Attachment 01 - HE Rail System FRD_2025-10-14 (1).docx

U.S. Department of Homeland Security U.S. Customs and Border Protection

Attachment 01 – Functional Requirements Document

For:

U.S. CUSTOMS AND BORDER PROTECTION

LARGE-SCALE FIXED

NON-INTRUSIVE INSPECTION SYSTEMS

High-Energy Rail Inspection Systems Block 2

PREPARED BY:

OFFICE OF FIELD OPERATIONS

INNOVATION AND STRATEGY DIRECTORATE

NON-INTRUSIVE INSPECTION DIVISION

October 14, 2025 Version 0.3

Warning: This document is for official use only. It contains information that may be exempt from public release under the freedom of information action (5 united states code 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with the department of homeland security policy relating to for official use only information and is not to be released to the public or other personnel who do have a valid “need-to-know” without prior approval of an authorized department of homeland security official.

Program Signature Page This document is an authoritative source for the content therein. The approval authorities sign this page.

Submitted by:

Kelly E. Woods Date Lead Systems Engineer Innovation and Strategy Directorate Office of Field Operations

Endorsed by:

Program Acquisition Executive Innovation and Strategy Directorate

Approved by:

(A) Director Non-Intrusive Inspection Division

Revision Summary

The following Table 1: Revision Table indicates the changes made to the document since the last release.

Table 1 Revision Table

Table of Contents

Table of Tables

70B03C21Q00000150

Large-Scale Fixed Systems

ATTACHMENT 1 – HIGH ENERGY RAIL FUNCTIONAL REQUIREMENTS DOCUMENT

Introduction United States Customs and Border Protection (CBP) Office of Field Operations (OFO) facilitates legitimate trade and travel into and out of the U.S. CBP Officers must screen all incoming persons and inspect vehicles, conveyances, and cargo to detect and resolve potential threats. CBP Officers stand ready to interdict terrorists and their weapons, illicit narcotics, and numerous forms of contraband smuggled into the United States. CBP Officers also detect and intercept foreign nationals illegally attempting entry into the United States. These foreign nationals are often persons deemed inadmissible by the Immigration and Nationality Act (INA) and wanted by domestic and/or international law enforcement. In addition, CBP Officers safeguard United States agriculture from harmful animal, fruit and vegetable diseases, and foreign invasive pest species not currently in the United States.

As part of the CBP layered enforcement strategy, rail cargo is examined by law enforcement personnel via Non-Intrusive Inspection (NII) systems for contraband, illegal narcotics, weapons of mass destruction, and instruments of terror. CBP has operated various generations of rail NII technology since 1999. Advancements in technology and evolution of mission needs have driven CBP to pursue the most advanced imaging technology that is both highly effective and efficient with increasing levels of automation. CBP’s long-term goal is to improve the effectiveness and efficiency of NII operations by increasing system performance, expanding the use of automated tools and processes, and integrating multiple sensors, technologies, and data platforms. CBP intends to replace existing rail NII systems with High-Energy (HE) Rail Systems or add them to new locations.

The HE Rail System is a self-contained inspection system that provides high-quality, penetrative radiographic images, optional radiation detection, visual imaging and other data for railcars, cargo and associated intermodal containers. The HE Rail System will allow trained CBP law enforcement personnel to inspect rail cargo on moving train or train segments for the presence of potentially illicit goods such as contraband, narcotics, material associated with Weapons of Mass Destruction or Effect, and undeclared passengers or stowaways.

This Functional Requirements Document (FRD) details HE Rail use cases and associated requirements for CBP Officers inspecting cargo trains arriving or exiting the United States at and between Ports of Entry (POE) locations including but not limited to Land POE on the U.S.-Mexico border or U.S.-Canada border and a Sea POE for railcars transported via ship or ferry on trains built at the Sea POE or arriving under the CBP Advanced Qualified Unlading Approval (AQUA) Lane program. Different HE Rail configurations and concepts of operation (CONOPS) are documented throughout. The functional and performance requirements were derived from input from CBP officers and stakeholder; lessons learned from previous rail inspections; prior market research; analysis; and evaluation of various commercial rail inspection system offerings via technology demonstrations.

This HE Rail FRD is intended to be issued as Attachment 01 of a larger Statement of Work (SOW) and contracting package. Throughout this document are reference to other attachments to the overall SOW.

Mission Needs Statement (MNS) Gaps The NII gaps from the NII Mission Needs Statement (MNS)[footnoteRef:2] to be addressed by the integrated HE Rail System are listed in Table 2. [2: CBP, “Mission Needs Statement for Non-Intrusive Inspection Program”, signed 14 August 2018.]

Table 2 NII Mission Needs Statement Gaps

Image Scanning Capability / Capacity

New Technology and CONOP

Obsolete NII Equipment

Biological, and Explosive Detection Equipment

System Assumptions

· Commercially-available off the shelf (COTS) or modified COTS systems are available to meet these requirements.

· Systems will be installed on private property (railroad or seaport authority) under a lease agreement between the private owner and CBP. Each contractor shall obtain a separate right of entry or similar agreement with the private party for installation, construction and support efforts as described in the contract with CBP.

· CBP Network will be provided by CBP for any movement of data off premise.

· CBP will provide any networked area surveillance cameras (ASC) incorporated into the System site design.

· In cases where the ASC is air-gapped, the System contractor shall provide the CBP-approved ASC equipment and installation.

· The integrated Radiation Detection subsystem will provide equivalent capability (or better) to existing CBP standalone rail RDE.

· System shall fit into the nominal footprint of the legacy rail NII systems.

· Control Center construction requirements (if needed) will be provided through SOW.

· Remote Control Center will duplicate the functions inside a Control Center.

· The system will not be used for the inspection of passenger trains.

· System shall be hosted locally on premises on a network segregated from the CBP network for POEs with insufficient bandwidth.

System Constraints

· Systems found to be noncompliant with the following DHS and CBP Directives shall not be considered:

· Latest approved version of CBP Directive 5290-018 Ionizing Radiation Safety Program

· Latest approved version of CBP Directive 3340-036 NII Technology Program

· Latest approved version of CBP Directive 5290-015 Radiation Detection Program Directive

· DHS Security Policy: DHS Security 4300A Sensitive System Handbook Latest version (Version 13.3, February 13, 2023) and CBP Information Systems Security Policies and Procedures Handbook latest version (HB 1400-05D, Version 8.0, September 13, 2024)

· Technology Maturity: To the greatest extent possible, only systems with a Technical Readiness Level (TRL) of 8 or greater will be considered.

· Systems found to be noncompliant with DHS/CBP policy, privacy laws, and regulations will not be considered.

· Systems found to be noncompliant with railroad specific requirements including overhead or under track installation requirements will not be considered.

HE Rail Configurations Rail NII is generally installed to inspect all trains or railcar segments for inbound (cargo entering the U.S.) and can support all outbound trains or railcar segments (cargo departing the U.S.). Rail NII is not intended to emit energy to image occupied railcars or locomotives. In general, the first locomotive is not imaged (other functions like photographic images and radiation detection are done) and any other locomotive or railcar that the train operator designates prior to arrival.

To support CBP operations, the train may stop and start during a scan due to operational factors that are under CBP’s control, under the railroad’s control, or due to local circumstances (stop for local traffic, stop for passenger trains on same track, unplanned stopped for accidents and local emergency services). There will be instances when CBP needs to direct the train to stop, back up, and resume to rescan a subset of railcars. CBP and railroad operations generally do not require rescanning an entire train.

Baseline HE Rail Configuration The baseline HE Rail configuration shall be a standalone system not integrated with the CBP network. This configuration shall employ a booth adjacent to the HE Rail System acting as the control center.

Alternate Baseline HE Rail Configuration The alternative HE Rail configuration shall be integrated with the CBP network. Specifically, the HE Rail Control Center and NII Rail Control Center must be connected to the CBP network to allow remote operation. These control centers may be at a remote/off-site location controlling multiple HE Rail Systems. Otherwise, the alternative is the same as the baseline.

Requirements Requirements Definitions Threshold (T): The minimum level of operational performance that the Government is willing to accept is considered a threshold value.

Objective (O): An objective is considered a level of performance that significantly improves mission performance, safety, or supportability beyond that of the threshold value, and represents the maximum desired yield for system performance.

· Objective values are not required but are defined to provide guidance to the Contractor with respect to areas where increased capability is of interest to the Government.

· If objectives are defined, the interval between the objective and threshold values for a given parameter is the Government program manager’s (PM) trade-space.

· If objective values are listed, the Contractor shall evaluate them to determine if they can reasonably be achieved, whether there is a cost or schedule impact, and the extent of the impact. The impact of achieving objective values shall be brought to the attention of the Government for review.

Requirements Numbering Each requirement in this FRD is assigned a unique ID number of the form of XX.YY.ZZ.

· XX indicates the requirement category number.

· YY indicates the component number.

· ZZ defines the individual requirement number.

· When there is no requirement for a given component in that requirement category, the ID is omitted entirely.

HE Rail Use Cases The following use case scenarios are presented as a general reference point for both land border POE and seaport POE HE Rail operations. The specifics of the scenarios will depend on each location’s unique layout/constraints and modified accordingly.

Baseline HE Rail Use Case – Land Border or Seaport POE The use case provides a general description of CBP operations when scanning trains at land border and seaport POE with an adjacent Control Center. The use case begins when a train approaches the rail border. This use case ends when the train is cleared for POE exit or referred for further inspection.

Use Case Pre-Condition:

1) The HE Rail System is ready for operation. The operator and analyst are present in an adjacent control center.

2) The train crew has been processed by CBP Officers, relocated to the front of the train. The number of railcars occupied by crew is known by the CBP Officers.

3) CBP Officers have cleared the train to proceed toward the HE Rail System.

Use Case Post Condition:

1) The railcars are released and cleared for POE exit, and the results of the cargo processing are documented in the HE Rail System and the required Government systems, or

2) CBP detains the railcar(s) after detecting anomalies and is referred for further investigation.

Use Case Steps

1) The train is directed to proceed at a prescribed speed through the HE Rail System.

2) The Operator will flag the ionizing radiation image to begin after the initial locomotive and other occupied railcar pass.

3) The Operator monitors the train for safety, monitors the live photographic images and to check that the railcar segmentation is correct.

4) The Analyst reviews the railcar images and ‘flags’ any images for further review.

5) Both the Operator and Analyst monitor all images in motion for the presence of undeclared passengers.

6) After the train is scanned, the Analyst does a closer review of any ‘flagged’ railcars and may mark them as “suspect/hold” or clear the flag.

7) Any railcars labeled as “suspect/hold” or with Radiation Detection alerts will be referred to the nearest rail inspection yard for further inspection.

Remote Inspection Use Case This use case is identical to the baseline use case except the Analyst is located at a remote HE Rail Control Center. The HE Rail Control Center and the NII Control Center must be connected to the CBP network to enable remote operation. The remote Analyst also needs the capability to directly communicate in real time with the CBP officers on site.

Functional Requirements Table 3 lists the major components of the HE Rail System. In addition to these major components, the system includes associated ancillary hardware and software elements.

Table 3 HE Rail System Functional Components

HE Rail Unit Functional Requirements The HE Rail Unit shall be designed and configured for operation from the control center for normal operating modes.

The HE Rail Unit, including all associated equipment, shall accommodate conveyances up to the height and width requirements as stated in current Association of American Railroads (AAR) standards[footnoteRef:3] [3: AAR Manual of Standards and Recommended Practices, 2023 or latest edition]

The HE Rail Unit shall scan trains with up to 300 railcars.

Operation of the HE Rail Unit shall require no more than two personnel.

The HE Rail Unit shall scan trains traveling in either direction on one track without manual system configuration changes.

1.1.1 The HE Rail System DS shall assign a unique train counter number for each train scanned.

1.1.2 The train counter number shall use the following format <YYYY-MM-DD-HHMM-##> where YYYY is the four-digit year, MM is the two-digit month, DD is the two-digit day, HHMM is the 24-hour clock time and ## is the count of the trains processed for the day.

1.1.3 The count of trains shall start at 01 and increment accordingly.

1.1.4 The count of trains shall reset to 00 at midnight local time.

1.1.5 The HE Rail System DS shall assign a unique railcar counter in a three-digit format for a given train.

1.1.6 The railcar number shall start with the lead locomotive/car designated as “001” and increment accordingly.

1.1.7 The HE Rail System DS shall assign a unique railcar number in the format <XXX-ZZZ> where XXX is the train counter number specified in 5.2.7 and ZZZ is the railcar number specified in 5.1.10.

1.1.8 The HE Rail System DS shall associate recorded container identification numbers and auto populate with the inspection record.

HE Rail Unit X-Ray System Functional Requirements The HE Rail Unit X-Ray System shall use active X-Ray technology.

The HE Rail Unit X-Ray System shall start scanning automatically after the number of occupied locomotives and railcars (from Operator input) has passed through the HE Rail Unit.

The HE Rail Unit X-Ray System shall allow the Operator to manually start the scanning process.

For any railcar scanned twice, the HE Rail Unit X-Ray System shall include all railcar images in the inspection record.

The HE Rail Unit X-Ray System should support alternative beam geometries, other than perpendicular to the trailer/container, to enhance detection of contraband within fore and aft walls, doors, etc. (O).

The HE Rail Unit X-Ray System shall comply with 21 CFR Part 179 Irradiation in the Production, Processing, and Handling of Food Subpart B Radiation and Radiation Sources.

The HE Rail Unit X-Ray System shall display the complete image of each railcar, covering its entire length, and from the top of wheels to the roof.

The HE Rail Unit X-Ray System shall allow the operator-analyst to toggle material discrimination colors on and off.

The HE Rail Unit X-Ray System shall distinguish organic (low Z[footnoteRef:4] ≤ 8), intermediate (8< Z< 20), and metallic (Z ≥ 20) materials using different colors for their display. Material categories are to be color-coded as follows: organic (orange), intermediate (green) and metallic (blue) (T). [4: Z = Atomic number or Nuclear Change number]

The HE Rail Unit X-Ray System should distinguish Heavy Metals (Z ≥ 70) (Color not defined by CBP) (O).

Radiation Detection System Functional Requirements The HE Rail System should include the capability to detect the presence of nuclear and radiological materials that pose a potential threat in conveyances undergoing scanning (O).

If included, the Radiation Detection System shall scan the entire train.

If included, the Radiation Detection System shall be in compliance with requirements for CBP-approved radiation detection.

Railcar Identification System Functional Requirements The HE Rail Unit Rail Identification System shall identify and record railcar information identification numbers including intermodal containers for the entire train (Reference AAR RP-9203.V1.0 Manual of Standards and Recommended Practices).

The HE Rail Unit Rail Identification System shall identify, and record intermodal containers marked in accordance with ISO 6346 (or current) standard.

The HE Rail Unit Rail Identification System shall report containers with non-compliant (not AAR or ISO) markings by returning an error code.

The HE Rail Unit Rail Identification System shall read railcar automatic equipment identification (AEI) tags and record that information in the inspection record.

Vehicle Sensors Functional Requirements The HE Rail Unit Vehicle Sensors shall measure the train’s instantaneous speed to the nearest 0.1 MPH from 0.0 to 25.0 MPH as it approaches and passes through each Scan Unit.

The HE Rail Unit Vehicle Sensors shall automatically detect the direction of travel.

The HE Rail Unit Vehicle Sensors shall count the number of railcars scanned per train.

Camera Systems Functional Requirements This section has requirements for cameras that image the railcars (required) and closed-circuit TV systems used for surveillance (optional).

The HE Rail Unit Camera Systems shall display a live video stream of top, left and right sides and underneath locomotive/railcars to the Operator.

The HE Rail Unit Camera Systems shall capture four still images (top, left and right sides, and underneath carriage) for each railcar in the inspection record.

The HE Rail System Camera Systems shall be monitored by CBP-approved area surveillance cameras.

If included, the Area Surveillance Camera (ASC) System shall include a Fixed CCTV System and PTZ cameras.

Note: The CBP Border Security Deployment Program (BSDP) has established an approved specification for surveillance video cameras and recording called Centralized Area Video Surveillance System (CVASS). Any camera covering interactions between CBP officers and drivers must comply with CAVSS requirements.

If included, the Fixed CCTV System shall provide full 360-degree coverage of the HE Rail Unit operating area including the entire Radiation Control Area (RCA) on both sides of the train.

If included, the ASC PTZ camera shall have the capability to focus using pre-programmed presets and observe areas of interest around the Unit.

All camera views shall be automatically recorded.

If included, the Fixed CCTV System and the PTZ cameras shall be capable of providing screen shots at any time.

Data Storage (DS) Functional Requirements The HE Rail System Data Storage (DS) shall store the inspection records [including X-ray images, identifications (IDs), and metadata] sent to the NII Control Center or Cloud.

The HE Rail System DS shall not overwrite any previous decisions or annotations made by any analyst due to any manipulations or actions at any System workstations, regardless of location.

The HE Rail System DS shall store X-Ray images in an uncompressed data format.

The HE Rail System DS shall retain raw X-Ray image data for each inspection record in addition to any proprietary/processed X-Ray image format.

The HE Rail System DS stored images shall retain the full dynamic gray-level range of the X-Ray image.

The HE Rail System DS shall store streaming video for a rolling first-in first-out period of thirty (30) days.

The HE Rail System DS shall store inspection records for a rolling first-in first-out period of thirty (30) days.

The HE Rail System DS shall store ASC data (if included) for a rolling first-in first-out period of thirty (30) days.

The HE Rail System DS shall support operator-defined queries, including standard reports for scans performed, scans per day / per analyst and other Government-defined metrics[footnoteRef:5]. [5: Metrics necessary to evaluate requirements specified in Attachment 06, Lifecycle Sustainment and Support Requirements, of the SOW]

The HE Rail System DS shall have a full capacity backup system that is configured to automatically backup files at designated intervals.

The HE Rail System DS shall auto-save any "suspect/hold" or "non-suspect/release" determination, annotations and comments to the inspection record prior to closing the record.

HE Rail Control Center Functional Requirements The Control Center(s) shall provide the ability to do the following:

1.

2.

3.

4.

5.

5.1.

5.2.

5.3.

5.4.

5.5.

5.6.

5.7.

5.8.

5.8.1.

5.8.1.1. Enhance the image(s),

5.8.1.2. Change the magnification,

5.8.1.3. Select different color palettes,

5.8.1.4. Optimize the image’s contrast and brightness,

5.8.1.5. Sharpen the image,

5.8.1.6. Highlight potential areas of interest,

5.8.1.7. Emboss entire image or area of interest,

5.8.1.8. Annotate the file,

5.8.1.9. Input decisions on shipment adjudication and

5.8.1.10. Perform other standard and required operations to meet the objective of detecting contraband and anomalies (T).

The Control Center(s) should provide the ability to perform edge detection on X-Ray Images.

The Control Center(s) should provide the ability to perform noise reduction for the entire image or area of interest on X-Ray Images.

The Control Center(s) shall be capable of executing functions without access to an external information system.

The Control Center(s) shall have the capability of printing and scanning documents to include all items of the Inspection record.

NII Control Center Functional Requirements If configured for the alternate baseline, Administrators in the NII Control Center shall be able to remotely control the HE Rail System.

· Note: Remote control includes full remote operations for the system including the operation of the HE Rail Unit, Radiation Detection (if included), cameras systems, and any required communications to support the work flow, situational awareness, and any other requirements to fully operate the HE Rail System.

Physical Requirements

1. HE Rail System Physical Requirements The HE Rail System shall include computers and server(s) with enough memory, speed and other features to meet all the requirements of this FRD and supporting contract SOW / references.

The HE Rail Systems shall include printers be capable of color printing.

HE Rail Unit Physical Requirements The HE Rail Unit shall be able to be installed within a defined footprint no wider than 65 feet and no longer than 120 feet (T). These dimensions include any fencing or shielding walls and other auxiliary equipment.

The HE Rail Unit shall be configurable to accommodate North American interchange railcars on a single track or double track. For a double track, it is assumed that only one track will be in use when scanning.

The HE Rail System shall maintain full operability in the environmental extremes seen on the northern and southern border without degradation in its intended outdoor environment.

The HE Rail System shall operate under environmental conditions along the northern and southern borders as specified in Table 4.

Table 4. HE Rail System Environmental Conditions

Reference MIL-STD-810, Method 509.4

HE Rail Control Center Physical Requirements The Operator workstation shall consist of two monitors with the left display focused on system status and scan controls and the right displaying the four-sides of live video images.

The Analyst workstation shall consist of two 27-inch (or larger) monitors.

The Analyst workstation monitors shall be HD or greater resolution.

The left Analyst workstation shall be focused on the live feed of radiographic images.

The right Analyst workstation shall be focused on displaying the queue of inspection records for review and the image analysis tools.

1.3 1.4 1.5 Camera Systems Physical Requirements The HE Rail System shall provide video images under all environmental conditions expected at the northern and southern borders in all lighting conditions Performance Requirements General performance relates to quantity, speed, and other general performance characteristics of the system.

1. HE Rail System Performance Requirements The HE Rail System shall display the complete inspection record at the analyst workstation for each conveyance within 10 seconds (T) of completion of the scan including radiation detection.

The HE Rail System should display the complete inspection record at the analyst workstation for each conveyance within 5 seconds (O) of completion of the scan including radiation detection.

The HE Rail system should be able to have a Mean Time to Repair (MTTR) of 24 hours.

The HE Rail system should have a Mean Time Between Failure (MTBF) of 1,000 hours.

HE Rail Unit Performance Requirements The HE Rail Unit shall scan railcars with speeds of 2 to 10 MPH (T).

The HE Rail Unit should scan railcars traveling with speeds up to 12 MPH (O).

HE Rail Unit X-Ray System Performance Requirements If a train stops mid-scan, the HE Rail System shall be able to resume forward scanning from stop (i.e. train cannot back up) and produce scans without missing any railcar for that train.

The HE Rail X-ray System shall penetrate 10” (T) or greater of steel as measured in accordance with ANSI N42.46-2008.

The HE Rail Unit shall have a horizontal / vertical spatial resolution of 0.5 inches (T) or better in accordance with ANSI N42.46-2008.

The HE Rail Unit should have a horizontal / vertical spatial resolution of 0.25 inches (O) or better in accordance with ANSI N42.46-2008.

The HE Rail Unit shall have contrast sensitivity of at least 5% (T) at 50% of the system's maximum penetration with the target traveling through the portal at a speed of 5.0 mph The HE Rail Unit should have contrast sensitivity of at least 2% (O) at 50% of the system's maximum penetration with the target traveling through the portal at a speed of 5.0 mph

1. Railcar Identification System Performance Requirements The HE Rail System shall accurately identify the legible ISO container number at least 99% (T) of the time.

The HE Rail System should accurately identify the legible ISO container number 100% (O) of the time.

The HE Rail System shall associate the legible ISO container number with the correct railcar at least 99% (T) of the time.

The HE Rail System should associate the legible ISO container number with the correct railcar 100% (O) of the time.

The HE Rail System shall accurately read the operating AEI tag information on a railcar at least 99% (T) of the time.

The HE Rail System should accurately read the operating AEI tag information on a railcar 100% (O) of the time.

The HE Rail System shall correctly associate the operating AEI tag information with the correct railcar at least 99% (T) of the time.

The HE Rail System should associate the operating AEI tag information with the correct railcar 100% (O) of the time.

Vehicle Sensor System Performance Requirements The railcar counter shall be correct 99% (T) of the time.

The final count of railcars scanned for each train shall be correct 99% (T) of the time.

The railcar counter should be correct 100% (O) of the time.

The final count of railcars scanned for each train should be correct 100% (O) of the time.

Camera Systems Performance Requirements The Camera System shall only include video cameras with High Definition (HD) resolution or greater.

If included, the ASC System shall provide operators with full situational awareness for the HE Rail System and adjacent operations.

Interface Requirements The interface requirements for the HE Rail System to the NII Control Center and Cloud are described here.

HE Rail System Interface Requirements The HE Rail System should interface to the NII Control Center, (future) Cloud, and (future) NII-I System in accordance with the Interface Control Document (ICD)[footnoteRef:6]. [6: Attachment 02, Integration of the SOW]

The HE Rail System should be capable of supporting (future) interface to Government network and Cloud storage of all HE Rail data elements including image and metadata, health, performance, fault and configuration status.

The system shall use a common key to lock outdoor compartments.

HE Rail X-ray Unit Interface Requirements The HE Rail System shall interface to any RDE in proximity over a hardwired connection (e.g. fiber or twisted pair as required) to enable RDE blanking as defined in Section 12.2.

1. Radiation Detection System Interface Requirements The HE Rail System shall be capable of interfacing with any co-located RDE using N42.42, PRIDE ICD (or current version).

The HE Rail System shall receive results and any corresponding alarms or alerts from any co-located RDE.

1. Vehicle Sensors Interface Requirements The HE Rail System shall produce an overspeed alarm if the speed of the train exceeds a configurable threshold based on the maximum safe speed for the track or safe passage or no longer meets image quality.

The HE Rail System shall produce an under-speed alarm if the train speed is slow enough that the dose to a stowaway would exceeds the dosage limits or below 0.1 MPH, whichever is greater.

The HE Rail System shall signal a fault condition and complete the occupancy record when a railcar occupies the detection zone longer than the maximum-duration threshold (Administrator-specified parameter).

Data Storage (DS) Interface Requirements The HE Rail System shall export inspection records in accordance with Attachment 02, Integration and the applicable ICD of the SOW.

Locally stored files, records, and scan images shall be accessible to Administrators who are able to copy to removable media storage devices: encrypted, FIPS 1402 Level 2 or greater and FIPS 197 compliant flash and hard drives.

The HE Rail System shall notify the Administrator when streaming video data storage reaches 50%, 75%, 90% or 100% usage.

The HE Rail System shall notify the Administrator when inspection record storage reaches 50%, 75%, 90% or 100% usage.

The HE Rail System shall notify the Administrator when the ASC data storage reaches 50%, 75%, 90% or 100% usage.

1.10 HE Rail Control Center Interface Requirements The HE Rail System shall provide a graphical user interface (GUI) that allows the Operator or Analyst to access data and execute basic commands for the X-ray System and from other sensors or features (e.g. remote maintenance data) and conveyance camera images.

The Operator Workstation shall control and monitor all subsystems (e.g., radiographic imaging, cameras, railcar Identification).

The Operator Workstation shall allow the user to input the number of locomotives or railcars to not scan with ionizing radiation at the beginning of each train.

The Operator Workstation shall allow the user to enter the train Operator (e.g., UPRR, CPKC, BSNF, CN) and train name/number via a configurable pull-down menu with a user-selectable default value and the ability to enter free text.

The Operator Workstation shall allow the total HE Rail System to be rebooted or turned off/turned on.

The Operator Workstation shall display systems and subsystem status as a graphical representation of the systems and its components and a summary of issues or system alert.

The HE Rail System status shall include a summary of the server storage status with alerts.

The Operator Workstation shall have a menu for the summary of trains and railcars processed in the last 24 hours.

This summary menu shall be selectable to be shown or hidden by the Operator and saved as a default layout based on that user’s unique preference.

The Operator Workstation shall function with User Access Level 1 or greater with enabled capabilities in alignment with Appendix A.

The Analyst Workstation shall function with User Access Level 1 or greater with enabled capabilities in alignment with Appendix A.

The Analyst Workstation shall support review and analyze NII Radiographic images with the corresponding RFID and conveyance camera images for each conveyance.

The Analyst Workstation shall allow the Analyst to sort scans for review at least, in order of Priority Review, railcar type, or sequential order of the train.

The Analyst Workstation shall allow the Analyst to label a railcar inspection record as "suspect/hold" or "non-suspect/release".

The Analyst Workstation shall require that the Analyst enter a Comment or Annotation for any inspection record labelled as "suspect/hold".

The Analyst Workstation shall have the ability for the Analyst to bulk label and close out any remaining railcar images as "non-adjudicated” after completion of the train scanning.

The bulk label feature shall only be available after all ‘flagged for further review’, radiation detection alerts and ‘suspect/hold’ images within an inspection record have been acknowledged and closed out by the Analyst.

If integrated, the HE Rail System shall display the radiation detection data as an Alert result on the Analyst display of the railcar for all radionuclide categories and high gamma.

If integrated, The HE Rail System shall display the radiation detection data as an overlay on the radiographic image of the railcar including the approximate location of any detected radiological source.

If integrated, the radiation detection overlay shall be toggleable by the Analyst.

The HE Rail System shall allow the Operator or Analyst to flag any railcar as ‘flagged for further review’ while the train is being scanned.

If integrated, The HE Rail System shall provide an indication of any radiation detection alert during the live radiographic images for all radionuclide categories.

The HE Rail System shall allow the Operator or Analyst to retrieve the number of railcars that have passed through the system for each train scanned.

System shall allow the Operator or Analyst to initiate an emergency stop of the system via the GUI.

The HE Rail System shall have mechanical switches in a Control Box located with the Operation Workstation to perform the following functions:

System Power on/off, Enable the system for scanning, Radiation Detection Off (no radiation data collected)/On - standby (only background radiation and state of health data may be collected)/On - Radiation Detection (conveyance radiation data collected and alarms generated), Radiation Detection alert, and Ability to trigger an Emergency Stop.

Survivability Requirements Survivability requirements describe the capability of a system to fulfill its mission in a timely manner in the presence of attacks, failures, or accidents.

HE Rail Unit Survivability Requirements The HE Rail Unit shall have a Power Conditioner and Uninterruptible Power Supply (UPS) to protect the system from electrical power degradation / fluctuations / loss.

The HE Rail System shall provide backup power for operation of the complete system for a period of at least three (3) hours in the event of power brownout or blackout.

1. Vehicle Sensors Survivability Requirements The HE Rail System shall maintain the unique train and railcar through complete loss of power.

If included, the Under Track Inspection System (UTIS) shall have provisions for preventing water intrusion or otherwise manage water which infiltrates the unit to prevent damage/failure of the unit.

Human Systems Integration (HSI) Requirements HSI requirements include human factors requirements, such as human-machine interface or ergonomic requirements.

HE Rail Unit HSI Requirements The HE Rail System shall provide audio and visual cues when the HE Rail Units are in scanning (X-ray transmit) mode.

Environmental, Safety, and Occupational Health (ESOH) Requirements These requirements are necessary to comply with existing ESOH policies or regulations (e.g., National Environmental Policy Act [NEPA], Occupational Safety and Health Act [OSHA], Clean Air Act [CAA]) and minimize environmental, safety, and occupational health risks.[footnoteRef:7] [7: ]

HE Rail System ESOH Requirements The HE Rail System shall meet the ingress protection ratings of International Electro technical Commission (IEC) Standard 60529.

The HE Rail System shall cease radiating immediately upon activation of any of the emergency stop controls The HE Rail System shall have physical emergency stop buttons, accessible at the entrance to the Radiation Control Area (RCA) on both sides of track for gaps in fencing/barriers or other gates.

The HE Rail System shall have physical emergency stop buttons on either side of the X-Ray source and X-Ray detector array inside the RCA.

The system shall comply with OSHA regulations.

The HE Rail System shall provide Light-Emitting Diode (LED) lighting sufficient to illuminate the RCA to allow the Operator to see a stowaway on or near a railcar for both inbound and outbound trains.

1. HE Rail Unit X-Ray System ESOH Requirements The HE Rail Unit shall not rely on radioactive isotopes.

The HE Rail System shall provide a dose to undeclared passengers (stowaways) of no greater than 1 mSv on railcars traveling at 1 mph or greater.

RCAs shall be designated in which the potential exposure to personnel inside these areas would be > 50 µR in any one hour.

The HE Rail system shall be designed to minimize accidental and occupational exposures to the Operator and Analyst with dose rates of no greater than 10 µR per train scanned. Note: This may be accomplished by shielding or the location of the operations building.

The HE Rail System shall indicate the operating mode of the system with warning lights and audible alarms at the entrance to the RCA on either side of the track at both gaps and at any other gate or entrance.

The HE Rail System shall include radiation safety signs posted at the entrance to the RCA on either side of the track at both gaps and at any other gate or entrance.

Interoperability Requirements Interoperability requirements allow the HE Rail System to operate without impacting other systems or components.

1. HE Rail Unit X-Ray System Interoperability Requirements The HE Rail System shall integrate such that the Radiographic Image subsystem and Radiation Detection subsystem can function in proximity to each other without causing interference or generating spurious alarms while still meeting functional requirements. Note: RDE blanking is where the pulsed X-ray systems provide a digital timing signal to nearby RDE System so that the RDE can omit the energy emitted by the X-ray) is a generally accepted form of integration. The Government reserves the right to perform additional testing as to the efficacy of the integration to ensure that required Radiation Detection performance is maintained.

The HE Rail System shall not interfere with RDE gamma-ray detection operations.

The HE Rail System shall employ a pulsed photon generator (linac, betatron or similar) to facilitate RDE blanking.

The HE Rail System shall produce an RS-422 compatible blanking signal with adjustable timing which can be transmitted to any RDE in proximity over a hardwired connection (see 8.2.1).

The blanking signal shall remain active regardless of NII operational status The HE Rail System shall be capable of meeting the requirements in this standard while operating at a fixed photon pulse frequency of 200 Hz, 400 Hz,…