Corrigendum to RFP - National Crime Records Bureau

Crime & Criminals Tracking Network and Systems ProjectHaryana Police2 RFP VOLUME IA. 5.4. Scope of Services - During Implementation Phase5.4.2.3: Preparation of Solution Design, Technical Architecture1. Point (b), Single Sign On,Single-Sign On – The Solution should enable single-sign-on so that any user once authenticatedand authorized by system is not required to be re-authorized for completing any of the services inthe same session. For employees of the Haryana Police, the browser based application accessedon the intranet, through single-sign-on mechanism, will provide access to all the core services(based on their roles and responsibilities), Help module, Basic and advanced Reporting etc.Similarly, for external users (Citizens, Hotels, Cyber Cafes, Hospitals, Jails, TransportDepartment etc), based on their profile and registration, the system shall enable single-sign onfacility to apply for various services, make payments, submit queries /complaints and checkstatus of their applications.Following details added to the clauseEMS should provide Single Sign-On and Web access management across all the modules ofCCTNS solution through a single console. It should work across all modules and should not beconfined to a single module and be open to integrate with new modules as and when required.Proposed solution should integrate with existing server access control solution at SDC to provideholistic access management across monitored servers as wells as applications.2. Point (c), Support for PKI based Authentication and Authorization,The solution shall support PKI based Authentication and Authorization, in accordance with IT Act2000, using the Digital Certificates issued by the Registration Authorities (RA). In particular, PKIbased authentication and authorization shall be implemented by the selected Bidder forofficials/employees involved in processing key G2B and G2C services, including issuance ofnotices, receipts and approvals.Following details added to the clauseTo ensure integrity and confidentiality, the data collected (both online and offline) at the policelocation should be digitally signed and encrypted before it is sent from one location to other /central data center. Hardware Security module should be integrated with applications at DataCenter in high availability mode and should be able to endure the security and integrity of thesigning key, key management and multifactor authentication to access the key and mostGovernment of Haryana Corrigendum to RFP for Selection of System Integrator Page 4 of 61