What is PEPPOL - Short View

PEPPOL (Pan-European Public Procurement Online) is an international standard for electronic procurement. It provides a framework for secure and standardized electronic document exchange between businesses and government entities (B2G), as well as between businesses (B2B). PEPPOL is widely used for exchanging documents such as invoices, orders, and catalogs, using a predefined network of Access Points.

The PEPPOL architecture comprises several key components and models that ensure interoperability, security, and scalability.

1. PEPPOL Architecture Models

1.1. The Four-Corner Model

The PEPPOL network uses a four-corner model for message exchange, ensuring that no direct connection is required between sender and receiver. Instead, Access Points act as intermediaries.

Key Components:

1. Corner 1: Sender (e.g., a supplier or business entity)

   • The originator of the document, such as an invoice or order.
   • Uses its system to prepare the document according to PEPPOL standards.

2. Corner 2: Sender's Access Point (AP)

   • The sender’s Access Point ensures the document complies with the PEPPOL format and securely transmits it to the recipient’s Access Point.

3. Corner 3: Receiver's Access Point (AP)

   • The receiver’s Access Point validates and delivers the document to the intended recipient in the correct format.

4. Corner 4: Receiver (e.g., a government agency or business partner)

   • The final recipient of the document who processes it in their system.

Advantages:

• Interoperability: Any entity with an Access Point can exchange documents with others on the network.
• Scalability: Only one connection to the network is needed for each entity.

1.2. PEPPOL Service Metadata Publisher (SMP) and Service Metadata Locator (SML)

These components enable dynamic discovery of trading partners within the PEPPOL network.

Service Metadata Publisher (SMP):

• Each trading partner registers their metadata in an SMP.
• Metadata includes identifiers, capabilities (e.g., supported document types), and endpoints.

Service Metadata Locator (SML):

• Acts as a central directory for locating the appropriate SMP for a specific recipient.
• Uses DNS-based lookup to redirect to the recipient's SMP.

Advantages:

• Dynamic partner discovery.
• Reduction in manual configuration for trading partner connections.

1.3. Document Exchange Standard

PEPPOL mandates the use of UBL (Universal Business Language) for document formats. This ensures consistency across borders and systems.

Key Features:

• XML-based structure.
• Standardized message types (e.g., invoices, orders).

1.4. Security and Trust Model

PEPPOL enforces strict security protocols to protect data and ensure trust.

Key Features:

• PKI (Public Key Infrastructure): Each Access Point must have a valid digital certificate.
• AS4 Protocol: Ensures secure data transfer with encryption and signing.
• Compliance Agreements: AP providers must adhere to PEPPOL’s policies and frameworks.

1.5. Governance Model

PEPPOL is governed by the OpenPEPPOL Association, which oversees its operations, standards, and compliance.

Roles of OpenPEPPOL:

• Maintain and update the PEPPOL framework.
• Certify Access Points.
• Manage agreements between participants.