Update figure_9.3.plantuml

participant "**Accessor Authentication Application**" as aaa

autonumber

...

aas->aaa: aChallenge 

aas->aaa: aChallenge, Certification_Path<sub>AAS</sub>

note right

[eSK.AAA.ECKA,ePK.AAA.ECKA]=ECDHE()

Certification_Path<sub>ATK_AAA</sub>=

   GENTOKEN(Certification_Path<sub>AAA</sub>,eSK.AAA.ECKA,ePK.AAA.ECKA)

Generate AccessorTokenCredential<sub>AAA</sub>=

   Certification_Path<sub>AAA</sub>,

   ATK.AAA.ECKA(ePK.AAA.ECKA)

end note

...

aaa->aas: Certification_Path<sub>ATK_AAA</sub> 

aaa->aas: AccessorTokenCredential<sub>AAA</sub>

activate aas

note left of aas

VERIFY_PATH(PK.CI<sub>AAA</sub>.ECDSA)[Certification_Path<sub>AAA</sub>]

VERIFY_PATH(PK.CI<sub>AAA</sub>.ECDSA)[Certification_Path<sub>AAS</sub>]

VERIFY(PK.AAA_EE.ECDSA)[ATK.AAA.ECKA]

[eSK.AAS.ECKA,ePK.AAS.ECKA]=ECDHE()

Certification_Path<sub>ATK_AAS</sub>=

   GENTOKEN(Certification_Path<sub>AAS</sub>,eSK.AAS.ECKA,ePK.AAS.ECKA)

Generate ATK.AAS.ECKA(ePK.AAS.ECKA)

<b>ShS</b>=ECKA-DH(eSK.AAS.ECKA,ePK.AAA.ECKA)

end note

activate aaa

aas-->aaa: Certification_Path<sub>ATK_AAS</sub>  

aas-->aaa: ATK.AAS.ECKA(ePK.AAS.ECKA)

deactivate aaa

deactivate aas

aaa->aaa

activate aaa

note right of aaa

VERIFY_PATH(PK.CI<sub>AAS</sub>.ECDSA)[Certification_Path<sub>ATK_AAS</sub>]

VERIFY(PK.AAS_EE.ECDSA)[ATK.AAS.ECKA]

<b>ShS</b>=ECKA-DH(eSK.AAA.ECKA,ePK.AAS.ECKA) 

end note

deactivate aaa