PEPPOL SMP
OASIS BDXR TC
July 25 2012
The PEPPOL infrastructure
Overall architecture
CENTRAL
GOVERNANCE
POINTS
SERVICE
METADATA
LOCATOR (SML)
PEPPOL
CERTIFICATE
AUTHORITY (PKI)
DISTRIBUTED
REPLICATED
SCALED
SYSTEMS
SERVICE
METADATA
PUBLISHER (SMP)
ACCESS POINT
SERVICE
(GATEWAY)
Steps for sending documents
SERVICE
METADATA
LOCATOR (SML)
1: DNS lookup
PEPPOL
CERTIFICATE
AUTHORITY (PKI)
5: Check certificate validity
2: HTTP GET metadata
SENDER’S
ACCESS POINT
SERVICE
3: Check certificate validity
4: Send document
SERVICE
METADATA
PUBLISHER (SMP)
RECEIVER’S
ACCESS POINT
SERVICE
Why is the SMP separate from the
gateway (Access Point)?
Metadata
– Orthogonal
– Can use metadata without using START
– Can use START without looking up metadata
• e.g. hardcoded endpoints
– Allows new protocols to be added
– Allows alternate governance models
Transport
How the SMP is currently being used
Access Point
service
National
infrastructure
Access Point
service
Nationa
l SMP
Access Point
service
Access Point
service
SMP
service
PEPPOL
SML
PEPPOL infrastructure
Access Point
service
SMP
service
Shared
Access Point
Service
provider
Service
VANS
provider
Service
provider
Shared
SMP
Access Point
service
SMP
service
The SMP data model
• ServiceGroup
– Holds the participant identifier of the recipient,
and a list of references to individual
ServiceMetadata resources that are associated
with that participant identifier
• SignedServiceMetadata
– Holds all of the metadata about a Service, or a
redirection URL to another Service Metadata
Publisher holding this information
Example SMP data
• ServiceGroup
– http://alfa1lab.publisher.sml.peppolcentral.org/iso6523actorid-upis%3A%3A9902%3ADK28158815
• SignedServiceMetadata:
– http://alfa1lab.publisher.sml.peppolcentral.org/iso6523actoridupis%3A%3A9902%3ADK28158815/services/busdoxdocidqns%3A%3Aurn%3Aoasis%3Anames%3Aspecification%3A
ubl%3Aschema%3Axsd%3AInvoice2%3A%3AInvoice%23%23urn%3Awww.cenbii.eu%3Atrans
action%3Abiicoretrdm010%3Aver1.0%3A%23urn%3Awww.
peppol.eu%3Abis%3Apeppol4a%3Aver1.0%3A%3A2.0
Some issues
• SMP data model is very “hardcoded” to
PEPPOL’s needs and requirements
• SMP does not support security – all
information in the SMP is always publicly
displayed
– Dale has pointed out some issues with using
HTTPS
– (partly SML related)