Hardware integration consultancy services

Tender description

Network Rail intends to carry out a procurement exercise to establish a contract for the delivery of a national online key management system. Your formal expression of Interest will be indicated when a PQQ is completed and issued for Network Rails consideration. The National Online Key Management System (OKMS) will provide the centralised key administration for all ETCS entities operating on the UK railway, using both online and offline distribution methods. Cryptographic keys are required by each European Train Control System (ETCS) Radio Block Centre (RBC) and each ETCS On Board Unit (OBU) to enable them to communicate over the GSM-R network securely. The supplier will be required to provide and implement an efficient and intuitive National Online Key Management System (OKMS) which will generate, store, manage, distribute, archive and delete software cryptographic keys for the UK railway. The system will also support offline key distribution by allowing encrypted keys to be sent. Network Rail intends to carry out a procurement exercise to establish a contract for the delivery of a national online key management system. Your formal expression of Interest will be indicated when a PQQ is completed and issued for Network Rails consideration. The national online key management system (OKMS) will provide the centralised key administration for all ETCS entities operating on the UK railway, using both online and offline distribution methods. Cryptographic keys are required by each European Train Control System (ETCS) Radio Block Centre (RBC) and each ETCS On Board Unit (OBU) to enable them to communicate over the GSM-R network securely. The supplier will be required to provide and implement an efficient and intuitive National Online Key Management System (OKMS) which will generate, store, manage, distribute, archive and delete software cryptographic keys for the UK railway. The system will also support offline key distribution by allowing encrypted keys to be sent via a variety of methods including physical media, email and remote download. The OKMS is broken down into 3 elements to be delivered over two phases. The 3 elements are: 1) Key Management Centre (KMC) Provide the software and hardware for a National ETCS Key Management Centre that is compliant with the CCS TSI subsets relevant to Key Management (e.g. SUBSET-137, SUBSET-114, SUBSET-038 etc), including both online and offline distribution. 2) Public Key Infrastructure (PKI) Provide public key infrastructure to enable online distribution of authentication keys (KMACs) via GPRS and FTNx retain access to supplier of PKI element so that cyber threats, software updates etc are well managed. Provide the opportunity to use the PKI system for other functionality 3) Online Key Remote Access (OK-RA) Provide a secure web-based user interface for remote users to perform key management tasks support and licencing for a 15-year period post implementation is also required. Interested parties are advised that Network Rail do not currently have budget approval for this scope of work, this procurement process will generate a cost which will be presented to the sponsor to secure Investment Panel approval before any contract can be awarded.