[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Biometric Data not in DOD Certificate [was; Re: Certificateprofile for Biometrics information.]




At 4:18 PM -0500 11/4/02, Sam Schaen wrote:
"Phillip H. Griffin" wrote:
[snip]



 Biometric information seems destined to become the financial
 identifier that one
 day replaces the social security number. There's much interest in
 using it to try
 to combat identity fraud, said to be the fastest rising crime. On
 another front,
 a DOD pilot is to use a biometric extension in a smart card
 certificate.


[snip]


As someone responsible for documenting  the DOD PKI certificate profile
and verifying that numerous certificates have satisfied that profile, I
can say with assurance that there is no biometric data in the
certificate itself.

With somewhat less assurance, since I am not intimately familiar with
the process, it is my understanding that the fingerprint indicia are
stored centrally--not even on the smart card containing the
certificates.

Sam Schaen

I can verify Sam's comment. The DoD Common Access Card (CAC) does not store biometric data in any form at this time. The fingerprint data are stored in a central database and that database is accessed when a user must authenticate him/herself to a verification officer to have a CAC issued or reissued.


Steve