Feds Start Small on Smart IDs

Agencies race to meet rollout deadline

Several federal agencies said last week that they’re ready to start distributing smart ID cards to workers by Friday, as mandated by a directive issued in 2004 by President Bush. But some of the initial rollouts will be very small and will focus solely on controlling access to buildings — not IT systems.

For instance, the Social Security Administration became at least technically compliant with the directive last week when it issued one of the new ID cards to Commissioner Jo Anne Barnhart. SSA spokeswoman Kia Green said the agency expects to hand out more cards in the coming weeks but is “still in the proc¿ess of finalizing the details.” She added that the SSA hopes to issue cards to all of its employees and contractors by the end of September 2008, which is the deadline for doing so.

Another agency that said it will meet this week’s deadline in a small way is the Environmental Protection Agency. The EPA plans to issue the so-called personal identity verification, or PIV, cards to “a small handful” of employees, said spokesman Dale Kemery. But he added that because of budgetary and technical considerations, making the ID cards available throughout the 18,000-worker agency will be “a fairly long rollout.” He declined to provide more details.

Matt Neuman, director of business development at Jacob & Sundstrom Inc., a Baltimore-based systems integrator that is helping the SSA with its smart-card implementation, said that many agencies appear to be ready to meet “the letter of the law, if not the spirit of the law” on issuing the PIV cards. “But it at least shows that everybody is focused on it,” he said.

The use of PIV cards for verifying the identities of all federal workers and contractors was mandated by Homeland Security Presidential Directive 12. The unfunded HSPD-12 mandate specified that agencies must adopt a common identification credential for access to government facilities and computer systems.

Friday’s deadline and an earlier one calling on agencies to develop procedures for verifying the identities and backgrounds of all workers by last October were both considered exceptionally aggressive because of funding issues and the technology and process changes required.

Robert Langston, director of the office of security and emergency planning at the Department of Housing and Urban Development, said last week that HUD hopes to begin producing fully functional PIV cards by Wednesday “and then continue to do so for all new employees and contractors from that point forward.”

Initially, the cards will be issued to HUD’s headquarters staffers via recently procured identity management and card management systems, Langston said. He added that “a small number” of HUD field staffers who work in Washington, New York, Atlanta and Seattle will be sent to shared HSPD-12 enrollment centers that have been set up in those cities by the U.S. General Services Administration.

The enrollment centers include systems that can be used to verify the identities of employees, fingerprint and photograph the workers, and issue PIV cards to them. Eventually, as many of HUD’s 81 field offices as possible will take advantage of the centers as more are deployed across the country, Langston said.

The strategy should help HUD save “a lot of money” on its PIV enrollment and card-distribution costs, according to Langston. Instead of having to set up its own enrollment facilities, he said, “we just pay a fee for service.”

HSPD-12

Major milestones on Homeland Security Presidential Directive 12

AUG. 27, 2004:  President Bush skins a directive mandating a standard approach to authenticating federal employees and contractors.

JUNE 27, 2005: Federal agencies must submit HSPD-12 compliance plans to the White House Office of Management and Budget

OCT. 27, 2005:  Agencies are required to implement new processes for verifying the identities of workers and checking their backgrounds.

OCT. 27, 2996:  All agencies must start issuing personal identity verification, or PIV, cards to control access to buildings and IT systems

Larry Orluskie, a spokesman for the Department of Homeland Security, said the DHS this week will start rolling out PIV cards to about 5,500 employees in the Washington area. The agency’s goal is to make the cards available to all of its employees and contractors within a year, he said.

The DHS is using ID One Cosmo smart cards made by Nanterre, France-based Oberthur Card Systems SA. Like all PIV cards, Oberthur’s feature both a contact interface, such as a magnetic stripe, and a contactless radio frequency interface to make it easier to integrate the cards with both building access and IT security systems. At the DHS, though, the cards initially will be used only for physical access, Orluskie said.

Likewise, the SSA at first will use PIV cards only to control access to buildings and other facilities before eventually linking them to its computer systems, said agency spokesman Green.

ActivIdentity Inc. in Fremont, Calif., is supplying smart-card technologies to several government agencies. Robert Brandewie, the company’s senior vice president of public-sector solutions, said meeting the HSPD-12 card-distribution deadline even in a small way “is a tremendous accomplishment,” given the amount of work that was needed and the relatively short amount of time that was available to agencies.

“There has been a tremendous amount of behind-the-scenes effort to get the infrastructure ready and to get the technology in place to meet the deadline,” Brandewie said.

Copyright © 2006 IDG Communications, Inc.

7 inconvenient truths about the hybrid work trend
Shop Tech Products at Amazon