C24830003_ATTACHMENT_B.pdf

2. The term of this Agreement is:

SAMPLE

3790-C24830003

C24830003

Contractor's Name:

Agreement Number:

Page: 1 of 1

SCOPE OF WORK

1. Contractor agrees to provide to the Department of Parks and Recreation (DPR) services as described herein:

2. The services shall be performed at:

3. The services shall be provided during:

4. The project representatives during the term of this Agreement will be:

State Agency: Contractor:

Section/Unit: Section/Unit:

Attention: Attention:

Address: Address:

City/State/Zip Code: Sacramento, CA 95815 City/State/Zip Code:

Phone: Phone:

Fax: Fax:

E-mail Address: E-mail Address:

DPR 603 (Rev. 2/2011)(Excel 2/10/2011)

TBD

Contractor's place of business.

Monday through Friday, 8:00AM-5:00PM, excluding State and Federal Holidays.

715 P Street

TBD

C24830003

CA Boater Card Printing

California Department of Parks and Recreation

Division of Boating and Waterways

EXHIBIT A

(Standard Agreement)

The Contractor is responsible for providing CA Boater Cards production including: printing secured personal identification plastic cards, maintaining a database of each card application and issuance, distribution; and replacement if needed. The boater card is designed, produced and distributed to all registered boat operators; as prescribed by Federal and State regulations and statutes.

Contractor is responsible for the printing and mailing of the California Boater Card (CBC), an accompanying Congratulation Letter, adhering the CBC to the Congratulations Letter, tri-folding and inserting the CBC and Congratulations Letter in a standard window envelope, adding postage, and mailing both out to the recipient. The contractor shall provide complete printed samples of the CBC, Congratulations Letter, and ready to mail envelope package, to the DPR for approval prior to initial production of cards and mailing.

State of California Invitation for Bids No.: C24830003 Department of Parks and Recreation STATEWIDE Division of Boating and Waterways CA Boater Card Printing Services

EXHIBIT A, ATTACHMENT I

Detailed Scope of Work

CALIFORNIA BOATER CARD PRINTING SERVICES

1.0 Project Background

The California Boater Card Program is a legislatively mandated education program that requires operators of motorized vessels on California waterways to complete a safe boating course and obtain a California Boater Card. This program is being phased in by age and full implementation will take place in 2025 when all operators, regardless of age will be required to carry the card.

The Contractor is responsible for the CA Boater Cards production including: printing secured personal identification plastic cards, maintaining a database of each card application and issuance, distribution; and replacement if needed. The boater card is designed, produced and distributed to all registered boat operators; as prescribed by Federal and State regulations and statutes.

Contractor is responsible for the printing and mailing of the California Boater Card (CBC), an accompanying Congratulation Letter, adhering the CBC to the Congratulations Letter, tri-folding and inserting the CBC and Congratulations Letter in a standard window envelope, adding postage, and mailing both out to the recipient. The contractor shall provide complete printed samples of the CBC, Congratulations Letter, and ready to mail envelope package, to the DPR for approval prior to initial production of cards and mailing.

2.0 Contract Term and Location

The term of this agreement is 10 (ten) months. The Department of Parks and Recreation (DPR) estimates there may be up to 75,000 applicants requesting cards during the term of this contract. Due to the phase-in process for this program, these numbers are only estimates. The previous three years range between 37,000 and 54,000 cards issued.

Services provided for this agreement may be provided at the Contractor’s place of business.

3.0 Services Provided by Contractor

A. Contractor Minimum Qualifications

1. Contractor must provide proof of a minimum of three (3) years of work experience manufacturing and shipping plastic cards the same as, or equivalent to, the cards detailed herein, Section B. (pages 2-3), CBC and Congratulations Letter Design Requirements, of this contract. This proof may be in the form of references, which will be verified by DPR.

2. Contractor must provide a sample card they have produced and issued previously for other clients that is similar to the card specified herein that demonstrates their ability to create an acceptable product as requested by DPR, as described within this Invitation for Bids.

3. Contractor must submit a list of business references as detailed in Attachment A page 2-3, Bidder’s References.

4. Failure, by bidder, to meet the above Contractor Minimum Requirements may result in bid disqualification.

B. CBC and Congratulations Letter Design Requirements

1. Contractor shall create the card according to the template and specifications provided in Attachment B, Exhibit A, Card Template. This template is for printing the front and back of the CBC.

2. Contractor shall not add any information or advertisement onto the card or Congratulations Letter.

3. Contractor shall print the following information onto the front of the card: first name, middle initial, last name, address, city, state/province/region, zip code/postal code, date of birth, date of issue, Boater ID number, hair color, eye color, height, and gender. Refer to Attachment B, Exhibit A, Card Template, for details.

4. Contractor shall print the following information onto the back of the card: “The name identified on the reverse side of this card has satisfied the requirements of the California Boater Card Program established by California State Parks. This program is approved by the National Association of State Boating Law Administrators and recognized by the U.S. Coast Guard. This card must be in your possession when operating a motorized vessel on California waterway.

H&NC 658.5 Age limitations for motorized vessel operation still apply. Website:

www.Californiaboatercard.com.” Refer to Attachment B, Exhibit A, Card Template, for details.

5. Contractor shall print a PDF417 bar code on the back of the CBC. The bar code will consist of all information printed on the CBC. The bar code must meet the national standards outlined in Attachment B, Exhibit A, the 2016 AAMVA DL/ID Card Design Standard.

6. Contractor shall print on plastic cards that measure 3.375 ±0.010in (85.72 ±0.25mm) x 2.125 ±0.002in (53.98 ±0.050mm) and rounded corners with a radius of 0.113 – 0.137in (2.88 – 3.48mm), and a thickness of 0.009 – 0.034in (0.23 – 0.84mm). Refer to Attachment B, CVOC Card Specifications.

7. Contractor shall provide lamination specifications consistent with industry standards. Final lamination specifications shall be approved by DPR.

8. Contractor shall print the Congratulations Letter in full color on 8 ½ x 11 inch letter size, 20lb stock, recycled white paper as detailed in Attachment B, CBC Congratulations Letter.

http://www.californiaboatercard.com/

C. Mailing Requirements

1. The Contractor shall print a Congratulations Letter as specified in Attachment B, CBC Congratulations Letter. The Contractor shall adhere the CBC to the Congratulations Letter in a fashion that leaves the card secure but easily removed by the recipient. The adhesive shall not damage the CBC in any way.

2. The letter format must be exactly as provided in Attachment B, CBC Congratulations Letter. The boater’s information includes: first name, middle initial, last name, address, city, state/province/region, zip code/postal code, date of birth, date of issue, Boater ID number, hair color, eye color, height, and gender.

3. The Contractor shall attach each CBC to the Congratulations Letter before mailing out. The Congratulations Letter shall be tri-folded for mailing.

4. The Contractor must ship to international addresses when required.

5. The Contractor shall incur the cost of all materials, envelopes, and First Class postage fees (Domestic/International), Exhibit B, Attachment 1, Service Contracts Bid Form, Cost Breakdown. The state has established a maximum Postage Fees Allowance, the Contractor will be compensated for actual postal fees, exclusively in the performance of this agreement, by the state. The contractor will provide an itemized invoice identifying the CBC cost and Postage Fees for payment. No other charges or fees will be authorized. Invoices shall be submitted no more frequently than monthly in arrears, to the state. Throughout the term of the agreement, in the event the Postage Fees Allowance requires replenishment, the state will execute an Amendment to increase the maximum Allowance.

6. The Contractor shall use legal sized standard window envelope to mail CBC and Congratulations Letter. See Attachment B, Envelope Specifications.

7. The Contractor shall print DPR’s mailing address as the return address on all envelopes. See Attachment B, Envelope Specifications. The return address is:

California State Parks Division of Boating and Waterways P.O. Box 942896 Sacramento, CA 94296-0001

D. Reporting Requirements

1. The Contractor shall create a user account for your organization/company at the

California Boater Card website at: californiaboatercard.com. The Contractor shall request a link from DPR.

2. The Contractor shall create a secure Application Programming Interface (API) or File Transfer Protocol (FTP) to receive CBC data files to print and mail.

3. The Contractor shall submit CBC print/mail confirmation to DPR through a secure API or FTP.

4. If for any reason the Contractor is unable to print or mail cards, the Contractor shall immediately notify DPR by e-mail at Boatercard@parks.ca.gov listing the affected batch number, first and last name, and the Boater ID number of all cards the Contractor is unable to print or mail for any reason. The Contractor is responsible to correct the problem and issue the affected cards within three (3) business days. Any costs incurred to fix equipment failures are the responsibility of the Contractor.

5. The Contractor shall notify DPR of any duplicate boater information or batch number immediately by e-mail to Boatercard@parks.ca.gov and suspend processing until the issue has been resolved with DPR.

6. The Contractor shall upon request send a quality control sample card to DPR for review.

7. The Contractor shall send monthly or on request an invoice status report.

E. Data and Information Security Requirements

1. The Contractor must treat all collected California Boater Card data as Personally

Identifiable Information (PII), which includes, first name, last name, gender, age, date of birth, height, hair color, eye color, address, email address, and telephone numbers.

2. The Contractor must collect and store CBC PII data encrypted in a system and or database.

3. The Contractor must encrypt CBC PII data at rest and transmit data only via encrypted communication.

4. The Contractor shall sign confidentiality statements and hold all CBC PII information in strictest confidence, to release it only to authorized employees requiring such information, and not to release, sell or disclose it to any other party.

5. The Contractor shall implement physical, electronic, and managerial safeguards to prevent unauthorized access to CBC PII information, include, but no limited to, assuring each employee, subcontractor, and sub Contractor’s employee is informed of and required to abide by the confidentiality requirements.

6. The Contractor shall notify DPR immediately if a security incident involving CBC PII information.

7. The Contractor shall be responsible for all costs incurred by DPR due to security incident resulting from the Contractor’s failure to perform or negligent acts of its personnel, and resulting in an unauthorized disclosure, release, access, review, or destruction; or loss, theft or misuse of an information asset. If the Contractor experiences a loss or breach of data, the Contractor shall immediately report the loss or breach to DPR. If DPR determines that notice to the individuals whose mailto:Boatercard@parks.ca.gov data has been lost or breached is appropriate, the Contractor will bear any and all costs associated with the notice or any mitigation selected by DPR. These costs include, but are not limited to, staff time, material costs, postage, media announcements, and other identifiable costs associated with the breach or loss of data.

8. The Contractor shall immediately notify and work with DPR to respond timely and correctly to Public Records Act requests.

9. The Contractor shall apply security patches and necessary upgrades, and keep virus software up-to-date on all systems where CBC data is stored and processed.

10. DPR shall have the right to participate in the investigation of a security incident involving CBC data or conduct its own independent investigation, and the Contractor shall fully cooperate.

11. DPR shall conduct “unannounced” compliance audits of the above requirements on a quarterly basis and the Contractor or subcontractor shall fully cooperate.

DPR will hire a certified data security expert to perform the annual/quarterly audits to ensure CBC data is well protected.

F. Policy Requirements

1. The Contractor shall mail the card and Congratulations Letter to the recipient within ten (10) business days of receipt of a data transmission file from DPR or within an agreed upon timeframe with DPR.

2. It is the responsibility of the Contractor to have a secure facility, adequate staff, and equipment to complete the services outlined within this Exhibit A, Attachment 1 Detailed - Scope of Work. DPR will not reimburse the Contractor for equipment and/or other resources purchased to perform the scope of the contract for any reason.

3. All data, electronic and otherwise, is the sole property of Department of Parks and Recreation, and shall be transferred from the Contractor upon termination of the contract, within ten (10) business days.

4. CBC and Congratulations Letter are property of DPR and shall not be sold or used for any other purpose outside of the Contract.

5. The Contractor shall have the capability to accept design changes to the CBC and Congratulations Letter, as requested by DPR.

6. The Contractor shall have the capability to accept changes to information on the CBC and Congratulations Letter, as requested by DPR.

G. DPR Responsibilities

1. Provide approvals to the Contractor in a timely manner regarding key tasks and deliverables, including, but not limited to, the selection of the format, content, and design of the printed material, and the selection of alternate deliverables.

2. Provide the Contractor access to DPR staff and management as required to complete the tasks and activities for the project.

3. Approve the Contractor’s work plans, deliverables, and invoices in a timely manner and consistent with state policies and procedures.

4. Provide the Contractor with DPR background documents and information as needed for research purposes.

5. Approve delays in deliverable due dates on or before stated due date within the approved period of performance of this Agreement.

6. Advise the Contractor of any deficiency and notify the Contractor of satisfactory corrective action to be implemented within a specified time frame. Failure to correct the deficiency as requested by DPR may be cause for termination of the contract.

7. Reimburse the Contractor in accordance with terms of the Agreement.

8. The parties must notify each other in writing within ten (10) business days of any change in Project Representative.

9. Project/Invoice Administration:

Evan Becker Department of Parks and Recreation

(916) 661-2687 Evan.Becker@parks.ca.gov

H. Cancellation of Agreement If services are determined to be no longer needed, DPR reserves the right to cancel this agreement at any time with a 30-day notice.

mailto:Evan.Becker@parks.ca.gov

Exhibit A, Attachment II

Exhibit A, Attachment III

Exhibit A, Attachment IV

2016 AAMVA DL/ID Card Design Standard Ver 1.0

© AAMVA 2016 All rights reserved i

Contents Page

Foreword ............................................................................................................................................................. x

0 Introduction ........................................................................................................................................... xi

0.1 Functional Requirements .................................................................................................................... xi

0.2 Interoperability ...................................................................................................................................... xi

0.3 Commonality (Uniformity) & Harmonization between Human and Machine Readable Data ....... xii

0.4 Security ................................................................................................................................................. xii

0.5 Replacement of AAMVA DL/ID 2013 .................................................................................................. xii

0.6 Conformity Assessment Testing/Courtesy Verification Program (CVP) ....................................... xii

0.7 Compatibility with ISO Standard for International Driver License ................................................ xiii

0.8 ....................................... xiii

0.9 Interim/Temporary DL/IDs ................................................................................................................... xv

1 Scope

2 Reference(s)

3 Term(s) and definition(s)

4 Human-readable data elements

4.1 Data element tables

4.2 Mandatory data elements

4.3 Optional data elements

5 Quality Control

5.1 Quality Control Inspections

5.2 Quality Control Guidelines

© AAMVA 2016 All rights reserved ii

Annex A (normative) Card Design

A.1 Introduction

A.2 Scope

A.3 Dimensions and character set

A.4 Functions

A.5 Common recognition

A.5.1 Background color

A.5.2 Portrait position

A.6 Layout

A.7 Contents of the zones

A.7.1 General

A.7.2 Zone I

A.7.2.1 Document type indicator

A.7.2.2 Issuing jurisdiction information

A.7.3 Zone II

A.7.4 Zone III

A.7.5 Zone IV

A.7.6 Zone V

A.7.7 Truncation of name

A.7.8 Reproduction of images

A.7.8.1 Portrait

A.7.8.2 Signature

A.8 Security

A.9 DHS Compliance Indicators

© AAMVA 2016 All rights reserved iii

A.10 DHS Limited Duration of Stay Document Indicator

Annex B (normative) Physical Security

B.1 Scope

B.2 Informative references

B.3 Basic principles

B.3.1 Introduction

B.3.2 Security classification

B.3.3 Document related identity fraud

B.4 Security feature requirements

B.4.1 General requirements

B.4.2 Security features per family

B.5 Document security management

B.6 Glossary

Annex C (informative) Main Threats to the security of a DL/ID

C.1 Introduction

C.2 Counterfeiting Threats

*A.1 Document design attacks

*A.1.1 Re-creating the basic document look

*A.1.2 Adding personalization information

*A.2 Substitute Material/Personalization attacks

*A.2.1 Substitute Materials

*A.2.2 Substitute Printing Methods

*A.2.3 Alternative finishing

C.3 Falsification Threats

© AAMVA 2016 All rights reserved iv

*B.1 Falsification by physical modification

*B.1.1 Text attacks

*B.1.2 Image attacks

*B.1.3 Delaminating attacks

*B.2 Falsification by Recycling

*B.2.1 Extraction of genuine security features

*B.2.2 Use of recycled genuine security features

*B.3 Falsification of logical data

*B.3.1 Logical data denial of service attack

*B.3.2 Logical data substitution attack

C.4 Misuse Attacks

*C.1 Misuse of genuine valid documents

*C.1.1 Identity Theft

*C.2 Misuse of genuine invalid documents

*C.2.1 Invalid Documents

*C.2.2 Cloned documents

*C.3 Misuse by theft of original blank documents

*C.3.1. Theft of blank cards at the card production site

*C.3.2 Theft of blank cards during the transportation process

*C.3.3 Blank cards are removed from the personalization site

*C.3.4 Stolen blank documents personalized

*C.3.5 Stolen documents personalized

*C.4 Misuse through the fraudulent issue of genuine documents

*C.4.1 An attacker makes a fraudulent application for an DL/ID document

© AAMVA 2016 All rights reserved v

*C.4.2 Employee at the issuing authority makes unauthorized requests for DL/ID documents

Annex D (normative) Mandatory PDF417 Bar Code

D.1 Scope

D.2 Functional requirements

D.3 Mandatory machine-readable technology PDF417

D.4 Optional machine-readable technologies

D.5 Technical requirements for PDF417

D.5.1 Conformance

D.5.2 Symbology

D.5.3 Symbology Characteristics

D.5.4 Dimensions and Print Quality

D.5.4.1 Narrow element dimension

D.5.4.2 Row height

D.5.4.3 Quiet zone

D.5.4.4 Print Quality

D.5.4.5 Error Correction

D.6 Character sets

D.7 Compression

D.8 Sampling

D.9 Symbol Durability

D.10 Bar code area

D.11 Orientation and Placement

D.11.1 PDF417 Orientation

D.11.2 Designing the Card Layout

© AAMVA 2016 All rights reserved vi

D.12 Data encoding structures

D.12.1 Structure Options

D.12.2 Overview

D.12.3 Header

D.12.4 Subfile Designator

D.12.5 Data elements

D.12.5.1 Minimum mandatory data elements

D.12.5.2 Optional data elements

D.12.5.3 Additional data elements

D.13 Example of raw PDF417 data

Annex E (informative) Optional Card Test Methods

E.1 Introduction

E.2 Scope

E.3 Conformance

E.4 Normative references

E.5 Terms and definitions

E.5.1 Card service life

E.6 Durability testing

E.6.1 Card evaluation process

E.6.2 Card use environment and durability requirements

E.6.3 Standardized tests

E.6.4 Matching tests to requirements

E.6.5 Combinations of tests

E.6.6 Occurrence frequency of environmental conditions

© AAMVA 2016 All rights reserved vii

E.6.7 Assessment

E.7 Integrity testing

E.7.1 Threats

E.7.2 Integrity tests

E.8 Test reports

Annex F (informative) Optional Magnetic Stripe

F.1 Scope

F.2 Introduction

F.3 Conformance

F.4 Card characteristics

F.5 Coded character set

F.6 Information content and format

F.6.1 Track 1

F.6.2 Track 2

F.6.3 Track 3

F.7 Encoding specifications

F.8 Error detection

Annex G (informative)

G.1 Scope

G.2 Introduction

G.3 Conformance

G.4 File location

G.5 Updating of data

Annex H (informative) Optional Enhanced Driver License (EDL)

© AAMVA 2016 All rights reserved viii

H.1 Introduction

H.2 Scope

H.3 Conformance

H.4 References

H.5 Implementation

H.6 EDL Technical Requirements

H.6.1 Overview

H.6.2 Issuance

H.6.3 Data Transmission

H.7 EDL Physical Requirements

H.7.1 Overview

H.7.2 Machine Readable Zone (MRZ)

H.7.3 Use of Radio Frequency Identification Technology in the EDL

Annex I (informative) Optional Compact Encoding

I.1 Scope

I.2 Normative References

I.3 Overview

I.4 Character set encoding

I.5 Structure

I.5.1 Data file

I.5.2 Header

I.5.3 Type 1 Data Group

I.5.4 Type 2 Data Group

I.6 Implementation

© AAMVA 2016 All rights reserved ix

I.6.1 Data Element Mapping

I.6.2 Data Group 1: Mandatory Data

I.6.3 Data Group 2: Optional License Holder Information

I.6.4 Data Group 3: Optional Issuing Authority Information

I.6.5 Data Group 4: Optional Portrait Images

I.6.6 Data Group 5: Optional Signature/Mark Image

I.6.7 Data Group 6: Optional Facial Biometric Template

I.6.8 Data Group 7: Optional Finger Template

I.6.9 Data Group 8: Optional Iris Biometric Template

I.6.10 Data Group 9: Optional Other Biometric Template

I.6.11 Data Group 10: Reserved for Future Use

I.6.12 Data Group 11: Optional Domestic Use

Annex J (informative) Optional Integrated Circuit for Standard Encoding

J.1 Introduction

J.2 AAMVA-specific Data Requirements

J.2.1 EF.DG2 Data Group 2 License holder information

J.2.2 EF.DG11, Data Group 11 Mandatory and Optional domestic data

© AAMVA 2016 All rights reserved x

Foreword

The American Association of Motor Vehicle Administrators, AAMVA, founded in 1933 is a voluntary, nonprofit, educational organization striving to develop model programs in motor vehicle administration, police traffic services and highway safety. The association serves as an information clearinghouse for these same disciplines, acts as the international spokesman for these interests, and represents the state and provincial officials in the United States and Canada who administer and enforce motor vehicle laws.

The association's programs encourage uniformity and reciprocity among the states and provinces, and liaisons with other levels of government and the private sector. Its program development and research activities provide guidelines for more effective public service.

AAMVA understands its unique positioning and the continuing role identification security will play in helping the general public realize a safer North America. The association believes ID security will help increase national security, increase highway safety, reduce fraud and system abuse, increase efficiency and effectiveness, and achieve uniformity of processes and practices.

This standard was originally developed as one part of an extensive program to improve the security of the DL/ID

Subcommittee created a number of task groups, including the Card Design Specification Task Group that developed the 2005 specification. The Task Group surveyed and met with many stakeholders during the development effort. The Task Group gathered information from government and non-government users of the DL/ID card to determine their uses for the DL/ID card and how they believed the card should function. In addition, the Task Group surveyed and met with industry experts in the area of card production and security to gather their advice, especially about the physical security of the card.

The intermediate work of the Task Group was repeatedly reviewed by the UID Subcommittee as a whole and approved by the AAMVA Board.

A Special Task Force was reconstituted in late 2008, then changed to a committee, to undertake this revision and to provide specific guidance for those jurisdictions seeking to comply with programs like REAL ID and the Western Hemisphere Travel Initiative (WHTI). The option of issuing an International Organization for Standardization (ISO) compliant driving licence (IDL) is also supported and explained.

© AAMVA 2016 All rights reserved xi

0 Introduction

This document provides a standard for the design of driver licenses (DL) and identification (ID) cards issued by AAMVA member jurisdictions. The intent of the standard is to improve the security of the DL/ID cards issued by

AAMVA

associated card requirements. As a result, the intent of this document is to provide jurisdictions with guidance on the driver license/ID card design standards in order to provide a reliable source of identification and, at the same e to identity theft and fraud.

0.1 Functional Requirements

At its August 2002 meeting, the AAMVA Board of Directors approved the following list of functional requirements for the DL/ID card:

Evidence of the privilege to drive

Identification

Age verification

Address/residence verification

Automated administrative processing

Originally the DL satisfied only the first of these requirements. It has long since become the identity document of choice for satisfying the other four. A clear indication of this is the fact that virtually every motor vehicle administration in the U.S. and Canada issues a non-driver ID card to serve these needs for those who do not have a DL.

ngly on issues affecting the interoperability of the driver licensing system. Jurisdictions routinely process large numbers of DL applicants who are transferring from one jurisdiction to another. In addition, drivers regularly drive in jurisdictions other than the one in which they are licensed. In order to effectively manage this mobile driving population, AAMVA has long stressed the one driver, one license, and one driver control record concept. In order to implement this concept, AAMVA has placed increasing emphasis on interoperability of driver licensing systems, including the DL itself. Many of the details of this standard are intended to improve the interoperability of DL/ID cards, particularly by standardizing the machine-readable technology (MRT) used on the card.

The increased use of the card for purposes other than proof of the privilege to drive have increased the motivation to alter or counterfeit the DL/ID card. Therefore, this standard places great emphasis on improving the security requirements for these cards.

0.2 Interoperability

The AAMVA National Standard for the Driver License/Identification Card, AAMVA DL/ID-2000 did not require the use of any MRT on the DL/ID card. The AAMVA DL/ID-2000 provided instructions for the contents and format for a number of different types of MRT. A jurisdiction could choose one or more of these, or choose to have no MRT

© AAMVA 2016 All rights reserved xii at all. In addition, jurisdictions using the same MRT did not always interpret or implement the instructions in AAMVA DL/ID-2000 in the same manner. As a result of these variances, the desired level of interoperability was not achieved.

Jurisdictions that follow this standard will all implement a common MRT on their cards. In addition, much effort has been made to reduce confusion about the contents and format of the common MRT. Furthermore, space has been allotted in the layout for an additional MRT should a jurisdiction choose to have one on its card.

Jurisdictions are strongly encouraged to coordinate implementation efforts within the AAMVA community to resolve any interpretation issues and ensure a high level of commonality in their implementations.

0.3 Commonality (Uniformity) & Harmonization between Human and Machine Readable Data

Closely related to the issue of interoperability is the issue of commonality. AAMVA DL/ID-2000 did not provide guidance on the physical layout of the card. As a result, the graphic design and layout of DL/ID cards varied greatly from jurisdiction to jurisdiction. In addition, since jurisdictions rarely if ever replace all existing cards as soon as they begin issuing a card with a new design, variations have been possible even within a single jurisdiction. Some estimates place the number of design variations for valid DL/ID cards among AAMVA members well in excess of 200. This makes it extremely difficult for law enforcement, or anyone else, to recognize a valid license, especially if it comes from another jurisdiction. This standard calls for the use of a zoned layout that will increase the commonality of appearance of the cards from all jurisdictions.

The standard also employs the principle of harmonization (correlation) between human and machine readable data which means that there should be corresponding information as it relates to mandatory data elements.

This is at times not identical as names may require truncation in the human readable rendering but stored in their non-mandatory and non-applicable data should not be present on the card in any way (human or machine readable).

0.4 Security

AAMVA DL/ID-2000 provided only basic guidance in the area of security features that would prevent alteration or counterfeiting of the card. This standard provides a much more comprehensive set of requirements for the security features of the DL/ID card. Each jurisdiction will choose several other security features to address a variety of threats to the security of the card. To augment the guidance provided within this standard the CDS committee compiled and published a special guide that can be downloaded on the AAMVA website Secure Card Design Principles.

0.5 Replacement of AAMVA DL/ID 2013

This standard replaces the existing AAMVA North American Standard for the Driver License/Identification Card, AAMVA DL/ID-2013. Since at the time of publication of this standard and for some time after, many jurisdictions will continue to issue licenses based on AAMVA DL/ID-2013, that document will continue to be available.

However, when a jurisdiction develops new card designs, it should use this document for guidance instead of

AAMVA DL/ID-2013.

0.6 Conformity Assessment Testing/Courtesy Verification Program (CVP)

Conformity assessment is the name given to the processes that are used to demonstrate that a product (DL/ID) meets specified requirements. These requirements are contained in standards and guides. The processes that

© AAMVA 2016 All rights reserved xiii need to be followed to be able to demonstrate that they meet the requirements are also contained in ISO/IEC standards and guides.

The use of ISO/IEC standards in conformity assessment procedures allows for harmonization throughout the world and this, in turn, not only facilitates international interoperability between countries but also gives the purchaser of the product confidence that it meets the requirements.

The CVP provides an effective way for AAMVA members to determine if their driver's licenses and identification (DL/ID) cards conform to the applicable AAMVA standards and specifications. AAMVA strongly encourages its member jurisdictions to regularly take advantage of the CVP. Even though AAMVA has published best practices, standards and specifications covering DL/ID cards for years, inconsistencies in the implementation of those guidelines continue to occur. These inconsistencies adversely impact the interoperability that is the main goal of the AAMVA standard. A primary objective of the CVP is improving the consistency of implementation across all jurisdictions choosing to follow the AAMVA standard. Information gained from the testing of jurisdictions DL/ID cards and other documents is not only used by jurisdictions to improve their issuance systems but also is used by AAMVA to make improvements to the standards it publishes. For more information on the CVP please visit www.aamva.org.

0.7 Compatibility with ISO Standard for International Driver License

This standard generally follows the ISO/IEC 18013-1: ISO compliant driving license Part 1: Physical Characteristics and Basic Data Set; and, Part 2:Machine-readable technologies. The ISO standard (which was developed under leadership of the U.S.) specifies requirements for a card that is aligned with the UN Conventions on road traffic (covering among others domestic and international driving permits), and also addresses security and interoperability issues in general. Taking advantage of the investment already made by ISO in the ISO standard and of the international expertise embodied therein, this standard continues to move toward full compatibility with the ISO standard while at the same time making adaptations to accommodate local requirements. An example of such an adaptation is the specification of a vertical card format for a driver under the age of twenty-one (optional for Canada). As far as the regularly oriented card is concerned, this standard does not prevent a jurisdiction from designing a card that is compliant with this standard as well as with the ISO standard (thus enabling the jurisdiction to issue one document acting as both a State driver's license and as an international driving permit).

0.8

Since the publication of the AAMVA National Standard for the Driver License/Identification Card, AAMVA DL/ID- 2000 and the AAMVA International Standard for the Driver License/Identification Card, AAMVA DL/ID-2005, the REAL ID Act was signed into law on May 11, 2005 0 F

1 and the Department of Homeland Security (DHS) subsequently issued a regulation on the Acceptable by Federal Agencies for Official Purposes 1F

2. The AAMVA standard is consistent with the requirements identified in the DHS regulation. Through implementation of REAL ID Act the security of state-

(1) Information and physical security features that must be incorporated into each card;

1 See, Public Law 109 13, 119 Stat. 231, 302 (May 11, 2005) (codified at 49 U.S.C. 30301 note).

2 Federal Register / Vol. 73, No. 19 / Tuesday, January 29, 2008, pp. 5272-5340

© AAMVA 2016 All rights reserved xiv

(2) Specific ap States before a card can be issued;2F

(3) Verification of certain source documents provided by an applicant with the document issuing agencies;

and

(4) Issuance and physical security standards for locations where licenses and identification cards are issued.

(EDL) programs have been developed to provide U.S. (and Canadian) citizens with an alternative cross-border travel document that meets the requirements of the Western Hemisphere Travel Initiative (WHTI). The EDLs are being developed consistent with the requirements of REAL ID; the programs have some important similarities and distinctions. Similarities include:

EDLs can be used for official purposes, such as: accessing Federal facilities, boarding Federally-regulated commercial aircraft, or entering nuclear power plants.

EDLs will utilize the capabilities developed for REAL ID (such as the electronic verification of vital records and state-to-state verification of existing DLs/IDs) as they are implemented.

Both REAL ID licenses and EDLs include (1) information and security features that must be incorporated into each card; (2) specific application information to establish the identity and citizenship of an applicant before a card can be issued; (3) ability to verify certain source documents provided by an applicant with the document issuing agency where applicable; and (4) physical security standards for locations where licenses and identification cards are issued.

In order to be eligible for a REAL ID compliant license, the applicant must demonstrate proof of legal status in the U.S., to be eligible for an EDL the applicant must be a U.S. citizen.

The EDL serves as a limited-use international travel document, under the Western Hemisphere Travel Initiative (WHTI). ) that denotes both identity and citizenship. REAL ID compliant licenses may not be used for international travel.

An EDL includes a vicinity Radio Frequency Identification (RFID) chip to facilitate border crossing and verification by U.S. Customs and Border Protection (CBP) at a land or sea port of entry. REAL IDs are not prohibited from including this technology, but it is not a requirement.

An EDL also includes a machine readable zone (MRZ), which complies with travel document standards, to allow CBP officers to read the card electronically if RFID is not available. A REAL ID includes a 2D PDF417 bar .

3 EDLs are only issued to U.S. citizens by states or Canadian citizens by provinces.

© AAMVA 2016 All rights reserved xv

0.9 Interim/Temporary DL/IDs

Interim documents for jurisdictions using central issuance have run the spectrum from a secure document with physical security features and implied identification value on one end to a paper receipt on the other.

jurisdictions who iss -transaction which is acceptable for driving but not intended for identification. In the case of renewals/transfers, some jurisdictions return the expired/old crede individual can continue to use that credential for identification purposes until their new credential arrives. This practice, while customer-service friendly, creates the risk that an individual can hold and use two genuine identity credentials.

An additional consideration is that potential relying parties, like the Transportation Security Administration (TSA), have informed AAMVA that their policy will continue to be to not accept any interim documents as a valid form of identification. They also have a policy that they will accept an expired DL/ID for up to a year beyond the expiration for the purposes of identification and boarding a commercial airplane. This assumes that (in the case where a jurisdiction has returned a marked/punched card to the customer) it not interfere or obliterate the photo, human readable data, or PDF417 bar code. This further exacerbates the risk of an individual holding two genuine DL/IDs in that both could be valid for Federal identification purposes (one expired, one unexpired).

It is the recommendation of AAMVA to its members that they adopt/implement a process by which the interim document should be a receipt and not a secure document. Interim/Temporary documents should not contain security features, should not contain a photograph, and should be clearly branded to express that the document is meant as proof of a transaction only. In the case of driver licenses, it should reflect a privilege to operate a motor vehicle and should not be accepted for identification purposes beyond this one use case.

© AAMVA 2016 All rights reserved 1

Personal Identification AAMVA North American Standard DL/ID Card Design

1 Scope

This standard was developed by AAMVA for the production and use of government-issued driving license / identification card documents (DL/IDs). Private institutions and other organizations may benefit from DL/ID uniformity established by this standard, but the functional requirements are primarily for the benefit of issuing authorities and law enforcement.

This standard supersedes the UAAMVA DL/ID 2013 Standard. Requests for interpretation, suggestions for improvement, addenda, or defect reports are welcome. They should be sent to AAMVA Identity Management Program, 4301 Wilson Boulevard, Suite 400, Arlington, VA 22203.

A DL/ID is in conformance with this standard if it meets all mandatory requirements specified directly or by reference herein, including requirements contained in annexes A, B, C, and D. There are additional requirements of other standards as referenced in Annexes E, F, G, H, I and J that may be adopted by issuing authorities.

2 Reference(s)

The following documents contain provisions, which, through reference in this text, constitute provisions of this AAMVA standard or were consulted in the compilation of this standard. For dated references, subsequent amendments to, or revisions of, any of these publications do not apply. However, parties to agreements based on this standard are encouraged to investigate the possibility of applying the most recent editions of the normative documents indicated below. For undated references, the latest edition of the normative document referred to applies. Members of ISO and IEC maintain registers of currently valid International Standards.

European Commission Directive 2006/126/EC of 20 December 2006 O.J. EC No. L 403/18

European Commission Directive 2000/56/EC of 14 September 2000 O.J. EC No. L 237/45

European Union Council Directive 97/26/EC of 2 June 1997 O.J. EC No. L 150/41

European Union Council Directive 96/47/EC of 23 July 1996 O.J. EC No. L 235/1

European Union Council Directive 91/439/EC of 29 July 1991 O.J. EC No. L 237/1

TS EN 15480-1, ECC-1 Identification Card Systems European Citizen Card

AAMVA D-20: Data Element Dictionary Traffic Records System

ANSI INCITS 385: Digital Image Attributes, Face Interchange Format (Human and Automated)

ISO 1073-2:1976: Alphanumeric character sets for optical recognition -- Part 2: Character set OCR-B -- Shapes and dimensions of the printed image

ISO 1831: Printing Specifications for Optical Character Recognition

© AAMVA 2016 All rights reserved 2

ISO/IEC 7810: Identification cards - Physical characteristics

ISO/IEC 7811: Identification cards Recording Techniques

ISO/IEC 7812: Identification cards Registration Numbers

ISO/IEC 7816: Identification cards Integrated Circuit Cards

ISO 8601:2004: Data elements and interchange formats -- Information interchange -- Representation of dates and times

ISO/IEC 10373: Identification cards - Test methods

ISO/IEC 10918: JPEG 2000

ISO/IEC 11693: Identification cards Optical Memory General Characteristics

ISO/IEC 11694: Identification cards Optical Memory Linear Recording Method

ISO/IEC 14443: Identification cards Contactless Integrated Circuit Cards Proximity Cards

ISO/IEC 15415: Information technology Automatic identification and data capture techniques Bar code symbol print quality test specification Two dimensional symbols

ISO/IEC 15438: Automatic Identification and Data Capture Techniques International Two-dimensional Symbology Specification PDF417

ISO/IEC 18013-1: ISO compliant driving licence Part 1: Physical Characteristics and Basic Data Set

ISO/IEC 18013-2: ISO compliant driving licence Part 2: Machine-readable technologies

ISO/IEC 24789: Identification cards Card Service Life

ANSI/ASQZ Z1.4: Military standard, sampling procedures and tables for inspection by attributes

MIL-L-61002 Labels, Pressure Sensitive Adhesive, for Bar-Codes and other Markings

UN Convention on Road Traffic (Geneva 19 September 1949), amended 22 October 1964

UN Convention on Road Traffic (Vienna 8 November 1968), Amendment 1 amended 3 September 1993 (E/CONF.56/16/REV.1/Amend.1)

ICAO 9303 Part 3 - Machine Readable Official Travel Documents, Volume 1 MRtds with Machine Readable Data Stored in Optical Character Recognition Format, Third edition 2008

EPC Tag Data Standard (Available from www.gs1.org/gsmp/kc/epcglobal/tds/)

EPC Generation 2 Air Interface Specification (Available from http://www.gs1.org/gsmp/kc/epcglobal/uhfc1g2/)

3 Term(s) and definition(s)

For the purposes of this AAMVA standard, the terms and definitions given in the following apply:

© AAMVA 2016 All rights reserved 3

3.1 alphabetic (A) alpha characters/letters from A to Z and a to z

3.2

ANS

any combination of A, N, or S characters

3.3 cardholder an individual to whom a driver license or identification card is issued

3.4 country distinguishing sign abbreviation used on the license document (human-readable) for countries that issue driver licenses describes a section of the standard that provides supplementary information intended to assist in the understanding and use of this standard

3.5 customer record Information pertaining to the cardholder that is stored in a jurisdiction database. Such records commonly include biographical and demographical data, address information, driving privileges, traffic convictions, driving restrictions, and information from prior jurisdictions of record. Customer records may also be linked to vehicle registration data.

3.6 data element an item of data that may appear on the license in either human or machine-readable form

3.7 digital any data that is composed of a discrete sample or collection of discrete samples that are represented as finite numbers

3.8 document recognition the educational knowledge and ability to recognize the validity of the driver license card of both national and international jurisdictions including data elements, formatting, visual images (e.g. photo image, signature), electronic readable features and document security features

3.9 driver license (DL) A document issued to a driver license cardholder by a driver license issuing authority, or their designated agent, granting the individual the right or privilege to operate a motor vehicle within its jurisdiction. The document may facilitate driver license transactions and provide input data for such transactions. This issued document incorporates several elements and qualifications regarding the driver license cardholder: positive identification of the individual applicant; evidence of knowledge of laws and practices; practical driving proficiency in specific motor vehicle class categories; and, the individual's health and driving privilege restrictions (e.g. corrective eye lenses) and endorsements enabling special or extra categories of driving privileges.

© AAMVA 2016 All rights reserved 4

3.10

DL/ID

refers generally to both or either driver licenses (DL) and identification cards (ID)

3.11

EDL

enhanced driver license

3.12 first line inspection (level 1) examination done without tools or aids that involves easily identifiable visual or tactile features for rapid inspection at point of usage

3.13 human-readable data or information that is printed or engraved that is visually present on a driver license

3.14 identification card (ID) a card issued to a person whose identity is verified in the same manner as required for the issuance of a driver license by a licensing authority for identification purposes only, excluding other identification provided by the issuing authority, such as state employee identification, senior citizen cards, handgun permits, etc.

3.15 image digital data that represents the visual likeness of its subject, such as a portrait, finger print, or signature. Images may be collected, stored, and rendered for visual inspection using a variety of digital formats

3.16 informative describes a section of the standard that provides supplementary information intended to assist in the understanding and use of this standard

3.17 issuing authority a statutorily authorized agent organization that issues driver licenses and/or identification cards such as a Ministry of Transport, Department of Motor Vehicles, or Police Agency

3.18 machine-readable technology (MRT) machine-readable mediums, such as a magnetic stripe, bar code, optical memory, or integrated circuit card that carry data

3.19 mutual recognition agreements reciprocal agreements between governments of two nations, regions, states, provinces, or territories for the right of its citizens to drive an eligible vehicle in each others jurisdictions without the requirement of undergoing additional practical and/or written testing

3.20 non-portrait side of card the opposite face from the portrait side

© AAMVA 2016 All rights reserved 5

3.21 normative describes a section of the standard that is mandatory and must be implemented in the prescribed way for compliance

3.22 numeric (N) digits 0 to 9

3.23 portrait side of card face of the card carrying visual information containing the reproduction of the portrait of the cardholder and cardholder identifiers

3.24 second line inspection (level 2) examination that requires the use of a tool or instrument (e.g., UV light, magnifying glass, or scanner) to discern

3.25 third line inspection (Level 3) inspection by forensic specialists conducting detailed examination that allows for more in-depth evaluation and may require special equipment to provide true certification

3.26 visual special characters (S)

- . / : ; < = > ? [ \ ual special characters do not include characters used as delimiters between data elements in a machine-readable technology

4 Human-readable data elements

4.1 Data element tables

Table 1 in section 4.2 describes the mandatory data elements that must visually appear on DL/ID documents.

Jurisdictions may go beyond these minimum mandatory requirements, as long as each mandatory requirement is met. Table 2 in section 4.3 describes optional data elements that may visually appear on DL/ID documents.

Jurisdictions may include additional data elements and features on their compliant DL/ID document.