SIA Releases Offers Recommendation For Use Of Biometrics In E-Verify Program

The Security Industry Association recently released recommendations for use of biometrics with the federal government’s E-Verify employment verification program.

Security Industry Association members believe implementation of a biometric component to the E-Verify program should reflect the following principles to protect individual privacy and prevent identity theft:

1. Use biometrics to bind an individual to a credential associated with an identity based on presented biometric data and identity documents, which will be associated with a vetted Social Security Number. This will authenticate E-Verify transactions and create trusted audit trails respecting access to privacy data.

  • Provides high assurance that the individual subsequently authenticating is the same person who enrolled.
  • Provides non-repudiation of E-Verify transaction records, including who accessed specific data by date and time.

2. Use biometric authentication of the applicant, post-enrollment, with each subsequent verification of application for employment.

  • Ensures job applicant is associated with only one Social Security number.
  • Confirms individual presenting a Social Security number for employment or identification is the same person who originally enrolled with the Social Security number.
  • Alerts if the live biometrics submitted don’t match the templates stored on the smart card carrier. This can trigger additional adjudication procedures to investigate why two different individuals are associated with a single Social Security number or other I9 identity documents.
  • Deters identity theft for citizens while providing legal aliens with a means to validate their work status.

3. Avoid unnecessary distribution of biometric data by encoding biometric data to a smart card for possession by the person associated with the data. A terminal that performs a 1-to-1 match of a person’s live sample to the smart card data will be used for real-time authentication.

  • Allows the applicant to authorize how the biometric data is used.
  • Prevents unauthorized access to an applicant’s biometric data.
  • Provides a mechanism for the person to possess their biometric data and limit alternative instances to the enrollment database.
  • Protects citizen against identity theft.

4. Allow solutions including a 1-to-1 match with the smart card as a ‘personal vault,’ where an encrypted fingerprint or template is securely stored.

  • Locks sensitive data stored on the card (example: Social Security number) against access so it is not retrievable except after successful match to the card-holder.
  • Removes the need for biometric data ever to be extracted from the card, thereby allowing the smart card to lock it away from any fraudulent retrieval or copy. This will also ensure that the biometric data cannot be used for forensic investigation purposes.

5. E-Verify-sanctioned functions must include controlled distribution of biometric terminals to enable reporting of lost or stolen cards at easily accessible locations (such as the local U.S. Post Office).

  • Provides a value-add function to the card making it more useful and attractive to card holders.
  • Delivers assurances that the E-Verify data is not used for criminal investigation purposes.

6. Biometric data collected at initial enrollment must be stored in an encrypted database. Strong consideration should be given to establishing separate databases that secure the biometric from other personally identifiable information.

7. Utilize the experience and application expertise of industry and, in particular, the Security Industry Association to guide the implementation of biometrics in E-Verify applications.

Featured

  • 12 Commercial Crime Sites to Do Your Research

    12 Commercial Crime Sites to Do Your Research

    Understanding crime statistics in your industry and area is crucial for making important decisions about your security budget. With so much information out there, how can you know which statistics to trust? Read Now

  • Boosting Safety and Efficiency

    Boosting Safety and Efficiency

    In alignment with the state of Mississippi’s mission of “Empowering Mississippi citizens to stay connected and engaged with their government,” Salient's CompleteView VMS is being installed throughout more than 150 state boards, commissions and agencies in order to ensure safety for thousands of constituents who access state services daily. Read Now

  • Live From GSX: Post-Show Review

    Live From GSX: Post-Show Review

    This year’s Live From GSX program was a rousing success! Again, we’d like to thank our partners, and IPVideo, for working with us and letting us broadcast their solutions to the industry. You can follow our Live From GSX 2023 page to keep up with post-show developments and announcements. And if you’re interested in working with us in 2024, please don’t hesitate to ask about our Live From programs for ISC West in March or next year’s GSX. Read Now

    • Industry Events
    • GSX
  • People Say the Funniest Things

    People Say the Funniest Things

    By all accounts, GSX version 2023 was completely successful. Apparently, there were plenty of mix-ups with the airlines and getting aircraft from the East Coast into Big D. I am all ears when I am in a gathering of people. You never know when a nugget of information might flip out. Read Now

    • Industry Events
    • GSX

Featured Cybersecurity

Webinars

New Products

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3