PUBLIC SERVICE COMMISSION
REQUEST FOR PROPOSALS
FOR EMERGENCY SERVICES IP NETWORK (ESInet) and
NEXT GENERATION CORE SERVICES (NGCS)
COMMISSIONERS:
ERIC KAMLER
CHRISTIAN MIRCH
Public Service Commission
300 The Atrium, 1200 N Street
Lincoln, Nebraska 68509
TIM SCHRAM
KEVIN STOCKER
DAN WATERMEIER
Contents
Executive Summary ......................................................................................................................................................7
Project Requirements and Scope of Work .....................................................................................................................8
A.
PROJECT OVERVIEW AND BACKGROUND INFORMATION...............................................................................8
Background ...................................................................................................................................................................... 8
Project Overview ............................................................................................................................................................... 8
Justification for the Proposed System ................................................................................................................................ 9
Referenced Documents .................................................................................................................................................. 10
B.
SCOPE OF WORK .........................................................................................................................................11
Services to be Provided ................................................................................................................................................... 11
Applicable Standards ...................................................................................................................................................... 12
Federal Communications Commission Rules .................................................................................................................. 12
Other Industry Standards ................................................................................................................................................ 12
Conformance to Standards ............................................................................................................................................. 13
Baseline Conformance.................................................................................................................................................... 13
Gap Identification (Proposal Requirement) ...................................................................................................................... 13
Standards Updates (Post-Award)..................................................................................................................................... 13
Non-Disclosure and Breach ............................................................................................................................................ 13
Deviation Classification (Proposal Requirement) ............................................................................................................. 13
Remediation Plan and Progress ....................................................................................................................................... 14
Interoperability ............................................................................................................................................................... 14
NENA NG911 i3 Standard Conformance .......................................................................................................................... 14
C.
WORK PLAN AND PROJECT PLANNING ........................................................................................................21
D.
DELIVERABLES AND DELIVERABLE APPROVAL PROCESS .............................................................................24
Submission Requirements .............................................................................................................................................. 26
E.
TECHNICAL REQUIREMENTS........................................................................................................................27
1.
ESInet Requirements....................................................................................................................................27
1.1. Architecture and Topology............................................................................................................................28
1.1.1. ESInet Diagrams...........................................................................................................................................28
1.1.2. ESInet Interconnection.................................................................................................................................28
1.2. External and PSAP Connectivity....................................................................................................................29
1.2.1. Originating Service Provider (OSP) Connection .............................................................................................29
1.2.2. PSAP Connection .........................................................................................................................................29
1.3. Legacy Interoperability .................................................................................................................................30
1.3.1. Legacy Network Gateway (LNG)....................................................................................................................30
1.3.2. Legacy Selective Router Gateway (LSRG)......................................................................................................32
1.3.3. Legacy PSAP Gateway (LPG) .........................................................................................................................32
1.4. Network Behavior and Performance .............................................................................................................33
1.4.1. ESInet IP Routing ..........................................................................................................................................33
1.4.2. ESInet Bandwidth .........................................................................................................................................34
1.4.3. Quality of Service (QoS)................................................................................................................................34
1.4.4. Traffic Flow Requirements............................................................................................................................35
1.4.5. Traffic Shaping .............................................................................................................................................35
1.4.6. ESInet Network Time ....................................................................................................................................35
1.5. Resilience and Service Levels.......................................................................................................................35
1.5.1. ESInet Availability.........................................................................................................................................35
1.5.2. ESInet Reliability ..........................................................................................................................................36
1.6. Operations and Management .......................................................................................................................36
1.6.1. ESInet Monitoring and Management .............................................................................................................36
1.6.2. ESInet Maintenance Window ........................................................................................................................37
1.7. Implementation Details................................................................................................................................37
1.7.1. Port Mapping................................................................................................................................................37
2.
Next Generation Core Services (NGCS) Requirements ..................................................................................38
2.1. Edge Security and Ingress.............................................................................................................................39
Page 2 of 130
2.1.1. Border Control Function (BCF)......................................................................................................................39
2.1.2. STIR/SHAKEN Support..................................................................................................................................40
2.1.3. Security Mechanisms ...................................................................................................................................40
2.2. Core Routing and Location ...........................................................................................................................40
2.2.1. Emergency Services Routing Proxy (ESRP) ....................................................................................................40
2.2.1.1. Policy Store..................................................................................................................................................41
2.2.2. Location Information Server (LIS)..................................................................................................................42
2.2.3. Location Database (LDB)..............................................................................................................................43
2.2.4. Emergency Call Routing Function / Location Validation Function (ECRF/LVF) ................................................43
2.2.5. Forest Guide ................................................................................................................................................44
2.2.6. Service/Agency Locator (SAL) .......................................................................................................................45
2.3. Data and Enrichment ...................................................................................................................................45
2.3.1. Additional Data Repository (ADR) .................................................................................................................45
2.4. Call Flow and Media Handling ......................................................................................................................46
2.4.1. Call Flow and Session Handling Requirements .............................................................................................46
2.4.2. Media Quality of Service (QoS)......................................................................................................................46
2.4.2.1. Audio 46
2.4.2.2. Video 46
2.4.2.3. Text 47
2.4.3. Interactive Multimedia Response Service (IMRS)...........................................................................................47
2.4.4. Bridge 47
2.5. Egress and External Interfaces......................................................................................................................48
2.5.1. Outgoing Call Interface Function (OCIF) .......................................................................................................48
3.
GIS and Database Services Requirements ....................................................................................................49
3.1. Data Management and Interfaces.................................................................................................................49
3.1.1. GIS and Database Management Functionality...............................................................................................49
3.1.2. Spatial Interface (SI) Functionality ................................................................................................................50
3.2. Core Data Services.......................................................................................................................................51
3.2.1. Mapping Data Service...................................................................................................................................51
3.2.2. MSAG Conversion Service (MCS) ..................................................................................................................51
3.2.3. Geocode Conversion Service (GCS)..............................................................................................................52
3.3. PSAP-Facing Services...................................................................................................................................52
3.3.1. PSAP Mapping Service..................................................................................................................................52
3.3.2. Map Discrepancy Reporting..........................................................................................................................52
3.4. External Integrations ....................................................................................................................................52
4.
Security Requirements .................................................................................................................................53
4.1. Management and Process Control................................................................................................................53
4.1.1. Personnel Roles and Responsibilities ...........................................................................................................53
4.1.2. Identity Management....................................................................................................................................54
4.1.2.1. Roles 55
4.1.3. Policies and Procedures...............................................................................................................................55
4.1.3.1. Incident Response Plans ..............................................................................................................................56
4.1.4. Authorization and Data Rights Management .................................................................................................56
4.2. Information System Infrastructure and Management ....................................................................................57
4.2.1. Device Inventory...........................................................................................................................................57
4.2.2. Patching and Update Management ...............................................................................................................58
4.2.3. Segmentation and Traffic Separation ............................................................................................................58
4.2.4. Network Boundary Protection.......................................................................................................................59
4.2.4.1. External Connections ...................................................................................................................................59
4.2.4.2. Demilitarized Zones (DMZ) ...........................................................................................................................59
4.2.4.3. Defense in Depth .........................................................................................................................................60
4.2.4.4. Remote Access ............................................................................................................................................60
4.2.5. Infrastructure Resilience ..............................................................................................................................60
Page 3 of 130
4.3. Authentication and Federated SSO...............................................................................................................61
4.4. Cryptography and Public Key Infrastructure ..................................................................................................61
4.4.1. Cryptographic Keys ......................................................................................................................................62
4.4.2. Use of Self-Signed Certificates .....................................................................................................................62
4.5. Integrity Protection.......................................................................................................................................63
4.5.1. JSON Web Signatures (JWS)..........................................................................................................................63
4.6. Information Privacy ......................................................................................................................................63
4.7. Security Assessment and Audit ....................................................................................................................64
4.7.1. Assessment and Audit Documentation.........................................................................................................64
4.8. Security Monitoring, Detection, and Alerting .................................................................................................64
4.8.1. Security Event Logging and Continuous Monitoring .......................................................................................64
4.8.1.1. Time Synchronization ...................................................................................................................................65
4.8.2. Denial of Service and Telephony Denial of Service (DoS/TDoS) ......................................................................65
4.8.3. Intrusion Detection and Prevention Systems (IDS/IPS) ..................................................................................66
4.9. Domain Name System (DNS) ........................................................................................................................66
5.
Reporting Services Requirements .................................................................................................................67
5.1. Reporting and Data Collection Requirements ...............................................................................................67
5.2. Logging Service ............................................................................................................................................67
5.3. i3 Logging and Reporting Requirements ........................................................................................................67
5.4. Functional Element Reporting ......................................................................................................................68
5.5. Monitoring, Outages, Failover, Trouble Tickets, and Escalation .....................................................................68
5.6. Maintenance and Configuration Reports.......................................................................................................69
5.7. Discrepancy Reporting .................................................................................................................................69
5.7.1. Policy and Core Routing ...............................................................................................................................70
5.7.1.1. Policy Store Discrepancy Report...................................................................................................................70
5.7.1.2. Policy Discrepancy Report............................................................................................................................70
5.7.1.3. Emergency Services Routing Proxy (ESRP) Discrepancy Report .....................................................................70
5.7.2. Location and GIS Sources ............................................................................................................................70
5.7.2.1. Location Information Server (LIS) Discrepancy Report...................................................................................70
5.7.2.2. GIS Discrepancy Report ...............................................................................................................................70
5.7.2.3. MSAG Conversion Service Discrepancy Report .............................................................................................71
5.7.2.4. LoST Discrepancy Report .............................................................................................................................71
5.7.3. Signaling and Edge .......................................................................................................................................72
5.7.3.1. SIP Discrepancy Report ................................................................................................................................72
5.7.3.2. Border Control Function (BCF) Discrepancy Report ......................................................................................72
5.7.4. Network and Infrastructure ..........................................................................................................................72
5.7.4.1. Network Discrepancy Report ........................................................................................................................72
5.7.5. Security and Trust ........................................................................................................................................73
5.7.5.1. Permissions/Security/Authentication Discrepancy Report ............................................................................73
5.7.5.2. Log Signature/Certificate Discrepancy Report...............................................................................................73
5.7.6. Data and Logging..........................................................................................................................................73
5.7.6.1. Logging Service Discrepancy Report .............................................................................................................73
5.7.6.2. ADR/IS-ADR Discrepancy Report ..................................................................................................................74
5.7.7. PSAP Operations and Treatments .................................................................................................................74
5.7.7.1. PSAP Call Taker Discrepancy Report.............................................................................................................74
5.7.7.2. Call Transfer Failure Discrepancy Report ......................................................................................................74
5.7.7.3. Interactive Media Response (IMR) Discrepancy Report..................................................................................74
5.7.8. External Providers ........................................................................................................................................75
5.7.8.1. Originating Service Provider Discrepancy Report...........................................................................................75
5.7.9. Test and Tools ..............................................................................................................................................75
5.7.9.1. Test Call Generator Discrepancy Report .......................................................................................................75
6.
Installation Requirements ............................................................................................................................76
6.1. Installation Services .....................................................................................................................................76
Page 4 of 130
6.2. Wiring and Cabling .......................................................................................................................................77
6.3. Grounding ....................................................................................................................................................77
7.
Training ........................................................................................................................................................78
7.1. Audiences and Scope...................................................................................................................................78
7.2. Training Elements.........................................................................................................................................78
7.3. Technical Assistance ...................................................................................................................................78
7.4. Schedule and Locations ...............................................................................................................................78
7.5. Training Materials.........................................................................................................................................78
7.6. Post-Deployment Training and Costs (Proposal Requirement) ......................................................................79
7.7. Comprehension, Testing, and Certification...................................................................................................79
7.8. Training Plan and Samples (Proposal Requirement) ......................................................................................79
8.
Operations and Service Management Requirements.....................................................................................80
8.1. Service Management Framework..................................................................................................................80
8.1.1. Service Management Plan ............................................................................................................................80
8.1.2. Service Level Agreement (SLA)......................................................................................................................81
8.1.3. Compliance and Risk Management ..............................................................................................................82
8.1.4. Monthly Project Review and Compliance ......................................................................................................82
8.2. Continuity and Resilience.............................................................................................................................83
8.2.1. Availability ...................................................................................................................................................83
8.2.2. Continuity of Operations Plan (COOP) ..........................................................................................................83
8.2.3. Disaster Recovery (DR) .................................................................................................................................83
8.3. Operations Centers and Support ..................................................................................................................84
8.3.1. Network Operations Center (NOC) ...............................................................................................................84
8.3.2. Security Operations Center (SOC) ................................................................................................................85
8.3.3. Help Desk ....................................................................................................................................................85
8.3.3.1. Trouble Handling and Ticketing Requirements ..............................................................................................86
8.3.3.2. Monitoring of Applications and Equipment....................................................................................................86
8.3.3.3. Root Cause Analysis.....................................................................................................................................86
8.3.4. Customer Support Services..........................................................................................................................86
8.4. Monitoring and Event Management...............................................................................................................87
8.4.1. Alarm Categories .........................................................................................................................................87
8.5. Change, Maintenance, and Release Management.........................................................................................88
8.5.1. Change Management Requirements.............................................................................................................88
8.5.1.1. Security Considerations in Change Management ..........................................................................................89
8.5.2. Scheduled Maintenance Process .................................................................................................................89
8.5.3. Software Development Process....................................................................................................................90
8.5.4. Software Updates and Improvements...........................................................................................................90
8.6. Spares and Inventory....................................................................................................................................91
8.6.1. Spares 91
8.6.2. Spare Inventory at Data Centers ...................................................................................................................92
9.
Value Add and Optional Services ..................................................................................................................93
9.1. Call Handling Equipment (CHE) Services ......................................................................................................93
9.2. ESInet and NGCS backup system .................................................................................................................93
10.
Use Case Examples for Use with Response ..................................................................................................94
10.1. Instructions..................................................................................................................................................94
10.2. Additional Examples.....................................................................................................................................96
Procurement Procedure .............................................................................................................................................98
A.
GENERAL INFORMATION .............................................................................................................................98
B.
PROCURING OFFICE AND COMMUNICATION WITH STATE STAFF AND EVALUATORS ...................................98
C.
SCHEDULE OF EVENTS ................................................................................................................................98
D.
WRITTEN QUESTIONS AND ANSWERS........................................................................................................101
E.
SOLICITATION CONFERENCE ....................................................................................................................101
F.
NOTICE OF INTENT TO ATTEND MANDATORY SOLICITATION CONFERENCE...............................................101
Page 5 of 130
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.