Steria API-PNR Solution

What are API & PNR and why do they differ?
API and PNR are two different sets of passenger information collected by air carriers. They can be sent to national authorities in advance of an incoming traveller arrival in a Member State’s territory.

  • Advanced Passenger Information (API)

API is collected by airlines on behalf of governments to serve border control objectives. It includes biographic data contained in travel documents and some flight details. In the EU, the required data elements are contained in the 2004 API directive.
API data enables border control agencies to perform part of border checks prior to the landing of passengers on its territory. It provides these agencies with the adequate time to prepare their response (handling of “suspect” travellers) and permits faster border crossing at the physical border for legitimate travellers.

  • Passenger Name Record (PNR)

PNRs have been created by airlines in order to serve their own commercial purposes. A PNR contains information submitted voluntarily by travellers while booking a ticket and is thus a much richer set of data than API. It includes items such as payment information and seat number, which make it useful from an intelligence point of view, but also more sensitive in terms of data privacy protection.
The wealth of information provided by PNR, but also the fact that it is based on unverified information, makes it primarily fitted for criminal intelligence rather than systematic border control. In its 2011 proposal, the EC thus limits the use of PNR data to the fight against terrorism and serious crime, which excludes irregular immigration concerns. Beyond “hit/no hit” queries on national and EU databases, PNR enables the use of more sophisticated investigation and data analysis systems in order to identify previously unknown suspects, as well as feeding investigation and prosecution of criminal cases.
Steria Homeland Security Suite
Fulfilling all PNR system requirements and much more, Steria’s tailored solution for PNR relies on the power of Oracle products, including proven and cutting edge data analytics applications, and on a dedicated case management solution for Passenger Information Units.
Data collection

Steria offers a flexible solution for the collection and validation of API and PNR data transmitted by air carriers. Our Data Collection Platform enables data acquisition, data quality management, API and PNR record reconciliation and normalisation. It also ensures the secure transmission and storage of the collected data.

Actionable data analytics

  • Real time Decision Support

Oracle RTD a complete decision management solution that delivers real-time decisions and recommendations. It automatically renders decisions within a business process to create tailored messaging for users. Oracle RTD features a decision engine enabling the PIU agent to establish and combine risk criteria and profiles. Furthermore, it learns from the results of past evaluations in order to optimise the criteria defined. In a PNR context, Oracle RTD evaluations, based on predefined profiles and rules, can be triggered in different ways: whenever new data is available, when decided by a PIU agent and at defined time intervals.

  • Advanced Search

Oracle BI provides comprehensive capabilities for business intelligence, including enterprise reporting, dashboards, ad-hoc analysis, multi-dimensional OLAP, scorecards, and predictive analytics on an integrated platform. Enabling PIU agent to combine as much criteria as they want, Oracle BI provides the Advanced Search functionality. Reporting includes feedback on the performance of the risk profiles being used, to facilitate their management and improvement.

  • Business Intelligence & Information discovery

Oracle Endeca is an information discovery tool that lets the PIU agent interact with the data, exploring it from different angles, and uncovering previously unknown knowledge of the data. This helps the agents to gain greater insight into the data set available to them, helping to fine tune the rules they are using to meet a risk profiling objective. It helps them review the relevance of data present across the available PNR records, understanding which elements are frequently present, and so of value in a risk rule. This information can then be used to improve the risk criteria established in Oracle RTD.

  • External System Queries

API/PNR data is crossed checked against external systems such as Schengen Information System II and Wanted Persons Lists. These queries can be automated and business rules can be applied, in order to trigger different alerts for the PIU depending on the queries results.

  • Enhanced Security

Security is an essential element of the PNR system. Measures taken at the database, application, administration and organisational levels within a coherent security policy will permit to safeguard the system and traveller’s data privacy. Based on Oracle Audit Vault, the in-built security features of the proposed solution and our experience in developing sensitive systems helps you meet these fundamental objectives.

  • In memory machine

Optionally, Steria’s PNR solution can be deployed on Oracle Exalytics. It is the industry’s first engineered system for in-memory analytics that delivers extreme performance for Business Intelligence applications. Engineered systems, with both Oracle hardware and software designed to work together, enable to optimise performance while reducing operational cost risk with fully tested and stack-optimized hardware and software from firmware to application.

 Advanced Case Management
The PIU is in charge of data exchanges and collaboration with other National Authorities and other Member States. Steria Case management solution for PNR allows the allocation of the various requests among PIU agents, the follow-up of exchanges with other authorities, and facilitates the identification of what information must/can be shared with others
Why Steria?

After developing major systems for EU DG Home Affairs (SIS II, VIS, EURODAC), Steria has designed concepts and solutions for API/PNR to help Member States make the most out of these data and comply with the existing and upcoming EU regulations.
At Steria, we combine a huge experience of the Homeland Security and Transport domains which enable us to support Governments in designing and implementing the right solution.
Particularly relevant to this topic are our experience and expertise in:

  • EU wide distributed information systems
  • Data analytics, including partnerships with major technology providers
  • Investigative Case Management supporting informed decision making and police investigations
  • Secure information sharing for multi-agency collaboration
  • Systems for Air Traffic Management, with an R&D centre in Singapore dedicated to innovation in transport


Systèmes de renseignement
Systèmes de gestion des risques