N.Y. Comp. Codes R. & Regs. tit. 15 § 32.10

Current through Register Vol. 46, No. 45, November 2, 2024

Section 32.10 - Encrypted two-dimensional (2D) bar code security feature

(a)General information.

Key information (data elements) pertaining to the insurance company, policy, ID card issuer, registrant and vehicle are captured and secured within an encrypted 2D bar code using public domain bar coding standards (PDF-417), data encryption and digital signature (Triple DES). This anti-fraud measure eliminates easily forged ID cards and helps to ensure that there is a policy in force at the time of ID card issuance and subsequent submission to DMV.

(b)Key data elements captured within bar code.

ID card issuers shall capture accurate and compatible information from registrant policyholders for policy (insurer reporting) and ID card issuance purposes.

(1) ID Card Issuer's New York State Department of Financial Services license number

(2) Insurance company code

(3) Policy number (may be binder or NYAIP assignment or control number)

(4) Current date (date of issuance entered programmatically)

(5) Effective date

(6) Expiration date

(7) Preparation date (temporary NYAIP ID card only)

(8) Individual registrant name number 1

* Last name (surname)

* First name (given name)

* Middle initial

* Suffix (if applicable)

(9) Individual registrant name number 1 formatted in one field for printing

(10) New York State driver's license number for individual registrant 1

Individual registrant name number 2 (if applicable)

* Last name (surname)

* First name (given name)

* Middle initial

* Suffix (if applicable)

(11) Individual registrant name number 2 formatted in one field for printing

(12) New York State driver's license number for individual registrant 2

(13) Organization registrant name (one name only)

(14) Federal Employer's Identification number (FEIN) for organization registrant name

(15) Address of registrant for mailing

* Street

* City

* State

* Zip code

(16) Vehicle identification number (VIN)

(17) Year of vehicle

(18) Make of vehicle

(19) Number of Seats- for hire registration classes only

(20) Indicators for REPLACEMENT VEHICLE, HISTORICAL, TOW TRUCK and special codes for prescribed wording printed in lieu of vehicle specific information as provided for in section 32.13 of this Part.

Note:

Zeros may be entered for New York State a driver's license number when the individual registrant does not have a New York State driver's license. Zeros may be entered for a FEIN when the organization registrant does not have a FEIN.

(c)Generation of ID cards with compliant encrypted 2D bar codes.

nsurance companies, agents and brokers licensed by the New York State Department of Financial Services that issue ID cards shall issue ID cards in full compliance with the data content, format and technical requirements of this Part, including DMV technical documentation. DMV developed ID card issuance software and documentation can be used by insurance companies, agents and brokers to meet the technical requirements of this Part.

(1) DMV developed software. The DMV stand-alone software requires a Windows operating system, an ink-jet or laser printer (desktop or network printing at a minimum of 300 dpi), a modem (28.8 minimum speed) and at least temporary access to the Internet along with an e-mail address. The modem and Internet requirements are only for initial download, set-up, and to receive any future updates. Upon the request of a New York State Department of Financial Services licensed agent, broker, agency or insurance company the New York State Department of Financial Services shall distribute the DMV software to its licensees in accordance with procedures established by the New York State Department of Financial Services.

(2) Technical documentation. Insurance companies, agencies, brokerages may wish to bar code enable existing automated ID card issuance applications and systems. Upon receipt of an executed confidentiality statement executed by an authorized employee of an insurance company, agency or brokerage DMV will furnish its developmental materials. Such development materials provide a starting point for internal development of mainframe or other environments, platforms, etc. A vendor who has an existing relationship with a New York State Department of Financial Services licensee may obtain development materials from DMV upon submission of the required confidentiality agreement and a letter from the licensee or an authorized employee of the licensee confirming the business relationship.

(3) Faxable bar code. Incorporation of a faxable bar code directly on an ID card or on a form that prints ID cards in multiples, similar to that produced by the DMV software, is optional. A faxed document with a bar code that is too small (insufficient resolution) to be read shall not be accepted by DMV.

(4) E-mail utility. Incorporation of an ability to e-mail ID cards in a PDF format, similar to the utility employed by the DMV software, is optional.

(5) Certification. Issuers who develop their own applications and systems to issue compliant encrypted 2D bar coded ID cards in full compliance with this Part shall submit sample documents to DMV for testing purposes and receive official DMV approval prior to commencing ID card production and distribution. Issuers shall submit a sample of each type of ID card to be issued. In addition, if an issuer is incorporating a faxable bar code, a sample of each type of ID card shall be faxed to the commissioner or a designated DMV representative.

(6) Data formatting. Data elements shall be captured in full accordance with DMV technical specifications and formatted in full accordance with the examples provided in the Appendices of this Part. Commas (,) are used as delimiters to separate components of individual names. Semi-colons (;) are used as delimiters to separate components of organization names.

(7) Encryption key and PIN number. Provision is made for the replacement of security components that may be compromised. However, the New York State Department of Financial Services, in consultation with the department may withhold the issuance of replacement security components if security is repeatedly compromised due to the repeated failure of a specific licensee to institute appropriate procedures and necessary safeguards.

(d)Process overview.

Upon submission of an ID card with a compliant encrypted 2D bar code, DMV shall scan (decode the symbol), authenticate the encryption key and PIN number and electronically verify that the issuer's New York State Department of Financial Services license is not revoked. DMV will make appropriate name, vehicle and date comparisons to ensure that the card is otherwise in compliance with the requirements of this Part. Key data elements including insurance company code, issuer's New York State Department of Financial Services license number, policy number and effective date of coverage or registration shall be captured and posted to DMV's insurance information database. In accordance with Part 34 of this Title, these key data elements along with name, address and vehicle information will be included in an electronic mandatory verification (MVF) transaction sent to an insurance company due to the absence of required electronic proof of insurance.

(e)Time frame for compliance.

(1) Effective January 7, 2002 the department, its agents or any party authorized by DMV to process registrations shall not accept an ID card for registration, insurance processing or for any other purpose that does not contain a compliant encrypted bar code. Both the ID card and the bar code shall be in full compliance with the requirements of this Part including DMV's technical specifications. The January 7, 2002 effective date applies to ID cards that are presented to DMV in an issuing office or received by DMV through the mail or by delivery service.

(2) ID cards containing a compliant encrypted 2D bar code shall be provided to policyholders with policy renewals that have an effective date on or before January 7, 2002. Both the ID card and the bar code shall be in full compliance with the requirements of this Part including DMV's technical specifications.

(3) Effective January 15, 2003 the failure of a registrant or driver to produce an ID card containing a compliant encrypted 2D bar code at the request of a law enforcement officer is presumptive evidence of uninsured operation.

N.Y. Comp. Codes R. & Regs. Tit. 15 § 32.10

Amended New York State Register April 29, 2015/Volume XXXVII, Issue 17, eff.4/29/2015

Amended New York State Register July 29, 2015/Volume XXXVII, Issue 30, eff.7/29/2015