Introduction of Open API Integration for Certificate of Origin (CoO) through Trade Connect e-Platform

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....e Connect e-Platform - regarding. The Directorate General of Foreign Trade (DGFT) has been undertaking various initiatives for digitalisation and ease of doing business. In this regard, an Open API facility for issuance of Certificates of Origin (CoOs) has been introduced on the Trade Connect e-Platform and is now being released and made available for use by eligible exporters/systems as per the prescribed process and technical requirements. 2. The objective of the Open API facility is to enable exporters to integrate their Enterprise Resource Planning (ERP), accounting or other software systems with the DGFT's Certificate of Origin system for electronic submission and exchange of CoO-related information, thereby reducing manual d....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....and the CoO Trade Connect ePlatform for the submission, processing, issuance, and verification of Certificates of Origin. The objective is to establish a standardized digital ecosystem that reduces manual intervention, eliminates duplicate data entry, improves data accuracy, and facilitates seamless information exchange among exporters, certifying agencies, and regulatory authorities. The platform supports: 1.1. Preferential Certificate of Origin Issued under Free Trade Agreements (FTAs), Regional Trade Agreements (RTAs), and Preferential Trade Agreements (PTAs), enabling exporters to obtain tariff concessions in importing countries. 1.2. Non-Preferential Certificate of Origin Issued for compliance, customs clearance, trade r....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....nating from the whitelisted public IP addresses will be permitted by the CoO system. 3. The user shall append a 32-byte dynamic salt to the password before hashing it using PBKDF2, with an iteration count of 65,536 and a key length of 256 bits. The string representation of the dynamic salt bytes appended to the encrypted hash bytes shall be passed as the password. 4. The user system shall generate an access token by passing the X-API-Key, User ID, and PBKDF2 dynamic-salted password generated in Step 3 to the generateAuthToken API. The CoO system shall validate the User ID, password, and IP address. Upon successful validation, the system shall return the access token. 5. The access token generated in Step 4 shall r....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

.... These details shall be recorded in the exporter's ledger. 3.3. API Help Please refer to the API Help tab under the API Management section for detailed API specification information. Note: All requests and responses shall be digitally signed using: • SHA-256 RSA Digital Signature • 2048-bit X.509 Certificates This ensures: • Data integrity • Sender authentication • Non-repudiation 4. Certificate of Origin Auth Token API Please refer to the API Credentials screen for details regarding API credentials, IP whitelisting, and public certificates. Call the Authentication Token API to obtain an access token. The access token remains valid for 60 minute....

X X   X X   Extracts   X X   X X

Full Text of the Document

X X   X X   Extracts   X X   X X

....n The invoice section includes: • Invoice Number • Invoice Date • Currency • Exchange Rates • Third Country Invoicing Information 5.6. Export Product Information The export product section captures: • ITC HS Codes • Product Description • Quantity • Unit of Measurement • Invoice Value • FOB Value • Packaging Details • Preference Criteria 5.7. Shipment Information The shipment section includes: • Mode of Transport • Shipment Documents • Port of Shipment • Port of Discharge • Route Information ....