Wikipedia

ENX Association

"ENX" redirects here. For other uses, see ENX (disambiguation).

The ENX Association is an organization comprising European vehicle manufacturers, suppliers, and related organizations.

ENX Association
FormationJune 14, 2000; 24 years ago (2000-06-14)
TypeAssociation in line with French law (non-Profit)
Location
Members
14
Managing director
Lennart Oly
President
Clive Johnson (Ford)
Vice President
Philippe Ludet (Renault SAS)
Treasurer
Nadine Garaud (GALIA)
Websitewww.enx.com

History

edit

The Association

edit

Founded in 2000,[1] the ENX Association is an organization under French law of 1901. Its headquarters are located in Boulogne-Billancourt, France, and Frankfurt am Main. The fifteen members of the association, all represented on the ENX board, are Audi, BMW, Bosch, Continental, Daimler, DGA, Ford, Renault, Volkswagen, and the automotive associations ANFAC (Spain), GALIA (France), SMMT (UK), and VDA (Germany). The association can accept additional members upon request; however, its rules specify that the total number of members is limited.

Fields of activity

edit

The ENX Association is a non-profit organization that serves as the legal and organizational framework for the ENX network standard. It provides participating companies with a platform for exchanging information and initiating pre-competitive project cooperation in information technology. The main impetus behind the German and French industries creating the standard was to protect intellectual property while reducing costs and complexity related to data exchange within the automotive industry.

One cited benefit of creating a "Trusted Community" for various industry branches is that, while companies protect their infrastructures, problems arise when encryption or authentication solutions are used across different companies but need to be acknowledged as confidential. An impasse often occurs when both sides try to implement their own mechanisms. This is exemplified by email encryption, where conflicting safety regulations and numerous unencrypted data connections create issues due to shared application use. A shared, confidential infrastructure offers a solution.[2] Ford, for example, cites the use of ENX to communicate with suppliers as an example of how significant savings can be achieved through consolidation and standardization.[3]

Implementing industrial requirements for IT security between companies represents an additional area of activity. The following subject areas are addressed:

  • Secure cloud computing (between companies)
  • Protecting intellectual property during development cooperation (e.g., using Enterprise Rights Management, ERM)

The assessment of meeting these requirements is standardized and carried out by approved external service providers. The ENX Association approves these providers and develops and governs the TISAX standard for this purpose.[4] The Trusted Information Security Assessment Exchange (TISAX) enables producers to rely on the information security practices implemented by their service providers and suppliers in their ISM systems. TISAX serves a similar function to the ISO/IEC 27001 standard but is tailored to the needs of the automotive industry, does not issue public certificates, and distinguishes between different levels of implementation.

The ENX Association is a member of the ERM Open Project by ProSTEP iViP e.V. and was active in the precursor project SP2, working alongside Adobe, BMW, FH Augsburg, Continental, Daimler, Fraunhofer IGD, Microsoft, PROSTEP, Siemens PLM, TU Darmstadt, TAC, Volkswagen, and ZF Friedrichshafen.[5]

The SkIdentity project, in which the ENX Association is involved, was named one of the 12 winners of the BMWi technology competition "Secure Cloud Computing for Medium-Sized Businesses and the Public Sector - Trusted Cloud" by the Federal Ministry of Economics and Technology (BMWi) on 1 March 2011 at the IT exhibition CeBIT in Hanover. The BMWi established the Trusted Cloud program to promote "the development and testing of innovative, secure, and legally compliant cloud solutions."[6]

Presidents of the ENX Association

edit

The presidents of the ENX Association are:

  • Philippe Ludet (since July 2019)
  • Clive Johnson (since April 2013)
  • Prof. Dr. Armin Vornberger (October 2005 - April 2013)
  • Hans-Joachim Heister, Ford-Werke GmbH (July 2001 - October 2005)
  • Dr. Gunter Zimmermeyer, Verband der Automobilindustrie e.V. (July 2000 - July 2001)

ENX Association memberships

edit

The ENX Association is a member of the following associations and organizations:

  • Automotive Industry Action Group (AIAG), Southfield, Michigan
  • Bundesverband Informationswirtschaft, Telekommunikation und neue Medien e.V. (BITKOM)
  • ProSTEP iViP e.V.
  • RIPE NCC[7]

In addition, there are reciprocal affiliations with ANFAC, GALIA, and SMMT.

Use of the ENX network

edit

Usage scenarios

edit

The European automotive industry's communication network, also known as the ENX network, is based on the standards set by the ENX Association regarding security, availability, and interoperability. This industry network ensures the secure exchange of development, production control, and logistical data within the European automotive industry.

The automotive industry is characterized by strong international cooperation and a need for companies to closely coordinate linked processes, which requires precise alignment and seamless data exchange between partners. This makes "integrated global network concepts" necessary.[8] ENX is a platform that provides the foundation for these cooperative production models.[9]

Realignment began at the end of 2002 with the aim of aligning technical development consistently with user requirements, particularly for small and medium-sized businesses.[10] The implementation took several years. In June 2004, French users complained about the lack of cost-effective entry-level solutions in the France Telecom portfolio.[11]

As of March 2011, over 1,500 companies in the automotive and other industries were using the network, which is available worldwide in more than 30 countries.

The network supports all IP-compatible protocols and applications. Its bandwidth accommodates a range of functions, from classic EDI data exchange and database access to secure email exchange and video conferencing. The use of EDI transfer protocols, such as OFTP (Odette File Transfer Protocol), OFTP2, and AS2, is widespread within the ENX network. OFTP2, developed in 2004, allows for use via the public Internet.

According to the trade press, some vehicle manufacturers have been advocating for the use of OFTP2 over the Internet since 2010, affecting "tens of thousands of suppliers." In this widely accessible medium, substantially more security is required for the transfer of sensitive data, and estimating the implementation costs can be challenging.[12]

Registration as a pre-requisite for use

edit

To use the ENX network, you must register with the ENX Association.[13] Registration can be completed either directly with the ENX Association or through one of its representatives.

Representatives of the ENX Association

edit

In some countries and industries, ENX is represented by industrial associations and organizations (known as ENX Business Centres). These organizations act as contact points in the relevant local language, process registration applications, and handle the initial authorization of new users within their area of representation.

The ENX Association has adopted this model of representation to enable industrial associations and similar organizations to manage user groups independently.

Organisation Headquarters Country of domicile Area of representation
GALIA Boulogne-Billancourt   France France French automotive industry
DGA Paris   France France Defence and aerospace industry
ACAROM Bukarest   Romania Romania Romanian automotive industry
Odette Schweden Stockholm   Sweden Sweden Swedish automotive industry
ANFAC Madrid   Spain Spain Spanish automotive industry
SMMT London   United Kingdom United Kingdom British automotive industry

Operating the ENX network

edit
edit

Operation by certified service providers

edit

The ENX network meets the quality and security requirements typical of company-owned networks while remaining as open and flexible for participating vehicle manufacturers, suppliers, and their development partners as the public Internet.[14] Data exchange between ENX users occurs via the network of a communication service provider certified by the ENX Association, using an encrypted Virtual Private Network (VPN).[15]

The first certified communication service provider was Deutsche Telekom's subsidiary T-Systems.[16] This was followed by Orange, Telefónica, Infonet, and, in 2007, Verizon Business. In 2010, three additional companies—ANXeBusiness, BCC, and Türk Telekom—successfully acquired ENX certification. According to information from the ENX Association, Open Systems AG is another service provider currently undergoing the certification process.

The services provided by the certified service providers are interoperable and offered in a competitive environment.

Overview of the service providers certified in line with the ENX standard

edit
Certification Company Country of domicile Geographical focus Comment
2010 ANXeBusiness   United States Nordamerika
2010 BCC GmbH   Germany Approx. 150 countries worldwide ENX services also via public Internet
2005 Infonet Corp. / BT Infonet   United States Approx. 100 countries worldwide ENX operation since 2011 through KPN International
2010 KPN International   Netherlands Approx. 100 countries worldwide Formerly Infonet Nederland
2011 Open Systems   Switzerland Approx. 200 countries worldwide ENX services via public Internet
2002 Orange Business   France France
2001 T-Systems GmbH   Germany Germany, individual countries worldwide
2010 Türk Telekom   Turkey Turkey
2007 Verizon Deutschland GmbH   Germany Approx. 150 countries worldwide ENX services also via public Internet

Certification process

edit

According to the ENX Association, certification is a two-stage process.[17] The first stage, known as the concept phase, involves testing to determine whether the service provider's ENX operating model meets the technical ENX specifications. The second stage involves putting the operating model into practice. This includes inspecting the internal organization, testing IPSec interoperability in the "ENX IPSecLab,"[18] implementing ENX encryption, and connecting to providers already certified via private peering points, known as "ENX Points of Interconnection." Once these steps are completed, the implementation and adherence to ENX specifications are tested in a pilot run. With appropriate preparation by the service provider, the chargeable certification can typically be completed within approximately three to four months.

Central operational elements behind the scenes

edit

Central services are provided on behalf of and under the control of the ENX Association. These services facilitate simplified connectivity ("interconnectivity") between individually certified service providers and ensure the interoperability of the encrypted hardware used. They include the Points of Interconnection ("ENX POIs"), the IPSec Interoperability Laboratory ("ENX IPSec Lab"), and the Public Key Infrastructure ("ENX PKI") at the ENX Trust Centre.

The Points of Interconnection have a geographically redundant structure, are interconnected, and are operated in data processing centers located in the following regions: Rhine-Main region, Germany; Île-de-France, France; and the East Coast of the United States.

These central operational elements are not visible to individual users. The customer sources their own connection, including IP router, encryption hardware, key material, uninterrupted end-to-end encryption for each communication, and individual service level agreements, directly from the certified telecommunications service provider they have chosen.

Global availability

edit

JNX industry network and the ANXeBusiness in North America

edit

The Japanese automotive industry has an industry network similar to ENX in terms of technology and organization, called the Japanese Network Exchange (JNX). The network is managed by the JNX Centre, which is associated with the Japanese automotive associations JAMA and JAPIA. JNX and ENX are not linked.

In contrast, there are significant technical, organizational, and commercial differences between the ENX standard and the American ANX, which was developed in the 1990s.

Connection between Europe and North America

edit

ENX as a mutual standard since 2010

edit

On 26 April 2010, the ENX Association and ANX eBusiness announced their plan to connect their networks to establish a global standard in the automotive industry.[19][20] This connection resulted in a transatlantic industry network with over 1,500 connected companies. The network went live with the completion of the pilot stage on 26 May 2010.

According to statements from both the ENX Association and ANX eBusiness Corp., only the ENX standard is used for transatlantic connections in both Europe and North America. The ANX and ENX have stated that the interconnection is free of charge for individual users.[21]

Differences between ENX and ANX

edit

The network for North America, known as the Automotive Network Exchange (ANX), is operated by ANXeBusiness Corp. Although, like ENX, it was originally initiated by the automotive industry and operated by a consortium, it differs from ENX in that it was sold and is now operated as a classic profit-making service company.[22]

ANX is a physical network with a strong focus on availability. It relies on the continuous operation of fixed connections with high uptime guarantees. Additionally, ANX offers an optional VPN tunnel management product called "TunnelZ,"[23] though not all manufacturers and suppliers connected to the network use it. In the classic ANX network, key management is handled using Pre-Shared Key (PSK), and the encryption strength is limited to DES.

ENX is set up as a managed security service, incorporating standardized tunnel management, a trust center-based Public Key Infrastructure (PKI), and authentication and encryption mechanisms across various networks (from private to public).

While the ANX network has a single provider, ANXeBusiness, for its customers, ENX services are provided by various competing companies.

To bridge the networks, ANXeBusiness continues to operate its network separately from ENX. However, it provides every ANX user who desires the service with an active native ENX connection, including all necessary security and service features, via its physical network. ANX has undergone certification and monitoring by the ENX Association and acts as an ENX-certified service provider.[24]

Summary

edit

With ANXeBusiness's certification as an ENX provider, ENX and ANX leverage their organizational differences—ENX being a non-profit industrial consortium and ANX being a service provider—to connect the two networks. This connection does not imply mutual interoperability but rather that ANX has adopted the ENX standard. This development is expected to offer new market opportunities for ANX, potentially giving it access to all ENX users. Concurrently, it is anticipated that this bridge to ANX will facilitate entry for other ENX service providers in the USA, thereby fostering competition.

References

edit
  1. ^ Europäische ENX-Gesellschaft unter Federführung des VDA gegründet - European ENX company founded under the management of the VDA Archived 2012-03-25 at the Wayback Machine In: Automobilindustrie, 19. Juli 2000
  2. ^ Kampf der Beliebigkeit - Battle against arbitrariness. (PDF) In: Automobilindustrie, September 2009 (Interview with Lennart Oly)
  3. ^ Ich erwarte, dass wir in der IT “more-for-less” liefern werden - I expect that we will deliver 'more-for-less' in IT. In: Automotive IT, 10. Dezember 2009 (Interview mit Hans-Joachim Heister)
  4. ^ "Welcome to TISAX · ENX Portal". portal.enx.com. Retrieved 2022-12-15.
  5. ^ "ProSTEP iViP Projekt Secure Product Creation Processes (SP²)". Archived from the original on 2009-04-04. Retrieved 2011-06-15.
  6. ^ "BMWi: Sichere Internet-Dienste - Sicheres Cloud Computing für Mittelstand und öffentlichen Sektor (Trusted Cloud) - BMWi: Secure Internet services - Secure cloud computing for medium-sized businesses and the public sector (Trusted Cloud)". Archived from the original on 2011-05-29. Retrieved 2011-06-15.
  7. ^ "Members ordered by country code".
  8. ^ Jürgen Appel: Kommunikation über Firmengrenzen hinweg - Communication beyond company borders Archived 2011-09-28 at the Wayback Machine In: Computerwoche, 17. September 2004
  9. ^ Helga Biesel: IT im Automobilbau: Spannende Entwicklungen - IT in the automotive industry: Exciting developments Archived 2011-09-28 at the Wayback Machine In: Computerwoche, 17. September 2004
  10. ^ ENX wechselt auf die Überholspur - ENX moves into the fast lane Archived 2012-03-23 at the Wayback Machine Computerwoche, 13. September 2002
  11. ^ Aurélie Barbeaux: L’extranet européen de l’automobile déçoit - Das europäische Extranet der Automobilindustrie enttäuscht - The European automotive industry extranet disappoints In: Usine Nouvelle, 10. Juni 2004
  12. ^ An OFTP2 kommt kein Zulieferer vorbei - No supplier can get around OFTP2 In: Automobilwoche 5. August 2010
  13. ^ "ENX FAQ Chapter 5 - Registration". Archived from the original on 2011-07-10. Retrieved 2011-06-15.
  14. ^ Zugang für Unbefugte verboten: Porsche setzt auf Branchennetzwerk ENX - No unauthorised access: Porsche relies on ENX industry network Archived 2012-03-23 at the Wayback Machine Computerwoche, 3. August 2001
  15. ^ Alexandra Haack in: Sichere Tür zu Tür Kommunikation - Secure door-to-door communication Automobilwoche, 9. September 2006
  16. ^ VDA: Weg frei zum European Network Exchange - DeTeSystem und Automobilindustrie unterzeichnen Rahmenvertrag - VDA: The road is clear for the European Network Exchange - DeTeSystem and automotive industry sign framework agreement Archived 2011-09-28 at the Wayback Machine
  17. ^ "How do I become a "certified service provider"?". Archived from the original on 2011-10-06. Retrieved 2011-06-17.
  18. ^ Netzsicherheit der europäischen Automobilindustrie - Network security in the European automotive industry Archived 2012-03-25 at the Wayback Machine In: Automobilindustrie, 7. Februar 2003
  19. ^ Klaus-Dieter Flörecke: Globaler Standard im Datenaustausch - Global Standard in Data Exchange. In: Automobilwoche, 27. April 2010
  20. ^ ENX und ANX - ENX and ANX. Archived 2011-09-04 at the Wayback Machine In: Automobilindustrie, 28. April 2010
  21. ^ David Barkholz: Trans-Atlantic networks link up to ease automotive data sharing. In: Automotive News, 26. Juli 2010
  22. ^ AIAG: AIAG sells its ANX assets and operations as the network realizes its vision of becoming a globally recognized commercial offering. (PDF)
  23. ^ Produktbeschreibung ANX TunnelZ Archived 2011-07-26 at the Wayback Machine
  24. ^ ANX Certified Archived 2011-10-06 at the Wayback Machine
edit

Communication networks within the automotive industry (non-profit organisations)

edit

Information from service providers certified in line with ENX standards (commercial solutions)

edit

ENX member organisations

edit
Retrieved from "https://en.wiki.x.io/w/index.php?title=ENX_Association&oldid=1244096377"