NCIC III (FBI CJIS)
FBI CJIS DIVISION
NORTH-SOUTH EXTERNAL
NCIC III Interstate Identification Index: criminal history, active felony warrants & wanted persons
CONNECTED
PROTOCOL / MODENlets / TCP (Async MQ)
SLA / LATENCY<1,500ms / 120ms
SECURITYFIPS 140-3 / TCP SSL
CIRCUIT BREAKERCLOSED
FALLBACK:
Circuit breaker trips after 1,500ms SLA breach; enqueues to outbox retry queue; holds traveler in PENDING_EXT_VETTING.
Nlets (Interstate LE)
STATE & LOCAL LE
NORTH-SOUTH EXTERNAL
Interstate law enforcement broker for 50-state DMV records, state warrants & firearms registries
CONNECTED
PROTOCOL / MODESecure REST / XML (Async MQ)
SLA / LATENCY<2,000ms / 210ms
SECURITYmTLS 1.3 / FIPS 140-3
CIRCUIT BREAKERCLOSED
FALLBACK:
Retry with exponential backoff (max 3x); if unreachable, flag application for manual CBPO review without stalling automated intake.
TECS II / Lookout Database
CBP OFO
NORTH-SOUTH EXTERNAL
Real-time synchronized TECS II lookout and watchlist interdiction stream in AWS GovCloud
CONNECTED
PROTOCOL / MODEREST / SOAP (Sync + Stream)
SLA / LATENCY<350ms / 42ms
SECURITYGovCloud IL-5 / mTLS 1.3
CIRCUIT BREAKERCLOSED
FALLBACK:
Read from local replicated cache; write lookout hits to transactional outbox queue for deferred synchronization.
ATS (TASPD / PSPD Rules Engine)
CBP NTC
NORTH-SOUTH EXTERNAL
Automated Targeting System risk scoring, traveler pattern evaluation & rule co-occurrence
CONNECTED
PROTOCOL / MODEgRPC / Kafka (Async Stream)
SLA / LATENCY<800ms / 142ms
SECURITYTLS 1.3 / SASL SCRAM-512
CIRCUIT BREAKERCLOSED
FALLBACK:
Fail-safe rule evaluation fallback; auto-escalate ambiguous scores to CBPO manual referral queue.
Carrier PDS Gateway
AIRLINES / IATA
NORTH-SOUTH EXTERNAL
Pre-departure passenger manifest verification and Board/No-Board minting at airline check-in
CONNECTED
PROTOCOL / MODEEDIFACT / Type B / REST (Edge)
SLA / LATENCY<200ms / 35ms
SECURITYAS2 / ECC P-256 / mTLS
CIRCUIT BREAKERCLOSED
FALLBACK:
Return cached authorization token cryptographically signed with ECC P-256 key; fail safely to MANUAL_CHECK on cold cache.
Simplified Arrival (TVS Biometric Edge)
CBP OIT / TVS
NORTH-SOUTH EXTERNAL
Port of entry 1:1 and 1:N facial biometric comparison & mobile handheld verification cameras
CONNECTED
PROTOCOL / MODEREST / gRPC (TLS 1.3)
SLA / LATENCY<300ms / 110ms
SECURITYZero-Retention Cloud / AES-256
CIRCUIT BREAKERCLOSED
FALLBACK:
Match biometrics against local gallery; fallback immediately to physical 1:1 passport chip inspection without delaying lane flow.
Interpol SLTD Database
INTERPOL LYON
NORTH-SOUTH EXTERNAL
Global stolen & lost travel documents registry and international red notices stream
CONNECTED
PROTOCOL / MODEIPS / mTLS 1.3 (Sync)
SLA / LATENCY<500ms / 84ms
SECURITYIPS / mTLS 1.3 / SHA-384
CIRCUIT BREAKERCLOSED
FALLBACK:
Fallback to local replicated red-notice index; flag flagged passports for CBPO secondary verification.
IDENT / HART Biometric Services
DHS OBIM
NORTH-SOUTH EXTERNAL
DHS Office of Biometric Identity Management multi-modal biometrics (facial, 10-print fingerprints)
CONNECTED
PROTOCOL / MODESOAP / REST (Async MQ)
SLA / LATENCY<1,000ms / 95ms
SECURITYFedRAMP High / PKI Cert Auth
CIRCUIT BREAKERCLOSED
FALLBACK:
Enqueue for deferred biometric enrollment; proceed with passport MRZ chip verification without dropping traveler session.
PCCS-Identity-Resolution
REUSE PCCS
EAST-WEST SHARED (§2.1)
DHS Lexicon standardization, Soundex / Levenshtein fuzzy matching & historical identity linking
CONNECTED
PROTOCOL / MODEgRPC / REST (Sync)
SLA / LATENCY<250ms / 48ms
SECURITYmTLS 1.3 / IL-5
THROUGHPUT1.8k msg/s
FALLBACK:
Exact-match fallback; queue unresolved biographic records for CBPO manual identity resolution.
PCCS-Notification-Service
REUSE PCCS
EAST-WEST SHARED (§2.1)
Enterprise multi-channel notification engine (GovCloud SMS, Email & Carrier Webhooks)
CONNECTED
PROTOCOL / MODEREST / AWS SNS (Async)
SLA / LATENCY<500ms / 92ms
SECURITYAWS GovCloud / KMS Encrypted
THROUGHPUT3.1k msg/s
FALLBACK:
Secondary SMS provider failover; retry queue with exponential backoff and carrier delivery receipt tracking.
PCCS-Watchlist-Connector
REUSE PCCS
EAST-WEST SHARED (§2.1)
Authoritative enterprise integration broker routing NCIC III and Nlets query packets
CONNECTED
PROTOCOL / MODENlets / JMS MQ (Async)
SLA / LATENCY<1,200ms / 115ms
SECURITYFIPS 140-3 / TLS 1.3
THROUGHPUT920 msg/s
FALLBACK:
Asynchronous dead-letter queue; route traveler records to PENDING_EXT_VETTING state.
PCCS-TECS-Connector
REUSE PCCS
EAST-WEST SHARED (§2.1)
Bidirectional enterprise integration adapter with TECS II Lookout and OFO databases
CONNECTED
PROTOCOL / MODEREST / SOAP (Sync + Stream)
SLA / LATENCY<350ms / 54ms
SECURITYGovCloud IL-5 / VPC Peering
THROUGHPUT1.4k msg/s
FALLBACK:
Local replicated read cache; outbox queue for deferred lookout record push.
PCCS-ATS-Core
REUSE PCCS
EAST-WEST SHARED (§2.1)
Shared targeting rule execution engine and high-throughput rules evaluation pipeline
CONNECTED
PROTOCOL / MODEgRPC / Kafka (Async)
SLA / LATENCY<800ms / 138ms
SECURITYKafka SASL / TLS 1.3
THROUGHPUT1.6k msg/s
FALLBACK:
Default conservative risk score; immediate referral to CBPO supervisor queue.
PCCS-Audit-Trail
REUSE PCCS
EAST-WEST SHARED (§2.1)
Enterprise FISMA-High immutable audit logging stream to Splunk / Elastic SIEM
CONNECTED
PROTOCOL / MODEKafka / Syslog TLS 1.3 (Stream)
SLA / LATENCY<100ms / 18ms
SECURITYAppend-Only SHA-256 WORM
THROUGHPUT5.2k msg/s
FALLBACK:
Spool to encrypted local disk ledger; automated backfill upon broker reconnect.
PCCS-Carrier-Messaging-Gateway
REUSE PCCS
EAST-WEST SHARED (§2.1)
EDIFACT / Type B / APIS commercial airline messaging broker and EDI processor
CONNECTED
PROTOCOL / MODEType B MQ / AS2 / APIS
SLA / LATENCY<400ms / 64ms
SECURITYAS2 Encryption / TLS 1.3
THROUGHPUT2.8k msg/s
FALLBACK:
Standard APIS batch polling; carrier direct web portal lookup.
PCCS-TVS-Facial-Service
REUSE PCCS
EAST-WEST SHARED (§2.1)
Pre-flight flight gallery biometric builder and 1:N biometric gallery indexing
CONNECTED
PROTOCOL / MODEREST / gRPC (TLS 1.3)
SLA / LATENCY<300ms / 105ms
SECURITYZero-Retention / AES-256
THROUGHPUT480 msg/s
FALLBACK:
Fallback to 1:1 passport chip verification at secondary inspection.
AETA-Public-Intake-Service
NEW BUILD
SCREEN 1 PUBLIC INTAKE
Public web & mobile traveler onboarding, eligibility questionnaire, and application submission
CONNECTED
PROTOCOL / MODEHTTPS / REST (TLS 1.3)
SLA / LATENCY<200ms / 32ms
SECURITYWAF / TLS 1.3 / CSP Level 3
WCAG COMPLIANCEWCAG 2.1 AA
FALLBACK:
Cached progressive web app offline shell; graceful degradation on poor cellular connections.
AETA-Passport-OCR-Vault
NEW BUILD
PASSPORT VAULT
ICAO 9303 MRZ extraction, biometric chip digital signature cryptographic validation
CONNECTED
PROTOCOL / MODEgRPC / WebAssembly (Sync)
SLA / LATENCY<350ms / 78ms
SECURITYAES-256 Vault / Zero-Leak
CHECKSUM VALIDATIONICAO 9303 Pass
FALLBACK:
Manual biographic MRZ entry by applicant with visual OCR confidence overlay and checksum warning.
AETA-High-Scrutiny-Enclave-Service
NEW BUILD
ENCLAVE ISOLATION
Air-gapped envelope encryption store for high-scrutiny applicant sensitive disclosures
CONNECTED
PROTOCOL / MODEREST / AES-256-GCM Envelope
SLA / LATENCY<250ms / 45ms
SECURITYFIPS 140-3 HSM / KMS
ACCESS CONTROLNeed-to-Know RBAC
FALLBACK:
Column-level encryption lock; queue to National Security Adjudication isolated enclave.
AETA-Vetting-Orchestrator
NEW BUILD
ASYNC ORCHESTRATOR
Multi-agency parallel fan-out coordinator, statutory rule consolidator & status aggregator
CONNECTED
PROTOCOL / MODEAsync Event-Driven Fan-Out
SLA / LATENCY<1,500ms / 184ms
SECURITYGovCloud IL-5 / VPC Mesh
FAN-OUT CONCURRENCY8 Agencies Async
FALLBACK:
Hold application in PENDING_EXT_VETTING; circuit breaker retry loop; sub-second intake never stalls.
AETA-Recurrent-Vetting-Engine
NEW BUILD
SCREEN 3 RECURRENT VETTING
24/7 continuous CDC change data capture monitoring against active lookout feeds & revocation engine
CONNECTED
PROTOCOL / MODE24/7 CDC Stream Daemon
SLA / LATENCY<600ms / 62ms
SECURITYTLS 1.3 / IL-5 GovCloud
REVOCATION BROADCAST<15s to Carrier PDS
FALLBACK:
Spool CDC batch records to local ledger; re-poll on reconnect; automated alert to targeting officer.
AETA-Authorization-Data-Store
NEW BUILD
POSTGRESQL RDS
Multi-AZ PostgreSQL RDS persistence store with row-level encryption and immutable audit ledger
CONNECTED
PROTOCOL / MODEPostgreSQL Native / TLS 1.3
SLA / LATENCY<50ms / 12ms
SECURITYAES-256 Storage / IL-5
AVAILABILITY99.999% Multi-AZ
FALLBACK:
Read-replica promotion; write-ahead logging to disk queue; zero loss of in-flight authorizations.
AETA-Officer-Adjudication-Portal
NEW BUILD
SCREEN 2 CBPO ADJUDICATION
Real-time CBPO triage queue, 8 USC § 1187 statutory override, interview scheduling & disposition
CONNECTED
PROTOCOL / MODEHTTPS / WebSocket (TLS 1.3)
SLA / LATENCY<200ms / 28ms
SECURITYPIV/CAC PKI / RBAC
AUDIT LEVEL100% SHA-256 Ledger
FALLBACK:
Local offline inspection queue with cached officer credentials; automated audit synchronization upon reconnect.
AETA-PDS-Verification-Edge-Service
NEW BUILD
CARRIER EDGE
Sub-200ms edge gateway returning instant Board / No-Board decisions to airline check-in desks
CONNECTED
PROTOCOL / MODEREST / EDIFACT Edge (Sync)
SLA / LATENCY<200ms / 26ms
SECURITYECC P-256 JWT Signed
THROUGHPUT10k+ req/sec
FALLBACK:
Signed ECC P-256 fallback tokens; return MANUAL_CHECK on cold cache to direct passenger to counter.
AETA-Flexible-Reporting-Service
NEW BUILD
SCREEN 4 EXECUTIVE ANALYTICS
Multi-dimensional operational telemetry, throughput analytics, SLA compliance & executive exports
CONNECTED
PROTOCOL / MODEHTTPS / REST (Async)
SLA / LATENCY<500ms / 85ms
SECURITYGovCloud IL-5 / mTLS 1.3
EXPORT FORMATSJSON / CSV / Parquet
FALLBACK:
Render from cached hourly rollups; recompute on background thread without impacting query response.