Information Technology Laboratory technical accomplishments · spatial localization techniques to...

NISTIR 6909NOVEMBER 2002

U.S. DEPARTMENT OF COMMERCEDonald L. Evans, Secretary

Technology AdministrationPhillip J. BondUnder Secretary of Commerce for Technology

National Institute ofStandards and TechnologyArden L. Bement, Jr., Director

C O N T E N T S

Director’s Foreword 1

ITL at a Glance 4

ITL Research Blueprint 6

Accomplishments of our Research Program 7

Foundation Research Areas 8

Selected Cross Cutting Themes 29

Accomplishments of our Services Program 33

Industry and International Interactions 35

Staff Recognition 42

I N F O R M A T I O N T E C H N O L O G Y L A B O R A T O R Y

Let me introduce you to theInformation Technology Laboratory(ITL). As one of the National Instituteof Standards and Technology (NIST)Laboratories, our mission is to devel-

op and promote measurement science, standards,and technology for information technology (IT) inorder to enhance productivity, facilitate trade, andimprove the quality of life. We develop computersecurity standards and guidelines for the federal gov-ernment in fulfillment of a legislative mandate. And,new homeland security legislation, the USA PatriotAct of 2001 (P.L.107-56) and the Aviation andTransportation Security Act (P.L.107-71), mandate ourresearch and standards development work in biomet-rics. Working in partnership with industry, academia,government, and consortia, we develop and demon-strate tests, test methods, reference data, proof-of-concept implementations, and other IT infrastructuretechnologies. Our goal is to enable the future of theU.S. IT industry to produce products and servicesthat are high quality, reliable, interoperable, andsecure.

ITL also supports and contributes to major NISTStrategic Focus Areas (SFAs). In support of theHealthcare SFA, we have begun work on the devel-opment of a healthcare standards roadmap, whichwill provide a set of web services and infrastructurefor establishing, populating, searching, maintaining,and administering healthcare standards information.With other NIST laboratories, we participated in theestablishment of the Distributed Testbed for FirstResponders as part of the Homeland Security SFA.Also significant is our Quantum CommunicationTestbed Facility in support of the NISTNanotechnology SFA.

In critical research and standards areas, ITL madesignificant contributions in Fiscal Year (FY) 2002.Industry, government, academia, and consortiarecognized the valuable contributions of our work,including:

Statistical Methods e-Handbook – ITL andInternational SEMATECH collaborated to publish theonline resource e-Handbook of Statistical Methods,which provides a comprehensive overview of statis-tical methods, including experiment design, dataanalysis, and quality control, for engineers andscientists worldwide;

Active Networks Project – A research team fromITL received the “Bytes for the Buck” award fromthe Defense Advanced Research Projects Agency(DARPA) Active Networks program for the projectjudged most productive and cost effective. The ITLteam developed a standard means to specifyprocessor demands for mobile computer programs;

1

Susan F. Zevin,

Acting ITL Director

D I R E C T O R ’ S F O R E W O R D


Common Industry Format Specification – The NationalCommittee for Information Technology Standards(NCITS) adopted ITL’s Common Industry Format forUsability Test Reports (NCITS 354). This documentstandardizes the types of information captured in thesoftware development testing process;

Computer Forensics – ITL released the NationalSoftware Reference Library (NSRL) Reference Data Set,which, together with our Computer Forensics ToolTesting project, provides valuable resources for the lawenforcement community investigating crimes involvingcomputers;

Digital Library of Mathematical Functions (DLMF) –Collaborating with other NIST laboratories and theNational Science Foundation, ITL is developing aninteractive web-based information resource on thespecial functions of applied mathematics;

Distributed Testbed for First Responders - ITL isworking with NIST’s Building and Fire ResearchLaboratory and the Manufacturing EngineeringLaboratory to build a NIST Distributed Testbed for FirstResponders that will integrate a number of technologies,including advanced communication technologies, novelspatial localization techniques to allow localizationand tracking of important assets, and smart sensornetworking to detect and predict the evolution of firesand chemical, biological, radiological, nuclear orhigh-yield explosive (CBRNE) attacks and the dangersthey pose to the health of victims and first respondersat the disaster site;

Guidance on Wireless Network Security and SecurityCertification and Accreditation (C&A) of FederalInformation Technology Systems - ITL is developingguidelines for federal and industry users on thesesignificant topics and others;

Homeland Security - ITL contributed to a joint report,submitted to Congress by the Attorney General,Secretary of State, and NIST by mandate of the USA

Patriot Act and the Enhanced Border Security and VisaEntry Reform Act. The report assesses the actions andconsiderations needed for issuing machine-readabletamper-proof U.S. visas and other travel documents andfor deploying equipment to the U.S. borders to allowbiometric comparison and authentication of thedocuments. ITL provided an appendix that outlinedappropriate standards for biometric accuracy, tamperresistance, and interoperability;

Multi-Laboratory Single Molecule Measurement andManipulation Program - The NIST Smart FlowDistributed Processing Middleware platform generatesspeech recognition reference data and supportspervasive computing standards work at ITL. It alsoprovides high-speed data acquisition and patternrecognition for research at NIST’s Physics andChemical Science and Technology Laboratories;

NIST Refreshable Tactile Graphic Display - ITL hasdeveloped, in cooperation with the National Federationof the Blind, a new, refreshable tactile graphictechnology that allows blind and visually impaired usersto view images using the sense of touch. Future applica-tions include viewing graphics, science, engineering,mathematics, education, and design graphics, bothtechnical and artistic;

Quantum Communication Testbed - In collaborationwith the NIST Physics and Electronics and ElectricalEngineering Laboratories, ITL is developing a quantumcommunication testbed facility for technology assess-ment and integration, showcasing hardware andprotocols for cryptographic key distribution basedon commercially feasible technologies;

Role Based Access Control (RBAC) – An independenteconomic impact study, sponsored by NIST, estimatedthat ITL’s RBAC research saved U.S. industry $295million and accelerated industry’s adoption of thisadvanced access control method by a year. Three ITLresearchers received the 2002 Department of CommerceGold Medal for this work;

2


3

Wireless Personal Area Networks (WPANs) – ITLcontributed significantly to a new standard for WPANsapproved by the Institute of Electrical and ElectronicsEngineers (IEEE). The approval of IEEE 802.15.1 (theBluetooth Core Specification) advances the wirelesstechnology that operates in the 2.4 GHz frequency bandand provides voice communications at 64 bit/s and datatransfers up to 732 kbit/s at distances up to 10 meters;and

XML/Document Object Model (DOM) – ITL and theWorld Wide Web (W3C) Consortium released the firstversion of the DOM Conformance Test Suite, Level 1Core. We developed the test suite using XML technologyand automated test generation methods, adding DOMto five other test suites for XML technology standards.

In addition to our core research and standardsprograms, this report highlights our laboratory-wideinitiatives. ITL co-sponsored two major BiometricsConsortium Conferences this year and led the biometricsstandards development process. Our critical infrastruc-ture protection (CIP) initiative includes security standardsand testing. Pervasive computing efforts focus on smartspace integration, pervasive software tools, and pervasivenetworking technology. We also started a laboratory-wide initiative in healthcare.

ITL also provides research collaborations and technicalservices to the NIST laboratories. Our mathematiciansand statisticians support work in the other NIST labora-tories and perform crucial services such as modelingand certification of Standard Reference Materials(SRMs). Further, we provide vital services to the entireNIST community, including networking, high performancecomputing, support for desktop computers and worksta-tion machines, the telephone system, and a host ofother infrastructure activities.

In addition to our research contributions, ITL madesignificant progress in enhancing the provision of ITservices to the NIST staff. We launched our informationtechnology assistance center (iTAC) to provide a central-

ized help desk for IT questions and solutions. And, incooperation with the NIST Director of Administration/Chief Financial Officer organizations, we enabled theimplementation of the new NIST Grants ManagementInformation System. We also implemented businesscontinuity and disaster recovery plans for core ITbusiness functions. And, finally, based on the maturityof its functions and accomplishments, ITL created anew NIST Chief Information Officer (CIO) and Servicesorganization, which will stand alone by the end of 2002.

Finally, ITL respects its diverse workforce and works toenhance the quality of life for all members of the staff.Our quarterly Town Meetings keep the staff informed ofour progress and activities. The ITL Diversity Committeesponsors division open houses, a holiday party, and asummer picnic for the staff. We also present ITL awardsto individuals who made significant contributions to theresearch, service, and administrative programs of thelaboratory. We work to ensure the safety of our work-place, holding cleanup days and safety seminars. OurSummer Undergraduate Research Fellowships (SURF)program brought 15 deserving undergraduates to ITLlast summer to pursue research opportunities. See ourwebsite at http://www.itl.nist.gov.

Thank you for your interest in the InformationTechnology Laboratory. In partnership with industry,government, and academia, we will continue to enablethe future of the nation's measurement and standardsinfrastructure for information technology.

Susan F. Zevin, Acting ITL DirectorInformation Technology LaboratoryE-mail: [email protected]


4

ITL AT A GLANCE

Kamie Roberts

Acting ITL

Deputy Director

O U R C O R E P U R P O S E

Enabling a better future through information technology.

O U R M I S S I O N

To develop and promote measurement, standards, andtechnology for information technology (IT) to enhanceproductivity, facilitate trade, and improve the quality oflife. We also provide NIST with high-quality informationtechnology services and help federal agencies in under-standing and arranging for computer security.

O U R V I S I O N

To be the global leader in measurement and enablingtechnology for information technology, deliveringoutstanding value to the nation.

O U R M A N A G E M E N T T E A M

Susan F. Zevin, Acting ITL Director, ITL Deputy Director,and Acting NIST Chief Information Officer (CIO)

Kamie Roberts, Acting ITL Deputy Director, Associate Director for Federal and Industrial Relations

Bruce Rosen, Office of the CIO

Robert Glenn, IT Security Office

Yvonne DiCarlo, Acting Assistant Director for Boulder

Kendra Cole, Senior Management Advisor

Ronald Boisvert, Chief of Mathematical andComputational Sciences Division

David Su, Chief of Advanced Network TechnologiesDivision

Edward Roback, Chief of Computer Security Division

Martin Herman, Chief of Information Access Division

Victor McCrary, Chief of Convergent InformationSystems Division

Raymond Hoffmann, Chief of Information Services andComputing Division

Mark Skall, Chief of Software Diagnostics andConformance Testing Division

Nell Sedransk, Chief of Statistical Engineering Division

5


O U R R E S O U R C E S

highly qualified professional and support staff of 498 (includes part-time and faculty appointments), supplemented by 111 guest researchers (as of September 21, 2002)

total authorization for fiscal year 2002 budget of $95.3M, all sources (as of September 30, 2002)

research and operations facilities in Gaithersburg, Maryland, and Boulder, Colorado

opportunities for cooperative research and interaction with industry and academia

O U R P R O D U C T S A N D S E R V I C E S

reference data sets and evaluation softwaretests and test methodsstandardsproof-of-concept implementations advanced software toolsautomated software testing techniquesstatistical model-based testingspecialized databaseselectronic information on the webhardware, software, and network support to NIST staffmathematical and statistical consulting services

O U R C U S T O M E R S

U.S. industryfederal agenciesacademiaNIST staff and collaboratorsresearch laboratoriesIT users and providersindustry standards organizations

O U R R E S E A R C H P R O G R A M

The following chart represents the ITL ResearchBlueprint, the framework by which we describe ourresearch program. Our seven research divisions providea crucial foundation in information technology measure-ments and standards, and these efforts are integratedinto cross cutting areas such as critical infrastructureprotection and pervasive computing. This researchapproach provides enabling technologies necessary toachieve the promise of all e-Applications.

6



7

ACCOMPLISHMENTSOF OUR RESEARCH PROGRAM

A new refreshable tactile graphic display technology developed by

ITL allows the blind and visually impaired to view images using

the sense of touch. Estimated cost is a factor of twenty less than

conventional technology.


C R Y P T O G R A P H I C S T A N D A R D S A N DA P P L I C A T I O N S

Our toolkit of secure cryptographic algorithm stan-dards and standardized security techniques andprotocols continued to grow in FY 2002. The

Secretary of Commerce approved the Advanced EncryptionStandard (AES) as Federal Information Processing Standard(FIPS) 197 in December 2001. The Keyed-Hash MessageAuthentication Code (HMAC) was approved as FIPS 198;HMAC tests are now available. We published the updatedFIPS 180-2, Secure Hash Standard, in August. Other crypto-graphic FIPS are being updated to provide commensuratelevels of security, including FIPS 186-2, Digital SignatureStandard, where larger keys are needed for digital signa-tures. We published NIST SP 800-38A, Recommendationfor Block Cipher Modes of Operation – Methods andTechniques; work continues on advanced modes. InNovember 2001, we conducted a workshop to developa public key-based key management standard, as well asscheme and guideline documents for key management.We published a summary ITL Bulletin in September 2002updating the progress of our cryptographic toolkit.

Through the NIST toolkit of standard algorithms, protocols,and techniques, ITL is enabling more efficient, secure,and interoperable information systems and electroniccommerce. Government and industry will be able to buildsecure, interoperable applications with high-assurance

products that implement needed cryptographic securityfunctionality. The website is http://csrc.nist.gov/encryption/

Our Public Key Infrastructure (PKI) work also advanced.We hosted the First Annual Public Key InfrastructureResearch Workshop in April 2002; this workshop isexpected to become an annual event. With the FederalDeposit Insurance Corporation and the Army Corps ofEngineers, we developed a high-level ApplicationProgramming Interface (API) for PKI-enabled financialmanagement systems; implementation of the API is inprocess. We supported the Federal PKI Steering Committeeand subcommittees, which developed the Federal BridgeCertification Authority (FBCA); four agency PKIs havecompleted cross-certification with the FBCA, which is nowoperational. We completed a Secure/Multipurpose InternetMail Extensions (S/MIME) profile and testing. Our FederalDirectory Profile for PKI was revised based on empiricalresults. See http://csrc.nist.gov/pki/.

S E C U R I T Y M A N A G E M E N T A N DG U I D E L I N E S

For many years, ITL’s Computer Security Division has beenmandated by legislation to provide computer security stan-dards and guidelines to federal agencies for protectingsensitive unclassified information in federal IT systems andnetworks. We issue computer security policy and manage-ment guidelines for federal agencies and support otherfederal agencies in their computer security program efforts.Our active outreach program provides assistance to govern-ment, industry, academia, and the public.

In FY 2002, we published guideline documents on thefollowing topics: intrusion detection systems, riskmanagement, active content and mobile code, securityself-assessment, underlying technical models for IT systems,contingency planning, block cipher modes of operation,handling security patches, firewalls and firewall policy,telecommuting and broadband communications, intercon-necting IT systems, and use of the common vulnerabilitiesand exposures (CVE) vulnerability naming scheme. Draftsare in process on additional security-related topics,

8

Joan Hash and

Alicia Clay discuss

the success of the

Small Business

Computer Security

Workshop series.

F O U N D A T I O N R E S E A R C H A R E A S

SECURITY


including security in procurements and certification andaccreditation. We also published seven ITL Bulletins with asecurity focus. Our new Automated Security Self-EvaluationTool, ASSET, version 1, became available online in June(http://csrc.nist.gov/asset/). Our Computer Security ExpertAssist Team (CSEAT) provides automated informationsecurity program reviews of federal agencies upon request.CSEAT successfully completed a security review of theIndian Trust Management program within the Departmentof the Interior; more reviews are planned in FY 2003. OurComputer Security Resource Center is one of the mostvisited websites at NIST: http://csrc.nist.gov.

Outreach activities for federal agencies included hostingthe federal computer security program managers forum,which held bi-monthly meetings in FY 2002 and sponsoredtwo IT Security Metrics workshops for federal managers.The computer system security and privacy advisory boardmet four times in the year to identify emerging securityissues and advise the NIST Director and the Secretary ofCommerce on their findings. We established a FederalPractices Website (http://csrc.nist.gov/fasp/), an outgrowthof the Federal CIO Council’s Federal Best Security Practices(BSP) pilot effort to identify, evaluate, and disseminate bestpractices for critical infrastructure protection and security.

Our outreach to small- and medium-sized businessesexpanded. In co-sponsorship with the Small BusinessAdministration and the National Infrastructure ProtectionCenter, we conducted six regional security meetings inRichmond, Virginia; Raleigh/Durham, North Carolina;Birmingham, Alabama; Washington, D.C.; San Francisco,California; and Chicago, Illinois. The website ishttp://csrc.nist.gov/securebiz/index.html.

S E C U R I T Y T E S T I N G A N D M E T R I C S

ITL strives to provide federal agencies, industry, and thepublic with a proven set of IT security services based uponsound testing methodologies and test metrics. Our securitytesting program includes cryptographic security testing viathe Cryptographic Module Validation Program (CMVP) andthe National Information Assurance Partnership (NIAP),which conducts testing using Common Criteria (CC) basedspecifications. Our testing-focused activities include thevalidation of cryptographic modules and cryptographicalgorithm implementations, CC evaluation and validationprograms, international recognition arrangements, testinglaboratory accreditation, automated security testing andtest suite development, industry forums, and education,training, and outreach programs.

The CMVP is a highly successful, internationally recognizedprogram that to date has issued 257 validation certificatesrepresenting about 300 individual cryptographic modulesfrom 69 IT vendors. In FY 2002, testing of modulesbegan against FIPS 140-2, Security Requirements forCryptographic Modules, which superseded the discon-tinued FIPS 140-1 in May; all modules entering ouraccredited laboratories are now validated under theupdated FIPS 140-2 specifications. We completed the FIPS140-2 Derived Test Requirements and a validation test toolin November 2001. We co-sponsored a second CMVPworkshop in March. A sixth testing laboratory wasaccredited this year, the second Canadian laboratory togain accreditation. Our Cryptographic Algorithm ValidationSystem, including the AES Test Suite and DES/TDESenhancements, was released to the accredited CMVPtesting laboratories in March. Also implemented was aCMVP cost recovery plan. To date, we have also validated209 cryptographic algorithms, including AES, DES, TDES,Skipjack, SHA-1, and DSA. The website ishttp://csrc.nist.gov/cryptval/.

The National Information Assurance Partnership (NIAP), analliance between NIST and the National Security Agency,continued to promote the development of a more secureIT infrastructure within the United States. The CCEvaluation and Security Program has tested 9 products

9

Summer Undergraduate Research Fellowship (SURF) students

Amarpreet Cheema and Wendy Chou discuss their projects

(cryptographic validation testing and a statistical test suite for

random number generators) with advisor Larry Bassham.

and 12 protection profiles to date, for a total of 21 CCvalidations. The CC Smart Card Security Project, Phase II,is ongoing. We co-sponsored an IT security conference oncontinuity of operations at NIST in April 2002, and partici-pated in May in the third International CC Conference heldin Ottawa, Canada. At the conference, NIAP awarded nineCC certificates for successful evaluation of commercial,off-the-shelf (COTS) products and protection profilesagainst the Common Criteria for IT Security Evaluation(ISO/IEC 15408). The CC Recognition Arrangement wasexpanded to 15 nations, adding Sweden. The NIAPwebsite is http://niap.nist.gov/.

S E C U R I T Y O F E M E R G I N G T E C H N O L O G I E S

The mission of ITL’s security research is to identifyemerging technologies and conceive of new securitysolutions that will have a high impact on the critical infor-mation infrastructure; perform research and developmenton behalf of government and industry in the earliest stagesof technology development through proof-of-concept, refer-ence, and prototype implementations and demonstrations;and transfer new technologies to industry, produce newstandards, develop tests, test methodologies, and assurancemethods.

Example FY 2002 projects include access controland authorization management, the ICAT web-basedVulnerability Patch/Search database, the Government SmartCard Interoperability Specification, mobile device security,Internet Protocol security (IPsec) reference implementationand interoperability testing, and the administration of thecritical infrastructure protection (CIP) grants program. RBACFY 2002 technical accomplishments include the publicationof the RBAC proposed standard (http://csrc.nist.gov/rbac/)as a reference model and functional requirements specifi-cation and an accompanying reader guide, and completionof an RBAC cost model and cost calculator. ITL RBACresearch has been independently credited by the ResearchTriangle Institute (RTI) with saving industry $295M andmerited a 2002 Department of Commerce Gold Medal forthree ITL scientists. We added and analyzed over 2,000additional CVE vulnerability entries to our ICAT database,which now receives nearly 300K hits per month. Wepublished the Government Smart Card InteroperabilitySpecification, V2.0, (http://smartcard.nist.gov/) in June2002, further promoting smart card device and applicationinteroperability. The Smart Card Alliance stated, “Therelease of the Government Smart Card InteroperabilitySpecification is a significant event in the smart cardworld as it is the first comprehensive effort to address theinteroperability requirements of the enterprise market. Itwill become as important as Europay/Mastercard/Visa(EMV) specification is to the Payment market and GlobalSystem Mobile (GSM) specification is to the mobiletelephony market.”

We continued our research and prototype implementationto improve the security of handheld wireless devices.Research included adding new security features in theareas of: user authentication (through the use of biometric,smart card, and password technologies), security policyenforcement (based on the user’s role, the environment ofuse, and the enterprise usage specification), and securewireless policy delivery. Our IPsec effort continued inFY 2002 with the development of a Simple NetworkManagement Protocol (SNMP) policy capability and bycollaborating with IPsec vendors in the pursuit of large-scale IPsec and PKI-based virtual private networks (VPNs).This work is closely aligned with our advanced networkresearch. We monitored progress on CIP grants awardedlast year, which show promising preliminary results inwireless security, telecom security, electric power grid,intrusion detection systems, and security compilers. Thewebsite is http://csrc.nist.gov/focus_areas.html#research.


10

Ron Ross and Marianne Swanson review comments

received on their document, Federal Guidelines for the

Security Certification and Accreditation of Information

Technology Systems.


E L E C T R O N I C C O M M E R C E

Electronic commerce (EC) solutions are being builtusing XML technologies as building blocks. Interestin conformance testing is growing, as indicated by

increased conformance-related activities in industryconsortia and working groups. Conformance tests improveimplementations and the success of interoperability, whichis critical. ITL’s role is to improve the quality of XML-relatedsoftware through the development of standards, conformance testing, and quality assurance practices.

In FY 2002, we led the conformance testdevelopment efforts for several World WideWeb Consortium (W3C) Working Groups,including the XML Core, ExtensibleStylesheet Language/Formatting Object (XSL-FO), and Document Object Model (DOM).We developed and applied automated testgeneration techniques to effectively andefficiently produce tests for the various XMLtechnologies. As a result of our efforts, theW3C has released the XML 1.0 (SecondEdition) Conformance Test Suite. Additionally,we continued the development and releaseof conformance test suites for XML-FO, XMLSchema, and DOM Levels 1and 2. Weinitiated new conformance efforts forXInclude, Namespace, XML Protocol, andXML Query with W3C. As a result of ourexpertise, we co-founded and chair the W3CQuality Assurance (QA) Interest Group. Weauthored the QA Framework: SpecificationGuideline and contribute to the other QAFramework documents, i.e., OperationalGuideline and Test Materials Guideline.

In a related project, we worked with the Organization forthe Advancement of Structured Information Standards(OASIS) to develop a consistent test framework for all elec-tronic business XML (ebXML) testing efforts. This frameworkwas used to develop conformance tests for the ebXML

Registry and Messaging specifications. Messaging providesa method for exchanging electronic business transactionsand registries to allow for the discovery and retrieval ofXML-related documents. We finalized the Registryspecifications (v2) and progressed it as an OASIS Standard.Additionally, we developed proof of concept registry proto-types for the General Services Administration (GSA) andthe Environmental Protection Agency (EPA). We chairedthe OASIS Conformance Technical Committee and wecompleted the GSA Standards Roadmap prototype, whichis being used as the model for an IT standards roadmapfor healthcare.

Another ITL project is the development of standards andtests required for the success of Interactive TV (ITV). Forthe Society of Motion Picture and Television Engineers(SMPTE), we made significant contributions to theDeclarative Data Essence (DDE) specifications. Weauthored several sections and produced reference

11

A C C O M P L I S H M E N T S O F O U R R E S E A R C H P R O G R A M

Carmelo Montanez-Rivera, Richard Rivello, Sandra Martinez,

and John Tebbutt help make electronic commerce a reality

by developing tests for the family of XML technologies.

SOFTWARE


applications illustrating DDE-1 content for the DDE-1Engineering Guide; DDE-1 is expected to become the firstinternational ITV standard (ISO/IEC). We also developed aDigital TV (DTV) Application Software Environment (DASE)Trigger Abstract Test Suite. We completed our ITV project atthe end of FY 2002.

Our support of the federal CIO Council continued. Weassisted the XML Working Group of the CIO Council bychairing their registry subcommittee and hosting a registrywhere federal agencies can learn about how to use XMLregistries. The website is http://www.itl.nist.gov/div897/.

H E A L T H C A R E

Although the healthcare industry is one of the majorindustries in the United States, it has been one of theslowest to embrace information technologies in itsoperations. We are working with the healthcare industry,government agencies, and academia to improve the qualityof healthcare, reduce costs, and provide essential servicesthrough the use of information technology. With AdvancedTechnology Program support, we provide the technicalleadership in integrating healthcare standards intoemerging e-commerce frameworks. In August, we held thefirst in a series of workshops aimed at understanding theissues involved in the effective use of IT for healthcare andrelated fields. The workshop, “Information Technologies for

Healthcare: Barriers to Implementation,” focused on identi-fying the key issues and barriers to improve quality andproductivity. We published a workshop report and estab-lished a website to inform the public of our efforts as wellas to facilitate a continued dialogue among interestedparties. We have joined the Health Level Seven (HL7)Consortium and actively participate in several committees,including the Conformance group. We developed aconcept paper on Healthcare Information Standards andTesting that discussed options for analyzing, defining,and organizing appropriate standards for the healthcarecommunity and the issues surrounding conformancetesting. The paper has been used to stimulate discussionand foster opportunities for collaboration between thehealthcare community and NIST. As a result of the conceptpaper and discussions with members of the community,we have begun work on the development of a healthcarestandards roadmap, which will provide a set of webservices and infrastructure for establishing, populating,searching, maintaining, and administering healthcarestandards information.

Our work in Health Information Systems continued. TheDepartment of Veterans Affairs (VA) is a primary federalcustomer. As the deployment of the Enterprise SingleSign-On (ESSO) to all VA hospitals proceeds, we modifiedVA applications and ESSO, and assisted in the developmentof diagnostic and administrative tools for ESSO. Wedeveloped a v2 reference implementation of the Inter-Organizational Role Based Access Control (IORBAC)with Resource Access Decision (RAD) functionality. Seehttp://www.itl.nist.gov/div897/docs/healthcare_information_systems.html.

C O M P U T E R F O R E N S I C S

Since the tragedy of September 11, 2001, ITL’s work incomputer forensics has taken on added significance andimpetus. Sound computer forensics practices are a key tofinding and delivering court-permissible evidence whencomputers are used in the commission of a crime. Ourprogram has two components: the National SoftwareReference Library (NSRL) and Computer Forensics ToolTesting (CFTT).

Investigators often spend hundreds of hours looking atdigital evidence seized in the course of a criminal investi-gation. Our NSRL eliminates much of this labor-intensivework by automation. The NSRL is a reference data set offile signatures (hashes) of commercial off-the-shelf files,

Doug White and Mark Rose (seated) help the law enforcement

community apprehend criminals and terrorists by developing

reference data and tests for computer forensics.

12

which can be used during examination of digital evidenceto identify pertinent files and eliminate others. Onecomputer may have 5,000-75,000 files. The NSRL data setcan eliminate 40-95 percent of commercial, off-the-shelf(COTS) files from examination and save hundreds of staff-hours. In FY 2002, we continued to develop and populatethe NSRL, which now contains over 8,000,000 file signa-tures. We issued the first release in October 2001 as NISTSpecial Database 28 and updated it quarterly. The NSRLhas been incorporated into several computer forensic toolsand the National Archives and Records Administrationhas asked to work with us to use the NSRL to supportelectronic records management.

The goal of our CFTT project is to provide a measure of assurance that the tools used in computer forensics investigations produce accurateresults. This is accomplished bydeveloping specifications and testmethods. In FY 2002, we finalizedthe specification for disk imagingtools and released a draft specifica-tion and test assertions for harddisk write blocking. We releasedsoftware tools and methodology fortesting disk imaging software. TheNational Institute of Justice issued adisk imaging report based on ourmethodology. We also released ageneral methodology paper, devel-oped an extensive peer reviewprocess, and established partner-ships with the digital evidencecommunity. An ITL researcherserves as an editor for the newJournal of Digital Evidence.The websites arehttp://www.nsrl.nist.gov/ andhttp://www.cftt.nist.gov/.

R E S E A R C H T O I M P R O V E S O F T W A R E T E S T I N G

ITL develops tools and techniques to improve the develop-ment of specifications, software tests, and software quality.The national annual cost of an inadequate infrastructure forsoftware testing is estimated to range from $22.2 to $59.5billion. Testing activities account for 30 to 90 percent ofsoftware development costs. In addition, software testing istime-consuming, labor-intensive, not comprehensive, anddifficult to measure. Poor software quality also contributes

to security incidents. Our automatic test generation (ATG)project provides a method for automatically generatingtests from formal specifications.

In FY 2002, we advanced the development of XML-basedformal model intermediate representation with theSimulink/Stateflow Intermediate Representation (SSIR)Group. Consisting of NIST, Ford Motor Company, CarnegieMellon University, General Electric, Vanderbilt, andTriPacific, the SSIR Group seeks to standardize an interme-diate representation of formal models. We assisted thecommercialization of the ATG method with the FordMotor Company and New Eagle Software. We continuedfeasibility studies with the Argus Systems Group on asecure computer operating system and with NorthropGrumman on fighter radar computers.

Our work on Object Oriented (OO) Component Testingcontinued. The project (formerly Software Testing byStatistical Methods) addresses the development of newmethods for software testing based on stochastic processesand metrics. Its objectives are to improve software quality,reduce testing costs, and develop reliability estimates thatsoftware correctly adheres to its specification. Ourapproach is to develop a new conformance testing method-ology for OO environments and to concentrate on compo-nent integration. See http://www.itl.nist.gov/div897/.


William Majurski, Leonard Gebase, and Mary Laamanen apply

emerging e-commerce standards and technologies to the health-

care industry and the Department of Veteran Affairs.

13


A G I L E S W I T C H I N G I N F R A S T R U C T U R E S

ITLworks with industry to accelerate thedevelopment of integrated, agile switchinginfrastructures. The main focus of the

project is on integrated control planes for opticalswitched networks, dynamic control algorithms fortraffic engineering, and protection and restoration.Current efforts focus on the modeling and analysis ofsignaling protocols and optical network protection andrestoration mechanisms, the development of simulationtools, and the creation of a testbed experimenter’s toolkit.

In FY 2002, we developed two research tools: aMulti-Protocol Label Switching (MPLS)/optical networksimulator (NIST GLASS) and a testbed experimenter’s

toolkit, MPLS on Linux for Traffic Engineering (NISTSwitch). We also published many papers on opticalnetwork fault detection, protection, and restoration. Weworked with the Internet Engineering Task Force (IETF)and the Optical Internetworking Forum (OIF) to developtechnical specifications for an integrated control planecombining optical and Internet switching and providedmodeling and analysis tools to the research community.Next year we will focus on standards for opticalnetwork protection and restoration, and technologiesfor optical burst switching (OBS). Our contributions ofrapid prototypes, and modeling and analysis toolsbenefit industry and academic researchers working onthe next- generation optical Internet. The website ishttp://w3.antd.nist.gov/agile_switch.shtml.

I N T E R N E TI N F R A S T R U C T U R EP R O T E C T I O N

ITL strives to improve the scala-bility, performance, and interop-erability of Internet securitysystems and to expedite thedevelopment of Internetinfrastructure protectiontechnologies. Our technicalapproach is to lead the effortwithin the IETF to complete theDomain Name System Security(DNS SEC) standardizationprocess. Our modeling, analysis,and testing tools help toevaluate emerging Internet keymanagement protocols. Theintegration between quantumkey distribution and Internetsecurity protocols is anotherarea of interest.

14

Leonard Miller, Camillo Gentile, and Luke Klein-Berndt develop protocols

for wireless ad hoc networks.


NETWORKS


In FY2002, we contributed revised IETF specificationsfor DNS SEC protocols. Our Advanced EncryptionStandard (AES) is being incorporated into Internetsecurity standards. We sponsored a workshop for federalagencies on the deployment of DNS SEC. We publisheda performance/interoperability analysis of emergingDNS SEC protocols. We contributed modeling andanalysis results to the IETF efforts to design new keymanagement systems. We also developed extensionsto IPsec/IKE protocols to exploit one-time keypads fromquantum key distribution. Our work with the IETFresults in increased Internet security at a lower cost.The website is http://w3.antd.nist.gov/iipp.shtml.

I N T E R N E T T E L E P H O N Y

ITL facilitates the development of improved Voice overInternet Protocol (IP) (VoIP) transport mechanisms andexpedites the development of new, programmabletelephony signaling services. Our approach is threefold.We are researching the approaches to resource controlfor emerging Internet telephony service creation archi-tectures. We also research the application of Internettelephony signaling protocols to presence/location

tracking and device control in pervasive computingenvironments. Lastly, we deliver rapid prototypes, andtest and instrumentation tools to the IP telephony industry.

In FY 2002, we assumed leadership of the Java™/JAIN™Session Initiation Protocol (SIP) specifications. SIP is anHTTP-like signaling protocol used to set up and managemedia sessions, such as telephone calls, InstantMessaging, video, or games. It is an enabling technologyfor new media services. Customers of this work includeplatform vendors, service vendors, service providers,and industry groups. We completed NIST-SIP 1.0, ourprototype research platform and associated test tools.We delivered research prototypes and a test system forthe emerging JAIN/SIP protocols to thousands of earlyadopters of the technology. We also designed andevaluated techniques for resource control in fullyprogrammable service creation environments.

ITL’s contributions are improving the quality andexpanding the scope of the next generation Internettelephony signaling technology. We are helping industryto design new capabilities and uses for Internet telephonysignaling protocols and delivering research platforms

15

Kevin Mills, Scott Rose,

Doug Montgomery,

Chris Dabrowski, and

Steve Quirolgico work on

service discovery protocols

for networking for pervasive

computing.

and test systems for their use. Our work enables theemergence of new markets for multi-modal Internetapplications. The website ishttp://w3.antd.nist.gov/it_voip.shtml.

W I R E L E S S A D H O C N E T W O R K S

The goal of this ITL project is to facilitate the develop-ment of technology and standards for wireless ad hocnetworks (WANETs). A WANET is a collection ofstationary/mobile nodes with wireless communicationand possible multi-sensory capabilities. Key featuresinclude the lack of need for any prior infrastructure,self-organization, and adaptation to varying topology.These networks have commercial applications, such ascongestion mitigation in hot spots, guerilla networks,and healthcare facilities. Some are mission-orientednetworks, including first responder communicationsand networking, battlefield deployment of militaryforces, and smart sensor networks.

Our approach is to develop metrics and measure theperformance of various WANET protocols proposedto the Internet Engineering Task Force (IETF), therebyfacilitating the IETF standardization process. We are

also developing simulation models of popular WANETprotocols and developing a WANET hardware testbedto complement our analytical and simulation work. InFY 2002, we evaluated self-organization algorithms forsensor networks. We developed and implemented aprototype for enhancements to ad hoc network routingalgorithms. We developed testbeds and conductedexperiments for video streaming over wireless ad hocnetworks. We also helped the IETF to enhance theAODV protocol (the leading on-demand ad hoc routingprotocol). We significantly improved the 802.11OPNET® model and developed video transmissionschemes for first responder ad hoc networks. Our workwas documented in more than 20 papers presented atprofessional conferences.

ITL’s research and standardization efforts have significantimpact on future applications, especially military andfirst responder applications, of wireless ad hoc networks.Researchers in industry and academia also use ourmetrics and performance measurements to advancethe technology. The website ishttp://w3.antd.nist.gov/wahn_home.shtml.


16


H U M A N L A N G U A G E T E C H N O L O G Y

Within the broad field of humanlanguage technology, ITL developsand applies metrics and testing

to advance the state of the art of humanlanguage processing, including speech recog-nition, speaker recognition, spoken languageunderstanding, search, retrieval, filtering oftext-based information, and other advancedtext processing techniques such as summa-rization, extraction, and question answering.Our work is organized into five projects:TREC, ACQUAINT, TIDES, ACE, and SpeechProcessing.

Our Text REtrieval Conference (TREC)series, initiated in 1992, is the premierworkshop/evaluation series that supports theinformation retrieval community. In additionto common task-based individual experiments,TREC provides a forum for the exchangeof research ideas, a means to acceleratetechnology transfer, and an incubator for new researchareas. We co-sponsored with the Defense AdvancedResearch Projects Agency (DARPA) TREC-2001, with 87groups participating from 21 countries; the conferenceincluded a web task, a question answering task, afiltering task, and a cross-language retrieval task. Wepublished the proceedings in paper and online. Weinitiated the planning for TREC-2002, procuring newdata, designing an XML task, and defining a newnovelty track. The goal of our related ACQUAINTprogram is to move the state of the art of questionanswering to the full range of complex questions askedby humans. At the kickoff meeting in December 2001,we presented a draft plan for the overall evaluation,worked with the research community to define a set ofpilot evaluation projects for eight advanced questiontypes, and obtained three gigabytes of new data for usein AQUAINT.

DARPA’s TIDES (Translingual Information Detection,Extraction, and Summarization) program addresses theproblem of finding and interpreting needed informationquickly and effectively regardless of language.Sponsored by TIDES, the Document UnderstandingConference (DUC) series is run by ITL to furtherprogress in summarization and enable researchers toparticipate in large-scale experiments. For DUC 2002,held in Philadelphia in July, we revised evaluationprotocols to include a specific set of questions toevaluate summary quality and devised a new metriccalled length-adjusted coverage. We built an additional60 sets of documents and summaries, and createdmulti-document extracts at the 200- and 400-wordlevels. For the TIDES Topic Detection and Tracking(DTD) project, we hosted the TDT 2001 evaluation,analyzed the evaluation results, and presentedour work.

17


INFORMATION ACCESS

Mike Garris and Steve Wood are shown developing new

measurement standards for fingerprint biometrics as part of

the USA Patriot Act and Enhanced Border Security Act.


For the National Security Agency, through ourAutomatic Content Extraction (ACE) project, we areadvancing the state of the art in automatically extractingcontent from newswire, broadcast news, and newspapers.In FY 2002, we supported evaluations of extractingcontent from these media in February and September.We further developed evaluation measures andprovided detailed analysis of results for the EntityDetection and Tracking (EDT), Cross-Document EDT,and the Relation Detection and Characterization (RDC)tasks. We oversaw the annotation of ACE corpora for EDT and RDC training and evaluation test sets.Additionally, we are creating links between the ACE and Evidence Extraction and Link Detection (EELD)communities with combined evaluations.

Our speech processing projects help to advance thestate of the art in speech recognition and understandingfor applications in human-computer interaction andaccess to spoken information. Corpora collected fromthe Automatic Meeting Transcription project is madeavailable to industry through the Linguistic DataConsortium (LDC). Evaluation tools are available athttp://www.nist.gov/speech/test_beds/mr_proj/. InFY 2002, we completed the equipment/softwareinfrastructure for data collection, including 200

microphones and five video cameras. Wehosted a Meeting Transcription Workshop andcreated a cross-site effort in data pooling. Weused NIST and multi-site data for the RichTranscription (RT-02) evaluation in April2002.We designed an ontology of meetingtypes, chose scenarios, built a website, andrecruited subjects. Lastly, we collected hoursof various types of meetings, created an exten-sive log, and provided the corpus to LDC fortranscription and distribution.

For the DARPA Effective, Affordable, ReusableSpeech-to-Text (EARS) program, we provideaccuracy measurements of core speech-to-textand metadata recognition. In FY 2002, weconducted preliminary metadata experimentsto determine target set and feasibility. Weimplemented an evaluation incorporating newsbroadcasts, telephone conversations, andmeeting speech for speech-to-text transcriptionand speaker segmentation with a variety of testconditions. We organized and ran the RT-02Workshop and began the development of the

evaluation infrastructure for RT-03.

Our Speaker Recognition work progressed. Weconducted the 2002 NIST evaluation with a record 25participating sites from five continents. We included anew multi-modal test. Expanded to three days, the 2002Speaker Recognition Workshop was held in May inVirginia.

ITL’s human language technology programs contributeto improved Internet and intranet information retrievalperformance in the next generation of search engines.The website ishttp://www.itl.nist.gov/iad/programs.html#Human.

I N T E R A C T I O N A M O N G U S E R S A N DI N F O R M A T I O N

To improve the usability of interactive systems, ITL isproviding metrics, standards, and test methodologies bydeveloping standard usability reporting formats, newapproaches and benchmarks to support usability testing(especially for the web), approaches for accessibilitytesting, and advanced user interface prototypes. Our workfocuses on usability engineering and IT accessibility.

18

Audrey Le and Gregory Sanders consult with Christophe Laprun on

how ATLAS (Architecture and Tools for Linguistic Analysis Systems)

can be used in the next generation speech recognition evaluation

Our Web Metrics work advanced in FY 2002. Weredesigned our Web Category Analysis Tool (WebCAT)software, which had 1,500 downloads from our website.We optimized our Web Variable Instrumenter Program(WebVIP) software and redesigned it for addedreliability. We enhanced the Framework for LoggingUsability Data (FLUD), a file format and parser forrepresentation of user interaction logs. We also chaireda workshop for the W3C usability interest group. Inour Industry USability Reporting (IUSR) project, ourCommon Industry Format (CIF) was adopted as anational standard (ANSI/ NCITS 354) in November2001; the international standardization of CIF is movingforward. To create benchmark test data for web usabilityevaluation methods, we analyzed results of the pilotstudies on CIF Testing, Evaluation, and Reporting(CIFter). Results were published, and a workshop isplanned for participants in the CIFter I evaluation. Toensure IT accessibility, we provided technical guidanceto the Objective Measures Project of the Section 508Accessibility Forum. We also participated in theNCITS V2 Technical Committee, which is developingAlternative Interface Access Protocols that will allowalternative interfaces for people with disabilities.The website ishttp://www.itl.nist.gov/iad/programs.html#Users.

M U L T I M E D I A T E C H N O L O G Y

To advance technologies for accessing and using multi-media information, including multimedia searching andfiltering, ITL’s approach is to actively participate instandards development, testing of content-basedretrieval from digital video, and visualization andvirtual reality for manufacturing.

Through leadership positions on standards committees(MPEG, JPEG, Web3D), we continue to advance multi-media standards. In FY 2002, we planned, coordinatedand presided over the U.S. NCITS/L3 meetings. As thechair of this national standards committee, we coordi-nated and participated in MPEG and JPEG internationalmeetings and hosted an international MPEG meeting inVirginia. We hosted an online MPEG data repositoryand management information system. In related work,we develop measurement methods for the evaluationof multimedia metadata (MPEG-7) for the purpose ofcontent-based multimedia retrieval. To advance thistechnology, we created an MPEG-7 data repository

website for MPEG-7 reference software and documenta-tion, chaired and participated in various MPEG-7committees, helped to establish an MPEG-7 Allianceindustry forum, worked with industry to define MPEG-7interoperability and profiling, and developed aweb-based MPEG-7 system to validate MPEG-7data structures.

The goal of our TREC Video Retrieval Task is to fosterresearch in content-based retrieval from digital video.Our approach is to create a publicly available testcollection of digital video for use by the researchcommunity. In FY 2002, we presented TREC-2001results at a workshop and completed the guidelines forthe 2002 Video Track. We selected 70 hours of videodata hosted by the Internet Archive and, working withindustry partners, defined ten features for the extractiontask. We are also developing required topics and evalu-ation software for automatic and human assessment oftask results. Our visualization and virtual reality formanufacturing project progressed. We played a key rolein organizing the Web3D 2002 Conference, improvedaccess to raw anthropometric subject data, incorporateda VRML/X3D translator into the prime X3D tool, andreleased the first version of the NIST CAESAR Viewer,a web-based 3D body visualization. The website ishttp://www.itl.nist.gov/iad/programs.html#Multi.


19

Karen Marshall directs indoor photo shots while Stan Janet

readies the camera for outdoor images taken of NIST volun-

teers for the NIST Human ID Image Collection, used to develop

metrics for evaluating face recognition systems.


D I G I T A L C O N T E N T S T O R A G E : D A T AP R E S E R V A T I O N A N D O P T I C A L D I S CS T A N D A R D S

In response to the needs of industry for uniform andreliable, writable disc media, ITL is developing stan-dards, test methodologies, and guidelines to promote

interoperability for disc media, reliability, and preserva-tion of data. Many disc formats (five for DVD) are notinteroperable for current disc drives. Guidelines andstandards are lacking. Our approach is to systematicallystudy recordable disc media reliability under numerousconditions and develop software to promote and checkfor disc drive interoperability. We also work closelywith the High Density Storage Association (HDSA), anon-profit organization comprised of manufacturers,resellers, individuals, and end-users interested inhigh-capacity storage technologies and products, andin their cross-platform interoperability.

In FY 2002, we completed the first phase of discreliability studies for CD/DVD, looking at temperature,humidity, and photo degradation with a microscopicimage observer. For the NIST/HDSA Data PreservationLaboratory, we installed test equipment to evaluatethe interoperability of storage devices and media.We used the NIST CD Compliance Test software(http://www.itl.nist.gov/div895/products.html) to checkcompliance with the Optical Storage TechnologyAssociation (OSTA) MultiRead specification; publica-tions on this work are in process. In June, weco-sponsored with the DVD Association (DVDA) theNIST DVD 2002 Conference for industry and govern-ment, with a focus on media and player standards and interoperability, DVD authoring, and data preser-vation. We also serve on the National Digital StrategyAdvisory Board at the Library of Congress. This effortis to develop a long-term national strategy to preservethe nation’s born-digital artifacts. The website ishttp://www.itl.nist.gov/div895/isis/projects/datastorage-project.html.

D I G I T A L C O N T E N T M A N I F E S T A T I O N :B R A I L L E D I S P L A Y S A N D I M A G EQ U A L I T Y

ITL is developing guidelines and standards for contentmanifestation to ensure fidelity and quality of imagepresentation for various formats, platforms, and end-users. To achieve a superior quality of a digitized imagefile, the issues of file compression and lack of openstandards for file quality manifestation must beaddressed. Our approach is to develop test corporasuites in cooperation with the Motion Picture ExpertsGroup (MPEG) and the Society of Motion Picture andTelevision Engineers (SMPTE) and to distribute the testsuites to end-users, projector manufacturers, and digitaltest laboratories. In conjunction with our previouseBook work, NIST is also developing prototype,low-cost, mechanical Braille displays to place digitalcontent in the hands of the blind community.

20

Alexei Nikolaev, Charles Fenimore, and John Roberts view the

results of NIST-developed tests for image quality of digital content

for various display platforms.


INFORMATION INTEGRATION


Our Image Quality Laboratory provides the researchenvironment necessary to develop image quality meas-urement tools, test materials, and procedures, and todisseminate the research test corpora to industry. InFY 2002, we equipped our laboratory to conduct imagequality studies. We developed an Image ComparatorTool, which demonstrates the NIST Just NoticeableDifference (JND)/Discrete Cosine Transform (DCT)metric. JND-DCT is a computed image quality metricdesigned to measure the difference between two imagesas perceived by a human viewer. The tool is available athttp://www.itl.nist.gov/div895/products.html. We alsodeveloped digital content test tools and standard videoevaluation materials. Our support of MPEG and SMPTEstandards development activities continued. The websiteis http://www.itl.nist.gov/div895/isis/projects/digitalcin-emaproject.html. We also developed a tactile graphicsdisplay that manifests pictures in pin-by-pin two-dimen-sional format for blind users to receive graphical infor-mation. The National Federation for the Blind will fieldtest the NIST device and this information will be usefulfor third parties who plan to commercialize this NISTtechnology. More information is available athttp://www.itl.nist.gov/div895/isis/projects/braillepro-ject.html.

D I G I T A L C O N T E N T P A C K A G I N G : F I L E F O R M A T S

ITL’s goal is to develop interoperabilityguidelines for digital content types, theiruse and scalability. We are defining thescope of content types to examine (video,film, text, pictures, audio) and developingan inventory of digital object types. Wecan then evaluate the sensitivity ofvarious content types to media-specificfailure mechanisms. Critical features aredefined in terms of cost, performancerequirements, and usage for content types.

In FY 2002, we completed our file formatinventory and published results in acontent type matrix. We conducted fileformat/temporal studies to detect andobserve the time-dependent properties ofdisplays that affect image quality and tocorrelate these properties with the presen-tation of different images and file formats.

In January 2002, we presented this work at a technicalconference. We completed our Advanced TechnologyProgram eBook File Format research; software is indevelopment to allow any image format to be displayedon the NIST-developed tactile graphic display. To assessthe feasibility of transferring scientific, technical, andmedical documents to commercial platforms, wecontinued testing file formats for eBooks. We developedtest corpora to evaluate formatting and to test devicecompliance to the Open eBook (OEB) specification. Wedeveloped an OEB Windows® Browser for a Windows®

platform and made it available on the web. To date over40 downloads of the OEB compliant browser for Linuxhave been made. More than 350 people attended ourannual Electronic Book Conference and Show inWashington, D.C., in November 2001. The website ishttp://www.itl.nist.gov/div895/isis/projects/ebookproject.html.

D I G I T A L C O N T E N T T R A N S F E R A N DD E L I V E R Y : D T V

ITL is developing metrics and guidelines for architec-tures ensuring the efficient delivery and transport ofdigital content. Our support of the digital TV industrycontinued in FY 2002. The Application SoftwareEnvironment (DASE)-1 Specification was approved as aCandidate Standard. DASE is the North America middle-

21

John Costello (left standing), Sean Ginevan (standing), Xiao Tang (left seated) and

Oliver Slattery are developing interoperability tests for high-density storage systems.

ware standard for broadcast interactive television. NISTand the DASE specialist group are developing thesestandards in advance of widespread use of digital televi-sion technology. We completed the DASE-1 PrototypeImplementation, which provides application developersand consumer electronic manufacturers an applicationdevelopment environment and a basis for an interoper-able Digital TV receiver implementation. We releasedthe reference implementation to the public(http://www.dase.nist.gov), along with demo applica-tions, the Advanced Television System Committee(ATSC)/MPEG parser, and documentation; the websitehas received over 5,000 hits to date. The prototypeimplementation provides the experimental environmentneeded to shape future commercial interactive DigitalTV. Also under construction is a robust quantumcommunications testbed that will enable explorationsof quantum information transmission. The website ishttp://www.itl.nist.gov/div895/cmr/dase/index.html.

D I G I T A L C O N T E N TE N C A P S U L A T I O N :R I G H T S M A N A G E M E N T

ITL is developing interoperableopen standards, guidelines, andspecifications for rights manage-ment of digital content. Whilemarket progress on trust issues hasbeen slow, the need remains high.Problems arise because the Internetcannot vouch for participants, amajor inhibition to e-commerce.The issues are identity authentica-tion, agreement assurance, andprivacy. ITL’s trust managementproject addresses these barriers.

Building upon our Financial AgentSecure Transaction (FAST) assuranceframework, we collaborated withNIST’s Electronics and Electrical

Engineering Laboratory and the IPC (ElectronicsInterconnection Industry consortium) to apply the FASTmodel via existing Internet client-server technology anda legacy database. This model provides referral onidentity, capability (products and services), trust, andreputation. In FY 2002, we completed a flexible,modular, server/portal mechanism for trust management.We compiled an inventory of digital rights management(DRM) standards and sponsored a workshop on DRMinteroperability and standards. We analyzed authentica-tion architectures and formats, and defined the compati-bility of biometric data for content and devices. Weserved as a technical co-sponsor for the IEEE 4thInternational Workshop on Networked Appliances(IWNA-4) held at NIST. Our assurance and trust mecha-nism for Internet commerce for manufacturing willcreate new and expanded opportunities for smallbusiness in the electronic marketplace. The website ishttp://www.itl.nist.gov/div895/cmr/ecom/index.html.


22

Xiao Tang (standing), Jian Zheng, and Fred Byers examine results of tests on the

lifetime of DVDs.


A P P L I E D M A T H E M A T I C S

ITL’sapplied mathe-matics programfocuses on the

development of mathematicalmodels, methods, and tools appli-cable to problems of national interest.Through extensive collaboration andconsulting with NIST scientists, wehelp to improve the quality of NISTresearch via the application of state-of-the-art mathematical and computa-tional methods. In addition, interac-tions with other federal agencies andindustry partners ensure the wide-spread benefit from our work. Thediverse application areas in whichwe work include atomic physics,bioinformatics, electromagnetics,materials science, manufacturing,and construction engineering. Tothese we bring expertise and developnew tools in ordinary and partialdifferential equations, continuummechanics, nonlinear dynamics,numerical analysis, mathematical optimization,deconvolution, discrete mathematics, computationalgeometry, Monte Carlo methods, and data mining.

Our contributions to NIST’s research program in FY 2002 are widespread. For NIST’s Electronics andElectrical Engineering Laboratory (EEEL), we developeddata correction methods and software for antenna quietzone imaging. We also developed lattice sum tech-niques for computing band-gap diagrams for arbitrarytwo-dimensional photonic crystals and implementedthese in software. For the Materials Science andEngineering Laboratory (MSEL), we developed a diffuse-interface model for electrodeposition coupling phasechange and electrolytic reaction. For the ChemicalScience and Technology (CSTL) Laboratory and the

Manufacturing Engineering Laboratory (MEL), wedeployed our real-time blind deconvolution methodto the sharpening of scanning electron microscopeimagery. With NIST and industry partners, we aremodeling high-speed milling to fulfill the measurementsand standards needs of U.S. discrete parts manufac-turers. In particular, we developed analytical models ofcoupled tool-assembly dynamical behavior to optimizetool design and reduce chatter. Our bioinformatics effortwith NIST’s CSTL and the National Institutes of Healthinvolves applying optimization techniques, the Markovtheory of random processes, and parallel computing tothe challenging problem of aligning multiple proteinsequences with gaps. With the Building and FireResearch Laboratory (BFRL), we made significantprogress in the deconvolution of laser radar imagery for application in construction site management.

23

John Hagedorn (seated) collaborates with Nicos Martys of the NIST Building and

Fire Research Laboratory, applying methods of parallel computing and scientific

visualization to improve the performance of the Lattice Boltzman method for the

modeling of fluid flow in complex geometries.


MATHEMATICS


In addition, we continued our development of noveltechniques and tools of wide application. We releaseda three-dimensional version of the Object-OrientedMicroMagnetic Framework (OOMMF), our widely usedsoftware for micromagnetics modeling. We improvedthe Object-Oriented Finite (OOF), our software tool foranalyzing real material microstructures, developing newfacilities for automatic grain boundary detection andmesh refinement. Implementation of OOF2, which willbe capable of handling a much wider range of physicalsituations, is well under way. We also developed newMonte Carlo techniques for estimating independent setsin graphs, a problem arising in multiple contexts, fromthe study of communications network reliability tothermodynamics models. The website ishttp://math.nist.gov/mcsd/.

D I G I T A L L I B R A R Y O F M A T H E M A T I C A LF U N C T I O N S

The DLMF, now under development at NIST, is an inter-active, web-based compendium on the special functionsof applied mathematics. Such functions are basic toolsin mathematical and computational modeling in manydisciplines. Examples are Bessel functions, ellipticintegrals and functions, the classical orthogonalpolynomials, Heun functions, Painleve transcendents,and q-series. The core of the DLMF is a database of

mathematical properties compiled by some 40external experts. ITL is coordinating and editingthe database, and developing techniques for itseffective online presentation. Components of thelatter include semantic mathematical markup,interactive web-based graphics, search in mathe-matical databases, metadata, bibliographic links,and links to software. When completed, theDLMF will provide standardized notations,definitions and properties for special functions,with online traceability to NIST.

In FY 2002, working under the supervision ofthe NIST editors, most of the external authorscompleted acceptable drafts of their chapters. Wegenerated some 100 visualizations, developed aprototype search engine, and constructed aseven-chapter prototype. We co-organized atwo-week workshop on Special Functions in theDigital Age held at the Institute for Mathematicsand Its Applications at the University ofMinnesota in which many DLMF editors and

authors participated. Next year we expect to completethe validation of chapters by external experts, producea complete draft of the website, and contract for theprinted version of the DLMF. The website ishttp://dlmf.nist.gov/.

H I G H P E R F O R M A N C E C O M P U T I N G A N DV I S U A L I Z A T I O N

The need for higher fidelity models incorporating morecomplex physics often leads to computational problemsthat far exceed the capacity of current desktop worksta-tions. Parallel computing techniques can be used toextend the computational power available on thedesktop. ITL develops tools and techniques for highperformance parallel and distributed computing, andcollaborates with NIST scientists and engineers to applythese to problems of critical interest. High performancesimulations, as well as emerging combinatorial experi-mental techniques, can yield massive amounts of data.Carefully designed scientific visualization methods anddata mining techniques are needed to understand suchdata. ITL develops facilities and tools of this type, andcollaborates with NIST scientists and engineers toapply them. Current applications include modeling ofnanostructures, flow in porous media, solidificationof metal alloys, and atomic physics.

Isabel Beichl and NRC Research Associate David Song are working

to understand the potential advantages and limitations of proposed

quantum-based computers.

24

In FY 2002, we expanded our Reconfigurable AdvancedVisualization Environment (RAVE) immersive visualiza-tion facility to two 8 by 8 foot screens arranged at rightangles, and developed new tools to ease its use. Thefacility now sees widespread use. We demonstrated thepromise of virtual measurement systems by achievingthe most accurate computation to date of the groundstate of neutral helium. With CSTL, we produced aparallel version of the popular FEFF x-ray absorptionspectroscopy software, providing a 20-fold speedup forsuch computations on workstation clusters. For MSEL,we created a parallel three-dimensional phase-fieldsolidification simulator. We also developed parallelcomputing techniques and visualizations for studies offluids, suspensions, and elasticity for the Virtual Cementand the Concrete Testing Laboratory in collaborationwith BFRL. The website ishttp://math.nist.gov/mcsd/savg/.

M A T H E M A T I C A L S O F T W A R E

ITL’s development, measurement, and standardizationof general-purpose mathematical software tools, alongwith related information services, contribute to animproved environment for computational scienceresearch within NIST and in the scientific communityat large. Work areas include interfaces andsoftware for numerical linear algebra,algorithms and software for parallel adaptivemultigrid solution of partial differentialequations, and Java™-based technologies fornumerical computing. Our work is carried outin collaboration with industry consortia andworking groups, national laboratories, andacademia.

In FY 2002 we published a standard forSparse Basic Linear Algebra Subroutines(BLAS) in collaboration with the BLASTechnical Forum. We developed anANSI C BLAS reference implementation andcompleted the accompanying test suites. Wereleased Parallel Adaptive Multigrid Methodsand Software (PHAML) Version 0.9, a paralleladaptive partial differential equation solverwritten in Fortran 90 using MPI. We incorpo-rated related NIST algorithms and softwareinto the Zoltan Library of Sandia NationalLaboratories for dynamically load-balancing

parallel applications. We released Version 1.01 of theTemplate Numerical Toolkit (TNT), an object-orientedlibrary of standard linear algebra operations based onC++ templates.

We continue to operate popular web-based informationservices. The Guide to Available Mathematical Software(GAMS), our cross-index and virtual repository ofgeneral-purpose mathematical software components,provides access to some 9,000 items from more than100 packages. The Matrix Market is a database ofmatrices used in studies of algorithms and software forlinear algebra. Our Java™ Numerics website providesinformation on numerical computing in Java, includinga standardized web-based benchmark, called SciMark.The current high score for SciMark is over 300 Mflops,a 44 percent improvement over one year ago. Theseservices are among the most popular at NIST.

As a result of this work, NIST scientists and engineers,as well as the larger computational science community,benefit from more accurate, reliable, portable computa-tional modeling, greater ease in developing technicalcomputing applications, and improved portability andperformance of technical computing applications. Thewebsite is http://math.nist.gov/.


Geoffrey McFadden and NRC Research Associate Katharine Gurski

apply mathematical methods to a variety of problems, from the

formation of dendritic crystals to the stability of quantum wires.

25


B A Y E S I A N M E T R O L O G Y

Scientists at NIST and national metrology laborato-ries routinely use Bayesian methods for standarduncertainty analysis. Bayesian statistics provide a

unified framework for optimally combining informationfrom multiple sources, resulting in highly efficientexperimental designs and statistical analyses. Wecontinue to expand fundamental statistical theorynecessary for the application of statistics to metrology;at the same time we are developing and implementingspecialized Bayesian methods to metrology research atNIST and in the international metrology community.In FY 2002, we presented nine talks at national andinternational conferences, published eight papers, andtaught courses on Bayesian statistical and linear models.Methodology development included both softwareimplementation for Bayesian metrology and the devel-oping of standard reference data sets for the evaluationof Markov Chain Monte Carlo algorithms. Successfulapplication of Bayesian statistics for metrology hasspanned the analysis of an international Key

Comparison; the implementation, testing, and compar-ison of several Bayesian partition models; and a generalpurpose MATLAB implementation of the normalBayesian hierarchical model.

Elicitation of prior information and quantification ofexpert opinion is key to using Bayesian methods to theirfull capacity. We are adapting available methodologyand developing specialized software to assist the NISTscientific community in this endeavor. For linear modelswe have completed a prior elicitation of hyperparame-ters using conjugate priors based on a quantile elicita-tion approach. In a parallel effort we also completed aprior elicitation for hyperparameters in multivariatelinear models drawing on historical data. Graphicalrepresentations of Bayesian inferences and diagnosticsare being developed, implemented, and prepared asweb-based products. The website ishttp://www.itl.nist.gov/div898/bayesian/homepage.htm.

K E Y C O M PA R I S O N S A N D U N C E R TA I N T Y

International Key Comparisons serve as the technicalbasis for acceptance of measurements by memberlaboratories participating in the Mutual RecognitionAgreement (MRA) of the National Metrology Institutes(NMIs) worldwide. ITL leads a collaborative effort withother NIST laboratories and NMIs to ensure that sourcesof statistical variation are correctly identified. Thisincludes determining whether two national laboratorieshave comparable measurements and assessing thedifferences among participating laboratories usingstatistical methods. In FY 2002, we collaborated withscientists in NIST’s Chemical Science and Technology,Electronics and Electrical Engineering, ManufacturingEngineering, and Physics Laboratories by collecting andanalyzing data for seven Key Comparisons in whichNIST participated. New work in statistical design led toa set of candidate designs for collection of data in sixupcoming Key Comparisons on fluid flow. StatisticalEngineering staff presented an invited tutorial on designprinciples and specific options to the internationalWorking Group on Fluid Flow.

26


STATISTICS

Alisha Sparks, a student in the Statistical Engineering Division, and

Ken Butcher, NIST Technology Services, discuss the statistical analysis

of U. S. and proposed European standards for packaging and labeling.


In addition to participating in individual KeyComparisons, we initiated a focused statistical researcheffort on the foundations of key comparisons in orderto provide general guidance and computer tools for thedesign and analysis of key comparisons. We formulatedan approach to the performance evaluation ofcommonly applied parametric, nonparametric andBayesian methodologies for estimating the key compar-ison reference value (KCRV) and the associated uncer-tainty. Specific Key Comparisons have required newstatistical research. We have applied the new method-ology, presented it to the scientific community, andpublished results, for example, the uncertainty analysisfor Key Comparisons when traveling standards aresubject to drift effects over time.

Statistical Engineering Division staff took an activeinternational role, participating in meetings held underthe auspices of several Consultative Committees of theInternational Committee for Weights and Measures(CIPM) and the Joint Bureau International des Poids etMesures/ National Physical Laboratory (BIPM-NPL)Workshop on the Impact of Information Technology inMetrology, with a formal presentation at the satelliteworkshop on Evaluation of Interlaboratory ComparisonData. We continue a major research effort to providethe scientific metrology community with more accurateuncertainty assessment and computation methodologyto improve scientific decision-making. The website ishttp://www.itl.nist.gov/div898/projects/keycomp.htm.

S T A T I S T I C A L A N A L Y S I S O F I TP E R F O R M A N C E

ITL is defining the measures of IT performance anddetermining their statistical characteristics. To accom-plish this, we construct models to assess the importanceof factors in performance of networks and biometrics,provide a statistical basis for IT standards, and constructefficient experimental designs for IT applications forcomputer forensics, speech recognition, and documentunderstanding. In FY 2002, we collaborated with ITL’sAdvanced Network Division to develop sound statisticalmethodology for network traffic data analysis and simu-lation, with potential applications for Quality of Service(QoS) and computer security. For the HumanID project,we focused on solutions to the algorithmic comparisonproblem in face recognition. In computer forensics, weprovided a statistical-based rigorous foundation for the

National Software Reference Library and the ComputerForensics Tool Testing projects. We contributed tospeech recognition research by translating the probleminto appropriate statistical essentials and prioritizing theexperimental design and analysis. Lastly, we consultedon ITL’s document understanding project. The website ishttp://www.itl.nist.gov/div898/itperf/homepage.htm.

S T A T I S T I C A L C O L L A B O R A T I O N S A N DM E A S U R E M E N T S E R V I C E S

ITL collaborates with the NIST staff on research projectswhere optimal experiment design, statistical modeling,and data analysis play a significant role in improvingmeasurement processes and gaining scientific insight.We design and analyze experiments and evaluateuncertainties for the NIST Standard Reference Materials(SRMs) and Calibration Programs. In FY 2002, we main-tained and supported NIST’s role as the highest qualitySRM service in the United States, contributing to thedevelopment and certification of more than 40 SRMs.We developed an administrative database to track individual SRMs, which allows for more effective monitoring and reporting.

As part of the Statistical Engineering Division’s interdis-ciplinary collaborative role in NIST science, extensivelong-term collaborations continue to break new scien-tific ground in the areas of subatomic particle lifetime,optoelectronics, and low-level radionuclide measure-ment. Other collaborations that contribute directly to

27

Andrew Rukhin, Blaza Toman, Nien-Fan Zhang, and Stefan Leigh

discuss statistical approaches to uncertainty analysis for International

("Key") Comparisons Among National Metrology Institutes.

American industry and to American consumers includecigarette flammability, highway concrete lifetime andcost optimization, optical particle counters, and gasmetrology calibration. The websites arehttp://www.itl.nist.gov/div898/consult/consult.html andhttp://www.itl.nist.gov/div898/projects/srm.htm.

S T A T I S T I C A L M E T R O L O G Y E D U C A T I O N

ITL offers statistical short courses and tutorials, whichare tailored to NIST science and metrology. Topic areasinclude statistics, probability, data analysis, and statistical computing. These core courses in statisticalconcepts and methodology are supplemented by specialtopics on an as-needed basis. The training providesresearchers with the statistical tools necessary toimprove the quality of experimental design and analysisat NIST. We also offer hands-on work experience forstudents and interns in statistics; seven undergraduateand graduate students spent the summer of 2002working on statistical metrology in the StatisticalEngineering Division.

In July 2002, the NIST/SEMATECH e-Handbook ofEngineering Statistics was officially released. Within a month, the e-Handbook became the top citation for web searches on “engineering statistics.” The e-Handbook began when ITL teamed up withInternational SEMATECH, a consortium of worldwidemajor semiconductor companies, to provide this

web-based guide for engineers, scientists, businesses,researchers and teachers who use statistical techniquesin their work. The e-Handbook updates NBS Handbook91, Experimental Statistics (all-time #2 NIST best-seller)and also provides direct incorporation of “bundled”software for immediate user access and utilization, plusweb publication of resources. The final editing, incorpo-rating new features suggested by beta-test users, is alsoavailable as the e-Handbook CD. The website ishttp://www.itl.nist.gov/div898/handbook/index.htm.

S T A T I S T I C A L P R O C E S SC H A R A C T E R I Z A T I O N

ITL statisticians work with NIST scientists and withindustrial partners to characterize complex processesand to address measurement and standards aspects ofphysical science, engineering, and IT. For NIST’sElectronics and Electrical Engineering Laboratory, wecollaborated in the dielectric materials metrology workby completing an uncertainty analysis and developingcode for software for computing permittivity and losstangent; the software was made available to industry inAugust 2002. Consulting in high-speed optoelectronics,we developed a method for estimating the bias oftimebase distortion estimates and released publicdomain software for correction of signals for drift, jitter,and timebase distortion. In collaboration with NIST’sChemical Science and Technology Laboratory, we devel-oped a full-blown example of the sequential approachto designing a series of experiments to characterize anew measurement process and to identify all the criticalfactors. This example was based on the dual meter flowmeasurement system comparison characterized at NISTand now to be used in fluid flow calibrations in bothnational and international arenas. For the U.S. elec-tronics and communications industries, we developedaccurate calibration and measurement techniques fornonlinear network analysis. Also for industry, wecontributed to a quantitative measurement system forneutron depth profiling. The website ishttp://www.itl.nist.gov/div898/charact/homepage.htm.


28

The e-Handbook of Engineering Statistics Development Team:

Thomas Ryan (consultant), Alan Heckert, Carroll Croarkin,

James Filliben, and Will Guthrie.

29


ITLis developing interoperable open stan-dards, guidelines, and specifications forbiometric systems. Our experience

includes standards development, design of experiments,statistical analysis, algorithm development, distributedcomputing, image processing, software engineering,systems integration, and signal processing.

In collaboration with the NIST Building and FireResearch Laboratory, ITL is developing test methodolo-gies, documentary standards, and reference implemen-tations (software and hardware prototypes) to assist thebiometrics industry and end-users in the testing anddeployment of scalable, integrated biometric systems.The impact of this research will: a) lower the technicalengineering investments needed for developing andmodifying state-of-the-art biometric systems, b) enablethe integration of biometric systems with buildingautomation systems, and c) clarify subsystem andmiddleware requirements to get more biometric-compatible installation points in buildings. Biometrictechnologies have been used for single point solutions;e.g., entry access, computer log-on. This project seeksto explore the scalability of biometrics systems for largeenterprise environments, and the subsequent develop-ment performance metrics and test methodologies. In FY2002, we began development of an open, performanceevaluation laboratory to examine different biometricsystems. Work progressed on the software developmentof a Linux version of the BioAPI standard, whichbecame an ANSI standard. We continued our leadershipin the Biometrics Consortium and held two majorconferences this year featuring biometrics and its application as a homeland security technology. Morethan 900 persons and over 70 exhibitors participated in our September 2002 conference.

For the Department of Justice, the FBI, the NationalInstitute of Justice, developers, vendors, and lawenforcement organizations, we are providing standardsand evaluation technology for interoperable CriminalJustice Information Systems (CJIS). We published NISTSpecial Databases 29 and 30 for plain and rolled imagesfrom paired fingerprint cards. We completed the NISTFingerprint Image Software (NFIS) package and distrib-uted 333 copies of the CD. We also published the revised

XML Rap Sheet Transmission Specification and initiatedthe development of the Verification Test Bed (VTB). ITL fulfills its mandate to certify biometrics under theUSA Patriot Act by determining estimates of performancefor fingerprint and face biometrics using several NISTspecial databases. Using large operational fingerprintand facial databases from federal agencies, we developed an initial NIST VTB for testing fingerprintverification scores. To fill the need for accurate biometrics for border security as part of homelanddefense, we ran verification tests on Immigration andNaturalization Service (INS) databases.

Funded by the Defense Advanced Research ProjectsAgency and the National Institute of Justice, ITL’sHuman Identification at a Distance (Human ID) projectfocuses on providing evaluation methods and test datafor biometric systems that operate at long distances fromthe subject. Since September 11, 2001, our work hasfocused on certifying the accuracy of face verification of individuals using visas and on border security. In FY 2002, we designed and gathered imagery for a large-scale Face Recognition Verification Test. We implementeda baseline gait recognition system and distributed it to theresearch community. The ITL Biometrics Resource Centerwebsite is http://www.nist.gov/biometrics.

S E L E C T E D C R O S S C U T T I N G T H E M E S

BIOMETRICS

Fernando Podio, Mike Indovina, Alan Mink, Barry Hershman, and

Robert Snelick test the performance of an iris scan device in the

NIST biometrics system integration and engineering laboratory.


Protecting the nation’s vital infrastructure hasbecome a top priority since the tragedy ofSeptember 11, 2001. U.S. government operations,

business and commerce, and the health and safety ofthe American public rely upon a national informationinfrastructure and supporting physical infrastructure,such as telecommunications, energy, financial services,water, and transportation sectors. Many of the systemsand physical assets of these infrastructures are critical to the nation’s security, economy, or health and safety.Information technology (IT) advances have caused theseinfrastructures to become increasingly automated andinterlinked, creating new vulnerabilities to equipmentfailures, human error, weather and other natural causes,and physical and cyber attacks.

Consistent with its overall mission and long-standingsecurity responsibilities in information technology, ITLfocuses on security standards and testing to help ensurethe security of our nation’s critical infrastructures. Wesupport federal departments and agencies under theComputer Security Act of 1987 and follow-on legislationthat assign to NIST responsibility to develop securitystandards and guidelines for sensitive federal systems.Through the development of standards and testingprograms, we are helping IT users and vendors to build products that will better protect information andimprove security. (See the Security section of thisreport.) These improved products, in turn, provideenhanced security of the communications and information processing backbone of our infrastructures.

30


CRITICAL INFRASTRUCTUREPROTECTION

ITL focuses on IT security standards and testing to help

ensure the security of our nation's critical infrastructures.


31


PERVASIVE COMPUTING

ITL’spervasive computing initiative is anatural fit for our organization. Theinitiative builds upon our robust

R&D programs in human computer interaction, such asspeech and visual recognition and tracking, sophisti-cated information access from multimedia databases,extensive information presentation capabilities, dynamicnetworking, wireless networking, software testing, andsecurity.

A significant component of our pervasive computingeffort is our smart space testbed. We advance smartspace technologies and accelerate their deployment byproviding a modular testbed for integration, interoper-ability, architecture development, data collection, andperforming experiments. In FY 2002, we deployed our Smart Flow System to our Meeting Room, whichincludes hundreds of sensors and terabytes of data. Weintegrated wireless capability for using personal digitalassistants (PDAs). We produced a new microphone arraywith onboard analog to digital conversion. We are alsodeveloping a usability-enhanced Smart Flow System,which is much easier to install and program. We serveon the founding editorial board of the IEEE PervasiveComputing Magazine. Our Pervasive Computing 2002Conference was held in early October 2002, with anemphasis on medical pervasive computing applications.The website is http://www.nist.gov/smartspace.

The software system components of our pervasivecomputing initiative focus on applying ArchitectureDescription Languages (ADLs) to Service DiscoveryProtocol (SDP) specifications and our Aroma project,which is developing measurements and tools for perva-sive computing. This year we modeled Universal Plugand Play (UpnP) and developed two-party and three-party Rapide architectural models to cover all SDPs.We produced metrics for industry analysis of distributedcomponent systems in harsh conditions, analyzed SDPs,and published four reports on the work. We continuedthe development and use of our Existential Simulation

Tool (EXiST); our redesign of the tool around XML-basedweb services allows for portability, interoperability, andextensibility. We also created a database for measure-ments. The website is http://www.itl.nist.gov/div897.

We continued to address networking issues for pervasivecomputing. To expedite the development of wirelesspersonal area networks (WPANs), we worked with IEEE802.15 to complete one specification, developed speci-fication and description languages (SDLs) for two speci-fications and one protocol implementation conformancestatement (PICS), produced a recommended practicesdocument on coexistence, and published ten papers oninterference and coexistence. We also developed ageneric model for service discovery (SD) protocols,studied and published three papers on resiliency of SD protocols, and shared the results with SunMicrosystems, Inc., and the UPnP forum. Our work ishelping the IT industry to understand the technical properties of various industry dynamic discovery and configuration technologies. The website ishttp://w3.antd.nist.gov.

College students Stephanie Gantt, Peng Ying, and

Alexandria Chambers learn about pervasive computing

tools and techniques as part of their projects in ITL.


32

NIST’s quantum informationprogram was initiated inresponse to the coming

confluence of computer science and quantum physics. Thegoal of the program is to understand the implications of theuse of quantum states of matter to represent, process, andcommunicate information and to begin to develop the newIT infrastructure necessary to support it. Quantum informa-tion could provide benefits in many areas. Perfectly securecommunications and the ability to solve problems beyondthe capabilities of classical computers in applications suchas code breaking and pattern matching could have aprofound impact on homeland security. For commerce andtrade, advances in quantum information could lead to moresecure electronic commerce and continued maintenance ofthe U.S. lead in the computer technology marketplace.

ITL contributes to NIST’s interdisciplinary quantum informa-tion program (in collaboration with the Physics andElectronics and Electrical Engineering Laboratories) in theareas of applied mathematics, algorithms, computing andcommunications architecture, computer security, andnetwork protocols; five ITL divisions contribute to theprogram. ITL’s work is in two broad arenas: quantum

communication and quantum computation. We are developing a quantum communication testbed facility for technology assessment and integration, showcasinghardware and protocols for cryptographic key distributionbased on commercially feasible technologies, with theattainment of Mbps effective transfer rates as the goal. In FY 2002, we completed the design of a 600 meter free-space1.25 GHz optical wireless link containing both quantumand classical channels. Laboratories at each end of the link were renovated, and necessary equipment, such astelescopes and high-speed electronics, was procured. Wedesigned data collection hardware, implemented a crypto-graphic key exchange software system, implemented andtested the application programming interface (API), andbegan the testbed assembly. In addition, to improve the reliability of identity verification for network applications,we devised and documented a hybrid quantum authentica-tion scheme and filed a provisional patent application.

In the area of quantum computation, we are working onfundamental problems at all scales, from the modeling ofphysical realizations of quantum bits (qubits), to architec-tural concepts for quantum computers, to the developmentof quantum algorithms. In FY 2002, we developed mathe-matical methods to compute trapping states for neutralatoms in optical lattices from the Schrödinger equationmodel, extending ITL’s parallel adaptive partial differentialequations solver PHAML to use them. We developed theconcept of a quantum bus architecture based on entangle-ment swapping and teleportation, and began analysis of itsscalability and error properties. We developed software toenumerate quantum circuits (i.e., fundamental algorithmiccomponents) for Boolean functions. Finally, we developeda novel algorithm to determine whether a finite integerfunction is one-to-one.

As we build expertise in the uses of quantum computingand communication, ITL’s world class IT program can significantly advance the development of the next generation of information technology. The web page ishttp://math.nist.gov/quantum/.


QUANTUM INFORMATION

Richang Lu, Xiao Tang, Mikko Heikkero (seated),

and Alan Mink designed and engineered the

optics and electronics for the NIST Quantum

Communications Testbed.


B U S I N E S S A P P L I C A T I O N S

ITLprovides centralized, comprehensivesupport for a variety of business applica-tions and administrative systems at NIST.

In FY 2002, we provided system administration for thenew Grants Management Information System. For theNIST e-Approval system, we completed the rollout andtraining for 62 percent of the 3,200 targeted users;more than 10,000 actions were processed through e-Approval in FY 2002. We supported the developmentof the e-Approval-based NIST Associate InformationSystem. For the NIST KnowledgeNet, we implementeduser-requested enhancements, a help module, and anexternal reporting capability. Our support for theCommerce Administrative Management System (CAMS)continued, with a FY 2003 deployment date. Bysupporting these critical services, ITL ensures a secureand efficient business environment throughout theagency. The website is http://www.itl.nist.gov/div896/.

C H I E F I N F O R M A T I O N O F F I C E R ( C I O )

The Office of the NIST CIO resides within ITL. The CIO provides centralized business-level planning andprogram management for all NIST information tech-nology (IT) resources and programs. The office adminis-ters the NIST IT Strategic Plan, the NIST IT OperationsPlan, the NIST Systems Development Life Cycle, theNIST IT Architecture Plan, and NIST’s implementation of the government-wide 508 Accessibility program. InFY 2002, we initiated the Security Access ControlProject and issued NIST policies on Persistent Cookies.We represented NIST at Department of Commerce(DoC)-sponsored groups and oversaw the actions of theNIST Information Technology Services Planning Team(ITSPT). We also implemented the IT Capital AssetPlanning for Supercomputing funds and initiated aconsolidated NIST IT services contract. We planned forthe implementation, in FY 2003, of an entirely new CIOorganization.

D E S K T O P C O M P U T I N G

ITL’s managed desktop program includes over 1,000desktops to date. Our asset management programadvanced in FY 2002 with the development of a web-based IT Asset system, which was integrated withthe LANDesk automated inventory capabilities. Welaunched a PC Buying Service so NIST staff canpurchase a computer that meets ITSPT requirements forimplementation of a NIST-wide uniform desktop system.Over 70 percent of NIST PCs purchased during the yearwere bought through the buying service, a total of morethan 800 computers. We upgraded the desktop model toa Pentium IV and added laptop and high-end worksta-tion models. The website ishttp://www.itl.nist.gov/itl_serv.html.

33

ACCOMPLISHMENTSOF OUR SERVICES PROGRAM

The PC Buying Service Team offers a convenient way to purchase a

computer that meets the Information Technology Services Planning

Team's (ITSPT) requirements for implementation of a NIST-wide

uniform desktop system. Team members include Ricky Hilderbrand,

Jason Barnard, Eric Konig (leader), Paul DeBruin, Denise Miller, and

Dan Diamond.

E N T E R P R I S E S E R V E R S

ITL operates the central NIST servers, such as e-mail,calendar, and application servers. In FY 2002, weimplemented disaster recovery procedures and capabili-ties for all major systems. We completed a full disasterrecovery test for administrative processing andcompleted local disaster recovery tests for othersystems. We implemented a new high availabilitycentral e-mail server. For web services, we moved to ahigh availability environment for internal web servicesand implemented a web application development envi-ronment. The website is http://www.itl.nist.gov/div896.

I T A C C E N T R A L H E L P D E S K

To provide improved IT support and response time toour NIST customers, ITL launched its iTAC Central HelpDesk in Gaithersburg and Boulder. Since its inception,ITAC has averaged over 1,500 requests per month. Wedeveloped a monthly service metrics report and imple-mented multi-mode outage notification processes.

I N F O R M A T I O N T E C H N O L O G Y S E C U R I T YO F F I C E ( I T S O )

ITSO provides NIST with a central resource foraddressing security issues, providing security trainingto the NIST staff, responding to incidents, and issuingsecurity policy, procedures, and guidance. In FY 2002,ITSO developed and issued a Password ManagementPolicy and acquired 100 percent user compliancecertification; directed the deployment of the e-NISTDMZ Firewall to protect over 75 NIST public servers onthree networks and the NIST modem pool; sponsoredseveral specialized security training sessions andprovided IT security training to 100 percent of the NISTstaff; managed the first annual NIST IT Security Day atGaithersburg and Boulder, attended by over 2,000NIST staff; developed draft policies on certification andaccreditation, and patch management, and updated theNIST IT Security Program Policy; developed and issued


34

guidance on several security issues including systemhardening, risk assessments, contingency planning, andcertification and accreditation; developed and directedthe certification and accreditation program, completingcertification and accreditation of 100 percent of NIST’ssystems; responded, directed, and assisted with theresponse and cleanup of virus-related and hacker inci-dents; directed the completion of FY 2002 GovernmentInformation Security Reform Act requirements, includingself assessments of 100 percent of NIST’s systems;participated in technical security reviews of severalnew NIST applications and systems, such as e-Approval,Grant Management Information System, CommerceAdministrative Management System, Data Warehouse,etc.; and participated in the Office of Inspector General(OIG) Government Information Security Reform Actevaluation of NIST and the OIG audit of NIST financialsystems. The ITSO website is located athttp://www.nist.gov/its.

N E T W O R K I N G

ITL provides a wide range of networking services tothe NIST staff. In FY 2002, we upgraded webcastingperformance and encoding capabilities at NIST, while webcasting two or three events per week. Wecompleted the migration of three buildings to universalwiring. We implemented a fiber infrastructure for mostbuildings to support the Gigabit backbone network. Weimplemented the network infrastructure for the e-NISTfirewall and public network. We maintained a 99.8percent availability of NISTnet. Our telecommunicationsstaff continued to provide reliable service to NIST users,while implementing a prototype teleworker capability.Security audits were also performed in Gaithersburg andBoulder. The website is http://www.itl.nist.gov/div896.

S C I E N T I F I C C O M P U T I N G

NIST scientists and engineers require complex, sophisti-cated high-performance scientific computing capabili-ties. ITL provides standardized scientific computingarchitectures that allow ready access to and networkingof high-end workstations, parallel computing clusters,and supercomputing facilities (both internal andexternal to NIST) and enable maximum use of collectivememory and processing capacities, as necessary, for theconduct of NIST research. In FY 2002, we retired anSP2 cluster. We completed an initial test of the GlobusGrid computing environment. In our PC Cluster, weupgraded from 64 to 128 CPUs. Lastly, we coordinateda survey of user requirements for scientific computing atNIST. The website is http://www.itl.nist.gov/div896.

The original iTAC team:

Tom Lacko, Linda Helfer

(Team Leader), Laura Hanlon,

Carolyn Holmes, Angela Beattie,

Charlette Prather, Stephanie

Auchmoody, and Omar Andrade.


ITL’sresearch, measurement, and standards programs are greatlyenhanced by our interactions with

partners in industry, academia, government, and standards developers. In addition to three CooperativeResearch and Development Agreements (CRADAs) withindustry in FY2002, we participated in many consortiaand industry interest groups, including the following:

A D V A N C E D T E L E V I S I O N S Y S T E M SC O M M I T T E E ( A T S C )

The ATSC establishes voluntary technical standards foradvanced television systems. ITL staff members AlanMink, Robert Snelick, and Wayne Salamon participatein T3/S17, Digital TV Applications SoftwareEnvironment (DASE) Application Programming Interface(API). ITL has been a catalyst for the approval of aninteractive digital television standard.

A M E R I C A N N A T I O N A L S T A N D A R D SI N S T I T U T E ( A N S I )

ANSI has served as administrator and coordinator of the U.S. private sector voluntary standardization systemfor 80 years. Michael Hogan serves on the ANSIInformation Systems Standards Board (ISSB). ThomasRhodes and Lisa Carnahan serve on the ANSIHealthcare Informatics Standards Board (HISB). NIST/ITLis an ANSI-accredited standards developer. MichaelMcCabe is the contact for the ANSI/NIST-ITL 1/2000,Data Format for the Interchange of Fingerprint, Facial, & SMT Information standard.

35

INDUSTRY ANDINTERNATIONAL INTERACTIONS

A S T M

ASTM (American Society for Testing and Materials) is a not-for-profit organization that provides a forum forproducers, users, ultimate consumers, and those havinga general interest (representatives of government andacademia) to meet on common ground and write standards for materials, products, systems, and services.Through the participation of Nien-Fan Zhang inTechnical Committee E-11, ITL promotes quality instatistics.

Lattice Boltzman simulation of the

Taylor-Tomotika instability of a

fluid thread confined within a tube.


B A S I C L I N E A R A L G E B R AS U B P R O G R A M S ( B L A S ) T E C H N I C A LF O R U M

The BLAS Technical Forum is an industry/government/academic working group, which is developing community standards for sparse matrix operations andextending the BLAS to new domains. Roldan Pozochairs the sparse matrix subcommittee. Through participation in the forum, ITL contributes to the development of interface specifications and referenceimplementations for BLAS.

B I O M E T R I C A P P L I C A T I O NP R O G R A M M I N G I N T E R F A C E ( B I O A P I )C O N S O R T I U M

The BioAPI Consortium is an organization of over 100members including IT organizations, biometric vendors,and users. It is international in nature (30 percent of themembers are from overseas). The Consortium developedthe BioAPI specification. It became an ANSI-INCITS

standard (InterNational Committee for InformationTechnology Standards) in February of 2002 through theINCITS fast track process: ANSI/INCITS 358, the BioAPIspecification v1.1. Fernando Podio is a member of theBioAPI Steering Committee and chairs the BioAPIExternal Liaisons Task Group, which was responsible for transitioning the specification to formal standardsbodies.

B I O M E T R I C C O N S O R T I U M ( B C )

The Biometric Consortium serves as the U.S. government'sfocal point for research, development, test, evaluation,and application of biometric-based personalidentification/verification technology. Fernando Podioco-chairs the Biometric Consortium as well as theNIST/Biometric Interoperability, Performance andAssurance Working Group and the Common BiometricExchange File Format Group. ITL was instrumental inthe development of this standard.

C O M M O N C R I T E R I A M A N A G E M E N TC O M M I T T E E

This group of 14 industrialized nations formed a cooper-ative agreement to recognize the results of securitytesting of IT products and systems conducted by accredited, independent, third party testing laboratories.Stuart Katzke chairs the Common Criteria ManagementCommittee Executive Subcommittee. ITL's leadership inthis area benefits government and industry by increasingthe availability of commercially tested IT productsnecessary to build more secure systems and networksfor critical infrastructure applications.

C R O S S I N D U S T R Y W O R K I N G T E A M( X I W T )

The XIWT is a multi-industry coalition of informationtechnology companies that attempts to identify commonissues and concerns in IT strategic directions and policymatters. ITL’s participation assists in this process byproviding technical guidance that bridges the gapbetween the research, standardization, and policycommunities. Doug Montgomery represents NIST on the executive committee.

36

ITL is developing interoperable open

standards, guidelines, and specifications

for biometric systems.


D V D A S S O C I A T I O N ( D V D A )

The DVD Association represents standards developers,software developers, disc and electronics manufacturers,government agencies, and content developers for DVDtechnology and associated technologies. VictorMcCrary represents ITL. Through our representation,we are facilitating standards, interoperability, andcompatibility for writable DVD media, disc drives, and consumer electronic players.

F I N A N C I A L S E R V I C E S T E C H N O L O G YC O N S O R T I U M ( F S T C ) F A S T W O R K I N GG R O U P

ITL participates with FSTC in its FAST (Financial Agent Secure Transaction) project. FAST addresses e-commerce participants with concerns about valididentities for other web parties, characteristics beingclaimed, promised or contracted for (examples arepayment guarantee, shipping reliability or rights ofproduct use, and privacy for personal data and businessmarketing information. Gordon Lyon represents ITL. Our support promotes economical trust and assurancefor e-commerce.

F O R U M O N P R I V A C Y A N D S E C U R I T Y I NH E A L T H C A R E

Sponsored by the National Information AssurancePartnership (NIAP, a joint National Institute of Standardsand Technology and National Security Agency initiative)and the Healthcare Open Systems and Trial (HOST), the forum is incorporated as a nonprofit charitableorganization consisting of participating members fromapproximately 50 healthcare organizations. ArnoldJohnson represents ITL, which with support from theNIST Advanced Technology Program (ATP) and NIAP, is developing guidance material and reference CommonCriteria (CC)-based profiles to assist, demonstrate, andeducate the healthcare community in specifyingProtection Profile security requirements using theISO/IEC 15408 CC standard.

H E A L T H L E V E L 7 ( H L 7 )

HL7 is an ANSI-accredited standards developing organization that provides standards for the exchange,management and integration of data to support clinicalpatient care and the management, delivery, and evalua-tion of healthcare services. Specifically, HL7 seeks tocreate flexible, cost-effective approaches, standards,guidelines, methodologies, and related services forinteroperability between healthcare informationsystems. Lisa Carnahan and John Barkley represent ITL in the HL7 Conformance Special Interest Group.

H I G H D E N S I T Y S T O R A G E A S S O C I A T I O N( H D S A )

The HDSA has a well-defined charter to focus on auto-mated, storage-centric technologies known as jukeboxor library storage and acts as a centralized communi-cator among the industry, resellers, and users. The groupidentifies interoperability, connectivity, and compatibilityissues and develops specifications to enhance thestorage infrastructure. Oliver Slattery represents ITL,which provides a neutral platform to perform testing anddevelopment that makes it possible for the industry toimprove the interoperability and performance of theirproducts for the increased demands for high-densitydata storage.

37

Lattice Boltzmann simulation of breakup of a

fluid thread confined between parallel plates.


I N S T I T U T E O F E L E C T R I C A L A N DE L E C T R O N I C S E N G I N E E R S ( I E E E )

The world's largest technical professional society, IEEEfocuses on advancing the theory and practice of electrical, electronics and computer engineering, andcomputer science. Daniel Benigni serves on the Boardof Governors of the IEEE Standards Association. SharonLaskowski participates in P2001, Web Best PracticesWorking Group. David Cypher, Robert Van Dyck, NadaGolmie, and Nader Moayeri participate in IEEE 802.15,Working Group for Wireless Personal Area Networks,and Nader Moayeri also attends IEEE 802.16, WorkingGroup on Broadband Wireless Access Standards. Finally,Larry Reeker represents ITL on the Industrial AdvisoryBoard of the Software Engineering Body of Knowledge(SWEBOK) project, which seeks to identify the body ofknowledge of software engineering and to providesuitable access to that knowledge.

I N T E R N A T I O N A L C O M M I T T E E F O RI N F O R M A T I O N T E C H N O L O G YS T A N D A R D S ( I N C I T S )

INCITS's mission is to produce market-driven, voluntaryconsensus standards in a wide range of IT areas.Michael Hogan serves on the INCITS Policy andProcedures Committee. ITL technical staff participate inmany working groups, including biometrics (chaired byFernando Podio), coding of audio, picture, multimediaand hypermedia information (chaired by MikeRubinfeld), data representation, IT access interfaces, IT security techniques, MPEG development, opendistributed processing, and still image coding. Throughthese interactions, we contribute our expertise to thedevelopment of IT industry standards.

I N T E R O P E R A B L E M E S S A G E P A S S I N GI N T E R F A C E ( I M P I )

ITL actively participates in the development of standardsand conformance testing for IMPI. William George, JohnHagedorn, and Judy Devaney represent ITL; our contri-butions benefit industries that use a parallel code acrossdifferent vendor systems, including the embeddedcomputing community.

I N T E R N A T I O N A L F E D E R A T I O N F O RI N F O R M A T I O N P R O C E S S I N G ( I F I P )

ITL’s Ronald Boisvert chairs the IFIP Working Group onNumerical Software (WG2.5), which is part of the IFIPTechnical Committee on Programming Languages (TC2). WG2.5 strives to improve the quality of numericalcomputation by promoting international cooperation in the development of languages, guidelines, tools, and standards for numerical software.

I N T E R N A T I O N A L O R G A N I Z A T I O N F O RS T A N D A R D I Z A T I O N ( I S O )

The ISO is a worldwide federation of national standardsbodies from some 140 countries, one from eachcountry. Nien-Fan Zhang serves on the Committee onReference Materials (REMCO) WG1 for ISO Guide 35.

38

Jack Wang, Hari Iyer, Duane Boes, and Jolene Splett discuss issues in

the ISO Guide to the Expression of Uncertainty in Measurement.


Zhang and Nell Sedransk participate in the managementgroup for ISO TC 69, Statistical Methods. Our contribu-tions facilitate the development of international agree-ments that are published as International Standards.

I N T E R N E T E N G I N E E R I N G T A S K F O R C E( I E T F )

ITL contributes to the technical development of theInternet through participation in the IETF, which is a large open international community of networkdesigners, operators, vendors, and researchersconcerned with the evolution of the Internet architectureand the smooth operation of the Internet. DougMontgomery, Scott Rose, and Sheila Frankel participatein the Internet Area; David Griffith participates in theSUB-IP Area; Mark Carson, Leonard Miller, DougMontgomery, and Nader Moayeri participate in theRouting Area; Okhee Kim, Doug Montgomery, SheilaFrankel, Nelson Hastings, and Tim Polk participate in theSecurity Area; and Doug Montgomery and MudumbaiRanganathan participate in the Transport Area.

J A V A ™ G R A N D E F O R U M

The Java™ Grande Forum (JGF) is an open workinggroup of industrial, government and academicresearchers, and software developers interested inimproving the Java™ language and environment fortechnical computing applications. Roldan Pozo andRonald Boisvert co-chair the Numerics Working Group,which has worked with Sun Microsystems to imple-ment changes in Java’s specifications which admitmuch faster execution (up to ten times faster) forcomputing-intensive applications.

J T C 1 T A G

The Joint Technical Committee 1 (JTC1) develops,maintains, promotes, and facilitates IT standardsrequired by global markets meeting business and userrequirements concerning the design and development of IT systems and tools. Michael Hogan represents ITL on the U.S. TAG to ISO/IEC JTC1 on InformationTechnology, ensuring that ITL has a voice in global IT standards development.

M I C R O M A G N E T I C M O D E L I N G A C T I V I T YG R O U P ( M U M A G )

muMAG is an organization of industrial, government,and academic researchers investigating fundamentalissues in micromagnetic modeling through the establish-ment of standard problems for testing micromagneticsimulation software and the development of a publicdomain reference implementation of micromagneticsimulation software. Michael Donahue and DonaldPorter represent ITL on the steering committee.

N A T I O N A L I N F O R M A T I O N A S S U R A N C EP A R T N E R S H I P ( N I A P )

NIAP is a NIST/NSA partnership for testing methods andmeasures to ensure the quality of information securitysystems. ITL’s Ronald Ross serves as Director of NIAP.Our involvement helps to ensure that the security testing needs of federal and industry IT consumers and producers are met.

N O R T H A M E R I C A N O P E N M A T HI N I T I A T I V E ( N A O M I )

Open Math is a standard for communicating mathemat-ical objects between computer programs. Bruce Millerrepresents ITL in this organization.

39

Comparison of experimental data with a lattice

Boltzmann simulation of fluid thread breakup.


O R G A N I Z A T I O N F O R T H EA D V A N C E M E N T O F S T R U C T U R E DI N F O R M A T I O N S T A N D A R D S ( O A S I S )

OASIS is an international consortium dedicated toaccelerating the adoption of product-independentformats based on public standards. These standardsinclude XML, HTML, and CGM as well as others thatare related to structured information processing. LynneRosenthal, Lisa Carnahan, Michael Kass, and Mark Skallrepresent ITL. ITL’s participation includes the develop-ment of conformance tests for these standards.

O B J E C T M A N A G E M E N T G R O U P ( O M G )

OMG is a nonprofit international consortium of 500organizations whose mission is to research, develop,and promote the use of object-oriented technology fordistributed systems development. John Barkley is ITL'sprincipal representative to OMG.

O P E N G R O U P

The OPEN GROUP focuses on the development andimplementation of a secure and reliable IT infrastruc-ture. Shu-Jen Chang participates in Security Services.

O P T I C A L I N T E R N E T W O R K I N G F O R U M( O I F )

The OIF fosters the development and deployment ofinteroperable products and services for data switchingand routing using optical networking technologies.David Su and David Griffith represent ITL in theArchitecture, Internetworking, and Management groups.

O P T I C A L S T O R A G E T E C H N O L O G YA S S O C I A T I O N ( O S T A )

OSTA is an international trade association dedicated to promoting the use of writable optical technology for storing computer data and images. Xiao Tang represents ITL.

R O S E T T A N E T E B U S I N E S S S T A N D A R D SC O N S O R T I U M

RosettaNet is an independent, self-funded, nonprofitconsortium dedicated to the development and deployment of standard electronic commerce interfacesto align the processes between IT supply chain partners on a global basis. Thomas Rhodes represents ITL.

S M A R T C A R D S E C U R I T Y U S E R S G R O U P( S C S U G )

SCSUG develops and promotes the use of standardizedsecurity requirements to ensure that the device securityand data protection needs of the smart card end usersare appropriately represented and met in smart cardproducts. SCSUG is composed of the major worldwidecredit card brands (financial payment systems):American Express®, Europay, JCB, MasterCard®,Mondex™, and Visa®. Stuart Katzke represents ITL.

40

The figure shows a visualization of

a cloud water dataset derived from

a sample dataset and program

provided by the Open Visualization

Data Explorer (OpenDX) software

package.

Portion of a sandstone

sample used in the sim-

ulation of fluid flow

through porous media.


S O C I E T Y O F M O T I O N P I C T U R E A N DT E L E V I S I O N E N G I N E E R S ( S M P T E )

SMPTE is an international technical society devoted toadvancing the theory and application of motion-imaging technology. Randall Easter participates in theStudy Group on Conditional Access for Digital Cinema.Charles Fenimore represents ITL on the Video QualityExperts Group.

V I D E O E L E C T R O N I C S S T A N D A R D SA S S O C I A T I O N ( V E S A )

VESA promotes and develops timely, relevant, opendisplay and display interface standards, ensuring interoperability and encouraging innovation and marketgrowth. John Roberts represents ITL on four committeesin this organization. As a member of VESA, ITL partici-pates in the technical development of standards anddevelops laboratory implementations of proposed interface architectures.

W E B 3 D C O N S O R T I U M

The Web3D Consortium provides an open forum for thecreation of open standards for Web3D specificationsand accelerates the worldwide demand for productsbased on these standards through the sponsorship ofmarket and user education programs. Sandy Resslerrepresents ITL.

W O R L D W I D E W E B C O N S O R T I U M ( W 3 C )

The W3C is an international industry consortiumcreated to lead the web to its full potential by devel-oping common protocols that promote its evolution and ensure its interoperability. Mark Skall serves on theAdvisory Committee. ITL staff members serve on a hostof committees within this organization, including theQuality Assurance Activity, the Cascading Stylesheets(CSS) Working Group (WG), the Document ObjectModel (DOM) WG, the Extensible Markup Language(XML) Protocol WG, the Extensible Stylesheet Language

(XSL) WG, the Math WG, the Schema WG, the SYMMWG, and the XML Working Group. ITL’s contributionsfacilitate web interoperability.

X 9

X9 develops, establishes, publishes, maintains, andpromotes standards for the financial services industry in order to facilitate delivery of financial products andservices. Morris Dworkin participates in X9F, Data andFinancial Information Security Committee, and X9F.1,Cryptographic Tool Standards and Guidelines. ElaineBarker, Lawrence Bassham, Sharon Keller, andAnnabelle Lee serve as Editors in X9F.1. Elaine Barkerattends X9F.3, Cryptographic Protocols, and AnnabelleLee participates in X9F.5, Digital Signature andCertificate Policy. ITL promotes the security of the finan-cial services industry through participation in this forum.

41

Simulation of phase

separation of a

mixture of two

fluids under shear.


D E P A R T M E N T O F C O M M E R C E 2 0 0 2M E D A L A N D N I S T A W A R D S

John Barkley, Software Diagnostics and ConformanceTesting Division, and David Ferraiolo and RichardKuhn, both of the Computer Security Division, receivedthe Department of Commerce Gold Medal for scien-tific/engineering achievement in creating, developing,and transferring the Role-Based Access Control (RBAC)technology to private industry.

Michael Donahue and Donald Porter, Mathematicaland Computational Sciences Division, received, withNIST colleague Robert McMichael, the Bronze Medal

Award for scientific andengineeringachievement inthe advancementof computationaltechniques forsimulating thebehavior ofmicromagneticmaterials.

Walter Liggett, Jr., StatisticalEngineering Division, alongwith NIST colleagues SamuelLow and Jun-Feng Song,received the 2002 Judson C.French Award for developinga framework for providingtraceability to U.S. nationalstandards in the area ofRockwell C-scale hardnesstesting.

William Majurski, SoftwareDiagnostics andConformance TestingDivision, received the BronzeMedal Award for scientificachievement in the designand development of distrib-uted models, architectures,and reference implementa-tions of healthcare informa-tion systems.

E X T E R N A L R E C O G N I T I O N

William Burr, David Cooper, and Tim Polk, ComputerSecurity Division, were recognized at a ceremony at theWhite House Conference Center at the inauguration ofthe Federal Bridge Certification Authority (FBCA). Burrwas recognized as a "Founding Father" of the FBCA.Cooper and Polk were cited for their unparalleledcontribution to the development and operation of theFBCA, which provides a new secured way for federal

agencies toexchangeinformation,with eachother andwith theirconstituents.

42

STAFF RECOGNITION

(from left) Donald L. Evans, Secretary of Commerce,

Rick Kuhn, John Barkley, Dave Ferraiolo, Benjamin

Wu, Deputy Under Secretary, Technology

Administration, and Arden Bement, NIST Director


Wo Chang, InformationAccess Division, receivedrecognition from the WorldWide Web Consortium(W3C)'s SynchronizedMultimedia (SYMM)Working Group (WG) for hiscontribution of hosting andediting the SynchronizedMultimedia IntegratedLanguage (SMIL) 2.0 interop-erability test suite. W3C viewed the interoperabilitytest suite as vital for SMIL 2.0 to become a W3CRecommendation. The SMIL 2.0 Recommendationrepresents a cross-industry agreement on an XML-based language that allows authors to write interactivemultimedia presentations.

The Network Journalhonored Alicia Clay,Computer Security Division,in their annual 40-Under-Forty Achievement Awardsprogram. The awards recog-nize individuals acrossindustry lines that haveachieved significant levels of success and madesubstantial contributions intheir areas of business and community service. Clay organizes regional workshops for small businesses across the nation.

Dianne O'Leary (left) and David Gilsinn,Mathematical and Computational Sciences Division,together with NIST colleague Geraldine Cheok (right),won the Best Paper Award for their contribution to the19th Annual Symposium on Automation and Robotics

in Construction (ISARC 2002). Their paper, entitled"Reconstructing Images of Bar Codes for ConstructionSite Object Recognition," was selected as top paper ofthe 88 manuscripts from 20 countries that wereaccepted for presentation. Their paper describes techniques for the automated recognition of bar codesfrom LADAR (laser distance and ranging) optics.

Michael Hogan, ITL Office of the Director, received theNational Committee forInformation TechnologyStandards (NCITS) 2001Chairman’s Annual Award.Hogan was honored for “hisdedication to NCITS andsuccess in expanding itsprogram of work. His long-term

commitment to procedures,institutional memory and the ‘good of the organization’serve as a strong foundation for the vision and opportu-nities he brings to NCITS.”

Kevin Mills (center), Advanced Network TechnologiesDivision, led an ITL research team that received the2001 Bytes for the Buck award, given annually toDARPA’s Active Networks project judged most produc-tive and cost-effective. In addition to Mills, the teamincluded Stefan Leigh (left) and Andrew Rukhin (right),Statistical Engineering Division, and Virginie Galtier andYannick Carlinet, guest scientists from Loria UniversitéNancy and Ecole des Mines Nancy, respectively. The ITL team focused on developing a standard means tospecify processor (CPU) demands for mobile computerprograms, also known as mobile code.

43


Victor McCrary, Chief, ConvergentInformation Systems Division,received the prestigious Percy JulianAward from the NationalOrganization for the ProfessionalAdvancement of Black Chemists andChemical Engineers (NOBCCHE).This is the highest award given byNOBCCHE for significant achieve-ment in pure and applied research.

Geoffrey McFadden, Mathematicaland Computational SciencesDivision, was elected a Fellow ofthe American Physical Society (APS).McFadden was recognized "forfundamental insights into the effectof fluid flow on crystal growth andfor an innovative approach to phasefield methods in fluid mechanics."McFadden has published more

than 100 papers on crystal growth with colleagues inacademia and at NIST.

Judith Newton, SoftwareDiagnostics and ConformanceTesting Division, received theNational Committee for InformationTechnology Standards (NCITS) 2001Merit Award. Newton was recog-nized for her dedication as anofficer and project editor in thedevelopment of data and metadatastandards, as well as successful

outreach efforts in emphasizing the importance ofmetadata standardization to the user community.

Fernando Podio, ConvergentInformation Systems Division,received recognition from theFederal Laboratory Consortium forTechnology Transfer (FLC) for hisleadership role in the developmentof interoperability and data inter-change standards and specificationsfor biometric technologies and thetransfer of these specifications to theprivate sector.

Mike Rubinfeld, InformationAccess Division, received a2002 Merit Award from theInterNational Committee forInformation TechnologyStandards (INCITS). The awardcites "substantial managementaccomplishments as theChairman of the INCITSTechnical Committee L3,Coding of Audio, Picture, Multimedia, and HypermediaInformation, that led to key international standards."

Nell Sedransk, Chief, StatisticalEngineering Division, wasnamed a Fellow of theAmerican Statistical Association(ASA). Sedransk was recog-nized "for outstanding statisticalleadership in our nationalmetrology program, for consul-tative contributions in thestatistics of oncology, for devel-oping methods to achieve moreethical clinical trials, and forservice to the profession."

Ray Snouffer, ComputerSecurity Division, received theprestigious Arthur S. FlemmingAward, which is given annuallyby George WashingtonUniversity to recognize thosewho have performedoutstanding and meritoriouswork for the federal govern-ment. Snouffer was recognizedin the Applied Science category for his sustained contributions and leadership in improving security of commercial cryptographic products and thus thesecurity of federal agencies and private sector organiza-tions. Snouffer heads ITL’s Cryptographic ModuleValidation Program.

44

Founded in 1901, the National Institute of Standards and Technology (NIST) isa non-regulatory federal agency within the U.S. Commerce Department'sTechnology Administration. NIST's mission is to develop and promote meas-urements, standards, and technology to enhance productivity, facilitate trade,and improve the quality of life. NIST carries out its mission in four coopera-tive programs:

the NIST Laboratories, conducting research that advances the nation'stechnology infrastructure and is needed by U.S. industry to continuallyimprove products and services;

the Baldrige National Quality Program, which promotes performanceexcellence among U.S. manufacturers, service companies, educational organ-izations, and healthcare providers; conducts outreach programs and managesthe annual Malcolm Baldrige National Quality Award which recognizes per-formance excellence and quality achievement;

the Manufacturing Extension Partnership, a nationwide network of localcenters offering technical and business assistance to smaller manufacturers;and

the Advanced Technology Program, which accelerates the developmentof innovative technologies for broad national benefit by co-funding R&D part-nerships with the private sector.

NIST has an operating budget of about $839 million and operates in two loca-tions: Gaithersburg, Maryland and Boulder, Colorado. NIST employs about3,000 scientists, engineers, technicians, and support and administrative per-sonnel. The website is http://www.nist.gov.

About ITL

For more information about ITL, contact:

Information Technology LaboratoryNational Institute of Standards and Technology100 Bureau Drive, Stop 8900Gaithersburg, MD 20899-8900

Telephone: (301) 975-2900Facsimile: (301) 840-1357E-mail: [email protected] site: http://www.itl.nist.gov

NOTE: Reference to specific commercial products or brands is for information purposes only; no endorsement or recommendation by the National Institute of Standardsand Technology, explicit or implicit, is intended or implied.

OPNET is a registered trademark of OPNET Technologies.

Sun, Sun Microsystems, the Sun Logo, Solaris, Java, and Jini are trademarks or registeredtrademarks of Sun Microsystems, Inc. in the United States and other countries.

*Bluetooth SIG Inc. U.S.A. owns the Bluetooth trademarks.

Information Technology Laboratory technical accomplishments · spatial localization techniques to...

Documents

Transcript of Information Technology Laboratory technical accomplishments · spatial localization techniques to...