Operating, consulting and systems development services for ensuring the security of the AutoPASS

Statens vegvesen Vegdirektoratet

The Awarding Authority requests bids for the delivery of services in connection with a trusted third party (TTP) for the safeguarding of operational security of the AutoPASS. The purpose of the acquisition is threefold and there will be separate contracts signed for each part. Service providers have the opportunity to bid on one or multiple parts. The different parts of the contract will have different cost structures and evaluation requirements and each part will be evaluated separately without any link between the different parts.
The contracts are framework agreements that are entered into with a maximum of one supplier per part.
Page 4 of 21
The following contracts shall be entered into:
1 The operating Contract for technical and operational management of the key management system (KMS)
2 The development assistance Contract for technical / administrative practice of the TTP role
3 The development contract for the development ofthe KMS for a new version such as supporting the chip standard EN15509 which will be introduced in Norway in 2014
For Part 1, Statens vegvesen will make available a ICT system for key management system (hereinafter referred to as KMS - Key Management System). "Hosting" and technical operation of the KMS is part of the delivery. The service provider will receive training in technical / operations management and establishing working procedures for the system. The KMS shall not be connected to any network and is normally only in active use in specific work processes that can be roughly calculated at once a month. The requirements for this assignment is thus largely on the observation of adequate physical security and documented good routines.
Part 2 related to the assistance to the execution of the TTP role in the transition period until a new solution is adapted and the external conditions are established. The assignment consists of technical assistance including facilitation of tasks for the technical / operational activities of the KMS (ie Part 1), assistance in safeguarding the registration service. The registration service consists of among other things, to register the chip series that has been produced and keys that are sent out to the toll stations. Technical knowledge of the AutoPASS, experience with security, as well as a working knowledge of cryptography, is a definite advantage for this assignment.
Part 3 covers the software development / adaptation of the KMS. A new generation of chips for the AutoPASS (The new chip tender was published in Doffin / TED and is currently in process) will lead to changed requirements for the key management. The service provider assumes the responsibility for the detailed specification, development and the delivery of the software based on the customer's work tasks. Central work tasks will be part of the development of the new interfaces for key distribution for the chip suppliers, roadside and possibly other operators.
The selected service provider of Part 3 will have access to source code (developed in Java) and documentation "as-is" for the existing KMS which the customer has ownership of. The service provider can use this as a starting point for further development.
All three of the contracts will run from the contract signing until the 15th of June 2014 which is the planned point in time for the first chip of the new generation will be released to the Norwegian market. There will be an option to extend the individual agreements by 6months + 6months + 6months. The schedule is further described in TTP requirements in the agreement. The contracts shall cover the transition period from when the current contract with the TTP supplier expires on the 3rd of September 2013 until the KMS is further developed, a new generation of chips are introduced and a number of other external conditions more specific.
NOTE: To register your interest in this notice and obtain any additional information please visit the Doffin Web Site at http://www.doffin.no/Search/Search_Switch.aspx?ID=297660.

Frist
Fristen for mottak av tilbud var 2013-08-15. Anskaffelsen ble publisert 2013-06-18.

Hvem?

• • Statens vegvesen Vegdirektoratet

Hva?

• • Programmering av software og rådgivning › Systemtjenester og tekniske konsulenttjenester
• • Databehandling › Levering av data
• • Databasevirksomhet › Dataadministrasjon
• • Datamaskinrelaterte driftstjenester › Drift av dataanlegg