Commission Implementing Regulation (EU) 2016/68 of 21 January 2016 on common procedures and specifications necessary for the interconnection of electronic registers of driver cards

Subject-matter

Article 1

This Regulation lays down the requirements regarding the obligatory connection of the national electronic registers on driver cards to the TACHOnet messaging system referred to in Article 31 of Regulation (EU) No 165/2014.

Definitions

Article 2

In addition to the definitions laid down in Article 2 of Regulation (EU) No 165/2014, the following definitions shall apply: (a) ‘asynchronous interface’ means a process whereby a message in response to a request is returned on a new HTTP connection; (b) ‘broadcast search’ means a request message from a Member State addressed to all other Member States; (c) ‘card issuing authority’ (‘CIA’) means the entity empowered by a Member State for the issuing and management of tachograph cards; (d) ‘central hub’ means the information system enabling the routing of TACHOnet messages between Member States; (e) ‘national system’ means the information system set up in each Member State for the purpose of emitting, processing and responding to TACHOnet messages; (f) ‘synchronous interface’ means a process whereby a message in response to a request is returned on the same HTTP connection used for the request; (g) ‘requesting Member State’ means the Member State emitting a request or a notification, which is then routed to the appropriate responding Member State(s); (h) ‘responding Member State’ means the Member State to whom the TACHOnet request or notification is directed; (i) ‘singlecast search’ means a request message from a Member State addressed to a single Member State; (j) ‘tachograph card’, means either a driver card or a workshop card, as defined in Article 2(f) and (k) of Regulation (EU) No 165/2014.

Obligation to connect to TACHOnet

Article 3

Member States shall connect the national electronic registers referred to in Article 31(1) of Regulation (EU) No 165/2014, to TACHOnet messaging system.

Technical specifications

Article 4

TACHOnet messaging system shall fulfil the technical specifications laid down in Annexes I to VII.

Use of TACHOnet

Article 5

Member States shall follow the procedures set out in Annex VIII. Member States shall provide access to TACHOnet messaging system to their national card issuing authorities and control officers carrying out the duties referred to in Article 38 of Regulation (EU) No 165/2014, in order to facilitate effective checks of the validity, status and uniqueness of driver cards.

Entry into force

Article 6

This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union . It shall apply from 2 March 2018.

ANNEX ISupplementary provisions

ANNEX I General aspects of TACHOnet messaging system 1.    Architecture TACHOnet messaging system shall be composed of the following parts: 1.1. A central hub, which shall be able to receive a request from the requesting Member State, validate it and process it by forwarding it to the responding Member States. The central hub shall wait for each responding Member State to answer, consolidate all the answers and forward the consolidated response to the requesting Member State. All TACHOnet messages shall be routed by the central hub. 1.2. National systems of the Member States, which shall be fitted with an interface capable of both sending requests to the central hub and receiving the corresponding replies. National systems may use propriety or commercial software to transmit and receive messages from the central hub. 2.    Management 2.1.   The central hub shall be managed by the Commission, which shall be responsible for the technical operation and maintenance of the central hub. 2.2.   The central hub shall not store data for a period exceeding six months, other than the logging and statistical data set out in Annex VII. 2.3.   The central hub shall not provide access to personal data, except for authorized Commission personnel, when necessary for the purpose of monitoring, maintenance and troubleshooting. 2.4.   Member States shall be responsible for: 2.4.1. The setup and management of their national systems, including the interface with the central hub. 2.4.2. The installation and maintenance of their national system, both hardware and software, whether proprietary or commercial. 2.4.3. The correct interoperability of their national system with the central hub, including the management of error messages received from the central hub. 2.4.4. Taking all the measures to ensure the confidentiality, integrity and availability of the information. 2.4.5. The operation of the national systems in accordance with the service levels set out in Annex VI. 2.5.   MOVEHUB web portal The Commission shall provide a web based application with secured access, referred to as ‘MOVEHUB web portal’, providing at least the following services: (a) Member State availability statistics; (b) notification of maintenance on the central hub and Member State national systems; (c) aggregated reports; (d) contact management; (e) XSD schemas. 2.6.   Contact management 2.6.1.   The contact management functionality shall provide each Member State with the ability to manage the contact details regarding policy, business, operational and technical users of that Member State, being each Member State's competent authority the responsible for the maintenance of its own contacts. It shall be possible to view, but not edit, the contact details of the other Member States. 2.6.2.   TACHOnet shall use the contact details referred to in point 2.6.1 to populate the contact details in response messages.

ANNEX IISupplementary provisions

ANNEX II Functionalities of TACHOnet messaging system 1.   The following functionalities shall be provided through TACHOnet messaging system: 1.1. Check Issued Cards (CIC): allows the requesting Member State to send a Check Issued Cards Request to one or all responding Member States, to determine if a card applicant already possesses a driver card issued by the responding Member States. The responding Member States shall reply to the request by sending a Check Issued Cards Response. 1.2. Check Card Status (CCS): allows the requesting Member State to ask the responding Member State about the details of a card issued by the latter by sending a Check Card Status Request. The responding Member State shall reply to the request by sending a Check Card Status Response. 1.3. Modify Card Status (MCS): allows the requesting Member State to notify the responding Member State, through a Modify Card Status Request, that the status of a card issued by the latter has changed. The responding Member State shall reply with a Modify Card Status Acknowledgement. 1.4. Issued Card Driving License (ICDL): allows the requesting Member State to notify the responding Member State, through an Issued Card Driving Licence Request, that a card has been issued by the former against a driving licence issued by the latter. The responding Member State shall reply with an Issued Card Driving Licence Response. 2.   Other message types deemed suitable for the efficient functioning of TACHOnet shall be included, for instance error notifications. 3.   National systems shall recognize the card statuses listed in the Appendix to this Annex, when using any of the functionalities described in point 1. However, Member States are not required to implement an administrative procedure that makes use of all of the listed statuses. 4.   When a Member State receives a response or notification giving a status that is not used in its administrative procedures, the national system shall translate the status on the received message to the appropriate value in that procedure. The message shall not be rejected by the responding Member State, as long as the status in the message is listed in the Appendix of this Annex. 5.   The card status listed in the Appendix to this Annex shall not be used to determine if a driver card is valid for driving. When a Member State queries the register of the card issuing Member State via the CCS functionality, the response shall contain the dedicated field ‘valid for driving’. The national administrative procedures shall be such that CCS responses always contain the appropriate ‘valid for driving’ value.

ANNEX IIISupplementary provisions

ANNEX III Message provisions of TACHOnet messaging system 1.    General technical requirements 1.1.   The central hub shall provide both synchronous and asynchronous interfaces for the exchange of messages. Member States may choose the most suitable technology to interface with their own applications. 1.2.   All messages exchanged between the central hub and the national systems must be UTF-8 encoded. 1.3.   National systems shall be capable of receiving and processing messages containing Greek or Cyrillic characters. 2.    XML messages structure and Schema definition (XSD) 2.1.   The general structure of XML messages shall follow the format defined by the XSD schemas installed in the central hub. 2.2.   The central hub and the national systems shall transmit and receive messages that conform to the message XSD schema. 2.3.   National systems shall be capable of sending, receiving and processing all messages corresponding to any of the functionalities set out in Annex I. 2.4.   The XML messages shall include at least the minimum requirements laid down in the Appendix to this Annex.

ANNEX IVSupplementary provisions

ANNEX IV Transliteration and NYSIIS (New York State Identification and Intelligence System) Services 1.   The NYSIIS algorithm implemented in the central hub shall be used to encode the names of all the drivers in the national register. 2.   When searching for a card via the CIC functionality the NYSIIS keys shall be used as the primary search mechanism. 3.   Additionally, Member States may employ a custom algorithm to return additional results. 4.   The search results shall indicate the search mechanism which was used to find a record, either NYSIIS or custom. 5.   If a Member State chooses to record ICDL notifications then the NYSIIS keys contained in the notification shall be recorded as part of the ICDL data. 5.1.   When searching the ICDL data the Member State shall use the NYSIIS keys of the applicant's name.

ANNEX VSupplementary provisions

ANNEX V Security requirements 1.   HTTPS shall be used for the exchange of messages between the central hub and the national systems. 2.   National systems shall use the PKI certificates provided by the Commission for the purposes of securing the transmission of messages between the national system and the central hub. 3.   National systems shall implement, as a minimum, certificates using the SHA-2 (SHA-256) signature hash algorithm and a 2 048 bit public key length.

ANNEX VISupplementary provisions

ANNEX VI Service levels 1.   National systems shall fulfil the following minimum level of service: 1.1.   They shall be available 24 hours a day, 7 days a week. 1.2.   Their availability shall be monitored by a heartbeat message issued from the central hub. 1.3.   Their availability rate shall be 98 %, according to the following table (the figures have been rounded to the nearest convenient unit): An availability of means an unavailability of Daily Monthly Yearly 98 % 0,5 hours 15 hours 7,5 days Member States are encouraged to respect the daily availability rate, however it is recognised that certain necessary activities, such as system maintenance, require a down time of more than 30 minutes. However, the monthly and yearly availability rates remain mandatory. 1.4.   They shall respond to a minimum of 98 % of the requests forwarded to them in one calendar month. 1.5.   They shall respond to requests within 10 seconds. 1.6.   The global request timeout (time within which the requestor may wait for a response) shall not exceed 20 seconds. 1.7.   They shall be able to service a request rate of 6 messages per second. 1.8.   National systems may not send requests to the TACHOnet hub at a rate exceeding 2 requests per second. 1.9.   Every national system shall be able to cope with potential technical problems of the central hub or national systems in other Member States. These include, but are not limited to: (a) loss of connection to the central hub; (b) no response to a request; (c) receipt of responses after message timeout; (d) receipt of unsolicited messages; (e) receipt of invalid messages. 2.   The central hub shall: 2.1.   feature an availability rate of 98 %; 2.2.   provide to national systems notification of any errors, either via the response message or via a dedicated error message. The national systems, in turn, shall receive these dedicated error messages and have an escalation workflow in place to take any appropriate action to rectify the notified error. 3.   Maintenance Member States shall notify other Member States and the Commission of any routine maintenance activities via the web application, at least one week before the beginning of those activities if technically possible.

ANNEX VIISupplementary provisions

ANNEX VII Logging and Statistics of the data collected at the central hub 1.   In order to ensure privacy, the data for statistical purposes shall be anonymous. Data identifying a specific card, driver or driver licence shall not be available for statistical purposes. 2.   Logging information shall keep track of all transactions for monitoring and debugging purposes, and allow the generation of statistics about these transactions. 3.   Personal data shall not be retained in the logs for more than 6 months. Statistical information shall be retained indefinitely. 4.   The statistical data used for reporting shall include: (a) the requesting Member State; (b) the responding Member State; (c) the type of message; (d) the status code of the response; (e) the date and time of the messages; (f) the response time.

ANNEX VIIISupplementary provisions

ANNEX VIII Use of TACHOnet messaging system 1.    Issuing of driver cards 1.1.   When the applicant for a driver card holds a driving licence issued in a Member State different than the Member State of application, a broadcast Check Issued Card search shall be performed by the Member State of application. 1.2.   Member States issuing a driver card to a driver holding a driving license issued in another Member State, shall immediately notify the latter, through the Issued Card Driving Licence function, that a driver card has been issued. 1.3.   When the applicant for a driver card holds a driving licence issued in the Member State of application, and for which an ICDL notification had been previously recorded in its national register, the Member State shall perform either a singlecast CIC or a Check Card Status search to the Member State that sent the ICDL notification. 1.4.   Every ICDL notification shall be recorded in the national register of the Member State receiving it. 1.5.   Member States shall perform a broadcast CIC search for, at least, 30 % of applications presented by drivers holding a licence issued in that Member State. 1.6.   Member States may choose not to use the ICDL functionality as provided for in points 1.3 to 1.5. In this case, they shall carry out a broadcast CIC search for every application received. 1.7.   Member States shall notify the Commission by no later than the date of application of this Regulation on whether they will record the ICDL notifications in their national registers or they will follow the procedure in point 1.6. 1.8.   Member States that, five years or less before the date of application of this Regulation, did not record ICDL notifications in their national registers as set out in point 1.4, shall perform a broadcast CIC search for the 100 % of applications, except for driving licences for which an ICDL notification has been recorded, in which case point 1.3 shall apply. 1.9.   The obligation provided for in point 1.8 shall apply for a period of five years as from the date in which the recording of ICDL notifications has been effectively implemented in the national register of each Member State. 2.    Withdrawn, suspended or stolen driver cards 2.1.   If, in accordance with Article 26(7) and Article 29(2) of Regulation (EU) No 165/2014, a driver card has been withdrawn, suspended or declared as stolen in a Member State other than the issuing Member State, the competent authority of the former shall: (a) check the actual status of the card by sending a CCS request to the issuing Member State. If the number of the card is not known, a singlecast CIC request shall be sent before the aforementioned CCS request; (b) send a MCS notification through the TACHOnet messaging system to the issuing Member State. 3.    Exchange of driver cards 3.1.   Where the holder of a driver card applies for the exchange of the driver card in a Member State other than the issuing Member State, the competent authority of the former shall check the actual status of the card by sending a CCS request to the latter. 3.2.   Once the status of the driver card has been checked and it is valid for exchange, the competent authority of the Member State where the application has been made, shall send a MCS request through the TACHOnet messaging system to the issuing Member State. 3.3.   Member States renewing or exchanging a driver card to a driver holding a driving license issued in another Member State, shall immediately notify the issuing Member State, through the ICDL function, that the driver card has been renewed or exchanged.