NPSBN_Section_J-14_Terms_of_Reference_AMEND_008_(1).pdf

Solicitation No. D15PS00295 – Section J, Attachment J-14 Terms of Reference

Page J-14 – i

Table of Contents

1 Document Overview

2 Terms of Reference

Page J-14 – 1

1 Document Overview

This document contains the terms of reference that FirstNet may use in the solicitation and associated documents. In the case of any conflict in terms used throughout this RFP, the terms of reference set forth in this Section J Attachment J-14 Terms of Reference shall take precedence in resolution.

2 Terms of Reference

Term Definition

3GPP The 3rd Generation Partnership Project (3GPP) is a collaboration among telecommunications associations known as the Organizational Partners. The initial scope of 3GPP was to make a globally applicable third-generation (3G) mobile phone system specification based on evolved Global System for Mobile Communications (GSM) specifications within the scope of the International Mobile Telecommunications- 2000 project of the International Telecommunication Union. The scope was later enlarged to include the development and maintenance of:

GSM and related 2G and 2.5G standards, including GPRS and EDGE UMTS and related 3G standards including HSPA Long Term Evolution and related 4G standards An evolved IMS developed in an access-independent manner

ABAC Attribute-based access control defines an access control paradigm whereby access rights are granted to users through the use of policies that combine attributes together.

The policies can use any type of attributes (e.g., user attributes, resource attributes, environment attributes).

Access Class Barring

Within, 3GPP, Access Class Barring requires that the user equipment be a member of at least one Access Class that corresponds to the permitted classes as signaled over the air interface.

ADNSF Access network discovery and selection function is an entity within an evolved packet core (EPC) of the system architecture evolution (SAE) for 3GPP compliant mobile networks. The purpose of the ANDSF is to assist user equipment (UE) to discover non- 3GPP access that can be used for data communications in addition to 3GPP access networks (such as HSPA or LTE) and to provide the UE with rules policing the connection to these networks.

Analog Analog refers to anything relating to or using signals or information represented by a continuously variable physical quantity such as spatial position or voltage.

API An Application Programming Interface specifies a software component in terms of its operations, inputs, outputs, and underlying types. It is used to provide a basis for accessing, controlling, or utilizing the component.

APN An Access Point Name is the name of a gateway between a GPRS, 3G, or 4G mobile network and another computer network, frequently the public Internet. A mobile device making a data connection must be configured with an APN to present to the carrier. The carrier will then examine this identifier to determine what type of network connection should be created—for example, which IP addresses should be assigned to the wireless device; which security methods should be used; and how, or if, it should be connected to a private customer network.

Page J-14 – 2

Term Definition

Application An application is a software program or group of programs designed to perform an activity or enterprise function. Applications can exist on mobile devices, workstations, or servers. General-purpose applications include items such as database programs, word processors, Web browsers, and spreadsheets. Applications for public safety users address topics such as situational awareness, incident management, and interoperable communications.

Applications Ecosystem

An innovative set applications along with the supporting ecosystem, such as a development and testing environment, an app store, and vibrant developer community.

ARP Allocation Retention Priority specifies the relative importance compared to other Radio access bearers for allocation and retention of the radio access bearer.

ATIS The Alliance for Telecommunications Industry Solutions is a standards organization that develops technical and operational standards and solutions for the information and communications technology industry.

AVL Automatic Vehicle Location systems typically locate and track vehicles using GPS, and the transmission mechanism is SMS, GPRS, a satellite, or terrestrial radio from the vehicle to a radio receiver. This data, from one or more vehicles, may then be collected by a vehicle tracking system for a picture of vehicle travel.

Backhaul In the NPSBN, the backhaul portion of the network comprises the links from the cell sites (eNodeBs) to the Offeror-defined consolidation/aggregation points for the transport network which will in-turn carry that traffic to the core.

Band 14 A commercial Long Term Evolution frequency range of 20 (10 X 10) MHz of spectrum in the 700 MHz band dedicated to public safety. Specifically, 788 – 798 MHz for the uplink (handset/UE transmit) and 758 – 768 for the downlink (base station transmit).

BSS Business support systems are the components that a telecommunications service provider (or telco) uses to run its business operations towards customers. Together with operational support systems, they are used to support various end-to-end telecommunication services (e.g., telephone services).

BYOD Bring Your Own Device is the practice of allowing users to utilize a personally selected and purchased client device to execute applications and access data. Typically, it spans laptops, smartphones and tablets, but the strategy may also be used for other devices.

CAD Computer Aided Dispatch typically consists of a suite of software packages used to initiate public safety response, dispatch, and to maintain the status of responding resources in the field. It is generally used by emergency communications dispatchers, call-takers, and 911 operators in centralized, public-safety call centers, as well as by field personnel.

CALEA Communications Assistance for Law Enforcement Act is the United States wiretapping law passed in 1994, during the presidency of Bill Clinton (Pub. L. No. 103-414, 108 Stat. 4279, codified at 47 USC 1001-1010). CALEA's purpose is to enhance the ability of law enforcement agencies to conduct electronic surveillance by requiring that telecommunications carriers and manufacturers of telecommunications equipment modify and design their equipment, facilities, and services to ensure that they have built-in surveillance capabilities, allowing federal agencies to wiretap any telephone traffic; it has since been extended to cover broadband internet and VoIP traffic.

CAR A Corrective Action Report is a written request used to originate a corrective action. It is used as a response to a defect with the intent to eliminate the problem from occurring again. The main objective of a CAR is to initiate a root cause analysis and request a resolution to prevent recurrence.

CATL CTIA Authorized Test Labs is a device-testing laboratory that meets the Policies and Procedures for CTIA Authorized Testing Laboratories, Revision 1.4 August 2015 and is listed as such by the CTIA.

Page J-14 – 3

CJIS Criminal Justice Information Services is a repository of information operated by the FBI containing crime data such as records and non-crime data such as fingerprints as well as a variety of other information of use to law enforcement.

CLA A Covered Leasing Agreement as defined under the Act at 47 U.S.C. 1422(b)(1) as further interpreted by FirstNet’s Final Interpretations of Parts of the Middle Class Tax Relief and Job Creation Act of 2012 [Docket Number: 140821696-4696-01], published October 20, 2015. The terms of the CLA shall be incorporated into the Covered Agreement resulting from this RFP.

CLA User See Secondary User

Client Server Application

A Client Server Application is one that has a user interface (UI) on the UE but requires a network interface to servers to performs many/most of its essential functions

Client-Only Application

A Client-only Application is one that runs on the UE and requires no network connection to perform all of its essential functions

CMAS Commercial Mobile Alert System is an alerting network in the United States designed to disseminate emergency alerts to mobile devices such as cell phones and pagers.

Now known as WEA.

CO Contracting Officer is a person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings

COML The Communications Unit Leader heads the communications unit and is responsible for integrating communications and ensuring that operations are supported by communications.

Contractor The awardee of the Covered Agreement resulting from this RFP.

COR The Contracting Officer’s Representative is an individual, including a Contracting Officer’s Technical Representative, who is designated and authorized in writing by the Contracting Officer to perform specific technical or administrative functions

Core The Core Network as defined under the Act at 47 U.S.C. 1422(b)(1) as further interpreted by FirstNet’s Final Interpretations of Parts of the Middle Class Tax Relief and Job Creation Act of 2012 [Docket Number: 140821696-4696-01], published October 20, 2015.

COTR Contracting Officer Technical Representative is a business communications liaison between the United States government and a private contractor. See COR.

COTS Commercial Off The Shelf refers to software that can be purchased or licensed that contains all or most of the functionality required by the customer. COTS software often times requires configuration and/or customization to bridge the gap between what is received from the vendor to reach the 100% of functionality.

Coverage The geographic area where a base station and mobile device can reliably communicate with each other above a minimum designed data rate.

Covered Agreement

The agreement that ultimately results from this RFP, which covers all terms and conditions related to the deployment and operation of the NPSBN, including those terms regarding spectrum capacity usage.

COWs A Cell On Wheels is a mobile cell site that consists of a cellular antenna tower and electronic radio transceiver equipment on a truck or trailer, designed to be part of a cellular network. COWs are used to provide expanded cellular network coverage and/or capacity at special events such as major sporting events, or in disaster areas where cellular coverage either was never present (e.g., in a wilderness area) or was compromised by the disaster (e.g., in the Gulf Coast after Hurricane Katrina).

CPARS Contractor Performance Assessment Reporting System is a web-enabled application that collects and manages the library of automated CPARs. A CPAR assesses a contractor's performance and provides a record, both positive and negative, on a given contractor during a specific period of time.

http://en.wikipedia.org/wiki/Cell_site http://en.wikipedia.org/wiki/Radio_antenna http://en.wikipedia.org/wiki/Radio_masts_and_towers http://en.wikipedia.org/wiki/Electronics http://en.wikipedia.org/wiki/Radio http://en.wikipedia.org/wiki/Transceiver http://en.wikipedia.org/wiki/Truck http://en.wikipedia.org/wiki/Mobile_home http://en.wikipedia.org/wiki/Cellular_network

Page J-14 – 4

CRM Customer Relationship Management is formal approach to managing an organization’s interaction with current and future customers. It often involves using information technology to organize, automate, and synchronize sales, marketing, customer service, and technical support activity.

CTIA The Wireless Association, originally known as the Cellular Telephone Industries Association, is an international industry trade group representing all wireless communication sectors including cellular, personal communication services, and enhanced specialized mobile radio.

Customer Life- Cycle Management

The functions associated with providing the full suite of customer lifecycle activities required to service Public Safety customers effectively including, but not limited to, product and services sales and distribution, marketing, customer care, billing, product management, product development, end-user device logistics, churn mitigation, and special pricing support.

Customer- Facing Web- Based Portal

The customer-facing Web-based portal is a set of Web pages where Nationwide Public Safety Broadband Network subscribers can view and purchase services plans, devices, etc.

Cybersecurity Incident

Any malicious act or suspicious event that (1) compromises, or was an attempt to compromise, the electronic security perimeter or physical security perimeter of a critical cyber asset, or (2) disrupts, or was an attempt to disrupt, the operation of a critical cyber asset where a critical cyber asset is any hardware, firmware, software, or related component or subcomponent critical to the operational and functional capability of the cyber system in question.

DAST Dynamic Analysis Security Testing encompasses the technologies and tools that are used for security vulnerabilities when the applications are being executed.

DDoS Distributed Denial of Service is where the attack source is more than one – and often thousands – of unique IP addresses.

Delivery Mechanism for State Plans

The delivery mechanism for state plans is a state plan Web-based online delivery tool that will house the details of all sections of the state plan, with mediated and secure access, and will be the means by which each state reviews its state plan.

Deployable Transportable equipment principally in a vehicle to provide network services to users when augmenting network capacity or coverage is required for planned or unplanned events. Intended primarily for remote and wilderness areas where little infrastructure exists or areas where existing infrastructure has been compromised.

Device(s) A device accesses the network, and may be as simple as a small modem for machine-to-machine use or as complex as a smartphone or tablet. Devices can provide direct interfaces for first responders, such as a smartphone would, or they can be a gateway to the network for another device, such as the modems in vehicles that let mobile data terminals access the network.

DHS Department of Homeland Security is a cabinet department of the United States federal government with the primary responsibilities of protecting the territory of the United States and protectorates from and responding to terrorist attacks, man-made accidents, and natural disasters.

DIVV Device Independent Verification and Validation is the process by which FirstNet envisions ensuring devices allowed on the Nationwide Public Safety Broadband Network are in compliance and meet the needed performance for Public Safety focused features and functions. This is similar to what is known as carrier acceptance testing in industry.

DM Device Management is a system of client/server applications that allows an enterprise to remotely control, lock, and enforce security policies on the devices on their network.

Mobile Device Management is the same term.

Page J-14 – 5

DOC Department of Commerce is a cabinet department in the U.S. Government that supports and promotes business, trade and commerce.

DoS Denial of Service is an attack that attempts to make a machine or network resource unavailable to its intended users, such as to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet.

DRA Diameter Routing Agent is a functional element that ensures that all Diameter sessions for a certain IP connectivity access network IP-CAN session reach the same PCRF when multiple and separately addressable PCRFs have been deployed in a Diameter realm.

DSCP Differentiated Services Code Point is a computer networking architecture that specifies a simple, scalable, and coarse-grained mechanism for classifying and managing network traffic and providing QoS on modern IP networks. DiffServ can, for example, be used to provide low-latency to critical network traffic such as voice or streaming media while providing simple best-effort service to non-critical services such as web traffic or file transfers.

eICIC Enhanced Inter cell Interference Coordination is defined in 3GPP Rel 10

Embedded Application

An embedded application is included in the native OS of the UE. An embedded application often provides a UI for a lower level function within the device but may also be a client-only (calculator) or client-server (PTT client).

eMBMS Evolved Multimedia Broadcast Multicast Service is the LTE version of MBMS.

EMS An Element Management System manages one or more of a specific type of telecommunications network element. Typically, an EMS is produced and distributed by a manufacturer to manage one or more of their products. EMS has another definition so use of the acronym is avoided.

EMS Emergency Medical Services is a major category of Public Safety users focused on health and welfare services. EMS is often a part of Fire and Rescue services. EMS has another definition so use of the acronym is avoided.

eNB Enhanced Node Base station or eNodeB is base station hardware connected to the mobile network that communicates directly with mobile devices; this is similar to a Base Transceiver Station (BTS) in GSM networks. Traditionally, a Node B has minimum functionality, and is controlled by an RNC (Radio Network Controller).

However, with an eNB, there is no separate controller element. This simplifies the architecture and allows faster response times.

Enhanced LTE Public Safety Grade Voice Telephony

Enhanced LTE Public Safety Grade voice telephony refers to VoLTE on a Public Safety Grade network with the added capabilities of QPP and secure applications. It may also include enhancements (as described in Section J, Attachment J-8, IOC/FOC Target Timeline, Section 3.3.2.1, Services) for 3GPP Releases 13 and 14 that are expected to be implemented by the Offeror.

EPC Evolved Packet Core. The main component of the SAE architecture is the EPC, also known as SAE Core. The EPC will serve as the equivalent of GPRS networks (via the MME, S-GW, and P-GW subcomponents).

EPS Evolved Packet System (EPS). Introduced with 3GPP Release-8 with SAE, the EPS is the central network portion of the LTE mobile communication system. The packet system primarily transfers packet data between edge networks and the Radio Access Network.

E-RAB E-UTRAN Radio Access Bearer (E-RAB) uniquely identifies the concatenation of an S1 Bearer and the corresponding Data Radio Bearer. When an E-RAB exists, there is a one-to-one mapping between this E-RAB and an EPS bearer of the Non Access Stratum.

Page J-14 – 5.1

ERP ERP is Effective Radiated Power. It is the power supplied to an antenna multiplied by the antenna gain in a given direction.

ESInet The NG911 vision relies on 911-specific application functionality on an Emergency Services IP Network (ESInet) to deliver voice, video, text, and data “calls” to the Public Safety Answering Point.

Excess Network Capacity

Excess network capacity is defined as capacity not used by Public Safety Entities (PSEs). Under the Act, FirstNet may receive payment for its use.

Page J-14 – 6

Extended Primary User Group

The extended primary user group consists of other PSE users—beyond law enforcement, fire, and emergency medical services.

FAR Federal Acquisition Regulation is the principal set of rules in the Federal Acquisition Regulation System. The FAR System governs the "acquisition process" by which the United States federal government purchases (acquires) goods and services.

FCAPS Fault, Configuration, Accounting, Performance and Security is the ISO Telecommunications Management Network model and framework for network management.

FCC Federal Communications Commission is the U.S. government agency with general regulatory authority over elements of the communications industry.

FCC TAB RMTR The Act established within the FCC an advisory board to create minimum interoperability requirements for the NPSBN. The Technical Advisory Board (TAB) for First Responder Interoperability issued these requirements in 2012 in a report entitled Recommended Minimum Technical Requirements to Ensure Nationwide Interoperability for the Nationwide Public Safety Broadband Network (FCC TAB RMTR). References to the FCC TAB RMTR throughout this RFP refer to the original report adopted on June 21, 2012, by the FCC and the associated clarification issued by the TAB and received by the FCC on June 6, 2012. This is also referenced in the FCC’s transmittal on June 21, 2012.

FEMA The Federal Emergency Management Agency is an agency of the Department of Homeland Security whose mission is to support citizens and first responders to build, sustain, and improve the capability to prepare for, protect against, respond to, recover from, and mitigate all hazards.

FICAM Federal Identity, Credential, and Access Management comprises the programs, processes, technologies, and personnel used to create trusted digital identity representations of individuals and non-personnel entities (NPEs), bind those identities to credentials that may serve as a proxy for the individual or NPE in access transactions, and leverage the credentials to provide authorized access to an agency’s resources.

FIDO Fast Identity Online Alliance is an industry consortium to address the lack of interoperability among strong authentication devices and the problems users face creating and remembering multiple usernames and passwords.

FIPS The Federal Information Processing Standard (FIPS) Publication is a U.S. government computer security standard used to accredit cryptographic modules. The National Institute of Standards and Technology issued the FIPS Publication Series to coordinate the requirements and standards for cryptography modules that include both hardware and software components.

FirstNet The First Responder Network Authority is an independent government authority with a mandate to ensure the deployment and operation of the national public safety broadband network (NPSBN).

FirstNet- Deployed RAN

A FirstNet-deployed RAN refers to a Radio Access Network (RAN) that FirstNet is responsible for deploying. This occurs when a state or territory does not elect, or is not authorized, to conduct its own deployment of a RAN in such state or territory in accordance with 47 U.S.C. 1442(e)(2)(A).

FOB Free On Board refers to the point at which the seller transfers ownership of goods to the buyer.

FOC Final Operational Capability is the activity has reached full maturity with all users able to exercise all intended capabilities as defined in the applicable statement(s) of work.

GB A gigabyte is a unit of computer information equal to 1,073,741,824 bytes.

Page J-14 – 7

GBR Guaranteed Bit Rate is used to ensure that bearer traffic in LTE networks is appropriately handled; a mechanism is needed to classify the different types of bearers into different classes, with each class having appropriate QoS parameters for the traffic type. Examples of the QoS parameters include GBR or non-GBR, Priority Handling, Packet Delay Budget and Packet Error Loss rate. This overall mechanism is called QCI.

GCSE Group Communication System Enablers. These support group communication service intended to provide a fast and efficient mechanism to distribute the same content to multiple users in a controlled manner.

GFIPM GFIPM is a resource for information about the Global Federated Identity and Privilege Management program, which seeks to develop secure, scalable, and cost-effective technologies for information sharing within the law enforcement and criminal justice communities.

Government The United States Government. When used in this RFP, it shall also refer to FirstNet or DOI ACQ, as appropriate given the context, as the representative of the United States Government responsible for this RFP.

GPRS General packet radio services, a technology for radio transmission of small packets of data, especially between mobile phones and the Internet.

GPS Global Positioning System. A space-based navigation system that provides location and time information in all weather conditions, anywhere on or near the Earth where there is an unobstructed line of sight to four or more GPS satellites.

GSMA GSMA is the current name for the industry group that defines mobile network operator business and technical practices. It originally stood for Groupe Speciale Mobile Association.

GWCN Gateway Core Network. A network sharing configuration in 3GPP in which the MME is also shared by the core network operators (in addition to the RAN, as in MOCN).

HetNet Heterogeneous networks (HetNet) leverage macro cells, small cells, and integrated Wi- Fi network elements to extend coverage, handoffs, and interference mitigation between network elements to deliver a seamless mobile experience

HIPAA HIPAA is the Health Insurance Portability and Accountability Act of 1996 which defines how covered entities use individually-identifiable health information or the PHI (Personal Health Information).

HSS The Home Subscriber Server in the EPC, it is the user database that stores subscription related information to support other call control and session management entities.

Hybrid Application

A Hybrid application is one that is both a client only and a client server application.

However, when running without an internet connection it may perform only a subset of its complete functional scope, but is still useful to some degree in this operational mode.

IaaS Infrastructure as a Service - The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).

IAST Interactive Analysis Security Testing is the combination of SAST and DAST on finding and mitigating software vulnerabilities in real-time.

ICAM Identity, Credential, and Access Management is a framework for standardizing and integrating the management of identity information, credentials, and secure access to buildings, networks, and information technology systems.

Page J-14 – 8

ICS The Incident Command System (ICS) is a standardized approach to the command, control, and coordination of emergency response providing a common hierarchy within which responders from multiple agencies can be effective. ICS consists of a standard management hierarchy and procedures for managing a temporary incident of any size.

IdaaS Identity-as-a-Service is a cloud-based solution for operating the information resources required by an organization specifically related to identity management of an organization.

IMS IP Multimedia Subsystems is an architectural framework for delivering IP multimedia to mobile users. It was originally designed by the wireless standards body 3GPP, and is part of the vision for evolving mobile networks beyond GSM. IMS has another definition as well, so usage is generally avoided in the RFP documents.

IMS Integrated Master Schedule. IMS has another definition as well, so usage is generally avoided in the RFP documents.

IMSI International Mobile Subscriber Identity (IMSI) identifies the SIM card on a 3GPP network. The IMSI maximum length is 15 digits, and is physically stored on the SIM card. The IMSI specification includes the mobile country code, mobile network code, and mobile station identification number.

Inherently Governmental

An inherently governmental function is defined as any function related to the public interest that mandates performance by government employees.

Interoperability Board Report

Recommendations of a panel created by the Federal Communications Commission concerning specifications and technical requirements for the Nationwide Public Safety Broadband Network. Also referred to as the TAB report or the FCC TAB RMTR..

IOC Initial Operational Capability is the state achieved when a capability is available in its minimum usefully deployable form as defined in the statement of work.

IOPS Isolated E-UTRAN Operation for Public Safety

IoT Internet of Things is the network of physical objects or "things" embedded with electronics, software, sensors, and network connectivity, which enables these objects to collect and exchange data.

IPAWS Integrated Public Alert and Warning System. A planned modernization and integration of the United States emergency population warning systems.

ISDN Integrated Services for Digital Network is a set of communication standards for simultaneous digital transmission of voice, video, data, and other network services over the traditional circuits of the public switched telephone network.

ISO International Organization for Standardization is responsible for the ISO 9000, ISO 14000, ISO 27000, ISO 22000 and other international management standards.

ISP Internet Service Provider

IVR An In-Vehicle Router is a device that resides in public safety vehicles, including cars (e.g., police car trunks) or fire apparatus (e.g., trucks) and supports mobile data modems/service connectivity to one or more mobile operators. It can route traffic across different modems in real time, as network coverage and connectivity change.

KPI A Key Performance Indicator is a measurable value that demonstrates how effectively a telecommunications system is achieving key performance objectives. Most telecommunications systems capture, calculate, and record performance statistics for use in managing the system; a subset of these performance metrics are classified as

KPI.

LMR Land Mobile Radio. A wireless communications system intended for use by users in vehicles (mobiles) or on foot (portables). Such systems are used by emergency/first responder organizations, public works organizations, or companies with large vehicle fleets or numerous field staff.

Page J-14 – 9 Amendment 008

LOA Levels of Assurance are defined by the National Institute of Standards and Technology Special Publication 800-63-2, which details requirements for each of the LOAs in the areas of identity proofing, registration, tokens, management processes, authentication protocols, and related assertions.

Local Control Local control refers to a collection of capabilities that allow a PSE to influence and control its relationship with the NPSBN.

Local Control Application

A local control application is a specific software application that provides functions for authorized users of a PSE to directly manage elements of its NPSBN environment, including users; devices; roles; profiles; and Quality of Service, priority, and preemption.

Local Control of Business Processes

Local control of business processes refers to ancillary business processes that are part of local control but do not have a computer application to support them (e.g., planned event planning, maintenance window coordination).

Local Control of QPP Local control of QPP refers to a specific function within the local control application that permits an authorized user to raise or lower the Quality of Service, priority, and preemption (QPP) level of other users within its QPP region.

Local Control QPP Region

Local control QPP region refers to a specific set of cell towers over which an authorized local control user can exercise QPP authority. QPP regions may overlap.

Locked Application A locked application is a pre-installed or embedded application that is installed on the phone in a manner that prevents the user from deleting or disabling it. Not all pre-installed applications are locked; this often occurs at the request of the carrier when specifying details of the purchase of devices.

LPPa LTE – Positioning Protocol A

LTE Long Term Evolution is a standard for wireless communication of high-speed data for mobile phones and data terminals. Commonly marketed as “4G LTE,” the standard is developed by the 3GPP (3rd Generation Partnership Project) and is specified in 3GPP’s Release 8 document series with enhancements described in later releases.

M2M Machine-To-Machine , also called the Internet of Things or IoT, is an application-specific set of technologies that allow both wireless and wired systems to communicate with other devices—frequently ones of the same type. Examples of M2M networks include automated meter reading and closed circuit video.

MAM Mobile application management describes software and services responsible for provisioning and controlling access to internally developed and commercially available mobile apps used in business settings on both company-provided and “bring your own” smartphones and tablet computers.

MBMS Multimedia Broadcast/Multicast Service is a point-to-multipoint service in which data is transmitted from a single source entity to multiple recipients. Transmitting the same data to multiple recipients allows network resources to be shared. The MBMS bearer service offers two modes: broadcast mode and multicast mode.

MC-PTT Mission-Critical Push-To-Talk is a standards-based voice capability over LTE defined by 3GPP. As defined by 3GPP, MC-PTT is an enhanced PTT service that includes features such as group, private, broadcast, emergency, and immediate peril calls.

MCS Modulation and Coding Scheme is used to specify which of the different modulation and coding schemes is being applied.

MCU --- No longer used in this RFP. Refer to VNS below. ----

Page J-14 – 9.1

MDM Mobile Device Management is the administrative area dealing with deploying, securing, monitoring, integrating and managing mobile devices, such as smartphones, tablets and laptops, in the workplace. The intent of MDM is to optimize the functionality and security of mobile devices within the enterprise, while simultaneously protecting the corporate network. See Device Management or DM.

Page J-14 – 10 Amendment 008

Middle Class Tax Relief and Job Creation Act of 2012

Pub.L. 112–96, H.R. 3630, 126 Stat. 156, enacted February 22, 2012, with the portions of Title VI related to FirstNet codified at 47 U.S.C. §§ 1401-1457. This Act is FirstNet’s enabling legislation. Referred to throughout this RFP as the “Act.”

MIL-STD and MIL-

STD 810

A United States Military Standard that emphasizes tailoring equipment’s environmental design and test limits to the conditions that it will experience throughout its service life. Public safety user devices today nearly always require compliance with MIL-STD durability and environmental guidelines found in MIL-

STD-810.

MIMO Multiple Input, Multiple Output is the use of multiple transmitters and receivers (multiple antennas) on wireless devices for improved performance.

MIS A Management Information System produces fixed, regularly scheduled reports based on data extracted and summarized from the firm’s underlying transaction processing systems for a defined set of users to support and inform structured and semi-structured performance analysis and decision making.

Mission Critical Any factor of a system (equipment, process, procedure, software, etc.) whose failure will result in the failure of mission operations.

Mission-Critical Infrastructure

Mission-critical infrastructure refers to systems and assets, whether physical or virtual, so vital to the United States that the incapacity or destruction of such systems and assets would have a debilitating impact on security, national economic security, national public health or safety, or any combination of those matters.

Mission-Critical Services

Mission-critical (MC) services comprises the following services for public safety as they become available in the 3GPP standards: MC-Voice (including MC-Push-to- Talk), MC-Data, and MC-Video and the key support services of enhanced Multimedia Broadcast Multi-cast Services (eMBMS), Group Communication System Enablers (GCSE), and Proximity Services (ProSe).

MLS The Mobile Location Protocol is an application-level protocol for receiving the position of Mobile Stations (e.g., mobile phones, wireless devices) independent of underlying network technology.

MME A key node in the EPC, the Mobility Management Entity is responsible for high-level security functions (such as authentication) and manages mobility of the UE while in idle state. It also determines the characteristics of the EPS bearer, based on the requested service and QoS requirements.

MOCN Multi-Operator Core Network is a network-sharing configuration in 3GPP in which only the RAN is shared.

MRC Monthly Recurring Charge is a type of billing arrangement whereby the user may consume as much of a service as they wish for a fixed, automatically recurring fee applied to the bill.

MRD Marketing Requirements Document is an initial specification typically created by a business unit that documents from the users perspective “what” features and functionality is required by the business.

MVNO A Mobile Virtual Network Operator is a wireless communications services provider that does not own the wireless network infrastructure over which it provides services to its customers. An MVNO enters into a business agreement with a mobile network operator to obtain bulk access to network services at wholesale rates, and then sets retail prices independently. An MVNO may use its own customer service, billing support systems, marketing and sales personnel.

mVPN A mobile Virtual Private Network is the device resident software that allows the user to establish a secure data session to sensitive data. Similar to the traditional wireline VPN, but for a mobile device.

Page J-14 – 11

Native Code Native Code refers to an application or service written at the OS level, often in a programming language specific to the OS/Vendor and that may benefit from APIs that are specific to that OS or UE vendor.

NIEF The National Identity Exchange Federation is a collection of agencies in the United States that have come together to share sensitive law enforcement information.

NIEF provides a basic infrastructure consisting of governance, policies and procedures, cryptographic trust, and open standards for securely sharing identity information about users and non-user (system) entities.

NIMS The National Incident Management System is a proactive approach to guide government departments and agencies, nongovernmental organizations, and the private sector to manage incidents involving all threats and hazards—regardless of cause, size, location, or complexity—in order to reduce loss of life, property and harm to the environment.

NIST National Institute of Standards and Technology is a non-regulatory agency of the United States Department of Commerce whose mission is innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. NIST standards related to cyber security, software quality, and mobile communications, among others, are employed by FirstNet.

NLETS National Law Enforcement Telecommunications System is a network for the exchange of law enforcement, criminal justice, and public safety-related information.

NPSBN FirstNet’s mandate, as legislated in the Act, is to ensure the establishment of a Nationwide Public Safety Broadband Network based on a single, national network architecture.

NTIA National Telecommunications and Information Administration is the Executive Branch agency within the Department of Commerce that is principally responsible for advising the President on telecommunications and information policy issues.

O&M Operations and Maintenance are the activities that are related to the performance of routine, preventive, predictive, scheduled, and unscheduled actions aimed at preventing equipment failure or decline with the goal of increasing efficiency, reliability, and safety.

OAM Operations, administration and management or operations, administration and maintenance (OA&M or OAM) is the processes, activities, tools, standards etc.

involved with operating, administering, managing and maintaining any system.

OEM Original Equipment Manufacturer is a term used when one company makes a part or subsystem that is used in another company's end product.

Offeror Any respondent to this RFP.

OMA Open Mobile Alliance. A standards body that develops open standards for the mobile phone industry.

OMA-DM Open Mobile Alliance-Device Management – the specification is designed for management of mobile devices. Device management is intended to support provisioning, device configuration, software upgrades, fault management

OMA-SUPL Secure User Plane Location is an IP-based protocol for Assisted GPS to receive information of GPS satellites quickly via IP instead of slowly receiving (50 bit/s) over GPS satellite signaling.

OpenID Connect OpenID Connect is a simple identity layer on top of the OAuth 2.0 protocol that allows computing clients to verify the identity of an end user based on the authentication performed by an authorization server, as well as to obtain basic profile information about the end user.

Page J-14 – 12

OSS An Operational Support System is a set of programs that help a communications service provider monitor, control, analyze, and manage a telephone or computer network.

OWASP The Open Web Application Security Project (OWASP) is an organization focused on improving the security of software and making software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.

PaaS Platform as a Service refers to the capability provided to the consumer to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

PAN A Personal Area Network is a wireless network established around and connects a single individual’s equipment.

PAR A Performance Assessment Report is used by the COR’s to report all minor discrepancies in contractual performance and is sent to the contractor for corrective action, with a copy to the CO.

PBAC Policy Based Access Controls is a strategy for managing user access to one or more systems, where business classification of users is combined with policies to determine what access privileges a user should have.

PCI Payment Card Industry

PCRF Policy and Charging Rules Function is an LTE network element responsible for a) supporting the detection of service data flow, b) the charging system based on this data flow, and c) policy enforcement.

PDN Packet Data Network. A packet-switched network that can transmit data in digital form, established and operated by a telecommunications administration, or a recognized private operating agency, for the specific purpose of providing data transmission services.

PDP Policy Decision Point. A server in the Common Open Policy Service (COPS) Protocol, which specifies a simple client/server model for supporting policy control over QoS signaling protocols. Policies are stored on servers, acted upon by Policy Decision Points , and enforced on clients known as Policy Enforcement Points (PEP).

PEP Policy Enforcement Point. The client server in the COPS that enforces policies on QoS.

Persistent Coverage Persistent coverage is defined as NPSBN coverage that consistently meets availability objectives without the use of temporary/on-demand coverage solutions.

Persistent Coverage Objective

The persistent coverage objective is the FirstNet baseline, state inputs, and federal inputs as identified in Section J, Attachment J-1, Coverage and Capacity Definitions.

P-GW PDN Gateway. A key node in the EPC, the P-GW is responsible for anchoring the user plane for mobility between 3GPP access systems and non-3GPP access systems. The P-GW allocates the user’s IP address and forwards packets intended for the user to the appropriate Serving Gateway (S-GW). It also provides support for charging, lawful interception, and policy enforcement.

PHI Personal Health Information is a category of information that refers to an individual's medical records and history, which are protected under the HIPAA.

Page J-14 – 12.1

PIP Potentially Interested Party is any interested party to include potential Offerors, end users, Government acquisition and supporting personnel, and others involved, or interested in the conduct or outcome of the acquisition.

Page J-14 – 13

PIV-I Personal Identity Verification-Interoperable is a new program for improving the identification and authentication of Federal employees and contractors for access to Federal facilities and information system in a manner that is interoperable between agencies.

PKI A public key infrastructure is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption.

Planned Maintenance

Planned maintenance refers to normal maintenance scheduled for preventative measures (e.g., patches, upgrades) used to deliver stable NPSBN services to end users. This level of maintenance shall occur only after a notice is delivered via electronic communication to and approved by the Government. This requires planning, allocation of significant amount of time and resources, and a high degree of coordination between the Contractor and FirstNet.

PLMN A Public Land Mobile Network number is a call set-up element that is used to identify a specific mobile operator’s network.

PM Program manager is an individual who manages a range of initiatives to achieve a particular organizational outcome.

POC Point of contact is a person or a department serving as the coordinator or focal point of information concerning an activity or program.

PRD Product Requirements Document extends from the MRD by adding additional detail including in-depth functionality, business process follows, and UI wireframes. Different organizations often have different styles of the PRD; there is no universal standard for the format and content of a PRD.

Preemption A network capability that during an emergency permits authorized high priority traffic, e.g., coming from public safety or first responders, to take over network resources assigned to lower priority traffic, e.g., private traffic.

Pre-Installed Application

Pre-installed application is an application that sits on top of the native OS and is usually encoded in firmware so it survives a hard system boot. The application is pre-installed typically because of convenience or because of partnerships between the carrier and the phone vendor.

Primary User Group The primary user group consists of law enforcement, fire, and emergency medical services users.

Prime Contractor A contract award winner that may perform the work alone or with subcontractors.

ProSe Proximity Services. This mode of communications provides public safety with the ability to communicate UE‐to‐UE, even when out of range of a wireless network OR when working in a confined area where direct unit‐to‐unit communications is required.

PS Public Safety comprises organizations that include, without limitation emergency management agencies, law enforcement agencies, fire departments, rescue squads, and Emergency Medical Services (EMS). Equivalent to PSE.

PSAC Public Safety Advisory Committee established in February 2013 consists of members representing multiple disciplines of PS as well as state, territorial, tribal, and local governments.

PSAP A Public Safety Answering Point, sometimes called a Public Safety Access Point, is a call center responsible for answering calls to an emergency telephone number

(911) for police, firefighting, and ambulance services.

PSE Public Safety Entity is defined in Section 6001(26) of the Act as an “entity that provides public safety services.” 47.U.S.C. § 1401(26)

PSEN Public Safety Enterprise Network is a network dedicated to public safety users and their specific requirements and applications.

Page J-14 – 13.1

PSTN Public Switched Telephone Network also referred to as plain old telephone service.

PTCRB Person Communications Services (PCS) Type Certification Review Board. Refer to www.ptcrb.com for an overview of the organization’s mission. One of the organization’s roles is to certify devices that support LTE for compliance to the applicable 3GPP device related specifications.

http://www.ptcrb.com/

Page J-14 – 14 Amendment 008

PTT In an LTE network, Push-To-Talk is a mobile communications technique that emulates two-way radio communications. It is characterized by half-duplex voice whereby the speaker must initiate his or her speech by first pressing a button to gain exclusive ability to speak while other user(s) must listen. Commercial PTT solutions that are not standards-based are available in the market today.

Public Safety Entity Home Page

The Public Safety Entity (PSE) home page is a Web page that can be built, configured, and maintained by an individual PSE. It will contain features such as the status of the network and access to local control information.

Public Safety Grade The term Public Safety Grade is a conceptual term that refers to the expectation of emergency response providers and practitioners, that their equipment and systems will remain operational during and immediately following a major natural or man-made disaster on a local, regional, and nationwide basis. For the purposes of this RFP, the term is used to refer to network hardening and network sustainability.

Public Safety User User of the NPSBN that provides public safety services.

QASP Quality Assurance Surveillance Plan is the key Government-developed surveillance process document that is used to manage contractor performance assessment by ensuring that systematic quality assurance methods are utilized to validate that the contractor's quality control efforts are timely, effective, and are delivering the results specified in the…