Customs Declaration Processing System Detailed User and ...

DETAILED USER & TECHNICAL REQUIREMENTS FOR CDPS
AND USE-CASE MODELS
Ref: PHASE V
Number
CE-0020
CE-0030
CE-0040
CE-0050
CE-0060
CE-0070
CE-0080
CE-0090
CE-0100
CE-0110
Description
All messages sent to or received from the External Domain must be XML
messages.
All CDPS internal messages will be of XML format.
CDPS has to be able to report and notify syntactic/non functional errors to the
sender of the Information Exchange.
CDPS shall log all incoming messages from the External Domain.
CDPS shall test incoming messages from the External Domain for
authentication, integrity and optionally non-repudiation.
Reference Data shall be made available to External Domain via Web Services.
The privacy and integrity of all messages sent to or received from the External
Domain must be protected.
The integrity and authenticity of all messages sent to or received from the
External Domain must be protected by means of digital signatures and digital
certificates.
Web services will be the only technology used by CDPS to expose functionality
for-business to-business integration with the entities (large traders, Custom
Brokers, and Government Agencies) from the external domain (see §5.3.2).
Connection to web services will be secured by means of digital certificates. For
Web Services will be secured by means of the communications protocol Web
Services Security.
User authentication for connection to the web application and web services shall
be done by digital certificates.
Table 24: General requirements for connection to External Domain.
5.3.7 Conformance testing
MCA needs to establish a CDPS conformance testing procedure for all applications from the
National or External domain which aim to connect to CDPS. Conformance testing is a type of
conformance assessment by means of testing. Conformance testing will determine whether an
application from the National or External domain system meets some specified standard. To aid in
this, many test procedures and test setups need to be developed by CDPS vendor. Typically,
conformance testing plan will be written in parallel with specification.
Conformance testing is a type of black box or functional testing. An output from the conformance
testing is a testing log.
Testing log will be then submitted to MCA for further examination, and certification of the tested
application. Only after an application is certified to have passed the conformance testing, it can be
connected to the production environment.
As explained in §5.2.2, MCA and CDPS must support the existence of a conformance testing
environment.
Number Description
CT-0000
CT-0010
CT-0020
CT-0030
CDPS vendor shall prepare a conformance testing plan.
CDPS shall support the co-existence of conformance testing environment with
the production environment (see §5.2.2).
MCA shall ensure the existence of a conformance testing environment.
Conformance testing shall be conducted by the vendor of the application from
the External Domain or the National Domain. Conformance testing shall
produce a testing log.
An application can be connected to the production environment only after is has
been certified by MCA on basis of the outcomes from the conformance testing.
Page 162/276