fido-uaf-protocol-v1.0

Posted 2020-08-15 IT小不点

EXAMPLE 1: Policy matching either a FPS-, or Face Recognition-based Authenticator

{
    "accepted":
    [
    [{ "userVerification": 2}],
    [{ "userVerification": 16}]
    ]
}

EXAMPLE 2: Policy matching authenticators implementing FPS and Face Recognition as alternative combination of user verification methods.
{
    "accepted":
    [
    [{ "userVerification": 18}]
    ]
}
EXAMPLE 3: Policy matching authenticators implementing FPS and Face Recognition as mandatory combination of user verification methods.
{
    "accepted": [ [{ "userVerification": 1042}] ]
}
EXAMPLE 4: Policy matching the combination of a FPS based and a Face Recognition based authenticator
{
    "accepted":
    [
    [{ "userVerification": 18}]
    ]
}

EXAMPLE 5: Policy requiring the combination of a bound FPS based and a bound Face Recognition based authenticator
{
    "accepted":
    [
    [
    { "userVerification": 2, "attachmentHint": 1},
    { "userVerification": 16, "attachmentHint": 1}
    ]
    ]
}

EXAMPLE 6: Policy accepting all authenticators from vendor with ID 1234
{
    "accepted":
    [ [{ "vendorID": "1234"}] ]
}



EXAMPLE 7: UAF Registration Request
[{
    "header": {
        "upv": {
            "major": 1,
            "minor": 0
        },
        "op": "Reg",
        "appID": "https://uaf-test-1.noknoktest.com:8443/SampleApp/uaf/facets",
        "serverData": "IjycjPZYiWMaQ1tKLrJROiXQHmYG0tSSYGjP5mgjsDaM17RQgq0
        dl3NNDDTx9d-aSR_6hGgclrU2F2Yj-12S67v5VmQHj4eWVseLulHdpk2v_hHtKSvv_DFqL4n
        2IiUY6XZWVbOnvg"
    },
    "challenge": "H9iW9yA9aAXF_lelQoi_DhUk514Ad8Tqv0zCnCqKDpo",
    "username": "apa",
    "policy": {
        "accepted": [
        [
        {
            "userVerification": 512,
            "keyProtection": 1,
            "tcDisplay": 1,
            "authenticationAlgorithms": [
            1
            ],
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        }
        ],
        [
        {
            "userVerification": 4,
            "keyProtection": 1,
            "tcDisplay": 1,
            "authenticationAlgorithms": [
            1
            ],
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        }
        ],
        [
        {
            "userVerification": 4,
            "keyProtection": 1,
            "tcDisplay": 1,
            "authenticationAlgorithms": [
            2
            ]
        }
        ],
        [
        {
            "userVerification": 2,
            "keyProtection": 4,
            "tcDisplay": 1,
            "authenticationAlgorithms": [
            2
            ]
        }
        ],
        [
        {
            "userVerification": 4,
            "keyProtection": 2,
            "tcDisplay": 1,
            "authenticationAlgorithms": [
            1
            ,
            3
            ]
        }
        ],
        [
        {
            "userVerification": 2,
            "keyProtection": 2,
            "authenticationAlgorithms": [
            2
            ]
        }
        ],
        [
        {
            "userVerification": 32,
            "keyProtection": 2,
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        },
        {
            "userVerification": 2,
            "authenticationAlgorithms": [
            1,
            3
            ],
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        },
        {
            "userVerification": 2,
            "authenticationAlgorithms": [
            1
            ,
            3
            ],
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        },
        {
            "userVerification": 4,
            "keyProtection": 1,
            "authenticationAlgorithms": [
            1
            ,
            3
            ],
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        }
        ]
        ],
        "disallowed": [
        {
            "userVerification": 512,
            "keyProtection": 16,
            "assertionSchemes": [
            "UAFV1TLV"
            ]
        },
        {
            "userVerification": 256,
            "keyProtection": 16
        },
        {
            "aaid": [
            "ABCD#ABCD"
            ],
            "keyIDs": [
            "RfY_RDhsf4z5PCOhnZExMeVloZZmK0hxaSi10tkY_c4"
            ]
        }
        ]
    }
}]