Biometric-based security integration for cloud computing in homeland security and defense

Cloud Computing

Emerging Trends for Cloud Computing facilitated by Advanced Biometric Technologies for Enhanced Security

Author (I will fill this part )

Affiliation (I will fill this part )

An organizations' greatest asset is its information and knowledge. The integration and refinement of biometrics technologies into the process workflows of homeland security and defence agencies globally is the objective of this analysis.

Inherent in the development of a biometrics-based access strategy for cloud-based resources is the need for compliance to global standards and U.S. Federal mandates as well. The influence of the Federal Information Processing Standard (FIPS) 199 for information management [7], the Federal Information Processing Systems standard (FIPS200) [7], in addition to the Federal Rules of Evidence and CFR Part 1250 compliance are included in this analysis.

Using cloud computing platforms to more effectively and economically manage and distribute information, government agencies concentrating on homeland security and defence can attain greater agility and effectiveness by using biometrics as their primary technology for authenticating users and safeguarding information assets. Strategies that require intensive collaboration are predicated on having each role within homeland security and defence agency integrate yet secure from the standpoint of access and authentication with biometric-based access technologies and processes.

Ultimately, the objective is to create a role-based cloud architecture that can scale and be agile enough to give homeland security and defence agencies the ability to anticipate and respond to threats while protecting the core information assets effectively through biometric-based technologies and processes.

1. Introduction

Cloud computing and its underlying technologies are redefining the economics, strategies and processes by which organizations use their most critical asset, information. Protecting these critical information assets in homeland security and defence ministries requires exact verification of the identity and role of those using the databases, files, systems and global networks. Authentication based purely on keystrokes or passwords has been shown to be less secure in pervasive cloud-based applications vs. biometrics and more advanced forms of security based on identifying a person through biological and physiological attributes [3]. Engraining biometrics into cloud-based platforms and applications for department of homeland security and defence agencies requires intensive levels of process integration and system development. This analysis presents the overview of cloud computing from the context of the integration points to make biometrics-based security possible.

This analysis focuses on evaluating the benefits, risks, and assessing the strengths, weaknesses, opportunities and threats of using biometric technologies in conjunction with cloud computing platforms in the fields of Homeland Security and Defense industries. More specifically, looking at how to integrate biometrics-based technologies into homeland security and defence industry workflows to ensure greater levels of authentication, identity verification and role-based access across all information assets is the goal of this analysis. In order to accomplish this, comparisons of biometric technologies that are in pilot status or in active use today by governments globally are first discussed in this analysis.

In order to integrate biometrics effectively into these workflows the global and U.S.-specific standards must first be assessed. The rapid pace of technological change is matched by the proliferation of standards globally in biometrics, both from compliance and from security standpoint [3] has led to biometrics being integrated at the application level of databases, security applications and systems. These standards include those from the global computing standards organizations including the World Wide Web Consortium (W3C), the International Electrical Engineering Society (IEEE) and International Standards organization (ISO) 27001 [7]. The latter standard is the most all-encompassing and concentrates on an enterprise-wide control of security strategies. What is significant about these standards is that they have led to the development of an entirely new set of Application Program Interfaces (APIs) for biometrics processes and systems. These APIs are forcing the development of more streamlined, integrated, and Web-based applications that are Web Services-based [10]. The intent of these APIs is to create enough agility for application, database and platform providers to traverse the cloud computing protocol stack or architectural platform as illustrated in Figure 1. Please see Figure 1, Traversing Cloud Computing Architectures using Biometrics APIs for a graphical representation of the cloud computing protocol stack. The speed and accuracy of information workflows that traverse this stack have direct implications on the performance of cloud-based applications globally, across shared databases and security platforms by departments of homeland security and departments or ministries of defence. The greater the level of integration across these systems, the greater the level of security and role-based authentication that can occur over time which makes the development of APIs critically important for biometrics adoption globally.

Specifically the APIs that define how to traverse a cloud-based protocol stack using a J2EE-enabled gateway. This API translates J2EE and AJAX commands into packets for transmission over TCP/IP-based networks. Encrypting these packets for data security is crucial to overall network reliability and security. In addition to these factors, the use of the Java Authentication and Authorization Services (JAAS) protocol to integrate with legacy data via a gateway is used. Arguably APIs are programming constructs, yet their ability to integrate legacy data do make them use cases in complex integration.

These APIs could be harnessed by the application, database and platform providers to traverse the cloud computing protocol stack or architectural platform as illustrated in Figure 1. The speed and accuracy of information workflows that traverse this stack have direct implications on the performance of cloud-based applications globally, across shared databases and security platforms by departments of homeland security and departments or ministries of defence. The greater the level of integration across these systems, the greater the level of security and role-based authentication that can occur over time which makes such development critically important for biometrics adoption globally.

In addition to these industry standards, there are other standards on the use cases of biometrics-based security technologies and their applicability to security strategies and roles [3].

These standards, while U.S.-based, are indicative of the depth of compliance occurring in the use of biometrics and security technology for cloud computing. In conjunction with the APIs and their role in defining platform and protocol stack integration, they have also successfully been used to significantly reduce the training time of new employees developing such security solutions [4]. These standards are also acting as a catalyst for greater inter-process and inter-system integration across the many applications, systems and varying legacy security platforms that departments of homeland security and defence ministries rely on [9].

The APIs specifically dedicated to cross-platform integration through the use of a J2EE-based gateway as defined to traverse the cloud computing architecture rely on a reduced instruction set of routines that are specifically designed to allow for more efficient processing. The reliance on J2EE-based programming standard specifically has been adhered to for their development [6]. The API set has also specifically been designed to allow for auditability and compliance to the following standards for biometrics security and encryption: the Federal Information Processing Standard (FIPS) 199 for information management [7], the Federal Information Processing Systems standard (FIPS200) [7], Federal Rules of Evidence and CFR Part 1250 compliance [7] [3].

The Federal Information Processing Systems standard (FIPS200) ) [7] specifically covers the areas of access control, audit and accountability, awareness and training, certification, accreditation, and security assessments, Configuration management, Contingency planning, identification and authentication, and incident response. In addition, this standard also specifically defines aspects of maintenance, media protection, personnel security, physical and environmental protection and planning risk assessment. The two remaining areas of systems and services acquisition System and communications protection are also defined as part of the standard. Taken together these areas form a strategic security plan for defence and homeland security departments.

3.1 Biometric Characteristics

Superior to authentication through credentials or licenses, biometric-based authentication share a common trait of being able to identify a person by their behavioural and physiological attributes [10]. Biometric technologies can thus be used to define group-based permissions based on roles that are cross-referenced by physiological attributes [6]. This leads to availability of security protocols for homeland security and defence organizations, where entire groups can be defined for access to specific areas, for example in a branch of the military needing access to a supply chain centre [10]. All biometric technologies share the attributes of universality, uniqueness, permanence, and collectability [1]. All four of these criteria must be met for a biometrics system to be effectively used for monitoring, granting or refusing access to assets, both information and location-based [2]. From a SaaS standpoint, the integration of various biometrics technologies must be in compliance to industry and government requirements [7] if the databases accessed at the IaaS layer of the cloud computing infrastructure model are to remain secure. The most challenging aspect of biometric implementation through SaaS however is securing the queries to the authentication, biometrics, and identity management databases integrated at the IaaS layer of the cloud infrastructure [5]. Please see Table 4.1, Comparing Biometric Technologies. There is a correlation between cost and susceptibility, as the higher the cost to implement the less the susceptibility of the technology to circumvention [10]. To compensate for this fact, system use requirements are critical for the secure use of biometrics in homeland security and defence applications. The next section discusses these system use requirements.

3.2 System Use Requirements for Role-based Biometrics

Simply put role-based biometrics are the collection of strategies and initiatives for getting the best possible information and systems to those in need of it, by role and responsibility level throughout defence and homeland security agencies. Role-based biometrics break down tasks into processes so that information can be delivered to the right person and the right time to make the best possible decision.

Search criteria that can be stored and used as the basis of linguistic modelling and latent semantic indexing (LSI) of content to increase search performance. The use of biometrics APIs for search has been piloted [9] and continues to be developed that includes LSI-based technologies. The secured search platform requirements are defined to streamline access to the Cloud Computing Infrastructure without compromising all system integration points and connections.

Authentication through multiple biometric-based APIs for biometric technologies and secured integration points at the IaaS level [10].

Support for search and user taxonomy and ontological development to increase system performance, augment learning of homeland security, and defence requirements over time [1].

Creation of role-based logins and support for analytics to evaluate overall system and search match performance over time are essential components in the overall development of these biometrics-based systems using the common set of APIs [9].

Creation of secured search engine functionality that is both textual and graphical in nature through secured biometrics API connections [5].

4. Tables

4.1 Comparison of Biometric Technologies

The following table analyses biometric technologies and evaluates them on a series of criteria including accuracy, ease of use, and susceptibility.

Table 4.1: Comparing Biometric Technologies

Sources: based on analysis of the following [1] [2] [5]

Conclusion

The emergence of cloud computing platforms and infrastructures has significant implications for security for both defence and homeland security departments and ministries globally. Standards and APIs that have been mentioned in this analysis are applicable across all departments and nations implementing biometrics through the use of the cloud platform. The development of and continual refinement to biometrics-based software applications is also changing how defence and homeland security departments manage their organizations. Role-based access to biometrics-based data changes the overall efficiency and focus of defence and homeland security departments, as it provides the right information at the right time to the groups and individuals who need to use it the most to accomplish their objectives.