Law Enforcement
National Data Exchange
N-DEx Concept Overview
Presentation Overview

The N-DEx Need and Vision

What Will N-DEx Do?



Integration and Connectivity



Services and Capabilities
Law Enforcement Scenarios
Data
Functional
Key Assumptions
2
A National Need
3
CJIS Current Information Sharing
Warrants
NCIC
Arrests
III
IAFIS
18,000 User Agencies
4
CJIS Information Sharing Gap
Warrants
Arrests
Police RMS
Current CJIS Systems
Police
Reports
Data
Gap
NCIC
III
IAFIS
18,000 User Agencies
5
CJIS Information Sharing With N-DEx
Police
Reports
Warrants
Arrests
Police
RMS
Local/ State/
Regional
CJIS Systems
N-DEx
NCIC
III
IAFIS
Federal Crime
Reporting
(Federal Agency
Information Sharing)
18,000 User Agencies
6
N-DEx Vision
N-DEx
Virtual Regional
Task Force
“To share complete, accurate, timely, and useful law enforcement information
Provides National Information Sharing
across jurisdictional boundaries and to provide new investigative tools that
Links regional
state systems
enhance America’s
abilityand
to fight
crime and terrorism.”
Enables virtual regional information sharing capabilityExecutive Concept of Operations
November 2005
7
Concept of Operations
Services, Capabilities and Integration
8
What Will N-DEx Do?
N-DEx will provide law enforcement agencies
with a powerful new investigative tool to
search, link, analyze and share
criminal justice information such as,
incident/case reports, incarceration data,
and parole/probation data on a national
basis to a degree never before possible.
9
N-DEx Concept
Information
Returned
Information
Returned
Data
DataSubmitted
Submitted
Entity Inquiry
Auto Theft
Pickaway, Fairfield, Union, Licking,
2004 - 2005
James Bluefield 04/15/1968
Disposition
Entity Relationships
Parole
Recent Address
142 Washburn
Seattle Wa 12345
Recent Phone
123-456-7890
Other Phone #s
Map It
#
Aliases
Data
Time
Name:
Mug
Records
J. Blueman
Incident – Bank Robbery
Jesse Bluefield
John Bluefield
Arrest Report - Tacoma
Arrest Report – Seattle
Jamie Bluefield
Incident - DUI
More
Corruption Case XYZ
2
Associates
Other Addresses
More
Franklin County
Jesse James
02-28-2003
Auto Thefts
More
9
8
7
6
5
4
3
2
1
Next
John England
SSN:
123-45-6789
Sharing Attributes
Share:
Do Not Share:
January
February
9
8
7
6
5
4
3
2
10600- 1000-1400- 1800- 2200- 02001000 1400 1800 2200 0200 0600
0600- 1000-1400- 1800- 2200- 02001000 1400 1800 2200 0200 0600
OK
Conditional
Share Options: Select
Crime Characteristics
Offense: Forcible Rape
Subscribe:
Next
Suspect: Male
Victim:
Race: White
Sex: Female
OR
Age:
55 to 65
Height:
Hair:
Find Similar:
Subscribe:
Services
N
-DEx
N-DEx
Entity
Resolution
Incident/
Case
Correlation
to
64
to 130
Blonde
Next
Capabilities
Entity
Correlation
Automated
Processing
0
Weight: 0
Visualization
Catalog/
Index
Collaboration
Search
Notification
Subscription
Analytical/
Reporting
People, Places, Things, Relationships, Characteristics
Entities
10
N-DEx Services
Services
N-DEx
Visualization
Entity
Resolution
Automated
Processing
Collaboration
Entity
Correlation
Incident/
Case
Correlation
Capabilities
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
11
N-DEx Services
Identify Who is Who
Services
N-DEx
Visualization
Entity
Resolution
Automated
Processing
Collaboration
Entity
Correlation
Incident/
Case
Correlation
Capabilities
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
12
Entity Resolution


Automatically determine related entries that may
contain varying or non-exact details
“JT Smith” and “Jimmy Smith” have enough similar
additional identifying information that there is a high
probability they are the same person
Address
Name
DOB
121 Main St., Wichita
Rob McDonuld
01/01/1980
121 Main, Kansas City
Bobby M. MacDonald
121 North Main,Topeka
Robert McDonnal
12/12/1979
121 Maine St, Wichita
Mark R. MacDonald
01/01/1980
121 S Main St, Wichita
Bob McDonnald
12/12/1979
SSN
123-44-4444
123-45-5555
123-45-5555
13
Entity Resolution
Suspect
Arrested
Entity
Resolution
Potential Terrorist
Identified
Miami Dade County Jail
Entity
Resolution
Potential Entity
Consolidation
David Fuller, 123-45-6789
Ramon Ortega, 123-45-6789
Consolidate Checked OK
Arrest Report
Offense: Robbery
Last
Name: Ortega
SSN:
First
Ramon
San Diego JTTF
Subscription Notification
123-45-6789
David Fuller, Arrest Report
Robbery
Insert Mug Shot
C:/Ortega.Ramon.jpg
Browse
Next
Jesse James
123-45-6789
Incident
Incarceration
Report
Name:
David Fuller
Terrorist Watch List
David Fuller, Arrest Report
Robbery
SSN 123-45-6789
14
N-DEx Services
Identify Relationships Between
People, Places and Things
Services
N-DEx
Visualization
Entity
Resolution
Automated
Processing
Collaboration
Entity
Correlation
Incident/
Case
Correlation
Capabilities
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
15
Entity Correlation

Identifying relationships among entities even if they are
not obvious or specifically identified
 Identify/maintain relationships between entities within a
record

Entity correlation will create and manage linkages to
source records
16
Entity Correlation
Incident Report
Nashville, PD
Jim Smith
123 Main Street
Nashville, TN
Incident Report
Nashville, PD
Bob Wood
789 Main Street
Nashville, TN
Incident Report
Atlanta, PD
Bob Wood
123 Main Street
Nashville, TN
17
N-DEx Services
Services
N-DEx
Visualization
Entity
Resolution
Collaboration
Entity
Correlation
Automated
Processing
Incident/
Case
Correlation
Capabilities
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
Find Similar
Cases/Incidents/
Crime Characteristics
18
Incident/Case Correlation Service

Finds “patterns” that link incidents/cases




Crime characteristics or modus operandi,
Criminal characteristics or criminal signatures that could link
incidents and ultimately suspects to serial crimes
Automates the current manual practice of searching
through incident reports for similarities
Helps associate records that do not contain exact
matches
19
Incident/Case Correlation
Characteristics
Comparison Against
Records
Similar Cases
Incident/Case Correlation
Found
Crime Characteristics
Entered
Similar Cases
98% Pensacola, FL, Forcible Rape,
12 Dec 2005
Crime Characteristics
Incident/Case Correlation
Incident/Case
Correlation
Offense: Forcible Rape
Suspect: Male
Record
Victim:Incident 12345
Height: 0
to 64
White
Sex: Female
Weight: 0 to 130
Find Similar:
65 Hair: Blonde
Age: 55 toSubscribe:
95% Pensacola, FL, Forcible Rape,
19 Dec 2005
95% Mobile, AL, Forcible Rape 24
Dec 2005
88%
Fort Walton Beach, FL,
Forcible Rape, 3 Jan. 2006
Race:
OR
Find Similar:
Subscribe:
NextNex
t
Incident 12345
Incident 12346
Incident 12347
Offense:
Incident 12348
Offense:
Incident 12349
Rape
Offense:
Rape
Offense:
Rape
Offense:
Victim:
Rape
Victim:
Rape
Sex:
Victim:
Female
Sex:
Victim:
Female
Race:
Sex:
Victim:
White
Female
Race:
Sex:White
Female
Age:
Race:
Sex:
57 White
Female
Age:
Race:
57 White
Height:
Age:
Race:
5’
571”White
Height:
Age: 5’
571”
Weight:
Height:
Age:
120
5’
571”
Weight:
Height:120
5’ 1”
Weight:
Height:120
5’ 1”
Weight: 120
Weight: 120
20
N-DEx Services
Services
N-DEx
Capabilities
Visualization
Entity
Resolution
Automated
Processing
Collaboration
Entity
Correlation
Incident/
Case
Correlation
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
Automated Expert
Investigative Practices
21
Automated Processing Service



Automatically performs processing upon submission of
data to the system
Based on expert knowledge, standard procedures and
best practices used of law enforcement
Provide alerts to LEA users for items that may be of
interest to them, for example:


Check all new suspects against terrorist watch lists
Alert LEA users of addresses that are known to be associated
with other suspected terrorists
22
Automated Processing/Notification
Arson Incidents
Submitted
N-DEx
Automated
Processing
Witness Becomes
Suspect
Concord, NH
Incident Report
Arson Jul 2001
Suspect:
Unknown
Witness:
Gordan Kanseah
! Automated Process
Notification:
Automated
Processing
New York, NY
Incident Report
Gordan Kanseah witness
to multiple Arsons
Incident Report Jul 2000
Concord, NH
Incident Report Feb 2003
New York, NY
Arson Jun 2003
Suspect:
Unknown
Witness:
Gordan Kanseah
Incident Report
Arson Jul 2001
Suspect:
Unknown
Witness:
Gordan Kanseah
Incident Report
Arson Jun 2003
Suspect:
Unknown
Witness:
Gordan Kanseah
23
N-DEx Catalog/Index
Services
N-DEx
Capabilities
Visualization
Entity
Resolution
Automated
Processing
Collaboration
Entity
Correlation
Incident/
Case
Correlation
Catalog/
Index
Subscription
Search
Notification
Entities
Analytical/
Reporting
24
N-DEx Capabilities
Simplified Views of
Complex Information
Services
N-DEx
Visualization
Entity
Correlation
Automated
Processing
Incident/
Case
Correlation
Capabilities
Collaboration
Entity
Resolution
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
25
Visualization






Visualization tools make it easier to understand the “knowledge”
behind the vast amount of information
Visualize complex returns from correlation, search and report
functions
Provide both tabular and graphical representations of data to allow
navigation through relationships, trends, and timelines of crimes
and activities
Overlay data on geographic maps with various views of the data
“Drill down" or navigate through complex relationship networks
View the data in a variety of representations for effective analysis
26
Visualization
27
N-DEx Capabilities
Find People, Places
and Things
Services
N-DEx
Visualization
Entity
Correlation
Automated
Processing
Collaboration
Entity
Resolution
Incident/
Case
Correlation
Capabilities
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
28
Search

Search for people, places, things, crime characteristics,
perform key word searches and find records (e.g.,
incident/arrest report)

Includes both basic and advanced search functions



Basic search - a simple user interface requiring very little
training,
Advanced search – for more experienced users (e.g., using
Boolean, wildcard operators, etc.)
Results tuned to prevent being overwhelmed by data
through filtering and ranking of results
29
Search
Person Search
Requested
Comprehensive
Search
Integrated View of
All Jesse James
Records
Entity Inquiry
Jesse James 04/15/1972
Disposition
Recent Address
Search
Probation
167 Cedar St.
Oklahoma City
OK 12345
Recent Phone
123-456-7890
Map It
Other Phone #s
Other Addresses
Search
Name
Last
James
Aliases
Records
James Jesse
Jesse Jameson
Incident - 1123xyz Drugs
Arrest Report - Baily
John Boothe
Jamie Jameson
Arrest Report - Dallas
Arrest Report - Oklahoma
More
First
Jesse
Associates
More
Mug
Jesse James
02-28-2003
More
Next
Mug Shots
SSN: 123-45-6789
Incident Report
Arrest Report
Arrest Report
mm/dd/yyyy
DOB: 04/15/1956
Jesse James
Possession of Cocaine
Find
4 February 1999
167 Cedar st
Oklahoma City 12345
Jesse James
12-06-1974
Aliases: Jimbob, jaime
Lovebone
Jesse James
11-11-2001
Jesse James
11-11-2001
Jesse James
02-28-2005
Jesse James
11-11-2001
30
Search
Unknown
Suspect
Descriptors
N-DEx Search
(Person)
Potential Suspect
Identified
Mug Shot/Photos
Search
Manual Gonzales
123-45-7689
Search
Name: Unknown
Suspect:
Unknown
Sex: Male
Tatoos
Right Hand: Spider
Tattoos:
Neck: Maria
Spider
Right Hand:
Neck: Goldie
Search
Records Found
Arrest Report – Richard
Coleman - Assault
Arrest Report
Richard Coleman
Incident Report –
Richard Coleman - Burglary
Tattoos
Right Hand: Spider
Neck: Goldie
31
N-DEx Capabilities
Services
N-DEx
Incident/
Case
Correlation
Capabilities
Visualization
Entity
Correlation
Automated
Processing
Subscribe to Future
Events/Information
Collaboration
Entity
Resolution
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
32
Subscription


Allows law enforcement personnel to register for
information events about entities and subjects of
interest
Users will be able to:




Establish subscriptions based on existing entities
Ask to be notified of updates and/or changes to status or the
availability of additional information on the entity
Easily discover “who else is looking” for the same subjects or
have similar interests
Supports case de-confliction and encourages potential
case collaboration
33
Subscription/Notification
!
Search
Notification
Last
Name: Lindblad
First
Sam
DOB: tigerguy@aol.com
04-25-1964
E-Mail:
E-Mail:
IP: 192.250.250.25
tigerguy@aol.com
Subscription
&
Notification
Search
Last
DOB:
E-Mail:
IP:
IP: Air192.250.250.25
Force OSI
FE
Warren AFB, WY
Subscribe:
tigerguy@aol.com
192.250.250.25
Subscribe:
Next
First
Name:
Next
Other
Investigative
Arrest Report
Incident
Subscription
Name: Lindblad, Sam
DOB: 04/25/1964
E-Mail: tigerguy@aol.com
IP: 192.250.250.25
34
N-DEx Capabilities
Services
N-DEx
Visualization
Entity
Correlation
Automated
Processing
Incident/
Case
Correlation
Capabilities
Collaboration
Entity
Resolution
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
Identify Criminal
Trends/Hot Spots
35
Analytical/Reporting




Assist investigators and analysts in the identification of criminal
networks, crime patterns, crime trends, and crime problems
Provides administrators, analysts and investigators the ability to
generate reports from N-DEx data for distribution and sharing
Allows N-DEx to support law enforcement’s investigative reporting
needs from a central platform
Supports generation of online reports including graphic displays of
data for use in predictive modeling, reporting and tracking of crime for
investigative purposes
36
Analytical/Reporting
Report
Submitted
Results
Graphed/Mapped
Analytical/
Reporting
Crime Analysis & Reporting
Location:
Radius:
Begin:
End:
Anne Arundel, County
Cocaine
Baltimore City
50
Miles
Incident Data
Jun 05
Dec 05
Heroin
Drug: Cocaine, Heroin
37
N-DEx Capabilities
Services
Visualization
Entity
Correlation
Automated
Processing
Incident/
Case
Correlation
Capabilities
N-DEx
Collaboration
Entity
Resolution
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
Automated Notification
38
Notification
Agencies Notified of
Terrorist Links
Assault Incident
Submitted
HPD
Investigations
Notification
!Batta
M. Batta
FraudWith
Associated
Suspected Terrorist
M. Carta
Incident Report
Incident Report
Assault
Suspect(s):
M. Accam
Witness(s):
M. Carta
M. Batta
Automated
Processing
JTTF
Investigations
Notification
! Carta
M. Carta
Terrorist
Associates
Found
M. Accam
M. Acca
LVMPD
Investigations
Notification
! Acca
M. Accam
Drug
Associated With
Trafficking
Suspected Terrorist
M. Carta
39
N-DEx Capabilities
Services
Bring Investigators
N-DEx
Capabilities
Together
Visualization
Entity
Correlation
Automated
Processing
Incident/
Case
Correlation
Collaboration
Entity
Resolution
Catalog/
Index
Subscription
Search
Notification
Analytical/
Reporting
40
Collaboration
Create Task Force
Create Name: Grand Rapids
Suspect:
Right
Spider
AddHand:
Users:
User# 12345
Tatoos
Unknown
Neck: Maria
User# 12354
User# 23445
User# 34599
Attributes
Read:
Write:
Next
Task Force Message Boards
Walker
04/25
Drug related robbery in south
Task
Force
Space
Suspect:
Right
Hand:Work
Spider
Tatoos
GrandUnknown
Rapids
Grand
Rapids
Neck:
Maria
Suspect:
Right
Hand: Spider Incident
Incident
Incident
Tatoos
Incident
Unknown
Report
Assault
Incident
Report
Neck:
Maria
Assault
Incident
Incident
Report
Report
Assault
Report
Submitter:
8/2/2004
Assault
Report
Submitter:
8/2/2004
Assault
Report
Submitter:
8/2/2004
Assault
Officer
Roberts
Submitter:
8/2/2004
Officer
Roberts
Submitter:
8/2/2004
Officer
Roberts
Submitter:
8/2/2004
Officer
Roberts
Submitter:
Officer
Roberts
Suspect:
Officer Roberts
Suspect:
Officer Roberts
Suspect:
Doug
Montrose
Suspect:
Doug
Montrose
Suspect:
Doug
Montrose
Suspect:
Doug
Montrose
Suspect:
Doug
Montrose
Victims:
Doug
Montrose
Victims:
Doug
Victims:
Homer
OlsenMontrose
Victims:
Homer
Olsen
Victims:
Homer
Olsen
Randall
Milton
Victims:
Homer
Olsen
Randall
Milton
Victims:
Homer
Olsen
Randall
Milton
Homer
Olsen
Randall
Milton
Homer
Olsen
Randall
Milton
Randall Milton
Randall Milton
41
Collaboration




Enable real-time collaboration and sharing of
information (e-mail, on-line messaging, instant
messaging, folders/sharing, task force workspace etc.)
Allows users to electronically locate others working on
similar cases
Dynamically create investigative teams
Leverage the individual knowledge of police officers,
analysts and investigators to a greater whole
42
N-DEx Integration

Data Integration

Functional Integration
43
N-DEx Data Integration
• N-DEx provides view of full record
• No need to “pull” from the source
• Example - incident reports from RMSs
• N-DEx is an index/pointer
• N-DEx can request a “pull” from source
• Example – R-DEx
• N-DEx not aware of their information
• Legacy transactional system that must be queried
• Example - NCIC and III (via NCIC)
44
Non-Interactive Data Source Examples
45
Data Standards

Extensible Markup Language (XML) will be the structured
language for describing information being sent electronically to
N-DEx.


The National Information Exchange Model (NIEM) is using the
GJXDM for building a common XML data exchange standard for
information sharing among:




The N-DEx Program has developed an Information Exchange Package (IEP) using
the Global Justice XML Data Model (GJXDM) schema
Department of Homeland Security
Department of Justice
Supporting communities in justice, public safety, homeland security, and
intelligence.
N-DEx will also develop an IEP using standards based on the
latest NIEM release
46
N-DEx Functional Integration

End-User Browser


LEA users will be provided the ability to access N-DEx directly
through a web browser
Web Services


All N-DEx user level capabilities will be available to external LEA
systems through web service interfaces
Example - RMS or regional system may wish to integrate N-DEx
capabilities into the local system's user interface
47
N-DEx Functional Integration
N-DEx
N-DEx
Network
Network
LEA System
Network
Web
Services
Integration
End-User
Browser
Integration
48
Network Connectivity

CJIS will deliver N-DEx on the CJIS Wide Area Network (WAN)

Connectivity will be through any means authorized per CJIS
Advisory Policy Board (APB) policies/guidelines and state policies

Methods of connectivity to the CJIS WAN from secondary locations
(e.g., NLETS, RISS.NET, state network, etc.)

LEAs will also be able to connect to N-DEx via secure Internet
connections using the LEO system
49
Key Assumptions












The Key Success Factor - ensuring that N-DEx meets the real-world needs of law
enforcement
N-DEx will be deployed incrementally based on user priorities
The effectiveness of N-DEx is dependent upon widespread participation
N-DEx is an information sharing system, not a statistical reporting system
N-DEx is not an intelligence system
Management of data shared in N-DEx will remain with the LEA that provided it
An objective of the N-DEx implementation is to reduce the points of integration from a
data and functionality perspective
N-DEx will offer a range of options for LEAs to integrate their systems
Existing standards, systems and networks will be leveraged
MOUs will be the mechanism N-DEx will use to document agreements between NDEx and its information-sharing partners
N-DEx will be designed and built in consultation with its local, state, tribal and other
federal partners in a collaborative manner
Only data classified as Sensitive but Unclassified (SBU) or below will be permitted within
N-DEx
50
Questions
51