HEARTY WELCOME TO ALL

PARTICIPANTS
ONLINE COURSE No. 20843
Contract Management
(JE/SSE of Engineering Department)
Course Director: Sivakumar. A
Professor Works/IRICEN/PUNE
7420041125
sivakumar@iricen.gov.in
 Sessions
Date
5 (1415 hrs - 1515hrs) 6 (1530 hrs - 1630hrs)
20-07-2020 Introduction (ASK) Basics of e-tendering (ASK)
Basics of Tender, Contract,
Basics of Tender, Contract,
21-07-2020 Contract management
Contract management (ASD)
(ASD)
Preparation of estimate
GCC for service contracts
22-07-2020 and rate analysis and
(ASD)
USSOR (GMA)
Important Provisions of Important Provisions of
GCC(excluding arbitration) GCC(excluding arbitration)
23-07-2020
including recent changes including recent changes in
in contract condition (SNP) contract condition (SNP)
Ethical Training /Vigilance Feedback and Valedictory
24-07-2020
(ASK) (ASK)
 ONLINE CLASS ETIQUETTES
• Please use your correct name in your PC / Laptop / Mobile
for better identification.
• Please Keep your Microphone Mute and Video Camera in
off Mode
• Before speaking, please raise your hand , online, using
button available on your WebEx window
• After asking question, Please revert back to Mute
position.
• Preferably, use Headphone with Mic so as to avoid
acoustic feedback and noise.
• Please be punctual
• Please talk one person at a time.
 E-Tender
Sivakumar. A
Professor Works/IRICEN/PUNE
7420041125
sivakumar@iricen.gov.in
 Topics covered

1. What is Digital Signature / Encryption Certificate

2. Basics of e-tendering / IREPS
3. Features of track procurement (store) contract
WHAT IS DIGITAL SIGNATURE
 Requirements of Traditional Signature

Authenticity
Same / Similar Signature again and again

Integrity
Able to be Confirmed at any later date by any one

Non-repudiation
Unable to reject / disown the signature
 Electronic Record
1. Very easy to make copies
2. Very fast distribution
3. Easy archiving and retrieval
4. Copies are as good as original
5. Easily modifiable
6. Environmental Friendly

Because of 4 & 5 together, these lack authenticity

 Why Digital Signatures?
• To provide Authenticity – ensure signer as the only
individual who has signed
• Integrity – ensure No Change during transit /
storage / copying etc
• Non-repudiation – impossible to disown to electronic
documents

•To use the Internet as the safe and secure medium for
e-Commerce and e-Governance
 Concepts
• A 2048 bits number is a very big number much bigger
than the total number of electrons in whole world. (PRIME
NUMBERS ARE USED)
• Trillions of Trillions of pairs of numbers exist in this
range with each pair having following property
A message encrypted with one element of the
pair can be decrypted ONLY by the other element
of the same pair
• Two numbers of a pair are called keys, the Public Key &
the Private Key. User himself generates his own key pair
on his computer
 Digital Signatures
Each individual generates his own key pair
[Public key known to everyone & Private key only to the owner]

Private Key – Used for making digital signature

Public Key – Used to verify the digital signature
 Here is an example of generating the Keys
1. Choose two distinct prime numbers, say p=61 and q=53
compute n , Thus n = 61 x 53 = 3233
2. Compute the Carmichael's totient function of n = λ(n) =
lcm (p − 1, q − 1) = LCM of (60,52)=780
3. Choose any number 1 < e < 780 such that it is coprime to
780. Thus, say e = 17
4. Compute d, the modular multiplicative inverse of e =
(mod λ(n)), yielding, d = 413
Thus the Public key is (n = 3233, e = 17).
The Private key is (n = 3233, d = 413*) (*Or also p and q)
 What is Digital Signature?
•Any message irrespective of its length can be compressed or
abridged uniquely into a smaller length message called the
Digest or the Hash.
• Smallest change in the message will change the Hash value

• Hash value of a e-Document when encrypted with the private key

of a person is his Digital Signature on that e-Document
– Digital Signature of a person therefore varies from document to
document thus ensuring authenticity of each word of that
document.
– As the public key of the signer is known, anybody can verify
the message and the digital signature
 Digital Signatures
I agree
efcc61c1c03db8d8ea8569545c073c814a0ed755
My place of birth is at Gwalior.
fe1188eecd44ee23e13c4b6655edc8cd5cdb6f25
I am 62 years old.
0e6d7d56c4520756f59235b6ae981cdb5f9820a0
I am an Engineer.
ea0ae29b3b2c20fc018aaca45c3746a057b893e7
I am a Engineer.
01f1d8abd9c2e6130870842055d97d315dff1ea3
• These are digital signatures of same person on different documents

• Digital Signatures are numbers

• They are document content dependent
 Paper signatures v/s Digital Signatures

Parameter Paper Electronic

Authenticity May be forged Can not be copied
Integrity Signature Signature
independent of the depends on the
document contents of the
document
Non-repudiation a. Handwriting a. Any computer
expert needed user
b. Error prone b. Error free
 Private key protection
• The Private key generated is to be protected and kept
secret. The responsibility of the secrecy of the key
lies with the owner.

• The key is secured using

• PIN Protected soft token

• Smart Cards
• Hardware Tokens
PIN protected soft tokens
• The Private key is encrypted and kept on
the Hard Disk in a file, this file is password
protected.
• This forms the lowest level of security in
protecting the key, as
• The key is highly reachable.
• PIN can be easily known or cracked.
Soft tokens are also not preferred because
• The key becomes static and machine
dependent.
• The key is in known file format.
 Smart Cards
• The Private key is generated in the crypto
module residing in the smart card.
• The key is kept in the memory of the smart
card.
• The key is highly secured as it doesn’t
leave the card, the message digest is sent
inside the card for signing, and the
signatures leave the card.
• The card gives mobility to the key and
signing can be done on any system.
(Having smart card reader)
Hardware Tokens
• They are similar to smart cards in functionality as
• Key resides inside the token.
• Key is highly secured as it doesn’t leave the
token.
• Highly portable.
• Machine Independent
• can be connected to the system using USB
port.
• Access to contents is password protected
• Install the drivers provided along with the USB
tokens on your computer before use.
Caution : Avoid keeping password on paper slips
along with the tokens.
 Digital Signing Certificates (DSC)
• It is issued to person specified by name and is mapped to a specific
personal E-mail ID.
• It is NOT issued to any designation.
• Usage and safe custody is responsibility of person in whose name
issued.
• Not to be handed over to anyone else for use even after transfer or
superannuation.
• To be purchased as a consumable and not T&P
• In case of loss, get it revoked from issuing authority
• Device driver required to use DSC. Supplied by supplier of DSC.
 Different types of Digital Signature Certificates
Class 1:
do not hold any legal validity as the validation process is based only on
a valid e-mail ID and involves no direct verification.

Class 2:
Identity of a person (valid E-mail ID) is verified against a trusted, pre-
verified database but no personal verification is involved.

Class 3:
Highest level where the person needs to present himself or herself in
front of a Registration Authority (RA) and prove his/ her identity. The E-mail ID
mentioned at the time of application needs to be verified online, prior to issue
of Digital signature.
 Digital Encryption Certificates (DEC)
• Functions are similar to the DSC.
• Works on a pair of keys (Public & Private).
• This is used to Encrypt a document.
• Every Railway Department has one Encryption certificate which
is attached with the tender document and is used to encrypt the
bids submitted on-line by the vendors.
• To be uploaded on IREPS once by dept. admin.
• Will be required only for tender opening thereafter.
 Digital Encryption Certificates (DEC)
• Can be purchased in the name of any official of the unit.
• In case of loss of DEC all tenders issued with the DEC are lost.
• To be purchased in duplicate in two different tokens (Not two
different DECs). One token to be kept in safe custody
• DEC not the property of the official in whose name it is
purchased. To be handed over to new incumbent in case of
transfer / superannuation. Handing over to be accompanied
with a recorded acknowledgement.
• To be preserved for as many years as the tender files are
preserved.
• DEC and DSC not to be purchased on same token.
 Certifying Authority
• Must be widely known and trusted
• Must have well defined Identification process before
issuing the certificate
• Provides online access to all the certificates issued
• Provides online access to the list of certificates
revoked
• Displays online the license issued by the Controller
• Displays online approved Certification Practice
Statement (CPS)
• Must adhere to IT Act/Rules/Regulations and
Guidelines
 CAs have been licensed by CCA
(List is dynamic)

•Safescrypt
•Capricorn CA
•IDRBT
•NSDL e-Gov CA
•GNFC
•Indain Air Force
•e Mudhra CA
•Verasys CA
•CDAC CA
 IREPS
Indian Railways E-Procurement System
 History of E-Procurement
• Minister for Railways announced in his Budget speech in year 2004-05 that all
procurement related activities to be done online.
• Pilot Project started in May 2005 on NR as NREPS (Northern Railway E-
Procurement System)
• In Sep 2008, CRIS hosted IREPS website for all Zonal Railways. CRIS is the
agency for Developing all modules for IREPS in consultation with NR as the
Co-ordinating Rly.
• 2008-09 Downloadable tender form was made compulsory. Cost of tender
form was to be submitted as separate instrument.
• 2010 stores e tendering started.
• 2016 Works e- tender was started.
• 2018 Online tender cost, EMD, E-TC and LOA, Bill Monitoring started
• Now all tenders are to be done through IREPS, hosted and managed by CRIS
 Features / Scope
• Online Creation & Publishing of Tender Document
• Online Creation & Publishing of Corrigendum
• Online TDC/EMD payments
• Online Submission of offers by Bidders
• Online Tender opening Process/ Automatic Generation of Comparative
Statement
• Online Viewing of Offers/ Comparative Statement by Railway Users & Bidders
• Online Automated Creation of Briefing Note
• Item Directories (for Works tenders)
o SOR & NS
o Unified and/or Zonal, Department-wise
• Condition Masters and Document Masters
 Features / Scope
• Online Technical Evaluation of Offers (in 2 packet system)
• Online Creation of Draft Tender Committee Minutes
• Viewing/Signing of TC minutes by TC members
o Adding of comments/suggestions by TC members, Modifications of TC minutes by
convener
• Online Submission of TC recommendations to Accepting Authority
• Acceptance/Modification/Return of TCR by AA with or without remarks
• Submission of revised TC recommendations
• Negotiations/ Counter Offer
• Online Creation and Issue of LOA
• Issue and Digital Signing of Contract by Railways & Successful bidder
• Online Creation and Publishing of Completion report
• Online raising of bill, its monitoring and payment
 Modules in IREPS
 13 Modules planned for IREPS.
 Out of which following 9 modules implemented
 ADMIN
 PARAMETERIAZATION (Back end module)
 RFQ (tendering, pre-bid meeting)
 BID (Bidding, Evaluation etc) including E-TC, including issue of LOA
 TRAINING (multimedia Training Kit)
 Help Desk
 PKI (Digital signature interface, Backend Module)
 ID (Interface development)
 Auction (reverse auction, Reverse sale)
 Remaining 4 modules under Development by CRIS
o Contract (contract, amendment etc)
o Contract Tracking (Dispatch, Receipt, Inspection, Invoice, Payment)
o E-payment (Payment gateway, NEFT etc)
o DRBC (Disaster recovery and Business Continuity)
 Benefits of E-Procurement
For Vendors
• Complete Transparency
• No possibility of Coercion
• Offers can be modified any number of times and up to the time
and date of opening of tender. The last offer made is the valid
offer.
• No need to be physically present at tender opening place for
dropping of tender / opening of tender. Comparative statement
is available to all tenderers on their PC.
• All offers / attachments are digitally signed by Vendor, hence
cannot resile from the offer / documents at any later date. Thus,
authenticity is ensured.
• Generally competitive rates are received.
 Benefits of E-Procurement
For Railway
• Complete Security as login is made with e-mail ID mapped to
password, which is linked to digital signature with a matching
Password and all the above duly encrypted with Encryption
Certificate.
• No possibility of late / Delayed tenders
• Opening of tender can be done at any Convenient time after the
scheduled date and time of opening as mentioned in tender.
• Convenient Place of opening as any Computer with internet
facility can be used where the Tender opening officials can sit
together.
 Benefits of E-Procurement
For Railway
• Corrigendum can be uploaded at any time up to a pre-
designated date from date and time of opening of tender.
• No more botheration for arranging a physical tender Box, its
location, accessibility, sealing, opening, and its security.
• Technical Suitability / Unsuitability in Two packet system is
intimated to all tenderers as soon as technical bid is evaluated.
 Registration of Vendor
Pre-requisites: -

 Vendors need to have valid Class III Digital Signature with

Firm’s Name and mapped to Unique E-mail ID issued by
licensed CA

 They need to have a (dedicated) computer with latest Internet

browser

 The drivers for the Digital signature is to be installed in the

PC.

 Adequate Internet connectivity.

 Registration of Vendor
 Go to Home page of IREPS.

 Open "New Vendors" link and fill login registration form to obtain User
ID and password. Attach public key of DS.

 Thereafter, Login ID is activated.

 Login using Login ID and password, change password, to become a

registered Vendor.
 Registration of Railway User
• CRIS has created various department under each Railway/Division as per
Railways organisation structure.
• Every department shall have an admin who will do all admin function for
IREPS.
• Admin shall have a DS and a EC.
• Admin shall get himself registered as admin with CRIS by sending a
authorisation letter from head of the office (PCE/DRM/Director).
• Admin can create his organisation in IREPS on his own.
• Railway User needs to have valid Class III Digital Signature issued by
licensed CA in User’s Name and personal E-mail ID
• Dedicated computer with the drivers for DS
• Finance also need to register on IREPS with DSC.
 ADMIN
Once Digital Signature of the Nominated person is procured, the Public Key is
to be sent to CRIS by e-mail with a request to assign this DS as administrator.
This is confirmed by CRIS by return E-Mail.

The power of Administrator includes assigning powers to various other

member to
(a) Open tender Box
(b) Upload tenders
(c) Co-ordination duties (such as attachments etc)
(d) Nominate tender opening officials (Nomination may be done Day wise)
 MINUMUM REQUIREMENT FOR E-PROCUREMENT

1. DSC for all users (including TAA, TC members, Tender

uploading / opening officials) in their individual capacity
mapped to their personal E-Mail IDs
2. 1 EC for the Organization as a unit
3. Preferably one dedicated PC
4. Good / Reliable Internet connection
5. Nomination of 1 Admin
6. Identification of Accounts / Stores counterparts and ensuring
the DSCs for TC members, Tender Opening officials, Admin for
Accounts / stores
Tender Opening on IREPS