Request for Proposal. Commonwealth of Pennsylvania. Mobile ID Devices

Transcription

1 Pennsylvania Chiefs of Police Association Request for Proposal Commonwealth of Pennsylvania Mobile ID Devices Proposal due by 1:00 PM September 18, 2015 Pennsylvania Chiefs of Police Association 3905 N. Front Street Harrisburg, PA Phone (717)

2 Mobile ID RFP Pennsylvania Chiefs of Police Association Table of Contents MOBILE ID DEVICES... I PROPOSAL DUE BY 1:00 PM SEPTEMBER 18, I PENNSYLVANIA CHIEFS OF POLICE ASSOCIATION... I 3905 N. FRONT STREET... I HARRISBURG, PA I PHONE (717) I 1. INTRODUCTION SYSTEM OVERVIEW SCOPE OF WORK VENDORS QUESTIONS CONDITIONS OF SUBMISSION PREPARATION COSTS ERRORS AND OMISSIONS IN RFP USERS AND ENVIRONMENT USERS USER ENVIRONMENT PA STATE POLICE REQUIREMENTS PROPOSAL SUBMISSION TECHNICAL/DEVICE PROPOSAL COST PROPOSAL COMPLETENESS AND OMISSIONS PROOF OF VENDOR S CAPABILITY AND PRIOR EXPERIENCE PROPOSAL DUE DATE: PROPOSAL/VENDOR EVALUATIONS ATTACHMENT A... 7 PSP MOBILE IDENTIFICATION SYSTEM TECHNICAL SPECIFICATION VERSION Rev: 1 Page 2 of 7

3 Mobile ID RFP Pennsylvania Chiefs of Police Association 1. Introduction The Pennsylvania Chiefs of Police Association (PCPA) in cooation with the Pennsylvania State Police, County, and local agencies provide assistance in offender identification through biometrics in the form of fingerprints and images of faces, scars marks and tattoos. This request for proposal is to supplement the current Pennsylvania State Police (PSP) Automated Fingerprint System (AFIS) by providing Mobile Fingerprint ID Devices to county and local agencies that meet the PSP requirements for Mobile ID Devices. The purpose of the RFP is to select a vendor/s to negotiate a contract/s to provide Mobile ID Devices to county and local agencies at costs established through this RFP. PCPA is requesting proposals from vendors that are in the business of fingerprint identification, and that can demonstrate that they have exience, and have delivered similar devices and service to existing law enforcement agencies. The Pennsylvania Chiefs of Police Association has received a grant from the Pennsylvania Commission on Crime and Delinquency to make the initial purchases and already manages the maintenance and equipment for fingerprint identification for more than two hundred county and local agencies and will want to purchase additional equipment. 1.1 System Overview The term Mobile Fingerprint ID can conjure up several different interpretations. In the strictest sense, it may consist of an un-tethered device used to capture one or more fingerprints from a subject. The captured data sample(s) may then be compared to other fingerprints contained in a database. The data may also be transmitted to and compared to samples in a central repository or a computer repository located in another locations. Devices may be tethered to computers in vehicles like local municipal police cars. Additionally, a device physically attached to a computer located in a vehicle that acquires fingerprints may also be considered as a Mobile Fingerprint ID device. The PSP Mobile ID system will accept submissions from any source as long as they are formatted in the FBI standard RPIS format described below. The supplier of the Mobile ID device is responsible for all FBI CJIS security requirements including FIPS compliant encryption on the device Encryption in communication between the device and the MID gateway User name and password - FBI CJIS Security Policy Advanced Authentication - FBI CJIS Security Policy 1.2 Scope of Work The PCPA is seeking a vendor/s to provide Mobile ID Devices that meet the conditions of this RFP and the specifications detailed in Pennsylvania State Police Mobile Id s. However, vendors are allowed and encouraged to submit alternate solutions that would allow the Pennsylvania State Police and PCPA to meet the goal of a mobile fingerprint identification solution. 1.3 Vendors Questions Proposers are required to submit any questions in writing prior to the specified date below. The PCPA will issue written responses, in the form of a written addendum, to questions that materially impact upon the proposal documents. All questions must be submitted in writing before August 29, Question must be submitted to PCPA Mobile ID project, 3905 N. Front Street, Harrisburg, PA PCPA will respond to questions before September 4 th listing the question and answers and replying to those deemed necessary for complete proposals. All questions and response will be posted on PCPAs website Rev: 1 Page 3 of 7

4 Mobile ID RFP Pennsylvania Chiefs of Police Association 1.4 Conditions of Submission Upon submittal of a Proposal in response to this RFP, the proposer acknowledges and consents to the following conditions relative to the submittal: The PCPA reserves the right to eliminate any vendor which submit incomplete or inadequate proposals The PCPA reserves the right to reject any proposals submitted from proposers who fail to meet the specifications The PCPA reserves the right to reject any proposals that fail to satisfy the submittal requirements The PCPA reserves the right to reject all proposals. The PCPA reserves the right to accept or reject, at any time prior to the PCPA s execution of a contract (or contracts) pursuant to this RFP, any or all proposals or any part of any proposal and to waive any defect or technicality and to solicit new proposals where the acceptance, rejection, waiver or solicitation would be in the best interests of the PCPA It shall be the proposer s responsibility to review and verify the completeness of its proposal The PCPA reserves the right, without prior notice, to supplement, amend or otherwise modify the RFP at any time The PCPA may request additional information or more detailed information from any proposer at any time, including information inadvertently omitted by a proposer All responses become the proty of the PCPA and will not be returned The PCPA may request proposers to send representatives for interviews The PCPA may request to inspect projects referenced in their proposal The PCPA may conduct investigations with respect to the qualifications of each proposer The Vendor s proposals shall remain open for acceptance and in full effect until at least ninety (90) calendar days from the date of opening of this proposal News releases (including, but not limited to, commercial advertising) taining to this project may not be made without prior written approval of the PCPA. 1.5 Preparation Costs All documents proposed in response to this RFP shall be prepared at the sole expense of the proposer, with the understanding that there may be no claims whatsoever for reimbursement from the PCPA for the expense of preparation. Rev: 1 Page 4 of 7

5 Mobile ID RFP Pennsylvania Chiefs of Police Association 1.6 Errors and Omissions in RFP Vendors will not be allowed to take advantage of any errors or omissions in this RFP and must promptly notify the PCPA of any errors, omissions, and inconsistencies that are discovered. It is expressly understood that this RFP contemplates and requires the design, development and installation of a completely oational Mobile ID Devices with the capabilities as specified. Any equipment or other terms required to make the Mobile ID Devices fully oational which are not specifically described and priced in the vendor s proposal shall be furnished by the vendor without claim for additional payment. 2. Users and Environment 2.1 Users The users of the Mobile ID Devices will be State police, municipal and regional police departments, county agencies including but not limited to prisons, District Attorneys, probation/parole and courts. 2.2 User Environment Mobile Readers will be used mainly in the field from vehicles which may or may not be equipped with additional computer and communication equipment, by police in the field with no other communication equipment, as well as prisons, police booking centers and other locations inside buildings,. 3. PA State Police Requirements The Pennsylvania State Police Requirements are contained in Attachment A to this RFP 4. Proposal Submission 4.1 Technical/Device Proposal Vendors must submit seven copies of their technical/device proposal in response to the listed requirements. 4.2 Cost Proposal Vendors must submit two copies of their cost proposal to meet all the requirements in their technical proposal. Any alternate solutions and cost must be clearly defined. 4.3 Completeness and Omissions Vendors must submit a complete solution with no additional resources required by Pennsylvania, or any County/local agency in Pennsylvania. Vendors responding to this RFP must demonstrate extise in this field and must identify any omission that would prevent the successful implementation of their proposal with any additional costs or resources. 5. Proof of Vendor s Capability and Prior Exience Vendors submitting proposals must demonstrate to selected members of a PCPA s technical committee that they have previously delivered devices to an existing law enforcement agency. The demonstration must be a live real-time site visit by the select members. The vendor will be responsible for all travel cost. Rev: 1 Page 5 of 7

6 Mobile ID RFP Pennsylvania Chiefs of Police Association 6. Proposal Due Date: All technical and cost proposals must be received no later the 1:00 PM September 18, All proposal must be delivered to PCPA Mobile ID project, 3905 N. Front Street, Harrisburg, PA Proposal/Vendor Evaluations All proposals and vendors will be evaluated by members of the PCPA s technical committee in three specific areas. Technical/ Device proposal, Cost Proposal, and Vendor s demonstration of their capability and prior exience. Rev: 1 Page 6 of 7

7 Mobile ID RFP Pennsylvania Chiefs of Police Association 8. Attachment A PSP Rev: 1 Page 7 of 7

8 Pennsylvania State Police July 30, 2015

9 Contents General Information... 4 Mobile ID... 4 PSP Requirements... 4 Agency Application Requirements... 5 Responses... 6 PSP Type 1 Record... 7 PSP Type 2 Record

10 Document Revision History CHANGE LOG REV DATE AUTHOR PAGES AFFECTED REMARKS /30/2015 J. Jones Document Creation 3

11 Pennsylvania State Police General Information Mobile ID is a service that will provide rapid fingerprint identification for RPIS submissions from a mobile fingerprint acquisition device. Mobile ID accepts, processes, and responds to fingerprint identification requests that contain between 2 and 10 images of fingers in any configuration supported in the FBI RPIS TOT. The recommended minimum fingers for Mobile ID searches are 2 and 7 (the index fingers). Local law enforcement is able to submit one transaction to PSP; PSP will copy the one submission and forward it to the FBI, and at the same time search the PSP database. The local law enforcement will receive responses from both PSP and FBI. Mobile ID searches through PSP s system will access the entire Pennsylvania criminal history file. Searches for FBI s RISC (Repository for Individuals of Special Concern) will only consist of fingerprint images for wanted sons, known/suspected terrorists, and sexual offenders. The FBI criminal master file does not get searched. A response from PSP will be approximately 3 minutes (outside of network transport time). Mobile ID The PSP Mobile ID system will accept submissions from any source as long as they are formatted in the FBI standard RPIS format described below. The supplier of the Mobile ID device is responsible for all FBI CJIS security requirements including FIPS compliant encryption on the device Encryption in communication between the device and the MID gateway User name and password - FBI CJIS Security Policy Advanced Authentication - FBI CJIS Security Policy PSP Requirements Mobile ID devices must conform to subject acquisition profile for fingerprint (FAP) level 10 as a minimum, although FAP 30 is the minimum recommended level, as defined in the Mobile ID Best Practices. FAP 10 level devices should submit 4 fingers for best accuracy while FAP 30 level devices can submit 2 to 4 fingers for best accuracy. 4

12 The Mobile ID Device must adhere to national standards: Current FBI CJIS Security Policy ANSI/NIST ITL , NIST Special Publication Data Format for the Interchange of Fingerprint, Facial and Other Biometric Information FBI Electronic Biometric Transmission Specification, Criminal Justice Information Services (CJIS), December 2011 (V9.4) NGI-DOC NIST Special Publication Mobile ID Best Practices PSP Mobile ID system will only accept fingerprint image-based searches. To ensure accuracy, PSP requires a minimum NFIQ (NIST fingerprint image quality) score of 3 in order to be processed. Mobile ID search requests must be submitted over the CJIS Wide Area Network (WAN) using the FBI RPIS format and SMTP protocol, and should be for Criminal Justice Purposes only. Pennsylvania State Police will assign a four character alpha numeric device ID to be used in the TCN number as described in the example below. Example: TCN: DDDDDDNNNN DDDDDD is device ID NNNN is the transaction number PSP will receive transactions and provide responses to a local law enforcement agency Mobile-ID Gateway that is assumed to be within the CJIS physically secure location. All communication back to the officer is the responsibility of the local law enforcement agency, including the Advanced Authentication required by the FBI CJIS security policy. The search results are for law enforcement purposes only. Secondary dissemination and long-term storage of the data is not authorized. Agency Application Requirements Access to the PSP MID system will only be provided to Criminal Justice agencies with an ORI on file with PSP. If your agency is interested in submitting Mobile ID transactions to the state, please ensure the following requirements are met and required information provided: Current CLEAN/USER Agreement (the CLEAN/USER Agreement will be updated to include PSP MID requirements and these are subject to inspection during the triennial Agency CLEAN Audit process). Advanced Authentication (if required) consistent with FBI CJIS Security Policy. Make and model of MID device to be used (only FBI-Approved devices may be used and no sonally owned devices will have access to the PSP MID system). A copy of the Agency Appropriate Use Policy on Agency letterhead. 5

13 Application packets will be submitted through the PA Chiefs of Police and are subject to LTW review in the same manner as the Live Scan application process, prior to PSP processing. Responses PSP and FBI will be process submissions in a lights out fashion without human intervention. Responses will consist of a Red, Yellow, or Green response. The submitter will receive separate responses from PSP and the FBI. Red -A red response is a hit, indicating identification of a highly probable candidate. If available, red responses will be accompanied by a photo of the candidate. There can be up to two candidate hits within one red response. A red response should not be considered a positive identification, but rather the high likelihood of identification. Yellow -A yellow response is an indeterminate response. It is a possible hit, indicating identification of a possible candidate (or candidates) which is below the level of confidence established for a highly probable match (red response). If available, yellow responses will be accompanied by a photo of the candidate (s). There can be up to two candidate hits within one yellow response. The yellow response should only be used as an investigative tool providing leads for further investigative inquiries. Green- A green response indicates no hit (i.e., the search did not locate a viable candidate). PSP MIDS will return up to two candidates submission. The highest ranking candidate will appear in the SID field (2.015). In the event that there are multiple responses, the SIDs associated with the additional responses will appear in the ACN field (2.071) (MULTIPLE RESPONSES - SID:xxxxxxxx, SID:xxxxxxxx). Multiple Type 10 records will also be included one for each SID (if available) and if the RPIS contains an RPR (2.096) = Y. PSP will use the NIST archive component of AFIS to retrieve mugshots and demographic data for the PSP response. 6

14 PSP Type 1 Record The following table describes the EBTS Type 1 for RPIS Transactions. This specification follows the FBI RPIS specification for quick identification of sons. These transactions do not get sent to PSP CCH and are not retainable, so many of the PSP required fields for criminal history processing are not required. For all mandatory fields in the RPIS submission, there is a single occurrence. For all optional fields, there are 0 or 1 occurrences. All fields are defined in the FBI Electronic Biometric Transmission Specification, Criminal Justice Information Services (CJIS), December 2011 (V9.4) NGI-DOC Identifier Condition Field No. Field Name Char Type Min Max s Min s Max Max Bytes incl. Separators and Field No. Example Special Character RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT LEN M Logical Record Length N :230<GS> VER M Version N :0501<GS> CNT M File Content N :1<US>15<RS> 2<US>00<RS>4<US> 01<RS>4<US>02<RS >4<US>03<RS>4<US >04<RS>4<US>05<R S>4<US>06<RS>4<U S>07<RS>4<US>08< RS>4<US>09<RS>4< US>10<RS>4<US>11 <RS>4<US>12<RS>4 <US>13<RS>4<US>1 4<GS> TOT M Type of Transaction A :RPIS<GS> 7

15 Identifier Condition Field No. Field Name Char Type Min Max s Min s Max Max Bytes incl. Separators and Field No. Example Special Character RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT DAT M Date N : <GS> PRY O Transaction Priority N :1<GS> EBTS Option EBTS Option EBTS Option DAI M Destination Agency Identifier AN :PAPSP0000<GS > <WVIAFIS0Z> <CRI Tag 2.073> <CRI Tag 2.073> ORI M Originating Agency Identifier AN :PAPSP0000<GS > <TXRISC000> <TX > <TX > TCN M Transaction Control Number ANS : <GS > Any printable ASCII 7 bit character except %,?, * <RPIS 1.009> <RPIS 1.009> TCR O 1.01 Transaction Control Reference ANS : <G S> Any printable ASCII 7 bit character except %,?, * EBTS Option <RPIS 1.009> <RPIS 1.009> 8

16 Identifier Condition Field No. Field Name Char Type Min Max s Min s Max Max Bytes incl. Separators and Field No. Example Special Character RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT NSR M Native Scanning Resolution NS :20.00<GS> Period Allowed NTR M Nominal Transmitting Resolution NS :20.00<GS> Period Allowed DOM O Domain Name AN * * 0 1 * 1.013:NORAM<US>< GS> EBTS Option EBTS Option EBTS Option GMT O Greenwich Mean Time AN : Z<GS> EBTS Option EBTS Option EBTS Option DCS O Directory of Character Sets ANS * * 0 1 * 1.015:003<US>UTF- 8<US>8-bit<FS> EBTS Option EBTS Option EBTS Option * No limits defined. Define * here. Under the Condition column: O = optional; M = mandatory; C = conditional;. Under the character type column: A = alpha; B = binary; N = numeric; S = special characters. 9

17 Identifier Description FS GS RS US Separates logical records of a file Separates fields of a logical record Separates multiple occurrences of an information field Separates individual information items of the field or subfield 10

18 PSP Type 2 Record The following table describes the PSP EBTS Type 2 Transactions. This specification follows the FBI RPIS specification for quick identification of sons. These transactions do not get sent to PSP CCH and are not retainable, so many of the PSP required fields for criminal history processing are not required. For all mandatory fields in the RPIS submission, there is a single occurrence. For all optional fields, there are 0 or 1 occurrences. All fields used are defined in the Electronic Biometric Transmission Specification, Criminal Justice Information Services (CJIS), December 2011 (V9.4) NGI-DOC Identifier Field No. Field Name Char Type Min Max Example Special Characters T4/14 (2-10) RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT LEN Logical Record Length IDC Image Designation Character N :909<GS> PSP & EBTS Mandatory N :00<GS> PSP & EBTS Mandatory PSP & EBTS Mandatory PSP & EBTS Mandatory ATN Attention Indicator ANS :PSP J Q Doe,RM 11870<GS> Person requesting information PSP & EBTS Mandatory EBTS Option SCO SEND COPY TO Not used Not used EBTS Option OCA Originating Agency Case Number ANS :Q <GS> EBTS Option EBTS Option EBTS Option FBI FBI Number AN :627NY01 22<GS> Not used PSP & EBTS Mandatory EBTS Option SID State ID Number AN :VA <GS> Not used PSP Option EBTS Option 11

19 Identifier Field No. Field Name Char Type Min Max Example Special Characters T4/14 (2-10) RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT MNU Miscellaneous Identification Number ANS :PP S< GS> Not used Not used EBTS Option NAM Name AS :JONES, ANTHONY P<GS> Not used PSP&EBTS Option Not used POB Place of Birth A :PA<GS> Not used EBTS Option Not used SRF Search Results Findings A :R<GS> Not used PSP & EBTS Mandatory Not used MSG Status/Error Message IMA Image Capture Equipment ANS :FPTPAT NOT DIS<GS> SET :DBI<US> 1134<US>1234 5<GS> Not used EBTS Option EBTS Option EBTS Option Not used RAP Request for Electronic RAP Sheet A :Y<GS> EBTS Option, no RAP sheet from PSP will be returned Not used Not used ACN Action to be taken ANS :IF NON- IDENT, SUBMIT TO UNSOLVED LATENT FILE<GS> Comma, Hyphen, Amsand, Slash, Number Sign, Blank are allowed Not used Not used Not used 12

20 Identifier Field No. Field Name Char Type Min Max Example Special Characters T4/14 (2-10) RPIS T4/14 (2-10) RPISR T2 (1-2) T10 (0-2) ERRT CRI Controlling Agency Identifier ANS :VAPSP00 00<GS> PSP Mandatory <RPIS 2.073> PSP Mandatory <RPIS 2.073> ERS Electronic RAP Sheet ANS 4 200, :rap sheet<us><gs > Any printable ASCII 7 bit character Not used EBTS Option No RAP sheet from PSP will be returned, only from the FBI if requested and available Not used NOT Note Field ANS :note<GS > Any printable ASCII 7 bit character This will contain the identification of the individual submitting the request Not Used Used if one or more possible candidate* Not used RPR Request Photo Record A :Y<GS> EBTS Option Not used Not used NDR Name of Designated Repository N :6<GS> PSP searches entire criminal file, For FBI Search, see EBTS 9.4 (default to 6 for RISC) Not used Not used SII Supplemental Information ANS 4 10, :1234<G S> Not Used EBTS Option Not Used Under the character type column: A = alpha; B = binary; N = numeric; S = special characters. 13

21 About and 2.075PSP will not return an electronic rap sheet (ERS) in the field of the RPISR message. If an ERS is requested (2.070=Y), the FBI response message may contain one if it is available. *About & 2.088(SID/score/color) <case 1-1:HIT (single candidate)> 2.015: : /9999/RED <case 1-2:UTD (single candidate)> 2.015: : /256/YELLOW <case 2-1:HIT (multiple candidates)> 1st Type : : /9999/RED 2nd Type : : /8888/RED <case 2-2:UTD (multiple candidates)> 14

22 1st Type : : /256/YELLOW 2nd Type : : /128/YELLOW 15