CEF eDelivery PEPPOL AS2 to AS4 migration info session 21 August 2018

Agenda Introduction to CEF eDelivery (10 mins) eDelivery AS4 profile and its relation to the PEPPOL AS4 profile (10 mins) CEF eDelivery Conformance testing service (15 mins) Grants available from INEA (5 mins)

Introduction to CEF eDelivery

The CEF building blocks are funded by the Connecting Europe Facility CEF Regulation The Connecting Europe Facility (CEF) is a regulation that defines how the Commission can finance support for the establishment of trans-European networks to reinforce an interconnected Europe. TRANSPORT €26.25bn CEF Digital Building blocks & Digital Service Infrastructures €970 M * CEF Telecom Guidelines The CEF Telecom guidelines cover the specific objectives and priorities as well as eligibility criteria for funding of broadband networks and Digital Service Infrastructures (DSIs). TELECOM (DG CNECT) ENERGY €5.85bn CEF Work Programmes Translates the CEF Telecom Guidelines in general objectives and actions planned on a yearly basis. Broadband €170 M * - 100 M Juncker Package

Justice, home affairs and CEF is a funding instrument that will contribute to the completion of the European Digital Single Market Justice, home affairs and citizens' rights Science and Technology Business Employment and Social Rights 1 Funds Commission projects to digitise key sectors under the condition that they use CEF building blocks eJustice Portal ODR Open Data BRIS EESSI etc. IDENTIFY with eID SIGN with eSignature EXCHANGE with eDelivery TRANSLATE with eTranslation INVOICE with eInvoicing 2 3 Typically 'deployment' projects at national level (up to 75% of eligible cost) Funds Member States to participate in the sectorial projects Funds the use of building blocks in these sectors by the Commission and in the Member States

The CEF building blocks were developed by the Member States through pilots and most are supported by legislation such as eIDAS Top Down EU Law eIDAS Regulation | eInvoicing Directive IDENTIFY with eID SIGN with eSignature EXCHANGE with eDelivery TRANSLATE with eTranslation INVOICE with eInvoicing Bottom Up MS Large Scale Pilots Large Scale Pilots (PEPPOL, STORK, etc.) FOR THE MS, BY THE MS

The eDelivery Use-Case DOMAIN-NEUTRAL USE CASE ORIGINAL SENDER FINAL RECIPIENT internet Consumer Protection Procurement Justice Examples of DOMAIN-SPECIFIC USE CASES Complaints Invoices Claims Exchange of complaints Exchange of invoices Exchange of claims

Read all the Connecting Europe success stories on CEF Digital * https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/Success+Stories Read all the Connecting Europe success stories on CEF Digital View ›

eDelivery AS4 profile and its relation to the PEPPOL AS4 profile

Technical specifications of eDelivery Available for free Supported by multiple programming languages Independent from any specific vendor products Supported by (Open Source and Commercial) solutions that can be purchased in a competitive environment 11

eDelivery AS4 profile and PEPPOL AS4 profile The eDelivery AS4 profile is: Business neutral: can be used in any business domain to send any type of message Modular: a common core and several optional modules allow business domains to choose only the modules they need in their context

eDelivery AS4 profile and PEPPOL AS4 profile The PEPPOL AS4 profile is an instantiation of the eDelivery AS4 profile: It uses the eDelivery AS4 common core It uses several eDelivery AS4 optional modules Four Corner module SBDH module Dynamic sender and dynamic receiver module It makes some restrictions and defines some business specific details E.g. specific value for some elements

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits

Why AS4 OASIS Standard, actively supported General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits OASIS Standard, actively supported On track to become an ISO standard Specification freely available from the Internet No known IPR issues, anyone can implement or use it

Why AS4 Ability to carry payloads of any type (XML, binary, JSON etc.) General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Ability to carry payloads of any type (XML, binary, JSON etc.) Ability to carry any number of payloads (e.g. one XML payload and a second PDF payload) Built-in payload compression (reduces message size and can speed up transmission of large documents on slow networks) No a priori theoretical size limits

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Standard headers for party and service identification (supports routing and addressing) Standard headers for message identification and correlation Supports one way (notification) and two way (request-response) message exchanges Supports message conversation identification Arbitrary custom message properties (can help automate processes) Arbitrary custom part properties (can help automate processes) Supports service-oriented and document- oriented data exchanges

Why AS4 Multiple security options supported General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Multiple security options supported Integrity Protection and Non- Repudiation of Origin (WS-Security and XML Signature) Confidentiality (WS-Security and XML Encryption; TLS) Non-Repudiation of Receipt (AS4 non- repudiation receipts) Authorization (partner management, processing modes)

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Built-in retry mechanism (“at least once”), provides robust recovery from temporary system or network failures Built-in duplication elimination (“at most once”) Details configurable (e.g. number of retries, intervals) for parties or services

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Built on state of the art XML, Web Services, Web/Internet technologies and standards Multiple supported closed source implementations available, production proven Multiple supported open source implementations available, production proven Cloud and on-premise deployments Programming language independent (known implementations in Java, .NET, C and Perl)

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Feature set can be configured using parameters (rather than programming) Partners and services can be configured using parameters

Why AS4 Preconfigured profile, fixes values for many configuration parameters (simplifies configuration, obviates need for specialist AS4 consultants) Specification and feature set based on input from, and thoroughly reviewed by, industry experts Validated for real-life production use in multiple domains Multi-layer redundant security (TLS and message- level) Selection of state-of-the-art security algorithms, reviewed by information security experts from EU ENISA agency, deemed sufficient for near term (at least ten years) future systems use (obviates need for specialist security consultants) Multiple confirmed conformant implementations (offers users competitive choice) Sizeable ecosystem of (prospective) users for solution providers (incentives implementations) CEF Conformance Testing Service available for implementers (avoids problems of incompatible or untested products) General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits

Why AS4 General benefits eDelivery AS4 Profile Specific Benefits Specifications Payloads Message metadata Security Reliable messaging Implementation Configuration eDelivery AS4 comparative Benefits Specification does not originate from a particular Member State (known to hamper acceptance in other Member States and by industry) State of the art, still early in its lifecycle (so no short or medium term need to migrate to newer technology because the technology is near its end of life) A big step up in security for most users Single technology capable of supporting both batch and interactive exchanges Single technology capable of both document-oriented and service-oriented exchanges No need for payload wrappers when transporting multiple payloads in a single message

CEF eDelivery Conformance testing service

CEF eDelivery Service offering SOFTWARE OPERATIONS SERVICES STAKEHOLDER MANAGEMENT SERVICES Sample software maintained by the EC (with documentation) Managed services Testing services Supporting services Onboarding services (for stakeholders) Community management services Access Point (AP) Public Key Infrastructure (PKI) Connectivity testing Training & Deployment Self-assessment tool (reuse approach) Developers Community Service Metadata Publisher (SMP) Service Metadata Locator (SML) Service Desk Onboarding of new stakeholders Service Metadata Locator (SML) Conformance testing (example) TECHNICAL SPECS OF EU-WIDE INITIATIVES STANDARDS OF ESOs Available Coming soon Access point specifications SMP specifications SML specifications Security control guidance Connector specification Service offering Description (SoD) All services are described in an SoD describing its purpose, the users for which it is for, its benefits and the process to obtain it Service Level Arrangements (SLA) Documents that describe Service Level Targets to be reached when delivering Building Block Services. eLearning, videos, success stories Some services feature multimedia such as eLearnings, instructional videos or success stories to help grasp what the service is about CEF Digital platform CEF eDelivery service offering, and more about the building block, can be found online CEF Digital >

Operations services / Testing service Conformance testing Back to Service offering > OBJECTIVE OF THE SERVICE USERS Verify that an implementation of the CEF eDelivery Access Point and SMP specifications, a software package either commercial or Open Source, conforms to the specifications of the CEF eDelivery Access Point. The following specifications are tested within the scope of this service: eDelivery AS4 Profile eDelivery SMP Profile The CEF eDelivery Team provides ready to use test cases, a testing platform, and supports the users of the CEF eDelivery Conformance Testing service during the entire testing process. Software Providers Service Providers STATUS Service Documentation More info CEF Digital > BENEFITS Confirm and assure your users/customers that your software package or implementation of the CEF eDelivery Access Point conforms to the CEF eDelivery specifications Testing anywhere at anytime Testing supported by professional staff of the European Commission Get started Contact us >

Benefits of CEF eDelivery Conformance Testing Get assurance that a software package is conform the CEF eDelivery specifications Supporting tools developed and proofed in the context of the e-SENS project Testing supported by eDelivery team Quick testing cycle with reduced cost and time Testing anywhere at anytime Tests are fully domain-neutral Ready to use test cases and test platform Benefits of CEF eDelivery Conformance Testing

From specifications to test cases

Sample AS4 test case The requirements are used as input to create Test Assertions

Sample AS4 test case The Test Assertions are implemented as Test Cases on the Test Platform

Sample AS4 test case The Test Cases are written in MTDL (Minder Test Definition Language), based on Scala.

Conformance Testing process

Conformance Testing process

Conformance Testing process

Conformance Testing process

Conformance Testing process

Conformance Testing process Test reports are automatically produced from the test platform and signed by the CEF eDelivery team

What does Conformance Testing not cover? Conformance testing is complementary to: Functional testing Connectivity testing Interoperability testing Load testing Vulnerability testing

Vendors - Take action and become conformant Get additional Quality Assurance for your product Increase your chances for successfully communicating with other implementations Get brand and product visibility by being present on the list of conformant implementations Be ready for call for grants that require an implementation to be conformant The service is provided for free Assistance is available during the entire process Benefits of being conformant to the CEF eDelivery specifications Vendor perspective

Clients - Take action and require vendors to become conformant Get a clear view on the capabilities of the solution you are buying Reduce the risk of buying a solution that is not interoperable with other implementations Prevent spending time and money on debugging AS4 related issues in production Benefits of being conformant to the CEF eDelivery specifications Client perspective

eDelivery AS4 conformant solutions More information on CEF Digital Conformant Solutions > DOMIBUS FLAME HOLODECK IBM LAURENTIUS MENDELSON RSSBus iFenix Axway EESSI AS4.NET eefacta Server Bizbrains Link Navitasoft Edicom ASx Server ADES Integration cloud Conformant Ongoing

Grants available from INEA

INEA Grants What is covered? Deploying access points and/or operating access points for one year. Deploying SMPs and/or operating SMPs for one year. Upgrade of data exchange solutions (Commercial Off-the-Shelf, Open- Source Software and other) to support (and therefore fully comply with), the CEF eDelivery standards (which can also cover interoperability testing with new or existing conformant solutions). 43