Draft NIST IR 8334 1 Using Mobile Device Biometrics for 2 Authenticati ng First Responders 3 4 William Fisher 5 Don Faatz 6 Mark Russell* 7 Chris topher Brown 8 Sanjeev Sharma 9 Sudhi Umarji 10 Karen Scarfone 11 12 * Former employee; all work for this 13 publication was done while at employer. 14 15 16 17 18 This publication is available free of charge from: 19 https://doi.org/10.6028/ NIST.IR.8334 -draft 20 21 22 23 Draft NISTIR 8334 24 Using Mobile Device Biometrics for 25 Authenticating First Responders 26 27 William Fisher 28 Applied Cybersecurity Division 29 Information Technology Laboratory 30 31 Don Faatz 32 Mark Russell* 33 Christopher Brown 34 Sanjeev Sharma 35 Sudhi Umarji 36 The MITRE Corporation 37 McLean, VA 38 39 Karen Scarfone 40 Scarfone Cybersecurity 41 Clifton, VA 42 43 * Former employee; all work for this 44 publication was done while at employer. 45 46 This publication is available free of charge from: 47 https://doi.org/10.6028/ NIST.IR.8334 -draft 48 49 June 2021 50 51 52 53 U.S. Department of Commerce 54 Gina M. Raimondo, Secretary 55 56 National Institute of Standards and Technology 57 James K. Olthoff, Performing the Non- Exclusive Functions and Duties of the Under Secretary of Commerce 58 for Standards and Technology & Director, National Institute of Standards and Technology 59 National Institute of Standards and Technology Interagency or Internal Report 8334 60 34 pages ( June 2021) 61 This publication is available free of charge from: 62 https://doi.org/10.6028/ NIST.IR.8334 -draft 63 Certain commercial entities, equipment, or materials may be identified in this document in order to describe an 64 experimental procedure or concept adequately. Such identification is not intended to imply recommendation or 65 endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessari ly the best 66 available for the purpose. 67 There may be references in this publication to other publications currently under development by NIST in accordance 68 with its assigned statutory responsibilities. The information in this publication, including concept s and methodologies, 69 may be used by f ederal agencies even before the completion of such companion publications. Thus, until each 70 publication is completed, current requirements, guideline s, and procedures, where they exist, remain operative. For 71 planning an d transition purposes, f ederal agencies may wish to closely follow the development of these new 72 publications by NIST. 73 Organizations are encouraged to review all draft publications during public comment periods and provide feedback to 74 NIST. Many NIST cybe rsecurity publications , ot her than the ones noted above, are available at 75 https://csrc.nist.gov/publications . 76 Public comment period: June 2, 2021 through July 19, 2021 77 National Institute of Standards and Technology 78 Attn: Applied Cybersecurity Division, Information Technology Laboratory 79 100 Bureau Drive (Mail Stop 2000) Gaithersburg, MD 20899- 2000 80 Email: psfr-nccoe@nist.gov 81 All comments are subject to release under the Freedom of Information Act (FOIA). 82 83 NISTIR 8334 (DRAFT ) USING MOBILE DEVICE BIOMETRICS FOR AUTHENTICATING FIRST RESPONDERS ii Reports on Computer Systems Technology 84 The Information Technology Laboratory (ITL) at the National Institute of Standards and 85 Technology (NIST) promotes the U.S. economy and public welfare by providing technical 86 leadership for the Nation’s measurement and standards infrastructure. ITL develops tests, test 87 methods, reference data, proof of concept implementations, and technical analyses to advance 88 the development and productive use of information technology. ITL’s responsibilities include the 89 development of management, administrative, technical, and phy