Date:
2001-11-01
Source:
Joint Syntax Working Group (JSWG)
0. INTRODUCTION
This is a new part, which has been added to ISO 9735. It provides an optional capability of managing security keys and certificates.
1. SCOPE
This part of ISO 9735International Standard for batch EDIFACT security defines the security key and certificate management message KEYMAN.
1.1 Functional definition
KEYMAN is a message providing for security key and certificate management. A key may be a secret key used with symmetric algorithms, or a public or private key used with asymmetric algorithms.
1.2 Field of application
The security key and certificate management message (KEYMAN) may be used for both national and international trade. It is based on universal practice related to administration, commerce and transport, and is not dependent on the type of business or industry.
1.3 Principles
The message may be used to request or deliver security keys, certificates, or certification paths (this includes requesting other key and certificate management actions, for example renewing, replacing or revoking certificates, and delivering other information, such as certificate status), and it may be used to deliver lists of certificates (for example to indicate which certificates have been revoked). The KEYMAN message may be secured by the use of security header and trailer segment groups. Security header and trailer segment group structures are defined in Part 5 of ISO 9735this international standard.
A security key and certificate management message can be used to:
a) request actions in relation to keys and certificates
b) deliver keys, certificates, and related information
2. REFERENCES
See UNTDID, Part 4, Chapter 2.6 UN/ECE UNSM - General Introduction, Section 1.
3. TERMS AND DEFINITIONS
3.1 Standard terms and definitions
See UNTDID, Part 4, Chapter 2.6 UN/ECE UNSM - General Introduction, Section 2.
4. MESSAGE DEFINITION
4.1 Segment clarification
This section should be read in conjunction with the Branching Diagram and Segment Table which indicate mandatory, conditional and repeating requirements. |
|
