More on 1PASS, the InterPort Police's new authentication standard
Last week, I wrote this article about the InterPort Police's new 1PASS authentication standard for entry control, which it's piloting at the Port Authority of New York & New Jersey. A commentor asked for more specifics about what the estimated cost of the system will be, and what services will be available. I asked Jay Grant, CEO of the InterPort Police, to add more detail on those subjects. Here's his response:
"In general, the fee for organizations with over 250 users is $60 per user per year. The license fee is based on the number of subscribers, not access points. In the future, when we offer interoperability outside of a particular authority the jurisdiction only pays for those who are from their organization. A user from another organization pays for their license and all enrollees would have the option to move their data over to another facility, like one airport to another. However, each facility has control over what permissions are given. The system will, however, provide standardized attributes, i.e., if the user is a law enforcement officer, first responder, nurse, doctor and so forth. We will also make available current training certifications and so forth. The goal here is that the local security official can make an intelligent decision about the individual whether it is a routine access after authentication or in the event of an incident they can use the data to vet and triage resources. We do not issue an ID credential. If the organization wants to use one we can integrate their credential into our system as an additional audit feature at no cost, we require the credentials to be a proximity card, like Global Access CBP is using. The organization can add a 1PASS logo on their card for easy identification."
In addition, Grant said, the hardware costs are separate and will all be COTS technology certified by the 1PASS Authority. Here's more information on the authority's certification program. Currently, the companies certified through the authority's certified program are AXIS Communications, Boon Edam, Scneider Electric and FSt21, but we do certify them through the Certified Program. This means the product/equipment has been tested by us and we have done a specification analysis. This information will be available to the subscribing authority. The subscribing organization can do an RFP for the equipment and integrator and choose whom every they wish, as long as it is certified. We already have several certified and we will be making a general announcement on this in the near future to educate companies how to become certified.
Here's Grant on enterying an individual into the system: "Admission to the database is done as a requirement of employment, like PIV, or voluntarily. An individual's vetting process determines the security level they are provided, much like PIV under FIPs 201. We start at personal knowledge level of an individual for level 1 or 2, to full background checks and verification for level 3 or 4, to additional higher requirements to obtain level 5. This standardized security level will allow the local security official to understand what background vetting was done on the user. We can also offer an alternative notification of another standard that in place other than 1PASS as additional information.
"When a single or mutiple user approach an access point the software paints the individual with a classification based on the information in the system as: 1) Recognized, but not authorized (based on many factors—might be they are not on current shift); 2) Recognized and authorized (we know who the person is and they have permission to enter, could be a country or a door); 3) Not recognized (we capture the image, but do not know who the person is as they are not in the database); and 4) Blacklisted (might be a former employee who does not work there any longer).
"Depending on how the local security official has set up the system it can call out audible alerts, realtime notification with data to individuals and so forth. The system currently speaks in English and Spanish and can ask questions and converse with the individual based on certain criteria."