Security Mechanisms for EDI over the Internet

Abstract

The first attempt to define methods for using the Internet for EDI were made in RFC 1767, which defines the packaging of ANSI X12 and UN/EDIFACT Interchanges in a MIME envelope. However, several additional requirements for obtaining multivendor, interoperable services, and how the EDI transactions should be packaged and transmitted, have come to light since the effort concluded. These currently focus on security issues like EDI transaction integrity, confidentiality and non-repudiation in various forms. Standards in these and other areas are necessary to insure interoperability between EDI implementations over the Internet. Various technologies already exist for these additional features, and the primary requirement is to review and select a common set of components for use by the EDI community when it sends EDI over the Internet.