Toll Management System & Products Certification Scheme

The objective of this scheme is to promote usage of Trusted Toll Management System Software and Products installed therein like TMS Application, Camera, RFID etc. This scheme will facilitate improvement of National Cyber Security profile related to Roadways and provide control to security profile for National Critical Information infrastructures. The implementation of this Certification Program is to provide confidence to acquirers i.e. NHAI & IHMCL that the risks associated with the threats currently set forth in this scheme are addressed by a provider through conformance to this scheme.

The following list of activities are will be performed for certification of TMS Application:

• Functional Testing
• Security Testing
• Secure Code review
• Database tamper-proof/ Integrity testing

Database tamper-proof/ Integrity testing Scope may be as follows:

• Data Integrity: Ensure that the data in the database remains accurate, consistent, and unaltered by unauthorized means.
• Security: Verify that only authorized users (through the application) can modify the database.
• Audit Trail: Check logs for any unauthorized access or changes.

In addition, the applicants shall submit ISO 9001 Certificate and/or ISO 27001 for Developer & Integrators of the product. On successful completion and recommendations of Certification committee, the certificate with mark "Certified Toll System (CTS)" will be awarded.

Certification Process

The Certification may be applied through two methods:

• STQC Labs (Central Government Labs)
• STQC's empaneled Labs (SETL) which have a valid scope

For certification through STQC Labs, the following process needs to be followed:

• Step 1: The customer applies to respective STQC IT centre with the consent of STQC Certification Body for certification by submitting duly filled in application form along with Toll Management system manual and related user & development documents, Internal Security and Functional test reports and charges.
• Step 2: The assessor reviews the application for adequacy as per quality criteria and provides feedback to the customer.
• Step 3: The assessment team evaluates the application using test tools and manually. Also, assessment of back-end processes of the organization is carried out for compliance with scheme requirements.
• Step 4: After the satisfactory assessment results, STQC issues the Certificate of Registration and Certification Mark. The certificate shall remain valid for three years with annual surveillance and surprise surveillance audits.

For certification through SETLs Labs, the following process needs to be followed:

• Step 1: The customer applies to selected SETL through their own approved procurement procedures.
• Step 2: SETL seeks the consent of STQC Certification Body for certification by submitting duly filled in application form along with Toll Management system manual and related user & development documents, Internal Security and Functional test reports and charges.
• Step 3: The validator will be appointed by STQC Certification for each website submitted by SETLs. The SETL will perform the testing through its assessor who reviews the application for adequacy as per quality criteria and provides the feedback to the customer under the supervision of the validator.
• Step 4: The assessment team evaluates the application using test tools and manually. Also, assessment of back-end processes of the organization is carried out for compliance with scheme requirements.
• Step 5: After the satisfactory assessment results, STQC issues the Certificate of Registration and Certification Mark. The certificate shall remain valid for three years with annual surveillance and surprise surveillance audits.

Charges for certification

In this regard, the following certification fees structure will be charged:

• In case testing conducted by STQC: Rs.10 Lakhs plus GST inclusive of certification, and surveillance audit charges.
• In case testing conducted by SETL: Rs.1 Lakhs plus GST inclusive of certification and surveillance audit charges.

Contact Us