Develop a Standardized, Secure Computing Infrastructure
Design and implement over a 24 month period an entirely new high performance, cost and energy efficient, secure USG Computing Infrastructure that includes:
Data Center Network (USG DCN) - Establish a network of central and Departmental data centers based upon a fully virtualized high performance reference platform. The reference design would integrate clustered wide-bus (standards based) computing engines with multi-tier virtualized storage to reduce the space and energy consumption of each thousand servers to the equivalent of four air cooled server racks.
Identity Management (USG ID) - Establish a single identity management system from existing NIST and Homeland Security plans. Define a master ID that combines physical and electronic authentication and establish and ID for all USG entities including: persons, supplier business entities and government units. Extend the USG system to provide the basis for a commercially supported National ID for all citizens. Enable National ID to eventually replace tax ID and voter IDs. Establish a privacy monitoring system in conjunction with the FBI that rapidly identifies and remedies improper use or theft of National IDs.
National Library Database and Electronic Files - Establish via NIST and the Library of Congress a reference data schema for secure electronic information exchange. Establish a National Library database for uniquely tracking and identifying all US entities and USG assets including people, organizations and organizational units, budgeted projects and other government initiatives (USG ID would be the national library database (NLD) for people). Create a secure electronic electronic filing system within USG DCN for all National Library Database entities. Use this database for budget, payments, taxes, law enforcement and FOIA. Expose public portions of each file as appropriate for accelerating payments and commerce.
Secure Computing Platform - The time needed to secure current desktop systems will exceed the length of any single presidential administration. The cost of replacing all current devices with secure devices is less than the planned maintenance costs for existing systems. The CTO should phase out all personal computing technologies that cannot be secured. Instead, USG CTO should implement the following:
1. Secure terminals with SmartCard and biometric authentication - Modern terminal technology can display high speed graphics from virtualized computers hosted on the USG DCN and support multiple displays ... yet they use a fraction of the energy of personal computers and can be secured,
2. Mobile devices with encrypted storage, biometric and alphanumeric authentication,
3. Work with equipment manufacturers via USGAO to establish low-cost sources for USG technology products ($300 per terminal, $25 incremental cost over non-secure mobile devices) (12 months),
4. Work with cell phone manufacturers to integrate government security into commercial mobile devices (12 months).