her

Service Provider

ID d

ata

base

Auth

en.

Serv

er

BIAS messages

User

25

BIAS Services• Subject

– Create/delete subject– Add/remove subject from gallery

• Biographics– Set/list biographic data– Update/delete biographic data– Retrieve biographic data

• Biometrics– Set/list biometric data– Update/delete biometric data– Retrieve biometric data

• Searching/processing– Verify subject– Identify subject– Check quality– Classify biometric data– Perform fusion– Transform biometric data

• Aggregate services– Enroll– Identify– Verify– Retrieve information

• Asynchronous results retrieval

Discovery Query Capabilities

26

Status• INCITS 442:2010, BIAS

– Defines requirements, operations, data elements– Submitted to ISO – Project 30108

• OASIS BIAS SOAP Profile– Approved as OASIS Standard

• https://www.oasis-open.org/standards#biasv1.0

• Implementations (Statements of Use)• NIST has created a reference implementation

– http://www.nist.gov/itl/iad/ig/upload/BIAS_20110916.zip– http://lists.oasis-open.org/archives/bias/201201/msg00003.html

– DoD: http://lists.oasis-open.org/archives/bias/201201/msg00004.html– Viometric: http://lists.oasis-open.org/archives/bias/201201/msg00000.html

27

Limitations of current TC• Narrow scope of charter

– Most OASIS TCs are ‘single project’ focused– Modifying charter = rechartering– Rechartering ~ creating new TC

• BIAS project completed– Ongoing maintenance required

• e.g., revision to sync with ISO version of base standard (30108-2)– Liaisons with INCITS & ISO– Potential related projects

• e.g., REST implementation

• Plans going forward• Declare victory!• Wrap up the TC – transition work to new TC with broader scope

28

Contact Info:[email protected]

29


30


31

WS-Biometric Devices• Command & control biometric devices (sensors) via web

services (WS)• REST-inspired

– Resource based– Server maintains state– XML over HTTP

• “Rough” prototype demonstrated at BCC 2010• Reference application demonstrated at the NIST booth at

this BCC• Specification released “early and often”

– Five versions of specification released between January 2011 and March 2012

– Comments received and incorporated throughout the lifecycle

32

WS-Biometric Devices• SBIR Phase I award for the topic WS-Biometric

Devices (WS-BD) Conformant Handheld Fingerprint Sensor– Fulcrum Biometrics, LLC– SBG Labs

• Next Steps– “Class” specific profiles– Prescriptive security guidance– Streaming for live prevew

33


34

Possible New Work Items & Discussion• WS-Biometric Devices• BIAS SOAP Profile

– REST?• XCBF

35


36

Question & Answer• OASIS participation• Scope of the new TC• Participation in the new TC

37


38

Call for Participation• Asserting participation does not mean

– Participation is binding

• It does mean– You/organization supports the creation of the new

committee– You/organization may participate in TC activities

• Will reach out to participants to provide updates on the TC’s creation and status

39


40

Adjourn

Feel free to contact us with any questions you may have

Stop by the NIST booth to see our WS-Biometrics Devices demonstration

Thank you!http://bws.nist.gov/

Documents

1 OASIS Biometrics TC New Committee Kickstart Kevin Mangold Ross Micheals