Check out our COVID-19 dedicated page for tenders related to medical equipment needs.
The Conference on the Future of Europe is your chance to share your ideas and shape the future of Europe. Make your voice heard!
United Kingdom-London: Hardware integration consultancy services
Contract notice – utilities
Section I: Contracting entity
Section II: Object
Online Key Management System
Network Rail intends to carry out a procurement exercise to establish a contract for the delivery of a national online key management system. Your formal expression of Interest will be indicated when a PQQ is completed and issued for Network Rails consideration.
The National Online Key Management System (OKMS) will provide the centralised key administration for all ETCS entities operating on the UK railway, using both online and offline distribution methods. Cryptographic keys are required by each European Train Control System (ETCS) Radio Block Centre (RBC) and each ETCS On Board Unit (OBU) to enable them to communicate over the GSM-R network securely.
The supplier will be required to provide and implement an efficient and intuitive National Online Key Management System (OKMS) which will generate, store, manage, distribute, archive and delete software cryptographic keys for the UK railway.
The system will also support offline key distribution by allowing encrypted keys to be sent.
The national online key management system (OKMS) will provide the centralised key administration for all ETCS entities operating on the UK railway, using both online and offline distribution methods. Cryptographic keys are required by each European Train Control System (ETCS) Radio Block Centre (RBC) and each ETCS On Board Unit (OBU) to enable them to communicate over the GSM-R network securely.
The system will also support offline key distribution by allowing encrypted keys to be sent via a variety of methods including physical media, email and remote download.
The OKMS is broken down into 3 elements to be delivered over two phases.
The 3 elements are:
1) Key Management Centre (KMC)
Provide the software and hardware for a National ETCS Key Management Centre that is compliant with the CCS TSI subsets relevant to Key Management (e.g. SUBSET-137, SUBSET-114, SUBSET-038 etc), including both online and offline distribution.
2) Public Key Infrastructure (PKI)
Provide public key infrastructure to enable online distribution of authentication keys (KMACs) via GPRS and FTNx retain access to supplier of PKI element so that cyber threats, software updates etc are well managed.
Provide the opportunity to use the PKI system for other functionality
3) Online Key Remote Access (OK-RA)
Provide a secure web-based user interface for remote users to perform key management tasks support and licencing for a 15-year period post implementation is also required.
Interested parties are advised that Network Rail do not currently have budget approval for this scope of work, this procurement process will generate a cost which will be presented to the sponsor to secure Investment Panel approval before any contract can be awarded.
The value of the contract shown in this Notice is the upper limit estimate, including licencing and support for 15 years after the initial design and implementation is complete.
The contract duration of 17 years is an estimate of the design and implementation phase plus a potential 15 years of support and licencing.
Section III: Legal, economic, financial and technical information
A parent company guarantee may be required depending upon the outcome of the financial review of the supplier prior to award.
Network Rail will accept pre-qualification and tender submissions from single entities or consortia. Network Rail does not require those consortia who intend to form a single legal entity to do so at the pre- qualification stage. If consortia members change at any point during the procurement process, Network Rail reserves the right to re-visit the pre-qualification stages to consider the impact of the updated information.
Network Rail will consider contracting with a consortium, providing always that the participants in any consortium are jointly and severally liable for all of the obligations of the contractor, under the contract.
Section IV: Procedure
Section VI: Complementary information