Vendors question TSA's TWIC selections

Vendors competing for the Transportation Security Administration's worker identification program allege that the agency is favoring an inadequate solution.

The vendors contend that the company that reviewed the potential technologies for the Transportation Worker Identification Card (TWIC) program did not conduct an objective review. The issue, however, has raised larger questions about how agencies assess technology.

The TWIC project is intended to provide a standard credential to allow all airport, energy pipeline, rail station and seaport employees to access secure facilities.

TSA officials hired Maximus Inc., a smart card technology integration company, late last year to conduct an evaluation to assess the best possible technology for the TWIC program.

TSA tested other card options, including linear bar codes, digital photography, magnetic strips, optical memory stripes and 2-D bar codes. Results from the review determined that smart cards with integrated circuit chips (ICC) were the best option for the TWIC program.

Since that decision, however, a fracas has erupted about whether TSA officials adequately reviewed all available options. Those on each side of the debate vigorously defended their technologies. Each vendor claims that cost, security, capacity and potential uses work to their technology's

favor.

Randy Vanderhoof, executive director of the Smart Card Alliance, said vendor complaints represent the disappointment of company officials. "ICC is definitely the standard for secure identity credentials," he said.

TSA's evaluation confirmed what the agency and card suppliers already knew: "The ICC technology was going to come out ahead," Vanderhoof said.

ICC can have multiple technologies such as bar codes or embedded magnetic stripes such as radio frequency identification devices. "Those are either hybrid cards or multitech cards," he said.

Optical stripe technology would surpass ICC if the program called for massive amounts of data storage, such as medical records, Vanderhoof said. But TWIC does not demand that.

Others, including Douglas Morris, vice president of Federal Systems for Laser Data Command Inc. (LDC), assailed TSA's

selection.

"The determination of appropriateness [of ICC] is relative," Morris said. "Appropriate to whom? The taxpayer? No. The TWIC user? No. [The Homeland Security Department] and TSA? No. The providers and integrators of expensive, proprietary, foreign-owned, stovepipe, smart card technologies?"

LDC protested the award initially but

relented after meeting with the agency's

inspector general.

Morris is not alone in questioning the integrity of the review.

Consultant Keith Edwards said ICC "is being ramrodded through the acceptance system without having to face the real competition that should have occurred."

"I have no stake in this," said Edwards, who has worked on hybrid cards of ICC and optical stripe.

He pointed to an evaluation conducted in March by Joseph Anlage of American Laser Drives Corporation. Anlage criticized the selection of ICC, but he defended the motives of Maximus.

"I believe it would be impossible to do this without an incestuous relationship somewhere," Edwards said. "I don't think Maximus did anything nefarious."

But vendors of bar code and optical cards have been concerned about the selection of the ICC technology, he said.

Anlage concluded that the Maximus methodology is flawed in three ways.

First, according to Anlage, the Maximus review used "an extremely restrictive definition" of commercial technologies. By its definition, the review restricted consideration to technology from the 1990s. Second, he said, testing conditions were tailored to ICC card technologies. TSA officials measured other card technologies by their ability to emulate the ICC standard, not by their suitability for TWIC. Finally, Anlage charged that the Maximus review did not examine critical card technology capabilities.

"Although TSA's Maximus contract referenced the review of other technologies, no [2-D] bar code technologies were actually evaluated or tested in an operational environment," Morris said.

The discord surrounding TWIC illustrates the challenge government agencies face in assessing the myriad technologies on the market and weighing the pros and cons of each one.

However, according to Rachael Rowland, Maximus' vice president of public relations, "Customers have come to Maximus for years for an unbiased evaluation. The evaluation we did for TSA made no presumption about any of the technologies being tested."

The company used an industry-standard methodology, she said.

"Unfortunately, there are others that would suggest there was a flaw in the methodology," she said. "As you can expect when any technology is compared against others,...there will be those that don't fare so well. We stand behind the results that we delivered to TSA."

TSA officials were not available for comment.

At the American Association of Airport Executives conference in December 2003, TSA and Maximus representatives agreed that they would continue to consider 2-D bar code technologies for TWIC. LDC and other 2-D bar code vendors are continuing to work with TSA and DHS to support contractors, Morris said. They are working to finalize the development of the lowest-cost credentialing mediums for TWIC, Registered Traveler and other DHS credentialing and access-control programs.

"There seems to be a romance with the chip cards, and they can do a lot of good things," Anlage said. "But for secure identification and biometrics, the optical card is a much better platform, and it doesn't cost nearly as much."

The heated debate about card technology misses the more crucial aspect of credentialing. The real challenge is how to make sure the people providing biometric information are who they claim to be, said Michael Mestrovich, president of Unlimited New Dimensions LLC.

"The process one uses to authenticate identity, prior to the issuance of a card to that individual, is where the emphasis should be," he said. "To me, that's where the issue lies, not on the technology of the card itself." He said he found nothing lacking in smart card technology.

Mestrovich is involved in projects for both the Defense Department and TSA.

NEXT STORY: E-voting probe wanted

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.