Actually, figured it out:

Dzhokhar had a Massachusetts driver’s license, and those pictures go into a facial recognition database.

Source: http://www.washingtonpost.com/world/national-security/inside...