DTIC ADA525329: DNA as Part of Identity Management for the Department of Defense

0.19 MB·English

by  Defense Technical Information Center

THE ARTS This PDF document was made available from www.rand.org as a public
CHILD POLICY service of the RAND Corporation.
CIVIL JUSTICE
EDUCATION
Jump down to document6
ENERGY AND ENVIRONMENT
HEALTH AND HEALTH CARE
INTERNATIONAL AFFAIRS
The RAND Corporation is a nonprofit institution that
NATIONAL SECURITY
helps improve policy and decisionmaking through
POPULATION AND AGING
PUBLIC SAFETY research and analysis.
SCIENCE AND TECHNOLOGY
SUBSTANCE ABUSE
TERRORISM AND
HOMELAND SECURITY
TRANSPORTATION AND
INFRASTRUCTURE Support RAND
WORKFORCE AND WORKPLACE
Browse Books & Publications
Make a charitable contribution
For More Information
Visit RAND at www.rand.org
Explore the RAND National Defense Research Institute
View document details
Limited Electronic Distribution Rights
This document and trademark(s) contained herein are protected by law as indicated in a notice appearing later in
this work. This electronic representation of RAND intellectual property is provided for non-commercial use only.
Unauthorized posting of RAND PDFs to a non-RAND Web site is prohibited. RAND PDFs are protected under
copyright law. Permission is required from RAND to reproduce, or reuse in another form, any of our research
documents for commercial use. For information on reprint and linking permissions, please see RAND Permissions.
Report Documentation Page Form Approved
OMB No. 0704-0188
Public reporting burden for the collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, gathering and
maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information,
including suggestions for reducing this burden, to Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington
VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to a penalty for failing to comply with a collection of information if it

does not display a currently valid OMB control number.
1. REPORT DATE 3. DATES COVERED
2010 2. REPORT TYPE 00-00-2010 to 00-00-2010
4. TITLE AND SUBTITLE 5a. CONTRACT NUMBER
DNA as Part of Identity Management for the Department of Defense
5b. GRANT NUMBER
5c. PROGRAM ELEMENT NUMBER
6. AUTHOR(S) 5d. PROJECT NUMBER
5e. TASK NUMBER
5f. WORK UNIT NUMBER
7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES) 8. PERFORMING ORGANIZATION
Rand Corporation,1776 Main Street,PO Box 2138,Santa REPORT NUMBER
Monica,CA,90407-2138
9. SPONSORING/MONITORING AGENCY NAME(S) AND ADDRESS(ES) 10. SPONSOR/MONITOR’S ACRONYM(S)
11. SPONSOR/MONITOR’S REPORT
NUMBER(S)
12. DISTRIBUTION/AVAILABILITY STATEMENT
Approved for public release; distribution unlimited
13. SUPPLEMENTARY NOTES
14. ABSTRACT

15. SUBJECT TERMS
16. SECURITY CLASSIFICATION OF: 17. LIMITATION OF 18. NUMBER 19a. NAME OF
ABSTRACT OF PAGES RESPONSIBLE PERSON
a. REPORT b. ABSTRACT c. THIS PAGE Same as 30
unclassified unclassified unclassified Report (SAR)
Standard Form 298 (Rev. 8-98)
Prescribed by ANSI Std Z39-18
This product is part of the RAND Corporation occasional paper series. RAND
occasional papers may include an informed perspective on a timely policy issue, a
discussion of new research methodologies, essays, a paper presented at a conference, a
conference summary, or a summary of work in progress. All RAND occasional papers
undergo rigorous peer review to ensure that they meet high standards for research
quality and objectivity.
DNA as Part of Identity
Management for the
Department of Defense
Douglas Shontz
NATIONAL DEFENSE RESEARCH INSTITUTE
This paper results from the RAND Corporation’s continuing program of self-initiated
research. Support for such research is provided, in part, by donors and by the independent
research and development provisions of RAND’s contracts for the operation of its U.S.
Department of Defense federally funded research and development centers.
The RAND Corporation is a nonprofit research organization providing objective analysis
and effective solutions that address the challenges facing the public and private sectors
around the world. RAND’s publications do not necessarily reflect the opinions of its
research clients and sponsors.
R
® is a registered trademark.
© Copyright 2010 RAND Corporation
Permission is given to duplicate this document for personal use only, as long as it
is unaltered and complete. Copies may not be duplicated for commercial purposes.
Unauthorized posting of RAND documents to a non-RAND website is prohibited. RAND
documents are protected under copyright law. For information on reprint and linking
permissions, please visit the RAND permissions page (http://www.rand.org/publications/
permissions.html).
Published 2010 by the RAND Corporation
1776 Main Street, P.O. Box 2138, Santa Monica, CA 90407-2138
1200 South Hayes Street, Arlington, VA 22202-5050
4570 Fifth Avenue, Suite 600, Pittsburgh, PA 15213-2665
RAND URL: http://www.rand.org
To order RAND documents or to obtain additional information, contact
Distribution Services: Telephone: [phone]
Fax: [phone]; Email: [email protected]
Preface
DNA has characteristics that some believe make it a good candidate as a biometric for either
identification of individuals or verification of their identities. This paper examines this issue
from several perspectives, including the technical requirements for and the policy and legal
ramifications of using DNA as a biometric. This study is not exhaustive but rather is an explor-
atory effort designed to highlight the significant issues and potential useful applications of
DNA as a biometric to assist the Department of Defense in making an informed decision
about how and whether to pursue this application.
This paper results from the RAND Corporation’s continuing program of self-initiated
research. Support for such research is provided, in part, by donors and by the independent
research and development provisions of RAND’s contracts for the operation of its U.S. Depart-
ment of Defense federally funded research and development centers.
This research was conducted within the Intelligence Policy Center of the RAND National
Defense Research Institute, a federally funded research and development center sponsored by
the Office of the Secretary of Defense, the Joint Staff, the Unified Combatant Commands,
the Navy, the Marine Corps, the defense agencies, and the defense Intelligence Community.
For more information on RAND’s Intelligence Policy Center, contact the Director, John
Parachini. He can be reached by email at [email protected], by phone at 703-413-1100, exten-
sion 5579; or by mail at the RAND Corporation, 1200 South Hayes Street, Arlington, VA
22202-5050. More information about RAND is available at www.rand.org.
iii

Contents
Preface ........................................................................................................... iii
Summary ........................................................................................................vii
Acknowledgements ............................................................................................ ix
Abbreviations ................................................................................................... xi
DNA as Part of Identity Management for the Department of Defense ............................... 1
Introduction ...................................................................................................... 1
Definition of Biometrics ......................................................................................... 2
Verification Versus Identification ............................................................................... 3
DNA Technology Summary .................................................................................... 3
Issues with and Potential Applications of DNA as a Biometric ............................................ 6
Legal and Policy Issues of Overseas DNA Collection for Identification ................................ 6
Technical Issues of Overseas DNA Collection for Identification ........................................ 8
Potential Applications for DNA Collection for Identification ............................................ 9
Legal and Policy Issues of Domestic DNA Collection for Verification ................................10
Technical Issues of Domestic DNA Collection for Verification .........................................11
Issues Beyond Privacy ........................................................................................12
Conclusions ......................................................................................................13
References .......................................................................................................15
v

Summary
The Department of Defense (DoD) must keep track of a large and ever-growing number
of people, both known and unknown, as it executes its mission. The field associated with
this responsibility is called identity management. One tool for identity management is bio-
metrics, and, increasingly, some view DNA as a strong candidate for the expansion in biomet-
rics because of its unique and unalterable character. However, serious questions remain about
whether DNA is a viable biometric option, and it presents especially challenging questions.
This exploratory study is intended to illuminate significant issues and potential applica-
tions to assist DoD in making informed decisions about research in identity management.
This paper assesses some of the issues presented by DNA data collection, storage, and use, and
discusses the potential applications and implications.
This analysis led to the following key findings:
• Investment in DNA for some identification applications appears worthwhile.
• Investment in DNA for verification does not appear worthwhile.
• No studies demonstrating the value of DNA as a biometric appear to exist.
• Risk management needs can likely be satisfied with less intrusive measures than DNA.
• Collection of DNA and storage of DNA information within DoD requires a systematic
approach that includes identifying priorities and risks.
• Little or no reliable cost data exist.
DoD should therefore begin a systematic effort to evaluate the viability of DNA in iden-
tity management. The DoD needs to systematically
• evaluate and state its priorities for identity management
• evaluate and state the risks identity management is intended to address
• explain how using biometrics reduces those risks
• identify risks or priorities that can only be addressed by DNA
• analyze the costs and benefits of expanding the use of DNA in identity management
• develop policies regarding collection, analysis, use, and storage of DNA information.
At this time, DNA as a biometric appears a worthwhile investment for narrow, targeted
applications. Less complicated and more robust technologies, such as fingerprint and iris scans,
should be favored for broad-based biometric applications.
vii