ISO 9735-9:2002

Overview

ISO 9735-9:2002 is the EDIFACT application-level syntax specification for security key and certificate management messages (message type KEYMAN). Part of the ISO 9735 series (Syntax version number 4, release 01), this standard defines how to structure messages used to request, deliver and manage cryptographic keys, certificates and certification paths in a batch EDI environment. It provides an optional EDIFACT capability for automating certificate lifecycle and key management actions while conforming to EDIFACT syntax rules.

Key topics and requirements

• Message type: KEYMAN - a dedicated EDIFACT message for key and certificate management.
• Field of application: Intended for batch EDIFACT exchanges; suitable for national and international trade across industries.
• Primary functions: Request or deliver symmetric keys, asymmetric keys (public/private), certificates, certification paths; support actions such as renew, replace, revoke and list retrieval.
• Message structure: Defines required segments and segment groups, including:
  • UNH (message header) identifying the KEYMAN message and syntax version
  • Segment group 1 (USE–USX–SG2) for linking to earlier messages
  • Segment group 2 (USF–USA–SG3) for single keys/certificates or certification paths
  • Segment group 3 (USC–USA–USR) for certificate credentials and validation results
  • Segment group 4 (USL–SG5) for lists of certificates or public keys and their status
• Security support: KEYMAN messages may be protected using security header and trailer segment groups defined in ISO 9735-5 (authenticity, integrity and non-repudiation).
• Conformance: Implementations must conform to ISO 9735 parts 1, 2, 5 and 10 as applicable; syntax version number “4” and release “01” are required in UNB segments for this part.

Practical applications and users

ISO 9735-9 (KEYMAN) is used to automate and standardize PKI and key distribution workflows within EDI-based interchanges. Typical use cases:

• Distributing symmetric keys or asymmetric key pairs between trading partners
• Delivering X.509 or other external-format certificates (referenced in USC segment) or certificate status lists (revocation lists)
• Automating certificate renewal, replacement and revocation notifications across supply chains
• Integrating EDI systems with Certificate Authorities and internal key-management systems

Primary users and implementers:

• EDI solution vendors and integrators
• IT security teams and PKI administrators
• Certificate Authorities (CAs) and trust service providers
• Enterprises exchanging secure batch EDI messages across trading partners

Related standards

• ISO 9735-1, -2, -5, -10 (EDIFACT syntax rules, batch EDI rules, security rules, syntax service directories)
• UN/CEFACT EDIFACT message design guidelines and UNTDID
• External certificate formats (e.g., X.509) may be referenced within KEYMAN messages

Keywords: ISO 9735-9, EDIFACT, KEYMAN, security key management, certificate management, batch EDI, PKI, EDI security, certificate revocation.