Requirements for information service overviews

PANS-IM states that:

Information service providers shall name the information service.

• name

• identification is in rationale.

Information service providers shall provide versioning to the information services.

The service version shall be provided in numerical format (n.n[.n]).

The version of the information service shall allow information service consumers to distinguish between versions of an information service.

• version

• notes give a best practice on using a numerical format

• the distinguishing aspect of the version is covered in the rationale.

Information service providers shall specify the stage that the information service version is currently in as one of three stages: prospective, operational or retired.

Note.⸻ For more information on service stages see Doc 10203.

The planned date of retirement should be listed whenever it is known to exist.

If an information service provider does not make the date available, the information service life cycle date metadata field shall specify “NIL”.

Note.⸻ In the case of a prospective stage, the date indicates the date by which the information service provider plans to make the information service operational.

SWIM-SERV-110

Information service providers should provide a description of the business level characteristics of the information service functions. This will provide information service consumers a business view of the interactions with the information service, without having to look at the interface details.

The description should include the functionality of the service as a list of the functions and real world effects.

If an information service provider does not make the information service functions available, the information service functions metadata field shall specify “NIL”.

• Allow the service consumer to set (i.e. define or update) the target off-block time (TOBT) value for a specific flight.
  • real-world effect: TOBT value is defined or updated
    
• Allow the service consumer to delete the target off-block time (TOBT) value for a specific flight.
  
  • real-world effect: The TOBT value is marked as undefined
• --

Business function: Service for the information service consumer to set (i.e. define or update) or delete the target off-block time (TOBT) value for a specific flight.
Real world effect: The TOBT values are updated for each flight as the information service consumer performs:
•
Set TOBT – TOBT value is defined or updated
•
Delete TOBT – TOBT is marked as undefined

SWIM-SERV-140

• function
• real-world effect

SWIM-SERV-100

Information service providers shall provide a brief summary description of the information service to assist information service consumers on whether the described service is suitable for use in a particular situation.

The brief summary shall include the information domain(s) covered by the information service, the operational need being addressed by the information service, the intended use of the information service, and the intended consumer audience for the information service.

Information service providers shall provide a brief description of the information service to assist information service consumers on whether the described service is suitable for use in a particular situation.

The brief description shall include the information domain(s) covered by the information service, the operational need being addressed by the information service, the intended use of the information service, and the intended consumer audience for the information service.

The TargetOffBlockTimeSetting service supports flight information exchange by allowing aircraft operators and ground handlers to set the Target Off-Block Time (TOBT) for their flight departures at Donlon Airport.

The service may be used by the Donlon Tower Controllers in specific circumstances, such as under adverse conditions or other special circumstances.

The service is part of a set of services supporting the Airport Collaborative Decision Making (A-CDM) concept and its implementation by providing the A-CDM partners with common situation awareness about flights at a CDM airport.

--

The TargetOffBlockTimeSetting service supports the Airport Collaborative Decision Making (A-CDM) concept and its implementation by allowing A-CDM Partners, typically aircraft operators and ground handlers, with the capability to set TOBT that indicates the target time for the aircraft to be ready for off-block.

SWIM-SERV-050

• abstract
• note covers the items that are best practice to include. 

Information service providers should provide a description of the location at which more information, potentially including more detailed technical information on an information service, may be found.

The location should be provided as a link to where an information service consumer can find more information.

If an information service provider does not make the additional information available on the information service overview, the Additional information on the Information Service metadata field shall specify "NIL".

Information service providers should provide a description of the location at which more information, potentially including more detailed technical information on an information service, may be found.

The location should be provided as a link to where an information service consumer can find more information.

If an information service provider does not make additional information available on the information service overview, the additional information on the information service metadata field shall specify “NIL”.

SWIM-SERV-170

Information service providers shall provide a description on the qualitative and quantitative information pertaining to the characteristics of an information service to allow information service consumers understand the quality of the information service.

The description should specify parameters based on ISO 25010.

The quality of the information service should be expressed using the following parameter (or other applicable parameter):

• Performance parameters (quantitative)
  - Capacity of a service
  - Time behaviour of a service
• Reliability parameters (quantitative)
  - Availability of a service
  - Recoverability of a service
• Security parameters (qualitative)
  - Confidentiality of a service
  - Integrity of a service

Information service providers shall provide a description on the qualitative and quantitative information pertaining to the characteristics of an information service to allow information service consumers to understand the quality of the information service.

The description should specify parameters based on ISO 25010.

The quality of the information service should be expressed using the following parameters (or other applicable parameters):
a) performance parameters (quantitative);
i) capacity of a service;
ii) time behaviour of a service;
b) reliability parameters (quantitative);
i) availability of a service;
ii) recoverability of a service;
c) security parameters (qualitative);
i) confidentiality of a service; and/or

ii) integrity of a service.

• Availability: 99.95 % outside the planned outages
• Capacity: 2000 service requests per hour
  
• Time behaviour: 2s delay for 95% of messages

--

AVAILABILITY: 99.95 % outside the planned outages
CAPACITY: 2 000 service requests per hour
TIME BEHAVIOUR: 2 s delay for 95 % of messages

SWIM-SERV-180

• the requirement covers the top level parameter
• the notes cover the sub-parameters e.g. capacity...

Information service providers shall ensure that the information service is validated.

The validation shall include the parameters provided in the Quality of Service metadata field of the information service overview to assist information service consumers with the initial evaluation of the information service.

Information services shall be validated by at least one of the following validation methods:
a) independent validation;
b) collaborative validation;
c) user validation; or
d) self-validation.

Information services may evolve which triggers the need for revalidation. Each new version of an information service should be re-validated.

Information service providers shall ensure that the information service is validated.

This validation shall include the parameters provided in the quality of service metadata field of the information service overview to assist information service consumers with the initial evaluation of the information service.

Information services shall be validated by at least one of the following validation methods:
a) independent validation;
b) collaborative validation;
c) user validation; or
d) self-validation.

Information services may evolve which triggers the need for revalidation. Each new version of an information service should be revalidated.

SWIM-SERV-200

• quality of service is covered by the requirement

Information service providers shall provide a description of the validation method applied to assist information service consumers assess the confidence level of the information service.

By sharing the validation results, information service providers reassure information service consumers that the information service and its provider have the ability to deliver the declared capabilities and quality of service.

The description should include a brief statement on the validation results, and how the information service consumers may obtain the validation evidence.

Information service providers shall provide a description of the validation method applied to assist information service consumers in assessing the confidence level of the information service.

By sharing the validation results, information service providers reassure information service consumers that the information service and its provider have the ability to deliver the declared capabilities and quality of service.

The description should include a brief statement on the validation results, and it should describe how the information service consumers may obtain the validation evidence.

Donlon Airport tested the service in accordance with its quality management system (QMS) based requirements.

The validation was successful.

To obtain the validation evidence, contact the Service desk [24/7]: +693 555 01 service-desk@donlon-airport.com 

SWIM-SERV-200

• validation method
• validation results
• obtaining evidence

Information service providers should provide information on the availability of filtering capability to allow information service consumers to narrow the content of the information that they consume.

The capability of filtering information should describe the filters information service providers offer for an information service.

If an information service provider does not offer filtering or does not make information on filtering available on the service overview, the Filtering Available metadata field shall specify "NIL".

Information service providers should provide information on the availability of filtering to allow information service consumers to narrow the content of information that they consume.

The capability of filtering information should describe the filters information service providers offer for an information service.

If an information service provider does not offer filtering or does not make information on filtering available on the service overview, the filtering available metadata field shall specify “NIL”.

The service consumer can filter information feed based on time.

Note: the information provided by the service is limited to DONLON (see Geographical extent of information) so there is no need for a geospatial filter in this case.

SWIM-SERV-310

• filter encoding

Information service providers shall provide a description of any constraints on the access to the information service to assist information service consumers in understanding whether they may be eligible to access the information service.

These constraints should specify the requirements and/or restrictions on information service consumers for accessing the information exchanged by the information services that are considered to be sensitive.

Information service providers shall provide a description of any constraints on access to the information service to assist information service consumers in understanding whether they may be eligible to access the information service.

These constraints should specify the requirements and/or restrictions on information service consumers for accessing the information exchanged by the information service that are considered to be sensitive.

The access to the service is subject to authorization. Authorization is dependent on formal arrangements (Service Level Agreement) with the Donlon Airport Operator.

The access to the service is subject to authentication based on the user id and password for authorized users.

SWIM-SERV-150 and SWIM-SERV-160

Information service providers shall indicate the message exchange pattern used by the information service to assist information service consumers understand relationships of multiple messages exchanged with the information service providers.

The message exchange pattern shall be expressed as one or more of the following:
a. request/reply and/or
b. one way and/or
c. publish/subscribe

Information service providers shall indicate the message exchange pattern used by the information service to assist information service consumers in understanding the relationships of multiple messages exchanged with the information service providers.

The message exchange pattern shall be expressed as one or more of the following:
a) request/reply;
b) one way; and/or
c) publish/subscribe.

SWIM-SERV-210

Information service providers shall indicate the domain-specific information exchange models used for their information service payloads, including the extensions of the information exchange models and their versions.

If information service providers do not use the domain-specific information exchange models for their information service payloads, then information service providers shall describe the alignment to the AIRM and indicate the exchange schema used.

If information service providers use for their information service payloads the domain specific information exchange models, then information service providers shall indicate the domain-specific information exchange models used for their information service payloads, including the extensions of the information exchange models and their versions.

If information service providers do not use the domain-specific information exchange models for their information service payloads, then information service providers shall describe the alignment to a global reference model and indicate the exchange schema used.

Note.⸻ See the AIRM for an example of a global reference model (https://airm.aero/).

Information service providers shall provide a description of the geographical coverage of the information exchanged to allow information service consumers understand the geographical coverage of the information being provided.

Information service providers shall provide a description of the geographical coverage of the information exchanged to allow information service consumers to understand the geographical coverage of the information being provided.

Note.⸻ The geographical coverage may be expressed in terms such as ICAO Region, flight information region (FIR), aerodrome or polygon. More granular information such as coverage at airport “x” or FIR “y” may be provided as it may facilitate search responses.

SWIM-SERV-090

Information service providers should specify the sources of information exchanged.

Information service providers should also provide information on any subsequent modifications applied in order to provide information service consumers with background on information sources and modifications.

If an information service provider does not make the source of information available, the Source of Information metadata field shall specify "NIL".

Information service providers should specify the sources of information exchanged.

Information service providers should also provide information on any subsequent modifications applied in order to provide information service consumers with background on information sources and modifications.

If an information service provider does not make the source of information available, the source of information metadata field shall specify “NIL”.

SWIM-SERV-190

Information security category

Information service providers shall indicate the information security category to provide information service consumers with an understanding of the level of protection of the information.

The information security category shall be expressed as one of the following:
a. None
b. Basic
c. Intermediate/or
d. Advanced

Information service providers shall indicate the information security category to provide information service consumers with an understanding of the level of protection of the information.

The information security category shall be expressed as one of the following:
a) none;
b) basic;
c) intermediate; or
d) advanced.

Intermediate

Draft PANS -

6.1.3    Organizations shall implement an information security framework to ensure the confidentiality (when needed), integrity and availability of the information and information services.

6.3.5.1 Assessing the impact of information security on safety risk management requires the classification of the information to be exchanged in information security categories. Based on the applicable information security category, information service providers and consumers shall apply the performance-based information security requirements in Appendix A to information systems handling the information.

6.3.5.2 Information service providers shall state the information security category in the Quality of the service metadata field of the information service overview to provide information service consumers with an understanding of the level of protection of the information.

Appendix B 1.3.

Organizations shall categorize information and information systems under their responsibility based on the information security impact on safety risk analysis. Organizations shall also review categories on a periodic basis based on the risk analysis.

Basic - Information and information systems shall be categorized based on the information security impact on safety risk analysis. Information security categories shall be reviewed every (2) years based on the latest risk analysis.

Intermediate - Information and information systems shall be categorized based on the information security impact on safety risk analysis. Information security categories shall be reviewed annually based on the latest risk analysis.

Advanced - Information and information systems shall be categorized based on the information security impact on safety risk analysis. Information security categories shall be reviewed monthly based on the latest risk analysis.

Information service providers shall provide the name of their organization to assist information service consumers in identifying and gaining context on the information service.

The name of the organization shall be followed by any abbreviated name, if any, by which the organisation is known.

Information service providers should provide a description of the support offered to information service consumers on all relevant aspects related to the information service to allow information service consumers understand the level of support to expect.

Information service consumers should have a point of contact to request, if needed, additional information regarding an information service.