goTravel Technical Introduction
The United Nations Office of Counter Terrorism Countering Terrorist Travel (CTT) programme aims at building the capacity of Member States to prevent, detect and investigate terrorist offenses and related travel by using Advance Passenger Information (API) and Passenger Name Record (PNR) data in line with Security Council Resolutions 2178, 2396 and 2482.
The UN Office of Information and Communications Technology (OICT) is one of the implementing partners under the UN Office of Counter-Terrorism (UNOCT) capacity building Countering Terrorism Travel programme.
goTravel is a United Nations-owned software solution derived from the Travel Information Portal (TRIP), developed by The Netherlands. The UN received full ownership of the TRIP solution at the margins of the High-Level Segment of the 73rd Session of the UN General Assembly and intends to further develop and deploy it to Member States also offering ongoing support while supporting the enhancement of their capacity to use API/PNR data to detect terrorists and serious criminals and their travel movements in compliance with Security Council resolutions 2178, 2396 and 2482.
The United Nations Security Council resolutions 2178, 2396 and 2482 requires Member States to:
- Receive and analyse advance passenger information (API)
- Develop capabilities to receive and analyse passenger name records (PNR)
- Make full use of relevant watchlists
- Share information about FTF and terrorists using commercial air transports within their jurisdiction and across jurisdictions
goTravel supports the end-to-end process for law enforcement to obtain passenger data from (airline) carriers and conduct targeted analysis as well as share the findings of their data assessment. Member States adopt the UN-owned goTravel solution to enable the automated analysis of large data volumes on passengers on all inbound and outbound traffic. goTravel currently supports air travel data collection/analysis/dissemination.
Possible expansion of goTravel scope to maritime, international high-speed rail and coach information is under consideration. Expected data volumes to be analysed exceed several million records per year for any medium-size country. Automated analysis and watchlist matching are instrumental to enabling the establishment of intelligence packages for transmission to competent authorities for their action on the ground, as relevant.
The United Nations Office of Information and Communications Technology (OICT) Service Provider Model
The UN Office of Information and Communications Technology (OICT) serves the programme as the technology provider and develops and maintains goTravel’s source code under the neutral United Nations Blue Flag, with guidance from Member States who are using goTravel and are the key drivers for platform enhancements and new software features.
The goTravel software solution is provided to Member States free of charge and is deployed within Member States administrations, and no data is managed by the United Nations.
A maintenance fee will be charged for the provision of expertise, including the deployment, installation and maintenance support to countries that adopt the solution. This cost-recovery model is based on a Memorandum of Agreement (MoA)/ Service Level Agreement (SLA) with Member States adopting the goTravel solution.
For the initial two years from the date of the signature of the MoA/SLA, all new releases and updates of the goTravel software and related support services are free to the recipient Member State as they are covered under the United Nations Countering Terrorist Travel Programme generously funded by a number of Donor countries. Should the country using goTravel decide to continue to use the software beyond the initial 2 years period, it can opt-in to a non-profit partnership with all other participating states sharing the costs of maintenance, software updates and 3rd level ICT support. This would translate into a yearly invoice. As of year 3, as soon as funds are received, the goTravel software and its support terms and conditions indicated in the Service Level Agreement will apply.
Carriers, Single Window, Passenger Information Units (PIU)
goTravel Main functionalities
Perform as a single window accepting multiple data transfer standards including receiving API/PNR data from carriers in PNRGOV EDIFACT (version 11.1 to 13.1), PNRGOV XML (version 13.1) or UN/EDIFACT PAXLST (version 05b) formats through ebMS (electronic business Messaging Service). Supported transmission protocol: AS4 Profile of ebMS 3.0 Version 1.0
Allow configuration of rule-based risk indicators and watchlists, and list the records that are matching against those rules
Perform an assessment of passengers prior to their scheduled arrival/departure (matching with risk indicators, watchlists and Interpol databases)
Manually query API/PNR data for the purpose of helping competent authorities during ongoing investigations
Automatically notify competent authorities when goTravel identifies passenger data requiring further examination
Enable verification of PNR/API data retrieval and data quality of connected air carriers
Enable analysts to reveal relationships between objects such as passengers, phone numbers, credit cards, etc. and visualize connections on graphs
Use network analysis to identify formally unknown relationships
- Support global WCO/IATA/ICAO standards and recommended practices for API and PNR
- Complies with ICAO Chicago convention SARPs (Standards and Recommended Practices)
- Enable privacy protection
- Support the integration of a data sharing module to share data within the national competent authorities and with other goTravel instances in other countries
- Enable the establishment of intelligence packages that can then be disseminated for law enforcement action
- Support the operationalization of best practices in terrorist travel detection from a number of countries
- Allow the targeting of “known and unknowns” by combining API/PNR data
- Support configuration as per Member States legislation and needs
The UN, through UNOCT and OICT fully supports the technology implementation for goTravel in relevant requesting country. The UN OICT team provides training for technical staff in Member States to maintain and operate their local goTravel installation.
Future enhancements of the platform include extending the use of Artificial Intelligence algorithms to facilitate the targeting of “unknowns".
- goTravel is built on standard technology (.Net, Angular JS, D3, MS Windows Server, Elasticsearch, OpenStreetMap, Internet Information Services, Microsoft Active Directory and Keycloak)
- The software solution is hosted in the secure network of a Member State country
- Its core is not exposed to the Internet
- Air Carriers transmit data to the system via secure connection and B2B protocol