Attachment_3_-_Biometric_Reader_Verification_Process__70Z02318RMMN25100.pdf

Attachment 3 – Biometric Reader Verification Process

70Z02318RMMN25100

Verification Process. Proposed Reader must pass the following verification testing procedure for all Modes of Operation. Tests and expected results are as follows:

1. BADAUTH – Bad Authentication Certificate Test

2. CANCELED – Canceled Card List Test

3. EXPIRED – Expired Card Test

4. BADSIGN – Bad Signature Authority Test

5. UNTRUSTED – Untrusted Certificate Test

6. INSPECTOR – Full Validation Test (inspector’s Transportation Workers

Identification Credentials (TWIC))

Biometric match will be conducted with the inspector’s personal TWIC.

The reader shall have the ability to read TWIC, Common Access Cards (CAC), and Seafarer

Identification Documents (SID). The reader shall yield the expected result outlined in the table, the tester/user must be able to confirm the results of the read transaction on the reader display and the reader shall properly operate in Modes 1 – 4. The following table breaks down each

TWIC reader mode and expected result for each test.

Mode 1 Mode 2 Mode 3 Mode 4

Expected Result Expected Result Expected Result Expected Result

BADAUTH P F P F

CANCELED F F F F

EXPIRED F F F F

BADSIGN F E F E

UNTRUSTED F F F F

INSPECTOR P P P P

P = Passed, TWIC reader should indicate the test card is valid.

F = Failed, TWIC reader should indicate the test card is invalid and display failure reason.

E: Either, Depends if CHUID is read.

TWIC readers shall check all certificates on the TWIC, regardless of the selected reader mode of operation, and shall identify the tested failure on the reader display.

Continued on page 2.

Attachment 3 – Biometric Reader Verification Process

70Z02318RMMN25100

The following table applies criteria from Attachments 1 and 2 to the verification test.

Verification Question Expected Result

Does the reader have contact and contactless read capabilities? [SOW 2.1.1 g.] Yes

Does the reader log capture the complete Federal Agency

Smart Credential – Number (FASC-N), Card Holder

Unique Identifier (CHUID), time stamp, transaction result

(pass, fail, etc.) and a transaction summary that identifies or details the challenges and results of the read transaction? [SOW 2.1.5] Yes

Does the reader log capture the name of the TWIC holder? [SOW 2.1.5] Yes

Is the transaction summary reviewable on the reader display and does it identify the pass/fail results of each read transaction? [SOW 2.1.1 h] Yes

Does the reader provide on screen option to select different modes operations without having to change the reader configurations? [SOW 2.1.1 h] Yes

Does the reader automatically identify various credentials without making manual changes to reader settings (i.e., reader will identify a CAC without having to change mode)? [SOW 2.1.2 e] Yes

Does the reader retrieve and store the digital photo from the credential? [SOW 2.1.5] Yes