You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: index.html
+17-29Lines changed: 17 additions & 29 deletions
Original file line number
Diff line number
Diff line change
@@ -126,15 +126,15 @@
126
126
<divclass="col-md-9" role="main">
127
127
128
128
<h1id="architecture-of-id-software">ARCHITECTURE OF ID-SOFTWARE</h1>
129
-
<p>Document version: 2.4<br/>
130
-
Software version: 22.01<br/>
131
-
Last updated: 11.11.2021</p>
129
+
<p>Document version: 2.5<br/>
130
+
Software version: 22.05<br/>
131
+
Last updated: 4.5.2022</p>
132
132
<h1id="introduction">Introduction</h1>
133
133
<p>The purpose of this document is to describe the architecture of ID-software.</p>
134
134
<p><strong>ID-software</strong> is a collection of software components offering support for PKI-based functionality, i.e. operations with different cryptographic tokens (e.g. eID cards), handling digitally signed documents, file encryption/decryption and signing and authentication in web environment. The ID-software comprises end-user applications, software libraries, web components, drivers for communicating with the cryptographic tokens and other complementary components.</p>
135
135
<p>Main sources for information about ID-software are <ahref="https://www.id.ee/en/">www.id.ee</a>, <ahref="https://github.com/open-eid">Open-EID GitHub repository</a> and <ahref="https://github.com/web-eid">Web-eID GitHub repository</a>.</p>
136
136
<p>This document covers description of ID-software and its components, their deployment in different environments, provided and required interfaces. The document does not include components that have reached the end of their support nor the components that have not yet been released.</p>
137
-
<p>The document is based on the latest released state of the ID-software components. At the time of writing, the latest released version of ID-software is <strong>version 22.01</strong>. Latest version numbers of the various ID-software components are provided at <ahref="https://www.id.ee/en/article/information-on-the-latest-software-versions/">https://www.id.ee/en/article/information-on-the-latest-software-versions/</a>.</p>
137
+
<p>The document is based on the latest released state of the ID-software components. At the time of writing, the latest released version of ID-software is <strong>version 22.05</strong>. Latest version numbers of the various ID-software components are provided at <ahref="https://www.id.ee/en/article/information-on-the-latest-software-versions/">https://www.id.ee/en/article/information-on-the-latest-software-versions/</a>.</p>
<td>Authentication with ID-card. The operation is generally done via native operating system/browser components. In case of Estonian ID-cards and Firefox browser, a PKCS#11 module loader script is used for setting the proper parameters for authentication in Firefox browser.</td>
367
+
<td>Authentication with ID-card. The operation is generally done via native operating system/browser components. In case of Estonian ID-cards and Firefox browser, a PKCS#11 module loader script is used for setting the proper parameters for authentication in Firefox browser on Linux.</td>
<td>Service that enables to set the properties of e-mail address (@eesti.ee) that is provided for Estonian national ID-card owners by the state. The user must be authenticated with PIN1 code.</td>
430
-
<td>RIA</td>
431
-
</tr>
432
-
<tr>
433
429
<td>Central configuration repository</td>
434
430
<td>Described in chap. <ahref="#_comp_central_conf">Central configuration service</a>.</td>
<td><em>Si</em>gnature <em>Ve</em>rification Service is an online web service for validating digitally signed documents.<br/>SiVa is used by the DigiDoc4 Client (by libdigidocpp base library) to validate documents in formats that are not natively supported; currently the service is used to validate PDF (ETSI PAdES) documents.<br/>See also <ahref="#_SiVa_verification_service">Signature Verification Service interface</a>.</td>
682
+
<td><em>Si</em>gnature <em>Ve</em>rification Service is an online web service for validating digitally signed documents.<br/>SiVa is used by the DigiDoc4 Client and RIA DigiDoc (by libdigidocpp base library) to validate documents in formats that are not natively supported; currently the service is used to validate PDF (ETSI PAdES) documents.<br/>See also <ahref="#_SiVa_verification_service">Signature Verification Service interface</a>.</td>
688
683
<td>RIA</td>
689
684
</tr>
690
685
<tr>
@@ -929,7 +924,7 @@ <h4 id="web-eid-safari-extensions-interfaces">Web-eID Safari extension’s inter
<p>Authentication in web browsers is done with the browsers’ and operating systems’ native components. In case of authenticating in Firefox browser then Firefox-pkcs11-loader JavaScript component is used to load the One-Pin OpenSC PKCS#11 driver by the browser.</p>
927
+
<p>Authentication in web browsers is done with the browsers’ and operating systems’ native components. In case of authenticating in Firefox browser then Firefox-pkcs11-loader JavaScript component is used to load the One-Pin OpenSC PKCS#11 driver by the browser on Linux.</p>
933
928
<p><imgalt="cmp Web components for authentication" src="index_files/web_auth.png" title="cmp Web components for authentication" /></p>
934
929
<p><strong>Figure: Web authentication components</strong></p>
<td>A JavaScript component that is used to load the OpenSC PKCS#11 driver to the Firefox browser’s cryptographic devices list during each initialization of the browser. Needed during authentication process with eID-card in Firefox browser in all supported operating systems. Code repository: <ahref="https://github.com/open-eid/firefox-pkcs11-loader">https://github.com/open-eid/firefox-pkcs11-loader</a>. Wiki: <ahref="https://github.com/open-eid/firefox-pkcs11-loader/wiki">https://github.com/open-eid/firefox-pkcs11-loader/wiki</a>.</td>
941
+
<td>A JavaScript component that is used to load the OpenSC PKCS#11 driver to the Firefox browser’s cryptographic devices list during each initialization of the browser. Needed during authentication process with eID-card in Firefox browser in Linux operating systems. Code repository: <ahref="https://github.com/open-eid/firefox-pkcs11-loader">https://github.com/open-eid/firefox-pkcs11-loader</a>. Wiki: <ahref="https://github.com/open-eid/firefox-pkcs11-loader/wiki">https://github.com/open-eid/firefox-pkcs11-loader/wiki</a>.</td>
<td>A driver for accessing eID-cards. Connects with the card via the operating system’s native PC/SC interface. Used as a default driver for authentication with eID card and signature creation in web browser environment in case of Linux platform. Wiki: <ahref="https://github.com/OpenSC/OpenSC/wiki">https://github.com/OpenSC/OpenSC/wiki</a>.</td>
972
+
<td>A driver for accessing eID-cards. Connects with the card via the operating system’s native PC/SC interface. Used as a default driver for signature creation in web browser environment and DigiDoc4 Client in case of Linux and macOS platform. Wiki: <ahref="https://github.com/OpenSC/OpenSC/wiki">https://github.com/OpenSC/OpenSC/wiki</a>.</td>
978
973
<td>OpenSC</td>
979
974
</tr>
980
975
<tr>
981
976
<td>One-pin OpenSC PKCS#11 driver</td>
982
-
<td>Version of OpenSC PKCS#11 driver that only enables authentication functionality. Used as a default driver for authentication with eID card in browser environment in case of Windows platform. Wiki: <ahref="https://github.com/OpenSC/OpenSC/wiki">https://github.com/OpenSC/OpenSC/wiki</a>.</td>
977
+
<td>Version of OpenSC PKCS#11 driver that only enables authentication functionality. Used as a default driver for authentication with eID card in Firefox browser environment in case of Linux platform. Wiki: <ahref="https://github.com/OpenSC/OpenSC/wiki">https://github.com/OpenSC/OpenSC/wiki</a>.</td>
983
978
<td>OpenSC</td>
984
979
</tr>
985
980
<tr>
986
981
<td>Minidriver</td>
987
-
<td>Used as a default driver for accessing Estonian eID-cards via CNG interface for signature creation in web browser environment in case of Windows platform. Used as a default driver for authentication with eID card in Chrome and Edge browsers in case of Windows platform. Code repository: <ahref="https://github.com/open-eid/minidriver">https://github.com/open-eid/minidriver</a>. Wiki: <ahref="https://github.com/open-eid/minidriver/wiki">https://github.com/open-eid/minidriver/wiki</a>.</td>
982
+
<td>Used as a default driver for accessing Estonian eID-cards via CNG interface for signature creation in web browser environment in case of Windows platform. Used as a default driver for authentication with eID card in browser environment in case of Windows platform. Code repository: <ahref="https://github.com/open-eid/minidriver">https://github.com/open-eid/minidriver</a>. Wiki: <ahref="https://github.com/open-eid/minidriver/wiki">https://github.com/open-eid/minidriver/wiki</a>.</td>
<p>The following subchapters describe physical deployment of ID-software components in collaboration with external components that were depicted in chap. <ahref="#component-model">Component model</a> in case of the most common use cases.</p>
1439
1427
<h2id="signing-in-web-browser">Signing in web browser</h2>
0 commit comments