SECURITY & FACILITATION · SECURITY & FACILITATION API/PNR A lack of uniformity in API/iAPI...

Continued

SECURITY & FACILITATION

API/PNRA lack of uniformity in API/iAPI and PNR systems can adversely affect the viability of

the air transport industry and reduce the effectiveness of utilizing such data for the

purposes it is required. It is essential, therefore, that States worldwide standardize

their data requirements and adopt standard formats for the electronic transmission

of such data.

Advance Passenger Information (API)

Advance Passenger Information (API) involves the capture of a passenger’s biographic

data and flight details by the carrier during the check-in process. This information

is electronically transmitted to the border control agencies at the destination. These

agencies can then screen details of passengers against their database(s), identifying

those travelers requiring more detailed examination upon arrival. It also enables the

efficient and expedited clearance of low-risk persons.

For aviation security purposes, identification could potentially be greatly enhanced by

“Interactive API (iAPI)” programmes that allow destination States to prevent potentially

high-risk persons from boarding flights at the place of departure. iAPI provides for

passenger-by-passenger online interchange of electronic messaging between the

aircraft operator and the border control agency in the State of destination (as opposed

to one API message for all passengers on a flight).

A Passenger Name Record (PNR)

A Passenger Name Record (PNR) is the generic name given to records created by

aircraft operators or their agents for each booking made by a prospective passenger

for commercial and operational purposes in providing air transportation services.

A PNR is built up from data that is supplied concerning all the flight segments of

a journey. States have begun requiring airlines to provide PNR data because the

information is deemed important for the threat assessment value that can be

derived from the analysis of the data.

PNR information is used by border control and security agencies to identify unusual

travel patterns. Specific PNR data elements may highlight such aspects as an unusual

itinerary, a date of booking close to the date of departure, modes of payment, and so

on. Anomalies and unusual patterns are identified based on pre-determined criteria,

leading border control authorities to subsequent actions such as physical controls.

A standard electronic message, called the “PAXLST” message, is the standard

developed for the transmission of API/iAPI transmissions and the “PNRGOV” message

is the standardized message for the transmission of PNR data. The World Customs

Organization (WCO), the International Air Transport Association (IATA) and ICAO have

jointly endorsed these messages as the international standards for the transmission

of API/iAPI and PNR data, respectively.

These Organizations have also published guidelines to assist in the implementation

of the messages. These may be found at http://www.icao.int/Security/FAL/Pages/

Publications.aspx. Additionally, ICAO Doc 9944 establishes uniform measures for

PNR data transfer and the subsequent handling of such data by States concerned.

Standards and Recommended Practices (SARPs) on API and PNR are found in

Annex 9 — Facilitation, to the Chicago Convention.

For more information on ICAO’s Facilitation Programme visit:

www.icao.int/Security/FAL/Pages/default.aspx

Or contact ICAO Security & Facilitation via:

sfp@icao.int