The presentation discusses the challenges faced by law enforcement in India, including factors like social tensions, organized crime, and terrorism. It introduces various technological initiatives by the Madhya Pradesh Police to enhance public safety and policing efficiency, such as the Crime and Criminal Tracking Networks and Systems (CCTNS), the Automated Fingerprint Identification System (AFIS), and a multi-modal biometric identification system (AMBIS). The document also outlines security measures and infrastructure improvements to overcome risks to databases and networks supporting these law enforcement technologies.

1. Public Safety, Security and Disaster Management by MP Police Presentation by Purushottam Sharma,IPS IGP, Madhya Pradesh, Bhopal

2. Challenges to Law Enforcing Agency Policing in our country has become increasingly complex over the years. Social tensions, religious disputes, growing economic disparities and regional, linguistic and ethnic differences, terrorism and Naxalism have long been major challenges to effective policing in India today. Crime is present in various forms in India . Organized crime include drug trafficking, gunrunning, money laundering, extortion, murder for hire, fraud, human trafficking and poaching. Many criminal operations engage in black marketing, political violence, religiously motivated violence, terrorism, and abduction. Other crimes are homicide, robbery, assault etc. Property crimes include burglary, theft, motor vehicle theft, and arson.

3. Government ‘s Plan To Overcome Challenges Crime and Criminal Tracking Network and System (CCTNS) Biometrics Security Presently- Automated Fingerprint Identification System(AFIS) Future-Automated Multi-modal Biometric System(AMBIS ) GIS/GPS based AVLS Project MP Police Website Network & Database Security

4. CCTNS CCTNS aims at creating a comprehensive and integrated system for enhancing the efficiency and effectiveness of policing at all levels and especially at the Police Station level through adoption of principles of e-Governance, and creation of a nationwide networked infrastructure for evolution of IT-enabled state-of-the-art tracking system around “investigation of crime and detection of criminals” in the real time, which is a critical requirement in the context of the present day internal security scenario. CCTNS covers all 35 States and Union Territories and all police stations (approximately 15,000) and all higher police offices (approximately 6,000) in the country . The CCTNS project includes vertical connectivity of police units (linking police units at various levels within the States – police stations, district police offices, state headquarters, SCRB and other police formations) as well as horizontal connectivity (linking police functions at State and Central level to external entities).

5. AFIS AFIS is acronyms of Automated Fingerprint Identification System This is fully automatic computerized system for Fingerprint Identification which reduce expert intervention. It is very useful system for quick & accurate search in Ten digit as well as in chance print.

6. AFIS STRUCTURE IN MP Central server of AFIS system is established at SCRB, PHQ, Bhopal Remote Query Stations (RQS) are established at all Distt.of MP & three SRP’s. Each RQS connected to central server through router. RQS having the records of that distt.while all distt. Records are available at AFIS Central Server, Bhopal All 51 RQS(Distts.) connected to central server through dial-up connection .

7. Architecture of AFIS Control Server Comm. Server IND BPL JBP DWS KWA HBD BTL BHD GWL SHR Matcher Server

8. AMBIS AMBIS (Automated Multi-Modal Biometrics Identification System) Incorporates State of the Art biometric technologies to serve law enforcement applications beyond traditional AFIS capabilities Modalities used today Finger (Ten print flats and rolls, latent) Face (Mug shot and latent face) Iris (Dual iris scans) Palm (Print and latent)

9. Why Multi-modal Biometrics ? Collectively the system will have more capabilities, reduced total cost of ownership and increased accuracy. NCRB will build database in alignment with UIDAI standards and thus the national residents database. Finger is used for traditional applications. Chance print investigation Identification in case of other missing biometrics

10. Multi-modal Biometrics- Empowerment Iris Iris is nothing but just a photo of your iris taken using a special camera. Iris inherently has the lowest False Acceptance Rate which makes detection and linking of criminals records very effective (Only one result in the scores list). Iris matching algorithm is also inherently the fastest biometric, reducing hardware footprint and response time thus making total cost of owner ship low By incorporating iris in the AMBIS NCRB database will be inline with UIDAI database

11. Power of Multi-modal Biometrics Face Only biometrics that can be captured covertly Mug shot identification and Digital Line-up Face Latent matching from surveillance videos Palm Latent palm matching

12. GIS/GPS based AVLS Project MP Police has implemented an Automated Vehicle Tracking System for Bhopal and Indore City for providing an Integrated Disciplined system for Traffic Control and maintaining Law and Order in the district, where in 100 vehicles of the MP Police would be tracked and monitored each city.

13. Advantage to Police Department To optimize and automate the emergency response services of the police department.. To enhance public safety by making more timely, accurate and complete Information To make available for effective Police Operations To Utilize information technology to improve public safety service to the community To increase productivity by eliminating redundancy and unnecessary tasks To improve the mobile unit(s) asset management by increasing the control and remote control capabilities To utilize and manage technology in a cost effective manner

14. Advantage to Public Reduce waiting time for citizens on roads while during surprise checks to verify the possible involvement of person and property especially in Motor vehicle and other Crimes. . To enhance public safety with more availability of information. Public get immediate service like –police assistance , ambulance & fire service. Public will get information related to traffic diversion owing to VVIP movement and public/political agitation Voice recording or caller log

15. MP Police Website

16. New Services in Website For Department Web based Modules for Monthly Analysis of Crime. Heinous Crime Monitoring Module. Daily Situation Report Module. PRO Module (Press release of PHQ and State) Future upgradability, e-tendering etc . For Public Improved Complaint Module. Dynamic Information of Districts, displayed geographically. Press Release and News Flash for Police Head Quarters and Districts. To improve the access speed of website the bandwidth of Internet Lease Port is upgraded from 1 Mbps to 3 Mbps. User Friendly Design

17. Prominent Features “Services” General User Friendly Design. Powerful Administrative Tool. New Improved Complaint Facility . Technical Modular and Scalable for future enhancements. Bilingual Support for Hindi and English. User Management / Access Management. Enhanced Security. 3 - Tier Architecture. Built on .NET Technologies. Microsoft SQL Server 2005 Enterprise Edition.

18. Security Risk to Database & Network Unauthorized or unintended activity or misuse by authorized database users, database administrators, or network/systems managers, or by unauthorized users or hackers ; Malware infections causing incidents such as unauthorized access, leakage or disclosure of personal or proprietary data, deletion of or damage to the data or programs, interruption or denial of authorized access to the database, attacks on other systems and the unanticipated failure of database services; Overloads, performance constraints and capacity issues resulting in the inability of authorized users to use databases as intended;

19. Physical damage to database servers caused by computer room fires or floods, overheating, lightning, accidental liquid spills, static discharge, electronic breakdowns/equipment failures and obsolescence; Design flaws and programming bugs in databases and the associated programs and systems, creating various security vulnerabilities (e.g. unauthorized privilege escalation), data loss/corruption, performance degradation etc.; Data corruption and/or loss caused by the entry of invalid data or commands, mistakes in database or system administration processes, sabotage/criminal damage etc. Security Risk to Database & Network Continue

20. Security Policies Adopted by MP Police at Central Data Center Responsibility for information security involved personnel, their roles, and involved systems Password Policy Server Security Policy Router Policy Switch Security Policy Antivirus Policy Patch Management Policy Firewall Policy IPS Policy Web Usage Policy E-mail Usage Policy

21. Firewall Policy at Data Center Firewalls can be hardware, software or a combination of both. Firewalls are used to prevent unauthorized Internet users from accessing private networks connected to the Internet, especially intranets. In either case, it must have at least two network interfaces, one for the network it is intended to protect, and one for the network it is exposed to. All messages entering or leaving the intranet pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria. The term firewall comes from the fact that by segmenting a network into different physical sub-networks, they limited the damage that could spread from one subnet to another just like firedoors or firewalls .

22. Services Provided By Firewall At our Data Center we are using “CISCO PIX’ firewall which provide following services:- Determine trust zones Determine ports that need opening Determine packet type (TCP/UDP) Determines direction of packet flow Determine any limitations you can set on (Source/Destination) To let traffic flow from a high security level to a lower level, use the nat and global commands. For the opposite direction, from lower to higher, use the static and access-list commands The PIX does not pass multicast traffic The PIX does support RIP

23. THANK YOU