Chapter II, Article 4 · Commission Implementing Regulation (EU) 2024/1942

Contents

Article 4Authority Access Points#

1.The AAP components shall enable the access of the competent authorities’ officers to the eFTI exchange environment and shall constitute an officer’s sole point of access to that environment.

2.An AAP shall perform the following functionalities:

(a)authenticate the identity of the competent authority officers, or ensure the authentication of the identity of the competent authority officers;

(b)authorise the request for access to eFTI data of the competent authority officers, based on their respective access rights stored in the authorisation registry, or reject the request if the competent authority officer has no active access rights registered;

(c)register the authorised requests for access to eFTI data by issuing a unique identification number for each such request, and record at least the following information for each request:

(i)identification references of the officer responsible for lodging the request;

(ii)the UIL of the eFTI data to which access is requested, or the identifier or identifiers provided by the officer when lodging the request;

(iii)the references to the access rights of the competent authority officer responsible for lodging the request, as recorded in the authorisation registry;

(iv)the date and time at which the request was lodged;

(d)transmit the authorised requests for access to eFTI data to the eFTI Gate for processing, by providing the following information:

(i)the unique identification number of the request;

(ii)the UIL of the eFTI data for which access is requested, or the identifier or identifiers provided by the officer when lodging the request;

(iii)the references to the processing rights of the competent authority officer responsible for lodging the request, as recorded in the authorisation registry;

(e)receive the responses to requests transmitted by the eFTI Gate and make these responses available to the competent authority officer responsible for that request via the user application;

(f)keep an audit trail of the responses received for each request by logging at least the following information:

(i)the unique identification number of the request for which the response was received;

(ii)the date and time at which the response was received by the AAP;

(iii)the date and time at which the response was forwarded by the AAP to the officer responsible for the respective request;

(g)keep an archive of the requests for access to eFTI data and of the log of the received responses for a period of 2 years or, where national applicable provisions on the availability of evidence for the enforcement of the provisions for which access to eFTI data is required provide for a longer period of time, for that period of time;

(h)when a follow-up communication in accordance with Article 3(4) is lodged, register the follow-up communication by issuing a unique identification number for the follow-up communication and record at least the following information for that follow-up communication:

(i)identification references of the officer responsible for lodging the follow-up communication;

(ii)the UIL of the eFTI data and the unique identification number of the request for access to that data for which the follow-up communication was lodged;

(iii)the date and time at which the follow-up communication was lodged;

(iv)the content of the follow-up communication;

(i)transmit the follow-up communications to the eFTI Gate for processing, by providing the following information:

(i)the UIL of the eFTI data and the unique identification number of the request for access to that data for which the follow-up communication was lodged;

(ii)the content of the follow-up communication.

3.To provide the functionalities set out in paragraph 2, an AAP shall:

(a)use appropriate electronic identification means that allow for reliable identification and authentication of the officers of the competent authorities, or that allow for verifying that the identification and authentication of those officers is ensured by another appropriate ICT component;

(b)use an authorisation registry;

(c)establish and maintain a secure connection to an eFTI Gate;

(d)support a secure connection to the user application.

4.Member States may set up the AAPs either outside of the eFTI Gate, as part of existing ICT systems of their respective competent authorities, or integrated in their respective eFTI Gate.

Defined terms · 24

Show every defined term

access rights
means the permissions granted to a competent authority officer to perform operations in relation to one or more eFTI data subsets;
Authority Access Point (AAP)
means an ICT component or a set of ICT components performing the functionalities set out in Article 4;
certificate authority
means an entity that manages the life cycle of digital certificates, which may include enrolment processes and processes for the issuance, delivery, activation, suspension, revocation, renewal or reactivation of the security certificates;
competent authority officer
means a physical person entitled to access and process regulatory information requirements referred to in Article 2(1) of Regulation (EU) 2020/1056, on behalf of a competent authority in a Member State;
dynamic discovery
means a mechanism for an eDelivery Access Point to obtain the connection details of another eDelivery Access Point by looking up these details in a third-party system;
eDelivery
means a set of technical specifications and standards for electronic message exchange developed by the Commission under the Connecting Europe Facility programme and continued under the Digital Europe programme;
eDelivery Access Point
means a communication component that is part of the eDelivery electronic delivery service based on technical specifications and standards;
eFTI data
means data corresponding to regulatory information, when made available by economic operators on an eFTI platform in accordance with Regulation (EU) 2020/1056;
eFTI exchange environment
means the ensemble of ICT components used for the exchange of data in accordance with Regulation (EU) 2020/1056 and the implementing and delegated acts adopted pursuant to that Regulation;
eFTI Gate
means an ICT component or a set of ICT components performing the functionalities set out in Article 6;
electronic identification means
means a material or immaterial unit, containing person identification data and which is used for authentication for an online service;
follow-up communication
means communication between competent authorities and the economic operators concerned on the information made available by the economic operators on an eFTI platform, following a compliance check by a competent authority officer of that information as provided in response to a request for access to eFTI data.
identification references
means a personal identification number or coded reference that allows the unique identification of a competent authority officer;
No
means that the goods being transported are not on the ADR/ADN/RID list of dangerous goods or the dangerous goods are exempted from the information requirements as stipulated in 3.5.6, 5.1.5.4.2, 5.4.1, 5.5.2.4.1 or 5.5.3.7 ADR/ADN/RID.’
processing rights
means the operations or sets of operations that a competent authority officer is allowed to perform on a specific eFTI data subset received in response to a request for access to eFTI data;
receiving Gate
means an eFTI Gate that processes a request for access to eFTI data received from a requesting Gate;
request for access to eFTI data
means a request on behalf of a competent authority to receive the eFTI data made available by economic operators on an eFTI platform;
requesting Gate
means an eFTI Gate that processes a request for access to eFTI data lodged via an AAP connected to or integrated into that eFTI Gate;
security certificate
means a digital document issued by a certificate authority that is used to establish a secure electronic communication channel between two parties;
security keys
means pairs of public and private cryptographic keys, generated by cryptographic algorithms in the form of very large numbers that have a unique relationship to each other;
static discovery
means a mechanism for an eDelivery Access Point to obtain the connection details of another eDelivery Access Point without resorting to third party systems;
technical guidance documents
means a set of detailed and non-binding technical documents, drawn up by the Commission in cooperation with Member States in the framework of the working group referred to in Article 13.
user application
means an ICT component performing the functionalities set out in Article 7;
Yes
means that dangerous goods are on board the transport unit, “No” means that the goods being transported are not on the ADR/ADN/RID list of dangerous goods or the dangerous goods are exempted from the information requirements as stipulated in 3.5.6, 5.1.5.4.2, 5.4.1, 5.5.2.4.1 or 5.5.3.7 ADR/ADN/RID.’