Security Technology Centre CETSE - CETSE

For the purposes of combating illegal immigration and guaranteeing public security, Organic Law 14 of 20 November 2003, Reforming Organic Law 4 of 11 January 2000 on the rights and freedoms of foreigners in Spain, provides that any company, transport company or carrier shall be obliged to submit to the Spanish authorities responsible for entry control information on passengers to be transferred, whether by air, sea or land.

Therefore, the collection of passenger information is required so that it can be used, not only by the bodies combating illegal immigration, but also by those police departments responsible for the fight against terrorism and organised crime.

Consequently, the Advanced Passenger Information System (APIS) became operational in March 2007, one of the key components of its architecture being its electronic database (a system for storing information on passengers and airline crew).

This project focuses on the development of an electronic system to collect and collate information on travellers seeking access to the national territory by air, land or sea from countries outside the Schengen area.

The main purpose of APIS is to combat illegal immigration and ensure public security. The information collected by APIS can also be exploited by police departments involved in the fight against organised crime and terrorism.

In addition, the system provides for increased security of means of transport, as well as the prevention of illegal migration and the movement of potentially inadmissible persons.

The results obtained after the implementation of this project are:

• Automated analysis of data of passengers to be transferred, whether by air, sea or land, registered by any company, transport company or carrier wishing to enter Schengen territory.
•  Fight against illegal immigration.
• Improved detection of possible terrorist threats.
• Increased security of means of transport, prevention of illegal migration and prevention of the movement of potentially inadmissible persons.
• Automatic screening of passengers for persons belonging to terrorist groups and organised crime.

With the following expected impact:

•  Reduction in the need for resources for the analysis of data from passenger transport companies.
• Reduction in the number of errors in the detection of persons with police flags.
• Compliance with European Directive 2010/65/EU for the correct use of passenger data.

Regulations 2018/1240 and 2018/1241 of the European Parliament and of the Council entered into force on 9 October 2018. These regulations were published in the Official Journal of the European Union in mid-September following the adoption of the ETIAS regulation by the European Council.

Following the implementation of these regulations, the EU Agency eu-LISA, as well as the Member States, must start developing the electronic ETIAS system and build the platform to monitor future eligible citizens. The ETIAS system will be an essential tool to contribute to the security of the Schengen Area.

The ETIAS system is similar to other electronic travel permits such as ESTA (United States) or eTA (Canada). Like these, the purpose of ETIAS is to screen all travellers from eligible countries before they travel. In this particular case, the aim is to identify possible threats, fraud and risks linked to persons wishing to travel to any of the countries in the Schengen Area.

The ETIAS system is a fully electronic system that authorises and tracks travellers from countries that do not require a visa to enter the Schengen area.

ETIAS guarantees a high level of security in the Union, allowing compliance with human rights and fundamental freedoms, and is an essential instrument in the fight against illegal immigration, as it involves carrying out an assessment of travellers prior to their arrival at the borders of the Schengen area.

In addition, this system achieves the following:

• Save time for travellers.
• Improve border management.
• Prevent illegal immigration.
• Reinforce the fight against crime and terrorism.
• Visa liberalisation.

The expected results after the implementation of this project are:

• The implementation of the border control system for National Police and national central system ETIAS, which results in:
  • Ensuring a high level of security in the Union.
  • Increased efficiency in the fight against illegal immigration.
  • Enabling legitimate travel within the Schengen area.
  • Protection of public health.

With the following expected impact:

•  Adequacy of national systems to be able to implement the national phase of the ETIAS project in the field of the fight against illegal immigration, improving the capacities of the network.

Since 2008, the European Commission has been stressing the need, as part of the Union's Integrated Border Management Strategy, to make use of ICT to implement "Smart Borders".

This framework establishes the Entry-Exit System (EES) which will electronically record the time and place of entry and exit of third-country nationals admitted for a short stay on the territory of the Member States and calculate the duration of their authorised stay. This will optimise the management of the Schengen area in the interest of a strong protection of the Schengen area.

This project develops the software, hardware and the necessary developments for the implementation of the new national system for the electronic registration of entry and exit of travellers, as well as the management of access refusals, and its connection to the central system of the EES.

The objectives to be addressed by this project are:

• Automation of border control: To reduce border control time and improve the quality of border controls by automatically calculating authorised stays.
• Replacing passport stamping by electronically registering each border crossing inside and outside the Schengen area, calculating the length of stay of each traveller.
• Ensure reliable and remote identification of persons overstaying their authorised duration of stay.
• Enhancing security and the fight against terrorism by allowing law enforcement authorities access to the system.
• Supporting the detection of terrorists, criminals, as well as suspects, perpetrators or victims of crime.

The expected results after the implementation of this project are:

• Registration of entry and exit data and refusal of access of third country nationals crossing the borders of the Member States.
• Elimination of the physical stamping of passports.
• Systematic and reliable identification of persons entering the Schengen area.

With the following expected impact:

• Reducing delays at border controls and improving the quality of border controls.
• Strengthening internal security and effectively combating irregular immigration, organised crime and terrorism.

On June 11, 2019, the Interoperability Regulations entered into force:

• Regulation (EU) 2019/817 establishing a framework for the interoperability of EU information systems in the field of borders and visas.
• Regulation (EU) 2019/818 establishing a framework for the interoperability of EU information systems in the field of judicial cooperation, asylum and migration.

These Regulations aim to improve EU information systems for security, border and migration management and to make them work together in a smarter and more efficient way.

Prior to the adoption of the Regulations, in April 2016, the Commission had presented a Communication entitled "Smarter and more robust information systems for border and security management". This set out possible ways to improve the functioning of EU information systems in order to strengthen internal security and border management. In its Resolution of 6 July 2016, the European Parliament called for proposals to improve and develop existing EU information systems, address information gaps and move towards interoperability, as well as its proposals on the obligation to exchange information at EU level, together with the necessary data protection safeguards.

In its conclusions of December 15, 2016, the European Council called for continuity in delivering results on the interoperability of EU information systems and databases. Interoperability between EU information systems was established to ensure that these systems and their data complement each other while respecting the fundamental rights of individuals, in particular the right to the protection of personal data.

At the time the Interoperability Regulations were adopted, there were three EU information systems in operation:

• Eurodac
• Schengen Information System (SIS)
• Visa Information System (VIS)

Europe is currently updating these systems and developing new ones:

• Entry and Exit System (SES / EES).
• Travel Information and Authorization System (SEIAV / ETIAS)
• Registration Information System - Third Country Nationals (ECRIS-TCN)

In accordance with the referenced Regulations and in order to establish the interoperability of the EU IT systems, the following components are created:

• A European search portal (PEB / ESP) for single search and retrieval of results from all systems, authorized to access (biographic and biometric).
• A shared biometric matching service (SCB / sBMS) will allow users to efficiently search and cross-reference biometric data from various systems.
• A common identity repository (RCDI / CIR) will allow easy access to biographic information of non-EU citizens.
• A multiple identity detector (DIM/MID) that will help detect multiple identities with the dual purpose of ensuring the correct identification of bona fide individuals and combating identity fraud.

The expected results after the implementation of this project are:

• To exchange information more easily, increasing security in the EU.
• Improved implementation of the common visa policy.
• More efficient border checks.
• Improved detection of persons with multiple identities.

With the following expected impact:

• Combating illegal immigration.
• Ensuring public security.

Regulations 2018/1240 and 2018/1241 of the European Parliament and of the Council entered into force on 9 October 2018. These regulations were published in the Official Journal of the European Union in mid-September following the adoption of the ETIAS regulation by the European Council.

Following the implementation of these regulations, the EU Agency eu-LISA, as well as the Member States, must start developing the electronic ETIAS system and build the platform to monitor future eligible citizens. The ETIAS system will be an essential tool to contribute to the security of the Schengen Area.

The ETIAS system is similar to other electronic travel permits such as ESTA (United States) or eTA (Canada). Like these, the purpose of ETIAS is to screen all travellers from eligible countries before they travel. In this particular case, the aim is to identify possible threats, fraud and risks linked to persons wishing to travel to any of the countries in the Schengen Area.

The objective of this office is to analyse whether visa exempt third country nationals have any alerts registered in international security information systems such as Interpol, the Schengen Information System (SIS) and Europol, and if so, to prevent their entry into Schengen territory. This ensures a high level of national and European security, as well as greater effectiveness in the fight against illegal immigration.

To this end, it is necessary to provide the ETIAS National Office with the necessary equipment to support the ETIAS system:

• The licence and equipment for conducting interviews (CISCO WEBEX platform).
• A laboratory with a training room equipped with PCs, PCM, Tablet, kiosks and 1 ABC, plus general training material (blackboard, projector ....).

The expected results after the implementation of this project are:

• Determining the eligibility of visa exempt third country nationals, or eligible ETIAS countries.
• Training.
• To complement the visa liberalisation policy.
• Prevent irregular migration.
• Improve border management.
• Strengthening the fight against terrorism and crime.

At the end of 2001, the Ministry of the Interior began the implementation of the Integrated Telecommunications Interception System, providing the operational units of the State Security Forces and Corps (FCSE) with the necessary means for the reception and recording of electronic communications authorized by a court order.

The system provides an interception tool and centralized storage of communications. This allows operational users distributed throughout the national territory to access the system easily and securely.

Since that time, the initial system has undergone extensions and modifications to adapt to the emergence of new telecommunications technologies. In addition, it has often been necessary to increase the capabilities of the system due to the growth in the number of targets, to make improvements in some functionalities and to incorporate new ones of great importance for police investigation, as well as to establish the necessary redundancy in this type of critical systems.

The Lawful Interception of Communications is an essential tool to ensure a high level of security at the external borders of the European Union, an area of freedom, security and justice, allowing an active fight against illegal immigration, cross-border crime, human trafficking from immigration and unauthorized border crossings.

The main objective of SITEL is to respond to court orders for the interception of communications and to provide the security forces with a state-of-the-art system to support the investigation and prosecution of criminals.

The results obtained after the implementation of this project are:

• To comply with the requirements established by the FCSE for the fulfillment of court orders related to the legal interception of electronic communications and data preservation.
• Unify the management of support, maintenance, new acquisitions and technological renewals of the infrastructure that supports the legal interception of electronic communications and data preservation.
• To have an agile framework for expanding capacities according to new operational, regulatory and security requirements.
• To enhance the control mechanisms of the infrastructure that supports the lawful interception of electronic communications and data preservation for the optimization of resources and investments.

With the following expected impact:

• Increased capabilities for the fight against illegal immigration, cross-border crimes and human trafficking.
• Strengthening of the system for the detection of criminal groups linked to human trafficking and illegal immigration.

Since 2008, the European Commission has been stressing the need, as part of the Union's integrated border management strategy, to make use of ICT to implement "Smart Borders".

This framework establishes the Entry-Exit System (EES) which will electronically record the time and place of entry and exit of third-country nationals admitted for a short stay on the territory of the Member States, and which will calculate the length of their authorised stay. This will optimise the management of the Schengen area in the interest of a strong protection of the Schengen area.

EES will apply to third-country nationals admitted for a short stay on the territory of the Member States; as well as to third-country nationals whose entry for a short stay has been refused.

This project supplies, installs and configures the Manual Control Posts (PCM) in the entry and exit areas of the Spanish border posts within the national infrastructure of the European Entry-Exit System.

The Manual Control Post will be the equipment used by the border police and will be installed at border crossing points. It is a checkpoint generally located in a booth or counter, where the police officer has the necessary elements to carry out a border control in accordance with the European and national regulations in force.

PCMs shall have the functionality of biometric verification and enrolment of the traveller, which will ensure that the traveller is the legitimate bearer of the travel document by comparing it with the biometric markers available on the travel document.

Biometric verification includes both fingerprint and facial biometric capture, as well as software and information management elements.

The PCM is composed of the following elements:

• Workstation, consisting of personal computer and monitor.
• Document verifier.
• Facial image capture system, which can be constituted as a stand-alone device or integrated in a biometric totem together with the fingerprint capture device.
• Fingerprint capture device which can be constituted as a stand-alone device or integrated in a biometric totem together with the facial image capture system.
• Interactive monitor.

Scheme of manual border checkpoints.

The acquisition of such equipment will contribute to achieving the following objectives:

• Increasing the effectiveness and efficiency of the resources available at borders, as well as modernising their technological capabilities.
• To reduce delays at border controls and to improve the quality of border controls, thanks to the automatic calculation of the authorised stay of each traveller.
• Ensure systematic and reliable identification of persons overstaying their authorised duration of stay.
• Replace passport stamping with electronic registration at external borders, based on a combination of a passport control system with biometric capabilities.
• Generate lists of third-country nationals who have overstayed in the Schengen area.
• Combat illegal immigration and ensure public security.
• Strengthen internal security and the fight against terrorism by allowing law enforcement authorities access to travel history records.

The expected results after the implementation of this project are:

• Automation of the border infrastructure.
• Recording of entry and exit and refusal of entry data concerning third country nationals crossing the external borders of the Member States.
• Replace the physical stamping of the passport by the electronic registration of each border crossing point inside and outside the Schengen area, calculating the authorised stay for each traveller in accordance with European regulations.

With the following expected impact:

• Reducing delays at border checks and improving the quality of border checks.
• Rapid and efficient identification of travellers who overstay.

In 1985, the Schengen Agreement was signed by which several European countries abolished internal border controls (between these countries) and transferred these controls to external borders (with third countries).

The agreement, signed in the Luxembourg town of Schengen in 1985 and in force since 1995, establishes a common area covering a large part of the European continent. The participating countries apply common rules to control external borders, as well as on visas and cooperation between police and judicial services in criminal matters.

Due to the new regulatory framework governing the Schengen Information System and the importance and depth of the modifications necessary to adapt the current system, both from the point of view of the categories to be considered, the data incorporated and the flows and business logic, it is necessary to develop a new system to comply with the obligations arising from the European Regulations:

• REGULATION (EU) 2018/1860 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 28 November 2018 on the use of the Schengen Information System for returning illegally staying third-country nationals.
• REGULATION (EU) 2018/1861 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, amending the Convention implementing the Schengen Agreement and amending and repealing Regulation (EC) No 1987/2006.
•  REGULATION (EU) 2018/1862 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU.

This evolution of the system is necessary for the proper functioning of the system at national and Schengen level, and it is essential that all Member States start the flow of searches, amendments, creation and deletion of new alerts at the same time, as SIS II will be discontinued.

The objective of the present project is the realisation of a new development for the Schengen Information System RECAST (evolution of the current SIS-II). This new system would include those functionalities established by the SIS II RECAST and the BDSN (National Signals Database) and its information systems, as well as all the applications involved.

The results obtained after the implementation of this project are:

• SIS -RECAST custom developed system, with the new functionalities established by SIS II RECAST and the adaptation of BDSN (National Signalling Database) and its information systems, as well as all the applications involved.

With the following expected impact:

• Increased capacities for the fight against illegal immigration.
• Strengthening of the system for the detection of criminal groups involved in human trafficking and illegal immigration.
• Increased availability and security of access to the systems.
• Adaptation of the current system, both at national and Schengen level, to the new mandatory European regulations.

The Subdirectorate General of Information and Communications Systems for Security (hereinafter SGSICS) is responsible for providing support, with the technological means at its disposal, to the information systems common to the National Police and the Civil Guard, in the field of the fight against illegal immigration and cross-border crimes.

To this end, it is essential to have its own personnel with the necessary degree of specialisation and experience to tackle these projects, technologies, project management and knowledge of the regulatory framework.

Due to the lack of SGSICS's own personnel resources that meet these specifications, specialised consultancy services are required for the definition and implementation of the systems.

The objective of this action is to obtain specialised services for the performance of consultancy activities, definition of technological solutions, preparation of documentation and monitoring of projects within the scope of the Secretariat of State for Security, and in collaboration with the various competent authorities in the field.

To ensure that this investment is optimal, both in terms of economic use and in terms of technical capabilities, security and performance, it is necessary to have specific consultancy and technical definition services.

These consultancy services should be appointed to specialised companies in the public sector, so as to ensure that the consultancy provided is independent of possible industrial interests and only for the benefit of the public administration.

The expected results of this project are as follows:

• Availability of a set of reports, studies and support documentation for the deployment of new systems in the field of the fight against terrorism and organised crime, the monitoring and control of their implementation, as well as the identification of technological alternatives for these systems.
• Increasing national and European security by having large-scale systems with precise monitoring.

With the following expected impact:

• Improvement in the systematisation and documentation of the various projects and dossiers related to the fight against illegal immigration and cross-border crime.

To have the personal capacity to address the challenges set by the European Commission in the field of large-scale systems in the border area.

The SGSICS develops, operates and maintains a set of computer applications, as well as the systems that support them, within the scope of its competences according to Royal Decree 734/2020, of 4 August, which develops the basic organic structure of the Ministry of the Interior.

Given the special importance of the SGSICS in providing joint support to the National Police and Civil Guard and the constant technological evolution of the market, it is necessary to have specialised resources for the support and maintenance of the systems and communications, which guarantee their correct functioning and the resolution of incidents in a short period of time.

The objective of this project is the acquisition of a technical support service to provide maintenance and support for those systems located in the SGSICS oriented towards border and visa support.

This service enables the correct operation of the subdirectorate's systems, correcting incidents and keeping equipment up to date, as well as managing and securing communications.

Through this project, the following activities are contemplated:

• Transversal services to the systems.
• Tasks related to the maintenance of the base applications.
• Support to the different police forces and clients of the systems in general.

Among the transversal services and areas of work included are:

• Management and coordination of the services.
• 24*7 Service and response service.
• Quality assurance services.
• Testing services with customers or system users.
• Knowledge transfer at the end of the contract.

The results obtained after the implementation of this project are:

• Availability of a 24x7 service to respond to possible system failures.
• Availability of personnel specialised in the systems and equipment covered by the project.
• Verification by means of tests of the correct functioning of the systems.
• Updating of the systems to the most recent approved versions.
• Management and coordination of needs for the evolution of systems.

With the following expected impact:

• Reduction of system recovery time in the event of downtime.
• Early detection of future problems through preventive maintenance.
• Improved security by having up-to-date systems.
• Increased border security through high availability and upgraded systems.