The document discusses challenges with business-to-business (B2B) identity management. It notes that securing connections is easier than managing identities, which is becoming more difficult with increasing automation demands, partner onboarding requirements, compliance reporting needs, and growing protocol complexity. It focuses on the importance of security, governance, access controls, and using the right systems, platforms, people and partners to effectively manage identities embedded in data across various B2B layers.

1. B2B Identity Management

2. Securing Pipes This is the easy part of B2B identity

3. Managing Identity is Getting Harder Increasing automation demand Partner On-boarding requirements increasing Increasing demands for compliance reporting Protocol complexity growing Increasing focus on security and governance

4. <company>Big Corporation</company> mutually defined Duns number ZZ 01 07 ISA GS una unb https://sub.domain.com IP Address

5. Identity, Access and Security Companies Divisions Geographies Locations People Admins Users Management Products Genealogy Chain of Custody

6. Questions to Ask Who can represent a company? Who represents the buyer and seller? How to manage in transit and customs identity needs? Who validates that any given document is valid? Who can change routing information? How to manage a singe ID on multiple networks? Who defines ID’s?

7. e-Invoicing in Europe is about identity and security EU Council Directive on e-Invoicing (2006/112/EC, November 2006) Ratified by all EU countries Paper and electronic invoices are possible Third Parties can act for sender and receiver Electronic Invoices can be sent by: EDI (1994/820/EU) Digitally signed document (1999/93/EU) Other means (to be defined by the EU-member state) Country-specific requirements: Archiving Electronic Signature Service Provider First Mile Connection The EU broadened e-Invoicing support by implementing EU Council Directive on e-Invoicing (since 2004)

8. opportunity is beyond the network

9. Access and Controls The right systems, the right platforms, the people and the right partners

10. Data is everywhere Identity is embedded in the data

11. Identity is part of EVERY B2B Layer Digital certificates SSH (secure shell) PGP SMTP HTTP/s FTP/s NAESB Event-driven Scheduled Leased line VPN Binary User-defined SSL, TLS/SLL S/MIME IPSEC Proxy Servers (HTTP, FTP) Security Flexible Communication Capabilities AS1, AS2, AS3 ebXML JMS/MQ Web Services EBMX Transport Real-time Store-and-forward mailbox Delivery Internet Frame relay Connectivity EDI XML Text Data Formats

12. What is the cure? Collaborative Standards Development