ISO 9735-6:2002

Overview

ISO 9735-6:2002 defines the EDIFACT Secure Authentication and Acknowledgement message - message type AUTACK - as part of the EDIFACT application-level syntax rules (syntax version number 4, release 01). This part provides an optional mechanism for applying cryptographic security services (authentication, integrity, non‑repudiation of origin, and secure acknowledgement or non‑repudiation of receipt) to EDIFACT structures (messages, packages, groups or interchanges). Communications protocols are out of scope; the standard specifies the structure, segments and rules for secure EDI exchanges.

Key Topics and Requirements

• Message type and syntax: AUTACK is identified by the EDIFACT message type code AUTACK; UNB data element 0002 must carry syntax version number “4” and data element 0076 release “01” when using this part.
• Functional roles: AUTACK can be used as an authentication message (originator signs or supplies hashed results) or as an acknowledgement message (recipient confirms receipt and validates integrity).
• Security data model:
  • References to secured EDIFACT structures are carried in the USX (security references) segment.
  • Security results (hash values or digital signatures) are carried in corresponding USY (security on references) segments.
  • Security header (USH) and trailer groups must be used to convey security method details and to protect AUTACK content where required.
• Two authentication modes:
  • Convey hashed values of referenced structures and secure the AUTACK itself; or
  • Convey digital signatures of referenced structures directly (in which case AUTACK need not itself be further secured).
• Acknowledgement rules: Acknowledgements apply only to secured EDIFACT structures; AUTACK used as acknowledgement must not require a further AUTACK in response (prevents ack loops).
• Conformance: Implementations claiming conformance to ISO 9735-6 must also conform to ISO 9735 parts 1, 2, 5, and 10. Normative references include ISO 9735-1, -2, -5 and -10.
• Supporting content: Annex A provides AUTACK examples; Annex B discusses security services and algorithms.

Applications and Who Uses It

• Intended for organizations exchanging EDIFACT EDI in commerce, transport, logistics, finance, and government where message authenticity, integrity and non‑repudiation are required.
• Useful for EDI solution architects, integration developers, operations teams, trading partners and auditors who need standardized, interoperable cryptographic acknowledgement and authentication at the application level.
• Applies to both national and international trade; independent of industry-specific message content.

Related Standards

• ISO 9735-1: Syntax rules common to all parts
• ISO 9735-2: Syntax rules specific to batch EDI
• ISO 9735-5: Security rules for batch EDI (authenticity, integrity, non‑repudiation)
• ISO 9735-10: Syntax service directories

Keywords: ISO 9735-6:2002, AUTACK, EDIFACT, secure authentication, EDI acknowledgement, digital signature, hash, USX, USY, security header, EDI security.