Electronic Exchange of Airworthiness Documents

1. Electronic Exchange of Airworthiness Documents Klaus Malone Airbus Spares Support and Services Roland Bacher Airbus Quality External Affairs

2. Agenda • Project • Mission • Scope • Participants • Deliverables • Electronic Part Certification Form • Guiding Principles • Business Guidelines • Process Flow • Enhancements to Regulatory Orders • XML Schemas • Digital Security • Status • Achievements • Way Forward 2005

3. Project ATA SPEC 2000 Electronic Documentation Task Force (EDTF) Mission • The purpose of the ATA Electronic Documentation project is to develop an industry specification to enable the electronic exchange of regulatory documentation for aircraft products and parts.

4. Project Scope Initial focus on Electronic Part Certification Forms (e-Form) • EASA Form 1 • FAA Form 8130-3 • JAA Form One • TCCA Form 24-0078 • CASA Form 917 • Certificate of Conformance

5. Project

6. Project Deliverables • A new chapter in Spec 2000 for Electronic Airworthiness Data • XML Schemas • Common Support Data Dictionary (CSDD) additions and changes • Prototype/testing plan • Recommendation to Regulatory Authorities for revised Regulation/Order • Regulatory approval

7. Electronic Part Certification Form Guiding Principles • Standard pertains to exchange of data, not internal company processes • Meet intent and objectives of aviation authorities • Data-centric approach • Leverage regulatory guidance regarding electronic signature • Meet legal and liability requirements • Leverage existing technologies, standards, and best practices where applicable

8. Electronic Part Certification Form Business Guidelines • A new e-Form will be issued for each transfer/RTS • A separate e-Form will be issued for each part number for non-serialized parts • A separate e-Form will be issued for each serial number for serialized parts • Each e-Form should reference and attach any applicable, immediately prior e-Form • All transmissions of an unaltered, digitally signed e-Form are considered originals • Any paper forms printed from the e-Form are considered copies.

9. Pick Part Inspect Release for Shipment S1SHIPPD CIC PNR CPO SHQ PSN Process S1SHPPD Electronic e-Form CIC PNR CPO (PSN BOX) QTY Store electronic e-Form S1NVOICE CIC PNR CPO QTO PSN BOX Process S1NVOICE Inspect Ship Part Receive Part Electronic Part Certification Form Supplier Customer

10. Electronic Part Certification Form Company 1 Company 2 Company 3 Store E-AW-Cert Store both (all) E-AW-Certs Issue Electronic AW-Cert (8130-3,Form 1,..) Issue Electronic AW-Cert (CofC, 8130-3, Form 1) with ref to OEM cert Attach E-AW-Cert from Company 1

11. e-AwCert (XML) e-AwCert (IDOC) Convert e-AwCert Sign e-AwCert e-AwCert (Digital signed) ZVV1 ref. e-AwCert (digital signed) ref. e-AwCert (digital signed) Send e-AwCert E-AwCert (digital signed) Archive E-AwCert Receive e-AwCert Attach Ref. e-AwCert Retrieve Ref. e-AwCert Ref e-AwCert ? Electronic Part Certification Form ATLAS OutQue spares.airbus.com Paper AwCert Archive Created e-AwCerts CUS / SPL Received e-AwCerts e-AwCert (digital signed) e-AwCert (digital signed)

12. Electronic Part Certification Form

13. Electronic Part Certification Form Enhancements to Regulatory Orders • An e-Form is only valid for one business transaction • Every transfer of a PNR has to be accompanied by a new e-Form (CofC) • Previous e-Form has to be attached • Only one PNR on an e-Form • Only one SER or LOT on an e- Form • Trace ability will be improved • Abuse will be prevented

14. Electronic Part Certification Form Added (N)CAGE code of issuing company to generate a worldwide unique key with the TDN Enhancements to Regulatory Orders Added CIC to identify the receiving company Made CPO a mandatory entry Added MFR to establish MFR:PNR combination to unambiguously identify part Added Unit of Measure to quantity

15. Electronic Part Certification Form Digital Security Objectives • Signer authentication • Data integrity • Non-repudiation Solution • W3C XML Digital Signature • Signatures • Public Key Infrastructure (PKI) • X.509 Digital Certificates (minimum Class 2 as defined in ATA standard)

16. Electronic Part Certification Form Digital Security

17. Status Achievements • Defined basic processes for use of data pertaining to New Parts and Return to Service parts • Identified Existing and New Data Element Requirements for each use of the data • Defined digital security requirements and solutions to: • Provide authentication of the sender/signer of the data • Provide reasonable assurance of data integrity • Provide reasonable assurance of non-repudiation • Developed XML Schema • Developed draft outline of new Spec 2000 chapter

18. Status Way Forward in 2005 • Further refine Schemas • Manually test with real data • Brief authorities • CASA, EASA, FAA, TCCA • Obtain approval from authorities by demonstration • Fall 2005 • Complete ATA specification • Fall 2005

19. Thank you for your attention Any questions ?