LANSA Data Secure Direct
LANSA’s AS2 software solution takes the uncertainty out of complying with retailers requests for Applicability Statement 2 (AS2) compliance. Managing the process is made easy via LANSA's browser-based administration suite that includes trading partner profiles, certificate manager and event viewer capability. The same LANSA technology is also used to provide GDSN compliance, which involves secured transport of XML documents.
What does LANSA’s AS2 software do?
LANSA’s AS2 software provides an easy-to-implement native Windows or IBM i (System i, iSeries, AS/400) solution that installs on your production server and integrates directly with your existing Electronic Data Interchange (EDI) translator product. LANSA can also perform the EDI mapping, if requested, as well as the direct integration to your line-of-business applications.
For typical implementations where there is an existing EDI translator in place, LANSA’s AS2 software sits on top of that infrastructure and feeds that translator the unencrypted document. Consequently, it picks up outbound documents, encrypts those based on your trading partner profile and sends them via AS2.
What is EDIINT?
EDI over the Internet (EDIINT) is a working group of the Internet Engineering Task Force (IETF). Formed in February of 1996, EDIINT was chartered by the IETF to create a set of secure protocols for conducting highly structured inter-organization exchanges. There are two current specifications – EDIINT AS1 using SMTP and EDIINT AS2 using HTTP – to transport the data. EDIINT AS2 is the more prevalent method with real-time, machine-to-machine transactions between two trading partners – typically a retailer and a supplier.
The AS2 specification supports EDI or any other data transmittals (such as XML, or even flat files) over the Internet using HTTP. AS2 is a specification on how to transport data, not how to validate or process data. AS2 specifies the means to connect, deliver, authenticate and reply to data transmissions in a secure and reliable way.
The new EDI
Many of the leading retailers mandate the use of EDIINT AS2 for secure business transactions over the Internet. Driven by the prospect of saving thousands of dollars a month, more and more trading partners are sending EDI messages over the Internet, rather than over third-party network services.
Document exchange requires more than just moving data over a wire. Business documents are not only the basis of business planning and operations – they are also the legal obligations between companies – so the documents must be transferred securely, processed quickly and delivered reliably.
The fastest way to send a document is to deliver it directly to the recipient with no intermediate routing or mailboxing – which is exactly what the AS2 standard specifies. AS2 software at the sender establishes a connection over the Internet to the receiver's AS2 software and sends the document. The receiver then gives the sending system a receipt.
In effect, the effort is to provide EDI over the Internet to reduce EDI user costs while maintaining current functionality. For large enterprises, EDIINT AS2 can have a tremendously quick Return on Investment (ROI).
How does it work?
AS2 offers options for security ranging from sending data over a secure HTTPS connection, to content payload encryption – using a digital certificate to completely encrypt the business document. A document also can be digitally signed – assuring the receiver that the document is valid, or additionally compressed – further improving content payload efficiencies.
To implement EDIINT AS2, your enterprise essentially needs a Web server to listen for and process inbound AS2 transactions, and then – if it's an EDI X.12 or EDIFACT document – pass those transactions on to your EDI translator engine. In addition, digital certificates need to be exchanged between you and your trading partners and entered into your AS2 software.
An important component of AS2 is the receipt mechanism, which is referred to as a Message Disposition Notification (MDN). This ensures the sender of the document that the recipient has successfully received that document – providing the all-important non-repudiation – meaning the recipient cannot dispute the fact that they received the document. The sender specifies how the MDN is to be sent back – synchronously/asynchronously and signed/unsigned.
From there it's a matter of exchanging documents in a production environment. Documents exchanged most often today via EDIINT AS2 are EDI 850/810 and 875/880 purchase order/invoice transaction sets.
Interoperable and Extendable
- Enables vertical and horizontal interoperability across the supply chain and distribution channels
- Integration with your Existing EDI translation software
- Provides X.12 and EDIFACT transformation if no EDI translator exists within your enterprise
- Can also provide direct integration with your ERP order fulfillment module
Meets all EDIINT AS2 Specifications
- Encryption/decryption via PKI
- Digital signatures
- HTTP/S transport
Supports Secured Transport
- Any inbound or outbound document such as X.12,EDIFACT, or XML
System Monitoring Facility Provides Alert Capability
- Email notification of processing errors
Easy-to-Use Browser-Based Administration Suite
- Trading partner profiles — unique to each document type exchanged
- Event manager — peruse all AS2 communication activity — both inbound and outbound
- Generate digital certificates and issue to trading partners
Extensive Auditing Capability
- Transaction and message logs
- Security and user profiles
- Test connectivity with trading partners
- IBM i V5R4 or later with JVM 1.7 or later.
- Windows Server 2008 or later with JVM 1.7 or later.