Computer-Assisted Passenger Prescreening System

Last updated

The Computer-Assisted Passenger Prescreening System (CAPPS) is a counter-terrorism system in place in the United States air travel industry that matches passenger information with other data sources. The United States Transportation Security Administration (TSA) maintains a watchlist, pursuant to 49 USC § 114 (h)(2), [1] of "individuals known to pose, or suspected of posing, a risk of air piracy or terrorism or a threat to airline or passenger safety." The list is used to pre-emptively identify terrorists attempting to buy airline tickets or board aircraft traveling in the United States, and to mitigate perceived threats.

Contents

Overview

CAPPS systems rely on what is known as a passenger name record (PNR). When a person books a plane ticket, certain identifying information is collected by the airline: full name, date of birth, address, etc. This information is used to check against another data source (including the TSA No-Fly List, the FBI Ten Most Wanted Fugitive List, and other databases) and assign a terrorism "risk score" to that person. High risk scores require the airline to subject the person to extended baggage and/or personal screening, and to contact law enforcement, if necessary.

CAPPS I

CAPPS I was first implemented in the late 1990s, in response to the perceived threat of U.S. domestic and international terrorism. The U.S. government started to implement counter-terrorism measures after several bomb attacks occurred, including the 1995 Oklahoma City bombing, the 1996 Olympics bombing, and the 1998 bombings of two U.S. embassies in East Africa. CAPPS I was administered by the Federal Bureau of Investigation (FBI) and the Federal Aviation Administration (FAA). CAPPS screening selected passengers for additional screening of their checked baggage for explosives. CAPPS selectees did not undergo any additional screening at passenger security checkpoints. [2]

September 11, 2001 attacks

On the morning of the September 11 attacks (9/11), several of the hijackers were selected by CAPPS. Wail al-Shehri and Satam al-Suqami were selected for extra screening of their checked bags before they boarded American Airlines Flight 11 at Logan International Airport in Boston, Massachusetts. Waleed al-Shehri was also selected, but since he had checked no bags, the CAPPS selection had no effect on him. [2] Mohamed Atta was selected by CAPPS when he checked in at Portland International Jetport. [3]

All five of the hijackers on American Airlines Flight 77 were CAPPS selectees, with Hani Hanjour, Khalid al-Mihdhar, and Majed Moqed chosen by the CAPPS criteria. Nawaf al-Hazmi and Salem al-Hazmi were selected because they did not provide adequate identification, and had their checked bags held until they boarded the aircraft. [2]

Ahmed al-Haznawi was the only hijacker selected of those on United Airlines Flight 93, and none of the hijackers of United Airlines Flight 175 were selected by CAPPS. [2]

After 9/11

In response to the 9/11 attacks, the U.S. government authorized the creation of the Transportation Security Administration (TSA) to oversee airport security, which was previously handled by private contractors. It which was signed into law by President George W. Bush on November 19, 2001. The agency was initially placed under the United States Department of Transportation but was moved to the Department of Homeland Security when that department was formed on March 9, 2003. In November 2001, control of CAPPS was transferred to the TSA, where it has "... expanded almost daily as Intelligence Community (IC) agencies and the Office of Homeland Security continue to request the addition of individuals ..." [4]

In 2003, the Transportation Security Administration (TSA) presented a proposal for an expanded system (CAPPS II), which was reviewed by Congress and later canceled by the United States Department of Homeland Security (DHS).

The Computer Assisted Passenger Prescreening System II was a proposal for a new CAPPS system, designed by the Office of National Risk Assessment (ONRA), a subsidiary office of the TSA, with the contracted assistance of Lockheed Martin. Congress presented the TSA with a list of requirements for a successor to CAPPS I. Some of those requirements were:

Like its predecessor, the CAPPS II proposal would rely on the PNR to uniquely identify people attempting to board aircraft. It would expand the PNR field to include a few extra fields, like a full street address, date of birth, and a home telephone number. It would then cross-reference these fields with government records and private sector databases to ascertain the identity of the person, and then determine a number of details about that person. Law enforcement would be contacted in the event that the person was either present on a terrorist or most-wanted list or had outstanding federal or state arrest warrants for a violent crime.

Otherwise, the software would calculate a "risk score" and then print a code on the boarding pass indicating the appropriate "screening level" for that person: green (no threat) indicates no additional screening, yellow (unknown or possible threat) indicates additional screening, and red (high-risk) indicates prevention from boarding and deferral to law enforcement. Exactly how this risk score would be calculated was never disclosed nor subject to public oversight of any kind outside of the TSA.

The CAPPS II system was criticized in a report by the United States General Accounting Office in early 2004, and faced increased opposition from watchdog groups like the American Civil Liberties Union (ACLU), ReclaimDemocracy.org, and the Electronic Privacy Information Center (EPIC). These advocacy groups expressed concern that the system violated people's privacy rights and that it was possibly unconstitutional. They also believed it could actually undermine safety, as terrorists could use it to their advantage.

CAPPS II was cancelled by the TSA in the summer of 2004. Shortly thereafter, the TSA announced a successor program, called Secure Flight, that would work in a way similar to CAPPS II. TSA hoped to test Secure Flight in August 2005 using two airlines, but it was blocked by Congress until the government could prove that the system can pass 10 tests for accuracy and privacy protection as follows:

  1. Redress process - A system of due process exists whereby aviation passengers determined to pose a threat are either delayed or prohibited from boarding their scheduled flights by TSA may appeal such decisions and correct erroneous information contained in CAPPS II or Secure Flight or other follow-on/successor programs.
  2. Accuracy of databases and effectiveness of Secure Flight - The underlying error rate of the government and private databases that will be used to both establish identity and assign a risk level to a passenger will not produce a large number of false positives that will result in a significant number of passengers being treated mistakenly or security resources being diverted.
  3. Stress testing - TSA has stress-tested and demonstrated the efficacy and accuracy of all search technologies in CAPPS II or Secure Flight or other follow-on/successor programs and has demonstrated that CAPPS II or Secure Flight or other follow-on/successor programs can make an accurate predictive assessment of those passengers who may constitute a threat to aviation.
  4. Internal oversight - The Secretary of Homeland Security has established an internal oversight board to monitor the manner in which CAPPS II or Secure Flight or other follow-on/successor programs are being developed and prepared.
  5. Operational safeguards - TSA has built in sufficient operational safeguards to reduce the opportunities for abuse.
  6. Security measures - Substantial security measures are in place to protect CAPPS II or Secure Flight or other follow-on/successor programs from unauthorized access by hackers or other intruders.
  7. Oversight of system use and operation - TSA has adopted policies establishing effective oversight of the use and operation of the system.
  8. Privacy concerns - There are no specific privacy concerns with the technological architecture of the system.
  9. Modifications with respect to intrastate travel to accommodate states with unique air transportation needs - TSA has, in accordance with the requirements of section 44903 (j)(2)(B) of title 49, United States Code, modified CAPPS II or Secure Flight or other follow-on/successor programs with respect to intrastate transportation to accommodate states with unique air transportation needs and passengers who might otherwise regularly trigger primary selectee status.
  10. Life-cycle cost estimates and expenditure plans - Appropriate life-cycle cost estimates, and expenditure and program plans exist.

The Intelligence Reform and Terrorism Prevention Act (IRTPA) of 2004 requires the Department of Homeland Security (DHS) to assume from aircraft operators the function of conducting pre-flight comparisons of airline passenger information to federal government watch lists for international and domestic flights. TSA published the Secure Flight Final Rule on October 28, 2008. The Final Rule went into effect on December 29, 2008. [5]

See also

Related Research Articles

Aircraft hijacking is the unlawful seizure of an aircraft by an individual or a group. Dating from the earliest of hijackings, most cases involve the pilot being forced to fly according to the hijacker's demands. There have also been incidents where the hijackers have overpowered the flight crew, made unauthorized entry into the cockpit and flown them into buildings – most notably in the September 11 attacks – and in several cases, planes have been hijacked by the official pilot or co-pilot; e.g., Ethiopian Airlines Flight 702.

After the September 11 attacks, there was an immediate call to action regarding the state of aviation security measures as the hijackers involved in 9/11 were able to successfully pass through security and take command of the plane. The existing security measures flagged more than half of the 19 hijackers in 9/11; however, they were cleared to board the plane because their bags were not found to contain any explosives. In the months and years following September 11, 2001, security at many airports worldwide were reformed to deter similar terrorist plots.

<span class="mw-page-title-main">Transportation Security Administration</span> United States federal government agency

The Transportation Security Administration (TSA) is an agency of the United States Department of Homeland Security (DHS) that has authority over the security of transportation systems within, and connecting to the United States. It was created as a response to the September 11 attacks to improve airport security procedures and consolidate air travel security under a dedicated federal administrative law agency.

<span class="mw-page-title-main">Airport security</span> Measures to prevent crime at an airport

Airport security includes the techniques and methods used in an attempt to protect passengers, staff, aircraft, and airport property from malicious harm, crime, terrorism, and other threats.

The No Fly List, maintained by the United States federal government's Terrorist Screening Center (TSC), is one of several lists included in algorithmic rulesets used by government agencies and airlines to decide who to allow to board airline flights. The TSC's No Fly List is a list of people who are prohibited from boarding commercial aircraft for travel within, into, or out of the United States. This list has also been used to divert aircraft away from U.S. airspace that do not have start- or end-point destinations within the United States. The number of people on the list rises and falls according to threat and intelligence reporting. There were reportedly 16,000 names on the list in 2011, 21,000 in 2012, and 47,000 in 2013.

<span class="mw-page-title-main">Registered Traveler</span>

A registered traveler is a person qualified through an airline passenger security assessment system in the United States air travel industry. Such programs were initially tested in 2005. Registered traveler programs are currently in operation in various airports around the country, and are administered by TTAC, the Transportation Security Administration (TSA) office responsible for Secure Flight, the replacement for the Computer Assisted Passenger Prescreening System (CAPPS) and the canceled CAPPS II counter-terrorism system.

<span class="mw-page-title-main">Federal Air Marshal Service</span> United States federal law enforcement agency

The Federal Air Marshal Service (FAMS) is a United States federal law enforcement agency under the supervision of the Transportation Security Administration (TSA) of the United States Department of Homeland Security (DHS).

Security theater is the practice of implementing security measures that are considered to provide the feeling of improved security while doing little or nothing to achieve it.

<span class="mw-page-title-main">Intelligence Reform and Terrorism Prevention Act</span> Act of Congress

The Intelligence Reform and Terrorism Prevention Act of 2004 (IRTPA) is a 235-page Act of Congress, signed by President George W. Bush, that broadly affects United States federal terrorism laws. The act comprises several separate titles with varying subject issues. It was enacted in response to the terror attacks of September 11, 2001.

The Computer Assisted Passenger Prescreening System II was a program of the United States Department of Homeland Security (DHS) instituted to increase security at airports by assessing the risk level of passengers before they're allowed to board. CAPPS II searched through information stored in government and commercial databases and assigned a color-coded level of risk to each passenger. Amid controversy from such organizations as the American Civil Liberties Union (ACLU), the Electronic Privacy Information Center (EPIC), and the Electronic Frontier Foundation (EFF), the program was terminated by President Bush in August 2004. The program was then replaced by a similar program called Secure Flight in early 2005 generating the same concerns over privacy and civil liberties. However, due to public concerns, Secure Flight did not become operational until 2010. CAPPS II grounded innocent Americans due to false positives. One notable example is the grounding of Senator Ted Kennedy in 2004.

Secure Flight is an airline passenger pre-screening program, implemented from August 2009 by the United States Transportation Security Administration (TSA). Secure Flight matches passenger information against watch lists maintained by the federal government. The initial implementation phase of Secure Flight resulted in the complete transfer of responsibility for passenger watch list matching to TSA from aircraft operators whose flights operate within the United States. The second phase of Secure Flight will result in the transfer of responsibility for passenger watch list matching to TSA for flights into, out of, and over the United States.

<span class="mw-page-title-main">Federal Flight Deck Officer</span> Airline pilot authorized as a US law enforcement officer

A Federal Flight Deck Officer (FFDO) is a Part 121 Airline Pilot who is trained and licensed to carry weapons and defend commercial aircraft against criminal activity and terrorism. The Federal Flight Deck Officer program is run by the Federal Air Marshal Service, and an officer's jurisdiction is the flight deck or cabin of a commercial airliner or a cargo aircraft while on duty. FFDOs are federal law enforcement officers sworn and deputized by the U.S. Department of Homeland Security.

<span class="mw-page-title-main">Secondary Security Screening Selection</span> Airport security measure in the United States

Secondary Security Screening Selection or Secondary Security Screening Selectee, known by its initials SSSS, is an airport security measure in the United States which selects passengers for additional inspection. People from certain countries are subject to it by default. The passengers may be known as Selectee, Automatic Selectee or the Selectee list. The size and contents of the list fluctuates and is a secret, although the Transportation Security Administration has stated there are tens of thousands of names on it.

Watchlist or watch list may refer to:

<span class="mw-page-title-main">Full body scanner</span> Device which detects objects in or around a persons body

A full-body scanner is a device that detects objects on or inside a person's body for security screening purposes, without physically removing clothes or making physical contact. Unlike metal detectors, full-body scanners can detect non-metal objects, which became an increasing concern after various airliner bombing attempts in the 2000s. Some scanners can also detect swallowed items or hidden in body cavities of a person. Starting in 2007, full-body scanners started supplementing metal detectors at airports and train stations in many countries.

<span class="mw-page-title-main">Sensitive security information</span>

Sensitive security information or SSI is a term used in the United States to denote sensitive but unclassified information obtained or developed in the conduct of security activities, the public disclosure of which would constitute an unwarranted invasion of privacy, reveal trade secrets or privileged or confidential information, or be detrimental to the security of transportation. It is not a form of classification under Executive Order 12958 as amended. SSI is not a security classification for national security information. The safeguarding and sharing of SSI is governed by Title 49 Code of Federal Regulations (CFR) parts 15 and 1520. This designation is assigned to information to limit the exposure of the information to only those individuals that "need to know" in order to participate in or oversee the protection of the nation's transportation system. Those with a need to know can include persons outside of TSA, such as airport operators, aircraft operators, railroad carriers, rail hazardous materials shippers and receivers, vessel and maritime port owners and operators, foreign vessel owners, and other persons.

The concept of border security in the United States shares a complex relationship with the persistent threat of terrorism. Border security includes the protection of land borders, ports, and airports. The relationship is unique in the sense that the federal government must constantly reevaluate and tweak its border security policy to address the perceived threats posed to the United States through the form of human terrorism or the smuggling and detonation of a weapon of mass destruction.

Airport racial profiling in the United States is U.S. government activity directed at a suspect or group of suspects because of their race or ethnicity. Under Fourth Amendment analysis, objective factors measure whether law enforcement action is constitutional, and under the Fourteenth Amendment challenges to the practice are assessed under the customary strict scrutiny test for racial classifications.

Clear Secure, Inc. is an American technology company that operates biometric travel document verification systems at some major airports and stadiums.

Airport privacy involves the right of personal privacy for passengers when it comes to screening procedures, surveillance, and personal data being stored at airports. This practice intertwines airport security measures and privacy specifically the advancement of security measures following the 9/11 attacks in the United States and other global terrorist attacks. Several terrorist attacks, such as 9/11, have led airports all over the world to look to the advancement of new technology such as body and baggage screening, detection dogs, facial recognition, and the use of biometrics in electronic passports. Amidst the introduction of new technology and security measures in airports and the growing rates of travelers there has been a rise of risk and concern in privacy.

References

  1. "49 U.S. Code § 114 - Transportation Security Administration | US Law | LII / Legal Information Institute". Law.cornell.edu. Retrieved 2016-08-08.
  2. 1 2 3 4 "The Aviation Security System and the 9/11 Attacks - Staff Statement No. 3" (PDF). 9-11commission.gov. Retrieved 2016-08-08.
  3. "9/11 Commission Report (Chapter 1)". 9-11commission.gov. July 2004. Retrieved 2016-08-08.
  4. "INformation : TSA "Watchlists"" (PDF). Epic.org. Retrieved 2016-08-08.
  5. "Federal Register". Secure Flight Program.

CAPPS II