AS4 (Applicability Statement 4) is an
open standard for the secure and payload-agnostic exchange of
Business-to-business documents using
Web services. Secure document exchange is governed by aspects of
WS-Security
Web Services Security (WS-Security, WSS) is an extension to SOAP to apply security to Web services. It is a member of the Web service specifications and was published by OASIS.
The protocol specifies how integrity and confidentiality can be enfo ...
, including
XML Encryption XML Encryption, also known as XML-Enc, is a specification, governed by a W3C recommendation, that defines how to encrypt the contents of an XML element.
Although XML Encryption can be used to encrypt any kind of data, it is nonetheless known as "X ...
and
XML Digital Signature
XML Signature (also called ''XMLDSig'', ''XML-DSig'', ''XML-Sig'') defines an XML syntax for digital signatures and is defined in the W3C recommendationbr>XML Signature Syntax and Processing Functionally, it has much in common with PKCS #7 but is ...
s. Payload agnosticism refers to the document type (e.g. purchase order, invoice, etc.) not being tied to any defined
SOAP
Soap is a salt of a fatty acid used in a variety of cleansing and lubricating products. In a domestic setting, soaps are surfactants usually used for washing, bathing, and other types of housekeeping. In industrial settings, soaps are use ...
action or operation.
It is a Conformance Profile of the
OASIS ebMS 3.0 specification.
[OASIS ebXML Messaging Services 3.0: Part 1, Core Features ](_blank)
/ref>
AS4 became a standard in 2013. The majority of the AS4 profiling points constraining the ebMS 3.0 specification are based upon the functional requirements of the AS2
AS2 (Applicability Statement 2) is a specification on how to transport structured business-to-business data securely and reliably over the Internet. Security is achieved by using digital certificates and encryption.
Background
AS2 was created ...
specification. By scaling back ebMS 3.0 using AS2 as a blueprint, AS4 provides an entry-level on-ramp for Web services B2B by simplifying the complexities of Web services.
Key technical highlights
* Support for SOAP 1.1 and 1.2 enveloping structure
* Payload agnosticism
* Support for single or multiple payloads contained either within the SOAP body or as SOAP attachment(s)
* Support for payload compression
* Support for message-level security including various combinations of XML Digital Signature and/or XML Encryption
* Support for X.509
In cryptography, X.509 is an International Telecommunication Union (ITU) standard defining the format of public key certificates. X.509 certificates are used in many Internet protocols, including TLS/SSL, which is the basis for HTTPS, the secu ...
security tokens and username/password tokens
* Support for business receipt of non-repudiation similar to the Message Disposition Notification (MDN)AS2 MDN
/ref> used by AS2 and specified as an XML schema by the ebXML BPSS group
* Support for the ebMS 3.0 One-Way/Push message exchange pattern with support for either synchronous or asynchronous responses
* Support for the ebMS 3.0 One-Way/Pull message exchange pattern which is beneficial for exchanging documents with non-addressable endpoints
See also
*AS1 AS1 or AS-1 may refer to:
* ActionScript version 1
* As One (Hong Kong band)
* AS1 (networking)
* AS-1, a Soviet-era prototype assault rifle that led to the AN-94
* Raduga KS-1 Komet, a missile referred to as the AS-1 'Kennel' by the West
* ''RuP ...
*AS2
AS2 (Applicability Statement 2) is a specification on how to transport structured business-to-business data securely and reliably over the Internet. Security is achieved by using digital certificates and encryption.
Background
AS2 was created ...
* AS3
References
External links
*
Will AS4 Become the Communications Standard for Cloud Based Integration Services?
Computer file formats
Technical communication
XML-based standards
Data interchange standards
{{Compu-network-stub