Standards for Technology in Automotive Retail
In order for a service provider to be able to receive and process requests and send responses back it must satisfy the following high level requirements detailed in other guidelines documents:
Must have a fixed URL or IP address that is publicly accessible on the Internet.
Must have the server software and infrastructure required to parse and process incoming messages.
Security infrastructure to protect the publicly accessible servers as defined by Dealer Infrastructure guidelines or corporate security policy.
Must have queuing facility to queue response messages if immediate delivery to the client is not possible (either disconnected client or a communication problem).
STAR defines eight security requirements:
Source and Target Authentication
Source Only Authentication
Unique Party Identification