PA Department of Transportation RFP # 3513R10 PennDOT Digital Driver License System Gemalto Response Technical Submittal - Redacted Date: November 25, 2014 Pennsylvania DOT 109105 GULaw Privacy FR This page is intentionally left blank. DOT 109106 Privacy FR I. Table of Contents II Technical Proposal ..................................................................................................................................... 4 II-1 – Statement of the Problem..................................................................................................................................... 4 II-2 – Management Summary......................................................................................................................................... 6 II-3 – Work Plan ............................................................................................................................................................ 11 II-4 – Prior Experience .................................................................................................................................................. 12 II-5 – Personnel............................................................................................................................................................. 16 II-6 – Training................................................................................................................................................................ 18 II-7 – Financial Capability.............................................................................................................................................. 18 II-8 – Objections and Additions to IT Contract Terms and Conditions ......................................................................... 19 II-9 – Diverse Business Participation Submittal ............................................................................................................ 19 II-10 – Cost Submittal ................................................................................................................................................... 20 II-11 – Domestic Workforce Utilization Certification ................................................................................................... 20 IV-3 – Requirements.................................................................................................................................... 21 IV-4 – Tasks - Planning and Requirements Phase ...................................................................................... 30 Task A – Project Management Work Plan .................................................................................................................... 30 Task B – Requirements Documentation....................................................................................................................... 42 Task B-1 – Photo Upfront ............................................................................................................................................. 42 Task B-2 – Image Capture Workstations ...................................................................................................................... 46 Task B-3 – Duplicate Workstations .............................................................................................................................. 73 Task B-4 – Motor Voter ................................................................................................................................................ 83 Task B-5 – Central Image Server................................................................................................................................... 89 Task B-6 – JNET ........................................................................................................................................................... 103 Task B-7 – Facial Recognition System......................................................................................................................... 104 Task B-8 – Central Issuance Facility............................................................................................................................ 122 Task B-9 – Disaster Recovery...................................................................................................................................... 132 Task B-10 – Driver License/Identification and Special Identification (DL/ID and SID) Cards ..................................... 133 Task B-11 – Consumables ........................................................................................................................................... 149 Task B-12 – Networking ............................................................................................................................................. 154 Task C – System Interface Design Specifications........................................................................................................ 155 Task C – Testing .......................................................................................................................................................... 158 Task E – Training ......................................................................................................................................................... 162 @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 1 109107 GULaw Privacy FR Task F – Implementation ............................................................................................................................................ 166 Task G – Maintenance and Support ........................................................................................................................... 169 Task H – Additional Work ........................................................................................................................................... 172 Task I – End of Contract Responsibilities.................................................................................................................... 175 IV-5 – Reports and Project Control ............................................................................................................ 177 @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 2 109108 GULaw Privacy FR This page intentionally left blank. @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 3 109109 GULaw Privacy FR II Technical Proposal 11-1- Statement of the Problem State in succinct terms your understanding of the problem presented or the service required by this RFP. (Gemalto Response] PennDOT's current contract for a color photograph ic dr iver license and ident ificat ion card system w ill be end ing and will need to be rep laced by July 27, 2016 . W ith in the new contract, PennDOT wishes to enhance the digita l driver license system using the latest techno logies and techn iques to improve product reliability, promote customer service, and enhance security. Improve Product Reliability In any new contract, the Commonwea lth will be able to take benefit of new hardw are to rep lace aging equipment in the fie ld. This step alone adds to the ability to improve re liabili ty wh ile also being able to take advantage of any new features or benefits the new hardware may bring . To go a step further , the Commonwealth provided deta iled requ irements within the RFP to ensure performance of hardw are, that spares are available in a short per iod of t ime if a replacement component is warranted, that support services are near in the event that any component or app licat ion requires attent ion, and that there is redundancy throughout the process to ensure uninterrupted serv ice to the Commonwea lth 's cit izens. The Commonwea lth also covers the re liability requ irements of the document (driver license, ID, etc.) itse lf. Promote Customer Service The migrat ion to a new dr iving license system introduces the opportunity to improve customer and emp loyee satisfaction. This improvement can be accomp lished by increasing services and opt ions for the hand ling of special cases, faci litated renewa l processes, and more user-friend ly automated too ls and procedures for PennDOT emp loyees . W ith in the RFP, PennDOT documented specific requirements for hardware performance and capab ilit ies, system performance to ensure fast and effic ient processing of customers , interface requ irements to make it easy and efficient for emp loyees to operate the app lication, and strict requ irements with regards to service and support so that the ent ire system is m inima lly impacted by any issues that may arise. Enhance Security W ith addit iona l threats around the world and an increas ing demand on security from police departments, airport secur ity , to insurance compan ies, the current ID documents must include the latest techno logies and secur ity mechan isms in order to estab lish a trust with the cardho lder. The system and the credent ials issued by this system must include the mechan isms and features to estab lish th is trust . The Commonwea lth is respond ing by requir ing the Offeror to comp ly with the latest AAMVA standard for the credent ials. In addit ion, the Commonwealth @ GEMALT0.C0M is introducing two new significant process flows to further enhance 4 0-2014-091101 Pennsylvania DOT 109110 GULaw Privacy FR II-1 – Statement of the Problem security within this new contract. The first is a Photo Upfront process to capture a customer’s photo as a first step in the driving license process as way to reduce fraud. The second is a real-time 1:N check being performed prior to any product being issued over-the-counter. This 1:N check will be launched at the time of the Photo Upfront capture process. Specific Requirements of the Solution The RFP reflects what PennDOT has learned over the many years of this program and in previous contracts – what has worked and what has not worked. The RFP stands firm on many requirements. However, PennDOT is also allowing the vendor community to offer suggested approaches, processes, or technologies that may further enhance security, provide better customer service, and/or improve product reliability. The Commonwealth is seeking an overall solution that includes: • • • • An image capture workstation solution that: o Will be deployed at the 97 Photo License Centers o Will retrieve the customer’s information from the DL&C using a scanned 2-D barcode; o Will capture a customer’s photo and signature; o Will perform 1:1 and 1:N facial recognition comparisons; o Will pose questions to the customer regarding the Organ Donor and Motor Voter programs and will capture the customer’s responses; o Will upload captured information to specific backend systems or servers as defined in the RFP; o Will print out temporary or permanent documents and/or a receipt for the Motor Voter process; o Has an interface that promotes efficient navigation through the process; A duplicate workstation solution located in the 71 Driver License Centers that includes: o Interfacing with the DL&C to retrieve customer information, to retrieve the latest photo and signature on file, and to update that a duplicate credential was created (along with updating the CIS); o Produce a permanent credential over-the-counter A facial recognition and investigative solution that will provide: o The migration and biometric enrollment of ~50,000,000 images currently stored in the central image server; o Real-time 1:1 and 1:N image comparisons performed within 5 seconds of request; o A tool to create cases for facial recognition exceptions and allows investigators to access the images, perform visual and biometric comparisons, and adjudicate the cases; An issuance solution that includes: o The capability to produce ~4 Million credentials per year o An over-the-counter solution to produce ~85% of the total number of credentials; o A central issuance solution that will issue approximately 550,000 credentials annually; o The capability to manage credentials for the Department of Corrections that requires special handling; @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 5 109111 GULaw Privacy FR 11-1- Statement of the Problem • The design and product ion of DL/ID cards that: o Have an 8 year life and meet the durab ility requ irements of the RFP o Is made of mater ial supported by AAMVA standards o Has at least a minimum number of security features outlined in the RFP o Contain a magnetic stripe • The design and product ion of other cre dent ials such as Special IDs, Learner Perm its, etc. • A Motor Voter database and reporting system that w ill o Upload Motor Voter response data and customer signature images to DOS o Report statistics to Penn DOT monthly, by county o Electron ically transmit motor voter data to each of the 67 counties Commonwealth • An inventory control and traceab ility so lut ion for all card stock and secure lam inates. • A mo dern back-end IT database and applicat ion infrastructure that ensures o Secure storage of sensit ive data o Highly-available access to services o performance and accessibility to crit ical data and services • A disaster recovery approach to ensure cont inuity of services for o The Central Image Server o The Facial Recognition System, and o The Central Issuance Facility of the 11-2- Management Summary Include a narrative description of the proposed effort and a list of the items to be delivered or services to be provided. (Gemalto Response] Gemalto , Inc. is subm itt ing a response to th is RFP as the contract ing entity/pr ime contractor . Marqu is ID, a Gemalto Company is 100% wholly owned by us, its parent company, Gemalto, Inc. For purposes of th is response, Marquis ID is our subcontractor . We bel ieve that the combined exper ience of Gemalto, Inc. and our who lly owned subsidiary , Marquis ID w ill exceed the requ irements of th is RFPand prove a w inn ing strategy for meet ing the Commonwealth ' s needs. Below we have prov ided a high leve l overvie w of the project includ ing the dep loyment and support throughout the life of contract and a high leve l overv iew of Gema Ito's secure credent ialing solut ion. Project Delivery W ith in the cost per card is included all hardware and software for both the Backend IT systems as we ll as field off ices. Complete fiel d dep loyment to all PennDOT locations w ill be performed by Gema lto engineers and fie ld techn icians. A project plan cover ing the high leve l development and deployment of @ GEMALT0.C0M 6 0-2014-091101 Pennsylvania DOT 109112 GULaw Privacy FR II-2 – Management Summary this project has been included in Appendix 01 of this proposal. The project begins with the Planning Phase, which involves creating a set of plans which will guide the project teams through the rest of the project. There are key plans that will be developed during this period that will assist in managing time, cost, change, risk, staffing, and the overall quality of the project deliverables. In addition, Gemalto will work with PennDOT to gather the detailed requirements, both Business and Technical Requirements, and provide specifications based on the requirements gathered. Following the Planning Phase is the Executing Phase. During the first half of this phase, software customization and configuration, validation, and documentation are performed based on what was agreed upon during the creation of the Business and Technical Requirements. After development and validation, the solution will be deployed including a pilot phase, deployment into primary and disaster recovery data centers, the deployment of the central issuance facility, and finally Statewide implementation into all PennDOT locations. Following the successful deployment of Pennsylvania’s new system, the project will transition for Post Production Support and then the Closing Phase which manages the transition from solution deployment to Support and Maintenance for the life of the contract. Support and Maintenance Gemalto has included, within this proposal, a team of support and maintenance technicians to support the PennDOT field offices and meet the specified response times. In addition, Gemalto has included a call center for Level 1 technical support to act as a first level if any technical issues arise. The network of field technicians will also be utilized to support the secure distribution and delivery of serialized secure card bodies and consumables. In addition, Gemalto will provide support in order to meet performance requirements for the Backend IT system for the life of the contract. Gemalto will capitalize on performance monitoring software and utilities to ensure that the solution meets PennDOT’s performance requirements and specified response times for the life of the contract. Gemalto’s backend IT systems have been designed to be easily saleable and expandable providing a solution that is able to adapt and grow with its customers. Training Training is key to the successful deployment and smooth transition to any project or system of this size. Gemalto has included a combination of Instructor Led Training (ILT), Web Based Training (WBT), and Train the Trainer sessions as well as training and user guides to ensure that all PennDOT staff and subcontractors will be able to effectively use their new software. Cards We will work together with the Commonwealth with the primary goal of creating a driver’s license that is aesthetically pleasing, that is durable, and secure. Our goal is to provide a product whose authenticity can be trusted, and one your citizens are proud to possess. @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 7 109113 GULaw Privacy FR 11-2- Management Summary Gemalto produces secure documents by ut ili zing a combinat ion of security features that provides different levels of security under different leve ls of analysis, and that also prov ides reasonab le tradeoffs between accessibility and comp lexity. Gemalto selects a combinat ion of different features that span overt, covert and forensic funct ions and act to comp lement each other in the document. We understand the importance of Level 1 features as the major ity of the inspect ions are performed without the use of any too ls. The front line needs to have features they can re ly upon to different iate the genu ine from the counterfe it. When avai lable for closer inspect ion, our Level 2 features provide a strong confidence leve l dur ing authenticat ion . Gemalto w ill work w ith PennDOT though a Collaborat ive Design Forum (CDF) do deve lop a card Pennsylvanians wi ll be proud to posses. The CDF includes workshops , discussions and approva ls re lated to the card design deliverab les in a structured and effective manner. Our exper ience indicates that such a forum can create a m ind-set of co llaborat ive work ing, wh ich is important; w ith each party understanding the other 's dr ivers and issues. Such collaborat ion wi ll ensure mutual success in meet ing the defined object ives and, in part icu lar, in ensuring consistency across Penn DOT documents . Solution Gemalto is propos ing the Coesys Secure Credent ialing System as "the Solut ion" to satisfy the requ irements defined by the Solicitation. At a high leve l, the funct iona lity of the Gemalto system proposed to PennDOT is illustrated by the figure below. -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 8 0-2014-091101 Pennsylvania DOT 109114 GULaw Privacy FR II-2 – Management Summary • • o • @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 9 109115 GULaw Privacy FR II-2 – Management Summary @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 10 109116 GULaw Privacy FR II-2 – Management Summary @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 11 109117 GULaw Privacy FR 11-2- Management Summary -----------------[END GEMALTO CONFIDENTIAL INFORMATION]---------------- 11-3- Work Plan Describe in narrative form your technical plan for accomplishing the work. Use the task descriptions in Part IV of this RFP as your reference point. Modifications of the task descriptions are permitted; however, reasons for changes should be fully explained. Indicate the number of person hours allocated to each task. Include a Program Evaluation and Review Technique (PERT} or similar type display, time related, showing each event. If more than one approach is apparent, comment on why you chose this approach. [Gemalto Response] Gemalto follows a methodology founded on the pr inciples of the Project Management Inst itute (PMI). We have taken some of the core components of the classic approach and adapted it to suit the typ ical projects that we dep loy which are similar to the project required for PennDOT which includes Image Capture, Verification , and Central/Over the Counter Issuance. This methodo logy represents over fifteen years of exper ience in the implementation of major projects . We have included a narrative description of our project/work plan in Appendix 01. 11-4- Prior Experience Include experience in providing hardware , software, design services and implementation services for any Over the Counter Digital Photo License systems, Real Time Facial Recognition systems and Central Image Systems. Experience shown should be work done by individuals who will be assigned to this project as well as that of your company. Studies or projects referred to must be identified and the name of the customer shown, including the name, address, and telephone number of the responsible official of the customer, company, or agency who may be contacted. [Gemalto Response] Below we have provided an overview of relevant exper ience del iver ing similar projects to AAMVA jurisdict ions, includ ing photo upfront implementat ions. Many of the key personnel proposed for PennDOT digital dr ivers license system, listed in Append ix 02, were directly involved in the deployment of the below contracts . -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 12 109118 GULaw Privacy FR II-4 – Prior Experience @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 13 109119 GULaw Privacy FR II-4 – Prior Experience @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 14 109120 GULaw Privacy FR II-4 – Prior Experience @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 15 109121 GULaw Privacy FR II-4 – Prior Experience @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 16 109122 GULaw Privacy FR II-4 – Prior Experience ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 17 109123 GULaw Privacy FR 111-4Prior Experience 11-5- Personnel Include the number of executive and professional personnel, analysts, auditors, researchers, programmers, consultants, etc., who will be engaged in the work. Show where these personnel will be physically located during the time they are engaged in the Project. For key personnel such as a Program Manager, In-State Program/Project Manager, Technical Lead/Solution Architect, Central Image Server-FR/Database Lead, Development Team, and Trainer, include the employee's name and, through a resume or similar document, the Project personnel's education and experience in providing hardware, software, design services and implementation services for any Over the Counter Digital Photo License systems, Real Time Facial Recognition systems and Central Image Systems. Indicate the responsibilities each individual will have in this Project and how long each has been with your company. Identify by name any sub selected Offerors you intend to use and the services they will perform. (Gemalto Response] Key Personnel resumes and the ir roles are included in Appendix 02 of th is response. Please note than many of the key staff were invo lved in the projects listed in the response to "11-4 Prior Experience". In addition to the proposed key staff , validation, development, train ing, and deployment teams w ill be used for the del ivery of this project. For the PennDOT Digital Drivers License System, Gemalto proposes the fo llow ing key staff : -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 18 0-2014-091101 Pennsylvania DOT 109124 GULaw Privacy FR ll-5 Personnel 19 gemalto 0-2014-091101 DOT 109125 Privacy FR 11-5- Personnel ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- 11-6- Training If appropriate, indicate recommended training of agency personnel. Include the agency personnel to be trained, the number to be trained, duration of the program, place of training, curricula, training materials to be used, number and frequency of sessions, and number and level of instructors. (Gemalto Response] Gemalto has included a tra ining plan in Appendix 03. Please see Appendix 02 for deta ils and exper ience of the train ing lead. 11-7- Financial Capability Describe your company's financial stability and economic capability to perform the contract requirements. Provide your company's financial statements (audited, if available} for the past three fiscal years. Financial statements must include the company's Balance Sheet and Income Statement or Profit/Loss Statements. Also include a Dun & Bradstreet comprehensive report, if available. If your company is a publicly traded company, please provide a link to your financial records on your company website in lieu of providing hardcopies. The Commonwealth reserves the right to request additional information it deems necessary to evaluate an Offeror's financial capability. (Gemalto Response] Gema lto is a large company w ith $3.2 billi on revenue in 2013. We have off ices in more than 40 countries and over 12,000 emp loyees. Along w ith the cont inued growth in the securit y market , Gemalto ' s stab ility and strong balance sheet are key reasons w hy w e are trusted to deliver over 80 secure document programs for governments w or ldwi de . It should also be noted that Gemalto has a strong presence in the Commonwealth of Pennsylvania with approximately 400 people based in two facilities located in Montgomeryville, PA. A link to our financ ial informat ion can be foun d be low : http: //www .gema lto.com /i nvestors / documents Gemalto ' s financ ial statements for the past three (3) years are included in Append ix 04. 11-8- Objections and Additions to IT Contract Terms and Conditions The Offeror will identify which, if any, of the terms and conditions (contained in Appendix B) it would like to negotiate and what additional terms and conditions the Offeror would like to @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 20 109126 GULaw Privacy FR 11-7- Financial Capability add to the IT contract terms and conditions. The Offeror's failure to make a submission under this paragraph will result in its waiving its right to do so later, but the Issuing Office may consider late objections and requests for additions if to do so, in the Issuing Office's sole discretion, would be in the best interest of the Commonwealth. The Issuing Office may, in its sole discretion, accept or reject any requested changes to the standard contract terms and conditions. The Offeror shall not request changes to the other provisions of the RFP, nor shall the Offeror request to completely substitute its own terms and conditions for Appendix B. All terms and conditions must appear in one integrated contract. The Issuing Office will not accept references to the Offeror's, or any other, online guides or online terms and conditions contained in any proposal. Regardless of any objections set out in its proposal, the Offeror must submit its proposal, including the cost proposal, on the basis of the IT contract terms and conditions set out in Appendix B. The Issuing Office will reject any proposal that is conditioned on the negotiation of the terms and conditions set out in Appendix B or to other provisions of the RFP as specifically identified above. (Gemalto Response] Gemalto has structured its response based on the unmodified IT Contract Terms and Conditions as drafted by the Commonwealth and included with the RFP.Pursuant to Section 11-8of the RFP, we submit our contract object ions as proposed changes (see Appendix 05), should the Commonwealth, in its discretion choose to negotiate these items. We have included an integrated markup of the IT Contract Terms and a corresponding summary in table format, w ith our rationale explained. 11-9- Diverse BusinessParticipation Submittal Documentation of good faith efforts to solicit subcontractors that are diverse businesses (DBs) shall be made by the contractor and be subject to the concurrence of the Department. A list of the requirements constituting good faith efforts and additional information concerning DB participation in this contract is contained in Appendix X, entitled "Diverse Business Participation for Non-Federally Funded Projects". (Gemalto Response] Gemalto has not included A Diverse Business Participation Submitta l w ith in its offer as th is requirement was removed per Addendum but will submit paper documentat ion by email to minoritypartic ipation@pa.gov within seven (7) days of a published selection . Gemalto intends to include a Pennsylvania certified diverse business as a subcontractor assisting in the fie ld deployment and support for the PennDOTDigital Drivers LicenseSystem. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 21 109127 GULaw Privacy FR 11-10- Cost Submittal The information requested in this Part II, Section 11-10shall constitute the Cost Submittal. The Cost Submittal shall be placed in a separate sealed envelope within the sealed proposal, separated from the technical submittal. The total proposed cost shall be broken down as described in this Part 11-10,Cost Submittal, and Appendix E, Cost Submittal. (Gemalto Response] We have included our Cost Submitta l in a separate sealed enve lope w ith in the sealed proposa l, separate from the techn ical submitta l. This cost subm itta l included: • No assumpt ions • Costs quoted on est imate d quantit ies. • Requirements w ith in "A. Tasks A, B, C, D, E, F, G - Deliverab le" • Requirements w ith in "A. Tasks A, B, C, D, E, F, G - Payment" • Requirements w ith in "B. H-1-A ddit iona l Work " • Requirements w ith in "C. Task H2 through H-6" • Requirements w ith in " D. Task H-7" 11-11- Domestic Workforce Utilization Certification Complete and sign the Domestic Workforce Utilization Certification contained in Appendix D of this RFP. Offerors who seek consideration for this criterion must submit in hardcopy the signed Domestic Workforce Utilization Certification Form in the same sealed envelope with the Technical Submittal. (Gemalto Response] Gemalto has included a signed Domest ic Workforce Uti lizat ion Certification in Append ix 06 of this response. @ GEMALT0.C0M 22 0-2014-091101 Pennsylvania DOT 109128 GULaw Privacy FR IV-3 - Requirements IV - 3 - Requirements: A. Emergency Preparedness To support continuity of operations during an emergency, including a pandemic, the Commonwealth needs a strategy for maintaining operations for an extended period of time. One part of this strategy is to ensure that essential contracts that provide critical business services to the Commonwealth have planned for such an emergency and put contingencies in place to provide needed goods and services. 1. Describe how you anticipate such a crisis will impact your operations. 2. Describe your emergency response continuity of operations plan. Please attach a copy of your plan, or at a minimum, summarize how your plan addresses the following aspects of pandemic preparedness: a) Employee training (describe your organization's training plan, and how frequently your plan will be shared with employees) b} Identified essential business functions and key employees (within your organization) necessary to carry them out c) Contingency plans for: i.) How your organization will handle staffing issues when a portion of key employees are incapacitated due to illness. ii.) How employees in your organization will carry out the essential functions if contagion control measures prevent them from coming to the primary workplace. d} How your organization will communicate with staff and suppliers when primary communications systems are overloaded or otherwise fail, including key contacts, chain of communications (including suppliers), etc. e) How and when your emergency plan will be tested, and if the plan will be tested by a third-party. (Gemalto Response] -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 23 109129 GULaw Privacy FR IV - 3 - Requirements: A. Emergency Preparedness @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 24 109130 GULaw Privacy FR IV – 3 – Requirements: A. Emergency Preparedness @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 25 109131 GULaw Privacy FR IV – 3 – Requirements: A. Emergency Preparedness @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 26 109132 GULaw Privacy FR IV – 3 – Requirements: A. Emergency Preparedness @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 27 109133 GULaw Privacy FR IV – 3 – Requirements: A. Emergency Preparedness @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 28 109134 GULaw Privacy FR IV – 3 – Requirements: A. Emergency Preparedness @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 29 109135 GULaw Privacy FR IV - 3 - Requirements: A. Emergency Preparedness ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- IV - 3 - Requirements: B. Thoroughness of Responses PennDOT has identified requirements and deliverables for the comprehensive described above. Offerors are expected to provide thorough, detailed responses to each requirement and/or deliverable or, where applicable, indicate where they unable to do so. Wherever possible, Offerors should include ancillary materials solution address will be such as screenshots, samples, examples, process flows or diagrams which might better help convey its intended solution. (Gemalto Response] Gema Ito has provided thorough , deta iled responses for each of the requirements. We provided screenshots , samp les, examp les, process flows, or diagrams to better con vey our intended so lut ion where ver poss ible. IV - 3 - Requirements: C. Background Checks All employees must complete a name-based nationwide criminal background check before beginning work for this contract. In addition to the requirements established in Appendix B, IT Terms and Conditions, the selected Offeror will also be responsible for the following, at no cost to the Department: 1. It will be the responsibility of the selected Offeror to ensure any employee, prior to performing work under the contract arising from this RFP, obtain a fingerprint-based Federal Bureau of Investigation criminal history records check (CHRC) to determine if they have been convicted of a criminal offense. These checks must be coordinated @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 30 109136 GULaw Privacy FR IV - 3 - Requirements: C. Background Checks through PennDOT. There is a fee associated with the CHRCand PennDOT will invoice the selected Offeror for actual fees incurred for obtaining the CHRC. 2. Criteria for not passing the criminal background check are the following: i. Any felony conviction within the last 10 years; ii. Any conviction involving fraudulent activities; iii. Any offenses set forth in 49 CFR 1572.103; and/or, iv. Any violations identified in state or federal law or regulation as may be applicable. 3. Selected Offeror must maintain a record of the results of the name based criminal background checks for 3 years past the contract end date. If a criminal conviction is found, the selected Offeror shall furnish the facts of the offense to PennDOT and secure PennDOT approval before the individual begins work on any aspect of the project. PennDOT takes the position that a person convicted of a criminal offense need not be barred from employment by the selected Offeror in all cases and each case will be considered on its individual merits. 4. Selected Offeror employees transporting equipment and/or supplies shall use vehicles which can be locked and in which the equipment and supplies can't be viewed from outside the vehicle. (Gemalto Response] Gemalto has str ict policies in place regard ing background checks given the number of cert ificat ions our faci lit ies hold including NASPO and financia l certifications such as VISA and MasterCard , for examp le. The background of all emp loyees is met icu lous ly invest igated pr ior to emp loyment . The fo llow ing secur ity checks are undertaken at the recru itment stage : • Evidence of Individua ls experience • Evidence of individua ls background and character (persona l / profess iona l references ) • Verificat ion of identity • Financial Check • Crimina l Record Check • Verificat ion of emp loyment history (gaps in emp loyment are invest igated and risk assessed) • Verificat ion of education history Gemalto also fo llow s str ict guidelines w ith regards to specific programs . For examp le, for those emp loyees w ho w ork on the US Passport program, addit iona l screening and checks are requ ired. So, w e are exper ienced in having programs in place comparab le to the requ irements listed in "C. Background Checks" and confirm that w e understand the requ irements listed in the sect ion and that w e w ill comp ly w ith these requ irements shou ld w e be aw arded the contract. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 31 109137 GULaw Privacy FR IV - 3 - Requirements: D. Project Management 1. Project Manager - The selected Offeror shall provide a dedicated Project Manager to monitor all aspects of the project. The selected Offeror Project Manager will be expected to be involved in every detail of the project from start to finish. High level oversight will not be acceptable. The requirements listed in this document are not meant to be the final requirements of the project. The selected Offeror Project Manager should expect to follow project phases from project initiation through acceptance, including requirements gathering and analysis. The selected Offeror Project Manager should be prepared and capable of facilitating requirements gathering meetings with PennDOT staff. The selected Offeror project manager needs to be involved in the technical details of the design, development, and testing phases of the project, and should not expect the technical lead to fully manage those activities. 2. Program Manager - The selected Offeror shall also provide a dedicated Program Manager for the life of the contract. The Program Manager will be responsible for managing the Central Issuance Facility located in the Harrisburg, PA area. The Program Manager will be responsible for making sure that the Central Issuance Facility meets the required production and quality standards, as well as the management of the contract and day to day operations. The Program Manager will be the single point of contact for PennDOT concerning all aspects of the contract. The Program Manager must be easily accessible and available 24 hours per day-7 days per week-365 days per year. To meet this requirement, it is PennDOT's preference that the Program Manager keep an office within a 25 mile radius of the Central Issuance Facility. (Gemalto Response] Gemalto has read and understands the requirements for Project Management and will comply if selected. Resumes for the proposed Project Manager and Program Manager are included in Append ix 02. IV - 3 - Requirements: E. Plans The selected Offeror shall be responsible for providing plans to PennDOT as described in this Part IV - Work Statement. The selected Offeror must utilize the critical path method to identify a project schedule that will allow for all requirements to be implemented prior to July 27, 2016. All plans must be updated throughout the life of the project and will be considered the prime indicator of project progress. (Gema lto Response] Gemalto understands that, if selected, we will be requ ired to prov ide plans to PennDOT as described in Part IV- Work Statement and we will comp ly. We will utilize the critical path method to ident ify a project schedu le to allow imp lementat ion prior to July 27, 2016 and we will update these plans through the life of the project so as to communicate the project prog ress. @ GEMALT0.C0M 32 0-2014-091 101 Pennsylvania DOT 109138 GULaw Privacy FR IV- 3 - Requirements: F. Meeting Participation In addition to status reports as described in Part IV-5 - Reports and Project Control below, the selected Offeror will be responsible for participating in: 1. Project Execution Management Team (PEMT) - PEMT meetings are weekly status meetings, led by PennDOT. The selected Offeror Project Manager, and other personnel if necessary, shall be responsible for attending these meetings to provide project status updates to key Penn DOT personnel. 2. Project Governance Committee (PGC) - The selected Offeror Project Manager shall be required to participate in Monthly PGC meetings throughout the project. PGC is the executive level status meeting for the Commonwealth in which decisions having major impact on projects can be made. If necessary, the selected Offeror may be required to present at the PGC meeting. (Gemalto Response] Gema lto understands and will attend and part icipate in the follow ing: • Project Execut ion Management Team • Project Governance Comm ittee meet ings IV - 3 - Requirements: G. Confirmation of Services and Invoicing 1. The selected Offeror must submit a signed Confirmation of Service, OS-501 (Appendix G) to PennDOT's Project Manager to confirm services have been rendered. All supporting invoice documentation should be submitted with the OS-501. This shall be done monthly. i. The selected Offeror must submit to PennDOT all products produced and postage incurred within 30 days following the end of the month in which the cards and postage were processed on the OS-501. ii. The selected Offeror must show any credits owed to Penn DOT on the OS-501. iii. The OS-501 must contain a supporting document that shows the quantity of issued Driver License/Identification cards, by type, and the unit charge. 2. PennDOT's Project Manager will review for accuracy and determine if the OS-501 is approved or if it requires revisions. PennDOT's Project Manager will sign the OS-501 as acceptance of the service and will forward to PennDOT's Receiver for entry of Goods Receipts (GRs). The Receiver will sign the OS-501 upon completion of the GR entries. 3. Once the OS-501 contains all three (3) signatures (i.e., selected Offeror, Project Manager, and Receiver), the selected Offeror will receive a copy for their records. 4. The fully signed OS-501 is PennDOT's approval for the selected Offeror to create an invoice that contains the information on the OS-501 and mail the invoice to the "Bill To" address as shown on the fully executed Purchase Order. All charges on a submitted invoice must be directly related to work performed on all identified tasks. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 33 109139 GULaw Privacy FR IV - 3 - Requirements: G. Confirmation of Services and Invoicing More information regarding invoice requirements may be found at : http://www .budget.state.pa.us/portal/server.pt/community/vendor_services/10661/procur ement_vendor _information/560980 (Gemalto Response] Gemalto understands and w ill comply w ith th is requ irement shou ld w e be selected. A ll OS-501, suppo rt ing documentat ion, and invo icing requ irements w ill be followed by Gemalto. @ GEMALT0.C0M 34 0-2014-091101 Pennsylvania DOT 109140 GULaw Privacy FR IV-4 - Tasks - Planning and Requirements Phase Task A - Project Management Work Plan The tasks below represent the deliverables that PennDOT ant icipates the selected Offeror prov iding dur ing the development and imp lementat ion of the project and are meant to serve as a guideline . The selected Offeror shou ld amend th is list as necessary to prov ide a true representat ion of w hat deliverab les PennDOT can expect to receive from the selected Offeror. It is expected that the selected Offeror wi ll ident ify dates for delivery on the fo llow ing subplans that make up the overa ll Project Management Work Plan. Task A - Project Management Work Plan - Project Management Deliverables Project Management Deliverables. All project management products shall adhere to the selected Offeror's quality of service standards and guarantees provided in the response to this RFP. During the term of the Contract, the selected Offeror shall be required to maintain the Project Management Plan and have each plan made available to PennDOT upon request, at no additional cost to PennDOT. The Project Management Deliverables are as follows: • Project Work Plan (Task A-1) • • Communications Management Plan (Task A-2) Change Control Management Plan (Task A-3} • • Quality Management Plan (Task A-4) Risk and Issue Management Plan (Task A-5) • Data Conversion Plan (Task A-6) • • Consumables Handling Plan (Task A-7) Testing Plan (Task A-8) • • Training Plan (Task A-9) Statewide Implementation/Ramp-Up • Site Survey- Facilities (Task A-11) Transition Plan (Task A-10) (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management Work Plan - Project Management Deliverab les" and, if selected , w ill comp ly w ith th is requ irement. A descript ion of our approach and plans can be found in "Append ix 01 - GTO Project Plan" . @ GEMALT0.C0M 35 0-2014-091101 Pennsylvania DOT 109141 GULaw Privacy FR Task A - Project Management Work Plan - Description Project management involves planning, organizing and managing resources to bring about the successful completion of specific project goals and objectives. PennDOT's Bureau of Driver Licensing (BDL) also promotes consistency, uniformity and continual improvement in project management within PennDOT, supports communication to stakeholders, and assists with issue/change/risk management and capacity planning for PennDOT resources. The selected Offeror will be responsible for maintaining and providing updates on a weekly or monthly basis and as requested by the Department. Project Management is composed of several different types of activities such as: • • • • • • • • • Planning the work (tasks, subtasks, activities, milestones) needed to meet the project objectives, schedule and budget, and tracking to the baseline. Developing/executing a change management plan. Assessing/controlling issues and risks. Estimating, allocating and monitoring activity of project resources. Directing activity and controlling project execution. Reporting status and tracking progress against the project plan. Developing/executing a quality management plan. Developing/executing a communication plan. Conducting After Action Reviews (AAR). PennDOT will assign a Project Manager who will coordinate PennDOT's responsibilities and provide oversight, monitoring, and verification of all project activities. The selected Offeror shall be responsible to complete all work and meet all requirements identified in the executed contract. The selected Offeror shall be responsible to complete the work to conditions of satisfaction for quality, accuracy, and completeness to be approved by PennDOT. Refer to Appendix Q, PennDOT Project Management Handbook, for the Project Management methodology which must be followed and Appendix R, PGC Status Report Template, for the template required for Project Management Reporting. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management Work Plan - Descr ipt ion" and, if selected , w ill comp ly w ith th is requirement . A description of our approach and plans can be found in "Append ix 01- GTO Project Plan" . Our approach builds in the flex ibilit y requ ired to ensure that our methodo logy aligns w ith our clients w hile also sati sfying the requ irement s of our Project Management Off ice (PMO). @ GEMALT0.C0M 36 0-2014-091101 Pennsylvania DOT 109142 GULaw Privacy FR Task A - Project Management - Task A-1: Project Work Plan The selected Offeror shall develop a Project Work Plan by incorporating input from all parties as deemed necessary to establish the overall direction and goals of the project. At a minimum, the following documents shall be incorporated into the Project Work Plan: • • • • • • • • • • • • Project Scope Document. Stakeholder expectations. Project expectations, goals, and benefits. Dependencies and interrelationships. Project Work Plan to include activities/tasks for: Issue Management. Risk Management. Change Control Management. Communication Management. Project Execution System Development Life Cycle (SDLC}. Quality Management. Project Close-Out. The selected Offeror shall update the project plan as changes occur to the Project Work Plan activities to reflect project progress, to manage schedule and resource variances, and to take appropriate corrective action. Tasks, sub-tasks, activities or sub-activities must be tracked through the PennDOT standard scheduling tool - Clarity. The selected Offeror shall prepare a complete Critical Path Method (CPM) schedule that adheres to and incorporates all contract requirements, shows work being completed on or before the Completion Oates, and meets any specified Milestone Oate(s). The selected Offeror shall incorporate in the schedule coordination with all entities (sub selected Offerors, etc.) and contracts that could impact the project schedule. The schedule shall also indicate when any special materials and equipment are needed to allow for procurement planning, and will indicate constraints (i.e., dependency relationships) between activities. The selected Offeror shall be responsible for managing the day-to-day operation of the project. This includes, but is not limited to the development, maintenance and execution for the following activities of the project plan which incorporates selected Offeror and PennDOT activities, sub-activities, milestones and assigned resources for the project. The Project Work Plan shall be subject to review and approval Management Team and Project Managers group. by the core Project (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-1 Project Work Plan" and, if selected , will comp ly wi th this requ irement. In order to ill ustrate our experience , we provided a description of our approach and a high level Project Work Plan w ithin "Appendix 01- GTO Project Plan" . @ GEMALT0.C0M 37 0-2014-091101 Pennsylvania DOT 109143 GULaw Privacy FR Task A - Project Management - Task A-2 : Communications Management Plan The purpose of Communication Management is to create and implement strategy and plan for the project. a communications The selected Offeror is responsible for developing and implementing a communications management strategy and managing communications within the scope of the project. An effective Communication Management strategy involves the following: • Developing communications principles and objectives; • • Conducting internal and external stakeholder analysis; Developing and managing a Communication Management Plan; • • Developing and delivering targeted project communications; and Collecting, analyzing, and responding to feedback on Communication activities. Management (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-2: Commun icat ions Management Plan" and, if selected, w ill comply w ith th is requ irement. Within our "Append ix 01 - GTO Project Plan" included in our response, we have a section t itled " 2.5 Project Communicat ion" that prov ides some deta il on how we manage project communicat ion. Task A - Project Management - Task A-3: Change Control Management Plan Proactively managing scope is a critical element of effective project management. Scope creep (the gradual and incremental expansion of scope) is a common cause of project failure. The objectives of this task are: • To define and manage the scope of project work so that it complies with the project requirements and budget; • To establish the strategy/process for change request evaluation with respect to impact on schedule, budget and resources, critical success factors and project objectives; • To develop, implement, manage, and monitor issues and change requests; • • To provide a description of proposed change control tools; and To establish an approach to change request implementation. the processes for managing project Scope management, in addition to monitoring the scope of work of a project, also includes the maintenance and validation of contract terms and conditions. Changes to the project scope may in turn impact the project schedule, cost, quality, and approved work products. @ GEMALT0.C0M 38 0-2014-091101 Pennsylvania DOT 109144 GULaw Privacy FR Task A - Project Management - Task A-3 : Change Control Management Plan The selected Offeror is responsible for adhering to change control standards, policies, and procedures and effectively managing and coordinating project changes. All change requests will be reviewed, prioritized and approved by PennDOT. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-3: Change Control Management Plan" and, if selected, w ill comply w ith th is requ irement. Within our "Append ix 01 - GTO Project Plan" included in our response, w e have a sect ion t itled "2.1 Project Contro l" that provides some deta il on how w e manage change contro l and any schedu le change s, if requ ired. Task A - Project Management - Task A-4: Quality Management Plan Quality management involves the development and execution of the Quality Management Plan, which enables the project to satisfy PennDOT's needs and expectations. Quality Management permeates all project activities and includes essential contributions to and from project management and risk management. Quality Management establishes policy and functions that promote excellence through the application of established procedures, standards, and tools throughout the project's life cycle. The objectives of this activity are to establish and execute the quality processes. The main goal of quality management is to produce a high quality solution that: • Incorporates best practices; • • Enables quality to become a component of creating deliverables; and Establishes and monitors PennDOT's goals throughout the project's life-cycle and aligns relevant characteristics of selected Offeror's services to meet PennDOT's goals. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-4 : Qualit y Management Plan" and, if selected , w ill comply w ith th is requ irement. W ith in our "A ppendix 01 - GTO Project Plan" included in our respon se, w e have a section tit led " 2.6 Qualit y Management " that pro vides some deta il on how w e manage quality control. Task A - Project Management - Task A-5: Risk and Issue Management Plan A risk is an event or action that has a chance of occurring that may result in a negative effect on the project. Risk Management is the systematic process of identifying, analyzing, and responding to project risk. Once an identified risk has occurred, it becomes an issue and is handled through the issue management process described earlier. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 39 109145 GULaw Privacy FR Task A - Project Management - Task A-5 : Risk and Issue Management Plan The objectives of the Risk Management task are: • Develop an effective risk management plan to identify, categorize, quantify, prioritize, and respond to project risks with mitigation strategies; • Select and execute risk responses; and • Determine whether the implemented risk responses are achieving objective and provide corrective action if necessary. The selected Offeror is responsible for developing and implementing strategy and managing risks for the Digital Driver License project. the desired a risk management All risks and issues that have been encountered shall be included in the documentation provided for the weekly status meetings and the monthly Governance Committee meetings. Issue management is the systematic process of identifying and resolving project issues that may arise from any project activity. Action items may become issues if they are not resolved timely or effectively. Issues can affect the project work plans if not addressed properly and timely. Issue Management Process includes: • • Identify/define/document Log the issue for tracking; • Identify severity/priority • • Evaluate/document potential impact to project; Identify/document/present options for resolution; • • Identify pros/cons of proposed options for resolution; Determine level of escalation required for resolution; • • Determine appropriate communication scope and strategy; and Implement and document the resolution of the Issue. The selected Offerer activities. the issue; of the issue; shall document and manage all projects issues across all project (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-5: Risk and Issue Management Plan" and, if selected , w ill comp ly w ith this requ irement. Within our "Append ix 01 - GTO Project Plan" included in our response, w e have a section t it led " 2.4 Risk Management " that prov ides some detai l on how w e manage risk and a section t it led " 2.3 Issue Management " that prov ides some deta il on how w e manage issues. @ GEMALT0.C0M 40 0-2014-091101 Pennsylvania DOT 109146 GULaw Privacy FR Task A - Project Management - Task A-6 : Data Conversion Plan Data Conversion refers to the planning and processes necessary to migrate data from an existing system to another system without a loss or degradation of data. The purpose of the Data Conversion plan is to outline a strategy for the migration of existing, PennDOT legacy data to the new, selected Offeror's provided systems. The Data Conversion Plan should include tasks, roles and responsibilities for analyzing current, legacy data and the strategy and method(s) for migrating that data to the new Digital Driver License system{s), including Central Image System data and enrollment of current images in new Facial Recognition System templates. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-6 : Data Conversion Plan" and, if selected, w ill comp ly w ith th is requ irement. W ith in our "Appendix 01 - GTO Project Plan" included in our response, we have accounted for the incorporation of th is plan and within our response to "Task B-5 - Central Image Server - Conversion of Image Files", we included a high leve l approach to the data convers ion . Task A- Project Management-Task A-7 : Consumables Handling Plan The Digital Driver License project involves the handling of highly secure materials, such as laminate and card stock, and confidential personal information, such as laminate used in the card printing process. Tracking these materials and accounting for their use or destruction is imperative to ensure that they do not become lost or used for fraudulent activities. As such, the selected Offeror must provide a consumables handling plan which meets the requirements of this RFP and ensures: • Safe handling procedures of any secure materials by the selected Offeror; and • Secure, trackable transportation of all secure materials to and from and PennDOT, selected Offeror or Sub-Contractor facilities The destruction system of any used or unused secure materials from the Digital Driver License (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-7: Consumab les Handling Plan" and, if selected , will comp ly with th is requ irement. Within our "Appendix 01 - GTO Project Plan" included in our response , we have accounted for the incorporat ion of this plan . Given that Gemalto ho lds Visa, MasterCard, and other sim ilar financial cert ifi cat ions, in addition to NASPO certification, we have very defined processes w ith regards to protect ion of consumab les and we will leverage those defined processes and incorporate them into our plan. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 41 109147 GULaw Privacy FR Task A- Project Management-Task A-8: Testing Plan Documenting the testing scope and activities for all aspects of the systems as well as a timeline of when those activities will occur is imperative to ensure that the system is thoroughly vetted before being released into production. Any testing described in this RFP shall be inclusive of all systems, including those housed at both the Centers and in any PennDOT or selected Offeror operated facilities. The selected Offeror shall develop, implement, and maintain a Test Plan, subject to PennDOT approval, in accordance with industry standards to manage testing and defect tracking for the purpose of providing an efficient error correcting process to be used in system and user acceptance testing (UAT). The test plan must include all of the following: • • Unit testing - on-going development testing (selected Offeror); Integration testing - all the pieces work together (selected Offeror and Penn DOT); • Usability testing - user friendly, intuitive application (selected Offeror and Penn DOT); • Functional testing Penn DOT); • Performance testing - stress and load (selected Offeror) - Selected Offeror must also provide the mechanism to create load and stress conditions; • Testing of external interfaces - communication with other applications, databases, etc. (selected Offeror and PennDOT); Continuous regression testing - on-going to determine impact of changes (selected Offeror and PennDOT); and • • - test scenarios against requirements (selected Offeror and The Test Plan must include a schedule for when software or other changes will be deployed to the test system and testers must receive documentation of the changes. (Gemalto Response] Gema lto has read and understood the requ irement regard ing "Task A - Project Management - Task A-8: Test ing Plan" and, if selec ted , will comp ly wit h this requ irement . With in our "Appendix 01 - GTO Project Plan" included in our response, we have a sect ion tit led "4.5 Testing and Validat ion Strategy" that prov ides some deta il on managing our approach to testing and validat ion. In add ition, under the sect ion of "Execut ing Pha se", we have severa l subsect ions that provide good description of our te st ing processes and procedures. These sections include "5.2 Software Validation (Test ing)", "5.5 Factory Acceptance Test", and "5.7 Data Center Deployment and User Acceptance Test System". @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 42 109148 GULaw Privacy FR Task A - Project Management - Task A-9 : Training Plan A training plan documents the scope of all training to be provided by the selected Offeror to Penn DOT, the content of that training as well as a timeline of training activities Each proposal shall include a detailed training plan for the Image Capture and Duplicate Workstations and Facial Recognition System training to be conducted. Each training plan must include, at minimum: • A description of the training, including its duration; • • The number of participants per session; The qualifications of the training instructors; • A detailed list of the tasks a photo technician must perform daily to issue a Photo License/ID card; and • The evaluation criteria of Photo Technicians, in order to identify competency in operating the workstation. their level of (Gemalto Response] Gemalto has read and understood the requ irement regarding "Task A - Project Management - Task A-9: Training Plan" and, if selected, will comply wi th th is req uirement. We have included a sample Training Plan in "App endix 03 GTO Train ing Plan". Task A - Project Management - Task A-10: Statewide Implementation/RampUp Transition Plan This s a phased, Commonwealth-wide rollout of all hardware/software to License Centers as well as installation of any backend Driver u\..11::m,1:: '-t:mers/Photo hardware/software in remote facilities. The selected Offeror must prepare an implementation plan which addresses every aspect of the system. This plan must ensure that all systems shall be installed prior to July 27, 2016. • In addition to the Statewide Implementation/Ramp-Up Transition Plan, if the Selected Offeror is not the incumbent for the current contract, the Selected Offeror will be required by PennDOT to ensure a seamless transition with no interruption of services. • Ramp-Up Transition activities will be the responsibility provided at no additional cost to PennDOT. of the Selected Offeror and shall be • The Selected Offeror shall be fully prepared to work with the incumbent of the current contract to ensure a seamless transition into the new contract. The Selected Offeror shall meet with appropriate PennDOT personnel in a timeframe as directed by PennDOT to gain a thorough understanding of how operations must be transitioned to the Selected Offeror. In the event that changes to the Selected Offeror's Ramp-Up Plan are identified as a result of the meeting, the Selected Offeror must revise and resubmit the Ramp-Up Plan to PennDOT for final review and approval by Penn DOT. The Selected Offeror @ GEMALT0.C0M must maintain open communications with PennDOT on any issue 43 0-2014-091101 Pennsylvania DOT 109149 GULaw Privacy FR Task A - Project Management - Task A-10: Statewide Implementation/RampUp Transition Plan involved with meeting the transition requirements and the full implementation date. Penn DOT will provide a transition period that may instruct the Selected Offeror to: • Begin a transition in service at any time during the contract term upon written notification from PennDOT in order to provide for the smooth transfer of service; • Working with the incumbent of the current contract; • Participation in testing and troubleshooting to ensure transition of all images and any other data from the incumbent to the Selected Offeror ; • Ensure that the removal of all systems hardware from the Driver License Centers and Photo license Centers on dates specified by PennDOT and agreed upon by the incumbent; • Upon request from PennDOT, the Selected Offeror shall supply a complete list of all hardware and other equipment used for PennDOT's Digital Driver License System/Program. A brief description of how each piece of equipment will be used and whether any data stored on the equipment is sensitive. This includes equipment located at PennDOT sites or the Selected Offeror's sites. The Statewide Implement/Ramp-Up Transition Plan must include: • • Personnel responsible for each task; Plan for conducting site surveys of PennDOT Driver License Centers; • A detailed project management necessary equipment; • A plan which includes a phased-in implementation DL and Image Capture Workstations; • A plan outlining the installation and go-live of all Central Issuance components; • A plan for the installation and go-live of all Central Image Server components; • A plan for the installation and • The selected Offeror must also provide plans to address the migration of data to the new systems. This includes migrating all images to the new Central Image Server and enrolling all images in Facial Recognition templates in the Facial Recognition system. See Data Conversion Plan. plan outlining both delivery and installation of approach, by region, for the Center and go-live of all Facial Recognition System components; (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Task A-10 : Statew ide Implementat ion/Ramp-Up Transit ion Plan" and, if selected, will comply w ith this requ irement. With in our "Append ix 01 - GTO Project Plan" included in our response, we have severa l sections that cover the plan itse lf, a descr ipt ion of our pilot plan approach can be found in "5.8 Pilot Phase", dep loyment of data centers can be found in "5.7 Data Center Deployment and User Acceptance Test System", and dep loyment to the offices can be found in "5.9 Statew ide Imp lementation". @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 44 109150 GULaw Privacy FR Task A- Project Management-Task A-11 : Site Survey - Facilities In order to accurately document requirements conducted to assess each individual facility. for DLCs/PLCs, a site survey must be The selected Offeror must provide a detailed site survey and assessment prior to installation of equipment for each PennDOT Driver License Center and Photo License Center. Because each Driver License and Photo License Center may be slightly different, it is important that the selected Offeror get an accurate estimate as to how hardware can be installed at each location. Site survey report must include, at a minimum: • Facility floor plan; • • Facility layout; Appropriate measurements; • Photos; • • Electrical requirements; Cabling requirements; • • Recommendations for workflow Security concerns; • • Number of DL and PL Workstations needed; and Other recommendations or concerns. changes; (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management -Task A-11 : Site Survey - Facilities " and, if selected, w ill compl y w ith th is requ irement. We have accounted for th is in our project plan w hich can be found in "A ppend ix 01- GTO Project Plan" . Task A - Project Management - Deliverable The Project Management Plan including, but not limited to, individual plans defined above in Tasks Al - All, shall be the first deliverable for the project. This deliverable must be completed by the selected Offeror and submitted to PennDOT within 90 days of the Valid From Start Date established on the Notice to Proceed. PennDOT shall have a minimum of fifteen (15) business days to review and approve selected Offeror's Project Management Plan. The Project Management Plan must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. @ GEMALT0.C0M 45 0-2014-091101 Pennsylvania DOT 109151 GULaw Privacy FR Task A - Project Management - Deliverable Ta sk A Delin-rable s Summa1·y Deliverable Ta sk Sub -Ta sk A -1 - Project \Vork Plan A-2 - Communication s Management Plan A-3 - Cbange Control Management Plan A-4 - Quality Management Plan A-5 - Ri sk and Issue Ma nagement Plan A-6 - Data Conver sion Plan Project Management TASKA A-7 - Consumable s Handling Plan Plan A-8 - Te.sting Plan A-9 - Training Plan A-10 - Statewide Implementation/Ramp -U p Tran sition Plan A-11- Site Sm-vey - Fa cilitie s (Gema lto Response] Gemalto has read and understood the requ irement regard ing "Task A - Project Management - Deliverab le" and, if selected, w ill comply with th is requirement. We have accounted for th is in our project plan wh ich can be found in "Appendix 01- GTO Project Plan" . @ GEMALT0.C0M 46 0-2014-091 101 Pennsylvania DOT 109152 GULaw Privacy FR Task B - Requirements Documentation Task B-1- Photo Upfront Offerors shall provide Photo Upfront solutions based on their experience and expertise in implementing similar processes and systems. Offerors, in their response to this RFP, should also provide evidence of their experience in implementing upfront photo processes for other organizations of a similar or larger size than the Commonwealth. [Gemalto Response] Coesys Capture, our portra it capture and temporary document pr int ing app licat ion, descr ibed in deta il in response to the detailed requirements found in Task B-2, below , is the applicat ion that we propose to use as our pr imary Photo Upfront appl icat ion . One of the key advantages to the Coesys Capture app lication is that it is a very modular app lication and can be configured to perform a subset of its full funct ional ity . In th is way , the Capture appl icat ion can be insta lled on the DLC workstation(s), along with a camera tower, and capture an app licant ' s photo very effic iently. -----------------[BEGINN @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 47 109153 GULaw Privacy FR Task B-1- Photo Upfront @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 48 109154 GULaw Privacy FR Task B-1- Photo Upfront @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 49 109155 GULaw Privacy FR Task B-1- Photo Upfront @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT so 109156 GULaw Privacy FR Task B-1- Photo Upfront ------------------[END OF GEMALTO CONFIDENTIALINFORMATION]--------------------------- We believe that PennDOT's takea way from th is sect ion shou ld be that our Coesys Capture appl ication is modu lar and flex ible and will accommodate w hate ver scenar io that PennDOT and Gemalto create together after we perform the site assessments. Task B-2 - Image Capture Workstations Task B-2 - Image Capture Workstations - General Each Image Capture Workstation must include all hardware and software necessary to produce Photo License/ID Cards for over-the-counter (instant} issuance of either permanent or temporary products. This includes: • • Retrieving customer information Capturing a customer signature; from DL&C via a scanned 2-D barcode; • Capturing a customer image; • • Performing real time 1:1 and/or 1:N facial recognition on any captured images; Allowing customers to view both Organ Donor and Motor Voter questions (when necessary); • Capturing customer responses to Organ Donor and Motor Voter prompts; • • Uploading Motor Voter responses to DOS; Uploading the image file to the Central Image Server in real time; • • Printing the customer's product (permanent or temporary); Printing customer receipts for the Motor Voter process. and During the process, no customer images or data shall be stored on the workstation time. at any The amount of space at Photo License Center facilities varies by facility. Included in Appendix K, Workstations, are examples of both a typical workstation and the smallest workstation currently used by PennDOT. The Offeror shall specify in its proposal the outside dimensions of its Image Workstation hardware and the size of counter/furniture required to ensure the proposed solution can be accommodated across the Commonwealth. Any changes which may be required to the current workstations selected Offeror and must meet ADA requirements. must be paid for by the The Workstations shall be designed in such a way as to keep cable clutter to a minimum and not represent a hazard to either the customers or the Photo Technicians. The selected Offeror shall have two card printers attached to any Image Capture Workstation @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 51 109157 GULaw Privacy FR Task B-2 - Image Capture Workstations - General (Gemalto Response] Gemalto confirms that the image capture w orkstat ions included w ith in th is offer include all necessary hard w are and soft w are to perform the follo w ing requ irements: • Retr iev ing customer informat ion from DL&C via a scanned 2-0 barcode ; • Capturing a customer signature ; • Capturing a customer image; • Perform ing real t ime 1 :1 and / or 1:N fac ial recogn ition on any captured images; • A llow ing customers necessary ); • Capturing customer respon ses to Organ Donor and Motor Voter prompts; • Uploading Motor Voter responses to DOS; • Uploading the image fi le to the Centra l Image Server in rea l t ime ; • Printing the customer 's product (permanent • Printing customer rece ipts for the Motor Voter process. to view both Organ Donor and Motor Voter que st ions (w hen or temporary ); and The approximate layout for Pennsylvania's Image Capture Workstat ion w ith all per ipheral s is 24" x 60" but it can be reduced , if necessary, for smaller desks. For examp le, printers (card and motor voter receipt ) can be mounted under a desk. Gema lto confirms that any changes requ ired to the w orkstat ions for insta llation w ill be covere d by Gemalto . Gemalto ' s hard w are and soft w are meets ADA comp liance requ irements. Based on our experience , alignment w ith ADA design standards not onl y benefits ind ividua ls w ith disabilit ies, but also enhances the overa ll design, funct ional ity, and value of our so lution . In add ition, all cables and cords are secured to ensure a clutter free workspace . Gemalto confirms that all Image Capture Workstat ions w ith t w o card printers w ill be replace d w ith tw o card pr inters as requ ire d by PennDOT. Task B-2 - Image Capture Workstations - Compliance All equipment and accessories shall meet or exceed all current OSHA standards and all current standards of the industry in addition to the requirements specified in this RFP. All materials of a chemical nature that are provided in accordance with this RFP must meet the Labeling and Material Safety Data Sheet requirements of the Pennsylvania Worker and Community Right-to-Know Act, Act 159 of 1984, P.L. 734, as amended, 35 P.S. Sections 73017320. (Gemalto Response] Gemalto confirms that all equipment and accessories w ill meet or exceed current @ GEMALT0.C0M 52 0-2014-091101 Pennsylvania DOT 109158 GULaw Privacy FR Task B-2 - Image Capture Workstations - Compliance OSHA standards in add ition to the requ irements of this RFP. In add ition, all mater ials of a chem ical nature prov ided for th is RFPwill meet the labeling and MSDS requ irements of the Pennsylvania Worker and Commun ity Right to Know Act 159 of 1984, P.L. 734, as amended, 35 P.S. Sections 7301-7320 . Task B-2 - Image Capture Workstations - Hardware All Image Workstations technology. must be of new manufacture and utilize current, available Offeror shall propose Workstations that meet or exceed specifications required to operate the Offeror's solution which meets all requirements specified in this RFP for the duration of the contract. Offeror's solution must include, at a minimum, a corresponding number of workstations per Center as are currently implemented (see Appendix L, Image Capture and Duplicate Workstation Quantities.) The Offeror shall include representative hardware for its proposed solution in its proposal. (Gemalto Response] Gemalto confirms that all hardware provided will be new and utilize current, availab le technology that meets or exceeds the specificat ions requ ired to operate Gema Ito's solution for the durat ion of the contract. Below we have prov ided a list of representat ive hardware for our proposed solut ion. The item s and quant it ies pro posed by Gema lto to satisfy t he RFP requ irements fo r t he "Image, Captu re Wor kstat ions" are defined with in th is ta ble. Gema lto proposes t he HP Elite 800 all in one PC Wo rkstat ion t hat, in additio n t o t he requ ired feat ures, above, includes: • Inte l Core i3 i3-4130 3.40 GHz processo rs • 4 GB Memory Tech nology DDR3SDRAM • 500Gb HDD • Touch Screen 155 Workstation @ GEMALT0.C0M 53 0-2014-091101 Pennsylvania DOT 109159 GULaw Privacy FR Task B-2 - Image Capture Workstations - Compliance Gemalto proposes the Lenovo ThinkPlus Enhanced Performance USBKeyboard. 155 Gemalto proposes the standard 2-butto n mouse supplied with the workstation personal computer, which satisfies all requirements. 155 Gemalto proposes the Belkin Mouse Pad (F8E089-BLK),Jersey/Rubber, for non -slip performance. 155 Gemalto proposes and integrated camera towe r and stand that, in addition to the required feat ures, above, includes: • Secure camera mount and enclosure • 24.2 megapixel DSLR camera • Professiona l-grade flash • User-adjustable camera he ight and angle • Secure base plate 155 Gemalto proposes a professional photo bac kdrop system consisting of: • Color material - blue on one side, white on the opposite side • 35" wide x 42" tall when expanded • Internal self-expanding frame • Free -standing backd rop tri pod stand, or • Mount ing clips and additional mounting hardwa re for wall or ceiling attachment 155 Workstation Keyboard Mouse Pad Camera Tower .. .... I ,. Backdrop @ GEMALTO.COM 0 -2014 -091 101 Pennsylvania DOT 54 109160 GULaw Privacy FR Task B-2 - Image Capture Workstations - Compliance Gemalto proposes the Wacom STU-530 digital signature capture pad with the following main features: • 5" diagonal screen (4.3" x 2.6") • Tethered sty lus (battery-free, cord less) • USBpowered (no externa l power required) • Color LCD screen for enhanced user experience/interact ion . • Sensor reso lut ion: 2540 1pi (not interpo lated) 155 Gema lto proposes the Motorola Symbol LS4208 1D/2D barcode scanner with the following main features: 155 • • 1D/2D Barcode Scanner 1D and 2D barcode scanner May be operated handheld, or resting in the 'gooseneck' stand (listed be low) • Decoded barcode data supp lied to the PC (no software requ ired to decode the barcode) • USB(7' USBto handset) cable, included • The Motorola "Gooseneck" lntellistand Gemalto proposes the HP LaserJet Pro P1606DN B&W laser printer which has the follow ing ma in features: • Business-class B&W laser pr inter • Duplex or single-sided pr int ing • 250-sheet input tray • 10-sheet prior ity feed slot • Energy Star(R) qualified, EPEAT(R)Silver • Dimensions (W x D x H): Min: 15.24"x11.18"x9 .69" Max: 15.24"x18.16"x10.04in • 15.4 1b • Networkab le (Ethernet 10/100) Gema lto proposes the HP T750G2 uninterruptable power supp ly with the follow ing features: • Intuit ive front panel disp lay • Enhanced Battery Management (EBM) • Prior it ized shut-down • Hot-swappab le battery • Netwo rk Trans ient Protection . • Seria l and USBports for data exchange with the host computer 155 155 Uninterruptable Power Supply @ GEMALTO.COM 0 -2014 -091 101 Pennsylvania DOT 55 109161 GULaw Privacy FR Task B-2 - Image Capture Workstations - Compliance Gemalto proposes the Belkin BE112230-08 12outlet surge protector. The surge protector has 12 outlets, and an 8-foot cord. The unit has a surge supp ression rat ing of 3780 jou les to hand le the stro ngest surges. 155 Gemalto proposes the Data card CD800 personalization printer with t he following feat ures: Direct-to-card dye-sublimation/resin t he rmal t ransfer 300 x 600 dots per inch for enhanced text, bar code and graphics printing; 300 x 1200 dots per inch for enhanced text and bar code print ing Up to 185 cards/hour - dual sided YMCK-K printing with single sided lamination Card input hopper capacity - 100 (up to 200) Printer: 23.2 in. x 10.6 in. x 20.2 in. (589 mm X 270 mm X 513 mm) 36.96 lbs (16.8 kg) (depending on options) 310 Sur e Prote cto r Desktop Personalizat ion Printer Task B-2 - Image Capture Workstations - Operating System PennDOT will supply and maintain the base PennDOT workstation image currently built on the Windows 7 64 Bit Operating System for the selected Offeror provided Image Capture Workstations. PennDOT will manage the security and Operating workstations. System patches for the Image Capture (Gemalto Response] Gemalto understands t hat PennDOT will manage t he security and OS patches for t he Image Capture workstatio ns w hich are current ly built on t he Windows 7 64 Bit Operating System. Task B-2 - Image Capture Workstations - Software Updates The selected Offeror must provide a mechanism for the Image Capture Workstation to automatically download, when necessary, from the Central Image Server, the latest version of the Image Capture Workstation software. Any software changes and the timing of the @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 56 109162 GULaw Privacy FR Task B-2 - Image Capture Workstations-Software download must be approved by PennDOT. Updates Once a new version of the software is approved for installation, selected Offeror must track the installation by workstation to ensure that every workstation is operating with the latest version of the software. The reporting frequency of the installation information will be determined on a case-by-case basis by PennDOT. [Gemalto Response] The app licat ion dep loyment and software updates wi ll be managed w ith Windows lntune; client management solutions through wh ich we can up load and pub lish software packages, updates, manage po licy, and track computer inventory. Windows lntune w ill be used together with Microsoft System Center Configuration Manager (SCCM) to manage app licat ion dep loyments and software updates for the image capture workstat ions at a ll Penn DOT off ices. Windows lntune cl ient software is insta lled as part of the system image on each Intake and Image Capture Workstat ion at the t ime of deployment and insta lled manua lly when needed. Image Capture Workstations are manually enrolled into the W indows lntune serv ice hosted at the Coesys Backend datacenter. Windows lntune a llows us to dep loy, instal l and update software on enro lled Image Capture Workstations. Two types of insta llat ion can be accomplished w ith Windows lntune ; a Required Insta ll wh ich automat ica lly insta lls or pushes the software to each managed Image Capture Workstat ion and an availab le insta ll which dep loys the software to the Windows lntune service so that the Capture workstat ions can receive the client updates manually or by automated schedu ling. Windows lntune prov ides hardware and software tracking capab ility so that reports can be created to identify insta lled software app licat ions and hardware inventory to ensure the latest vers ion of software is being used at each workstat ion. This data can be exported into other report ing too ls, such as Microsoft Office Exce l, for further ana lys is so you can view the information in the way that 's most helpfu l for you. Windows lntune w ill be used to push any software updates and upgrades for Coesys Capture out to each Image Capture Workstat ion after dep loyment , as needed . Gema lto confirms that all software updates and changes in add it ion to tim ing require PennDOT app rova l. The management of the operations of the Image Capture Workstat ion is simp le and does not require dup licate or repet itive key entry operations and can be managed by a left handed @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 57 109163 GULaw Privacy FR Task 8-2 - Image Capture Workstations - Usability or right handed Photo Techn ician. -----------------[BEGINNING ------------------[END GEMAL TO CONFIDENTIAL INFORMATION]----------------------- OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task 8-2 - Image Capture Workstations - Peripherals Shall be ergonomically satisfactory for comfort and fatigue-free use. Shall be adjustable to accommodate multiple users' preferences. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 58 109164 GULaw Privacy FR Task B-2 - Image Capture Workstations - Peripherals Shall be wired {not wireless) and not require batteries. Shall be capable of being operated by either right or left handed individuals. Must support physically disabled customers in wheelchairs. (Gemalto Response] Gemalto confi rm s that all per iphera ls w ill w ith ergonomica lly satisfactory for comfort and fat igue-free use. The Lenovo ThinkPlus Enhanced Performance USB Keyboard has a detachab le soft-to-the-touch wrist rest and three degrees of keyboard t ilt adjustment to ensure ease of use. All periphera ls included w ith in th is offer are wi red and do not requ ire batter ies. In add ition , all periphera ls may be used in either a right handed or left handed operat ion. Gemalto's Image Capture Workstation supports both physically disabled customers and operators and is designed to be compl iant w ith ADA requ irements. Task B-2 - Image Capture Workstations - Signature Capture Device Must allow applicants to see their signature on the device as they are signing. Must allow the signature to be viewable on the Photo Technician's monitor after capture. If the signature is unacceptable, the system must allow a new signature to be captured until an acceptable signature is captured. The Image Capture Workstation shall generate properly taken, digitized and captured. If a warning is issued, a positive non-repetitive are captured. Must record an accurate representation a warning if the signature has not been routine shall occur to assure that all images of the customer's signature. The software must not compress a customer's signature on the Driver License/Identification Card or make it unrecognizable as the customer 's signature in any way. The selected Offeror shall make provisions for monitoring the quality of the customer signatures and will work with PennDOT in proactively addressing customer concerns, within a reasonable timeframe. (Gemalto Response] Gemalto confirms comp liance with all requ irements for the Signature Capture Device. The Wacom STU-530 digita l signature capt ure pad has a large screen for ease of use and allows for the capture of high reso lution signatures. -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 59 0-2014-091101 Pennsylvania DOT 109165 GULaw Privacy FR Task B-2 - Image Capture Workstations - Peripherals ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Gemalto confirms that it w ill w ork w ith PennDOT to address customer concerns and w ill make provis ions for monitor ing the quality of customer 's signatures. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 60 109166 GULaw Privacy FR Task B-2 - Image Capture Workstations - Camera The Image Capture Workstation shall use a color video camera. The camera shall be capable of capturing digital color photos with an automatic focus system. The depth of field shall be sufficient to allow the automatic focus system to capture an infocus image. The camera shall compensate for lighting conditions to provide adequate illumination of the customer. It shall compensate for ambient light conditions, applicants of various complexions and minimize glare cause by eyeglasses or contact lenses worn by the customer. The camera shall be easily adjustable to capture the photo image of customers either standing or seated. (Gemalto Response] Gemalto propose s a secure integrated camera tower w ith integrated 24Mp DSLR Nikon 5300 camera and professional strobe/flash and video capture capabilities . Gemalto confirms that the depth of fie ld is sufficient to capture proper ly auto focused images. The professiona l grade flash is adjustab le for vario us light ing cond itions. In add ition , the capture software has an auto configuration to select the proper aperture, exposure, and flash level to ensure that high qua lity images are captured . -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 61 0-2014-091101 Pennsylvania DOT 109167 GULaw Privacy FR Task B-2 - Image Capture Workstations - Peripherals ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-2 - Image Capture Workstations - Backdrop If a backdrop is necessary for the Offeror's solution, it must be blue. The backdrop shall not be colored white. Must be approved by PennDOT. It must also be able to be either ceiling/wall each center). hung or freestanding (depending on the needs of (Gemalto Response] Gemalto propose s a profess iona l-grade reversible blue/wh ite backdrop wi th a var iety of mount ing/stand opt ions that meet th is requ irement. Gemalto confirms that the type and configurat ion of each backdrop will be confirmed as a resu lt the fina l rev iew of the Gema Ito's site survey find ings. Task B-2 - Image Capture Workstations- Electrical System The Image Capture Workstation, including all associated electrical equipment, shall be designed and built in such a manner that a voltage fluctuation with a low of 90 and a high of 130 volts AC will not affect performance. All electrical equipment shall operate on a regular 120 volts, 60 cycle AC, be equipped with a grounded plug and meet Underwriters Laboratory Standards for similar or identical @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 62 109168 GULaw Privacy FR Task B-2 - Image Capture Workstations - Electr ical System equipment. All equipment proposed shall be designed so that voltage fluctuations shall be compensated for by an automatic voltage control unit provided by the selected Offeror. Offerors shall discuss the ability temperature extremes. of all components to operate normally under room The selected Offeror shall provide and maintain an uninterruptible power supply (UPS) for each Image Capture and Duplicate Workstation with the following minimum specifications: • Maintain 1440 VA load for five (5) minutes; • Full time surge suppression and Electromagnetic Interference (RFI) and Sine Wave filtering; • • 2 or more receptacles; Audible alarm, a minimum of six decibels above ambient noise level, for low battery; • • Indicator for off-line operation; Hot swappable battery; • Network Management Card (NMC) Interference (EMl)/Radiofrequency The selected Offeror, at its option, may consolidate several Image Capture Workstations one UPS as long as they maintain a five (5) minute backup time for the combined load. onto In order to have a smooth shutdown, the selected Offeror's operating system and/or UPS shall have auto shutdown capabilities that will initiate a shutdown sequence. This shutdown sequence shall be mutually agreed to by PennDOT and the selected Offeror. (Gemalto Response] Gemalto confirms that its Image Capture Workstation is designed to hand le voltage fluctuat ions bet w een 90 and 130 VAC and is UL 1778 2nd Edition and UL 497 A safety compl iant . The proposed UPS, the HP T1500G3 has the fo llow ing features : • Vo ltage correct ion for fluctuat ions up to 20% w ithout use of the battery ; • The " Line- interacti ve" des ign protects connected loads from outages , sags, surges , spikes, bro w nouts and over-vo ltage condit ions ; • Pure sine w ave output - Ensures connected w aveform even du ring power outages ; • Hot sw appab le battery ; • A larms (including pre-fa ilure warn ing); • Ind icator li ght ; • Network Trans ient Protection ; • 5 m inute runtime at fu ll load; • Prior itized shut-do w n (to be configured and agreed upon by PennDOT and Gema lto); @ GEMALT0.C0M load cont inues to rece ive a qua lity electrica l 63 0-2014-091 101 Pennsylvania DOT 109169 GULaw Privacy FR Task B-2 - Image Capture Workstations - Electr ical System • Operat ion from 32F to 104F; • 4 receptacles. Gemalto is confident that the proposed UPSw ill meet or exceed all of PennDOT's requ irements . Task B-2 - Image Capture Workstations - Bar Code Reader The Image Capture Workstation must be capable of reading a 2-D bar code on the customer's barcoded document and using the data contained therein for monitor display and for printing the customer's demographic data on the Photo License/ID Card. In addition, when a Photo Technician scans a customer's barcoded document via the selected Offeror's barcode reader, the workstation must display the last captured image of the applicant for visual verification purposes. The Image Capture Workstation shall be able to automatically change from one type of Photo License/ID card to another dependent upon the barcode scanned. (Gemalto Response] Gemalto has included the Motoro la Symbo l LS4208 1D/2D barcode scanner w ith in its offer . Coesys Capture is capable of pulli ng all data from the AAMVA PDF417 barcode and automat ically popu lating demographic and user data according the PennDOT's business requirements in order to m inim ize repet it ive input by the Photo Technician. The auto popu lated data may be used to pull up informat ion on the cit izen including a photograph history for visual ver ificat ion . The pulled data may also be used to tr igger a change from one type of Photo License/ ID card to another. Gemalto and PennDOT w ill define and agree on th is process dur ing the Business and Technical Requirements workshops between Gemalto and PennDOT Task B-2 - Image Capture Workstations - Image Capture The image file must not be stored on the Image Workstation, but rather transmitted, time, to the Central Image Server. in real All images captured must adhere to the most recent AAMVA Driver License/Identification Card Design Standards, section A.7.8.1 Portrait. AAMVA Driver License/Identification Card Standards are available at http://www.aamva.org/DL-ID-Card-Design-Standard/ All images shall closely match the same head area of the customer, e.g. all faces shall be about the same size and centered in the area captured, automatically without Photo Technician intervention. The location of the customer in the field of view of the camera shall be automatically @ GEMALT0.C0M 64 0-2014-091101 Pennsylvania DOT 109170 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture adjusted. The head area of the captured image shall be automatically cropped, centered and sized. An override shall be available to the Photo Technician for the automatic cropping feature, if necessary. The customer's image shall be displayed on the monitor before capture, preferably as a live video image, so as to allow for proper centering. The Photo Technician shall then be able to "freeze" the live video to capture an image. The customer's image shall be viewable transmitted to the Central Image Server. on the monitor after capture, but before being The Image Capture Workstation shall generate a warning if the image has not been properly taken, digitized and captured. If a warning is issued, a positive follow up routine shall occur to assure that all images are captured. If the image is unacceptable to the customer, the Photo Technician shall be able to recapture photos until an acceptable image is captured. The system must be capable of displaying the last four (4) captured images on both the main (Photo Technician) and secondary (customer facing) screens so that the customer can choose their desired image. The images must be distinguished in some manner acceptable to PennDOT, for example 1 through 4 or A through D, so that the customer can easily convey their choice to the Photo Technician. The system must be capable of utilizing the customer image chosen as the image for the Photo License/ID Card. The selected Offeror shall make provisions for monitoring the quality of the customer images and will work with PennDOT in proactively addressing customer concerns, within a reasonable timeframe. (Gemalto Response] Gemalto confirms that all images w ill be transm itted during the image capture process and not stored on the Image Capture workstations. All captured photos are automat ically checked for the more stringent ICAO standards and are AAMVA comp liant. -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 65 109171 GULaw Privacy FR Task B-2 – Image Capture Workstations – Image Capture • • • @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 66 109172 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 67 109173 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 68 109174 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 69 109175 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 70 109176 GULaw Privacy FR Task B-2 - Image Capture Workstations - Image Capture ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Gemalto confi rms that it will make provis ions for monitoring the quality of customer images and w ill work with PennDOT to proact ively address customer concerns, w ith in a reasonab le t imeframe. Task B-2 - Image Capture Workstations - Display of Info to Customer @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 71 109177 GULaw Privacy FR Task B-2 - Image Capture Workstations - Display of Info to Customer -----------------[END GEMALTO CONFIDENTIAL INFORMATION]----------------------- Task B-2 - Image Capture Workstations - Organ Donor The workstation must allow the customer to view questions regarding their participation an organ donor on a customer facing screen. as It must also provide some method for the customer to answer those questions and capture the customer responses. The captured responses shall be stored with the customer's image file and be used to indicate an organ donor designation on the customer's product, if applicable. The workstation must allow for the customer to re-answer the questions on a question by question basis, if the customer answers in error. [Gemalto Response] Gemalto comp lies w ith this requ irement. The Wacom signature pad will be used to display information to customer , including their part icipat ion as an organ donor, as we ll as capture the app licant ' s select ion. Appl icants w ill be able to confirm the ir selection or re-answer , on a question by question basis, if a mistake was made. If an applicant makes an incorrect selection and then confirms their incorrect selection, the Photo Techn ician can select "back" w ith in the Coesys Capture tab and retrigger the process. Gemalto confirms that the captured customer response will be stored w ith the customer's image w ith in the backend of the solut ion and their select ion will be used indicate if an organ donor designat ion will printed in the ir DL/ 10. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 72 109178 GULaw Privacy FR Task B-2 - Image Capture Workstations - Motor Voter The workstation must allow the applicant to view questions regarding their voting registration application on an applicant facing screen. It must also provide some method for the applicant to answer those questions and capture the applicant responses. Applicant voting registration application responses must be transmitted requirements described in Task B-4, Motor Voter. The workstation to the DOS via the must allow for the applicant to re-answer any questions on a question by question basis, for instances in which he/she answers in error. (Gemalto Response] Gema Ito compl ies w ith th is requ irement. The Wacom signature pad w ill be used to display informat ion to customer, including the ir answers regard ing their voter registrat ion app licat ion, as we ll as capture the appl icant's select ion. App licant voting registration responses will be transmitted to the DOS accord ing to the requirements descr ibed in Task 8-4. Appl icants w il l be able to confirm the ir select ion or re-answer , on a quest ion by question basis, if a mistake was made. If an appl icant makes an incorrect select ion and then confirms the ir incorrect select ion, the Photo Techn ician can select "back" w ith in the Coesys Capture tab and re-tr igger the process. Task B-2 - Image Capture Workstations - Central Image Server The Image Capture Workstation must interface with the Central Image Server. All data transmitted to the Central Image Server must be sent in real time. No customer data shall be stored on the Image Capture Workstation at any time. The Offeror shall specify in its Proposal what quality procedures it will put in place to guarantee that no Image Files are lost between the Image Capture Workstations and the Central Image Server. The selected Offeror must verify/error check each transaction to ensure that both the customer data has been uploaded to the Central Image Server and the product was printed successfully. If, for any reason, either of these transactions fail a visual warning must be displayed to the Photo Technician. [Gemalto Response] Gema lto confirms that the Image Capture Workstat ion w ill interface w ith the Central Image Server and w ill be sent in real time . Coesys Capture, the component of our so lution res id ing on the Image Capture Workstation , commun icates via secure web services to Coesys Backend. Al l communicat ions between the Image Capture Workstat ions and central system w ill be verified and confirmed to ensure that no data is lost. If the transferred files are not confirmed , the ICW w ill re-send the information unt il successful transfer has occurred and has been verified. All data is transferred immed iately after it is captured . If connectivity is lost, captured data is encrypted and locally stored until connectiv ity is restored then immediately deleted . @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 73 109179 GULaw Privacy FR Task B-2 - Image Capture Workstations - DL&C System (Gemalto Response] Gemalto confirms our comp liance with this requ irement. Both Coesys Capture and Coesys Backend are designed to integrate w ith exist ing customer business app licat ions and systems as we ll as interface with PennDOT-author ized 3rd party systems and services, if required . This is typica lly achieved using web services that will be defined, dur ing the Business and Technical Requirements workshops between Gemalto and PennDOT. Task B-2 - Image Capture Workstations - Printer Printer noise level shall not exceed 75 decibels. The Workstations shall be capable of printing any Driver License/Identification described in Appendix J, Pennsylvania Driver License ID Products (04-2012). Card type as The Image Capture Workstation shall print the front and back of the Driver License/Identification, apply laminations and encode the magnetic stripe without intervention. No flipping of the card by the Photo Technician or placing of separately printed labels on the Driver License/Identification by the Photo Technician will be allowed. (Gemalto Response] Gemalto comp lies with this requ irement . The proposed CD800 desktop card printer is capable of pr int ing all Drivers License/ ID cards described in Appendix J. The CD800 will pr int both the front and back of the card w ithout need ing to be flipped by the technic ian in addit ion to laminat ing the card and encoding the magnetic stripe . Gemalto confirms that the CD800 no ise will not exceed 75 decibe ls. @ GEMALT0.C0M 74 0-2014-091101 Pennsylvania DOT 109180 GULaw Privacy FR Task B-2 - Image Capture Workstations - Performance Requirements The Image Capture Workstation shall be capable of producing the finished Photo License/ID Card within two(2) minutes from the time the Photo Technician presses the key to print the card, regardless of the number of print requests in queue. The Image Capture Workstation shall produce a warning to notify the Photo Technician when materials need to be changed or added. The time for adding and/or changing materials shall not exceed five(S) minutes per hour. The Image Capture Workstation shall be capable of processing the next customer after the previous applicant's images have been sent to the printer for printing. The system must allow the Photo Technician to begin processing the next applicant within 20 seconds of pressing the print key for the previous customer. The warm up time from a cold start at the beginning of the day for the Image Workstation to be ready to completely process a driver license shall not exceed ten (10) minutes. The time to close down and secure the Image Workstation at the end of the day shall not exceed five (5) minutes. If an Image Capture Workstation has two (2) printers attached, the system shall continue to operate with only one printer if one is turned off or becomes inoperable. (Gemalto Response] Gemalto confirms our comp liance w ith this requ irement. • The Image Capture Workstations are capab le of produc ing the fin ished Photo License w ithin two (2) minutes from the t ime the Photo Technic ian pressed the print key. Card pr int t ime is dependent on the amount of the card (% coverage) that wil l be personal ized in add it ion to the card design. The CD800 is capable of print ing a comparable card in less than 30 seconds w ith co lor pr int ing on the front of the card and black pr int ing on the back w ith lam inat ion and magnetic str ipe encod ing. • The Dupl icate Workstat ions wi ll alert the Photo Techn ician when mater ials need to be added and the time for chang ing materials w ill be less than f ive (5) minutes per hour. • The Image Capture Workstat ions are capable of process ing a new customer seconds of press ing the pr int key for the prev ious customer. • For the Image Capture workstations, warm up t ime wi ll be less than ten (10) m inutes and shutdown time w ill be less than f ive (5) m inutes. • The Image Capture Workstations w ith two (2) attached pr inters w ill remain operational one printer is turned off or becomes inoperab le. @ GEMALT0.C0M w ith in 20 if 75 0-2014-091101 Pennsylvania DOT 109181 GULaw Privacy FR Task B-2 - Image Capture Workstations - Security The Image Capture Workstation shall have its own log-on procedure, using a pre-assigned Photo Technician access code and password, to allow production of Photo License/ID cards. Both the password and user ID shall be assigned by Unique Source. The Image Capture Workstation must allow for Unique Source to administer access to the system including adding new users, removing users and unlocking accounts. Performing any of these administrative activities shall not exceed five (5) minutes for the system to process. (Gemalto Response] Gemalto confirms that the workstat ions w ill have their own log on procedure using pre-assigned Photo Technic ian access codes and a password wh ich w ill be assigned by Unique Source. Gemalto confirms that Unique Source will be allowed to adm inister access to the system includ ing perform ing any of the fo llow ing actions in under five (5) minutes : • Add new users; • Removing users; and • Un locking accounts. The access methods for Unique Source in addit ion to app licable secur ity policy will be defined and agreed upon during the dur ing the Business and Technical Requirements workshops between Gemalto and PennDOT. Task B-2 - Image Capture Workstations- Reporting The selected Offerer shall keep an account of all Driver License/Identification Cards and Special IDs produced by type, site, date/time, Photo Technician, Workstation and any other criteria as specified by Penn DOT for reporting purposes. The final form of, and data elements contained in, these reports shall be agreed on by the selected Offerer and PennDOT. (Gemalto Response] Gemalto confirms that, at a min imum, the fo llow ing informat ion w ill be kept for reporting purposes: • DL/IDs/Specia l ID's produced; • Type of document issued; • Issuance site; • Date/Time of issuance; • Photo Technic ian; • Workstat ion ; and • Any other cr iteria requ ired by PennDOT . @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 76 109182 GULaw Privacy FR Task B-2 - Image Capture Workstations - Reporting The specific criter ia and report types w ill be defined and agreed upon dur ing the dur ing the Business and Techn ical Requirements workshops between Gemalto and PennDOT. All report ing for proposed system is logged by the Coesys Backend and is discussed in further detai l, including samp le reports , in the response to "Task B-5 - Central Image Server - Report ing" Task B-2 - Image Capture Workstations - Moving Workstations PennDOT may request that the selected Offeror move Image Capture Workstations temporarily, or permanently, within the same Photo License Center or to another Photo License Center location. The Offeror shall price these services in its Cost Proposal. (Gemalto Response] Gemalto understands th is requirement and w ill prov ide pr icing for mov ing an Image Capture Workstat ion, temporari ly or permanent ly, within the same Photo License Center or to another location in the Cost Proposal. Task B-2 - Image Capture Workstations - Spare Image Capture Workstations In certain circumstances, the selected Offeror may be required to supply an extra Image Capture Workstation for emergency situations. If an Image Capture Workstation is temporarily required, it shall be supplied by the selected Offeror at no additional cost to Penn DOT within five (5) business days of PennDOT's request. The Offeror shall also price out the cost for adding a new, permanent Workstation in its Cost Proposal. Image Capture (Gemalto Response] Gemalto understands th is requ irement and w ill comply. A strateg ic supp ly of spare equ ipment w ill be stored w ith in our service depot for the rep lacement of broken equ ipment and for emergency situat ions . Gemalto w ill provide temporary workstations to PennDOT with in five (5) business days of PennDOT's request at no cost to the Commonwea lth. The number of spares to be temporari ly available to PennDOT at any one point will be agreed upon dur ing the dur ing the Business and Techn ical Requirements workshops between Gemalto and PennDOT. Gemalto w ill prov ide pricing to add an add ition permanent workstation within our Pricing Proposal. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 77 109183 GULaw Privacy FR Task B-2 - Image Capture Workstations - Valid Without Photo Workstation PennDOT provides Photo License/ID Cards to those customers who have a legitimate claim for a valid without photo product {See Appendix M, Current Issuance Processes, for Valid without Photo process). To serve this purpose, the selected Offeror shall provide an Image Capture Workstation equipped with a scanner, to capture customer signature, for Valid Without Photo License/ID Cards for those customers who send in their application. Additionally, at PennDOT's discretion, a valid without photo license or ID card may be printed through the Central Issuance Facility. The system shall be capable of "flipping" to a standard Image Capture Workstation that PennDOT requires additional capacity. for times The selected Offeror shall also provide a label printer and appropriate software to print an addressed envelope for the Valid Without Photo customer or design and supply windowed envelopes clearly showing the customer's name and address. If a windowed envelope is used, the Photo License/ID Card must not be visible. This system shall be located at the Bureau of Driver Licensing at the Riverfront Office Center. (Gemalto Response] Gemalto understands th is requirement and w ill comp ly. Gemalto will prov ide an Image Capture Workstation, located at the Riverfront Office Center, w ith a scanner to capture customer signatures for valid w ithout photo License/ID Cards. Valid w ithout photo License/ID cards can be pr inted over the counted w ith the desktop card pr inters or centrally issued. This workstat ion w ill not be dedicated to valid w ithout photo issuances and can be used for standard issuances when PennDOT requ ires add itional capacity. Gemalto w il l provide enve lopes and a labe l printer along w ith all necessary software requ ired to issue and mail valid without photo license/ID Cards. The deta ils and exact requ irements for valid w ithout photo license/ID cards w ill be discussed and agreed upon during the during the Business and Technical Requirements workshops between Gema Ito and PennDOT. Task B-2 - Image Capture Workstations - Ownership The Image Capture Workstation and all unused supplies shall remain the property of the selected Offeror. Insurance coverage and applicable taxes for said Image Workstation and supplies shall be the responsibility of the selected Offeror. If an Image Capture Workstation and/or its components are stolen or physically damaged, they shall be replaced by the selected Offeror within 24 hours from being notified by PennDOT, at no additional cost to PennDOT. (Gemalto Response] Gemalto understands th is requ irement and wi ll comp ly. Gemalto wi ll mainta in ownersh ip of the Image Capture Workstat ions for the durat ion of the contract and wi ll rep laced sto len or damaged equ ipment w ithin 24 hours of being not ified by PennDOT. @ GEMALT0.C0M 78 0-2014-091101 Pennsylvania DOT 109184 GULaw Privacy FR Task 8-3 - Duplicate Workstations Task B-3 - Duplicate Workstations - General Each Duplicate workstation shall include all hardware and software over-the-counter (OTC) duplicates. necessary to produce This includes: • • Receiving the customer information from DL&C Retrieving the most recent image and signature on file for the customer from the Central Image System • Marrying the DL&C and CIS information • • Producing a permanent product over the counter Updating DL&C and the CIS to reflect a duplicate was created (Gemalto Response] Gemalto confirms that all hardware and software necessary to produce over the counter dupl icates are included w ith in this offe r. The proposed dup licate workstat ions shall be capable of performing the fo llow ing tasks: • Receiv ing the customer information from DL&C • Retr ieving the most recent image and signature on fi le fo r the customer from the Central Image System • Marry ing the DL&C and CIS info rmat ion • Produc ing a permanent product over the counter • Updat ing DL&C and the CIS to reflect a dup licate was created In add ition , Gemalto's hardware and software meets ADA comp liance requ irements. Based on our exper ience, alignment with ADA design standards not on ly benefits individua ls with disabilit ies, but also enhances the ove rall design, funct iona lity, and value of our solution . In addit ion, all cables and cords are secured to ensure a clutter free workspace. Task B-3 - Duplicate Workstations - Compliance Solution must meet compliance requirements described for Image Capture Workstations. (Gema lto Response] Gemalto confirms that all equipment and accessories will meet or exceed current OSHA standa rds in add ition to the requ irements of this RFP. In add ition , all mater ials of a chem ical nature prov ided for th is RFPwi ll meet the labe ling and MSDS requ irements of the Pennsylvania Worke r and Commun ity Right to Know Act 159 of 1984, P.L. 734, as amended, 35 P.S. Sections 7301-7320. @ GEMALT0.C0M 79 0-2014-091 101 Pennsylvania DOT 109185 GULaw Privacy FR Task B-3 - Duplicate Workstations - Hardware All Duplicate Workstation available technology. Offeror's solution hardware must be of new manufacture must be adequate and utilize for each DLC to meet the anticipated current, volume of production for replacement Driver License/Identification cards (see Appendix N, Driver Licensing Product Quantities 2013, for 2013 data). For a list of current DLCs and number of Duplicate workstations, see Appendix L, Page 43 of 83 Image Capture and Duplicate Workstation The Offeror shall include representative Quantities. hardware for its proposed solution in its proposal. Operating System (Gemalto Response] Gemalto confirms that all hardware prov ided will be new and ut ilize current, available techno logy that meets or exceeds the specifications requ ired to operate Gema Ito's solution for the du rat ion of the contract. Our solution w ill be adequate for each DLC to meet the anticipated volumes listed in Appendix N of PennDOT's RFP. Below we have prov ided a list of representat ive hardwa re for the Duplicate Workstations included in ou r proposed solut ion. The items and quantities prop osed by Gemalto to satisfy t he RFPrequ irements for the "Duplicate Capture Wo rkstat ions" are defined w it hin t his t able. - - -- -- - Workstation ~-:. - " t . • -• • .. ~!.~• - . . O::'!~ - . . ·- ':Ito:: I~:- ;,1 =---• • • • • .. • • •. c::::I ~ .1..r:~::.J -~:;-:-2 .i ~ , 1··· ..: ·: ·: · :••·: •· ·• •. • :: ·-- DX : Gemalto proposes the HP Elite 800 all in one PC Workstation that, in addition t o t he required feat ures, above, includes: • Intel Core i3 i3-4130 3.40 GHz processors • 4 GB Memory Technology DDR3 SDRAM • 500Gb HOD • Touch Screen 75 Gemalto proposes the Lenovo ThinkPlus Enhanced Perfo rmance USB Keyboard. 75 ~ • : ~ ~1 Workstation Keyboard @ GEMALTO.COM 0-2014-091 101 Pennsylvania DOT 80 109186 GULaw Privacy FR Task B-3 - Duplicate Workstations - Hardware Gemalto proposes the standard 2-button mouse supp lied with the workstat ion persona l computer, which satisfies all requ irements. 75 Gemalto proposes the Belkin Mouse Pad (F8E089-BLK), Jersey/Rubber, for non-sl ip performance. 75 Gemalto proposes the Motorola Symbol LS4208 1D/2D barcode scanner with the following main features: 75 Workstation Optica l Mouse • • 1D/2D Barcode Scanner @ GEMALTO.COM 0 -2014 -091 101 Pennsylvania DOT 1D and 2D barcode scanner May be operated handheld, or resting in the 'gooseneck' stand (listed be low) • Decoded barcode data supp lied to the PC (no software requ ired to decode the barcode) • USB(7' USBto handset) cable, included The Motorola "Gooseneck" lntellistand Gemalto proposes the HP LaserJet Pro P1606DN B&W laser printer which has the follow ing main features: • Business-class B&W laser printer • Dup lex or single-sided pr inting • 250-sheet input tray • 10-sheet priority feed slot • Energy Star(R) qualified, EPEAT(R)Silver • Dimensions (W x D x H): Min: 15.24"x1 1.18"x9 .69" Max: 15.24"x18.16"x10.04in • 15.4 1b • Netwo rkab le (Ethernet 10/100) 75 81 109187 GULaw Privacy FR Task B-3 - Duplicate Workstations - Hardware Gema lto proposes the HP T750G2 un interruptable power supp ly with t he follow ing features : • Intuit ive front panel disp lay • Enhanced Battery Management (EBM) • Prior itized shut-down • Hot-swappab le battery • Netwo rk Tra nsient Protect ion . • 75 Seria l and USB ports fo r data exc hange wit h the host compute r Uninter ruptab le Powe r Sup ply Gema lto proposes t he Belkin BE112230-08 12outlet surge protector. The su rge protecto r has 12 out lets, and a 8-foot cord. The unit has a su rge supp ressio n rat ing of 3780 joules to handle the strongest surges . 75 • Surge Protector Desktop Persona lizat ion Printe r @ GEMALTO.COM 0 -2014-091 101 Pennsylvania DOT Gema lto proposes t he Datacard CD800 pe rso nalizat ion printer with t he following features: • Direct-to-ca rd dye-s ublimation/ resin therma l t ransfer • 300 x 600 dots pe r inch for en hanced text, ba r code and graph ics printi ng; 300 x 1200 dots per inch for en hanced text and ba r code pr int ing • Up to 185 ca rds/hour - dua l sided YMCK-K print ing with single sided lam ination • Card input hopper capacity - 100 (up to 200) • Printer : 23.2 in. x 10.6 in. x 20.2 in. (589 mm X 270 mm X 513 mm) • 36 .96 lbs (16.8 kg) (depend ing on opt ions) 75 82 109188 GULaw Privacy FR Task B-3 - Duplicate Workstations - Operating System (Gemalto Response ] Gemalto understands that PennDOT will manage the secur ity and OS patches for the Image Captu re workstations which are current ly built on the Windows 7 64 Bit Operat ing System . Task B-3 - Duplicate Workstations - Software Updates [Gemalto Respo nse] The app licat ion deployment and software updates wi ll be managed w ith Windows lntune; client management solutions through wh ich we can upload and pub lish software packages, updates, manage policy, and track compute r inventory. Windows lntune w ill be used together with Mic rosoft System Center Configuration Manager (SCCM) to manage appl icat ion deployments and software updates for the image capture workstat ions at all Penn DOT off ices. Windows lntune client software is insta lled as part of the system image on each Dup licate Workstat ion at the t ime of deployment and installed manual ly when needed. Capture workstat ions are manual ly enrolled into the Windows lntune service hosted at the Coesys Backend datacenter. Windows lntune a llows us to dep loy, install and update software on enrolled Duplicate Workstations . Two types of installation can be accompl ished w ith Windows lntune; a Requ ired Install which automat ically installs or pushes the software to each managed capture workstat ion and an ava ilable install which deploys the software to the Windows lntune serv ice so that the Dup licate Wo rkstations can rece ive the client updates manually or by automated schedul ing. Windows lntune provides hardware and software tracking capability so that reports can be created to identify installed software applicat ions and hardware inventory to ensure the latest vers ion of software is being used at each workstat ion. This data can be exported into other report ing tools, such as Microsoft Office Exce l, for further ana lys is so you can view the information in the way that ' s most he lpful fo r you. Windows lntune w ill be used to push any software updates and upgrades for Coesys Capture out to each Dupl icate Workstat ion after dep loyment, as needed. Gema lto confirms that all software updates and changes in add ition to timing requ ire PennDOT approva l. @ GEMALT0.C0M 0-2014-091 101 Pennsylvania DOT 83 109189 GULaw Privacy FR Task B-3 - Duplicate Workstations - Usability Solution must meet Usability requirements as described for Image Capture Workstations. (Gemalto Response] The management of the operations of the Duplicate Workstat ion is simp le and does not requ ire dup licate or repet iti ve key entry operat ions and can be managed by a left handed or right handed Photo Technic ian. -----------------[BEGINNING ------------------[END @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- 84 109190 GULaw Privacy FR Task B-3 - Duplicate Workstations - Peripherals Solution must meet Peripherals requirements as described for Image Capture Workstations. (Gemalto Response] Gemalto confirms that all per iphera ls w ill w ith ergonomica lly satisfactory for comfort and fat igue-free use. The Lenovo ThinkPlus Enhanced Performance USB Keyboard has a detachab le soft-to-the-touch w rist rest and three degrees of keyboard t ilt adjustment to ensure ease of use. All periphera ls included w ith in th is offer are wired and do not requ ire batter ies. In add ition , all periphera ls may be used in either a right handed or left handed operation. Gemalto ' s proposed Duplicate Workstat ion supports both physically disabled customers and operators and is designed to be comp liant w ith ADA requirements. Task B-3 - Duplicate Workstations - Electrical System Requirements Gemalto confirms that its Duplicate Workstat ion is designed to hand le vo ltage fluctuat ions bet ween 90 and 130 VAC and is UL 1778 2nd Edition and UL 497A safety comp liant . The proposed UPS, the HP T1500G3 has the fo llow ing features : • Vo ltage correct ion for fluctuat ions up to 20% w ithout use of the battery ; • The " Line- interacti ve" des ign protects connected loads from outages , sags, surges , spikes, bro w nouts and over-vo ltage condit ions ; • Pure sine w ave output - Ensures connected w aveform even during po w er outages ; • Hot sw appab le battery ; • A larms (including pre-fa ilure w arn ing); • Indicator li ght ; • Network Trans ient Protection ; • 5 m inute runtime at fu ll load; • Prior itized shut-do w n (to be configured and agreed upon by PennDOT and Gemalto); • Operat ion from 32F to 104F; • 4 receptacles. load continues to rece ive a qua lity electr ical Gemalto is confident that the proposed UPSw ill meet or exceed all of PennDOT' s requ irements. @ GEMALT0.C0M 85 0-2014-091101 Pennsylvania DOT 109191 GULaw Privacy FR Task B-3 - Duplicate Workstations - Printer Solution must meet Printer requirements as described for Image Capture Workstations. (Gemalto Response] Gemalto comp lies w ith th is requ irement . The proposed CD800 desktop card pr inter is capable of pr int ing all Drivers License/ ID cards described in Appendix J. The CD800 will print both the front and back of the card w ithout need ing to be fl ipped by the Technician in add it ion to laminat ing the card and encod ing the magnet ic str ipe. Gemalto confirms that the CD800 no ise will not exceed 75 decibe ls. Task B-3 - Duplicate Workstations - Performance Requirements Solution must meet Performance requirements as described for Image Capture Workstations. (Gemalto Response] Gemalto confirms our comp liance w ith th is requ irement . • The Dup licate Workstat ions are capab le of producing the fin ished Photo License w ith in two (2) m inutes from the t ime the Photo Techn ician presse d the pr int key . Card pr int t ime is dependent on the amount of the card (% coverage ) that w ill be persona lized in add it ion to the card des ign . The CD800 is capab le of pr int ing a comparable card in less than 30 seconds w ith color print ing on the front of the card and black pr int ing on the back w ith lam inat ion and magnet ic st ripe encod ing. • The Dup licate Workstat ions wi ll alert the Photo Techn ician when mater ials need to be adde d and the t ime for chang ing mater ials w ill be less than five (5) m inutes per hour . • The Image Capture Workstat ions are capable of process ing a new customer seconds of press ing the pr int key for the previous customer. w ith in 20 • For the Image Capture wo rkstat ions, warm up t ime wil l be less than ten (10) m inutes and shutdown t ime w ill be less than f ive (5) m inutes. The Image Capture Workstat ions w ith two (2) attached printers will rema in operat ional if one printer is turne d off or becomes inoperab le. Task B-3 - Duplicate Workstations - Card Type Selection (Gema lto Response] Gemalto confirms that the Duplicate Workstat ions shall be able to automat ically select the correct Photo License/ ID card design based on informat ion received from the Ma inframe . @ GEMALT0.C0M 86 0-2014-091 101 Pennsylvania DOT 109192 GULaw Privacy FR Task B-3 - Duplicate Workstations - Security The Duplicate workstation shall have its own log-on procedure, using a pre-assigned operator access code or password, to allow production of OTC duplicates. These passwords will be issued by individual operator. PennDOT will assign these passwords. The Image Workstation must allow for PennDOT to administer access to the system including adding new users, removing users and unlocking accounts. Performing any of these administrative activities shall not exceed 5 minutes for the system to process. Since the Duplicate Workstation shall be connected to the PennDOT mainframe, it must also have a network log-on procedure. (Gemalto Response] Gemalto confirms that the Duplicate Workstat ions will have the ir own log on procedure using pre-assigned Photo Technician access codes and a password which w ill be assigned by Unique Source. Gemalto confirms that Unique Source will be allowed to adm inister access to the system including performing any of the follow ing act ions in under five (5) minutes: • Add new users; • Removing users; and • Unlocking accounts. The access methods for Unique Source in add ition so appl icable security po licy will be defined and agreed upon during the dur ing the Business and Technical Requirements workshops between Gemalto and PennDOT. Task B-3 - Duplicate Workstations - Reporting Solution must meet Reporting requirements described for Image Capture Workstations. (Gemalto Response] Gemalto confirms that, at a min imum, the fo llow ing informat ion w ill be kept for reporting purposes: • DL/IDs/Special ID's produced; • Type of document issued; • Issuance site; • Date/Time of issuance; • Photo Technic ian; • Workstat ion; and • Any other cr iteria requ ired by PennDOT. The specific criter ia and report types w ill be defined and agreed upon dur ing the dur ing the Business and Techn ical Requirements workshops between Gemalto and PennDOT. All report ing for proposed system is logged by the Coesys Backend and is discussed in further detail, including sample reports, in the response to "Task B-5 - Central Image Server - Report ing" @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 87 109193 GULaw Privacy FR Task B-3 - Duplicate Workstations - Current Image Files (Gemalto Response] Gemalto confirms that OTC Duplicates will always be produced using current Image Files and shall never invo lve capturing a new Photo and/or signature image. Task B-3 - Duplicate Workstations - Interface with PennDOT Mainframe The Duplicate Workstation shall be compatible with and interface with PennDOT's existing mainframe computer system (DL&C). If the proposed solution requires upgrades to existing mainframe resources, communication facilities or mainframe software, this must be made evident and explained in the proposal. All data transmitted to the PennDOT Mainframe must be in real time. No customer data shall be stored on the Duplicate Workstation at any time. (Gemalto Response] Gemalto confirms that the Duplicate workstations will be compat ible and w ill interface with PennDOT's exist ing mainframe computer system (DL&C). In add it ion, all data transmitted to the PennDOT mainframe w ill be in real t ime. At no point will customer data be stored on Duplicate Workstations. Both Coesys Capture bus iness app lic ations and services , as requ defined, dur ing the PennDOT . and the Coesys Backend are des igned to integrate with ex isting customer and systems as well as interface with PennDOT-autho rized 3 rd party systems ired. This is typ ically achieved using web services that w ill be refined , and/or Business and Techn ical Requ irements workshops between Gema lto and Task B-3 - Duplicate Workstations - Interface with Central Image Server (Gema lto Response] Gemalto understands and will comply with th is requ irement. The Duplicate workstation will be compat ible and w ill interface with the Centra l Image Server in order to ret rieve the customers ' current image and signatu re on fi le. @ GEMALT0.C0M 0-2014-091 101 Pennsylvania DOT 88 109194 GULaw Privacy FR Task B-3 - Duplicate Workstations - Moving Workstations (Gemalto Response] Gemalto understands th is requ irement and will prov ide pr icing for mov ing a Dup licate Workstation, temporar ily or permanently , w ith in the same Photo License Center or to another locat ion in the Cost Proposa l. Task B-3 - Duplicate Workstations - Ownership Solution must meet Ownership requirements as described for Image Capture Workstations. (Gemalto Response] Gemalto understands th is requ irement and will comp ly. Gema lto will mainta in ownersh ip of the Dup licate Wor kstat ions for the durat ion of the contract and will rep laced sto len or damaged equ ipment within 24 hours of being not ified by Penn DOT. Task B-4 - Motor Voter The selecte d Offeror shall be respons ible for furn ishing motor/voter quest ion screens, saving the data, sorted by county and last name, and uploadi ng it to the Centra l Image Server. The motor/voter data and customer signature must also be electron ically forwarded to the DOS. The voter registrat ion data, inclu di ng the digit ized signature must be arch ived for a per iod of at least five (5) years, for reference and withdrawal, upon request from DOS. Proposa ls shall include a descript ion of : • The equipment, both hardware and software, the selected Offeror will use to sort and transfer Voter Registrat ion App lications to the DOS. • The process/program used to sort the Voter Registrat ion App licat ions alphabet ically by county, by last name . • Upload ing the Voter Registrat ion App licat ions via batch fi les to the DOS 3 t imes per week as described in th is Part IV. • Arch ivi ng the data for reference and withdraw upon demand Task B-4 - Motor Voter - Image Capture Workstation As part of the Image Capture Workstation procedure, the applicant is asked via the monitor whether s/he would like to make application to register to vote. If the applicant does want to apply, the Image Capture Workstation shall step him/her through the application process. Although the questions and their order are already in use, the selected Offeror may be required to work with PennDOT and DOS to develop a more satisfactory set of questions. If changes are required at the onset of the contract, the selected Offeror shall make such changes at no additional cost to the Commonwealth. See Appendix U for the current list of questions and screens used. @ GEMALT0.C0M 89 0-2014-091101 Pennsylvania DOT 109195 GULaw Privacy FR Task B-4 - Motor Voter - Image Capture Workstation (Gemalto Response] Gema lto confirms that the Motor Voter process w ill be included wi thin Gema lto's offer. The Image Capture Workstation shall walk the citizens though the questions in the app lication process. Gemalto will wo rk w ith PennDOT and DOS to develop a more satisfactory set of quest ions if requ ired dur ing the life of the contract , at no charge to the Commonwealth. Task B-4 - Motor Voter - Image Capture Workstation The Image Capture Workstation shall allow the Photo Technician to assist the applicant with political party selection when the customer chooses "other." A list of up to 999 (there are currently 87 total parties) other parties shall be programmed into the software by the selected Offeror including updates of the screen(s) listing major political parties. If a Photo Technician does assist the applicant, a notation of this assistance must be made part of the motor/voter data file. (Gemalto Response] Gemalto confirms that the Image Capture Workstat ion shall allow the Photo Technic ian to assist the applicant w ith pol it ical party selection . Up to 999 polit ical parties w ill be integrated by Gemalto into the overa ll solut ion. Gemalto w ill include a mechan ism to note if the Photo Technic ian assists the app licant wi thin the appropr iate tab of Coesys Capture. Task B-4 - Motor Voter - Image Capture Workstation (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task B-4 - Motor Voter - Image Capture Workstat ion" and, if selected, w ill comply w ith this requ irement. Task B-4 - Motor Voter - Image Capture Workstation Gema lto has read and understood each of the requ irements regard ing "Task B-4 Motor Voter - Image Capture Workstat ion" and, if selected, w ill comp ly w ith th is requ irement. @ GEMALT0.C0M 90 0-2014-091101 Pennsylvania DOT 109196 GULaw Privacy FR Task B-4 - Motor Voter - Image Capture Workstation (Gemalto Response] Gema lto has read and understood each of the requ irements regard ing "Task B-4 Motor Voter - Image Capture Workstation " and, if selected , w ill comp ly w ith this requirement . Please note that each ICW is equippe d w ith a B&W laser pr inter , as described in response to Task B-2 ICW, to support this requirement . Task B-4 - Motor Voter - Image Capture Workstation The motor/voter information shall be transmitted to the Central Image Server in real time. (Gemalto Response] Gema Ito has read and understood each of the requirements regard ing "Task B-4 Motor Voter - Image Capture Workstation " and, if selected , w ill comp ly w ith this requ irement. Task B-4 - Motor Voter - Data PennDOT is responsible for the capture of Voter Registration Application information at PennDOT's Image Capture Workstations and transmitting that information to the DOS. The Voter Registration Application information is sorted for the DOS by county and last name and transmitted to the 67 counties of the Commonwealth for county of applicant residence. This is a priority process for the DOS and is the final and key process in the electronic Voter Registration Application System. (Gemalto Response] Gema lto has read and understood each of the requ irements regard ing "Task B-4 Motor Voter - Data" and, if selected, w ill comp ly w ith th is requirement . Task B-4 - Motor Voter - Data The selected Offeror shall be responsible for converting current DOS voter registration and signature files into the new system. As of January 2014 the DOS maintains 12,414,493 million signature files - including cancelled voters. (Gemalto Response] Gemalto understands and w ill comp ly w ith th is requ irement. The existing DOS voter registrat ion and signature fi les w ill be m igrated into the new Motor Voter system by Gema Ito. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 91 109197 GULaw Privacy FR Task B-4 - Motor Voter - Data PennDOT is responsible for the collection and electronic transmission of motor voter applicant data. DOS requires the following information for the Voter Registration Application process, as required by law: a. b. c. d. e. f. g. h. i. j. k. I. m. Last name; First name; Middle initial; Suffix; Address of residence; Mailing address; County of residence; Date of birth; Race (if provided by applicant) ; Political party; Phone number (if provided by applicant; Date of application; and The digitized signature image. (Gemalto Response] Gemalto understand and will comp ly with th is requ irement. The fo llow ing information will be collected by Gemalto during the Motor Voter enro llment process, as required by law : • Last name; • First name; • M idd le init ial; • Suff ix; • Address of res idence; • Ma il ing address ; • County of residence; • Date of b irth; • Race (if prov ided by applicant) ; • Polit ical party; • Phone number (if prov ided by app lic ant; • Date of app li cat ion; and • The d igitized signature image . The col lected informat ion w ill be electronica lly transmitted as required by PennDOT. The data exchange methods and protoco ls will be defined and agreed upon during the Business and Technica l Requirements workshops between Gema Ito and PennDOT. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 92 109198 GULaw Privacy FR Task B-4 - Motor Voter - Data All data must be backed up electronically, off premises. The archived data must be retained for a minimum of five (5) years. Upon request, the selected Offeror shall make archived data available to the DOS, within seven (7) business days of the request, at no cost to PennDOT. (Gemalto Response] Gemalto understands and will comp ly with this requ irement. Arch ived Motor Vote r data w ill be sto red for a m inimum of five (5) years and will be made availab le to the DOS w ith in seven (7) business days of the reque st, at no cost to PennDOT. Task B-4 - Motor Voter - Distribution of Data The selected Offeror shall provide voter registration information to the DOS electronically. (Gemalto Response] Gemalto has read and under stood each of the requ irements regard ing "Task B-4 Motor Vote r - Distr ibut ion of Data" and, if selected , will comp ly with thi s requ irement. Task B-4 - Motor Voter - Distribution of Data (Gemalto Response] Gemalto understands and will comply w ith th is requ irement. Vote r Registrat ion data w ill be sorted by County and the Customer's last name. Task B-4 - Motor Voter - Distribution of Data The selected Offeror shall be responsible for uploading 2 batch files to DOS. The format and data contained in each batch file shall be identified and approved by PennDOT and the DOS. One (1) batch file will include Initial Registration Applications. This file will be uploaded to the DOS three times per week: every Tuesday, Thursday and Saturday at 12:30am. In addition, as a supplement to each batch file, the selected Offeror must include a separate .zip file containing all signature files associated with the correspondingly uploaded applicant files. (Gemalto Response] Gemalto under sta nds and w il l comp ly with th is requirement. Two (2) batch fi les w ill be uploaded to the DOS, three t imes per we ek at the t imes specified by PennDOT. The format and data in each batch fi le w ill be defined by PennDOT and DOS. In add it ion to the batch fi le conta ining Init ial Registrat ion Applications , Gemalto will prov ide, as a supp lement, a separate .zip fi le contai ning all signature fi les associated w ith the uploaded app licant informat ion. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 93 109199 GULaw Privacy FR Task B-4- Motor Voter- Reporting (Gemalto Response] Gemalto has read and understood each of the requ irements regarding "Task B-4 - Motor Voter - Reporting " and, if selected , w ill comp ly w ith th is requirement. Task B-4- Motor Voter- Reporting A report on motor/voter statistics shall be delivered to PennDOT within five (5) calendar days from the end of the preceding month. The final design of this report must be approved by PennDOT. (Gemalto Response] Gemalto understands and will comp ly w ith this requirement. A Motor Voter statistics report w ill be delivered by Gemalto to PennDOT w ithin five (5) calendar days from the end of the preced ing month. The final design of the report w ill w e defined and approved by PennDOT during the Business and Technical Requirements w orkshops . Task B-4 - Motor Voter - Support On the day of any general, municipal, special or primary election, the selected Offeror shall be available during the hours of 7:00 a.m. until 8:00 p.m., to access the voter registration database and provide resolution to voter registration related questions or problems received by the DOS or Penn DOT. (Gemalto Response] Gemalto has read and understood the requ irement "Task B-4 - Motor Voter Support " and, if selected , w ill comp ly w ith this requ irement. Task B-4 - Motor Voter - Invoicing The selected Offeror shall invoice PennDOT for each processed Voter Registration Application. The selected Offeror shall produce a monthly report detailing Voter Registration Applications by county. Each county shall receive the report on its particular motor voter status/activity. The DOS will receive the reports for all Voter Registration Applications broken down by county. The format of the invoice must be approved by PennDOT and the DOS. The form of the report must be approved by the DOS. (Gemalto Response] Gemalto has read and understood the each of the requ irements conta ined in "Task B-4 - Motor Voter - Invo icing" and, if selected , w ill comply w ith th is requ irement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 94 109200 GULaw Privacy FR Task 8-5 - Central Image Server All image fi les and dr iver and voter registration appl ication data shall be the sole property of the Commonwea lth, PennDOT, DOS or app licable agency. Per the Drivers Privacy Protect ion Act, 18 USC2721, the information conta ined in the Central Image Server is classified as Personally Ident ifiable Informat ion and shall not be know ingly disclosed or shared by the selected Offeror for any reason, under pena lt y of law. As such, the selected Offeror shall not sell, pub lish, share or otherw ise distr ibute any images or data without PennDOT's w ritten approva l. Task B-5 - Central Image Server - Conversion of Image Files The selected Offeror shall convert the present central image files, approximately 50,000,000 at the time of this RFP's issuance, to the selected Offeror 's Central Image Server. The image files must be converted with no degradation of quality. The selected Offeror shall provide its conversion strategy prior to go-live that addresses a phased in rollout implementation. [Gemalto Response] Gemalto understands and will comp ly with th is requirement. All existing centra l image fi les w ill be m igrated with no degradat ion of qua lity. -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 95 0-2014-091101 Pennsylvania DOT 109201 GULaw Privacy FR Task B-5 - Central Image Server - Conversion of Image Files ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-5 - Central Image Server - Hardware/Software Requirements Selected Offeror must provide all hardware and software required to host its proposed Central Image Server for the life of the contract. This includes any hardware and/or software required to communicate with additional selected Offeror systems (such as Facial Recognition) or PennDOT systems. All hardware technology. and software must be new and consist of current, available, supported The system must be scalable to accommodate the anticipated growth in records over the life of the contract. Currently, there are approximately 50,000,000 image files stored in the Central Image Server. That number is anticipated to grow by approximately 2,700,000 images per year. This is only an estimate and the actual volume of growth may vary. The system must be capable of notifying operations personnel, both visually and audibly, of any failures or errors. (Gemalto Response] Gemalto understands and comp lies with this requ irement. Draw ing from our extensive experience in the design, development , dep loyment , and operat ion of many ID card and driver license programs, the solution proposed for PennDOT features a mu lt i-tiered architecture bringing mu lt iple benefits. -----------------[BEGINN @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 96 109202 GULaw Privacy FR Task B-5 – Central Image Server – Hardware/Software Requirements @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 97 109203 GULaw Privacy FR Task B-5 - Central Image Server - Hardware/Software Requirements ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Gemalto confirms that the system w ill be capable of not ify ing operat ions personnel, both visually and audibly, of any failures or errors. Performance monitor ing w ill put in place for the Backend IT system to ensure any issues that may ar ise are quickly discovered and addressed. Task B-5 - Central Image Server - Operating System (Gemalto Response] Gemalto compl ies. The proposed Central Image Server is fully compat ible w ith M icrosoft Windo w Server 2008 R2 vers ion in a standa lone and load balanced environments. Our solut ion and associated components have also been validated w ith Microsoft W indows Server 2012 R2 version in our deve lopment and test environments . Task B-5 - Central Image Server- Interface In the future, PennDOT may use the images stored on the Central Image Server for additional products. As such, these images must be available to and easily accessible by PennDOT. The selected Offeror shall supply an industry standard Application @ GEMALT0.C0M Programming Interface 98 0-2014-091101 Pennsylvania DOT 109204 GULaw Privacy FR Task B-5 - Central Image Server - Interface which is in widespread commercial use for query and retrieval to and from the Central Image Server. The Offeror shall state what this interface is in its proposal. (Gemalto Response] Gemalto proposes ut ili zing W indows Communicat ion Foundat ion (WCF) for build ing serv ice-or iented app licat ions . Using WCF, data is sent as asynchronous messages (messages sent intermittent ly instead of a cont inuous stream) from one serv ice endpo int to another. A service endpo int can be part of a cont inuous ly availab le service hosted by web servers, or it can be a serv ice hosted in an app licat ion, Gema lto can support both IIS Host ing and W indows Service Host ing for WCF host ing service . The messages transferred uti lizing th is protoco l between app licat ion endpo ints can be as simp le as a single character or word sent as XML, or as complex as a stream of binary data. Task B-5 - Central Image Server - Data Storage and Image File The Central Image Server must store and back up all Image Files. The Central Image Server shall perform backups automatically. The selected Offeror shall use a relational database structure for the Central Image Server. The system shall store the applicant photo images in color, applicant signatures in black & white, and text data. The photo image and signature must be stored in JPEG, or other PennDOT approved, format, using the latest AAMVA standards. They may be compressed. The photo image and signature must be stored and accessible separately. Each image file shall be indexed with the 8 digit Driver License/Identification number, while Special IDs shall be indexed using their 8 digit alphanumeric number, for retrieval purposes. The file index must not be compressed. As part of the image file, the selected Offeror shall always keep the original issue date, the original production date, location and, if applicable, the duplicate issue date(s) and the duplicate production date(s) and location(s). All images and signatures shall be stored from the date of capture. The system must allow for the deletion of image files, at the request of and at no cost to PennDOT. (Gemalto Response] Gema lto understands and will comply w ith th is requirement. The Centra l Image Server will store , from the date of capture, and automatica lly backup all Image Files includ ing app licant photos in co lor , black and wh ite signature fi les, and any associated text. As described in the fo llow ing requ irement , Gemalto will uti lize an Entity-Re lat ionship Data Model. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 99 109205 GULaw Privacy FR Task B-5 - Central Image Server - Data Storage and Image File Gemalto confirms that the image w ill be stored in JPEG or another PennDOT approved format and wi ll be AAMVA comp laint. The image storage specificat ions will be defined and agreed upon during the Business and Techn ical Requirements workshops between Gema lto and PennDOT. Gema lto's solution is designed to flex ible w ith regards to fi le formatt ing and database architecture and schema due to the w ide var iety of requ irements from State to State. Gemalto confirms that the photo images and signature w ill be both separately stored and separate ly accessible. Image fi les w ill be indexed w ith the 8 - digit DL/ ID number and special IDs w ill be indexed using their 8 - digit alphanumeric number as required by PennDOT. In add it ion, the index fi le w ill not be compressed . Also, Gema lto w ill prov ide a mechanism for the delet ion of image fi les for PennDOT at no cost to the Commonwea lth . Task B-5 - Central Image Server - Data Model (Gemalto Response] In Section 1-17 "Proposal Contents", PennDOT states that "The Commonwea lth is not requesting , and does not requ ire, confident ial propr ietary informat ion or trade secrets to be included as part of Offerors ' subm issions in order to evaluate proposa ls subm itted in response to th is RFP." Since the Commonwealth is not request ing, or requ iring , confidential informat ion in our response we can prov ide the following high- leve l description of the Coesys Credent ialing System's data mode l. Gemalto proposes using the popular and widely used Entity-Relationship Data Model. This mode l is compr ised of ent ities (a piece of data such as a signature fi le) and the re lat ionships (how and to what that piece of data is connected to) of the ent ity. The relat ionships define the dependencies and requ irements between var ious components. Task B-5 - Central Image Server - Digital Image Exchange PennDOT currently utilizes AAMVA Digital Image Access and Exchange for view only access to both Pennsylvania and Out of State customers. As such, the Offeror must participate in AAMVA Digital Image Access and Exchange. (Gemalto Response] Gemalto understands and will comp ly with this requirement. If selected , Gema lto w ill integrate PennDOT' s new system with the AAMVA Digita l Image Access and Exchange. Task B-5 - Central Image Server - Networking The Image Files shall be transmitted @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT over PennDOT furnished communication lines to the 100 109206 GULaw Privacy FR Task B-5 - Central Image Server - Networking (Gemalto Response] Gema lto acknowledges that the Image Files shall be transmitted furn ished commun icat ion lines to the Central Image Server (i.e. Coesys Backend) . over PennDOT- Task B-5 - Central Image Server - Communication with Mainframe On a daily basis, the Central Image Server shall electronically License/Identification card issued to PennDOT's mainframe. transmit data from each Driver The exact data, format and timing of the update will be determined by Penn DOT. In the future, the Mainframe may need to retrieve images from the Central Image Server to print on PennDOT products. See Interface requirements above. (Gemalto Response] Gemalto understands and will comply w ith th is requirement. The Central Image Server w ill electron ically transm it data from each card issuance to PennDOT's ma inframe on a daily basis. The data, format, and update frequency will be defined by PennDOT and agreed upon du ring the Business and Technical Requirements workshops. Future needs, such as ret riev ing images prior to printing the cards should also be discussed dur ing the Business and Techn ical Requirement workshops. Task B-5 - Central Image Server- Response Time The total time from the time the Image File transmit request is received by the Central Image Server to the time that the Central Image Server begins transferring the file shall not exceed five seconds, regardless of the number of retrieval requests received. (Gema lto Response] Gemalto confirms that the Coesys Backend servers w ill be prov isioned and mainta ined in order to begin t ransferring the requested data w ith in five seconds of receiving each request, regardless of the number of retrieva l requests received. As part of th is continuous performance mon ito ring process dur ing the Support and Ma intenance phase of the contract , Gema Ito wi ll part icipate in regular performance and forecast ing reviews with PennDOT in order ensure that Gema lto is aware of and prepared fo r any expected increases in demand. In addition, to these Performance Review meet ings, system performance data is always available to author ized PennDOT users in order to view performance data at any time. System upg rades scope and schedu ling w ill be discussed, planned and scheduled w ith PennDOT staff dur ing the course of the contract so as to coo rdinate upgrade activit ies and serv ice availability. Any and all upgrades requ ired to mainta in the five second response requ irement will be provided by Gemalto at no cost to the Commonwealth. @ GEMALT0.C0M 0-2014-091 101 Pennsylvania DOT 101 109207 GULaw Privacy FR Task B-5 - Central Image Server - Upgrades The selected Offeror shall be responsible for any upgrades to selected Offeror managed hardware and/or software necessary to maintain the five second response time, regardless of the number of retrieval requests received. These upgrades, if required, shall be provided at no additional cost to PennDOT. (Gemalto Response] Gemalto under sta nds and will comply w ith th is requ irement. Gemalto confirms that the Coesys Backend servers will be prov isione d and mainta ined in order to begin transferr ing the requested data w ith in five seconds of rece ivi ng each request , regardless of the number of retr ieval requests rece ived. Task B-5 - Central Image Server - Central Image System Availability The Central Image Server must be available 24 hours a day, 7 days a week, regardless of maintenance, back up or any other function either being performed by or on the Central Image Server. Any maintenance window for the Central Image Server must be approved by Penn DOT. (Gemalto Response] Gema lto compl ies with this requirement and proposes high availability system architecture for Central Image Server that will be hosted w ith in the PennDOT datacenter . The highly availab le system w ill be implemented in accordance wi th industry best practices and with fa il-over capab ilities in all ways from redundant server hardware components, and redundant connections to software configurat ions. Any maintenance windows for the Centra l Image Server will be approved by PennDOT pr ior to perform ing any wo rk. Task B-5 - Central Image Server - Reporting (Gemalto Response] The Coesys Backend logs a comprehens ive set of appl icat ion/user activity event data encompass ing the entire Issuance Request Lifecycle. Coesys Backend is respons ible for the secure storage (i.e . integr ity of the app licat ion and user activity log data and access rights/restrictions ), and query and report ing funct iona lity of this data. -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 102 109208 GULaw Privacy FR Task B-5 – Central Image Server – Reporting @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 103 109209 GULaw Privacy FR Task B-5 - Central Image Server - Reporting @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 104 109210 GULaw Privacy FR Task B-5 - Central Image Server - Reporting @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 105 109211 GULaw Privacy FR Task B-5 - Central Image Server - Reporting @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 106 109212 GULaw Privacy FR Task B-5 - Central Image Server - Reporting @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 107 109213 GULaw Privacy FR Task B-5 - Central Image Server - Reporting @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 108 109214 GULaw Privacy FR Task B-5 - Central Image Server - Reporting ------------------[END @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- 109 109215 GULaw Privacy FR Task B-5 - Central Image Server - Location For redundancy, two data centers for the Central Image Server must be provided by the selected Offeror and located at two separate facilities. One facility must be located at the Commonwealth Technology Center in Harrisburg, and the other must be off site at a location within Pennsylvania chosen and maintained by the selected Offeror. Either location can be the primary data center while the other shall be the redundant data center for disaster recovery purposes (see Disaster Recovery Requirements.) PennDOT, with input from the selected Offeror, will decide which site will be primary and which will serve as the Disaster Recovery location. (Gemalto Response] Gemalto confirms that two datacenters will be prov ided to PennDOT for the Central Image Server. The proposed pr imary system will reside in the Commonwealth Techno logy Center in Harr isburg . The proposed backup locat ion is within a secure datacenter located in Pittsburgh, PA. Gemalto would be happy to exp lore closer backup locat ions or use the proposed Pittsburgh center as the pr imary env ironment . The locat ions of the primary and disaster recovery datacenters will be discussed and agreed upon dur ing the Business and Technical Requirements workshops between Gemalto and PennDOT. Task 8-6 - JNET Task B-6-JNET Pennsylvania's Justice Network {JNET), utilized by the Pennsylvania State Police {PSP), shall have 24 hours per day-7 days per week-365 days per year access to the Central Image Server. Current estimated JNET usage is approximately 26,000 users retrieving approximately 14,800,000 images yearly. This usage is anticipated to grow approximately 5% each year. JNET traffic shall be capable of being routed through the disaster recovery site to minimize traffic on the main server for the Centers, if determined by PennDOT. (Gemalto Response] Gema Ito confirms that Pennsylvania's JNET will have 24/7 /365 access to the Central Image Server. In add it ion, JNET traff ic wi ll be capab le of being routed to the disaster recovery site in order to m inim ize traffic to pr imary site, if determ ined necessary by PennDOT. Gemalto ' s secure credentia ling solution is designed to integrate with existing customer business app lications and systems as we ll as interface w ith PennDOT-author ized 3rd party systems and services, as requ ired. This is typica lly achieved using web services. The Interface w ith JNET that w ill be refined, and/or defined , during the Business and Technical Requirements workshops between Gemalto and PennDOT. Gemalto wil l meet the requirement of rout ing traffic to the DR site by imp lement ing the GSLB (Globa l @ GEMALTO.COM 110 0-2014-091101 Pennsylvania DOT 109216 GULaw Privacy FR Task B-6-JNET Server Load Balancing) solut ion in which both the Penn DOT and Gema Ito datacenters are equ ipped w ith the GSLB's. These GSLBs w ill be configured to red irect the JNet traff ic from PennDOT datacenter to Gemalto datacenter when pre-defined traffic load limit is reached on PennDOT datacenter Centra l Image servers. The Disaster Recovery Centra l Image database is cont inuous ly synchron ized in rea l t ime w ith the Product ion Centra l Image database. The database synchron ization is bi-d irectiona l, means any changes on the DR Image database w ill be rep licated to Product ion Centra l Image database and vice versa . This w ill insure that the resu lts returned from the DR site wi ll be the same as resu lts returned from the primary data center. Task B-7 - Facial Recognition System PennDOT has determined that, to better m it igate fraud , a facia l recognit ion compar ison must be executed at the t ime any image is captured rather than in a batch process overn ight. For new customers , the system must perform a 1:N compar ison between the captured image and all other images in the Centra l Image System . For exist ing customers , the system must perform a 1:1 compar ison between the captured image and the customer 's other , prev iously captured images . If a match is ident ified that exceeds the allowab le thresho ld, the customer w ill be given a temporary product wh ile the potent ial match is invest igated by the PennDOT's Risk Management Off ice (RMO). If the RMO determ ines no fraud is present , it can re lease the case and have the customer's permanent product be created and distributed via the selected Offeror managed Centra l Issuance faci lity. If fraud is detected , the RMO can export and submit the case to the Pennsylvania State Police . Task B-7 - Facial Recognition System - Hardware/Software The selected Offeror must provide all hardware and software necessary to implement its proposed facial recognition solution to meet the requirements of this RFP for the life of the contract. All hardware must be of new manufacture and be current, available, supported technology and include, but not be limited to: • Facial recognition system processing and data storage hardware enrollment, 1-1 and 1-N searching of all images. • Facial recognition system processing and data storage hardware to support the enrollment, real time 1-1 and real time 1-N searching of on-going acquired images for the contract period. • Manual Review software for vetting potential matches and performing ad-hoc queries and comparisons of both internal and external images. @ GEMALT0.C0M to support the 111 0-2014-091101 Pennsylvania DOT 109217 GULaw Privacy FR Task B-7 – Facial Recognition System – Hardware/Software [Gemalto Response] Gemalto confirms that it will provide all hardware and software necessary to implement the proposed facial recognition solution, Coesys Review, in order to meet the requirements of this RFP for the life of the contract. All hardware will be new and current, available, and supported technology, including the following items: • • • Facial recognition system processing and data storage hardware to support the enrollment, 1-1, and 1-N searching of images. Facial recognition system processing and data storage hardware to support the enrollment, 1-1, and real time 1-N searching of on-going acquired images for the contract period. Manual Review software for vetting potential patches and performing ad-hoc queries and comparisons of both internal and external images. -----------------[BEGINNING GEMALTO CONFIDENTIAL INFORMATION]----------------------- @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 112 109218 GULaw Privacy FR Task B-7 - Facial Recognition System - Hardware/Software ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System - Location For redundancy, two data centers for the Facial Recognition System must be provided by the selected Offeror and located at two separate facilities. One facility must be located at the Commonwealth Technology Center, and the other must be off site at a location within Pennsylvania chosen and maintained by the selected Offeror. Either location can be the primary data center while the other shall be the redundant data center for disaster recovery purposes (see Disaster Recovery Requirements.) PennDOT, with input from the selected Offeror, will decide which site will be primary and which will serve as the Disaster Recovery location. (Gemalto Response] Gemalto confirms that two datacenters w ill be prov ided to PennDOT. The Facial Recognition System w ill be hosted in the same locat ion as the Centra l Image Server. The proposed primary system w ill reside in the Commonwea lth Techno logy Center in Harrisburg. The proposed backup locat ion is w ithin a secure datacenter located in Pittsburgh , PA. Gemalto would be happy to explore closer backup locations or use the proposed Pittsburgh center as the primary env ironment. The locations of the pr imary and disaster recovery datacenters will be discussed and agreed upon dur ing the Business and Technical Requirements wo rkshops between Gemalto and PennDOT. Task B-7 - Facial Recognition System - Enrolling of Current Images The selected Offeror must enroll all current PennDOT images stored in the Central Image Server, approximately 50,000,000 images at the time of this RFP's issuance, in Facial Recognition templates. (Gemalto Response] Gemalto confirms that it w ill enro ll the existing 50,000,000 images in PennDOT's database into the new facia l recogn it ion system. At the beginning of the project , Gema Ito w ill 'enroll' the approximate ly 50 m illi on images that current ly exist in the PennDOT Centra l Image Server into the Coesys Review FRSgallery. Enrollme nt is the process of analyzing a digita l image and calculat ing a biometr ic temp late that w ill be stored and used for all future biometric comparisons (1:N, N:N). The deta ils of th is process will be confirmed dur ing the Business and Techn ical Requirements (BTR) wo rkshops during the Project Init iat ion phase. At a high @ GEMALT0.C0M 113 0-2014-091101 Pennsylvania DOT 109219 GULaw Privacy FR Task B-7 - Facial Recognition System - Enrolling of Current Images level, however, Gemalto will make use of any metadata that is made available by PennDOT for each image that can be used for index ing/referencing so that a link may be mainta ined between the biometric temp late and the image. In the course of normal operations of PennDOT (excluding covert issuances), new ly-captured portra it images will be automat ically enro lled into the FRS, un less they are requ ired to be om itted for secur ity and/or policy reasons. Gema lto wi ll provide the necessary software tools and comput ing resources dur ing the Bulk Enrollment phase to efficient ly manage the enro llment process as well as manage the investigat ion of any images w hich fail to enro ll. In the course of norma l operat ions, if an image fa ils to enro ll, a message w ill be sent both to the PCSwor kstat ion operator as well as generate a biometr ic except ion that can be managed adm inistrative ly on the back-end. Task B-7 - Facial Recognition System - Enrolling of Future Images The system must enroll all future images captured by PennDOT via any Photo License/ID Card processes in Facial Recognition templates. (Gemalto Response] Gemalto understand th is requirement and confirms that it will automat ically enro ll all future captured images into the new Facial Recognit ion System during the Capture process. Task B-7 - Facial Recognition System - Image Comparisons The system must be capable of performing both 1:1 and 1:N image comparisons between captured images and those stored in the Central Image Server. These comparisons must be done in real time, at the time an image is captured. (Gemalto Response] Gema lto understands and will comp ly with th is requ irement . Automatic 1:1 and 1:N comparisons w ill be made during the enro llment process, in rea l t ime, between captured images and images stored in the centra l image server. Task B-7 - Facial Recognition System - Matching Threshold The threshold for what constitutes a "match" shall be configurable and easily adjustable by PennDOT. The selected Offeror shall work with PennDOT to determine, and adjust if necessary, the match threshold so as to maximize the effectiveness of the tool while minimizing false positives, at no cost to PennDOT. (Gemalto Response] Gema lto understands and compl ies wi th this requ irement . Thresho lds are easily configurab le and adjustab le for both automatic 1:1 and 1:N compar isons performed dur ing enro llment as we ll as dur ing manua l case creat ion and searches performed in Coesys Review, Gema lto 's case management app lication . @ GEMALT0.C0M 114 0-2014-091101 Pennsylvania DOT 109220 GULaw Privacy FR Task B-7 - Facial Recognition System - Matching Threshold Dur ing the enro llment of PennDOT's existing 50 mi llion images, a small batch of approx imate ly 1,000 images will be enrolled into a test database which is then tested and enro llment parameters are tuned according ly. This process is repeated until acceptab le confidence levels are achieved in the test database . The t ime requ ired to tune the enro llment process into the FRSdatabase is dependent on the quality of the existing images. Once the enro llment parameters have been tuned using the test database and sample data set and an acceptab le confidence leve l has been establ ished, the existing database is ready to be enro lled. Gemalto confirms that it will work w ith PennDOT dur ing the init ial enro llment as well as dur ing the life of the contract to adjust, if necessary, matching thresholds and tun ing parameters to ensure the effect iveness of the too l. Please note that FRS engine tun ing and thresho ld both determ ine the effect iveness of the Facial Recognit ion System. FRS engine tun ing is typ ically performed during init ial enro llment and affects the ent ire system while matching thresho lds may be adjusted ind ividua lly or system wide easily throughout the life of the contract. Task B-7 - Facial Recognition System -Temporary Products Any time that a match exceeding the matching threshold is detected, the system must prevent the Drive License or Image Capture Workstation from issuing a permanent product and, instead, issue a temporary product while referring the potential match to PennDOT's Risk Management Office. (Gemalto Response] Gemalto understands and compl ies w ith this requirement . When a captured app licant photo exceeds the allowab le threshold, a flag w ill be created . This flag w ill mod ify the issuance request from a permanent DL to temporary DL while forwarding the case to the Risk Management Office and creat ing a case within Coesys Review. Gema lto will work with PennDOT to clearly define the requ irements for matches and issuing temporary documents dur ing the Business and Technica l Requirements workshops. Task B-7 - Facial Recognition System - RMO Notification (Gemalto Response] Gema lto understands and compl ies with the requ irement. PennDOT's Risk Management Office will be automatica lly notified of potent ial matches. Coesys Review automatica lly creates cases for any compar isons w ith potent ial matches. -----------------[BEGINN @ GEMALT0.C0M ING GEMALTO CONFIDENTIAL INFORMATION]----------------------- 115 0-2014-091101 Pennsylvania DOT 109221 GULaw Privacy FR Task B-7 – Facial Recognition System – RMO Notification @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 116 109222 GULaw Privacy FR Task B-7 - Facial Recognition System - RMO Notification ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System - Performance The system must be capable of performing either a 1:1 or 1:N comparison within five (5) seconds of receiving the request. The system must be able to handle images of various quality, lighting and subject angle, within reason. Minor variations in images is to be expected and the selected Offeror's proposed system must be able to handle such variations. (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement . Our Facial Recognit ion System has been designed to be easily scalable in order to ensure that 1:1 and 1:N compar ison resu lts are returned w ith in five (5) seconds of the request for the life of the project. Gema lto ' s Facial Recognit ion System has been designed to account for differences in light ing, qua lity, and angle. Dur ing the enro llment of the existing database , parameters w ill be tuned to account for differences in image qua lity to ensure a fu lly funct iona l and robust biometr ic solut ion. Task B-7 - Facial Recognition System - Manual Review Application The selected Offeror shall provide an application for manual review of both match and nomatch cases. The selected Offeror shall provide access for 29 concurrent users of the manual review application. Refer to Task H-7 for information pertaining to access by additional users. Access to the application shall be managed by username and login. (Gemalto Response] Gema lto understands and compl ies w ith this requ irement. Coesys Review, Gemalto ' s biometric case management soft w are in included w ithin our offer . Gemalto confirms that access w ill be prov ided for 29 concurrent users managed by username and passw ord. Task B-7 - Facial Recognition System - Review @ GEMALT0.C0M 117 0-2014-091101 Pennsylvania DOT 109223 GULaw Privacy FR Task B-7 - Facial Recognition System - Review Recognition system (cases). The potential matches must be provided in a "queue" with operators able to select either the next available case or a specific case. Cases should also be assignable to specific users, if necessary. (Gemalto Response] Gemalto under sta nds and complies with th is requ irement. Coesys Review is the case management app lication w ith in Gema lto's solut ion. Its pr imary purpose is to provide authorized users w ith the functiona lity to rev iew cases generated by biometric or adm inistrat ive except ions encountered w hile process ing an Issuance Request . -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 118 109224 GULaw Privacy FR Task B-7 - Facial Recognition System - Review ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System - Search (Gemalto Response] -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 119 109225 GULaw Privacy FR Task B-7 - Facial Recognition System - Search @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 120 109226 GULaw Privacy FR Task B-7 - Facial Recognition System - Search ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System - Manipulating Images Images must be able to be easily manipulated so as to make comparisons between separate images easier for the operator. This includes features such as zooming in on images, comparing images side by side, tilting images and the like. (Gemalto Response] Gemalto understands and comp lies w ith th is requirement. The fo llow ing too ls are included for the manipu lat ion and review of images and illustrated below . -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 121 109227 GULaw Privacy FR Task B-7 - Facial Recognition System - Search @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 122 109228 GULaw Privacy FR Task B-7 - Facial Recognition System - Search @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 123 109229 GULaw Privacy FR Task B-7 - Facial Recognition System - Search ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System - Comparison The system shall allow search results to be compared to each other, to an uploaded image (manually enrolled) or to an image from the Central Image Server. The system shall allow the details (demographic information) accessed by the operator. of search results to be easily The operator must be able to compare images and view details without and having to research. losing search results (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement. During the course of a case invest igat ion, a user may need to add or remove candidates to or from a case and perform Manua l Biometr ic Compar isons on one or more or all of the candidates in the case. -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 124 109230 GULaw Privacy FR Task B-7 - Facial Recognition System - Search @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 125 109231 GULaw Privacy FR Task B-7 - Facial Recognition System - Search ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-7 - Facial Recognition System -Adjudication The system must allow for system identified matches to be either confirmed or overturned by the operator. If confirmed, the system must permit the operator to stop the customer's product from continuing through the workflow. If fraud is confirmed, the operator must be able to export the fraudulent case for submitting to the proper recipient. If overturned, the system must allow for the case to be "released" and the customer's product to continue being processed. (Gemalto Response] Gemalto understands and comp lies w ith this requ irement. Once a case has been generated , the follo w ing typ ical w orkflo w is follo w ed. • An author ized Coesys Rev iew user (Super visor ) assigns each case to an appropr iate Invest igator. o • The case is removed from the Supervisor' s w ork list (queue ), and places in the assignee's w ork list (queue ). Invest igators perform their tasks , documenting comments , observat ions, attach ing add itiona l information (up loade d fi les, etc. ), re-ass igning to other Invest igators for the ir re view/ comment , and ult imate ly choose set the status of the Case to either o Resolved (" resu lt is not suspect " . This determ ination allows the issuance to proceed ), or o Permanent Hold ("resu lt is suspect " . This determinat ion w ill cause Coesys Backend to place the Issuance itse lf on Permanent Hold ) Once a determinat ion is made on the Case, the resu lt (Resolved, or Permanent Hold ) Coesys Backend executes its w orkflo w logic to perform any post-case actions. These actions are configurab le, includ ing the abil ity to not ify specific users/ adm inistrator s of the Permanent Hold and communicate th is resu lt to a non-Gema lto w eb service. If fraud is determ ined , and report can then be generated and exported as requ ired by PennDOT. Gema lto w ill w ork w ith PennDOT dur ing the Business and Techn ical Requirements w orkshops do clear ly define the requ irements for reports w here fraud is confirmed. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 126 109232 GULaw Privacy FR Task B-7 - Facial Recognition System - Manual Enrollment The system must allow for images to be manually uploaded to the system for analysis. It must accept common image formats, such as jpeg, bitmap and tiff, for uploading. The system must allow for the running a 1:N comparison of the uploaded image against all other images in the Facial Recognition system. The system must also allow images from the Central Image Server to be selected for 1:N facial recognition comparisons. (Gemalto Response] Users have the ability to manua lly upload images as new candidates to exist ing cases under invest igation or as a subject for a new invest igation. The proces s and user interfaces are near ly ident ical between add ing images to an exist ing case or as a subject of a new case. The example be low is an examp le of creat ing a new case based on an art ist's sketch of a person of interest that is up loaded as the subject of a new case . -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 127 109233 GULaw Privacy FR Task B-7 - Facial Recognition System - Manual Enrollment @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 128 109234 GULaw Privacy FR Task B-7 - Facial Recognition System - Manual Enrollment ------------------[END @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT OF GEMALTO CONFIDENTIALINFORMATION]--------------------------- 129 109235 GULaw Privacy FR Task B-7 - Facial Recognition System - Image Suppression Authorized operators must be able to manually select images for suppression and exclusion from being enrolled in the Facial Recognition system. This will prevent the image from being included in any facial recognition comparisons. Manual image suppression must be an operator friendly process. (Gemalto Response] Gemalto understand and comp lies w ith this requirement. Any special cases, such as images in the PennDOT Centra l Image Server which are linked to "covert" Issuances that should be skipped for biometric enro llment for security and/or po licy reasons w ill be om itted in the init ial enro llment act ivity and any subsequent enro llment actions. Gemalto will work w ith PennDOT to clear ly define the requ irements for Image Suppression and covert issuances dur ing the Business and Techn ical Requirements workshops between Gema lto and PennDOT. Manua l Image Suppression will be integrated into the overall solution in an operator friend ly process . This process is typ ically custom developed for each customer due to w idely varying requ irements from State to State. Task B-7 - Facial Recognition System - Reporting (Gemalto Response] Coesys Review (the FRS Case invest igation and flag management app licat ion) supports, at a min imum , logging of the following user act ivities : • Login, Logout, Failed Login to app licat ion • Adm in istrat ive - Case Accepted , Case Release back to Queue , Case Resolv ed, Permanent Ho ld • Manua l 1 :N Searches • Manua l add it ion of Cand idate (Photo) (by searching DPL or by fi le upload) • Create, Print or Down load of Dossier (Case record) • (Opt iona l) Superv isor confirmat ion (requ ires Supervisor app licat ion log- in) of any/a ll Case Resolut ion Status (Resolved, Ho ld, etc .) The specific criter ia and report types w ill be defined and agreed upon dur ing the dur ing the Business and Techn ical Requirements workshops between Gema lto and PennDOT. All report ing for proposed system is logged by the Coesys Backend and is discussed in further detai l, including samp le reports , in the response to "Task B-5 - Centra l Image Server - Report ing" @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 130 109236 GULaw Privacy FR Task 8-8 - Central Issuance Facility Although PennDOT prov ides permanent Photo License/ ID products over the counter, in some situat ions the credent ials are centra lly produced at a selected Offeror prov ided Centra l Issuance Facility . These situations include dup licates (customers can request duplicates either onli ne, via mail or through PennDOT Partners in addition to at DLCs), New Issuance, Department of Correct ions Driver License/ Ident ificat ion Cards and Facial Recognit ion No-Match cases. Unless otherw ise directed , the selected Offeror is responsible for producing and mailing the permanent Driver License/ Ident ificat ion cards to the customer. Task B-8 - Central Issuance Facilities - Duplicates On a daily basis, PennDOT will supply the selected Offeror with demographic files of those customers who want their duplicate Photo License/ID card issued through the Centralized Duplicate Process. Once the selected Offeror receives this file from PennDOT, it shall produce, quality check and mail the duplicate Photo License/ID cards requested. Upon production, the selected Offeror shall be responsible for returning a message to PennDOT indicating the products produced. The format and transmission method of this message shall be determined by PennDOT. Selected Offeror must have adequate capacity to produce, at the time of this RFP's issuance, approximately 154,000 centralized duplicates per year. This is only an estimate and actual centralized new issuance card production volume may vary. The selected Offeror must be able to produce and distribute License/Identifications within the 2 day processing timeframe. these Duplicate Driver (Gemalto Response] Gemalto understands and complies w ith th is requ irement. Gemalto w ill produce Duplicate DI/ ID's from a daily product ion file provided by PennDOT through the Duplicate Process. Gemalto w ill produce , quality check, and ma il the Duplicate DL/ID' s w ith in the 2 day processing t imeframe required by PennDOT. Gemalto has adequately sized its central issuance capacity to account for PennDOT' s needs in add ition to expected growth . Upon the comp letion of card product ion and maili ng for Duplicates, Gemalto w ill notify PennDOT in a format and transm ission method to be determined by PennDOT dur ing the Business and Technical Workshops between PennDOT and Gema Ito. Task B-8 - Central Issuance Facilities - New Issuance PennDOT issues temporary products for new customers that fall within the threshold to be reviewed by the Risk Management Office over the counter at Photo License Centers and then, if approved by PennDOT, produces the Page permanent product centrally and mails it to the customer. On a daily basis, PennDOT will supply the selected Offeror with a demographic file or files of @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 131 109237 GULaw Privacy FR Task B-8 - Central Issuance Facilities - New Issuance those customers who have received a new, temporary credential and need to receive their permanent product from the selected Offeror 's Central Issuance Facility. Once the selected Offeror receives this file from PennDOT, it shall produce, quality check and mail the permanent Photo License/ID Cards for new issuance requested. Upon production, the selected Offeror shall be responsible for returning a message to PennDOT indicating the products produced. The format and transmission method of this file shall be determined by PennDOT. The selected Offeror must be able to accommodate the anticipated volume of new issuance credentials through its Central Issuance facility. At the time of this RFP's issuance, there were approximately 390,000 centralized new issuance credentials issued over the last year. This is only an estimate and actual centralized new issuance card production volume may vary. The selected Offeror must be able to produce and mail these products within processing timeframe. the 2 day (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement . Gemalto w ill produce New Issuance 01/ID's from a daily production fi le provided by PennDOT through the New Issuance Process. Gemalto w ill produce , qua lity check, and mai l the New Issuance DL/ID's within the 2 day processing t imeframe required by PennDOT. Gemalto has adequate ly sized its centra l issuance capacity to account for PennDOT' s needs in addit ion to expected growth. Upon the comp letion of card product ion and mai ling for New Issuance DL/ ID's, Gemalto will notify PennDOT in a format and transm ission method to be determ ined by PennDOT dur ing the Business and Technica l Workshops between PennDOT and Gemalto. Task B-8 - Central Issuance Facilities - Department of Corrections Driver License/Identification Cards t"ennuu I proauces Department of Correction (DOC) Driver License/Identifications inmates via the Central Issuance process. Cards for On a daily basis, PennDOT will provide a zipped file, which includes the portrait, signature, duplicate file and renewal/new issuance file, to be picked up by the selected Offeror that contains duplicate and renewal/new issuance DOC Driver License/Identification Cards to be processed via Central Issuance. The selected Offeror must then run the Driver License/Identification Cards provided in the file(s) through Facial Recognition and, if no matches are identified, produce the finished DOC cards. If potential matches are identified, they must be referred to the PennDOT Risk Management Office (RMO) for analysis. For a flow of this process see Appendix M, Current Issuance Processes. When the DOC Driver License/Identification @ GEMALT0.C0M 0-2014-091 101 Pennsylvania DOT Cards are run through facial recognition, the 132 109238 GULaw Privacy FR Task B-8 - Central Issuance Facilities - Department of Corrections Driver License/Identification Cards i111a ,H uc , c~amcu u11the Central Image Server and included in future facial recognition 6 c 11,u comparisons. For Driver License/Identification Cards provided via the DOC process, the selected Offeror must, instead of mailing the cards to the individual, return them to the PennDOT Risk Management Office. Selected Offeror must have adequate capacity to produce approximately, at the time of this RFP's issuance, 12,000 centralized DOC Driver License/Identifications per year. This is only an estimate and actual centralized new issuance card production volume may vary or the program may be expanded. The selected Offeror License/Identifications must adhere to the 2 day processing time frame for DOC Driver Cards. (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement . Gemalto w ill produce Department of Correct ions 01/ID's from a dai ly product ion fi le prov ided by PennDOT through a zipped file . Gemalto will produce, qual ity check, and prov ide the DL/ID' s w ith in the 2 day processing t imeframe requ ired by PennDOT. Before the cards are produced, Gemalto w ill run the fi les though the Coesys Review facia l recogn ition engine . Any matches w ill be flagged and sent to the PennDOT Risk Management Office . Gemalto has adequate ly sized its central issuance capacity to account for PennDOT' s needs in add it ion to expected growth. Task B-8 - Central Issuance Facilities - FR No-Match Issuance Each time a customer's photo is captured during the Driver License/Identification Card issuance process, it will be run through a facial recognition comparison against all current photos on the customer's existing record, looking for potential no matches to current photos on the record. The customer's photo will also been run against all other photos in the facial recognition system looking for potential matches. (see Facial Recognition Requirements). If there is a potential match against another record in facial recognition system or potential no match against existing photos on the customer's record, the system will issue a temporary product and refer the match to the Penn DOT Risk Management Office for review. When the Risk Management Office determines that the match is invalid, it will release the customer's product for production through the selected Offeror's Central Issuance facility. The selected Offeror shall be responsible for producing these No-Match products within the 2 day timeframe and other requirements stated for Central Issuance. (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement. Gemalto w ill produce FR No Match 01/ID's for issuances which were flagged but determined to not be a match by the @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 133 109239 GULaw Privacy FR Task B-8 - Central Issuance Facilities - FR No-Match Issuance PennDOT Risk Management Office. Gemalto will produce , qua lity check, and mail the No-Match DL/ 1D's w ith in the 2 day processing t imeframe requ ired by PennDOT. Gemalto has adequate ly sized its central issuance capacity to account for PennDOT's needs in add it ion to expected growth. Upon the completion of card production and maili ng for No-Match DL/1D's, Gemalto w ill notify PennDOT in a format and transm ission method to be determ ined by PennDOT dur ing the Business and Technica l Workshops between PennDOT and Gemalto. Task B-8 - Central Issuance Facilities - Production Time Timely processing of centralized Driver License/Identification Cards is critical to providing PennDOT's customers with a valid product. As such the selected Offeror shall have two business days to produce, quality check and mail the Driver License/Identification Cards once it receives the file from PennDOT. The selected Offeror shall for no reason exceed the two business day standard. If the selected Offeror does exceed the two business day standard, it must notify Penn DOT immediately. On a daily basis and after processing, the selected Offeror must return a file to PennDOT indicating which Photo License/Identification Cards have been produced and mailed that day. The format and content of this file shall be determined by Penn DOT. (Gemalto Response] Gemalto understands and w ill comp ly w ith this requ irement. Centra lly produced DL/ 1D's w ill be produced , qua lity checked, and mai led w ith in the 2-day t imeframe requ ired by PennDOT. If for any reason the 2-day requirement has been exceeded, Gema Ito will immed iate ly notify PennDOT. Gemalto w ill prov ide PennDOT daily product ion reports indicat ing which DL/ 1D's have been produced that day. The format and content of the reports w ill be defined by PennDOT during the Business and Technica l Requirements workshops between Gemalto and PennDOT. In add it ion to the dai ly production reports , Coesys' Backend report ing system is capab le of producing product ion reports as illustrated below. These reports w ill be accessible through the web based Coesys Backend' s adm inistration module . Examples of our standard ized reports specific to the centra l factory are prov ided below. Please note that all aspects of the reporting system in Gemalto's Secure Credentialing Solution are completely customizable and are catered to each unique customers' business requirements. The Report ing capabilities extend far beyond production and reports are available on other portions of the proposed system . The specific criter ia and report types w ill be defined and agreed upon dur ing the dur ing the Business and Techn ical Requirements workshops between Gemalto and PennDOT. All report ing for proposed system is logged by the Coesys Backend and is discussed in further detai l, including samp le production reports , in the response to "Task B-5 - Centra l Image Server - Report ing" . @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 134 109240 GULaw Privacy FR Task B-8 - Central Issuance Facilities - Mailing The selected Offeror shall insert, postmark and send the Driver License/Identification Cards. The cards shall be sent via 1st class mail using a selected Offeror provided, postage paid envelope. Penn DOT will reimburse the selected Offeror for the actual cost of postage. The selected Offeror shall take advantage of all available postal discounts to reduce postage costs. The selected Offeror shall bill PennDOT for postage costs via a line item separate from the cost of the Photo License/Identification Cards on the invoice. Postage will not be reimbursed for Driver License/Identification meeting the requirements of this RFP. Cards replaced for not The cost of the envelope and Driver License/Identification Card carrier shall be included in the Offeror's price per Driver License/Identification Card issued. The carrier and/or envelope shall have the name and address, which corresponds to the Driver License/Identification Card, printed on it. If a windowed envelope is used, the Driver License/Identification Card shall not be visible. The return address on the envelope will be determined by PennDOT. (Gemalto Response] Gemalto has read and under stood the requ irement regard ing "Task B-8 - Centra l Issuance Facilities - Ma ili ng" and, if selected, will comply w ith th is requ irement. Included in Gemalto ' s offer is Datacard's inline mailing and fu lfillment modu le w hich will automatically insert and app ly postage to the DL/1D cards. Gemalto will capita lize on CASS (Coding Accuracy Support System) in accordance with USPS standards in order to achieve the lowest possible postage. All invo icing, fulfillment , and mailing w ill be performed in accordance with PennDOT's requirements. Task B-8 - Central Issuance Facilities - Look and Feel (Gemalto Response] -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMAL TO CONFIDENTIAL INFORMATION]----------------------- 135 109241 GULaw Privacy FR Task B-8 - Central Issuance Facilities - Look and Feel ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-8 - Central Issuance Facilities - Central Issuance Facility The selected Offeror shall supply the hardware, software and personnel to operate the Central Issuance Facility manufacturing process and produce central issuance Driver License/Identification Cards. The Central Issuance Facility must be located in the greater Harrisburg area, convenient to PennDOT. The Central Issuance Facility must meet current ANSI/NASPO SA 2013 standards for security. (Gemalto Response] Gema lto understands and comp lies w ith th is requirement . The hard ware , soft ware , personne l, and Centra l Issuance Facility used to produce the centra l issuance DL/ 1D cards will be prov ided by Gema Ito. -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 136 109242 GULaw Privacy FR Task B-8 - Central Issuance Facilities - Central Issuance Facility - @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 137 109243 GULaw Privacy FR Task B-8 – Central Issuance Facilities – Central Issuance Facility @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 138 109244 GULaw Privacy FR Task B-8 - Central Issuance Facilities - Central Issuance Facility ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-8 - Central Issuance Facilities - Ownership The selected Offeror shall be fully responsible for the Central Issuance Facility. This includes all personnel required to run the facility, security of the facility, as well as all equipment , including hardware, software and consumables. (Gemalto Response] Gemalto understands and comp lies w ith th is requ irement. Gemalto is fu lly respons ible for the Centra l Issuance Facility including all personne l, the secur ity of the fac ility , and all equipment including hardware , soft w are, and consumab les. -----------------[BEGINNING @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT GEMALTO CONFIDENTIAL INFORMATION]----------------------- 139 109245 GULaw Privacy FR Task B-8 – Central Issuance Facilities – Ownership @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 140 109246 GULaw Privacy FR Task B-8 – Central Issuance Facilities – Ownership ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 141 109247 GULaw Privacy FR Task 8-9 - Disaster Recovery The selected Offeror shall coord inate w ith Penn DOT to make d isaster recovery part of the Centra l Image Server , Facial Recognit ion System and Central Issuance Facility operat ions . Task 8-9 - Disaster Recovery- Plan Each Offeror shall provide, as part of its RFP response, a detailed disaster recovery plan for the Central Image Server and Facial Recognition System. The Offeror's plan must include an alternate site for the Disaster Recovery system with the ability to have Penn DOT conducting business within 24 hours of a disaster scenario. This plan must also account for the central issuance process and describe how any disruptions at the Central Issuance Facility would be addressed to continue producing credentials within the previously described two (2) day timeframe. (Gemalto Response] Gemalto has inclu ded a high leve l Disaster Recovery Plan in Appendix 07 of th is response . Task 8-9 - Disaster Recovery-Testing (Gemalto Response] Gema lto understands and w ill comply w ith th is requ irement. Include d in our Disaster Recovery Plan w ill be test ing to be done at least tw ice per year. Test ing wi ll require PennDOT signoff and approval to ensure that the system is alw ays ready and to prov ide evidence of test ing. Task 8-9 - Disaster Recovery- JNET (Gemalto Response] Gemalto understands and compl ies w ith th is requ irement. As described in the response to Task 8-6, The Disaster Recovery Site wi ll be capab le of being ut il ized for all JNET traff ic through load balancing. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 142 109248 GULaw Privacy FR Task 8-10 - Driver License/Identification SID) Cards and Special Identification (DL/ID and Although the tab le below describes requ irements which the selected Offeror must be able to accommodate, the specific designs of the DL/ID card types , includ ing security features , will be ident ified collaborat ively between PennDOT and the selected Offeror during the planning phase upon award of the contract , w ith the fina l designs to be approved by PennDOT. For examp les of the DL/ID Card Types current ly issued by PennDOT see Append ix J, Pennsylvania Driver License ID Products (04-2012). If determ ined by Penn DOT, the selected Offeror must be capable of producing a DL/ ID Card that is fu lly comp liant with AAMVA standards . The current AAMVA standards are available at http ://www. aamva.org/DL- ID-Card-DesignStandard/ . Task B-10- DL/ID and SID Cards - DL/ID Card Body Specifications The product material for the DL/ID card shall adhere to AAMVA standards. The Product material used shall be the same regardless of whether produced Over The Counter or via the Central Issuance facility. the DL/ID cards are (Gemalto Response] Gemalto confirms that our product materia l for the Commonwea lth's DL/ID cards adhere to AAMVA standards . Gemalto will supp ly compos ite card bodies constructed of layers of PET (Polyethylene Terephthalate Film ) and PVC(Polyvinyl Chloride ). This is a highly durab le blend of plastics that support requirements of the Commonwealth . This card body is also an excellent composit ion for receiv ing security print ing, as well as a color portrait image. All cards issued by the Commonwea lth, both centra lly and over-the-counter, structure. will be ident ical in Task B-10 - DL/ID and SID Cards - DL/ID Card Lamination/Coating All DL/ID cards and Special IDs (Photo License/IDs) shall have a laminate or a protective coating applied to the front of the card which is at least 1 mil thick and meets both the durability and security requirements of this RFP. The laminate or protective coating shall bond to the Photo License/ID card surface in such a way that any attempt to remove it shall be readily apparent upon a visual inspection. The back of the Photo License/ID does not need to be coated or laminated if it can survive the eight year life of the card and can meet the card durability requirements of this RFP. The back of the card, aside from the magnetic stripe, may also contain a protective laminate @ GEMALT0.C0M 143 0-2014-091101 Pennsylvania DOT 109249 GULaw Privacy FR Task B-10 - DL/ID and SID Cards - DL/ID Card Lamination/Coating or coating. The Offeror shall provide separate pricing for this feature if it can be provided. Printing of the DL/ID, lamination or coating and die cutting, if required, must be a one step process with no Photo Technician intervention necessary. (Gemalto Response] Gema lto wi ll ut il ize equ ipment that app lies a protective laminates to each card immed iate ly after pr int ing the persona lization information. All outer laminates app lied by th is equipment w ill be at least 1 m il th ick and protect the informat ion app lied during the persona lization process, pr imari ly the demograph ic information (text) and photo and signature . For the PennDOT Digita l Drivers License System, Gemalto has included high secur ity holograph ic serial ized laminates. Gemalto interna lly tests to standards the bond ing of these outer laminates to our card bodies and assures the Commonwea lth that any attempt to remove it by a fraudster will show obv ious signs of tampering, even under casual inspect ion. The persona lization equipment selected for the Pennsylvania DL/ID project is the Datacard CD800. This printer has an internal mechan ism that prevents bow ing, a phenomenon that occurs when app lyi ng lam inate to on ly one side of a card body. The mechanism , Debow, w ill be insta lled on the equ ipment for this project and w ill alleviate the need for a second laminate app licat ion Dur ing the persona lization of each card, there is a one-step process used to include the appl ication of laminat ion and does not require any Photo Techn ician intervent ion. Task B-10 - DL/ID and SID Cards - DL/ID Card Durability The DL/ID card must be able to last for eight years. Although the present DL/ID card is issued for four years, Penn DOT may extend issuance to a longer increment in the future. The color digitized image and any printed matter must remain stable and survive intact under conditions of strenuous wear and tear. Neither the image nor any print shall significantly deteriorate or discolor during the 8 year life of the DL/ID card. Offerors must submit proposed, sample Photo License/ID Cards to an independent testing laboratory for evaluation of their material composition. The Offeror's samples must be tested per American National Standards lnstitute's (ANSI) latest Card Durability Test Methods (ANSI 322-2008: Card Durability Test Methods.) See also, Card Security below. Offerors shall identify the quality assurance approach that will be used to ensure and monitor the integrity of all DL/ID cards issued. This approach should include not just durability but also product consistency and customer satisfaction. Offeror shall provide written results of the quality assurance tests used. . ... Response] confirms our composite Commonwea lth's requirement of eight years. As mentioned ear lier, Gema lto will supply composite card @ GEMALT0.C0M 144 0-2014-091101 Pennsylvania DOT 109250 GULaw Privacy FR Task B-10 – DL/ID and SID Cards – DL/ID Card Durability bodies constructed of PET (Polyethylene Terephthalate Film) and PVC (Polyvinyl Chloride). We subject our cards to all standardized testing parameters and they exceed the qualification levels for an eight year card life thereby supporting the Commonwealth’s requirement for durability. Should the Commonwealth wish to extend the validity period of the credential in the future, this card structure will support it. -----------------[BEGINNING GEMALTO CONFIDENTIAL INFORMATION]----------------------- @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 145 109251 GULaw Privacy FR Task B-10 – DL/ID and SID Cards – DL/ID Card Durability @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 146 109252 GULaw Privacy FR Task B-10 - DL/ID and SID Cards - DL/ID Card Durability ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-10- DL/ID and SID Cards - DL/ID Card Product Quality All elements of the DL/10 or Special ID must be printed clearly and accurately. The signature printed on the DL/ID Card must be an accurate, clear representation signed by the customer. of that Offerors shall identify the approach that will be used to monitor the overall quality of licenses that are issued. Methods that will measure customer satisfaction with the photo image, generic visual consistency and durability should be included. (Gemalto Response] All elements of the documents produced by Gemalto w ill be clearly pr inted. As state d previous ly, the background security features are printed using offset lithography and silk screen presses giving unpara lleled clar ity and detail. The selected personalizat ion printers will apply clear @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 147 109253 GULaw Privacy FR Task B-10 - DL/ID and SID Cards - DL/ID Card Product Quality representat ion of the cardho lder' s photo, signature , and demographic data. As mentioned in the previous response, Gemalto maintains qua lity and consistency dur ing product ion in all manufactur ing stages. Representat ive samp ling of each batch of cards produced is taken and these cards are subjected to Gemalto ' s interna l testing protoco l w hich exceeds both ISO and ANSI parameters . Gema lto assures each card w ill be printed w ith specific attention to qua lity. Dur ing the acceptance process of the printed cards, Gema lto and PennDOT w ill agree upon qua lity measures through the creation of an acceptance cata log. This cata log w ill serve as a living document , and w ill be cont inua lly updated throughout the project. For each locat ion, Gemalto w ill prov ide a guide for proper maintenance of the printers like storage of the pr int ing ribbons , installat ion of ribbons into printers , and use of cleaning materials to mainta in high qua lity pr int ing. Our field technicians w ill exam ine the qua lit y of the documents being produced on each visit to an office and w ill compare the qua lity of the documents being produced to opt ima l samp le documents and will remedy the situat ion shou ld there be a difference. We w ill also support any of the equipment reported to producing documents below the expected qua lity levels. Task B-10 - DL/ID and SID Cards - DL/ID Card Security Card materials, including card stock and laminate, must be serialized. The DL/ID must include, at a minimum, three level one security features, three level two security features and one level three security feature. Offerors must specify in their cost proposal, the cost of each individual available to PennDOT (a la carte). Exact security features shall be decided on collaboratively PennDOT. security feature between the selected Offeror and PennDOT approves the final security features for the Photo License/ID card. The selected Offeror must allow for an upgraded security plan and replacing with equivalent card security features every 2 years, if desired by Penn DOT. All elements printed onto the DL/ID, including the customer's image, signature and demographic data, shall adhere to the imaging material in such a way that any attempt to remove them would be readily apparent. Each Photo License/ID Card issued shall be constructed of such material and designed so that @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 148 109254 GULaw Privacy FR Task B-10 - DL/10 and SID Cards - DL/10 Card Security any attempt to reproduce or alter it would be readily apparent. Offerors shall submit detailed information on those characteristics, materials and features which are provided in its proposed Photo License/ID Card for adequate protection against various forms of counterfeiting, alteration of data, duplication of the entire Photo License/ID Card, substituting of a customer's photo, etc. The Offeror shall submit sample Photo License/ID Cards, as specified in these RFP requirements, to an independent testing laboratory for evaluation of the Photo License/ID Card material and security. The samples shall be tested per ANSI INCITS 322-2008 Card Durability Test Methods. If the proposed samples submitted cannot fulfill the security requirements of this RFP, PennDOT may reject the proposal solely on this basis. As part the response to the RFP, Offeror shall submit both a sample card and a laboratory evaluation. (Gemalto Response] -----------------[BEGINN @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT ING GEMAL TO CONFIDENTIAL INFORMATION]----------------------- 149 109255 GULaw Privacy FR Task B-10 – DL/ID and SID Cards – DL/ID Card Security @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 150 109256 GULaw Privacy FR Task B-10 - DL/I0 and SID Cards - DL/I0 Card Security @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 151 109257 GULaw Privacy FR Task B-10 - DL/I0 and SID Cards - DL/I0 Card Security @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 152 109258 GULaw Privacy FR Task B-10 - DL/I0 and SID Cards - DL/I0 Card Security @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 153 109259 GULaw Privacy FR Task B-10 - DL/I0 and SID Cards - DL/I0 Card Security @ GEMALT0.C0M 0 -2014 -091 101 Pennsylvania DOT 154 109260 GULaw Privacy FR Task B-10 – DL/ID and SID Cards – DL/ID Card Security @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 155 109261 GULaw Privacy FR Task B-10 – DL/ID and SID Cards – DL/ID Card Security @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 156 109262 GULaw Privacy FR Task B-10 - DL/ID and SID Cards - DL/ID Card Security ------------------[END OF GEMALTO CONFIDENTIAL INFORMATION]--------------------------- Task B-10- DL/ID and SID Cards - DL/ID Card Magnetic Stripe A magnetic stripe shall be affixed to the back of the DL/ID card as described in 1SO/IEC78112:2001 and shall not separate from the card. The magnetic stripes shall be encoded per AAMVA specifications, by PennDOT. unless otherwise directed The selected Offeror's system must encode the three tracks of data in the printer system, without the possibility of mismatching the information on the magnetic stripe with the demographic information that appears on the front of the DL/1D. The Offerors shall describe what provisions through equipment and software it proposes to use to verify the accuracy of the encoded magnetic data on each DL/1D card. (Gemalto Response] Gemalto will app ly a 3 track magnetic str ipe to the reverse of each card per ISO/IEC7811-2 :2001 standard and map the data encode d onto th is stripe per the AAMVA specifications, unless directed otherwise by PennDOT. Gemalto has a clear understand ing of the informat ion required w ith each track , its content and format. As discussed in previous responses this w ill take place dur ing persona lization wit h the proposed Datacard CD800 card pr inter. Here, each track of the magnetic stripe will be encoded w ith the owner's information , w hich is simu ltaneous ly pr inted on the face of the card. The CD800 w ill perform the ver ificat ion and assure the encoded data reflects exact ly what is printed on the face of the card. Task B-10- DL/ID and SID Cards - DL/ID Card Body Elements . . @ GEMALT0.C0M ... 157 0-2014-091101 Pennsylvania DOT 109263 GULaw Privacy FR Task B-10 - DL/10 and SID Cards - DL/10 Card Body Elements must include (if applicable): -Color "Above the shoulder" image of customer approximately 1" wide by 1 1/4" tall; -If a valid without photo license, a message indicating such must be present instead of an image of the applicant; -Signature (captured from signature pad); Customer's full name; -DOB; -Address; -Height; -Sex; -Eye Color; -Photo License Center Location number; -Classification, Restriction, Endorsement Codes; -Issued and Expiration dates; -Organ Donor Designation; -Veterans Designation; -Duplicate Indicator; -DL or ID number; -Under 18/21 indicator(s): This card type must be in vertical format. It also must indicate the date till which customer is 18 and/or 21; and -Unique Banner (color dependent upon card type): including "Pennsylvania" in a customized font and the state website URL. Back of DL card must include, at minimum: and decode; -Card Serial Number; -Classes, Endorsements and Restrictions: Code -lD Barcode containing the customer's DL/ID number; -2D barcode - containing customer information printed on front of card (AAMVA compliant, unless otherwise directed by PennDOT); -Magnetic Stripe - containing customer information on front of card on tracks 1,2 and 3 (AAMVA compliant, unless otherwise directed by PennDOT); and -PennDOT identified message to cardholders (currently that if they move, they must contact PennDOT within 15 days, but subject to change). For example of current DL/ID cards see Appendix J, Pennsylvania Driver License ID Products (04-2012). The selected Offeror shall give PennDOT the capability of adding and deleting card types. The selected Offeror shall allow Penn DOT to add up to 4 card types over the life of the contract at no cost to PennDOT. (Gemalto Response] Gemalto has offered a unique design opportun ity by having high security printed horizontal and vert ical DL/ID and Special IDs in one card offer ing, as out lined in the earlier response to questions found in Task 8-10- DL/ID and SID Cards - DL/ID Card Security. All of the required personalization elements listed in th is question w ill be applied to the card during the personalization process. All AAMVA required demographic fields; {Section 4.2 of AAMVA DL/ID CDS)will be applied to the front of each DL/ID. Further, any opt ional elements {Section 4 .3 of AAMVA DL/ID CDS) requested by the Commonwealth will also be capture and applied to each card. As evident in the proposed back image artwork in our response to Task B-10 - DL/IDand SID Cards DL/ID CardSecurity, Gemalto has applied the required messageto each card holder to not ify PennDOT w ith in the 15 day period if they should move residences. Gemalto w ill remain flexible w ith the Commonwealth for adding and deleting up to 4 card types over the life of the contract at no cost to PennDOT. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 158 109264 GULaw Privacy FR Task B-10- DL/ID and SID Cards -Special IDs PennDOT currently produces identification cards that are not official PennDOT driver licenses or non-driver identification cards. These special identification cards {Special IDs} (asbestos inspector, lead inspector, etc} are made for various Commonwealth agencies using PennDOT's infrastructure. The selected Offeror shall be paid the same price per finished Special ID as it is for DL/ID cards. The current Special IDs are shown in Appendix J, Pennsylvania Driver License ID Products (042012). The final formats for the Special IDs will be collaboratively decided upon by PennDOT and the selected Offeror. The final formats for the special IDs shall be approved by PennDOT. (Gemalto Response] As part of the Collaborat ive Design Forum, Gemalto w ill define the foundation card bod ies that will be used for Driver Licenses, ID Cards, and these specia l identificat ion card types. We approach it th is way because there is a clear distinct ion between the card designs to distingu ish between the types. The Driver License and ID Card designs will be close in design and will carry more advanced security features . The other design will be simp ler in its design. We approach it this way because we want it to be easy to distingu ish between the cards wh ile mak ing it easy for law enforcement and other ent it ies to validate the authentic ity of the credent ial. Further distinct ion can occur during the graph ical personal ization process where we can add co lors, text , etc, to further distinguish one type of card from another. Task B-10- DL/ID and SID Cards - Learner's Permits Currently, PennDOT produces Learner's Permits via the Driver License Centers. In the future, with changing processes and requirements, PennDOT may have a need for the selected Offeror to issue Learner's Permits with a customer photo. The selected Offeror must be capable of producing this type of photo Learner's Permit if determined by PennDOT. (Gemalto Response] As stated in the previous response, during the Collaborat ive Design Forum , Gemalto and the Commonwea lth will define all designs, includ ing those that the Commonwea lth may have a future need to issue such as Learner 's Permits . Task B-10 - DL/ID and SID Cards - DL/ID Card Informational Materials The selected Offeror shall develop and provide a brochure for law enforcement describing Pennsylvania's new DL/ID Cards and their security features. In addition, the selected Offeror shall develop a brochure to be distributed to PennDOT's partners and the general public, describing the look of the new products. The selected Offeror shall deliver these materials to @ GEMALT0.C0M 0-2014-091 101 Pennsylvania DOT 159 109265 GULaw Privacy FR Task B-10- DL/10 and SID Cards - DL/10 Card Informational Materials PennDOT in a common digital format ready for printing. All proposals shall include a full description developed. of the recommended type of materials to be (Gem alto Response] Gemalto rou t inely prepares educat iona l brochures for ou r custom ers. The design of the Commonwea lt h's broc hure w ill be t he result of the Collabo rative Design Forum . The Commonweal t h can expect high qua lity graphics prod uced th ro ugh of fset lithog raphy t hat prov ide an educat iona l review of t he Commonw ealth's new DL/ IDs. Uti lizing one sheet of paper, pr int ed on both sides, Gemalto will provide a 3-fo ld brochur e t hat prov ides an overview of t he new card images, information on secur ity feat ures, and any additio nal educat iona l info rmat ion t he Comm onw ealth would like t o share w ith th e inte nded audience. RO LL FOLD 297mm +-- --- FLAP 97mm - I I I I I I I BA CK -- -+ : FR O N T l 210mm I I I : 100mm : 100mm j Z FOLD ( co ncer11na) 297mm +----I I I I I I I I I I I -+ I I 99mm --- l 210mm I 99mm I I 99mm j Figure 36:lnformational Brochure Task B-11- Consumables Task B-11 - Consumables - Ease of Use The printer ink ribbons/rolls must be preloaded in a cassette or other easily loadable form so that Workstation operators do not have to do any threading of the ribbon when changing print media. (Gem alto Response] Gemalto understands t his requirement. Changing the supp lies on the CD800 is a @ GEMALT0.C0M 160 0 -2014-091 101 Pennsylvania DOT 109266 GULaw Privacy FR quick and easy process. Ink ribbons are quickly and easily replaced on a re-usable integrated cassette so that operators do not have to thread cartr idges within the printer. Please visit the below link wh ich illustrates the ease of consumab le rep lacement w ith in the Datacard CD800. http://www.datacard.com/videos/ card-pr inter-maintenance Task B-11 - Consumables - Supply The selected Offeror shall require the final stage supplier to provide and ship to the selected Offeror no more than a two (2) month supply of the high security laminate and card stock. Card stock and laminate shall be stored in each Photo License Center in a PennDOT provided safe measuring approximately 22 3/4"x17 1/2"x211/4" and printer ribbons shall be kept in a secured room. The selected Offeror must ensure that the quantity of consumables supplied does not exceed what will fit in the safes currently used in the Centers. The selected Offeror shall keep each Photo License Center supplied with a minimum of one week and a maximum of two week supply (based on average customer volumes per center} of any high security material and a four (4) week supply of all other necessary equipment and supplies. All supplies shall be delivered by a secure carrier, at no charge to PennDOT, to Photo License Center locations throughout the Commonwealth. The selected Offeror must guarantee that no Photo License Center will run out of any material needed to produce a Photo License/ID Card, except in cases of strike or other circumstances beyond the control of the selected Offeror, including force majeure. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task 8-11 Consumab les - Supply" and, if selected, w ill comp ly w ith th is requ irement. We will ma inta in no more than a t wo (2) month supp ly of card stoc k and secure laminates. The inventory track ing system w ill automat ically alert the appropr iate part ies of low supplies and will enab le the d istribut ion system to effect ively and eff icient ly operate mainta ining each fie ld office with a min imum of one week and maximum of two w eek supp ly. Gemalto guarantees that no Photo License Centers will run out of materia ls except for the ment ioned except ions . All secure consumables will be secure ly del ivered to each field off ice at no add itional cost to the Commonwea Ith. Task B-11 - Consumables - Tracking/Inventory @ GEMALT0.C0M 161 0-2014-091101 Pennsylvania DOT 109267 GULaw Privacy FR Task B-11 - Consumables - Tracking/Inventory The selected Offeror must control and document the use of any high security laminate, card stock or equipment to the satisfaction of PennDOT. Consumables must be traceable from raw material through fulfillment. This includes accounting for all consumables through the entire process from receipt from the manufacturer, to distribution to the Photo License Centers, to its use in a product and, if applicable, to selected Offeror destruction of leftover materials. Card stock and laminate must be shipped separately. In no circumstances should secure materials of different types be shipped in the same package. The inventory/tracking must include serialized consumables. traceable to the product it was used to create. Each consumable must be Inventory control records shall be balanced against the selected Offeror's accounting records of each card and laminate used. All reports shall be maintained on a monthly, yearly, year to date and life of contract basis and shall be accessible by PennDOT or UniqueSource staff, as specified by PennDOT. The selected Offeror must allow the inventory system to be audited by PennDOT. The Offeror shall explain in its proposal how its inventory through destruction of leftover materials. system will work from receipt (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task 8-11 Consumables - Tracking/ Inventory" and, if selected , will comp ly with th is requ irement. Gema lto confirms that card stock and secure laminates will be traceab le from raw materia l through fu lfi ll ment through the use of seria lized barcodes and never shipped together. The inventory/track ing records will be made available through reports as required by PennDOT. Both the card body and lam inates w ill have barco de seria l numbers appl ied dur ing the manufacturing process . As each package leaves the factory, it w ill be scanned out and scanned in unt il it arrives at its final dest ination . Coesys Backend manages the inventory tracking and aud iting records. Both laminates and card bodies will be tracke d unt il the moment they are issued when the CD800 pr inter uses its integrated scanners to , automat ically and without Photo Techni cian intervent ion, ident ify the specific laminate and card body and link those to the specific card issuance. Secure mater ials that are to be destroyed will be tracked using the same process unt il the point of destruction. Task B-11 - Consumables - Distribution The selected Offeror shall ensure that each shipment received from the final stage supplier includes a packaging slip or other detail of the property being delivered. Under no circumstances shall the selected Offeror accept delivery of any carton whose seal has been @ GEMALT0.C0M 162 0-2014-091101 Pennsylvania DOT 109268 GULaw Privacy FR Task B-11 - Consumables - Distribution broken. Shipment from the final stage supplier to the selected Offeror shall be made by a secured carrier, in a locked and sealed vehicle, with return receipts. The selected Offeror shall distribute materials to the Centers. only complete and sealed units of the high security The selected Offeror must require either Unique Source Products & Services or PennDOT staff to verify receipt of all distributions at the time and place of delivery and must require a signed receipt by authorized Unique Source Products & Services or PennDOT personnel for all deliveries. Distribution of all security sensitive supplies shall be performed authorized shipment method. by PennDOT approved and All distributions and transfers shall be made on a signature release basis. Records of all such distribution shall be maintained by the selected Offeror and shall be made available for inspection or audit by PennDOT. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task 8-11 Consumables - Distr ibution" and, if selected , w ill comp ly w ith th is requirement. The distr ibution of all sensit ive mater ials w ill be performed in accordance with PennDOT's requ irements and recorde d as requ ired by the Commonwea lth. Task B-11 - Consumables - Disposal The selected Offeror shall be responsible for the auditing and disposal of all secure and confidential materials, such as security laminate, card stock and used media, used in the production of a DL/ID Card. These materials may be either used or unused. The selected Offeror of in such a fashion contained be used collaboratively with shall be responsible for ensuring that the secured materials are disposed as that no usable product could be created from them or information for fraud or identity theft. The disposal process must be developed and approved by Penn DOT. The selected Offeror shall maintain auditing and disposal records and make them available to PennDOT and authorized investigators during normal business hours, upon request. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task 8-11 Consumab les - Disposal" and, if selected, will comp ly w ith th is requ irement. All secure materia ls will be tracked, and aud ited, and securely destroyed as required by PennDOT and all associated records will be made available to PennDOT upon request . Gemalto confirms that all secure materia ls w ill be destroyed in a manner such that they will be unusab le for potent ial fraud or ident ity theft. @ GEMALT0.C0M 163 0-2014-091101 Pennsylvania DOT 109269 GULaw Privacy FR Task B-11 - Consumables - Ownership The selected Offeror shall be responsible for the cost of all consumables supplied by the selected Offeror. Regardless of proper use, improper use, waste or defects, the selected Offeror shall only be compensated for completed Photo License/ID Cards. PennDOT and UniqueSource shall exercise reasonable care in the handling of the consumables. (Gemalto Response] Gemalto has read and under stood the requ irement regard ing "Task 8-11 Consumab les - Ow nership" and , if selected , w ill comp ly w ith th is requ irement. Gema Ito w ill provide the cost for all con sumab les supp lied. Task B-11 - Consumables - Suppliers The selected Offeror shall work collaboratively with suppliers in developing established requirements that meet PennDOT's needs and specifications. mutually The selected Offeror shall be flexible in working with both PennDOT and appropriate suppliers if PennDOT's process or product changes or if a supplier recommends a change. The selected Offeror shall proactively work with suppliers to improve performance, lower costs and increase the value of the relationship to both the selected Offeror and Penn DOT. The selected Offeror shall work immediately and proactively with all suppliers in correcting any deficiencies identified in the product or any component of the digital driver license system, including all components of the Image Capture Workstation, Central Image Server or Facial Recognition System. Any changes in supplies, materials and/or suppliers must be approved and coordinated with PennDOT. (Gemalto Response] Gemalto has read and under stood the requ irement regard ing "Task 8-11 Consumab les" and, if selected , w il l comp ly w ith th is requ irement. We w ill w or k collaborati vely w ith supp lies and be flexib le w ith both PennDOT and supp liers . Gemalto w ill proa ct ively w ork w ith suppl iers to impro ve performance and low er cost and w ill w ork immed iate ly and proacti vely to address any issues w ith the system. Gemalto confirms that any changes in suppl ies, material , or supp liers must be appro ved by PennDOT. @ GEMALT0.C0M 164 0-2014-091101 Pennsylvania DOT 109270 GULaw Privacy FR Task 8-12 - Networking Task B-12 - Networking - Deliverable The Requirements Documentation is comprised of, but not limited to, individual plans defined above in Tasks Bl - B12. The Requirements Documentations must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. Task B Deli verabl es Summary Task Sub -Ta sk B-1 - Photo Upfront TASKB Deliverable B -3 - Du licat e \ Vorkstation s B-4 - Motor Voter B -5 - Central Imao e Server B-6 -JNE T ,__ __________________ ____. Requirement s 1-B_ -7_-_F_a_c_ia_l_R_e_c_o_,.,g'-n_it_io_n_S"-s_t_en_t _______ ---i Docum entation B-8 - Central Issuance Facilities B-9 - Disaste r Recover B-10 - Driver License /Identification and Specia l Identifi cation (DL/ID and SID) Car ds B-11 - C onsumabl es B-12 - Netwo rkin g (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task 8-12 Network ing Deliverable" and, if selecte d, w ill comp ly with th is requirement and provide the requ ired documentat ion dur ing the Business and Technical Requirements Workshops between PennDOT and Gemalto @ GEMALT0.C0M 165 0-2014-091101 Pennsylvania DOT 109271 GULaw Privacy FR Task C - System Interface Design Specifications Task C-1- System Interface Design Specifications • User Interface - Documenting any user interfaces of the systems. • System-to-System - Documenting any interfaces between systems. (Gemalto Response] Gemalto has read and understood the requirement regarding "TaskC-1 - System Interface Design Specificat ions" and, if selected, w ill comp ly w ith th is requ irement and w ill del iver PennDOT w ith User Interfaces and System to System Interface Design Specifications during the Business and Techn ical Requirements Workshops between PennDOT and Gemalto Task C-2 -Technical Architecture Design and Specifications For all servers and workstations following: including both functional and technical specifications for the • Photo Upfront Solution Design Specifications • Image Capture Workstation • • Duplicate Workstation Design Specifications Motor Voter Design Specification • • Central Image System and Back-Up Design Specifications JNET Specifications • • Facial Recognition System Design Specifications Central Issuance Facility Design Specifications • • Disaster Recovery Design Specifications Design Specifications (Gemalto Response] Gema lto has read and understood the requirement regard ing "TaskC-2 - Techn ical Architecture Design and Specifications" and, if selected, will comp ly w ith th is requ irement and w ill deliver PennDOT w ith the fo llowing specification during the Business and Techn ical Requirements Workshops between PennDOT and Gemalto: • • Photo Upfront Solut ion Design Spec ifications • • Image Capture Workstat ion Design Specificat ions • • Dup licate Workstat ion Design Specifi cat ions • • Motor Voter Design Specificat ion • • Central Image System and Back-Up Design Specifi cat ions • • JNET Specificat ions • • Facial Recogn ition System Design Specificat ions • • Centra l Issuance Facil ity Design Specificat ions • • Disaster Recovery Design Specifications @ GEMALT0.C0M 166 0-2014-091101 Pennsylvania DOT 109272 GULaw Privacy FR Task C-3 - Database Design Specification (Gemalto Response] Gemalto has read and understood the requ irement regard ing " Task C-3 - Database Design Specificat ion s" and, if selected , w ill comp ly w ith th is requ irement and w ill deliver PennDOT w ith all require d documentat ion for the data mode l on all app licable database s during the Business and Technica l Requirements Workshop s bet w een PennDOT and Gemalto : Task C-4- Card Design Document-All card types and Special IDs Documenting the final design of all Driver License card types and Special IDs. (Gema lto Response] Gemalto has read and understood the requ irement regard ing "Task C-4 - Card Design Document " and, if selected , w ill comp ly w ith thi s requ irement and w ill deliver PennDOT w ith documentat ion of the card design for all card t ypes and Special IDs during the Card Design Forum (CDF) bet w een PennDOT and Gema Ito: Task C-5 - Informational Brochure Design Document - Law Enforcement (Gema lto Response] Gemalto has read and understood the requirement regard ing "Task C-5 Informat iona l Brochure Design Document - Law Enforcement " and, if selected , w ill comp ly w ith th is requ irement and w ill deliver PennDOT w ith a pr int ready document out lining the new DL/ ID cards and key security features as described in the response to th is requirement in 8-10. Task C-6 - Informational Brochure Design Document - Penn DOT Business Partners A final, print-ready document outlining the look and feel of the new Driver License/ID Cards (Gema lto Response] Gemalto has read and understood the requirement regard ing "Task C-5 Informat iona l Brochure Design Document - PennDOT Business Partners " and, if selected , w ill compl y w ith thi s requ irement and w ill deliver PennDOT w ith a print ready document out lin ing the new DL/ ID cards and key securit y features as described in the response to th is re quirement in 8-10. @ GEMALT0.C0M 167 0-2014-091 101 Pennsylvania DOT 109273 GULaw Privacy FR Task C - System Interface Design Specifications - Deliverables The System Interface Design Specifications is comprised of, but not limited to, individual plans defined above in Tasks Cl - CG. The System Interface Design Specifications must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10, Cost Submittal, of this RFP. Ta sk C Deliverable s Summary Task Sub-Task C-1 - Svstem Interface Desion S ecifications C-2 Technical Architecture Design and S ecifications C-3 - Database Design Specification TASKC C-4 - Card Design Document - All card types and Special IDs C-5 - Informational Brochure Design Document Law Enforcement C-6 - Informational Deliverable System Interface Design Specification s Brnchur e Design Document - PennDOT Business Partners (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task C-1 thru 6 System Interface Design Specificat ions" and, if selected , w ill comp ly with th is requirement and prov ide the required documentat ion during the Business and Technica l Requirements Workshops between PennDOT and Gema Ito @ GEMALT0.C0M 168 0-2014-091101 Pennsylvania DOT 109274 GULaw Privacy FR Task C - Testing Task C - Testing-Test Plan Any testing described in this RFP shall be inclusive of all systems, including those housed at both the Centers and in any PennDOT or selected Offeror operated facilities. The selected Offeror shall develop, implement, and maintain a Test Plan, subject to PennDOT approval, in accordance with industry standards to manage testing and defect tracking for the purpose of providing an efficient error correcting process to be used in system and user acceptance testing (UAT) The test plan must include all of the following: • Unit testing - on-going development testing (selected Offeror); • Integration testing - all the pieces work together (selected Offeror and Penn DOT); • Usability testing - user friendly, intuitive application (selected Offeror and Penn DOT); • Functional testing Penn DOT); • Performance testing - stress and load (selected Offeror); o - test The selected Offeror stress conditions. scenarios against requirements (selected Offeror and must also provide the mechanism to create load and • Testing of external interfaces - communication etc. (selected Offeror and PennDOT); and with other applications, • Continuous regression testing - on-going to determine Offeror and PennDOT). databases, impact of changes (selected The Test Plan must include a schedule for when software or other changes will be deployed to the test system and testers must receive documentation of the changes. PennDOT requires a minimum of 4 weeks' notice to schedule resources for UAT. (Gemalto Response] Gemalto has read and understood the requ irement regard ing " Task C - Testing Test Plan" and, if selected , w ill comp ly w ith th is requirement . The Test plan w ill be integrated into the overa ll project plan deta iled in Append ix 01. Task C - Testing-Test Scripts The selected Offeror must provide and execute a test script, subject to PennDOT approval, prior to the implementation of equipment, configuration changes and/or software to the UAT system. PennDOT conducts testing of new equipment and/or software in UAT before @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 169 109275 GULaw Privacy FR Task C - Testing-Test Scripts any such changes are installed in production. Full regression testing by the selected Offeror on the QA system will be expected before any change is deployed to the UAT system. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task C - Testing Test Scripts" and, if selected, will comply with thi s requirement . Task C - Testing- Documentation for Testing Updated user, and/or administrator acceptance phases of the project. manuals are to be supplied prior to the testing and Selected Offeror must supply written test cases for PennDOT resources to use during UAT. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task C - Testing Documentation for Testing" and, if selected, will comply w ith th is requirement. Task C - Testing- User Acceptance Testing All systems, including the Central Image Server, Facial Recognition System and PennDOT mainframe interface software, must be installed and functional in time for PennDOT to conduct acceptance testing. The User Acceptance Testing (UAT) must be planned and coordinated jointly by the selected Offeror and PennDOT project stakeholders. The selected Offeror must use standard defect tracking tools to track all feedback from testers. Final UAT shall end when the system has met the standard of performance for a period of 15 consecutive working days, as determined by the PennDOT Project Manager in conjunction with Penn DOT testers. A test image capture workstation allow for full end-to-end testing. must be provided, including all hardware and software to Prior to final sign-off of user acceptance testing, all stated requirements for functionality must be in place, tested, and working free of bugs or defects, and all system performance testing must be complete and must meet required performance measures. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task C - Testing User Acceptance Testing" and, if selected, will comply with th is requirement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 170 109276 GULaw Privacy FR Task C - Testing-Test Materials It is the selected Offeror's responsibility to provide test materials at no additional cost to PennDOT. This includes, but is not limited to, printer ribbons, laminate and card materials for testing the end-to-end process through both the Centers and Central Issuance facilities. (Gemalto Response] Gemalto has read and understood the requirement regard ing " Task C - Testing Test Mater ials" and, if selecte d, w ill comp ly w ith th is requ irement . Test ing mater ials for fu ll end-to-end test ing w ill be prov ided at no cost to Penn DOT. Task C - Testing- End-To End Integration Testing The test plan must be designed to exercise the entire system including all features and functions. This includes both Central Issuance as well as batch functions as PennDOT has a robust integration of batch processing with the various systems. Before acceptance of the system, PennDOT needs to verify that all the features and functions have been delivered and operate as set forth in the contract. Individual pieces can be tested as they become available, but complete end-to-end system testing is required prior to go live. Both the selected Offeror and PennDOT personnel will operate the system to assure its complete functionality and compatibility with the PennDOT Communications Network. (Gemalto Response] Gemalto has read and understood the requirement regard ing " Task C - Testing End-To-End Integrat ion Test ing" and , if selected , w ill comp ly w ith th is requ irement . Task C - Testing- Performance Testing Gemalto has read and understood the requirement regard ing "Task C - Testing Performance Test ing" and, if selected , w ill comp ly w ith th is requirement . @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 171 109277 GULaw Privacy FR Task C - Testing- Upgrades, Patches, Fixes or Other System Updates Ongoing changes to the selected Offeror's systems or hardware must be documented, tested and approved by Penn DOT. Any changes during the life of the contract fall under the testing criteria listed above. Implementation or release of selected Offeror changes to any of the selected Offeror's software or hardware must be scheduled and approved by PennDOT. A pilot process of up to four (4) sites may be used to ensure reliability of the upgrade, patch, fix, or other system updates. PennDOT will determine the need for deployment to pilot sites depending on the scope of the change. In the event of a problem with the upgrade, patch, fix, or other system updates, the selected Offeror shall have a plan to immediately restore the previous version or release in order to keep facilities in production. When updates are necessary, the selected Offeror must provide a daily report indicating all systems or hardware that: 1. Need to be updated; 2. Have been updated successfully; and 3. Remain to be updated. This daily report must be provided until all systems or hardware that need to be updated, have been updated. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task C - Testing Upgrades, Patches, Fixes, or Other System Updates" and, if selected , will comp ly w ith thi s requ irement. Task C - Testing- Deliverable The Testing Requirements must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. (Gemalto Response] Gemalto has read and understood the requ irement regard ing " Task C - Testing Deliverab le" and, if selected , will comp ly wi th th is requ irement . The Testing Requirements will be pro vided to PennDOT dur ing the Business and Technical Requirements Workshop s bet w een Gemalto and PennDOT. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 172 109278 GULaw Privacy FR Task E - Training Task E - Training - Image Capture, Duplicate Workstation Initial Training and Photo Upfront ::,e1ectea urreror shall provide thorough training sessions for approximately UniqueSource Products & Services staff on the full use of the Image Capture Workstation Photo License/ID issuance process. Selected Offeror shall provide thorough training sessions for approximately staff on the full use of the selected Offeror provided Duplicate Workstation software as well as any Photo Upfront hardware and 450 and 350 PennDOT hardware and software. The training shall integrate with the selected Offeror's implementation plan. The training for a Center's employees must occur no more than two (2) weeks prior to the installation of workstations at that Center. PennDOT shall provide classrooms for the initial training at a minimum of six (6) locations throughout the Commonwealth with the locations to be determined at a later date. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Tra ining Image Capture, Dupl icate Workstation , and Photo Upfront Init ial Train ing" and, if selected, w ill comply w ith th is requirement . Task E - Training - Facial Recognition Initial Training Selected Offeror shall provide comprehensive training on the operation of the Facial Recognition software to approximately 50 PennDOT and other agency users that will utilize the Facial Recognition software. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Facial Recognit ion Init ial Train ing" and, if selected, w ill comp ly w ith th is requ irement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 173 109279 GULaw Privacy FR Task E - Training - Image Capture, Duplicate Workstation and Photo Upfront Implementation Training The selected Offeror shall provide four(4) hours of training and support at each Driver License Center or Photo License Center the first day of operations following the installation of the workstations. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Image Capture, Duplicate Workstation, and Photo Upfront Imp lementat ion Tra ining" and, if selected, w ill comply w ith th is requ irement. Task E - Training - Training Plan Each proposal shall include a detailed training plan for the Image Capture and Duplicate Workstations and Facial Recognition System training to be conducted. Each training plan must include, at minimum: • A description of the training, including its duration; • The number of participants per session; • The qualifications • A detailed list of the tasks a photo technician must perform daily to issue a Photo License/ID card; and • The evaluation criteria of Photo Technicians, in order to identify competency in operating the workstation. of the training instructors; their level of (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Train ing Plan" and, if selected, w ill comply w ith th is requ irement. A high level train ing plan has been included in Appendix 03. Qualificat ions of the train ing lead are included in the Key Personnel Resumes in Append ix -02 . Task E - Training - Training Materials The Offeror shall include samples of the training materials to be used for all UniqueSource Products & Services/PennDOT trainings (Initial, Implementation, "Train the Trainer" and Facial Recognition) The Offeror may use representative training materials that have been created for other clients, provided that the Offeror agrees to customize the materials for PennDOT's needs upon award of the contract. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 174 109280 GULaw Privacy FR Task E - Training - Training Materials (Gemalto Response] Gemalto has read and under stood the requ irement regard ing "Task E - Tra ining Image Capture, Dupl icate Work station , and Photo Upfront Init ial Training" and, if selected , w ill comp ly w ith th is requirement . Sample train ing mater ials have been included in Append ix 10. Task E - Training - Workstation The selected Offeror shall provide , at a minimum, each Workstation provided. one (1) physical, operator's manual for The operator's manual shall include all information required for operating the Workstation, issuing a Photo License/ID card and troubleshooting the Workstation. Each operator's manual shall be provided in a 3-ring binder to allow for easy replacement or updating of its contents. The Offeror must include a sample operator's manual along with its response. The Offeror may use operations materials developed for other clients provided that the Offeror agrees to customize the materials for PennDOT's needs upon award of the contract. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Wor kstation " and, if selecte d, w ill comp ly w ith th is re quirement . A samp le user guides for Coesys Capture has been include d in Appendix 11. Task E - Training - Facial Recognition The selected Offeror shall provide a digital copy of the Facial Recognition System users' manual. The selected administrative Offeror shall manual. provide a digital copy of the Facial Recognition System The Offeror shall include a sample of its Facial Recognition System manuals with its response. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Facial Recognit ion" and, if selected , w ill comp ly w ith thi s requ irement. A samp le user guides for Coesys Review has been included in Appendix 12. @ GEMALT0.C0M 175 0-2014-091101 Pennsylvania DOT 109281 GULaw Privacy FR Task E - Training - Workstation Refresher Training If significant changes are made to any aspect of the workstation during the life of the contract, the selected Offeror shall provide "refresher" training sessions for UniqueSource Products & Services and PennDOT participants at no cost to PennDOT within a reasonable timeframe prior to implementation. The selected Offeror must also provide updates for the users manuals, both in digital and physical copy. (Gemalto Response] (Gemalto Response] Gemalto has read and under stood the requ irement regard ing "Task E - Training - Workstatio n Refresher Training" and, if selected , w ill comply wit h th is requ irement. Refresher tra ining and updated user manua ls will be prov ided to PennDOT for any significant changes made to the wo rkstat ion during the life of the contract . Task E - Training - Deliverable The Training Requirements must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task E - Training Deliverable" and, if selected , w ill comp ly wi th th is requ irement. All tra ining requ irement deliverables wil l be provided to PennDOT dur ing the Business and Techn ical Requirement Workshops between Gemalto and PennDOT. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 176 109282 GULaw Privacy FR Task F - Implementation Task F-1- Implementation - Implementation Plan The plan must include, but not be limited to the following: 1. Personnel responsible for each task; 2. Plan for conducting site surveys of PennDOT Driver license Centers; 3. A detailed project management plan outlining both delivery and installation of necessary equipment; 4. A plan which includes a phased-in implementation approach, by region, for the Center DL and Image Capture Workstations; 5. A plan outlining the installation and go-live of all Central Issuance components; 6. A plan for the installation and go-live of all Central Image Server components; 7. A plan for the installation and go-live of all Facial Recognition System components; and 8. A plan to address the migration of data to the new systems. This includes, but is not limited to, migrating all images to the new Central Image Server and enrolling all images in Facial Recognition templates in the Facial Recognition system. Response] has read requirement regard ing "Task Implementation - Imp lementation Plan" and, if selected, w ill comp ly w ith th is requ irement. Task F-2 - Implementation - Site Survey The selected Offeror must provide a detailed site survey and assessment prior to installation of equipment for each PennDOT Driver License Center and Photo license Center. Because each Driver license and Photo license Center may be slightly different, it is important that the selected Offeror get an accurate estimate as to how hardware can be installed at each location. The site survey report must include, at a minimum: 1. Facility floor plan; 2. Facility layout; 3. Appropriate measurements; 4. 5. 6. 7. 8. 9. 10. Photos; Electrical requirements; Cabling requirements; Recommendations for workflow changes; Security concerns; Number of DL and PL Workstations needed; and Other recommendations or concerns. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 177 109283 GULaw Privacy FR Task F-2 - Implementation - Site Survey (Gemalto Response] Gemalto has read and understood the requirement regard ing "Task F-2 Imp lementation - Site Survey" and , if selected, will comp ly with th is requirement . Site surveys will include, at a m inimum , the fo llow ing information : • Facility floor plan; • Facility layout ; • Appropr iate measurements ; • Photos ; • Electr ical requ irements; • Cabling requirements ; • Recommendat ions for workflow • Secur ity concerns; • Number of DL and PL Workstations • Other recommendations changes; needed; and or concerns. Task F-3 - Implementation - Installation The selected Offeror shall include a detailed check-off list to be used when installing the Workstations at the Centers as part of its proposal. The detailed check-off list shall be provided to Penn DOTfor review and approval prior to beginning the installations. At the time of implementation and installation, all equipment (i.e., software and hardware) must be fully functional with no issues. Installations must occur during non-business hours, unless otherwise directed by PennDOT. The selected Offeror shall be responsible to make all necessary adjustments, repairs and replacements to maintain the equipment in this condition for the life of the contract, at no additional cost to PennDOT. All equipment shall be installed in accordance with the specifications contained in the original equipment manufacturer's (OEM) installation instructions as well as be installed by professional personnel trained in the installation of such equipment. Workstation equipment shall be installed a minimum of 6" off the ground. The selected Offeror shall clearly and legibly mark all cables at both ends. Response] read and understood requ irement regard ing Imp lementation - Installation" and, if selected, will comp ly with this requ irement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 178 109284 GULaw Privacy FR Task F-4 - Implementation - Phase Rollout The successful selected Offeror must work with PennDOT to collaboratively develop an approved, phased, implementation approach for workstations and equipment at the approximately 97 Commonwealth Photo Centers Image Capture and Duplicate Workstations at the Driver License and Photo License Centers must be installed with a phased rollout approach. The rollout will be by region, with the Southeast region being the last region to go live. Refer to Appendix P, DL Center map (8-10). (Gemalto Response] Gemalto has read and understood the requirement regard ing "Task F-4 Implementation - Phase Rollout" and, if selected, will comply w ith th is requ irement. Gema Ito will work with PennDOT during the Business and Technica l Requirement Workshops to collaborat ively develop an approved, phased, imp lementat ion approach . Task F - Implementation - Deliverable The Implementation Requirements are comprised of, but not limited to, individual plans defined above in Tasks Fl - F4. The Implementation Requirements must be approved by PennDOT prior to commencing work on any other deliverables. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task F Implementation - Deliverab le" and, if selected , will comply with th is requ irement. All deliverables re lated to imp lementat ion w ill be deve loped with and provided to PennDOT for approval dur ing the Business and Techn ical Requirements Workshops . @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 179 109285 GULaw Privacy FR Task G - Maintenance and Support Task G-1 - Maintenance and Support - Remedial Maintenance During the contract period, the selected Offeror shall render maintenance to keep all selected Offeror-provided hardware and software in good working order, or restore it to such. The maintenance shall include preventative and remedial maintenance, installation of safety changes and installation of engineering changes based upon the specific needs of the individual item of hardware and/or software. The maintenance shall also include the repair, replacement or exchange of equipment when deemed necessary to restore it to good working order. For purposes of this RFP, hardware and/or software restored to good working condition shall be defined as hardware and/or software that shall perform all functions as prescribed in this RFP, the selected Offeror's proposal and the manufacturer's published specifications for such hardware and/or software as originally manufactured. The selected Offeror shall supply technical bulletins and updated user guides when applicable including providing updated software documentation upon delivery of updated software releases. At the discretion of PennDOT, the selected Offeror shall supply PennDOT with updates, improvements, enhancements or modifications to its software. The selected Offeror shall ensure that any updated software is compatible with the application software originally installed by the selected Offeror and accepted by PennDOT. The selected Offeror shall correct or replace the software and/or remedy any programming error which is attributable to the selected Offeror. The selected Offeror shall place in an escrow account, the Source Code for software as well as any updates, improvements, enhancements or modifications to the Source Code for software, on terms acceptable to PennDOT. The selected Offeror personnel. shall service the software in a professional manner with qualified The selected Offeror shall exert its best efforts to perform all fault isolation and problem determination, including both hardware and software problem diagnosis, attributed to the hardware and software covered under the contract. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task G-1 Ma intenance and Support - Remedial Maintenance " and , if selected, w ill comp ly w ith th is requ irement. @ GEMALT0.C0M 180 0-2014-091101 Pennsylvania DOT 109286 GULaw Privacy FR Task G-2 - Maintenance and Support - Hardware Maintenance Hardware maintenance shall include lubrication, adjustments and replacement of maintenance parts deemed necessary. Maintenance parts may or may not be manufactured by the original hardware manufacturer, may be altered by the selected Offerer to enhance maintainability, but must be acceptable to the original hardware manufacturer and new or certified as new. All maintenance parts shall be furnished and replaced at the location of the hardware by the selected Offerer. Any parts that are replaced shall become the property of the selected Offerer. In the event that a material, supply or equipment change/improvement causes the obsolescence of part or all of a workstation, the Central Image Server or Facial Recognition System, new item(s) shall be supplied to PennDOT at no additional charge. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task G-2 Ma intenance and Support Hardw are Ma intenance " and, if selected , w ill comp ly w ith th is requ irement Task G-3 - Maintenance and Support - Preventive Maintenance The selected Offerer shall be responsible for conducting preventive maintenance on any provided equipment. The preventive or scheduled maintenance shall be performed at intervals mutually agreeable to the selected Offeror and PennDOT. The Offeror shall specify in its proposal the type, frequency and duration of the preventive maintenance required for the Workstations, Central Image Server and Facial Recognition System. PennDOT shall specify when the preventive maintenance shall be performed, subject to change and agreeable to both parties. If applicable, the selected Offeror shall provide periodic cleaning of printers at the request of PennDOT, in conjunction with calls for remedial maintenance and/or in accordance with the preventive maintenance schedule. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task G-3 Ma intenance and Support - Preventive Maintenance " and, if selected , w ill comp ly w ith th is requirement Task G-4 - Maintenance and Support - Support During the life of the contract, a single toll-free telephone number shall be provided by the selected Offeror for Photo Technicians and PennDOT employees to contact the selected Offeror concerning service and supplies. Telephone support must be available during all Center operational hours. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 181 109287 GULaw Privacy FR Task G-4 - Maintenance and Support - Support Properly placed service calls shall receive a response from selected Offeror personnel knowledgeable of the reported issue within 15 minutes. During implementation and up to three (3) days after, the response to a service call must be within 10 minutes. If the problem cannot be resolved by "walking the operator through" the required procedure, the selected Offeror shall respond on site during working hours within two (2) hours of the initial call made by the Photo Technician or PennDOT employee. The selected Offeror unavailable. must contact PennDOT immediately if telephone support becomes (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task G-4 Ma intenance and Support - Support " and, if selected , w ill comp ly w ith th is requirement. Gemalto has include d a call center w ith a response time of under 15 m inute s w ith in th is offer in add it ion to a team of field techn icians strateg ically positions throughout Pennsylvania in order to comp ly w ith the t w o (2) hour on site re sponse w indo w. Task G - Maintenance and Support - Deliverables Maintenance and Support shall be provided as defined above in Tasks Gl - G4. Payment for this deliverable will be made as part of the "Cost Per Card" as described in Part 11-10,Cost Submittal, of this RFP. (Gemalto Response] Gemalto has read and understood the requ irement regarding Ma intenance and Support - Deliverab les" and, if selected , w ill comp ly w ith th is requirement @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT "Task G - 182 109288 GULaw Privacy FR Task H -Additional Work Task H-1 - Additional Work - Work Order Requirements 1. The selected Offeror will be required to perform work in Task H through the use of Work Orders negotiated by PennDOT's Project Manager and the selected Offeror throughout the term of the Contract. PennDOT's Project Manager will initiate a Work Order by following the steps outlined in the Work Order Requirements (see Appendix H). 2. Each Work Order shall be consecutively numbered and identify the name of each individual that will perform the work required to complete the scope of work outlined on the Work Order. The Blended Hourly Rate may be negotiated for each Work Order but will not exceed the maximum Blended Hourly Rate as provided on the selected Offeror's Appendix E - Cost Submittal, which will be incorporated and made part of this contract. 3. The work to be completed through a Work Order may be deliverable based and/or establish payment benchmarks. All Work Orders containing a Scope of Work that is accepted by PennDOT, shall contain specific deliverable(s). Work Orders shall clearly define each deliverable and payment terms to be made upon completion and acceptance by Penn DOT for the defined deliverable (refer to Part IV-3 - Requirements for invoice information). Benchmarks will be identified during negotiation when a single Work Order provides for more than one (1) clearly defined benchmark. Each identified benchmark within a Work Order will be considered a separate deliverable with payment made upon completion and acceptance by PennDOT of the identified benchmark. 4. A Work Order Authorization Page (see Appendix I for sample) is required to be signed by the selected Offeror and PennDOT's Project Manager. 5. Upon acceptance by the selected Offeror and PennDOT's Project Manager, a fully executed Purchase Order will be issued as the Notice to Proceed. a. NO WORK CAN BE AUTHORIZED BEFOREA FULLYEXECUTEDPURCHASEORDER IS ISSUEDBY PENNDOT AND RECEIVEDBY THE SELECTEDOFFEROR. 6. The cost of each Work Order will draw down from the maximum contract amount. 7. Work specified in Work Orders may be done concurrently. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task H-1 Add itiona l Work - Work Order Requirements" and, if selected , will comp ly w ith th is requ irement. @ GEMALT0.C0M 183 0-2014-091101 Pennsylvania DOT 109289 GULaw Privacy FR Task H-2 - Reinstalling or Relocating Duplicate Image Workstation The following five (5) items are considered additional work which may be requested at any time by PennDOT. The selected Offeror will be responsible for providing all necessary items to complete any one (1) of the five (5) items. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task H-2 Reinstalling or Relocating Duplicate Image Workstations " and , if selected , w ill comp ly w ith th is requ irement. Gem alto w ill pro vide costs for the fo llow ing item: • Rein sta lling or Relocat ing Dup licate Image Workstat ion Pricing for Reinsta ll ing or Relocat ing a Dup licate Image Work stat ion is pro vided in the Cost Submitta l. Task H-3 - Reinstalling or Relocating Standard Image Workstation The following five (5) items are considered additional work which may be requested at any time by PennDOT. The selected Offeror will be responsible for providing all necessary items to complete any one (1) of the five (5) items. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gemalto has read and understoo d the requ irement regarding "Task H-3 Reinstalling or Relocating Standard Image Work stat ions" and, if selected , w ill comp ly w ith th is requ irement. Gema Ito w ill pro vide costs for the fo llow ing item: • Rein sta ll ing or Relocat ing Standard Image Workstat ion Pricing for Reinsta lling or Relocat ing a Standard Image Workstat ion is pro vided in the Cost Submitta l. Task H-4 - Adding Standard Image Capture Workstation with Hardware and Software The following five (5) items are considered additional work which may be requested at any time by PennDOT. The selected Offeror will be responsible for providing all necessary items to complete any one (1) of the five (5) items. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gema lto has read and under stood the requ irement regard ing "Task H-4 - Add ing Standard Image Capture Workstat ion w ith Hardw are and Soft w are" and, if selected, w ill comp ly w ith @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 184 109290 GULaw Privacy FR Task H-4 - Adding Standard Image Capture Workstation with Hardware and Software th is requ irement. Gemalto w ill prov ide costs for the follo w ing item : • Add ing Standard Image Capture Workstat ion w ith Hard w are and Soft w are Pricing for Adding a Standar d Image Workstat ion w ith Hardw are and Softw are is prov ided in the Cost Submitta l. Task H-5 - Adding Duplicate Image Workstation with Hardware and Software The following five (5) items are considered additional work which may be requested at any time by PennDOT. The selected Offeror will be responsible for providing all necessary items to complete any one (1) of the five (5) items. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gemalto has read and understood the requ irement regard ing "Task H-5 - Adding Dupl icate Image Capture Workstat ion w ith Hardw are and Soft w are" and, if selected , w ill comp ly w ith th is requ irement. Gemalto w ill pro vide costs for the fo llow ing item : • Add ing Dup licate Image Capture Workstat ion w ith Hard w are and Soft w are Pricing for Add ing a Dupl icate Image Workstation w ith Hardw are and Softw are is provided in the Cost Submitta l. Task H-6 - Additional Biometric Identifier Licenses The following five (5) items are considered additional work which may be requested at any time by PennDOT. The selected Offeror will be responsible for providing all necessary items to complete any one (1) of the five (5) items. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task H6 Add itiona l Biometric Ident ifier Licenses" and, if selected, w ill comp ly w ith th is requ irement. Gemalto w ill prov ide costs for the fo llow ing item : • Add it iona l Biometric Identifier Licenses Pricing for Addit iona l Biometr ic Identifier Licenses is provided in the Cost Submittal. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 185 109291 GULaw Privacy FR Task H-7 -Additional Users As described in Task B-7, Facial Recognition System, additional users (i.e., PSP) may require access to the system. Providing access to users outside of PennDOT may be requested by PennDOT at any time throughout the life of the contract. The selected Offeror will be responsible for providing all necessary items to provide the access. Offerors costs shall be all inclusive of costs necessary to provide services for each item as shown on the Appendix E, Cost Submittal. Refer to Section 11-10,Cost Submittal for additional information. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task H7 Add itiona l Users" and, if selected, will comp ly with th is requirement. Gemalto will provide costs for the fo llow ing item : • Add it iona l Users Pricing for Addit iona l Users is prov ided in the Cost Submitta l. Task I - End of Contract Responsibilities Task I - End of Contract Responsibilities At the end of this contract, in the event that the Digital Driver License Systems services are to be provided by a new contractor (i.e., not the incumbent for this contract), a ramp-down approach (Transition) will be required from the Selected Offeror to ensure a seamless transition with no interruption of services. The Selected Offeror shall be fully prepared to work with the new contractor at the end of the current contract to ensure a seamless transition into the new contract. The Selected Offeror shall meet with appropriate PennDOT personnel in a timeframe as directed by PennDOT to gain a thorough understanding of how operations must be transitioned to a new contractor, and to develop a transition plan and associated cost breakdown, to be submitted to PennDOT for review and approval. In the event that changes to the Ramp-Down Plan are identified as a result of the meeting, the Selected Offeror must revise and resubmit the Ramp-Down Plan for final review and approval by PennDOT. The Selected Offeror must maintain open communications with PennDOT on any issue involved with meeting the transition requirements and the full implementation date. Penn DOT will provide a transition period that may instruct the Selected Offeror to: • Begin a transition in service at any time during the contract term upon written notification from PennDOT in order to provide for the smooth transfer of service; • Provide hard and/or soft copies of any data or materials owned by PennDOT, which @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 186 109292 GULaw Privacy FR Task I - End of Contract Responsibilities may be in the possession of the Selected Offeror. This includes, but is not limited to, any systems documentation, product documentation, process flows, and business processes. Copies of this data or materials are to be provided to PennDOT within the first 30 days of the Ramp-Down period; • Participation in testing and troubleshooting to ensure transition of all images and any other data from the Selected Offeror to the new contractor; o Remove all systems hardware from PennDOT Driver License Centers and Photo license Centers on specific dates specified by PennDOT and agreed upon by the Selected Offeror; o Upon request from PennDOT, the Selected Offeror shall supply a complete list of all hardware and other equipment used for PennDOT's Digital Driver License System/Program and a brief description of how each piece of equipment was used and whether any data stored on the equipment is sensitive. This includes equipment located at PennDOT sites or the Selected Offeror's sites. Upon termination of the contract, the Selected Offeror is responsible for the wiping, degaussing, and disposal of equipment as per Commonwealth policy, "ITB-SYM009-Commonwealth of Pennsylvania Data Cleansing Policy." Furthermore, all equipment that is replaced and removed as part of RampDown will be "cleaned" per the Commonwealth standards as required by the following prior to destruction: • http://www.portal.state.pa.us/porta1/server.ptfgateway/PTARGS_0_2_155884_ 416_ 0_43 /http%3 B/ entportlets.state. pa. us/lTPRetrieve/Retrieve.aspx ?FileNa me=itp _ sym 009.pdf&DOCTYPE=pdf • PennDOT may require the Selected Offeror to validate proper data cleansing and disposal of equipment; and, o Provide disposal service or transfer plan for all remaining product stock, used and unused, for the production of Pennsylvania drivers' licenses and photo identification cards. During this transition, the selected Offeror's volume of Photo License/ID Cards will decrease. As part of transition, and at a timeframe as directed by PennDOT, the selected Offeror shall provide for the transfer of all image files to an image database of PennDOT's choosing. This includes providing any custom software required for reading the image files. The image files shall be easily converted to standard formats, of PennDOT's choosing, such as PICT, TIFF, etc. The selected Offeror shall disclose the Data Model used and complete record format of the image database for use by the Commonwealth for any purpose the Commonwealth deems necessary. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task I - End of Contract Responsib ilitie s" and, if selecte d, w ill compl y with th is requ irement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 187 109293 GULaw Privacy FR IV-5 - Reports and Project Control Task Plan A work plan for each task that identifies the work elements of each task, the resources assigned to the task, and the time allotted to each element and the deliverable items to be produced. Where appropriate, a PERT or GANTT chart display should be used to show project, task, and time relationship. (Gemalto Response] Gemalto has read and understood the requirement regarding "Task Plan" and, if selected, will comply with this requirement . A work plan for each deliverable including allotted t ime w ill be provided to PennDOT.A PERTor GANTI chart w ill be used to show the relationships between the project, task, and required time. Gemalto w ill provide thi s during the Creation of the Business and Technical Requirements in the Planning Phaseof the proj ect. Status Report - Weekly Status Report The selected Offeror must create and provide a weekly status report. This should include accomplishments over the last reporting period, upcoming activities, current issues and risks and overall project status. For each issue or risk, the selected Offeror must identify the party responsible for mitigating that risk and the mitigation strategy to deal with it as well as the anticipated time to solve the risk/issue. (Gemalto Response] Gemalto has read and understood the requirement regarding "Status Report Weekly Status Report" and, if selected, w ill comply w ith thi s requirement. Gemalto will provide weekly status reports identifying upcoming activit ies, current issues, and risks (including the responsible party and mitigat ion strategy) for the overall project. As described in the overall Project Plan, Gemalto will provide PennDOT w ith a communication plan to clearly define the requirements for , among other th ings, Weekly Status Reports. Status Report - Monthly Status Report The Monthly Status Report must outline the status of the project and include accomplishments, upcoming activities, current issues and risks and overall project status, like the Weekly Status Report, but in a summary fashion for the month. It must also tie these activities back to the Work Breakdown Structure to give a sense of overall project health and status. The selected Offeror may need to present this report at PennDOT Project Governance Committee meetings. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 188 109294 GULaw Privacy FR Status Report- Monthly Status Report (Gemalto Response] Gemalto has read and understood the requirement regar ding " Status Report Month ly Status Report " and, if selected , w ill comp ly w ith th is requ irement. Gemalto w ill prov ide monthl y status report s identifying upcom ing acti vit ies, current issues, and ri sks (including the respons ible part y and mit igation strategy ) for the overa ll project like the Week ly Status Reports but in a summa ry format for each month. As described in the overal l Project Plan, Gemalto w ill pro vide PennDOT with a commun icat ion plan to clearly define the requirements for , among other th ings, Month ly Status Reports. Problem Identification Report An "as required" report, identifying problem areas. The report should describe the problem and its impact on the overall project and on each affected task. It should list possible courses of action with advantages and disadvantages of each, and include Offeror recommendations with supporting rationale. (Gemalto Response] Gemalto has read and understood the requ irement regarding " Problem Identification " and, if selected , will comp ly w ith th is requ irement. As described in the overa ll Project Plan, Gemalto w ill pro vide PennDOT with a comm unicat ion plan to clearl y define the requ irements for , among other things , Problem Identification Report s. In addit ion, Gemalto w ill pro vide PennDOT with a risk management plan to clear ly define the process for identify ing issues and appropriate ly addre ssing them. Final Report The selected Offeror shall draft copies of the final report to permit PennDOT's Project Manager to satisfy itself as to the report's completeness and factual accuracy. PennDOT's Project Manager will provide a format for the final report. The format should specify the content of the final report in detail comparable to the following: 1. Abstract or summarize the result of the study or service in terminology that will be meaningful to management and others generally familiar with the subject areas. 2. Describe data collection and analytical and other techniques used during the study. 3. Summarize findings, conclusions and recommendations developed in each task. 4. Include all supporting documentation; e.g., flow-charts, forms, questionnaires, etc. 5. Recommend a time-phased work plan for implementing the recommendations. (Gemalto Response] Gemalto has read and understoo d the requ irement regard ing the " Final Report " and, if selected , w ill comp ly w ith th is requ irement. @ GEMALT0.C0M 0-2014-091101 Pennsylvania DOT 189 109295 GULaw Privacy FR This page intentionally left blank. @ GEMALTO.COM O-2014-091101 Pennsylvania DOT 190 109296 GULaw Privacy FR ABOUT GEMALTO. Gemalto (Euronext NL0000400653 GTO ) is the wor ld leader in digita l secur ity w ith 2013 annual revenues of $3.2 billion and more than 12,000 employees operat ing out of 85 offices and 13 R&D centers , located in 43 countr ies. We are at the heart of the rapidly evo lving digital society . Billions of people worldwide increasingly want the freedom to commun icate, trave l, shop , bank, entertain and work - anytime, everywhere - in ways that are enjoyable and safe. Gema lto delivers on their expand ing needs for persona l mobile services, payme nt security, authent icated cloud access, identity and privacy protect ion, eHealthcare and eGovernment effic iency, conven ient ticketing and dependab le machine -to-mach ine (M2M) app lications. Gema lto develops secure embedded softw are and secure products w hich we design and persona lize. Our platforms and services manage these secure products, the confidentia l data they conta in and the trusted end -user services they enab le. Our innovations enab le our clients to offer trusted and convenient digita l services to billions of individua ls. For more informat ion, please visit http://www. gema lto.com/govt , www .facebook.com /gema lto, or Follow us on Twitter@Gema lto_ NA @ GEMALTO.COM 0-2014-091101 Pennsylvania DOT 191 109297 GULaw Privacy FR