php-deluxe.net - description AS2

AS2

AS2 (Applicability Statement 2) is a specification about how to transport data securely and reliably over the Internet. It is described in detail in request_for_comments [http://www.ietf.org/rfc/rfc4130.txt 4130].

Data usually are Electronic Data Interchange (EDI) messages but may be of any other message type. AS2 specifies how to connect, deliver, validate and acknowledge data. AS2 creates an envelope for a message which is then sent securely over the Internet. Security is achieved by using digital certificates and encryption.

An implementation of AS2 involves two machines, a client and a server, communicating other over the Internet. On the operating system level, the AS2 client may be a server, too, offering its communication services to application software. The client sends data to the server, e.g. a trading partner. On receipt of the message the receiving application sends an acknowledgement or MDN (Message Disposition Notification) back to the sender.

== Advantages ==

Removal of Value Added Network (VAN) costs

Designed to push data securely and reliably over the Internet

Fast and reliable connectivity

Encryption ensures that only the sender and receiver can view the data

Digital signatures ensure authentication: only messages from authorized senders are accepted

hash algorithm detects if the document was altered during transmission

== Disadvantages ==

costs of a static IP address and permanent Internet access

costs of AS2 software

need to manage the certificates used for secure connections

Return on investment only with high transaction volume

== AS2 Technical Overview ==

AS2 provides an envelope for the data, which is sent over the Internet using standard protocols (here: with FTP)

Data is transmitted using the HTTP POST request

Data transmission is over TCP/IP, with or without SSL, to a static IP address

Data can be transmitted signed and encrypted