DIN CWA 16504-2013 Simplified multilateral EDI - Secure electronic data interchange in non-hierarchical networks English version CWA 16504 2012《简化多边电子数据交换 非层次网络中的安全电子数据交换 英文版本CWA 1.pdf

《DIN CWA 16504-2013 Simplified multilateral EDI - Secure electronic data interchange in non-hierarchical networks English version CWA 16504 2012《简化多边电子数据交换 非层次网络中的安全电子数据交换 英文版本CWA 1.pdf》由会员分享，可在线阅读，更多相关《DIN CWA 16504-2013 Simplified multilateral EDI - Secure electronic data interchange in non-hierarchical networks English version CWA 16504 2012《简化多边电子数据交换 非层次网络中的安全电子数据交换 英文版本CWA 1.pdf（64页珍藏版）》请在麦多课文档分享上搜索。

1、Februar 2013 Bereich InnovationPreisgruppe 22DIN Deutsches Institut fr Normung e. V. Jede Art der Vervielfltigung, auch auszugsweise, nur mit Genehmigung des DIN Deutsches Institut fr Normung e. V., Berlin, gestattet.ICS 35.240.60Zur Erstellung einer DIN SPEC knnen verschiedene Verfahrensweisen hera

2、ngezogen werden: Das vorliegende Dokument wurde nach den Verfahrensregeln eines CWAs erstellt.!$L.“1934111www.din.deDDIN CWA 16504Vereinfachte multilaterale Kommunikation via EDI Sicherer elektronischer Datenaustausch in nicht-hierarchischenNetzwerken;Englische Fassung CWA 16504:2012Simplified multi

3、lateral EDI Secure electronic data interchange in non-hierarchical networks;English version CWA 16504:2012EDI simplifi multilatral Securitaire change de donnes informatises dans des rseaux hirarchiques;Version anglaise CWA 16504:2012Alleinverkauf der Spezifikationen durch Beuth Verlag GmbH, 10772 Be

4、rlin www.beuth.deGesamtumfang 64 SeitenDIN SPEC 91288DIN CWA 16504 (DIN SPEC 91288):2013-02 2 Nationales Vorwort Dieses europisches CEN Workshop Agreement (CWA 16504:2012) wurde vom CEN Workshop InTime Secure multilateral communication via EDI in non-hierarchical networks“ bei CEN erarbeitet, dessen

5、 Sekretariat vom DIN (Deutschland) gehalten wurde. Es handelt sich um eine unvernderte bernahme der CWA 16504 Simplified multilateral EDI - Secure electronic data interchange in non-hierarchical networks“ als DIN SPEC 91288 Vereinfachte multilaterale Kommunikation via EDI - Sicherer elektronischer D

6、atenaustausch in nicht-hierarchischen Netzwerken“. Eine DIN SPEC nach dem CWA-Verfahren ist die nationale bernahme einer CEN/CENELEC-Vereinbarung, die innerhalb offener CEN/CENELEC Workshops entwickelt wird und den Konsens zwischen den registrierten Personen und Organisationen widerspiegelt, die fr

7、den Inhalt verantwortlich sind. Arbeiten eines CEN Workshop werden nicht durch ein nationales Gremium gespiegelt. Bei dem zu Grunde liegenden CWA wurde ein Entwurf durch CEN verffentlicht. EUROPEAN COMMITTEE FOR STANDARDIZATION COMIT EUROPEN DE NORMALISATION EUROPISCHES KOMITEE FR NORMUNG Management

8、 Centre: Avenue Marnix 17, B-1000 Brussels 2012 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No.:CWA 16504:2012 D/E/FCEN WORKSHOP AGREEMENT CWA 16504 August 2012 ICS 35.240.60 English version Simplified multilateral EDI - Secure electr

9、onic data interchange in non-hierarchical networks This CEN Workshop Agreement has been drafted and approved by a Workshop of representatives of interested parties, the constitution of which is indicated in the foreword of this Workshop Agreement. The formal process followed by the Workshop in the d

10、evelopment of this Workshop Agreement has been endorsed by the National Members of CEN but neither the National Members of CEN nor the CEN-CENELEC Management Centre can be held accountable for the technical content of this CEN Workshop Agreement or possible conflicts with standards or legislation. T

11、his CEN Workshop Agreement can in no way be held as being an official standard developed by CEN and its Members. This CEN Workshop Agreement is publicly available as a reference document from the CEN Members National Standard Bodies. CEN members are the national standards bodies of Austria, Belgium,

12、 Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerlan

13、d, Turkey and United Kingdom. CWA 16504:2012 (E) 2 Contents Page Foreword 31 Scope 42 Normative references 43 Terms and definitions .44 List of abbreviations 55 Order management process and messages .65.1 General 65.2 Workflow of documents 65.3 Structure of documents . 125.4 Receipt management 136 S

14、ecurity requirements for legal compliance 146.1 General . 146.2 The overall security concept . 146.3 Authentication / Identity Management 156.4 Integrity during transport . 166.5 Confidentiality . 166.6 Non-repudiation 166.7 Completeness . 166.8 Integrity of messages during retention - Long-term sto

15、rage . 16Annex A (normative) Simplified multilateral EDI data standard 18Annex B (informative) Country codes 48Annex C (informative) Currency codes 49Annex D (informative) Document types . 50Annex E (informative) Features in the simplified EDI standard . 53Annex F (informative) Incoterms 54Annex G (

16、informative) Language codes 55Annex H (informative) Log codes . 56Annex I (informative) Master data status . 57Annex J (informative) Order status 58Annex K (informative) Surcharge and discount types . 59Annex L (informative) Units . 60Annex M (informative) Supervisory Authorities for Electronic Sign

17、atures in Europe . 61DIN CWA 16504 (DIN SPEC 91288):2013-02 CWA 16504:2012 (E) 3 Foreword This CEN Workshop Agreement has been drafted and approved by a Workshop of representatives of interested parties on 2012-08-10, the constitution of which was supported by CEN following the public call for parti

18、cipation made on 2011-08-23. A list of the individuals and organisations which supported the technical consensus represented by the CEN Workshop Agreement is available to purchasers from the CEN-CENELEC Management Centre. These organisations were drawn from the following economic sectors: large IT c

19、ompanies, ICT practitioners, academia as well as machinery and plant manufacturing. The formal process followed by the Workshop in the development of the CEN Workshop Agreement has been endorsed by the National Members of CEN but neither the National Members of CEN nor the CEN-CENELEC Management Cen

20、tre can be held accountable for the technical content of the CEN Workshop Agreement or possible conflict with standards or legislation. This CEN Workshop Agreement can in no way be held as being an official standard developed by CEN and its members. The final review/endorsement round for this CWA wa

21、s started on 2012-05-04 and was successfully closed on 2012-07-09. The final text of this CWA was submitted to CEN for publication on 2012-08-13. Below is a list of companies that endorsed this CWA: Fujitsu Technology Solutions GmbH WZL RWTH Aachen Otto Junker GmbH FIR RWTH Aachen myOpenFactory AG P

22、olitecnico di Milano IDEKO-IK4 This CEN Workshop Agreement is publicly available as a reference document from the National Members of CEN: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary,

23、Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. Comments or suggestions from the users of the CEN Workshop Agreement are welcome and should be addressed to the CE

24、N-CENELEC Management Centre. DIN CWA 16504 (DIN SPEC 91288):2013-02 CWA 16504:2012 (E) 4 1 Scope This CWA aims to give small and medium sized enterprises a fast to establish and easy to use alternative to traditional EDI approaches. The hope is that a wider adoption of EDI in Europe will streamline

25、administrative processes in many companies and thus will foster competitiveness of our continent. This workshop agreement is intended as a guideline for the exchange of business documents between companies within a non-hierarchical business network by electronic communication. Since each company has

26、 a multitude of business relationships in its network, it is important to keep communication to many partners easy to handle. Especially for small and medium sized enterprises, a multilateral approach will simplify electronic business communication as today the efforts to handle bilateral communicat

27、ion channels are too heavy. The concept is to route the communication through a central platform in the Internet using a standardised data format which is described in this workshop agreement. This way a single data format can be utilised within a complete network of companies. The data format shall

28、 be lightweight enabling companies of all sizes to communicate. Additionally it shall be free of redundancies for purpose of clear semantics and unambiguous implementation. Both aspects are hardly possible with traditional data formats like EDIFACT. This is the reason why electronic communication st

29、ill is not spread widely in Europe, especially amongst SME. As any company uses different IT systems, it is necessary to connect each company to the mentioned platform individually using an individual data format and individual transmission channel between the platform and the company. The platform

30、takes care of the transmission and the conversion between the individual data format and the standardised data format, which is described in this workshop agreement, using defined mapping procedures. This way mapping is reduced from various bilateral mappings to mapping to the standard format. Besid

31、es technical issues, legal issues also need to be solved when exchanging business documents for all the member states of the European Union. The basics for solving these legal issues will also be addressed within this agreement. 2 Normative references The following documents, in whole or in part, ar

32、e normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 9594-8:2008, Information technology Open System

33、s Interconnection The Directory: Public key and attribute certificate frameworks ETSI TS 102042 V.2.1.2:2010, Electronic Signatures and Infrastructures (ESI) Policy requirements for certification authorities issuing public key certificates ETSI TS 101 456 V.1.4.3:2007, Electronic Signatures and Infr

34、astructures (ESI) Policy requirements for certification authorities issuing qualified certificates 3 Terms and definitions For the purposes of this document, the following terms and definitions apply. 3.1 workflow of documents flow of all documents relating to each other within a business process No

35、te 1 to entry: All documents within a workflow of documents represent a business process in reality. DIN CWA 16504 (DIN SPEC 91288):2013-02 CWA 16504:2012 (E) 5 3.2 customer representation of the participant that receives goods or services within a business process 3.3 supplier representation of the

36、 participant that provides goods or services within a business process 4 List of abbreviations ADR Accord europen relatif au transport international des marchandises dangereuses par route (European Agreement concerning the International Transport of Dangerous Goods by Road) CA Certificate Authority

37、ECCN Export Control Classification Number ECL Export control list EDI electronic data interchange EDIINT electronic data interchange internet integration ERP enterprise resource planning ERS Evidence Record Syntax FTP File Transport Protocol FTP/S FTP via SSL GTIM Global Trade Item Number IATA Inter

38、national Air Transport Association ICC International Chamber of Commerce ID Identifyer IETF Internet Engineering Task Force IMDG International Maritime Dangerous Goods Code MIME Multipurpose Internet Mail Extensions OCI Open Catalogue Interface PDF Portable Document Format RID Rglement concernant le

39、 transport international ferriovare de marchandises dangereuses (regulations concerning the International Carriage of Dangerous Goods by Rail SME Small and Medium sized Enterprise SSL Secure Sockets Layer DIN CWA 16504 (DIN SPEC 91288):2013-02 CWA 16504:2012 (E) 6 TLS Transport Layer Security UN Uni

40、ted Nations XML Extended Markup Language 5 Order management process and messages 5.1 General Simplified multilateral EDI is a standard for electronic data interchange in the communication between customers and suppliers within a non-hierarchical business network. It covers the whole communication th

41、at can take place between these parties. Generally, customers can order goods or services using their own ERP system or a web based service. EXAMPLE A service can be the transportation of goods. If placed directly by an ERP system, the data of the order has to be translated from the ERP system to th

42、e simplified multilateral EDI data standard. This can be done by a service which is located somewhere between the ERP system and the point where the data leaves the responsibility of the sender and enters the responsibility of the receiver. Another service does the translation of the document on beh

43、alf of the receiver. This service is located somewhere between the reception of the document and the ERP system of the receiver. Afterwards the document can be understood by the receivers ERP system. Afterwards it will be processed directly in the ERP system of the receiver. 5.2 Workflow of document

44、s A business process between a customer and a supplier is accompanied by many business documents which are exchanged parallel to production and delivery of goods or services. With the first type of document sent in a workflow of documents the roles of the participants within this workflow are define

45、d. All subsequent types of documents in this particular workflow of documents may be issued by the participants according to their role as described in Table 1: DIN CWA 16504 (DIN SPEC 91288):2013-02 CWA 16504:2012 (E) 7 Table 1 Types of documents within a business process workflow Types of document

46、s issued by the customer Types of documents issued by the supplier Request to update master data Information about master data Request for quotation Quotation Reminder to send a quotation Order Order confirmationReminder to send an order confirmation Change order Request to update to order status In

47、formation about the order status Information about the status of a vendor managed inventory Request to update the status of a vendor managed inventory Reminder to dispatch goods or services Dispatch notification Goods receipt Complaint Returns Credit memo Invoice Payment reminderUnspecified message

48、of the customer Unspecified message of the supplier Receipt of the customer Receipt of the supplier Within a workflow of documents, any type of document may follow any other. Nevertheless, in business exists a typical workflow of documents which starts with the types of documents listed in Table 2 b

49、elow: Table 2 Types of documents to start a new business process workflow Types of documents that issues the customer to start a new workflow Types of documents that issues the supplier to start a new workflow Request to update master data Request to update the status of a vendor managed inventory Request for quotation Order Unspecified message of the customer Unspecified message of the supplier The subsequent