Update on Government Smart Cards Additional Charts (Not used in presentation)

1
Update on Government Smart CardsAdditional
Charts (Not used in presentation)

• 7th Information Security Workshop
• Smart Cards Technology, Applications and
  Security
• Centre for Applied Cryptographic Research
• Sheraton Reston - Reston VA - April 25, 2001

Presentation by John G Moore GSA Office of
Electronic Government 18th F St NW Washington
DC 20405 202.208.7651 johng.moore_at_gsa.gov
2
Moores eGov Projects for FY2001

• Mobile Technologies
• Voice and Language Technologies
• PDA and PIM Contact and Calendar
• Human side of eGov - Knowledge Management and
  Distance Learning
• Smart Cards and E-Forms to meet GPEA Requirements
  
• Outreach Requirements Expanded - such as
  Professional Associations and Conferences
• Interoperability, Standards and Architecture
• Business Case and Demographic Statistics

3
Whats Smart Card Do For You?

• Major building block in transforming your
  business to eBusiness / eGovernment / eCommerce /
  eMoney
• Interoperability between Federal Agencies
• Any chip, any card, any token device, any reader,
  any host, any browser, any application

4
Smart CardWhat Does It Do For You?

• Transforms Your Business to E-Business
• Digital Signature / Hosts Biometrics
• Simplifies Access to Buildings, Meetings,
  Computers, Phones, Email, Internet
• Eliminates need to write your name and address
  repeatedly
• Secure, Private Access and Payments for Internet
  Services and Purchases
• Automates accounting
• Significant productivity gain
• Secure E-Mail
• Internet Payments

5
The Smart E-Gov Technology Drivers
The ities and the ations

• Miniaturization
• Scalability
• Granularity
• Capacity
• Speed
• Interactivity - a Major Trend
• Mobility
• Freedom
• Telework / Flex-Place
• Office-in-a-box
• Travel-in-a-box
• Help-desk-in-a-box
• Distance Learning
• Knowledge Management
• Over-the-air
• Packaging all this infrastructure into Seat
  Management
• Interoperability
• Not a standard, but an accepted national
  implementation convention or practice

6
What Are Smart EGov Technologies?

• Technologies based on computers, phones and
  networks
• Extension of computer network technology through
  the miniaturization and portability of computer
  chips, wireless, voice, information and knowledge
  management technologies
• Major chunks of Smart EGov Technologies
• Smart Card / E-Cert / E-Forms / Knowledge
  Management - Distance Learning / Voice and Speech
  Technologies / Wireless

7
Service Challenges Social Security
Administration

• Receive 240 million earnings items from 6.5
  million employers
• Send out 125 million Social Security statements
• Issue 16 million Social Security Cards
• Give benefits to 50 Million People
• Answer 60 million 800-number calls
• with a downsized workforce.

8
Government Online
Recruitment/Employment Section
Kids' Education Area
Government Forms Online
Government Records Online
File Taxes Online
Update Information Online
Online Bidding for Government Contracts
Online Application for Grants
Online Voter Registration
Online Voting
Source n81
9
Advantages of XML

• Data Reusability
• Single Source - Multiple output
• Transition of eForms to eTransactions
• Targeted Retrieval
• Flexibility
• Accessibility
• Portability

Federal XML Working Group www.XML.gov
10
Smart Card Policy Handbook
What is it A document which provides guidance
on how to develop smart card systems in the
Federal government. For more information www.sm
artcard.gov Bill Holcombe 202 208-7656
11
Smart Card Policy Handbook
12
Federal Government Took an Early Interest in
Smart Cards . .
From Presidents FY 98 Budget "The
Administration wants to adopt smart card
technology so that, ultimately, every Federal
employee will be able to use one card for a wide
range of purposes, including travel, small
purchases, and building access."
13
Infrastructure - The Hidden Back Office Stuff

• Policy
• Regs
• Operations
• Business Case
• Benefits
• Costs
• Risks
• Training and Help Desk Function
• Card Management and Policy Oversight Agents
• Life Cycle Card Management
• Staffing
• Platform
• Interoperability
• Impacts Implications

14
Forces Driving Us Toward Smart Cards?

• Legislative mandates, super-scarcity of Federal
  budgets, downsizing in industry
• Increased security concerns - Terrorism, Fraud
  Loss
• Infrastructure changeover required to electronic
  delivery with interoperability and authentication
  
• Smart cards focus these needs
• Smart card increases the need for coordination
  and partnerships among
• CFO / CIO Communities
• Federal agencies
• Domestic and international
• Government and industry
• Federal and State Governments

15
Readiness of Smart Card InfrastructureRests on
the tip of the iceberg
Smart Card
Culture / Business Case
Technology
Laws Rules
Infrastructure
16
Smart Card InfrastructureThe Tip of the Iceberg

• Smart card depends on infrastructure of
• Customer Service
• Deployment of Readers
• Host systems
• Connectivity (off-line and on-line)
• Digital Signature or Electronic Certification
• Links to legacy and new systems

17
Smart Card Infrastructure
Improved Interface BetweenPeople - Access Points
- Categories of Use
People
Access Points
Categories of Use
Computers Applications Databases Networks Microcom
puters Laptops Pockets PCs Kiosks Point of
Sale Cash Registers Transaction Phones Cellular
Phones
Electronic Commerce Electronic Money Payments Acce
ss/ID Taxes/Customs Immigration Retirement Welfare
Transportation Universities Defense Telephone-bas
ed Many Others
Smart Card
18
GPEA E-Gov Forms
Phase 1 Information Dissemination
(E-Government GPEA Initiative provides
information) Phase 2 Forms only (Initiative
provides forms only) Phase 3 End-to-End
Electronic Transactions (Initiative is
transaction based, e.g. IRS ePay of Taxes) Phase
4 Transforming Government (Initiative shifts
the focus and structure of government to provide
seamless service. Citizens do not need to know
the organization of government to obtain services)
19
Status of GPEA E-Gov Forms

58
35
4
4
41 of the initiatives in the inventory serve
citizens 23 serve governments (other federal
agencies, other levels of government) 26 serve
government employees 23 serve business
John Dyer Report
20
Smart Card Policy Handbook
What is it A document which provides guidance
on how to develop smart card systems in the
Federal government. For more information www.sm
artcard.gov Bill Holcombe 202 208-7656
21
Smart Card Policy Handbook
22
What Must Smart Cards Be for US Government

• Multi-Technology
• (such as magnetic stripe and barcode)
• Multi-Application
• Multi-Agency
• Electronic Signature
• Consolidates multiple cards

Bottom Line Interoperability
23
What is Interoperability?

• LONG TERM
• Any chip, any card, any token device, any reader,
  any host, any browser, any application
• NEAR TERM Steps along the way are
• Card actually works for electronic signature
• Card actually simplifies life for merchant or
  business user
• ID for one Federal Agency or Bureau can be read
  by another
• Card actually simplifies life for the end user
• can get her money back
• reduces the number of cards needed
  (Multi-applications)
• Average distance between user and reader lt 1/2
  block
• Comes standard on PCs

24
FirstGov.Gov

• Keyword Search
• Featured Subjects
• Interesting Topics
• U.S. Government
• State Local
• FirstGov Partners
• Your Feedback

25
Federal Smart Milestones - Historic
1972 - Smart card invented ??? 1985 - 1st Federal
Smart Card Department of Agriculture Peanut
SC 1987 - FMS Electronic Certification System
Smart Card 1987 - Federal Smart Card User
Group 1989 - Department of Agriculture Food Stamp
Smart Card Pilots PA 1990 - Smart Card
Applications and Technology (SCAT)
Conference 1991 - CardTech / SecurTech (CTST)
Conference 1993 - EBT Task Force recommends Smart
Cards for So Atlantic States 1993 - Smart Card
Forum (SCF) Founded 1994 - State of Ohio
Statewide Food Stamp Smart Card 1995 - Smart Pay
Smart Card - Travel - Purchase Cards 1996 -
Department of Treasury FMS pilots E-Cash -
E-Check - E-Payments 1996 - Health Passport
Smart Card WGA WY / ND / NV -- Navy 1997 -
Federal Smart Card Project Managers 2000 - House
passes EBT Interoperability Legislation
26
Progression of US Smart Card

• 1987 - FMS Electronic Cert SC Pilot
• 1989 - Ag Food Stamp SC Pilots
• 1991 - CardTech / SecurTech (CTST) Conf
• 1993 - EBT Task Force SC for So Atl States
• 1993 - Smart Card Forum (SCF) Founded
• 1994 - Ohio Statewide Food Stamp SC Ltd
  Rollout
• 1995 - Smart Pay Smart Card - Travel - Purchase
  Cards
• 1996 - Treasury FMS pilots E-Cash - E-Check -
  E-Payments Pilots
• 1996 - HPP Smart Card WGA WY / ND / NV --
  Navy Ltd Rollouts
• 1997 - Federal Smart Card Project Managers
• 1999 - GSA Willow Wood Pilot Big Pilot
• 2000 - House passes EBT Interoperability
  Legislation
• 2000 - GSA Government Access ID SC Acquisition
  
• 2000 - Defense Rollout Big Rollout
• 2002 - Defense Rollout others Big Rollout
• Federal and State Synchronization remains

27
Modern History of Government Smart Cards

• 93 DOD with industry input drafted SC
  interoperability spec
• 96 2 yr MARC multi-app pilot completed
• 7/96 OMB assigns govwide leadership on EC to
  GSA to work closely with DOD and Treasury
• 98 Smart Pay contract re-awarded allows smart
  card services
• 97 Presidents 98 budget sets goal of one card
  for Fed employees
• 6/97 GSA began process to establish interop
  guidelines

28
Government Policy Role in Smart Cardsa Short
History

• 9/97 Smart Card Implementation Plan Issued by
  EPIC
• 9/98 Final Interop guidelines published
• 7/99 Final requirements document for common
  access ID published
• 8/99 Common Access RFI released
• 9/99 ACES contract awarded for PKI, allows use
  of smart cards
• 10/99 GSA starts smart card business line
• 11/99 DOD DepSec mandates common access card
• Spring 2000
• Administrative Guidelines issued for agency use
• Common Access ID Contract awarded

29
Federal Smart Card Market Maturity

• Many indicator show market readiness
• Number of Chip Cards Increased
• Smart Card Membership Increased
• Price per Card Decreased
• Response Time Reduced
• Memory Capacity from 1 to 32 K
• Legislation encourages interoperability for EBT
• S-1733 and HR 2709
• Many of barriers for US implementation have been
  removed

30
Advantages Sought bySmart EGov Technologies

• We all know the management directive
  do-more-with-less
• Smart EGov Technologies fill this need
• Provides more services to larger population with
  less staff
• Fewer cards in your wallet
• More services on a single card (multi-application
  cards)
• Simpler way of coping with mobile, complex life
  style and work
• PKI encryption - security / privacy / reduced
  hacker, virus fraud loss
• Interactive eForms, eSign, Non-repudiation

31
What Part of IT do Smart Technologies Protect?

• Secures the last mile or last 50 feet from the
  device to authenticating the individual
• Once valid authentication is established,
  transaction encryption protects traffic to and
  from individual inside the system providing
• Privacy
• Authentication
• Integrity
• Non-repudiation
• Maybe the Smart Tech map we have been looking for
  is tying all this tech together for a more
  global, improved standard of living.

32
Review of Legislative Changes

• Debt Collection Improvement Act
• Public Law 104-134 enacted April 26, 1996
• Mandates all electronic payments
• Implementation July 26, 1996 / January 1, 1999
• Clinger-Cohen Law / Federal Acquisition Reform of
  1995
• Information technology Management Reform Act
  (ITMRA) 65 FCR 61
• Enacted February 10, 1996
• Government Performance Requirement Act
• Requires business plan return on investment for
  technology initiatives
• Telecommunications Reform
• Repeal of the Brooks Act
• New authority for OMB Agencies, reduced role
  for GSA
• OMB will direct the formation of Agency CIOs
• CIOs will have technological accountability for
  Agency

33
Some Key Federal eGov Sites

• GSAs Governmentwide Policy
• Federal EC/eGov site
• FirstGov Portal
• FedBizOpps Contract Opportunities
• Property Asset Sales
• Access AmericaStudents, Seniors
• Presidents E-Commerce WG
• FedCommons Grants
• Interagency Grants Cmte
• OMB Policy Grants, Information Procurement,
  Financial Management
• Fed Public Key Infrastructure
• Access Certificates for Electronic Services
  (ACES)
• Smartcard Security

• http//www.policyworks.gov
• http//ec.fed.gov/
• http//firstgov.gov
• http//www.fedbizopps.gov
• http//fedsales.gov/
• http//students.gov and http//seniors.gov
• http//www.ecommerce.gov
• http//www.cfda.gov/federalcommons/
• http//financenet.gov
• http//www.whitehouse.gov/OMB/
• http//gits-sec.treas.gov
• http//gsa.gov/ACES
• http//smart.gov

34
Smart EGov Technology Websites

• Access America for Seniors http//www.ssa.gov
• GSA Electronic Commerce http//www.ec.fed.gov
• GSA Smart Card http//www.smart.gov
• VA Healthy Vet http//www.health-evet.va.gov
• VA Card Site
  http//www.va.gov/card/
• VA PKI site http//www.va.gov/vapki.htm
• WGA Western Governors Association
  http//www.westgov.org
• WGA Health Passport http//www.westgov.org/wga/in
  itiatives/hpp/default.htm
• Electronic Benefits Transfer http//ec.fed.gov/ebt
  .htm
• Nat'l Auto'd Clearing House Association http//www
  .nacha.org/ebt
• NACHA EBT Natl Clearing Houses http//www.nacha.or
  g/ebt
• Navy Smart Base Project http//www.n4.hq.navy.mil
  /smartbase/default2.htm
• GSA Office of Governmentwide Policy http//policyw
  orks.gov/
• GSA Office of Intergovernmental http//policyworks
  .gov/org/main/mg/intergov/
• CardTech / SecurTech http//www.ctst.com/
• Smart Card Forum http//www.smartcrd.com/
• Smart Card Industry Association
  http//www.scia.org
• Financial Services Technology Consortium http//ww
  w.fstc.org/
• Electronic Funds Transfer Association
  http//www.efta.org/