ENX Association

From Wikipedia, the free encyclopedia
(Redirected from European Network Exchange)
ENX Association
FormationJune 14, 2000; 23 years ago (2000-06-14)
TypeAssociation in line with French law (non-Profit)
Location
Members
14
Managing director
Lennart Oly
President
Clive Johnson (Ford)
Vice President
Philippe Ludet (Renault SAS)
Treasurer
Nadine Garaud (GALIA)
Websitewww.enx.com

The ENX Association is an association of European vehicle manufacturers, suppliers and organisations.

History[edit]

The Association[edit]

The ENX Association, which was founded in 2000[1] is an association according to the French law of 1901. Its headquarters are in Boulogne-Billancourt (France) and Frankfurt am Main. The 15 members of the association, which are all also represented on the so-called ENX board, are Audi, BMW, Bosch, Continental, Daimler, DGA, Ford, Renault, Volkswagen, as well as the automotive associations ANFAC (Spain), GALIA (France), SMMT (UK), and VDA (Germany). The association can decide to accept additional members upon request; however, the association rules state that the total number of members is limited.

Fields of activity[edit]

The ENX Association is a non-profit organisation that acts as a legal and organisational roof for the ENX network standard. It provides the participating companies with a platform for the exchange of information and for the initiation of pre-competitive project cooperations in the field of information technology. The main drive behind the German and French industries creating the standard was to protect intellectual property while at the same time reducing costs and complexity concerning data exchange within the automotive industry.

One cited benefit of the creation of a "Trusted Community" for branches of industry is that, although companies protect their own infrastructures, problems occur in cases where encryption or authentication solutions are used across different companies and yet should be acknowledged as confidential. An impasse is often reached when both sides seek to implement their own mechanisms, if not before. This is demonstrated by the example of email encryption, with the clash of safety regulations in view of shared application use and thousands of unencrypted data connections. A shared, confidential infrastructure provides a remedy here.[2] Ford cites the use of ENX to communicate with suppliers as an example of how considerable savings can be made through consolidation and standardisation.[3]

The implementation of industrial requirements for IT security between companies represents a further sphere of activity. The following are described as subject areas here:

  • Secure cloud computing (between companies)
  • Protecting intellectual property during development cooperations (e.g. using Enterprise Rights Management, ERM)

The assessment of fulfilling the said requirements is standardised and executed by approved external service providers. The ENX Association approves them and develops and governs the TISAX standard for this purpose.[4] The Trusted Information Security Assessment Exchange allows the producers to rely on information security implemented at their service providers and Suppliers in their ISM Systems. The TISAX has similar task to the ISO/IEC standard 27001, but is tailored to the needs of the automotive industry, issues no public certificates and distinguishes degrees of implementation.

The ENX Association is a member of the ERM.Open project by ProSTEP iViP e.V. and, was active in the forerunner project SP2 together with Adobe, BMW, FH Augsburg, Continental, Daimler Fraunhofer IGD, Microsoft, PROSTEP, Siemens PLM, TU Darmstadt, TAC, Volkswagen and ZF Friedrichshafen.[5]

The SkIdentity project, which the ENX Association is involved with, was named as one of 12 winners of the BMWi technology competition "Secure cloud computing for medium-sized businesses and the public sector - Trusted Cloud" by the Federal Ministry of Economics and Technology (BMWi) on 1 March 2011 at the IT exhibition CeBIT in Hanover. The BMWi has set up the Trusted Cloud programme to promote "the development and testing of innovative, secure and legally compliant cloud solutions".[6]

Presidents of the ENX Association[edit]

The presidents of the ENX Association are:

  • Philippe Ludet (since July 2019)
  • Clive Johnson (since April 2013)
  • Prof. Dr. Armin Vornberger (October 2005 - April 2013)
  • Hans-Joachim Heister, Ford-Werke GmbH (July 2001 - October 2005)
  • Dr. Gunter Zimmermeyer, Verband der Automobilindustrie e.V. (July 2000 - July 2001)

ENX Association memberships[edit]

The ENX Association is a member of the following associations and organisations:

  • Automotive Industry Action Group (AIAG), Southfield, Michigan
  • Bundesverband Informationswirtschaft, Telekommunikation und neue Medien e.V. (BITKOM)
  • ProSTEP iViP e.V.
  • RIPE NCC[7]
  • In addition, there are two-way affiliations with ANFAC, GALIA, and SMMT

Use of the ENX network[edit]

Usage scenarios[edit]

The European automotive industry's communication network of the same name is based on the standards set by the ENX Association concerning security, availability and interoperability. The so-called industry network guarantees the secure exchange of development, production control and logistical data within the European automotive industry.

The automotive industry is shaped by strong international cooperation and the necessity for companies to coordinate closely linked processes, which require a precise alignment and seamless exchange of data between partners. This makes "integrated global network concepts" necessary.[8] ENX is described as a platform, which creates the foundation for these types of cooperative production models.[9]

Realignment began at the end of 2002. The aim was to bring the technical development in line with user requirements on a consistent basis, particularly for small and medium-sized business.[10] The implementation took several years. In June 2004, French users complained about the lack of cost-effective entry-level solutions in the France Telecom portfolio.[11]

In March 2011, over 1,500 companies within the automotive and other industries were using the network, which is available worldwide, in over 30 countries.

The network can be used for all IP-compatible protocols and applications. The bandwidth ranges from classic EDI data exchange, to access to databases and secure email exchange, to the carrying out of video conferences. The use of EDI transfer protocols, such as OFTP (Odette File Transfer Protocol), OFTP2 and AS2, is widespread in the ENX network. OFTP2, which was developed from 2004, allows for use via the public Internet.

According to the trade press, some vehicle manufacturers have been demanding the use of OFTP2 over the Internet since 2010. "Tens of thousands of suppliers" are affected. In this medium, which is accessible to everyone, substantially more security is required for the transfer of sensitive data; it is difficult to estimate the implementation costs.[12]

Registration as a pre-requisite for use[edit]

You must register with the ENX Association in order to use the ENX network.[13] Registration can either be completed directly with the ENX Association or via one of its representatives.

Representatives of the ENX Association[edit]

In some countries and industries, the ENX is represented by industrial associations and organisations (so-called ENX Business Centres). These organisations act as contact persons in the relevant local language, process registration applications and take responsibility for the initial authorisation of new users in their relevant area of representation.

The ENX Association has chosen this model of representation to allow industrial associations and similar organisations to manage user groups on an independent basis.

Organisation Headquarters Country of domicile Area of representation
GALIA Boulogne-Billancourt  France France French automotive industry
DGA Paris  France France Defence and aerospace industry
ACAROM Bukarest  Romania Romania Romanian automotive industry
Odette Schweden Stockholm  Sweden Sweden Swedish automotive industry
ANFAC Madrid  Spain Spain Spanish automotive industry
SMMT London  United Kingdom United Kingdom British automotive industry

Operating the ENX network[edit]

Operating the network and the data links[edit]

Operation by certified service providers[edit]

The ENX network fulfills the quality and security requirements found in company-owned networks, while also being as open and flexible for participating vehicle manufacturers, suppliers, and their development partners as the public Internet.[14] Data exchange between ENX users takes place via the network of the communication service provider, certified for this role by the ENX Association, using an encrypted Virtual Private Network (VPN).[15]

The first certified communication service provider was the Deutsche Telekom subsidiary T-Systems.[16] This was followed by Orange, Telefónica, Infonet and, in 2007, Verizon Business. In 2010, three additional companies successfully acquired ENX certification, namely ANXeBusiness, BCC and Türk Telekom. According to information from the ENX Association, Open Systems AG is an additional service provider currently going through the certification process.

The services provided by the certified service providers are interoperable, and are provided in a competitive environment.

Overview of the service providers certified in line with the ENX standard[edit]

Certification Company Country of domicile Geographical focus Comment
2010 ANXeBusiness  United States Nordamerika
2010 BCC GmbH  Germany Approx. 150 countries worldwide ENX services also via public Internet
2005 Infonet Corp. / BT Infonet  United States Approx. 100 countries worldwide ENX operation since 2011 through KPN International
2010 KPN International  Netherlands Approx. 100 countries worldwide Formerly Infonet Nederland
2011 Open Systems  Switzerland Approx. 200 countries worldwide ENX services via public Internet
2002 Orange Business  France France
2001 T-Systems GmbH  Germany Germany, individual countries worldwide
2010 Türk Telekom  Turkey Turkey
2007 Verizon Deutschland GmbH  Germany Approx. 150 countries worldwide ENX services also via public Internet

Certification process[edit]

According to the ENX Association, certification is a two-stage process.[17] The first stage, the so-called concept phase, sees the ENX Association testing to see whether the service provider's ENX operating model fulfills the technical ENX specifications. The second stage sees the service provider putting their operating model into practice. Besides inspecting the internal organisation, the IPSec interoperability is also tested in the so-called "ENX IPSecLab".[18] In addition, the ENX encryption is implemented and the connection is made to providers already certified via private peering points, so-called "ENX Points of Interconnection". Once this has been completed, the implementation and adherence to the ENX specifications is tested in a pilot run. Suitable preparation by the service provider should allow the chargeable certification to be completed within approx. three to four months.

Central operational elements behind the scenes[edit]

Central services are provided on behalf of and under the control of the ENX Association. These services provide a simplified connection ("interconnectivity") between the individually certified service providers and the interoperability of the encrypted hardware used. They include the so-called Points of Interconnection ("ENX POIs"), the IPSec Interoperability Laboratory ("ENX IPSec Lab") and the Public Key Infrastructure ("ENX PKI") in the ENX Trust Centre.

The Points of Interconnection have a geographically redundant structure, are interconnected, and are operated in data processing centres in the following regions: Rhine-Main region, Germany; Isle-de-France, France and East coast of the United States.

These central operational elements are not visible to the individual users. The customer sources their own connection, including IP router, encryption hardware, key material, uninterrupted end-to-end encryption of each communication, and individual service level agreements, directly from the certified telecommunications service provider that they have chosen.

Global availability[edit]

JNX industry network and the ANXeBusiness in North America[edit]

The Japanese automotive industry has an industry network that is similar to the ENX in terms of technology and organisation, namely the Japanese Network Exchange (JNX). The network is controlled from the JNX Centre, which is tied to the Japanese automotive associations JAMA and JAPIA. JNX and ENX are not linked.

In contrast, there are considerable technical, organisational and commercial differences between the ENX standard and the American ANX, which was developed back in the 1990s.

Connection between Europe and North America[edit]

ENX as a mutual standard since 2010[edit]

On 26 April 2010, the ENX Association and ANX eBusiness announced that they were going to connect their networks to create a global standard in the automotive industry.[19][20] The connection resulted in a transatlantic industry network with more than 1,500 connected companies. The network went live with the completion of the pilot stage on 26 May 2010.

According to concordant statements by the ENX Association and the ANX eBusiness Corp., only the ENX standard is used for transatlantic connections both in Europe and in North America. In their announcements, the ANX and ENX have described the interconnection as being free of charge for the individual users.[21]

Differences between ENX and ANX[edit]

The network for North America, the so-called Automotive Network Exchange (ANX), is operated by the ANXeBusiness Corp. Although, like the ENX, it was originally initiated by the automotive industry and operated by a consortium; in contrast to the ENX, it was sold and, as a result, operated as a classic profit-making service company.[22]

ANX is a physical network. Availability stands at the forefront. For the time being, ANX is based continuously on the operation of fixed connections with high uptime guarantees. With the additional product "TunnelZ",[23] ANX also offers an optional VPN tunnel management, which is not used by all those manufacturers and suppliers connected to the network. In the classic ANX network, key management takes place using Pre-Shared Key (PSK), while the encryption strength is limited to DES.

ENX is set up as a managed security service, which continuously incorporates a standardised tunnel management, a trust centre based Public Key Infrastructure (PKI) and authentication and encryption mechanisms based on various networks (from private to public).

In fact, while the ANX network has one provider for its customers, namely the ANXeBusiness company itself, ENX services are provided by various companies that are in competition with one another.

In order to link the networks despite this, ANXeBusiness continues to operate its own network separately from and untouched by ENX, but provides every ANX user who wants the service with an active native ENX connection, including all required security and service features, via its own physical network. ANX has undergone certification and monitoring by the ENX Association for this purpose, and acts as an ENX certified service provider.[24]

Summary[edit]

With the certification of ANXeBusiness as an ENX provider, ENX and ANX use the aforementioned organisational differences between a non-profit-making industrial consortium (ENX) on the one hand and a service provider (ANX) on the other to connect the two networks. This is not a case of mutual interoperability, as ANX has adopted the ENX standard. There are likely to be new market perspectives for ANX as a result of the potential access to all ENX users. At the same time, it can be assumed that the bridge to the ANX will make it easier for other ENX service providers in the USA and, as a result, will generate competition.

References[edit]

  1. ^ Europäische ENX-Gesellschaft unter Federführung des VDA gegründet - European ENX company founded under the management of the VDA Archived 2012-03-25 at the Wayback Machine In: Automobilindustrie, 19. Juli 2000
  2. ^ Kampf der Beliebigkeit - Battle against arbitrariness. (PDF) In: Automobilindustrie, September 2009 (Interview with Lennart Oly)
  3. ^ Ich erwarte, dass wir in der IT “more-for-less” liefern werden - I expect that we will deliver 'more-for-less' in IT. In: Automotive IT, 10. Dezember 2009 (Interview mit Hans-Joachim Heister)
  4. ^ "Welcome to TISAX · ENX Portal". portal.enx.com. Retrieved 2022-12-15.
  5. ^ "ProSTEP iViP Projekt Secure Product Creation Processes (SP²)". Archived from the original on 2009-04-04. Retrieved 2011-06-15.
  6. ^ "BMWi: Sichere Internet-Dienste - Sicheres Cloud Computing für Mittelstand und öffentlichen Sektor (Trusted Cloud) - BMWi: Secure Internet services - Secure cloud computing for medium-sized businesses and the public sector (Trusted Cloud)". Archived from the original on 2011-05-29. Retrieved 2011-06-15.
  7. ^ "Members ordered by country code".
  8. ^ Jürgen Appel: Kommunikation über Firmengrenzen hinweg - Communication beyond company borders Archived 2011-09-28 at the Wayback Machine In: Computerwoche, 17. September 2004
  9. ^ Helga Biesel: IT im Automobilbau: Spannende Entwicklungen - IT in the automotive industry: Exciting developments Archived 2011-09-28 at the Wayback Machine In: Computerwoche, 17. September 2004
  10. ^ ENX wechselt auf die Überholspur - ENX moves into the fast lane Archived 2012-03-23 at the Wayback Machine Computerwoche, 13. September 2002
  11. ^ Aurélie Barbeaux: L’extranet européen de l’automobile déçoit - Das europäische Extranet der Automobilindustrie enttäuscht - The European automotive industry extranet disappoints In: Usine Nouvelle, 10. Juni 2004
  12. ^ An OFTP2 kommt kein Zulieferer vorbei - No supplier can get around OFTP2 In: Automobilwoche 5. August 2010
  13. ^ "ENX FAQ Chapter 5 - Registration". Archived from the original on 2011-07-10. Retrieved 2011-06-15.
  14. ^ Zugang für Unbefugte verboten: Porsche setzt auf Branchennetzwerk ENX - No unauthorised access: Porsche relies on ENX industry network Archived 2012-03-23 at the Wayback Machine Computerwoche, 3. August 2001
  15. ^ Alexandra Haack in: Sichere Tür zu Tür Kommunikation - Secure door-to-door communication Automobilwoche, 9. September 2006
  16. ^ VDA: Weg frei zum European Network Exchange - DeTeSystem und Automobilindustrie unterzeichnen Rahmenvertrag - VDA: The road is clear for the European Network Exchange - DeTeSystem and automotive industry sign framework agreement Archived 2011-09-28 at the Wayback Machine
  17. ^ "How do I become a "certified service provider"?". Archived from the original on 2011-10-06. Retrieved 2011-06-17.
  18. ^ Netzsicherheit der europäischen Automobilindustrie - Network security in the European automotive industry Archived 2012-03-25 at the Wayback Machine In: Automobilindustrie, 7. Februar 2003
  19. ^ Klaus-Dieter Flörecke: Globaler Standard im Datenaustausch - Global Standard in Data Exchange. In: Automobilwoche, 27. April 2010
  20. ^ ENX und ANX - ENX and ANX. Archived 2011-09-04 at the Wayback Machine In: Automobilindustrie, 28. April 2010
  21. ^ David Barkholz: Trans-Atlantic networks link up to ease automotive data sharing. In: Automotive News, 26. Juli 2010
  22. ^ AIAG: AIAG sells its ANX assets and operations as the network realizes its vision of becoming a globally recognized commercial offering. (PDF)
  23. ^ Produktbeschreibung ANX TunnelZ Archived 2011-07-26 at the Wayback Machine
  24. ^ ANX Certified Archived 2011-10-06 at the Wayback Machine

External links[edit]

Communication networks within the automotive industry (non-profit organisations)[edit]

Information from service providers certified in line with ENX standards (commercial solutions)[edit]

ENX member organisations[edit]