Home' RTCA Documents for Review : DO-230H FRAC Contents 44
©2017 RTCA, Inc.
that have implemented such products to obtain “real world” user experience. If a
manufacturer’s product is relatively new in the market, it is generally a good idea to negotiate
an extended warranty to ensure that product replacement cost will not adversely impact
operations and maintenance budgets with unforeseen expense.
Affordability - The total cost of ownership for a biometric sub-system includes the acquisition
cost of the biometric device, installation and construction costs (e.g., running conduit to a
remote access portal), storage and management of biometric data, and the cost of operation
and maintenance of biometric sub-system components. Another way to consider these costs is
to look at the incremental cost of biometrics by comparing the overall system cost with and
without biometrics. These costs need to be considered in the context of the application
objectives. Product prices will vary widely between vendors and the airport operator will need
to carefully assess the benefits and desirability of product features and capabilities to make
sure that they are justified for the intended application.
Acceptability - It is important that the user population willingly accept an organization’s
requirement that they interact with a new biometric sub-system. There are common concerns
that users might have relating to biometrics. Concerns such as health/safety and privacy are
often based on myths and misconceptions about the technology or a lack of information about
how biometric data will be collected and used by the airport operator. It is essential that the
airport operator communicates with the user population early in the implementation process to
provide education, training and factual information that addresses any concerns regarding the
use of biometrics. Some organizations have developed a simple list of answers to frequently
asked questions that helps to address any concerns that users might have.
Permanence - The biometric trait of an individual should be sufficiently invariant over a period of
time with respect to the matching algorithm. A trait that changes significantly over time may require
frequent updates to the reference data.
In summary, selecting the appropriate biometric technology depends on a number of application-specific
factors, including the environment in which the identification or verification process is carried out, the user
profile, requirements for matching accuracy and throughput, overall system cost and capabilities, and
cultural issues that could affect user acceptance.
Legislative and Regulatory Requirements
Collection and use of personally identifiable information (PII), including biometric data, may require
special precautions to meet regulatory compliance for privacy at a federal, local or state level. Although
there currently are no comprehensive Federal privacy laws that specifically address biometric data, the U.S.
government Office of Management and Budget (OMB) and Department of Homeland Security (DHS)
classify biometric identifiers as sensitive personally identifiable information (PII). Any implemented
system that falls under OMB or DHS authority may have specific procedural guidance in place to protect
PII. While most state legislation addressing biometric data privacy is fairly narrow in scope, individual
airport operators need to research their own state and local laws and ordinances that might pertain to the
collection, storage and use of biometric data.
There are at least three states that have legislation that specifically requires the protection of biometric
data including Illinois, Indiana and Texas. Storing biometric templates on a user-held card eliminates the
dependency on a network connection for biometric matching. Single or multiple biometric templates can
be held in a card, contingent on card memory constraints. Section 3.6 of this document provides significant
detail on security and integrity of personally identifiable information data (including biometric data)
stored on credentials or within a dedicated biometric system.
Links Archive Navigation Previous Page Next Page