Commit 0f6ecd09 authored by Denis Filatov's avatar Denis Filatov
Browse files

ETSI TS 102 941 v1.2.1

parent 8c2e83d1

.gitmodules

0 → 100644
+3 −0
Original line number Diff line number Diff line 
[submodule "sec"]

	path = sec

	url = https://forge.etsi.org/rep/ITS/asn1/sec_ts103097.git

EtsiTs102941BaseTypes.asn

0 → 100755
+64 −0
Original line number Diff line number Diff line 
EtsiTs102941BaseTypes

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) baseTypes(3) version1(1) }



DEFINITIONS AUTOMATIC TAGS ::=

BEGIN



IMPORTS

  HashedId8, Time32, PublicEncryptionKey, PublicVerificationKey, Signature

FROM

  IEEE1609dot2BaseTypes {iso(1) identified-organization(3) ieee(111) 

  standards-association-numbered-series-standards(2) wave-stds(1609)  

  dot2(2) base(1) base-types(2) major-version-2(2)}



  CertificateId, SubjectAssurance, SequenceOfPsidSsp, SequenceOfPsidGroupPermissions,

  ValidityPeriod, GeographicRegion

FROM 

  IEEE1609dot2 {iso(1) identified-organization(3) ieee(111)

standards-association-numbered-series-standards(2) wave-stds(1609) dot2(2) base (1) schema (1) major-version-2(2)}



  EtsiTs103097Data-Encrypted, EtsiTs103097Data-Signed,

EtsiTs103097Data-SignedExternalPayload

FROM

  EtsiTs103097Module { itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(103097) securedMessageV1(0)}

;



CertificateFormat::= INTEGER {

  ts103097v131 (1)

  }(1..255)



CertificateSubjectAttributes ::= SEQUENCE {

  id 			CertificateId OPTIONAL,

  validityPeriod        ValidityPeriod OPTIONAL,

  region                GeographicRegion OPTIONAL,

  assuranceLevel        SubjectAssurance OPTIONAL,

  appPermissions        SequenceOfPsidSsp OPTIONAL,

  certIssuePermissions  SequenceOfPsidGroupPermissions OPTIONAL,

  ...

  }(WITH COMPONENTS { ..., appPermissions PRESENT} |

   WITH COMPONENTS { ..., certIssuePermissions PRESENT})



EcSignature::= CHOICE {

  encryptedEcSignature 	EtsiTs103097Data-Encrypted{EtsiTs103097Data-SignedExternalPayload}, 

  ecSignature           EtsiTs103097Data-SignedExternalPayload

  }



PublicKeys ::= SEQUENCE {

  verificationKey       PublicVerificationKey,

  encryptionKey         PublicEncryptionKey OPTIONAL

  }



Version ::= INTEGER {v1(1)}



EtsiTs103097Data-Encrypted-Unicast {ToBeEncryptedDataContent} ::= EtsiTs103097Data-Encrypted {ToBeEncryptedDataContent}

(WITH COMPONENTS {...,

  content (WITH COMPONENTS {

    encryptedData (WITH COMPONENTS {...,

       recipients (SIZE(1))

    })

  })

})



EtsiTs103097Data-SignedAndEncrypted-Unicast {ToBesignedAndEncryptedDataContent} ::= EtsiTs103097Data-Encrypted-Unicast {EtsiTs103097Data-Signed {ToBesignedAndEncryptedDataContent}} 



END

EtsiTs102941MessagesCa.asn

0 → 100755
+87 −0
Original line number Diff line number Diff line 
/*************************************************************************************

   This file contains the EtsiTs102941Messages module containing all possible PKI messages.

   It should be used when all PKI messages needs to be implemented (for example, for CA development)

**************************************************************************************/

EtsiTs102941MessagesCa

  { itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) messagesCa(0) version1(1)}



DEFINITIONS AUTOMATIC TAGS ::=

BEGIN



IMPORTS



EtsiTs103097Data-Signed,

--EtsiTs103097Data-Encrypted,

EtsiTs103097Data-SignedExternalPayload

--EtsiTs103097Data-SignedAndEncrypted

FROM EtsiTs103097Module

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(103097) securedMessageV1(0)}



Version,

EtsiTs103097Data-Encrypted-Unicast,

EtsiTs103097Data-SignedAndEncrypted-Unicast

FROM EtsiTs102941BaseTypes

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) baseTypes(3) version1(1) }



InnerEcRequestSignedForPop, InnerEcResponse

FROM EtsiTs102941TypesEnrolment

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) enrolment(4) version1(1) }



InnerAtRequest, InnerAtResponse

FROM EtsiTs102941TypesAuthorization

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) authorization(5) version1(1) }



ToBeSignedCrl, ToBeSignedTlmCtl, ToBeSignedRcaCtl

FROM EtsiTs102941TrustLists

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) trustLists(6) version1(1) }



AuthorizationValidationRequest, AuthorizationValidationResponse

FROM EtsiTs102941TypesAuthorizationValidation

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) authValidation(7) version1(1) }



CaCertificateRequest

FROM EtsiTs102941TypesCaManagement

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) caManagement(8) version1(1) }



;



/************

-- Messages

************/

EnrolmentRequestMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentRequest PRESENT})})} 

EnrolmentResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentResponse PRESENT})})} 

AuthorizationRequestMessage ::= EtsiTs103097Data-Encrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationRequestMessageWithPop ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationResponse PRESENT})})} 

CertificateRevocationListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateRevocationList PRESENT})})}

TlmCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListTlm PRESENT})})}

RcaCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListRca PRESENT})})}

AuthorizationValidationRequestMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationValidationRequest PRESENT})})} 

AuthorizationValidationResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationValidationResponse PRESENT})})} 

CaCertificateRequestMessage ::= EtsiTs103097Data-Signed {EtsiTs102941Data(WITH COMPONENTS{..., content (WITH COMPONENTS{caCertificateRequest PRESENT})})}

CaCertificateRekeyingMessage ::= EtsiTs103097Data-Signed {EtsiTs103097Data-Signed {EtsiTs102941Data(WITH COMPONENTS{..., content (WITH COMPONENTS{caCertificateRequest PRESENT})})}}



/************

-- EtsiTs102941Data

************/



EtsiTs102941Data::= SEQUENCE {

  version Version (v1),

  content EtsiTs102941DataContent

  }



EtsiTs102941DataContent ::= CHOICE {

  enrolmentRequest                        InnerEcRequestSignedForPop,

  enrolmentResponse                       InnerEcResponse,

  authorizationRequest                    InnerAtRequest,

  authorizationResponse                   InnerAtResponse,

  certificateRevocationList               ToBeSignedCrl,

  certificateTrustListTlm                 ToBeSignedTlmCtl,

  certificateTrustListRca                 ToBeSignedRcaCtl,

  authorizationValidationRequest          AuthorizationValidationRequest,

  authorizationValidationResponse         AuthorizationValidationResponse,

  caCertificateRequest                    CaCertificateRequest,

  ...

  }



END

EtsiTs102941MessagesItss-OptionalPrivacy.asn

0 → 100755
+75 −0
Original line number Diff line number Diff line 
/*************************************************************************************

   This file contains the EtsiTs102941MessagesItss-OptionalPrivacy module providing the

   same subset of messages as the EtsiTs102941MessagesItss module.

   It should never be used together with the EtsiTs102941MessagesCA and EtsiTs102941MessagesItss



   This module allows the usage of unencrypted EC signature for AA requests.

**************************************************************************************/

EtsiTs102941MessagesItss-OptionalPrivacy

  { itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) messagesItssOp(2) version1(1)}



DEFINITIONS AUTOMATIC TAGS ::=

BEGIN



IMPORTS



EtsiTs103097Data-Signed

--EtsiTs103097Data-Encrypted,

--EtsiTs103097Data-SignedAndEncrypted

FROM EtsiTs103097Module

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(103097) securedMessageV1(0) }



EtsiTs103097Data-Encrypted-Unicast,

EtsiTs103097Data-SignedAndEncrypted-Unicast,

Version

FROM EtsiTs102941BaseTypes

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) baseTypes(3) version1(1) }



InnerEcRequestSignedForPop, InnerEcResponse

FROM EtsiTs102941TypesEnrolment

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) enrolment(4) version1(1) }



InnerAtRequest, InnerAtResponse

FROM EtsiTs102941TypesAuthorization

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) authorization(5) version1(1) }



ToBeSignedCrl, ToBeSignedTlmCtl, ToBeSignedRcaCtl

FROM EtsiTs102941TrustLists

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) trustLists(6) version1(1) }



;



/************

-- Messages

************/



EnrolmentRequestMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentRequest PRESENT})})} 

EnrolmentResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentResponse PRESENT})})} 

AuthorizationRequestMessage ::= EtsiTs103097Data-Encrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationRequestMessageWithPop ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationResponse PRESENT})})} 

CertificateRevocationListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateRevocationList PRESENT})})}

TlmCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListTlm PRESENT})})}

RcaCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListRca PRESENT})})}



/************

-- EtsiTs102941Data

************/



EtsiTs102941Data::= SEQUENCE {

  version Version (v1),

  content EtsiTs102941DataContent

  }



EtsiTs102941DataContent ::= CHOICE {

  enrolmentRequest                        InnerEcRequestSignedForPop,

  enrolmentResponse                       InnerEcResponse,

  authorizationRequest                    InnerAtRequest,

  authorizationResponse                   InnerAtResponse,

  certificateRevocationList               ToBeSignedCrl,

  certificateTrustListTlm                 ToBeSignedTlmCtl,

  certificateTrustListRca                 ToBeSignedRcaCtl,

  ...

  } 



END

EtsiTs102941MessagesItss.asn

0 → 100755
+82 −0
Original line number Diff line number Diff line 
/*************************************************************************************

   This file contains the EtsiTs102941MessagesItss module providing the ITS-S subset 

   of messages defined in the module EtsiTs102941MessagesCA

   It should never be imported together with the module EtsiTs102941MessagesCA.

   Use the EtsiTs102941MessagesCA if all possible PKI message types are needed.



   This module blocks the usage of unencrypted EC signature for AA requests.

**************************************************************************************/

EtsiTs102941MessagesItss

  { itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) messagesItss(1) version1(1)}



DEFINITIONS AUTOMATIC TAGS ::=

BEGIN



IMPORTS



EtsiTs103097Data-Signed

--EtsiTs103097Data-Encrypted,

--EtsiTs103097Data-SignedAndEncrypted

FROM EtsiTs103097Module

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(103097) securedMessageV1(0) }



EtsiTs103097Data-Encrypted-Unicast,

EtsiTs103097Data-SignedAndEncrypted-Unicast,

Version

FROM EtsiTs102941BaseTypes

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) baseTypes(3) version1(1) }



InnerEcRequestSignedForPop, InnerEcResponse

FROM EtsiTs102941TypesEnrolment

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) enrolment(4) version1(1) }



InnerAtRequest, InnerAtResponse

FROM EtsiTs102941TypesAuthorization

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) authorization(5) version1(1) }



ToBeSignedCrl, ToBeSignedTlmCtl, ToBeSignedRcaCtl

FROM EtsiTs102941TrustLists

{ itu-t(0) identified-organization(4) etsi(0) itsDomain(5) wg5(5) ts(102941) trustLists(6) version1(1) }



;



/************

-- Messages

************/



EnrolmentRequestMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentRequest PRESENT})})} 

EnrolmentResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{enrolmentResponse PRESENT})})} 

AuthorizationRequestMessage ::= EtsiTs103097Data-Encrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationRequestMessageWithPop ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationRequest PRESENT})})} 

AuthorizationResponseMessage ::= EtsiTs103097Data-SignedAndEncrypted-Unicast {EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{authorizationResponse PRESENT})})} 

CertificateRevocationListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateRevocationList PRESENT})})}

TlmCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListTlm PRESENT})})}

RcaCertificateTrustListMessage ::= EtsiTs103097Data-Signed{EtsiTs102941Data (WITH COMPONENTS{..., content (WITH COMPONENTS{certificateTrustListRca PRESENT})})}



/************

-- EtsiTs102941Data

************/



EtsiTs102941Data::= SEQUENCE {

  version Version (v1),

  content EtsiTs102941DataContent

  }



EtsiTs102941DataContent ::= CHOICE {

  enrolmentRequest                        InnerEcRequestSignedForPop,

  enrolmentResponse                       InnerEcResponse,

  authorizationRequest                    InnerAtRequest,

  authorizationResponse                   InnerAtResponse,

  certificateRevocationList               ToBeSignedCrl,

  certificateTrustListTlm                 ToBeSignedTlmCtl,

  certificateTrustListRca                 ToBeSignedRcaCtl,

  ...

  } (WITH COMPONENTS{...,

    authorizationRequest (WITH COMPONENTS{...,

      ecSignature (WITH COMPONENTS{...,

        encryptedEcSignature PRESENT

      })

    })

  })



END