Glossary: E-Business Communication Terms Defined
| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z |
A
Advance Ship Notice (ASN): Notification of product due prior to receipt (see Ship Notice Manifest (856).
Application Identifier (AI): A two-, three-, or four-digit prefix used within UCC/EAN-128 Symbols to define the meaning of information that follows.
AS1 (Applicability Statement 1): a specification by which applications communicate EDI data, or other information such as XML documents, over the Internet using the SMTP protocol. AS2 enhances security over AS1, and as a result AS2 is more widely adopted.
AS2 (Applicability Statement 2): a standard by which applications communicate EDI data, or other information such as XML documents, over the Internet using the HTTPs protocol. AS2 offers increased verification and security achieved through the use of receipts and digital signatures. Another edge for AS2: Its transactions and acknowledgements occur in real-time, increasing the efficiency of document exchanges.
AS3 (Applicability Statement 3): a draft specification by which applications communicate EDI data, or other information such as XML documents, over the Internet using the FTPs protocol. At this time, there are no trading partner hubs using AS3.
ASP (Application Service Provider): an organization that hosts a software application on its own server. Customers access the application over the Internet or via a private line connection for a fee, eliminating the need for the user to host the application on his/her own equipment.
Asset Type: A number assigned by the owner of an asset to uniquely identify a type of asset.
Attribute: A piece of information reflecting a characteristic related to an identification number (i.e., GTIN, GRAI).
B
Bar code: A precise arrangement of parallel lines (bars) and spaces that vary in width to represent data.
Brand owner: The party that is responsible for allocating EAN.UCC numbering and bar coding on a given trade item. The administrator of an EAN.UCC Company Prefix.
C
CSOS: The Controlled Substance Ordering System (CSOS) is a method of ordering pharmaceuticals regulated by the Office of Diversion Control of the Drug Enforcement Administration (DEA). Under the Controlled Substance Act of 1970, the manufacture and distribution of controlled substances is regulated to prevent the substances from entering into illegal channels and ensure there is sufficient supply for legitimate medical uses. The paper-based process is evolving to accept secure electronic transmissions to increase efficiency.
Certificate Authority (CA): A trusted third-party organization or company that issues digital certificates such as VeriSign, Inc. The CA “signs” the digital certificate verifying that the public key belongs to the specific company or individual. The CA makes its own public key readily available through the Internet. In AS2, the recipient of the message uses the CA's public key to decode the sender’s digital certificate and verifies it was issued by the CA. The recipient can then obtain the sender's public key and identification information contained in the certificate. The recipient can use this information to send an encrypted reply message.
Check Digit: A digit calculated from the other digits of an Element String, used to check that the data has been correctly composed (see EAN.UCC Check Digit Calculation).
Company Number: A number allocated by the UCC or an EAN International Numbering Organization that follows the EAN.UCC Prefix within the EAN.UCC Company Prefix. When combined with the EAN.UCC Prefix, the Company Number uniquely identifies a company.
D
Data carrier: A means to represent data in a machine-readable form, used to enable automatic reading of the Element Strings.
Data Standard: The entirety of all EAN.UCC System data standardized in meaning and structure.
Data structure: The UCC and EAN numbering structures defined in the various lengths required for the different identification purposes which all share a hierarchical composition. Their composition blends the needs of international control with the needs of the users.
Digital Certificate: an attachment to an electronic message used to add security, much like a digital ID card. Digital certificates verify that the user sending a message is who he or she claims to be, and allow the recipient to encode a reply. Digital certificates may be issued by a Certificate Authority (CA) and typically use the X.509 file format.
E
E-5: a message routing and handling specification similar to AS2 that has been developed by the AIAG (Automotive Industry Action Group) Message Routing WorkGroup. E-5 uses HTTPs as the transport protocol to securely exchange EDI documents over a TCP/IP network.
EAN International: EAN International, based in Brussels, Belgium, is an organization of EAN Numbering Organizations that jointly manages the EAN.UCC System with the UCC.
EAN.UCC: an international system that standardizes bar codes, EDI transactions sets, XML schemas, and other supply chain solutions for more efficient business. EAN.UCC is co-managed by the Uniform Code Council, Inc. and EAN International.
eBusinessReady: a program providing neutral third party testing of solutions for interoperability and compliance. eBusinessReady is a joint partnership of the Uniform Code Council, Inc. (UCC) and Drummond Group, Inc. (DGI). Cleo’s VersaLex, the technology that powers LexiCom, is certified eBusinessReady for AS2. This means it will work with any other certified AS2 product.
ebMS: ebMS, or ebXML Message Service, is the messaging layer of the ebXML framework. ebMS specifies how messages are sent and received over the Internet, including features for security, digital signatures, non-repudiation, and reliability. In addition to secure messaging, ebMS can be deployed as part of a web services architecture or as part of the larger ebXML framework.
ebXML: (electronic business Extensible Markup Language): a modular XML-based set of standards for electronic business transactions. The specification facilitates the exchange of business data, such as EDI documents, in a standardized method, over the Internet. ebXML is a joint initiative of the United Nations (UN/CEFACT) and OASIS to standardize XML for global business interoperability.
Electronic Data Interchange (EDI): the direct, electronic transfer of standardized business data, such as purchase orders, confirmations and invoices, between trading partners. Transactions are most often direct, computer-to-computer, into vendors' databases and ordering systems.
Electronic Message: A composition of Element Strings from scanned data and transaction information assembled for data validation and unambiguous processing in a user application.
EDIFACT (Electronic Data Interchange for Administration Commerce and Transport): An ISO specification for Electronic Data Interchange (EDI) proposed to replace both X12 and TRADACOMS as the worldwide standard.
Extension digit: A digit, allocated by the user, used to increase the capacity of the Serial Reference within the SSCC. When used within the term “Extension digit,” the word “digit” is never capitalized.
F
File Transfer Protocol (FTP): A common standard used to transfer files over the Internet. FTP is a popular method used to download programs and files from a server to a local computer. FTP functions include the ability to log into a network, list directories and rename, copy, or delete files. FTP can be used from a command line interface, such as MS-DOS or from an FTP program interface. FTP is designed to function in a client/server environment. The client FTP application (LexiCom) initiates all the various file transfer requests. The FTP server listens on a specified port and replies to the client's requests by performing the proper task or responding with an error message.
FTPs: FTP using SSL to alter the message format and add security.
G
GIAI: Shorthand term for the EAN.UCC Global Individual Asset Identifier.
GLN: Shorthand term for the EAN.UCC Global Location Number using the EAN/UCC-13 Data Structure to identify physical, functional, or legal entities.
Global Positioning Unit (GPU): A navigational tool that assists travelers whether traveling by car, boat, plane or foot. These devices provide information pertaining to state and country boundaries, lakes, rivers, interstate highways even exit information for the federal interstate highway system. The GPU can locate services such as food, lodging and gas stations.
GRAI: Shorthand term for the EAN.UCC Global Returnable Asset Identifier.
GSRN: Shorthand term for the EAN.UCC Global Service Relation Number.
GTIN: Shorthand term for the EAN.UCC Global Trade Item Number. A GTIN may use the EAN/UCC-8, UCC-12, EAN/UCC-13, or EAN/UCC-14 Data Structure.
GTIN Format: The format in which GTINs must be represented in a 14-digit reference field (key) in computer files to ensure uniqueness of the identification numbers.
H
HIPAA (Health Insurance Portability and Accountability Act): a federal act designed in part to improve the accessibility and security of patient information. The act requires health care providers (hospitals, physicians, managed care companies, etc.) to adopt medical information security, privacy and data standards.
HTML (HyperText Markup Language): The data format used on the World Wide Web. HTML tags, or codes, are embedded in the text of web pages. The code defines the page layout, fonts and graphic elements as well as the hypertext links to other pages on the Web.
HTTP (HyperText Transfer Protocol): the communications protocol of the Web. HTTP establishes connections with web servers and transmits the HTML pages or other files to the client (user’s browser) on command, for example when typing a URL into the web browser window.
HTTPs: HTTP using SSL to alter the message format and add security.
I
Identification Number (ID): A numerical name for something in the supply chain to provide unique identification for it. ID numbers are used to retrieve information previously exchanged between trading partners and stored in their computer database files.
Individual Asset: An entity which is part of the inventory of given company (see Returnable Asset).
Individual Asset Reference: A number within a GIAI assigned by the holder of an EAN.UCC Company Prefix to an Individual Asset.
Internet Engineering Task Force (IETF): a large open international organization that develops and sets standards for the Internet. The organization is comprised of network designers, operators, vendors, and researchers concerned with the evolution of the Internet architecture and the smooth operation of the Internet.
Item Number: See Item Reference.
Item Reference: The part of the data structures allocated by the user to identify a trade item for a given EAN.UCC Company Prefix.
L
Location Number: See GLN.
Location Reference: A number within a GLN assigned by various parties to identify a different entity.
Logistic Unit: Any "container" that permits the physical grouping and identification of goods for shipping. It could be a carton, a plastic wrap, a pallet, or a trailer, depending upon the industry or goods.
Logistic Unit Identifier: Identification of an item of any composition established for transport and/or storage that needs to be managed through the supply chain
M
Manufacturer’s Number: See EAN.UCC Company Prefix.
Manufacturer’s ID: See EAN.UCC Company Prefix.
MD5 (Message Digest Algorithm #5): a mathematical algorithm used to insure message integrity that produces a 128-bit message digest or secure hash. The MD5 is a vital step in producing and verifying a Digital Signature.
MDN (Message Disposition Notification): an electronic receipt issued by the recipient which is sent back to then sender to verify the message was properly received. When this receipt is combined with a digital signature to ensure the identity of the recipient, a high level of security and verification is achieved known as “non-repudiation.”
O
OFTP: Odette File Transfer Protocol is a communications protocol primarily used by European Automotive Manufacturers and suppliers to exchange EDI and CAD documents. It is also being adopted by supply chains in the chemical industry and white goods manufacturing, and in some cases, financial.
P
Point-of-Sale: The point where a customer purchases a product(s) within a retail store. This purchase is typically facilitated by a "check-out" lane or counter where bar code scanning equipment is located.
POS (Point-of-Sale): Point-of-Sale. Refers to the retail type checkout where EAN/UPC Bar Code Symbols are normally scanned.
Public Key Infrastructure (PKI): an asymmetric encryption method that uses a public key/private key system to encrypt a message. The PKI establishes the encryption algorithm, security level, and distribution policy. It involves both the signed digital certificates and signed messages, ensuring the message itself has not been tampered with.
Private Key: One of two keys (private and public) in a Public Key Cryptography system, the private key is kept secret and used only by its owner to decrypt incoming messages. The private key is also used to sign outgoing messages with a Digital Signature.
Protocol: an agreed-upon set of rules for transmitting and receiving data. A variety of protocols exist, and they vary in simplicity, reliability, and speed. The protocol used may depend on the protocol supported by the device (computer) the user wishes to communicate with.
Public Key: One of two keys (private and public) in a Public Key Cryptography system, the public key is a published, or publicly available, key used to encrypt the message. The message can only be decrypted using the matching private key. The public key is stored in a Digital Certificate, signed by a Certificate Authority, which verifies the identity of the sender.
R
RFID (Radio Frequency Identification): a technology using electronic identification tags attached to objects and a wireless RFID receiver or gun to capture and collect data contained in the tag. The electronic passes used to automatically collect highway tolls are one example of RFID. RFID has distinct advantages over bar codes including the ability to hold more data, the ability to dynamically change the data as processing occurs, and the ability to work effectively in a wide range of environments. Once the data is collected, it can be communicated securely using AS2.
Returnable Asset: A reusable entity owned by a company, used for transport and storage of goods.
RosettaNet: a message routing and handling specification similar to AS2 that has been developed by a consortium of 500 companies from the IT, electronic components and semiconductor industries. RosettaNet uses HTTPs as the transport protocol to securely exchange XML documents.
RSA: a secure cryptographic algorithm using a two-part public-private key system for message encryption and digital signature authentication. The private key is kept secret by the owner; the public key is published. The public key encrypts the message, which can only be decrypted using the matching private key. RSA is named after its inventors (Rivest, Shamir, and Adelman) and owned by RSA Security, Inc.
S
SHA-1: a popular algorithm used to generate Digital Signatures. SHA-1 produces a 160-bit hash value. This produces a larger message digest, making it more secure, but slightly slower that the MD5 algorithm.
Serial Reference: The part of the data structure allocated by the user in conjunction with the Extension digit that establishes a unique SSCC for a given EAN.UCC Company Prefix.
Serial Shipping Container Code: See SSCC.
Service Reference: A number assigned by the service provider to identify the recipient of services in the context of a service relationship.
SSCC: The unique identification of a Logistic Unit using an 18-digit data structure. Formerly known as the Serial Shipping Container Code.
SSCC Serial Number: See Serial Reference.
SSL (Secure Sockets Layer): the leading protocol for handling the security of message transmission on the Internet. The "sockets" refer to the method of passing data back and forth between a client and a server program in a network. SSL utilizes public-and-private key encryption to reformat the message into a form that is unreadable without the use of the proper digital certificates. Developed by Netscape, SSL has recently been superseded by TLS (Transport Layer Security), which is based on SSL.
Static IP Address: a permanent IP address as opposed to a dynamic IP address, or one that continually changes. To communicate with Walmart’s AS2 server, a company is required to have a static IP address. Cable modems, DSL, and T-1 connections are generally assigned a static IP address. If you are unsure of your IP Address, you can check it here: www.cleo.com/support/get-ip.asp
Symbol: The combination of symbol characters and features required by a particular symbology, including Quiet Zone, start and stop characters, data characters, and other auxiliary patterns, which together form a complete scannable entity; an instance of a symbology and a data structure.
Symbol character: A group of bars and spaces in a symbol which is decoded as a single unit. It may represent an individual digit, letter, punctuation mark, control indicator, or even multiple data characters.
T
TCP/IP (Transmission Control Protocol/Internet Protocol): the underlying communication language or protocol of the Internet. The “TCP” portion provides the transport functions, which manage the assembling of a message into smaller packets that are transmitted over the Internet and received by a TCP layer. The TCP layer on the receiving end reassembles the packets into the original message. The “IP” portion handles the address part of each packet so that it gets to the right destination. Each gateway computer on the network checks the address to see where to forward the message. TCP/IP messages are routable meaning the messages can be sent to multiple networks within an organization or around the world, hence its use in the World Wide Web. Higher layer application protocols including HTTP, FTP, Telnet, and SMTP use TCP/IP to access the Internet. These and other protocols are often packaged together with TCP/IP as a "suite."
TLS (Transport Layer Security): a protocol using Triple DES encryption developed by the IETF based on SSL and other protocols. TLS is expected to supersede SSL as the standard for security on the Internet.
Trade item: Any item (product or service) upon which there is a need to retrieve pre-defined information and that may be priced or ordered or invoiced at any point in any supply chain.
Trading partner: A party to transactions in the supply chain, such as a supplier (seller) or a customer (buyer).
Triple DES: a symmetric key cryptography algorithm based on DES (Data Encryption Standard). Each block is encrypted three times using two or three keys. This increases security by extending the key to 112 or 168 bits.
Tunnel: a technology that enables data formatted in one protocol to be transmitted within the format of another protocol via another network's connection. Tunneling allows other types of transmissions to be sent within a prevailing protocol.
U
UCC (Uniform Code Council, Inc.): a not-for-profit organization that develops and sets global supply-chain standards including XML, EDI transaction set, and bar code identification standards.
UCC Company Prefix: Part of the UCC-12 Data Structure consisting of a UCC Prefix and a Company Number allocated by the UCC.
UCC/EAN-128 Bar Code Symbol: A subset of the Code 128 Bar Code Symbol that is utilized exclusively for UCC.EAN defined data structures. UCC/EAN-128 Symbols can be printed as stand-alone linear symbols or as a composite symbol with an accompanying 2D Composite Component printed directly above the UCC/EAN-128 linear component.
UCCnet: a global, Internet-based electronic commerce service promoting synchronized and standardized data. UCCnet’s GLOBALregistry serves as the worldwide source for companies to store product data, ensuring that trading partners have access to accurate, up-to-date, industry-compliant trading information. Cleo LexiCom can be used to communicate via AS2 with the UCCnet GLOBALregistry. UCCnet is a wholly owned subsidiary of UCC, Inc.
U.P.C. Symbol (Universal Product Code Symbol): A bar code symbol that encodes the twelve-digit UCC-12 (U.P.C.)
V
VAN (Value Added Network): a communications network that offers services beyond data transmission, such as EDI message translation, error detection, protocol conversion and message storage. GXS and Sterling are companies that provide VAN services.
Variable Measure Trade Item: An item always produced in the same pre-defined version (type, design, packaging, etc.) that may be sold at any point in the supply chain, which either may vary in weight/size by its nature or which may be traded without a pre-defined weight/size/length.
VPN (Virtual Private Network): a private network connecting computers (or other network devises) that is constructed within a public network, using carrier phone lines or the Internet. VPNs can thus take advantage of the economies of scale and management capabilities of large networks. VPNs typically include security in the form of public-private key encryption, SSL, and other methods, to ensure only authorized users can access the network.
X
X.509: a popular standard for formatting digital certificates that is a recommendation of the ITU (International Telecommunications Union).
X12: a standard for defining Electronic Data Interchange (EDI) transactions from the American National Standards Institute (ANSI). X12 was the primary North American standard for defining EDI transactions. In 1997 X12 merged with EDIFACT, the global standard in EDI transactions.
XML (Extensible Markup Language): a universal method for defining data on web pages and other documents. XML is a standard administered by the World Wide Web Consortium (W3C) and is derived from SGML (Standard Generalized Markup Language) It is similar to HTML is that it uses a tag structure. However, XML defines what the document elements contain, not just how they are displayed. Also, HTML uses predefined tags, but XML allows tags to be defined by the developer of the page meaning that any amount of unique attributes can be identified. This allows the pages to function much like database records. XML is expected to supersede EDI and become the dominant format for business-to-business data exchanges.