STATE OF MINNESOTA DEPARTMENT OF PUBLIC SAFETY

Transcription

1 STATE OF MINNESOTA DEPARTMENT OF PUBLIC SAFETY BUREAU OF CRIMINAL APPREHENSION POR Level 3 Offender Information Search Service (PORLevel3) Published On: 10/20/2009 Service Release Version#: 0.7 Prepared By: Bureau of Criminal Apprehension Criminal Justice Information Systems 1430 Maryland Avenue East St. Paul, Minnesota Service Description Consumers of Service Service Inputs Service Outputs SERVICE SUMMARY Provide Justice Partners with data from POR for level 3 registrants. Justice Partners such as The Minnesota Department of Corrections (DOC) Minnesota OID (Offender Identifier as assigned by the Department of Corrections) A response containing the person and current and historical address and vehicle information.

2 Table of Contents SERVICE SUMMARY... 1 BUSINESS OUTCOME... 3 STATEMENT... 3 DRIVERS... 3 POLICIES... 3 STATUTES... 3 OBJECTIVES... 3 SCENARIOS... 3 BUSINESS SERVICE DEFINITION... 3 SERVICE OVERVIEW... 3 INPUT DETAIL AND BUSINESS VALIDATION RULES... 3 SERVICE CONSUMERS AND ACCESS RIGHTS... 4 SERVICE-LEVEL EXPECTATIONS... 4 SERVICE LOGGING AND AUDITING REQUIREMENTS... 4 TRAINING... 4 CONTACT INFORMATION... 5 TECHNICAL SERVICE DEFINITION... 6 ACCESSING THE SERVICE... 6 PRE-CONDITIONS (TECHNICAL)... 6 POST-CONDITIONS (TECHNICAL)... 6 SERVICE INTERFACE... 6 MESSAGE FORMAT... 6 EXCEPTION CONDITIONS AND ERROR HANDLING... 6 MCJE SECURITY PROFILE... 7 APPENDIX A: GLOSSARY... 8 APPENDIX D: TEMPLATE REVISION HISTORY Page 2 of 11

3 Business Outcome Statement Provide Justice Partners with the current person, current and historical address, and vehicle data from POR for level 3 registrants (compliant, absent or non-compliant) for a given Offender Identifier as assigned by the Minnesota Department of Corrections. Drivers Department of Corrections (DOC) requested a way to get POR s data concerning level 3 offenders to enhance their investigation capability. The PORLevel3 Search Service will be designed to meet the requirements of DOC while also being useable by other Justice Partners. Policies POR data is generally private but we cooperate with Justice Partners such as law enforcement, probation and corrections to provide data for their needs in managing offender registration and community notification. Statutes M.S and M.S Objectives Provide MCJE-compliant document of person, address and vehicle data including both current and historical address and vehicle information. Scenarios The following is a list of potential ways in which the Business Outcome of this service will be used: Justice Partners can use the service to gather information on POR level 3 registrants (compliant, absent or non-compliant). Business Service Definition Service Overview Provide Justice Partners with the current person, current and historical address, and vehicle data from POR for level 3 registrants (compliant, absent or non-compliant) for a given Offender Identifier as assigned by the Minnesota Department of Corrections. Input Detail and Business Validation Rules MN OID (a 6-digit number as assigned by the Minnesota Department of Corrections) is provided. If the OID is in the POR database and is for a level 3 registrant (compliant, absent or noncompliant), the MCJE XML document is returned. If a registrant is on POR but is not a level 3 risk Page 3 of 11

4 level, the message Not Level 3 will be returned. If the OID is not on POR, the message No record found will be returned. Service Consumers and Access Rights Authorized Justice Partners will have rights to execute this service. Service-Level Expectations Support On call support for this service is available Monday through Friday, 8:00 a.m. to 4:30 p.m., except state holidays, through the BCA Service desk at telephone number: or Service Availability This service is designed to operate 24 hours a day, 7 days a week, 365 days a year. Though this service is intended to operate 24/7/365, the BCA s technical support of this service is limited to what has been identified in the Support section above. External Service Dependencies None. Known Maintenance Interruptions None. Service Downtime Notification Notification of downtime will be provided in keeping with standard BCA practices. Expected Response Times None. Service Logging and Auditing Requirements Training The BCA MNJIS Training and Auditing team is required to manually audit for proper access and use of data from POR. Statewide Supervision staff manually audits for proper access and use of data from the Statewide Supervision System. Note: Responses from the BCA contain confidential data. Agency staff, including employees and contractors, that can access logs containing confidential data provided by BCA services must be fingerprinted and have a criminal background check performed. An individual must pass the background check before access to service logs is allowed. The consuming agency/department is responsible for training their individual users on appropriate use, dissemination, and security requirements related to the use of this service and the content returned. Page 4 of 11

5 Contact Information BCA Service Desk (651) or (888) Page 5 of 11

6 Technical Service Definition Accessing the Service Accessing the PORLevel3 Search Service is restricted to systems on the CJDN network that have access to the BCA s ESB. The PORLevel3 Search Service interface is not discoverable. To request access to the PORLevel3 Search Service, send an to bca.servicedesk@state.mn.us with the subject MNJIS PORLevel3 Services Access Request. Pre-Conditions (Technical) MCJE compliant request Request is valid. Request contains a valid instance of the BCA Header. Post-Conditions (Technical) This is a read only service; therefore the service will not change the state or data. The request and response from the MNJIS PORLevel3 Services consumer will be archived. BCA compliant ResponseMessage for all valid requests. SOAP Fault for all errors. MCJE compliant response Service Interface Provide Justice Partners with the current person, current and historical address, and vehicle data from POR for level 3 registrants (compliant, absent or non-compliant) for a given Offender Identifier as assigned by the Minnesota Department of Corrections. Responses to this service are synchronous. Message Format A shared repository of sample exchanges is available. These sample exchanges are meant to demonstrate several but not all possible query/response scenarios and can be used as a basis for understanding how to use the service. To request a copy of the PORLevel3 Sample Exchanges, send an to bca.servicedesk@state.mn.us with the subject MNJIS PORLevel3 Services Sample Exchanges. Exception Conditions and Error Handling The consumer should check the ResponseCategory of the ResponseMessage instance document to determine if the exchange was a successful. This element provides the type of response and includes INFORMATION, WARNING, ERROR and RESULT. If warning or information messages are provided with a result, the category will be RESULT. Page 6 of 11

7 Unhandled exceptions happen for unknown and unpredicted reasons. When an unhandled exception occurs, a SOAP Fault is returned to the client/consumer of the service. The SOAP Fault <faultstring> element will contain any known information about the unhandled exception. If the consumer s request contains improper data in the BCA Header or search request, the service XML response will contain a FailureReason that describes the error. MCJE Security Profile Access to this service is limited to criminal justice agencies that are connected to the State of Minnesota Criminal Justice Data Network (CJDN). Workstations and servers that access the service must be granted access by IP address through the BCA s firewall in order to reach the servers where the service is running. The IP addresses of all computers directly accessing the service must be provided to the BCA so that firewall rules can be created. This service operates over HTTPS on TCP/IP port 443. An SSL certificate is required to be installed on any workstation or server consuming the service. SSL certificates can be obtained from the BCA. When configuring the endpoint in a consuming client or service, make sure that https is specified. Page 7 of 11

8 Appendix A: Glossary Term Public Service Restricted Service Private Service OID Definition A service that it is available for anyone to consume. This includes anyone with access to a computer and the world wide web. A service that can only be consumed after authorization and configuration by the BCA. A service that is only available internal to the BCA. That is, can only be consumed by other BCA services. Offender Identifier as assigned by the Minnesota Department of Corrections MJCE ESB Page 8 of 11

9 Page 9 of 11

10 1. Appendix C: Document Revision History Rev. Num. Rev. Date Reason Prepared by 1.0 Initial BCA MNJIS 0.1 8/26/2009 Initial draft of Business Outcome and Business Service Definition 0.2 8/26/2009 Initial draft of Technical Service Description Walt Cygan Doug Wheeler 0.3 9/04/2009 Updates per review/feedback Doug Wheeler 0.4 9/18/2009 Update to reflect the fact that getporlevel3 returns Level 3 records for both compliant and non-compliant. Doug Wheeler 0.5 9/22/ /28/2009 Proposed single point of contact PORLevel3@state.mn.us Proposed Appendix B: Client Code Examples Removed / Accepted tracked changes. PORLevel3 Service to Search noting only search, no update Incorporated feedback. Doug Wheeler Doug Wheeler Page 10 of 11

11 Appendix D: Template Revision History Rev. Num. Rev. Date Reason Prepared by 1.0 8/3/2009 Technical Service Definition updates Mark Girard Page 11 of 11