Overview

From Jpl Rebadging

Overview

The Jet Propulsion Laboratory has initiated a new JPL rebadging process for its employees, contractors, and affiliates. After negotiating with NASA Headquarters, JPL Director Charles Elachi agreed to the new process, which will produce new ID cards in conformance with FIPS 201 (Federal Information Processing Standards Publication 201), a United States federal government standard that specifies Personal Identity Verification (PIV) requirements for Federal employees and contractors. FIPS 201 is a response to Homeland Security Presidential Directive 12 (HSPD-12).

The new JPL badging process is controversial, for a variety of reasons (see Controversy section below). One of the concerns voiced is the lack of respect for privacy of employees, because the badging procedure requires each employee to answer a personal questionnaire, sign a waiver permitting a background investigation at any level of detail, have fingerprints taken, and carry a new ID card with the fingerprints readable by RFID technology. This level of personal intrusion has led to questions that the JPL Honor Code of treating employees with dignity and respect is being violated.

JPL Badges are identification cards issued to employees, contractors, affiliates, and retirees of JPL for the purpose of permitting unescorted access to the JPL facility. They are also used for access to controlled areas within the laboratory, and a bar code on it is scanned for a variety of routine uses such as receiving packages and recording attendance at training sessions.

JPL management contends that no privacy related information will be stored on the new ID card.<ref name="hspd12"/> Some employees wonder how JPL management defines "privacy related information", because there is agreement that the new ID card will utilize passive RFID technology to store the following attributes:

• JPL User Name
• Electronic IT Certificate
• Citizenship
• Personal Identification Number (PIN) Unique to Issuer
• Two Biometric Fingerprints
• Facial photo

An electromagnetic shield would need to cover the new ID card in order to prevent a remote RFID reader from accessing the data stored on the new ID card.

Information and a description of the existing JPL badge and NASA One badge is also available.

Rebadging process

JPL management has outlined the following steps in order to obtain a new JPL ID card:

• Employee supplies name, birthday, SSN, and city of birth to JPL, if they have not previously done so
• The Office of Protective Servicees sends out email requesting employee to fill out online form
• Employee fills out form 85 or 85P, as directed, using the online e-QIP system, within 10 days. This process takes 1-3 hours.
• Employee prints out release forms, brings them to the security office, and signs in presence of officer
• JPL Security scans release form, encrypts it, and sends it to the U.S. government.
• A fresh set of fingerprints are taken (even if they were taken for One NASA badge)
• A picture is taken (possibly two pictures, one with One NASA Camera, one with new ID card camera)
• U.S. Office of Personnel Management performs background investigation
• (Attendees at the second "process" meeting held to discuss the process were explicitly informed that OPM simply collects the data and provides it to NASA. NASA employees have been trained to do the evaluation of the collected information, and NASA will inform Caltech if the employee has been cleared for access to the facility.)
• If OPM permits it, a badge is issued
• If adverse information is reported, employee is notified directly by OPM [as per above, we were recently told that NASA notifies the employee in the event of adverse information - not OPM], and has 30 days to adjudicate. After 30 days, the employee will be barred from accessing the laboratory, and employment will be terminated.

The process is repeated every 5 years. Those who have a security clearance are exempt from the process and can immediately acquire their badge.