Defining a federated messaging and trust infrastructure for

Defining a federated messaging and trust infrastructure for secure and reliable exchange of data Kenneth Bengtsson OASIS Business Document Exchange (BDXR) TC 20 th UN/CEFACT Forum Vienna, 19 September 2012

OASIS Business Document e. Xchange TC • Describes an architecture where trading partners exchange documents securely and reliably through the use of gateways • Also known as the 4 -corner (or multicornered) model

Peer-to-peer model Trading partner • Not scalable – Need to agree and implement standards for transport and content with each trading partner one at a time • Difficult to match business requirements and capabilities – Individuals, SMEs, large companies and governments all have very different requirements, capabilities and resources – Technical requirements (trust, service levels etc. ) raise the barrier

Three-corner model Service provider er m hip o t s ns Cu atio l re Trading partner C re ust la om tio e ns r hi p Trading partner • Proprietary standards (whole stack) • Risk of service provider lock-in / limited competition • Customers may have to connect to several service providers

Four-corner model Standardized interface Service provider / gateway er p om hi st ns Cu atio l re C re ust la om tio ns er hi p Service provider / gateway Trading partner • Lowers barriers by allowing for different business models – Requirements and capabilities differs greatly between individuals, SMEs, large companies and governments. • Freedom to choose service provider • Leverages investments in existing infrastructures by connecting clouds

PEPPOL’s multi-cornered infrastructure

Governance and trust Agree upon: SLA requirements Standardized business processes Standardized business documents Standardized transport profiles Trust and certificate validation Service provider / gateway Trading partner

Thank you Kenneth Bengtsson OASIS BDXR TC kenneth@alfa 1 lab. com http: //www. oasis-open. org/committees/bdxr