Correction of figure J.4

@startuml

skinparam monochrome true

skinparam defaultFontName Arial

skinparam classFontSize 10

skinparam sequenceBoxBorderColor #black

participant "**SSP Host**\nAccessor Authentication Service Gate (Grantor)" as hosta_as_ctr 

participant "**Other Host**\nAccessor Authentication Application Gate (Accessor)" as hostb_as_ctr 

participant "**SSP Host**\nAccessor Authentication Service Gate" as hosta_fs_ctr 

participant "**SSP Host**\nAdministration Gate" as hosta_adm

participant "**Other Host**\nAdministration Gate" as hostb_adm

participant "**Other Host**\nAccessor Authentication Application Gate" as hostb_fs_ctr 

participant "**SSP Host**\nXXX Service Gate" as hosta_fs_data 

participant "**Other Host**\nXX Application Gate" as hostb_fs_data 

autonumber

...**Notation:**  Gate Identifier : Pipe Session Open on [P<sub>IN</sub>,P<sub>OUT</sub>]...

...

hosta_as_ctr->hostb_as_ctr: AS Session Identifier (**aAS-Challenge**) 

note right

 [SK.AAS.ECDHE,PK.AAS.ECDHE]=ECDHE()

 ATK.AAS.ECDHE=SIGN(SK.AAS.ECDSA)[**aAS-Challenge**, PK.AAS.ECDHE,...]

end note

opt

hostb_fs_ctr->hosta_fs_ctr: AAS-ADMIN-GET-CAPABILITIES-Service-Command on P<sub>10</sub>

activate hosta_fs_ctr

activate hostb_fs_ctr

hosta_fs_ctr-->hostb_fs_ctr: eANY-OK [FS_ID<sub>0001</sub>] on P<sub>20</sub> 

deactivate hostb_fs_ctr

deactivate hosta_fs_ctr

end

...

hostb_as_ctr->hosta_as_ctr: ATK.AAS.ECDHE (AAS-Token) from Authentication Application 

activate hosta_as_ctr

activate hostb_as_ctr

hosta_as_ctr-->hostb_as_ctr: ATK.GTR.ECDHE (AAS-Token) from Authentication Service  

deactivate hostb_as_ctr

deactivate hosta_as_ctr

note right

VERIFY(ATK.AAS.ECDHE)[CERT.GTR.ECDSA]

<b>KS<sup>2</sup></b>=DERIVE(SK.AAS.ECDHE,PK.GTR.ECDHE)

end note

note left

VERIFY(ATK.AAS.ECDHE)[CERT.GTR.ECDSA] 

[SK.GTR.ECDHE,PK.GTR.ECDHE]=ECDHE() 

ATK.GTR.ECDHE=SIGN(SK.GTR.ECDSA)[**aAS-Challenge**, PK.GTR.ECDHE,...] 

<b>KS<sup>2</sup></b>=DERIVE(SK.GTR.ECDHE,PK.AAS.ECDHE) 

end note

opt [requested for Token based authentication]

hostb_fs_ctr->hosta_fs_ctr: AAS-GET-CHALLENGE-Service-Command [Parameters...] on P<sub>10</sub>

activate hosta_fs_ctr

activate hostb_fs_ctr

hosta_fs_ctr-->hostb_fs_ctr: eANY-OK on P<sub>20</sub>, aAS-Challenge 

deactivate hostb_fs_ctr

deactivate hosta_fs_ctr

end

...

hostb_fs_ctr->hosta_fs_ctr: AAS-OP-AUTHENTICATE-ACCESSOR-Service-Command [Parameters...] on P<sub>10</sub>, aAAS-Token

activate hosta_fs_ctr

activate hostb_fs_ctr

hosta_fs_ctr-->hostb_fs_ctr: eANY-OK on P<sub>20</sub>, aAAS-Token 

deactivate hostb_fs_ctr

deactivate hosta_fs_ctr

alt Successful authentication

hosta_adm->hostb_adm:EVT_ADM_BIND [**aGate-Identifier ,P<sub>11</sub>**] 

hostb_adm->hosta_adm:EVT_ADM_BIND [**aGate-Identifier ,P<sub>21</sub>**]

note right of hostb_fs_data : Application<sub>aGate-Identifier</sub> : Pipe Session Open  on [P<sub>21</sub>,P<sub>11</sub>]

note left of hosta_fs_data: Service<sub>aGate-Identifier</sub> : Pipe Session Open on [P<sub>11</sub>,P<sub>21</sub>]

hosta_fs_data<-hostb_fs_data: XXX Operations [Parameters...] on P<sub>11</sub>

activate hosta_fs_data

activate hostb_fs_data

hostb_fs_data<--hosta_fs_data: eANY-OK [Parameters...] on P<sub>21</sub> 

deactivate hostb_fs_data

deactivate hosta_fs_data

...

end

hostb_adm->hosta_adm:EVT_ADM_UNBIND [**P<sub>11</sub>**] 

note right of hostb_fs_data : Service<sub>aGate-Identifier</sub> : Pipe Session closed  on [P<sub>21</sub>,P<sub>11</sub>]

note left of hosta_fs_data: Service<sub>aGate-Identifier</sub> : Pipe Session closed on [P<sub>11</sub>,P<sub>21</sub>]

@enduml