StateIssuedGovernmentIDDataVerificationRFI_Release.docx

General Services Administration Technology Transformation Service Office of Acquisition 1800 F Street NW Washington, D.C. 20006

Request for Information (RFI) State Government Issued ID Data Verification Services

The General Services Administration (GSA), Technology Transformation Service (TTS) is issuing this RFI to exchange information with industry related to its efforts to provide government agencies and private citizens with a shared authentication platform.

This RFI is for market research, information and planning purposes only, and does not constitute a solicitation for bids, proposals or quotations and is not to be construed as a commitment by the Government to issue a request for proposal/quote or award a contract as a result of this RFI. This announcement is NOT a Request for Proposal (RFP) or a Request for Quote (RFQ). The Government will NOT reimburse respondents for any cost associated with information submitted in response to this request. The purpose of obtaining information is to improve the understanding of Government requirements and industry capabilities.

Respondents to this RFI may be requested to provide additional information/details based on their initial submittals. The Government reserves the right to select, one, some, or none of the submissions for further information. Contractors who submit information in response to this RFI do so with the understanding that U.S. Government personnel, as well as their supporting contractors, may review their materials and or data. The Government shall not be liable for or suffer any consequential damages for any improperly identified confidential/proprietary information.

General Submission Instructions Your submission shall conform to all aspects of this RFI. Any interested vendor must submit a detailed capability statement and return it via email to kirsten.green@gsa.gov no later than Noon Eastern Time on October 14, 2016.

The following introductory information is required on the first page:

1. RFI Title

2. Company name, address

3. DUNS number, CAGE number

4. GSA contract number and appropriate GSA SIN

5. Name, telephone number & email address of main point-of-contact

6. Date of submission

The following questions must be answered in your submission. Page numbers are stated after each question. Any questions should be emailed to kirsten.green@gsa.gov.

BACKGROUND

GSA’s TTS is designing and developing a shared authentication platform to answer and meet recent federal directives and action plans released by the Executive Office of the President to provide citizens with secure singular digital accounts that can be used government-wide to access participating federal agencies. Congress saw the need for citizens to securely access federal agencies and passed the Cybersecurity Act (CISA) in October, 2015 to strengthen the Nation’s cybersecurity. The Executive Office of the President defined actions federal agencies can follow to meet CISA in the Cybersecurity National Action Plan (CNAP) in February, 2016.

Armed with knowledge gained from an initial operational capability and with valuable government, industry, and customer input, GSA TTS will operationalize a shared authentication platform[3] that provides citizens with government-provided digital identities established at NIST LOA3 (AAL and IAL level 2) in 800-63-2 with remote proofing, in a simple, elegant manner from a technical environment that is built on experiences, processes, and infrastructure that will use the latest available technology to safeguard all user data.

To provide an optimal user experience, GSA TTS seeks to obtain information an online service for the ability to verify physical driver's licenses (and/or other domestic U.S. state, territory, other jurisdiction- government issued forms of identification) with the issuing state or other source issuer.

OBJECTIVE

The objective of this RFI is to learn the technical capabilities, pricing methodology, industry readiness and to partner with the private sector in order to utilize their innovative capabilities in the following service for the shared authentication platform:

State Issued Government ID Data Verification: Comparison of state government (including district, territory, commonwealth, tribal and other non-federal equivalent) issued identification including but not limited to driver’s license information, including the data from the driver’s license or identification card document, with data maintained by the source issuer. The service returns match/no-match indicators for the data elements being verified to the service consumer but does not return actual data.

INFORMATION REQUESTED

Please provide information as it pertains to your identity service product(s):

State Government Issued ID Data Verification

1. For what types of state government issued identification documents do you offer data verification. (Max ¼ page)

2. What data sources does your data verification service leverage and how do you ensure its data quality? (Max ¼ page)

3. Do you have relationships with the data sources directly or do you obtain the data through a third party? Please describe how you maintain these relationships. (Max ¼ page)

4. Are there any regulations or other restrictions you follow in applying data verification services? (Max ¼ page)

5. What percentage of the U.S population does your service cover? Please provide details of the following (Max ¼ page):

a. Number of states/territories/jurisdictions covered

b. Percentage of users covered within jurisdictions (by demographics of age, income, geographic)

c. Percentage of the actual U.S population those states/territories/jurisdictions cover

d. Plans and timeline of expanding metrics in a, b, and c above

6. For how many records can you perform data verification concurrently? What is your scalability? (Max ¼ page)

7. What state/jurisdiction-issued identification data you do you verify specifically? For example, are there certain sets of data that you do not recommend or that you specifically recommend be used for verification. (Max ¼ page)

8. How do you return the results of data verification, including failures? For example, do you provide pass/fail (yes/no) answers and do you return the actual data? (Max ¼ page)

9. Do you currently or plan in the future to provide driver’s license data verification through sensor technology such as biometrics, or driver license authenticity using security markers as an example? (Max ¼ page)

10. How is your pricing structured? i.e., price per transaction, CLIN, Time and Materials, Firm Fixed Price (Max ¼ page)

Contracting Information

1. Do you currently hold a GSA Schedule Contract? (Max ¼ page)

a. If yes, please provide the contract number.

b. If no, do you work with a partner who is a vendor on a government contract vehicle? Provide the Name and Contract Number.

2. If you have provided these types of services, what North American Industry Classification System (NAICS) code(s) were used?

Other

1. What other services would you offer to meet our business issues, as you understand them? How would you bring value? (Max ¼ page) image01.png