Commit 4edf9acd authored by Michele Berionne's avatar Michele Berionne
Browse files

Update ASN.1 file after SCP #89

parent b1db8d9a
Loading
Loading
Loading
Loading
+93 −38
Original line number Diff line number Diff line
@@ -4,9 +4,24 @@ AUTOMATIC TAGS
EXTENSIBILITY IMPLIED ::=
BEGIN

EXPORTS ALL;

/* Imports */
IMPORTS
	Certificate  -- RFC5280 Certificate X.509v3
	Certificate,  -- RFC5280 Certificate X.509v3
	id-pkix,
	Extensions,  -- RFC5280 X.509v3 extension
	Extension,
	ECDSA-Sig-Value,
	AlgorithmIdentifier,
	Attribute,
	AttributeType,
	AttributeValue,
	AttributeTypeAndValue,
	SubjectPublicKeyInfo,
	UniqueIdentifier,
	Validity,
	Version
		FROM PKIX1Explicit88;

/* Basic types */
@@ -310,6 +325,21 @@ FS-OP-FILE-GET-POSITION-Service-Response ::= [PRIVATE 25] SEQUENCE
}


FS-Service-Response ::= ENUMERATED
{
	eFS-OK (0),  -- no error
	eFS-E-CMD-PAR-UNKNOWN (2),  -- unknown or illegal command parameter
	eFS-E-NOK (3),  -- the command has failed
	eFS-NODE-BUSY (9),  -- The file system is already processing an operation on the node
	eFS-NODE-NOT-FOUND (10),  -- Node not found
	eFS-OPERATION-ILLEGAL (11),  -- Illegal operation (eg. opening a file with a directory identity instead a file identity)
	eFS-NOT-ENOUGH-SPACE (12),  -- The operation exceeds the size limit of a file
	eFS-BAD-SESSSION-ID (13),  -- the session identifier related to a file does not exist
	eFS-ACL-RULES-VIOLATIONS (14), -- the operation of the administration violates the ACL rules associated to a node
	eFS-MAX-FILE-SESSION-REACHED (15)  -- the maximum number of file sessions has been reached
}


AccessControl ::= SEQUENCE
{
	aAccessorIdentity AccessorIdentity,  -- Identity of the accessor accessing the resource
@@ -662,6 +692,17 @@ AAS-OP-GET-CHALLENGE-Service-Response ::= [PRIVATE 21] SEQUENCE
	aParameter AAS-OP-GET-CHALLENGE-Service-Response-Parameter OPTIONAL
}

AAS-Service-Response ::= ENUMERATED
{
	eAAS-OK (0),  -- Operation successful
	eAAS-E-CMD-PAR-UNKNOWN (2),  -- Unknown parameters used for an operation
	eAAS-E-NOK (3),  -- Operation failed
	eAAS-ACL-RULES-VIOLATIONS (14),  -- The operation violates the ACL conditions
	eAAS-NOT-AUTHENTICATED (15),  -- The accessor is not authenticated
	eAAS-POLICY-RULES-VIOLATIONS (16)  -- The operation violates the credentials policy
}


/* Identity Gate */
URN-Description ::= SEQUENCE
{
@@ -701,20 +742,6 @@ FS-CONTROL-SERVICE-GATE-Responses ::= [APPLICATION 1] CHOICE
}


FS-Service-Response ::= ENUMERATED
{
	eFS-OK (0),  --no error
	eFS-E-CMD-PAR-UNKNOWN (2),  -- unknown or illegal command parameter
	eFS-E-NOK (3),  -- the command has failed
	eFS-FILE-BUSY (9),  --The file system is already processing an operation on the file
	eFS-FILE-NOT-FOUND (10),  -- Node not found
	eFS-OPERATION-ILLEGAL (11),  --Illegal operation (eg. opening a file with a directory identity instead a file identity)
	eFS-NOT-ENOUGH-SPACE (12),  --The operation exceeds the size limit of a file
	eFS-BAD-SESSSION-ID (13),  -- the session identifier related to a file does not exist
	eFS-ACL-RULES-VIOLATIONS (14) -- the operation of the administration violates the ACL rules associated to a node
}


/* TCP Service: definitions */
IPV6Addr ::= OCTET STRING (SIZE(16))
IPV4Addr ::= OCTET STRING (SIZE(4))
@@ -735,7 +762,7 @@ NetworkParameters ::= SEQUENCE
{
	aBearerType INTEGER  -- Bearer type
	{
		eDefaultBearer (0),  -- Default Bearer, as defined in TS 102 223 [6] clause 8.52
		eDefaultBearer (0),  -- Default Bearer, as defined in ETSIÿTS 102 223 [6], clause 8.52
		eWWAN (1),  -- WWAN Bearer
		eWLAN (2)  -- WLAN local breakout
	} OPTIONAL,
@@ -1147,16 +1174,44 @@ AAS-CONTROL-SERVICE-GATE-Responses ::= [APPLICATION 1]CHOICE
}


AAS-Service-Response ::= ENUMERATED
AuthenticationToken ::= SEQUENCE
{
	eAAS-OK (0),  -- Operation successful
	eAAS-E-CMD-PAR-UNKNOWN (2),  -- Unknown parameters used for an operation
	eAAS-E-NOK (3),  -- Operation failed
	eAAS-ACL-RULES-VIOLATIONS (14),  -- The operation of the administration violates the ACL conditions
	eAAS-NOT-AUTHENTICATED (15),  -- The accessor is not authenticated
	eAAS-POLICY-RULES-VIOLATIONS (16)  -- The operation violates the credentials policy
	tbsToken TBSToken,
	signatureAlgorithm AlgorithmIdentifier,
	signature ECDSA-Sig-Value 
}

TBSToken ::= SEQUENCE
{
	version [0] Version DEFAULT v1,
	subjectPublicKeyInfo SubjectPublicKeyInfo,
	aATK-Content ATK-Content,
	extensions [8] Extensions OPTIONAL
}

END
Key-Size ::= INTEGER
{
	e128 (0),  -- 128 Bit Key size
	e256 (1)  -- 256 Bit Key size
}

StreamCipherIdentifier ::= INTEGER
{
	aAES-CGM-StreamCipherIdentifier (0)  -- AES GCM algorithm
}
 
ATK-Content ::= SEQUENCE 
{
	aChallenge OCTET STRING (SIZE (16)),  -- Challenge	
	aKey-Size Key-Size,
	aStreamCipherIdentifier StreamCipherIdentifier
}


id-ssp OBJECT IDENTIFIER ::= { itu-t (0) identified-organization (4) etsi (0) smart-secure-platform (3666) part1 (1) }
id-role OBJECT IDENTIFIER ::= { id-ssp role (1) }
id-role-aaa OBJECT IDENTIFIER ::= { id-role aaa (1) }
id-role-aas OBJECT IDENTIFIER ::= { id-role aas (2) }


END