Provision Of Secured Services tendering job at NIRA | Apply Now

PROVISION OF PKI SECURED SERVICES AROUND THE NATIONAL ENTIFICATION REGISTER (NIR)

Introduction

The National Identification and Registration Authority (NIRA) was established by the Registration of Persons Act (ROPA) 2015 to among other functions provide for the registration of Persons; to establish a National Identification Register, and to provide for the issuance of National/Alien Identification Numbers and National/ Allen Identification Cards.

NIRA established the National Identification Register (NIR) and a number of platforms to provide for access and use of the information contained in the NIR. Among the key functions of NIRA under this proposal are;

• Create, manage, maintain and operate the NIR;

• To verify and authenticate information relating to the registration and identification of persons;

• To ensure the preservation, protection and security of any information or data collected,

• obtained, maintained or stored in the register;

  
  

Required Partner Services under this arrangement

• In a bid to ensure efficiency and reliable delivery of services while verifying and/or authenticating information in the NIR, NIRA seeks to onboard competent, vetted, and registered providers with internationally certified technologies and experience in the operations of the Public Key Infrastructure as a Service (PKlaas) to facilitate the provision of third- party services around the NIR in a mode that is secure, accurate, reliable and ensures non-repudiation. The third- party services shall be provided at no cost to NIRA. The key services shall for the start include;

• E-consent for eKYC- To provide a platform where citizens with information in the NIR can provide electronic consent to EKYC to third parties through data subjects matching fingerprint information in a secure and credible manner that relies on PKI infrastructure.

• Verification services at Point of Service (POS) - To verify authenticity of digitally signed documents e.g. confirmation of information letter generated through the NIRA portal.

The provider shall be requested to submit a proposal that delineates;

• Process Workflows

• PKI infrastructure setup and system components c) Any other important information that enables the service to operate

• The service shall maintain the confidentiality and integrity of the information verified or authenticated. The service provider's platform shall use PKI infrastructure for encryption of information in transit and at rest as well as signing for authentication.

• Authentication services (e-consent)

• The third-party service in this category shall facilitate the process of e-Consent from data subjects where third parties seek information contained in the NIR. The solution shall ensure that e-consent is provided in a secure, verifiable, repeatable, idempotent, cannot be denied and is in the form required by ROPA 2015.