843f0f876a4c2bd520b12da21a54f6a1.ppt
- Количество слайдов: 19
e-Borders Logical Architecture e-Borders Programme April 2004 E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 1
E-Borders Technical Architecture Logical architecture - core Internet API for arrivals and departures Carriers E-Borders IT Centre Carrier networks Yes/No for arrivals Security Barriers ATC System JPAS System API from check-in WI rules Confidential ATC subsystem Override ATC decision Passport no / UK Passport record UK Visas CRS Expected & refused movements Passport no. Doc & Person lookup Possible hits Data enrichment Enrichment rules Visa record Auto assessment movement To OGDs Movements data feeds Movements UKPA PASS Doc & Person lookup JPAS WI rules WI results Risk rules Revised assessment Workflow Multiple views Restricted LAN Data separation Filtered views Key-in landing details Perform headline WI searches UK Visas MIS, intelligence, statistics, operations Manage alert Passports & Visas Data mining Confidential LAN Analyst Alert manager Encrypted wide-area network Port Front Desk Key-in/swipe passport CID Warehouse (Restricted) DWP Update interview guidance Log alert Movements analyst Security Barrier Alerts WI query & update Passports & Visas Referrals Extract, transform & load Alert mgt. Manual assessment View refusals Add ATC override WI query & update CENTAUR (etc. ) E-Borders Data Warehouse movement Browse UK passports Browse UK Visas Weekly extracts initially, direct query later Possible hits Risk assessment movement Risk rating E-Borders Operations Centre Warnings Index WI etc filtered extracts UKPA rules Restricted Overrides ATC WI rules Yes/No/Override WI Search Engine WI WAN Biometric / IRIS automated barrier Key-in/swipe passport View movement record Follow interview guidance Key-in landing details Perform headline WI searches Port Back Office Port PLS System Confidential WI terminal query & update WI Search Engine E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 2
e-Borders Logical Architecture Walk-through e-Borders Programme April 2003 E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 3
E-Borders Technical Architecture Stage 1 E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 4
E-Borders Technical Architecture Carrier interface Internet Carriers E-Borders IT Centre Carrier networks API for arrivals and departures Yes/No for arrivals ATC System Security Barriers E-Borders Operations Centre Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 5
E-Borders Technical Architecture ATC decision Carrier networks Internet Carriers E-Borders IT Centre Security Barriers ATC System WI rules JPAS System API from check-in WI System ATC subsystem ATC WI rules Yes/No/Override Doc & Person lookup Restricted Passport number Passport record UKPA PASS Expected & refused movements Movements UKPA in Stage 2 (included to show architecture) Alert WI filtered extract Possible hits UKPA rules Weekly extract initially, direct query later Alert management Alerts Confidential E-Borders Operations Centre Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 6
E-Borders Technical Architecture Referrals Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System WI System ATC subsystem Override ATC decision ATC WI rules Overrides WI filtered extract UKPA PASS Movements E-Borders Operations Centre Browse UK passports Browse UK Visas Restricted View refusals Add ATC override WI query & update Confidential WI Search Engine Referrals desk Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 7
E-Borders Technical Architecture Automatic assessment Now intending to screen against other watchlist too, e. g. CENTAUR, PNC. Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System WI System ATC subsystem Doc & Person lookup JPAS WI rules Possible hits WI results Risk assessment UKPA PASS Movements Restricted movement Risk rules WI filtered extract Auto assessment movement Confidential Risk rating Alert management Alerts Basic rules in Stage 1. Risk profile-based rules in Stage 2. E-Borders Operations Centre Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 8
E-Borders Technical Architecture Manual Assessment Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System WI System ATC subsystem Auto assessment Risk assessment UKPA PASS Movements Restricted Manual assessment movement Workflow Confidential Alerts Revised assessment Multiple views E-Borders Operations Centre Alert management Update interview guidance Log an alert Passports & Visas Restricted WI query & update Confidential WI Search Engine Analysis desk Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 9
E-Borders Technical Architecture Alerting Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System WI System ATC subsystem Auto assessment UKPA PASS Risk assessment Manual assessment Alert management Alerts E-Borders Operations Centre Law Enforcement Agencies etc. Confidential Manage an alert Confidential WI Search Engine Alert manager Encrypted widearea network Port Front Desk E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 10
E-Borders Technical Architecture Archive/MIS Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System Auto assessment Also, audit logs retained for all processes Risk assessment Archive Movements E-Borders Operations Centre E-Borders Data Warehouse CID Data Warehouse Restricted WI System ATC subsystem Hand off Manual assessment Alert management Confidential Also now intending to hand off extracts to DWP, UKVisas, Police and Secret Services Encrypted widearea network Port Front Desk Port Back Office WI Search Engine E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 11
E-Borders Technical Architecture Stage 1 assumptions • Carriers will comprise not only those with SITA connections. • An internet virtual private network carrying ATC request & response can be accredited (cf. Marigold) • ATC/JPAS is non-stop. But also cost up an option with scheduled downtime of 1 hour per week, with logging warm stand-by for ATC only. • Background checks based on 4 -4 -2 plus nationality. • Data Warehouse does not need to be a high availability system. • CID Data Warehouse will make historical movement data available to caseworkers and others as needed. E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 12
E-Borders Technical Architecture Stage 2 extensions WI changes: • WI extract replaced by on-line network connection to real WI, suitably front-ended as necessary to provide 24 x 365, high availability and high performance. • The workaround adopted in Stage 1 for “not to be confused with” entries will be replaced with a structural change to the WI database. • The WI data may also be changed to more readily identify those entries that are grounds for ATC denial. • New fixed controls at primary line have workstations giving integrated acces to WI and new Primary Line System plus. . . E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 13
E-Borders Technical Architecture Primary Line Interview Carrier networks Internet Carriers E-Borders IT Centre ATC System JPAS System WI System ATC subsystem WI filtered extract Auto assessment Risk assessment UKPA PASS Movements Manual assessment Alert management Confidential E-Borders Operations Centre Encrypted widearea network Port Front Desk Key-in/swipe passport Key-in landing details Perform headline WI searches WI WAN EEA biometric / IRIS automated barrier Key-in/swipe passport View movement record Follow interview guidance Key-in landing details Perform headline WI searches Port Back Office Port PLS System WI terminal query & update WI Search Engine Confidential E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 14
E-Borders Technical Architecture • Publicly accessible web page • PATC Request via Web Services from carriers opting not to use SITA. Carriers E-Borders IT Centre Carrier networks Internet ATC System WI rules Security Barriers JPAS System API from check-in WI System ATC subsystem ATC WI rules Yes/No/Override Doc & Person lookup Possible hits UKPA rules Alert Record for refisals only WI filtered extract Positive PATC request/response NOT retained (except in audit logs) Provisional ATC • PATC Request via SITA from carriers or agents Weekly extract initially, direct query later UKPA PASS Movements Restricted Alert management Alerts Confidential E-Borders Operations Centre Encrypted widearea network Port Front Desk Port Back Office E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 15
E-Borders Technical Architecture Reservation load SITA Internet Carrier networks Carriers Border control Intelligence Units RRS System PNR retrieval & decoding Hourly upload of PNR based PNR subsystem on scheduled departure time Unmatched PNR Targeted PNR-movement matching POISE Risk assessment movement Restricted Risk rules Risk rating Manual assessment Restricted E-Borders IT Centre Auto assessment Movements Set retrieval criteria Perform searches Save PNR of interest JPAS System ATC System Alert management confidential E-Borders Operations Centre Encrypted widearea network Port Front Desk Port Back Office E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 16
E-Borders Technical Architecture Stage 2 assumptions • Logging laptop needed at primary line. • EEA biometric automatic barriers at primary line. • Provisional ATC security is accreditable. E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 17
E-Borders Technical Architecture Stage 3 enhancements • None • Only more roll-out of the same E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 18
e-Borders Logical Architecture The End E-Borders – Immigration and Nationality Directorate – Martin Tann – 16 -mars-18 – Page 19
843f0f876a4c2bd520b12da21a54f6a1.ppt