Skip to content

Commit ed158cb

Browse files
aorzelskiGHBirgitBosssebbader-sap
authored
Add signing of Identifiables (#523)
* Create signatures.adoc * Update signatures.adoc * Update signatures.adoc * Signature description * Add JWS * Add operations for JWS signatures * Add JWS signature profiles * Add mapping of JWS signature * Add signature profiles * Apply suggestion from @BirgitBoss * Apply suggestion from @BirgitBoss * Apply suggestion from @BirgitBoss * Apply suggestion from @BirgitBoss --------- Co-authored-by: Birgit Boss <59824205+BirgitBoss@users.noreply.github.com> Co-authored-by: sebbader-sap <107036549+sebbader-sap@users.noreply.github.com>
1 parent a6963b4 commit ed158cb

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

documentation/IDTA-01002-3/modules/ROOT/pages/http-rest-api/service-specifications-and-profiles.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -888,7 +888,7 @@ h|Service Specification / Profiles h|Description
888888
|<<submodel-repository-service-specification-ssp-003,SubmodelRepositoryServiceSpecification/SSP-003>> |Profile for a Submodel Repository which only contains Submodels with kind=Template; is _not_ included in the profile SubmodelRepositoryServiceSpecification/SSP-001 or the profile SubmodelRepositoryServiceSpecification/SSP-002
889889
|<<submodel-repository-service-specification-ssp-004,SubmodelRepositoryServiceSpecification/SSP-004>> |Only read operations for a Submodel Repository which only contains Submodels with kind=Template; is included in the profile SubmodelRepositoryServiceSpecification/SSP-003 but _not_ in the profile SubmodelRepositoryServiceSpecification/SSP-001 or the profile SubmodelRepositoryService Specification/SSP-002
890890
|<<submodel-repository-service-specification-ssp-005,SubmodelRepositoryServiceSpecification/SSP-005>>|Query operations
891-
|<<submodel-repository-service-specification-ssp-005,SubmodelRepositoryServiceSpecification/SSP-006>>|Signature operations
891+
|<<submodel-repository-service-specification-ssp-006,SubmodelRepositoryServiceSpecification/SSP-006>>|Signature operations
892892
|===
893893

894894
[[submodel-repository-service-specification-ssp-001]]
@@ -1152,7 +1152,7 @@ See: https://app.swaggerhub.com/apis/Plattform_i40/SubmodelRepositoryServiceSpec
11521152
h|Service Specification / Profiles h|Description
11531153
|<<concept-description-repository-service-specification-ssp-001,ConceptDescriptionRepositoryServiceSpecification/SSP-001>> |Full feature set
11541154
|<<concept-description-repository-service-specification-ssp-002,ConceptDescriptionRepositoryServiceSpecification/SSP-002>> |Query operations
1155-
|<<concept-description-repository-service-specification-ssp-002,ConceptDescriptionRepositoryServiceSpecification/SSP-003>> |Signature operations
1155+
|<<concept-description-repository-service-specification-ssp-003,ConceptDescriptionRepositoryServiceSpecification/SSP-003>> |Signature operations
11561156
|===
11571157

11581158
[#concept-description-repository-service-specification-ssp-001]

documentation/IDTA-01002-3/modules/ROOT/pages/signatures.adoc

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,10 @@ SPDX-License-Identifier: CC-BY-4.0
1414
Some use cases of the Asset Administration Shell require the proof that data has not been changed and that it is still the original data of the AAS originator.
1515
An example is a device manufacturer supplying to an integrator supplying to a plant operator. The plant operator wants to check the remained integrity of the device manufacturer's AAS.
1616

17-
The AASX package format includes the possibility of signing an AASX package, but this is rarely used. AASX packages can also not be protected by AAS security and access rules. This is why signatures are needed as part of the API.
17+
The AASX package format includes the possibility of signing an AASX package, but this feature is not used very often. AASX packages can also not be protected by AAS security and access rules. This is why signatures are needed as part of the API.
1818

19-
Different levels of API signatures have been investigated by the IDTA TF Security, including JWS (JSON Web Signature) or JAdES (JSON advanced digital signature). This version explains and defines new endpoints /$signed for AAS, Submodel and ConceptDescription, which provide a plain text JWS.
19+
Different levels of API signatures have been investigated by the IDTA TF Security, including JWS (JSON Web Signature) or JAdES (JSON advanced digital signature).
20+
This version explains and defines new endpoints /$signed for AAS, Submodel and ConceptDescription, which provide a plain text JWS.
2021

2122
JWS ist defined in RFC 7515 (https://datatracker.ietf.org/doc/html/rfc7515).
2223

0 commit comments

Comments
 (0)