Request for Collaboration: TSA Passenger Identity Verification

Purpose ‍

The Transportation Security Administration (TSA) has an urgent need for tools and capabilities to provide alternative identity verification solutions for passengers seeking access to security checkpoints and the sterile area of the airport to board a commercial aircraft.

The goal is for TSA to identify and validate one or more commercially available identity verification services that can be deployed at airports and offered as a service directly to travelers who do not have an acceptable form of identification. Invited vendors may enter into a Cooperative Research and Development Agreement (CRADA) with TSA to formalize the collaboration.

A CRADA is a written agreement that facilitates research and development (R&D) collaboration between one or more federal laboratories and one or more non-federal entities. Both parties to a CRADA may provide personnel, facilities, equipment, or other resources, but the government may not provide funding to non-federal entities under a CRADA. CRADAs are authorized by 15 U.S.Code § 3710a. The CRADA fact sheet provides information about DHS CRADAs, when to use a CRADA, who may participate in a CRADA, and the benefits of using a CRADA.

Requirements/Background

TSA’s default approach for verifying passenger identity leverages the Credential Authentication Technology (CAT) system to validate the authenticity of machine-readable identity credentials (e.g. license, passport), verify the passenger’s flight information, and confirm the passenger is the true bearer of the credential. TSA has worked with state DMVs and industry to develop acceptance and interoperability requirements for mobile credentials (e.g. state-issued mobile Driver's License). Additionally, TSA operates a call center that specializes in helping TSOs verify the identity of passengers who arrive at the checkpoint without any acceptable forms of ID.

With the enforcement of the REAL ID act on May 7, 2025, TSA urgently requires solutions that will verify the identities of passengers who hold a state-issued ID credential that is not REAL ID compliant (i.e. no star) using alternative sources for identity. TSA envisions an operational concept in which the passenger downloads a commercial application to their personal device, executes remote identity verification, is provided a secure token, scans their non-compliant ID and the vendor-issued secure token at TSA’s systems in the checkpoint, and proceeds to screening as directed by a TSA officer. These commercial solutions must:

• Be implemented within 3-months after CRADA execution
• Be implemented and operated by offerors without dependency on TSA systems or network modifications, personnel, or funding
• Achieve remote verification of passenger’s full name and date of birth at a level consistent with NIST fair evidence requirements
• Be a passenger-held mobile application
• Creation of alternative identity verification token to be transmitted to TSA’s 2nd generation Credential Authentication Technology (CAT-2) as an mDoc per ISO/IEC 18013-5:2021. We will evaluate other transmission methods that lead to a secure transmission.

Why You Should Participate

This is an opportunity to gather insights on existing, market-ready solutions that align with TSA’s operational needs. While not a guaranteed engagement, this effort represents a potential opportunity to collaborate with TSA on a future capability that enhances the passenger experience and security operations. Potential industry partners may choose to impose a fee on travelers who use their service(s).

Key benefits of participation:

• Engage directly with federal stakeholders on an innovative opportunity
• Demonstrate the capabilities of your technology in a real-world, high-visibility environment
• Shape future TSA procedures and partnership models
• No cost to participate or present your solution

Please note: This is not a solicitation for procurement. This request is to assess available capabilities. Participation is voluntary and does not guarantee future engagement or selection.

Click Here to Respond (NLT April 28, 2025, 11:59 PM ET)  

Timeline

April 16, 2025 – Request for collaboration opens and responses accepted
April 28, 2025 – Deadline to submit responses
April 29 – April 30, 2025 – TSA will review responses and notify HSWERX of invited companies
May 1, 2025 – HSWERX will notify invited companies for follow-on presentations
May 5 – May 6, 2025 – Presentations/Demonstrations scheduled (One hour each)*
May 6 – May 20, 2025 – CRADA Development
May 20, 2025 – CRADA Execution
‍
*In-person preferred but will accommodate a virtual presentation.

Questions? 

For questions, please contact Bridget Stauffer, bstauffer@hswerx.org.