OFTP & OFTP2

Q: How secure is OFTP2?

OFTP2 is one of the most secure EDI protocols . It guarantees data security through three protection levels: TLS/SSL protects the connection, asymmetrical cryptography (public/private key) encrypts the files and digital signatures authenticate the sender and check the integrity of data .

Q: Which industries and applications is OFTP2 suitable for?

OFTP2 is the de facto standard in the automotive industry and used by leading car manufacturers (such as BMW, Audi, Daimler, Volkswagen) and their vendors for the exchange of CAD drawings and commercial EDI messages . Due to its capability of transferring large datasets efficiently, it is also used in industries such as logistics, mechanical engineering and commerce.

Q: What benefits are provided by OFTP2 compared with alternatives such as AS2 or X.400?

OFTP2 allows both the sending ( push mode ) and retrieving ( pull mode ) of files in one single session. In contrast , AS2 is a pure push protocol commonly used in commerce but with limited file sizes . X.400 is an older complex protocol . OFTP2 is inexpensive as it uses Internet connections .

Q: How is OFTP2 implemented?

For the implementation , companies need an OFTP2 software solution (or a managed service), a continuous Internet connection, an Odette ID as well as valid digital certificates . The certificates are used for encryption , signature and TLS authentication and are available from the Odette Trust Service Status List or can be mutually signed.

Q: How does the resumption of interrupted transmissions work?

In case of an interrupted connection, both OFTP and OFTP2 can resume the data transfer at the position last transmitted. This saves time and bandwidth.

OFTP and OFTP2 are abbreviations for the “Odette File Transfer Protocol” in two versions. These are standardized network protocols for electronic data interchange (EDI).

Claudio Endres

Product Manager at FIS

What is an Odette File Transfer Protocol (OFTP)?

OFTP is a network protocol used for the direct data transfer between two communication partners.

In the 1980s, OFTP was developed by the Odette organization for the EDI data interchange within the European automotive industry and it corresponds to VDA Recommendation 4914/2. However, due to their robustness, EDI protocols are not only used in the automotive industry but also in industries such as banking, chemical industry and transportation sector.

OFTP facts

Transferred data

OFTP is used for the transfer of technical and business documents, such as purchase orders, invoices or CAD data.

Identification

Partners identify themselves via a clear Odette ID and a password.

Efficiency

The OFTP network protocol is very efficient as it only uses 14 commands.

Resumption

An essential OFTP feature is the possibility of continuing an interrupted transmission without having to send the complete file once more.

Transportation base

OFTP does not depend on a transportation medium and could be operated via ISDN, X.25 or TCP/IP.

What does OFTP2 mean?

OFTP2 (Odette File Transfer Protocol 2) is the second generation of the protocol. Its further development was implemented in 2007 to meet the increased requirements of modern Internet. The older OFTP1 mainly worked on an ISDN basis and did not offer any cryptographic protection. OFTP2 was developed to ensure data security and global reach.

OFTP2 uses the following advanced standards:

Transport: It uses the Internet as a transport route and is based on the TCP/IP protocol, which means that no telephone charges are incurred.
Security: OFTP2 offers integrated encryptions and digital signatures.
Performance: Integrated file compression enables the transfer of much larger datasets up to petabyte size.
Global reach: It supports additional character sets (e.g. Asian) and extends the application to global supply chains.

What is the role of FIS in further developing the OFTP2 protocol?

FIS works in the “OFTP2 Experts Group”, a group of specialists further developing the OFTP2 protocol. As an SAP expert with many years of experience, FIS supports the group in making the system easier and even more efficient for companies. Examples here are new functions such as the automatic exchange of security certificates or the automatic creation of new partners. This saves time, reduces errors and facilitates the cooperation with other companies in data exchange.

SAP BPI with FIS

Overview of the essentials: Business Process Integration

Seamlessly networking systems, partners and processes

To the products

What is the difference between OFTP and OFTP2?

OFTP in a direct comparison: OFTP1 vs. OFTP2

Characteristic	OFTP1 (OFTP)	OFTP2
Transportation medium	Mainly ISDN, X.25 or unencrypted TCP/IP.	Encrypted TCP/IP via the Internet.
Costs	Incurring telephone charges (in case of ISDN use).	Cost saving as existing Internet connections are used.
Security	Based on easy password authentication.	Several security levels: TLS/SSL, asymmetrical encryption, digital signatures and certificates. Ensures integrity and confidentiality.
File size	Limited (through ISDN bandwidths).	Extremely big datasets (up to petabyte size) due to file compression.
Tracking	End-to-End Response (EERP).	EERP/NERP, completed by digitally signed receipts.
Globality	Rather limited to regional networks.	Independent of networks and running via every IP network.

Why is OFTP2 important for the automation of B2B processes?

OFTP2 is of essential importance for the automation of B2B processes as it enables digital networking with business partners in a safe, efficient and standardized way. Due to its advanced architecture and integration capacity, OFTP2 addresses the central requirements of companies concerning electronic data interchange (EDI).

1. Seamless integration into ERP systems

As a standardized protocol, OFTP2 can seamlessly be integrated into EDI solutions and ERP systems such as SAP. The OFTP2 adapter available in FIS/xee can be used to execute critical B2B processes, such as purchase-to-pay or order-to-cash processes, in an automated and efficient way.

2. Elimination of error sources

Data exchange automation via the OFTP2 adapter in FIS/xee reduces manual interventions and, as a consequence, minimizes the error rate. In addition, OFTP2 ensures the traceability and non-repudiation of transactions through digitally signed receipts.

3. Efficient transfer of large datasets

Thanks to integrated file compression, OFTP2 can efficiently transfer much larger datasets (e.g. CAD drawings) up to petabyte size. If the transmission is interrupted, it can be continued seamlessly, which saves time and bandwidth.

4. Highest data security

OFTP2 uses TLS/SSL for encrypting the connection and asymmetrical cryptography to be able to protect the files. Here, digital signatures ensure the authentication of the sender and the integrity of data against manipulation.

In combination with the OFTP communication within FIS/xee, B2B processes can be automated and the security of data increased for the global exchange of data.

Conclusion

Today, OFTP2 is the standard for secure electronic data interchange. Compared with OFTP1, it offers decisive advantages through encrypted TCP/IP connections, digital signatures, file compression and the elimination of telephone costs. It supports both commercial EDI messages and big technical CAD drawings.

FAQ – frequently asked questions

OFTP2 is one of the most secure EDI protocols. It guarantees data security through three protection levels: TLS/SSL protects the connection, asymmetrical cryptography (public/private key) encrypts the files and digital signatures authenticate the sender and check the integrity of data.

OFTP2 is the de facto standard in the automotive industry and used by leading car manufacturers (such as BMW, Audi, Daimler, Volkswagen) and their vendors for the exchange of CAD drawings and commercial EDI messages. Due to its capability of transferring large datasets efficiently, it is also used in industries such as logistics, mechanical engineering and commerce.

OFTP2 allows both the sending (push mode) and retrieving (pull mode) of files in one single session. In contrast, AS2 is a pure push protocol commonly used in commerce but with limited file sizes. X.400 is an older complex protocol. OFTP2 is inexpensive as it uses Internet connections.

For the implementation, companies need an OFTP2 software solution (or a managed service), a continuous Internet connection, an Odette ID as well as valid digital certificates. The certificates are used for encryption, signature and TLS authentication and are available from the Odette Trust Service Status List or can be mutually signed.

In case of an interrupted connection, both OFTP and OFTP2 can resume the data transfer at the position last transmitted. This saves time and bandwidth.

Table of content